The BullGuard products and services are part of NortonLifeLock Inc., a global leader in consumer Cyber Safety with a portofolio of brands including Norton, Avira and more. Learn more at NortonLifeLock.com

Win32/nsanti

Posted 6/12/2009 11:37 AM
#74293
User avatar

piplup Member

Date Joined Nov 2016
Total Posts: 5
Found this foum with the same person problem, yestarday i got this virus thing called win32/nsanti :( what do i need to remove this? avg scanned this as threat
Posted 6/12/2009 12:05 PM
#74295
User avatar

Touch Advanced member

Date Joined Nov 2016
Total Posts: 12974
Posted 6/12/2009 1:23 PM
#74296
User avatar

piplup Member

Date Joined Nov 2016
Total Posts: 5
DDS (Ver_09-05-14.01) - NTFSx86
Run by Aegis at 14:22:01.95 on Fri 06/12/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3326.2067 [GMT 1:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
D:\Program Files\Razer\Tarantula\razerhid.exe
D:\Program Files\Razer\DeathAdder\razerhid.exe
D:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
D:\program files\steam\steam.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
D:\Program Files\DAEMON Tools Lite\daemon.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Java\jre6\bin\jqs.exe
D:\Program Files\Nero 8\Nero BackItUp\NBService.exe
D:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Planex\Common\RalinkRegistryWriter.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
D:\Program Files\Razer\DeathAdder\razertra.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
D:\Program Files\Razer\DeathAdder\razerofa.exe
D:\Program Files\Razer\Tarantula\razertra.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\iPod\bin\iPodService.exe
D:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
D:\PROGRA~1\AVG\AVG8\avgrsx.exe
D:\PROGRA~1\AVG\AVG8\avgnsx.exe
D:\PROGRA~1\AVG\AVG8\avgemc.exe
D:\Program Files\AVG\AVG8\avgcsrvx.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
D:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre6\bin\java.exe
C:\Documents and Settings\Aegis\Desktop\dds.scr

============== Pseudo HJT Report ===============

uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - d:\program files\avg\avg8\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - d:\program files\spybot - search & destroy\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: IeMonitorBho Class: {bf00e119-21a3-4fd1-b178-3b8537e75c92} - d:\program files\megaupload\mega manager\MegaIEMn.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [SpybotSD TeaTimer] d:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\nero\lib\NMBgMonitor.exe"
uRun: [Steam] "d:\program files\steam\steam.exe" -silent
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [DAEMON Tools Lite] "d:\program files\daemon tools lite\daemon.exe" -autorun
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [AVG8_TRAY] d:\progra~1\avg\avg8\avgtray.exe
mRun: [Tarantula] d:\program files\razer\tarantula\razerhid.exe
mRun: [DeathAdder] d:\program files\razer\deathadder\razerhid.exe
mRun: [NeroFilterCheck] c:\program files\common files\nero\lib\NeroCheck.exe
mRun: [NBKeyScan] "d:\program files\nero 8\nero backitup\NBKeyScan.exe"
mRun: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] d:\program files\google\gmail notifier\gnotify.exe
mRun: [CTxfiHlp] CTXFIHLP.EXE
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\planex~1.lnk - c:\program files\planex\common\RaUI.exe
IE: Download Link Using Mega Manager... - d:\program files\megaupload\mega manager\mm_file.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - d:\program files\spybot - search & destroy\SDHelper.dll
DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} - hxxp://support.asus.com/common/asusTek_sys_ctrl.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1236810273796
DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} - hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15101/CTSUEng.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1236812991828
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {E56347B0-6C2B-4C2E-939F-EE513EAC80BC} - hxxps://register.creative.com/register/OCXs/CtORWebClientNoMFC.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15106/CTPID.cab
TCP: {A9D5ECE8-7B9C-47DD-A828-75C7DD05214F} = 192.168.2.1
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - d:\program files\avg\avg8\avgpp.dll
Notify: avgrsstarter - avgrsstx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\aegis\applic~1\mozilla\firefox\profiles\yx4zyitw.default\
FF - component: d:\program files\avg\avg8\firefox\components\avgssff.dll
FF - plugin: d:\program files\divx\divx web player\npdivx32.dll
FF - plugin: d:\program files\real alternative\browser\plugins\nppl3260.dll
FF - plugin: d:\program files\real alternative\browser\plugins\nprpjplug.dll

============= SERVICES / DRIVERS ===============

R0 hotcore3;hotcore3;c:\windows\system32\drivers\hotcore3.sys [2009-3-11 39472]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-3-16 327688]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-3-16 27784]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-3-16 108552]
R2 avg8emc;AVG Free8 E-mail Scanner;d:\progra~1\avg\avg8\avgemc.exe [2009-3-16 908568]
R2 avg8wd;AVG Free8 WatchDog;d:\progra~1\avg\avg8\avgwdsvc.exe [2009-3-16 298776]
R2 RalinkRegistryWriter;Ralink Registry Writer;c:\program files\planex\common\RalinkRegistryWriter.exe [2009-3-13 69632]
R3 DAdderFltr;DeathAdder Mouse;c:\windows\system32\drivers\dadder.sys [2009-4-1 22784]
R3 TarFltr;Razer Tarantula USB Keyboard;c:\windows\system32\drivers\UsbFltr.sys [2009-4-3 45440]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\common files\creative labs shared\service\CTAELicensing.exe [2009-4-27 79360]
S3 CrystalSysInfo;CrystalSysInfo;d:\program files\mediacoder\SysInfo.sys [2007-9-25 15152]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\system32\drivers\CT20XUT.sys [2009-4-24 171032]
S3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.sys [2009-4-24 171032]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\system32\drivers\CTEXFIFX.sys [2009-4-24 1324056]
S3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.sys [2009-4-24 1324056]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\system32\drivers\CTHWIUT.sys [2009-4-24 72728]
S3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.sys [2009-4-24 72728]
S3 CyUsb;Cypress Generic USB Driver;c:\windows\system32\drivers\CYUSB.sys [2009-4-1 31104]
S3 dump_wmimmc;dump_wmimmc;\??\d:\program files\aion\óàºãö®ëþ\bin32\gameguard\dump_wmimmc.sys --> d:\program files\aion\óàºãö®ëþ\bin32\gameguard\dump_wmimmc.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 PS3 Media Server;PS3 Media Server;d:\program files\ps3 media server\win32\service\wrapper.exe [2008-8-17 217088]
S3 PsSdk41;PsSdk41;c:\windows\system32\drivers\pssdk41.sys [2009-3-12 36928]
S3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [2009-3-13 583680]

=============== Created Last 30 ================

2009-06-12 12:49 102,664 a------- c:\windows\system32\drivers\tmcomm.sys
2009-06-12 12:49 --d----- c:\documents and settings\aegis\.housecall6.6
2009-06-12 12:27 a-dshr-- C:\cmdcons
2009-06-12 12:21 161,792 a------- c:\windows\SWREG.exe
2009-06-12 12:21 155,136 a------- c:\windows\PEV.exe
2009-06-12 12:21 98,816 a------- c:\windows\sed.exe
2009-06-12 12:21 --ds---- C:\ComboFix
2009-06-11 22:05 --d----- c:\windows\system32\wbem\Repository
2009-06-11 21:59 --d----- c:\docume~1\aegis\applic~1\Kingsoft
2009-06-11 18:30 --d----- c:\docume~1\alluse~1\applic~1\Kingsoft
2009-06-10 20:00 --d----- C:\Root
2009-06-10 19:53 --dsh--- c:\windows\ftpcache
2009-06-07 09:24 --d----- c:\program files\iPod
2009-06-07 09:24 --d----- c:\program files\iTunes
2009-05-29 03:45 2,722,845 a------- c:\windows\system32\GameMon.des
2009-05-29 03:40 4,682 a------- c:\windows\system32\npptNT2.sys
2009-05-29 03:40 5,174 a------- c:\windows\system32\nppt9x.vxd
2009-05-29 03:39 --d----- c:\program files\common files\INCA Shared
2009-05-26 17:18 90,112 a------- c:\windows\system32\QuickTimeVR.qtx
2009-05-26 17:18 57,344 a------- c:\windows\system32\QuickTime.qts
2009-05-20 21:31 1,200 a------- C:\drmHeader.bin
2009-05-20 11:19 --d----- c:\program files\Microsoft Games for Windows - LIVE
2009-05-20 10:17 81,768 a------- c:\windows\system32\xinput1_3.dll
2009-05-20 10:17 1,123,696 a------- c:\windows\system32\D3DCompiler_33.dll
2009-05-20 10:17 443,752 a------- c:\windows\system32\d3dx10_33.dll
2009-05-20 10:17 3,495,784 a------- c:\windows\system32\d3dx9_33.dll
2009-05-20 10:17 --d----- c:\windows\system32\xlive
2009-05-20 10:08 --d----- c:\program files\DAEMON Tools Toolbar
2009-05-18 06:24 --d----- c:\docume~1\aegis\applic~1\HandBrake

==================== Find3M ====================

2009-06-11 22:09 327,688 a------- c:\windows\system32\drivers\avgldx86.sys
2009-05-29 13:36 2,060,288 a------- c:\windows\system32\usbaaplrc.dll
2009-05-29 13:36 39,424 a------- c:\windows\system32\drivers\usbaapl.sys
2009-05-21 11:33 410,984 a------- c:\windows\system32\deploytk.dll
2009-05-11 21:50 721,904 a------- c:\windows\system32\drivers\sptd.sys
2009-05-08 09:02 11,952 a------- c:\windows\system32\avgrsstx.dll
2009-05-08 09:02 108,552 a------- c:\windows\system32\drivers\avgtdix.sys
2009-05-07 16:32 345,600 a------- c:\windows\system32\localspl.dll
2009-04-29 05:56 827,392 a------- c:\windows\system32\wininet.dll
2009-04-29 05:55 78,336 -------- c:\windows\system32\ieencode.dll
2009-04-27 10:51 444,952 a------- c:\windows\system32\wrap_oal.dll
2009-04-27 10:51 109,080 a------- c:\windows\system32\OpenAL32.dll
2009-04-22 00:20 14,311,680 a------- c:\windows\system32\xlive.dll
2009-04-22 00:20 13,642,496 a------- c:\windows\system32\xlivefnt.dll
2009-04-17 13:26 1,847,168 a------- c:\windows\system32\win32k.sys
2009-04-15 15:51 585,216 a------- c:\windows\system32\rpcrt4.dll
2009-04-03 12:39 70,936 a------- c:\windows\system32\PhysXLoader.dll
2009-03-29 17:37 3,550 a------- c:\windows\unins000.dat
2009-03-29 17:37 704,793 a------- c:\windows\unins000.exe
2009-03-12 00:55 115,712 a------- c:\program files\Microsoft Windows Onecare Live

============= FINISH: 14:22:22.54 ===============



UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-05-14.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 3/11/2009 9:50:45 PM
System Uptime: 6/12/2009 3:08:03 AM (11 hours ago)

Motherboard: ASUSTeK Computer INC. | | P5N32-E SLI PLUS
Processor: Intel(R) Core(TM)2 Quad CPU @ 2.40GHz | Socket 775 | 2400/266mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 300 GiB total, 226.556 GiB free.
D: is FIXED (NTFS) - 275 GiB total, 162.331 GiB free.
E: is FIXED (NTFS) - 200 GiB total, 54.691 GiB free.
F: is FIXED (NTFS) - 157 GiB total, 107.111 GiB free.
G: is FIXED (NTFS) - 166 GiB total, 153.748 GiB free.
H: is FIXED (NTFS) - 300 GiB total, 63.488 GiB free.
J: is CDROM ()
K: is CDROM (CDFS)
L: is CDROM ()
T: is FIXED (FAT32) - 931 GiB total, 101.856 GiB free.

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP39: 3/15/2009 5:43:11 AM - System Checkpoint
RP40: 3/15/2009 2:18:36 PM - SPTD setup V1.56
RP41: 3/16/2009 1:35:31 AM - Installed AVG Free 8.5
RP42: 3/17/2009 10:24:25 AM - Avg8 Update
RP43: 3/18/2009 10:38:32 AM - System Checkpoint
RP44: 3/19/2009 3:20:49 AM - Installed Java(TM) 6 Update 12
RP45: 3/19/2009 4:03:47 PM - Installed XPS Viewer
RP46: 3/21/2009 2:29:06 AM - System Checkpoint
RP47: 3/22/2009 5:23:15 AM - System Checkpoint
RP48: 3/23/2009 5:59:32 AM - System Checkpoint
RP49: 3/24/2009 6:30:43 AM - System Checkpoint
RP50: 3/25/2009 8:19:50 AM - System Checkpoint
RP51: 3/26/2009 8:20:33 AM - System Checkpoint
RP52: 3/26/2009 7:48:04 PM - Removed BattleForge™
RP53: 3/27/2009 1:38:54 PM - Avg8 Update
RP54: 3/28/2009 1:52:05 PM - System Checkpoint
RP55: 3/29/2009 7:28:46 AM - Installed Mega Manager
RP56: 3/30/2009 8:47:19 AM - Avg8 Update
RP57: 3/30/2009 8:47:46 AM - Avg8 Update
RP58: 4/1/2009 8:24:06 AM - Installed Razer DeathAdder(TM) Mouse
RP59: 4/1/2009 8:26:07 AM - Removed Razer DeathAdder(TM) Mouse
RP60: 4/1/2009 8:56:15 AM - Unsigned driver install
RP61: 4/2/2009 2:24:23 PM - System Checkpoint
RP62: 4/3/2009 4:19:37 AM - Installed Razer Tarantula
RP63: 4/3/2009 4:23:56 AM - Installed Razer DeathAdder(TM) Mouse
RP64: 4/4/2009 5:01:50 AM - System Checkpoint
RP65: 4/5/2009 5:17:54 AM - System Checkpoint
RP66: 4/6/2009 9:22:19 AM - Installed Java(TM) 6 Update 13
RP67: 4/6/2009 8:01:59 PM - Software Distribution Service 3.0
RP68: 4/7/2009 2:17:39 AM - Software Distribution Service 3.0
RP69: 4/7/2009 7:36:50 AM - Installed DirectX
RP71: 4/8/2009 3:00:13 AM - Software Distribution Service 3.0
RP72: 4/9/2009 4:34:43 AM - System Checkpoint
RP73: 4/9/2009 1:22:43 PM - Removed Steam
RP74: 4/9/2009 1:25:38 PM - Installed Steam
RP75: 4/9/2009 3:54:26 PM - Installed BattleForge™
RP76: 4/10/2009 5:51:26 PM - System Checkpoint
RP77: 4/13/2009 11:51:03 AM - Avg8 Update
RP78: 4/15/2009 1:18:34 AM - System Checkpoint
RP79: 4/17/2009 3:00:14 AM - Software Distribution Service 3.0
RP80: 4/18/2009 1:47:41 AM - Avg8 Update
RP81: 4/18/2009 4:24:21 AM - Installed SmartFTP Client
RP82: 4/19/2009 6:46:47 AM - System Checkpoint
RP83: 4/20/2009 8:00:03 AM - System Checkpoint
RP84: 4/21/2009 11:20:27 AM - System Checkpoint
RP85: 4/22/2009 11:21:04 AM - System Checkpoint
RP86: 4/23/2009 10:55:56 PM - Removed Creative Audio Control Panel
RP87: 4/23/2009 10:57:43 PM - Removed Console Launcher
RP88: 4/24/2009 12:29:49 AM - Installed Console Launcher
RP89: 4/24/2009 12:31:22 AM - Installed WaveStudio 7
RP90: 4/24/2009 12:32:42 AM - Installed Creative Volume Panel
RP91: 4/24/2009 12:33:44 AM - Installed Console Launcher
RP92: 4/24/2009 12:35:46 AM - Installed Creative MediaSource 5
RP93: 4/24/2009 12:37:21 AM - Installed SoundFont Bank Manager
RP94: 4/24/2009 1:40:12 AM - Removed WaveStudio 7
RP95: 4/24/2009 1:41:48 AM - Removed Creative MediaSource 5
RP96: 4/24/2009 1:42:42 AM - Removed Console Launcher
RP97: 4/24/2009 2:04:28 AM - Removed SoundFont Bank Manager
RP98: 4/24/2009 2:04:42 AM - Removed Creative Volume Panel
RP99: 4/24/2009 2:05:50 AM - Installed Creative Audio Control Panel
RP100: 4/24/2009 3:02:18 AM - Installed Creative Audio Control Panel
RP101: 4/24/2009 3:43:47 AM - Installed Console Launcher
RP102: 4/25/2009 3:04:04 PM - System Checkpoint
RP103: 4/26/2009 10:40:13 AM - Removed Creative Audio Control Panel
RP104: 4/26/2009 10:41:19 AM - Removed Console Launcher
RP105: 4/27/2009 10:44:30 AM - Installed Creative Audio Control Panel
RP106: 4/27/2009 10:50:36 AM - Installed Creative Audio Control Panel
RP107: 4/28/2009 2:41:43 PM - System Checkpoint
RP108: 4/30/2009 12:12:29 AM - System Checkpoint
RP109: 4/30/2009 3:00:13 AM - Software Distribution Service 3.0
RP110: 5/1/2009 11:03:56 AM - System Checkpoint
RP111: 5/3/2009 11:12:02 AM - System Checkpoint
RP112: 5/4/2009 11:48:18 AM - System Checkpoint
RP113: 5/4/2009 8:32:48 PM - Installed SoundMAX
RP114: 5/4/2009 8:32:58 PM - Installed SoundMAX
RP115: 5/5/2009 1:45:17 PM - Installed NVIDIA PhysX
RP116: 5/7/2009 9:20:38 AM - System Checkpoint
RP117: 5/8/2009 9:02:13 AM - Avg8 Update
RP118: 5/8/2009 9:03:07 AM - Avg8 Update
RP119: 5/11/2009 9:50:55 PM - SPTD setup V1.58
RP120: 5/12/2009 4:43:57 PM - Installed Adobe Reader 9.1.
RP121: 5/13/2009 3:00:13 AM - Software Distribution Service 3.0
RP122: 5/15/2009 2:27:04 PM - System Checkpoint
RP123: 5/16/2009 2:44:29 PM - System Checkpoint
RP124: 5/17/2009 10:13:06 AM - Avg8 Update
RP125: 5/18/2009 9:18:29 PM - System Checkpoint
RP126: 5/19/2009 12:37:27 AM - Avg8 Update
RP127: 5/19/2009 12:37:57 AM - Avg8 Update
RP128: 5/20/2009 1:27:30 AM - System Checkpoint
RP129: 5/20/2009 10:17:54 AM - Installed DirectX
RP130: 5/20/2009 10:18:22 AM - Installed DirectX
RP131: 5/20/2009 10:18:44 AM - Installed Fallout 3
RP132: 5/20/2009 11:19:06 AM - Installed DirectX
RP133: 5/21/2009 3:00:18 AM - Software Distribution Service 3.0
RP134: 5/22/2009 5:00:46 AM - System Checkpoint
RP136: 5/24/2009 6:07:43 PM - System Checkpoint
RP137: 5/26/2009 6:00:22 PM - System Checkpoint
RP138: 5/27/2009 3:22:00 PM - Removed XPS Viewer
RP139: 5/28/2009 5:47:03 PM - System Checkpoint
RP140: 5/30/2009 1:27:38 PM - System Checkpoint
RP141: 5/31/2009 1:29:08 PM - System Checkpoint
RP142: 6/1/2009 1:29:38 PM - System Checkpoint
RP143: 6/2/2009 1:30:13 PM - System Checkpoint
RP144: 6/3/2009 9:04:33 PM - System Checkpoint
RP145: 6/5/2009 8:20:21 AM - System Checkpoint
RP146: 6/6/2009 8:48:27 AM - System Checkpoint
RP147: 6/7/2009 10:08:39 PM - System Checkpoint
RP148: 6/9/2009 12:06:36 AM - System Checkpoint
RP149: 6/9/2009 11:10:00 PM - Installed Java(TM) 6 Update 14
RP150: 6/10/2009 7:57:09 PM - Installed Prototype(TM)
RP151: 6/11/2009 10:04:08 PM - Restore Operation
RP152: 6/11/2009 10:09:30 PM - Avg8 Update
RP153: 6/11/2009 10:10:12 PM - Avg8 Update
RP154: 6/12/2009 3:00:14 AM - Software Distribution Service 3.0

==== Installed Programs ======================

ÓÀºãÖ®Ëþ
AAC Decoder
AC3Filter (remove only)
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.1
Apple Mobile Device Support
Apple Software Update
Audiosurf
AutoUpdate
AVG 8.5
AviSynth 2.5
BattleForge™
Bonjour
Champions Online
Choice Guard
Combined Community Codec Pack 2008-09-21 16:18
Counter-Strike
Counter-Strike: Source
Creative Audio Control Panel
Critical Update for Windows Media Player 11 (KB959772)
DAEMON Tools Toolbar
dBpoweramp [Calculate Audio CRC] Codec
dBpoweramp [Multi Encoder] Codec
dBpoweramp [ReplayGain] Codec
dBpoweramp AAC Encoder
dBpoweramp Dalet Codec
dBpoweramp DSP Effects
dBpoweramp FLAC Codec
dBpoweramp m4a Codec
dBpoweramp m4a Utilities
dBpoweramp m4b Audio book Encoder
dBpoweramp Midi Decoder
dBpoweramp Monkeys Audio Codec
dBpoweramp Mp2 and BwfMp2 codec
dBpoweramp mp3 (Fraunhofer IIS) Codec
dBpoweramp Musepack Codec
dBpoweramp Music Converter
dBpoweramp Ogg Vorbis Codec
dBpoweramp Ogg Vorbis Lancer Encoder
dBpoweramp OptimFROG Codec
dBpoweramp Real Audio (Helix) Encoder
dBpoweramp Shorten Codec
dBpoweramp Speex Codec
dBPoweramp tooLame MP2 codec
dBpoweramp TTA Codec
dBpoweramp Wave64 Codec
dBpoweramp WavPack Codec
dBpoweramp Windows Media Audio 10 Codec
dBpowerAMP Windows Media Audio 9 Codec
DivX Codec
DivX Plus DirectShow Filters
DivX Version Checker
DivX Web Player
Etymonix MPEG-2 Video Codec
Fallout 3
Fallout 3 Broken Steel Installer - Part 1
Fallout 3 Broken Steel Installer - Part 2
Fallout Mod Manager 0.9.14
FasterPing
File Splitter and Joiner (FFSJ v3.2)
FileZilla Client 3.2.2.1
Fraps (remove only)
Garry's Mod
Google Gmail Notifier
GW-USMini2N
H.264 Decoder
Half-Life 2
Half-Life 2: Episode One
Half-Life 2: Episode Two
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
ILLUSION RapeLay
ImgBurn
IrfanView (remove only)
iTunes
Java(TM) 6 Update 14
L&H TTS3000 British English
L&H TTS3000 Japanese
L&H TTS3000 Korean
MediaCoder 0.7.0.4399
Mega Manager
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Silverlight
Microsoft Text-to-Speech Engine 4.0 (English)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
MKV Splitter
MKVtoolnix 2.6.0
Mozilla Firefox (3.0.11)
MSVCRT
MSXML 4.0 SP2 (KB954430)
Muvixer
Nero 8
NVIDIA Drivers
NVIDIA PhysX
OpenAL
Paragon Partition Manager 9.0 Professional
PC Wizard 2008.1.871
QuickPar 0.9
QuickTime
Razer DeathAdder(TM) Mouse
Razer Tarantula
Real Alternative 1.9.0
SDFormatter
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB970238)
Segoe UI
SmartFTP Client
SmartFTP Client 3.0 Setup Files (remove only)
SoundMAX
Speedball 2 - Tournament
Spybot - Search & Destroy
Steam
Team Fortress 2
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
Update for Windows XP (KB961503)
Update for Windows XP (KB967715)
VC80CRTRedist - 8.0.50727.762
VobSub v2.23 (Remove Only)
WebFldrs XP
Windows Driver Package - Cypress (CyUsb) USB
Windows Driver Package - Razer (HidUsb) HIDClass (02/02/2007 1.0.5.0)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WinRAR archiver
Xilisoft Video Converter Ultimate
XLink Kai
Xvid 1.2.1 final uninstall

==== Event Viewer Messages From Past Week ========

6/9/2009 3:23:53 PM, error: Server [2505] - The server could not bind to the transport \Device\NetBT_Tcpip_{A9D5ECE8-7B9C-47DD-A828-75C7DD05214F} because another computer on the network has the same name. The server could not start.
6/9/2009 3:23:53 PM, error: NetBT [4321] - The name "YUKI :20" could not be registered on the Interface with IP address 192.168.2.2. The machine with the IP address 192.168.2.4 did not allow the name to be claimed by this machine.
6/9/2009 3:23:53 PM, error: NetBT [4321] - The name "YUKI :0" could not be registered on the Interface with IP address 192.168.2.2. The machine with the IP address 192.168.2.4 did not allow the name to be claimed by this machine.
6/9/2009 3:23:44 PM, error: Dhcp [1002] - The IP address lease 192.168.2.2 for the Network Card with network address 001BFC05C66E has been denied by the DHCP server 192.168.2.1 (The DHCP Server sent a DHCPNACK message).
6/8/2009 2:59:09 PM, error: NetBT [4321] - The name "YUKI :20" could not be registered on the Interface with IP address 192.168.2.2. The machine with the IP address 192.168.2.5 did not allow the name to be claimed by this machine.
6/8/2009 2:59:09 PM, error: NetBT [4321] - The name "YUKI :0" could not be registered on the Interface with IP address 192.168.2.2. The machine with the IP address 192.168.2.5 did not allow the name to be claimed by this machine.
6/6/2009 10:00:28 AM, error: System Error [1003] - Error code 1000008e, parameter1 c0000047, parameter2 804fcf44, parameter3 ba4c79e4, parameter4 00000000.
6/12/2009 12:27:40 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the PEVSystemStart service to connect.
6/12/2009 12:20:27 PM, error: Service Control Manager [7034] - The AVG Free8 E-mail Scanner service terminated unexpectedly. It has done this 2 time(s).
6/12/2009 12:20:20 PM, error: Service Control Manager [7031] - The AVG Free8 WatchDog service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.
6/12/2009 12:20:16 PM, error: Service Control Manager [7034] - The AVG Free8 E-mail Scanner service terminated unexpectedly. It has done this 1 time(s).
6/12/2009 12:20:10 PM, error: Service Control Manager [7034] - The Application Layer Gateway Service service terminated unexpectedly. It has done this 1 time(s).
6/11/2009 10:10:18 PM, error: System Error [1003] - Error code 100000ea, parameter1 895a9978, parameter2 8abafa30, parameter3 b8be3cbc, parameter4 00000001.

==== End Of File ===========================
Posted 6/13/2009 2:01 AM
#74309
User avatar

Touch Advanced member

Date Joined Nov 2016
Total Posts: 12974
It looks clean. Where are - win32/nsanti - located. Filename and path ?

[color=black face="Courier New" sab="311">[2]Click here: Before-posting-a-log[/2][/url]

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />[/color]
Do not PM me with logfiles. They will be deleted.


Posted 6/13/2009 5:19 AM
#74312
User avatar

piplup Member

Date Joined Nov 2016
Total Posts: 5
this is what i get User image
Posted 6/13/2009 6:17 AM
#74313
User avatar

Touch Advanced member

Date Joined Nov 2016
Total Posts: 12974
Ahh ok ;-)



Right click on My Computer, Select properties, Select System restore, Check turn off system restore.
Apply and reboot computer
This will delete all restore points including viruses backed up there. Remember to turn system restore back on.




It should get rid of win32/nsanti.




[color=black face="Courier New" sab="311">[2]Click here: Before-posting-a-log[/2][/url]

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />[/color]
Do not PM me with logfiles. They will be deleted.


Posted 6/13/2009 2:31 PM
#74329
User avatar

piplup Member

Date Joined Nov 2016
Total Posts: 5
So Turn off System Restore on all drives. after it reboot turn back on is that correct?
Posted 6/13/2009 2:38 PM
#74330
User avatar

Touch Advanced member

Date Joined Nov 2016
Total Posts: 12974
Correct :smile:


After you have done that, run a scan with AVG, and see if win32/nsanti is gone.

[color=black face="Courier New" sab="311">[2]Click here: Before-posting-a-log[/2][/url]

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />[/color]
Do not PM me with logfiles. They will be deleted.


Posted 6/14/2009 4:10 PM
#74344
User avatar

piplup Member

Date Joined Nov 2016
Total Posts: 5
Thanks! that did the trick :) thank you again Touch
Posted 6/15/2009 2:14 AM
#74348
User avatar

Touch Advanced member

Date Joined Nov 2016
Total Posts: 12974
My pleasure :smile:





Since this issue appears to be resolved ... this Topic has been closed.

If you need this topic reopened, please contact Me with the address of the thread.
Thank you !


[color=black face="Courier New" sab="311">[2]Click here: Before-posting-a-log[/2][/url]

<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />[/color]
Do not PM me with logfiles. They will be deleted.


  • Unread posts or replies
  • No unread posts or replies
  • Unread Posts (Read Only Forum)
  • No Unread Posts (Read Only Forum)

Forum Information

Currently it is Monday, July 4, 2022, 7:18 AM (GMT +2)
There are a total of 61,974 posts in 13,697 threads.
In the last 3 days there were 0 new threads and 0 reply posts.

Who's online

This forum has 38,684 registered members. Please welcome our newest member, james44.
41 Guest(s), 0 Registered Member(s) are currently online.