i recently had my bios updated..and since then the warning message about the BDS\small.iuj stopped appearing...but I still seem to have a problem with my xp because I can't burn any cd on my burner. My nero keeps on saying power calibration failure. I tried error-checking my local disk but it keeps on saying that it was unable to continue the checking. I recently installed my hp printer software too but it can't finish the installment. can you please help me find the solution to this?

Hi

Please download 7-Zip and install it. If you already have it, no need to reinstall.

Then, download RootkitUnhooker and save the setup to your Desktop.

• Right-click on the RootkitUnhooker setup and mouse-over 7-Zip then click Extract to "RKU***"
  
• Once that is done, enter the folder, and double-click on the setup file. Navigate through setup and finish.
  
• Once that is done, you will see another folder that was created inside the RKU folder. Enter that folder, and double-click on the randomly named file. (It will be alpha-numeric and have an EXE extension on it.)
  
• It will initialize itself and load the scanner. It will also install its driver. Please wait for the interface to begin.
  
• Once inside the interface, do not fix anything. Click on the Report tab.
  
• Next, click on the Scan button and a popup will show. Make sure all are checked, then click on OK. It will begin scanning. When it gets to the Files tab, it will ask you what drives to scan. Just select C:\ and hit OK.
  
• It will finish in about 5 minutes or a little longer depending on how badly infected the system is, or if your security software is enabled.
  
• When finished, it will show the report in the Report tab. Please copy all of it, and post it in your next reply. Depending on how large the log is, you may have to use two or three posts to get all the information in.

here's the log
RkU Version: 3.8.388.590, Type LE (SR2)
==============================================
OS Name: Windows XP
Version 5.1.2600 (Service Pack 2)
Number of processors #2
==============================================
>SSDT State
==============================================
ntkrnlpa.exe-->NtCreateKey, Type: Address change 0x806225BE-->F7B980C6 [Unknown module filename]
ntkrnlpa.exe-->NtCreateThread, Type: Address change 0x805CFD34-->F7B980BC [Unknown module filename]
ntkrnlpa.exe-->NtDeleteKey, Type: Address change 0x80622A5A-->F7B980CB [Unknown module filename]
ntkrnlpa.exe-->NtDeleteValueKey, Type: Address change 0x80622C2A-->F7B980D5 [Unknown module filename]
ntkrnlpa.exe-->NtLoadKey, Type: Address change 0x80624316-->F7B980DA [Unknown module filename]
ntkrnlpa.exe-->NtOpenProcess, Type: Address change 0x805CA160-->F7B980A8 [Unknown module filename]
ntkrnlpa.exe-->NtOpenThread, Type: Address change 0x805CA3EC-->F7B980AD [Unknown module filename]
ntkrnlpa.exe-->NtReplaceKey, Type: Address change 0x806241C6-->F7B980E4 [Unknown module filename]
ntkrnlpa.exe-->NtRestoreKey, Type: Address change 0x806209B2-->F7B980DF [Unknown module filename]
ntkrnlpa.exe-->NtSetValueKey, Type: Address change 0x80620C6A-->F7B980D0 [Unknown module filename]
==============================================
>Shadow
==============================================
==============================================
>Processes
==============================================
0x86FC4A00 [4] System
0x869B54E8 [140] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc., Java(TM) Update Scheduler)
0x868F9420 [160] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe (Nero AG, NBH)
0x8689CBC0 [172] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp., Realtek HD Audio Control Panel)
0x86C666E0 [216] C:\WINDOWS\system32\rundll32.exe (Microsoft Corporation, Run a DLL as an App)
0x869234D0 [260] C:\Program Files\Nero\Nero 7\InCD\InCD.exe (Nero AG, InCD)
0x86873DA0 [268] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Co., Hewlett-Packard Product Assistant)
0x86982BC0 [276] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation, GrooveMonitor Utility)
0x86E58550 [284] C:\WINDOWS\TBPanel.exe (Gainward Co., EXPERTool : Display Control Panel)
0x86C64DA0 [292] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH, Antivirus System Tray Tool)
0x86E04B28 [384] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company, -)
0x869C8DA0 [404] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG, Nero Home)
0x86E8EDA0 [476] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation, CTF Loader)
0x869958C0 [520] C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co., HP Digital Imaging Monitor)
0x86DE23E8 [660] C:\WINDOWS\system32\smss.exe (Microsoft Corporation, Windows NT Session Manager)
0x86896DA0 [712] C:\WINDOWS\system32\csrss.exe (Microsoft Corporation, Client Server Runtime Process)
0x86EAF020 [736] C:\WINDOWS\system32\winlogon.exe (Microsoft Corporation, Windows NT Logon Application)
0x8689FDA0 [780] C:\WINDOWS\system32\services.exe (Microsoft Corporation, Services and Controller app)
0x868A2CA8 [792] C:\WINDOWS\system32\lsass.exe (Microsoft Corporation, LSA Shell (Export Version))
0x86478020 [884] C:\WINDOWS\system32\wuauclt.exe (Microsoft Corporation, Windows Update)
0x86E05DA0 [976] C:\WINDOWS\system32\svchost.exe (Microsoft Corporation, Generic Host Process for Win32 Services)
0x8696F7C0 [1044] C:\WINDOWS\system32\svchost.exe (Microsoft Corporation, Generic Host Process for Win32 Services)
0x869BFDA0 [1112] C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH, Antivirus On-Access Service)
0x8698A978 [1140] C:\WINDOWS\system32\svchost.exe (Microsoft Corporation, Generic Host Process for Win32 Services)
0x86C34300 [1192] C:\WINDOWS\system32\svchost.exe (Microsoft Corporation, Generic Host Process for Win32 Services)
0x86C70948 [1224] C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe (Nero AG, incdsrv)
0x86880AF8 [1288] C:\WINDOWS\system32\svchost.exe (Microsoft Corporation, Generic Host Process for Win32 Services)
0x86C1D480 [1312] C:\Program Files\Java\jre6\bin\jqs.exe (Oracle, Java(TM) Quick Starter Service)
0x86D88350 [1332] C:\WINDOWS\system32\svchost.exe (Microsoft Corporation, Generic Host Process for Win32 Services)
0x869E1DA0 [1428] C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH, AntiVir shadow copy service)
0x868F3650 [1508] C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company, LightScribe Service)
0x869F8560 [1544] C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation, NVIDIA Driver Helper Service, Version 169.32)
0x8699BDA0 [1604] C:\WINDOWS\system32\spoolsv.exe (Microsoft Corporation, Spooler SubSystem App)
0x86988DA0 [1668] C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH, Antivirus Scheduler)
0x86923BC0 [1764] C:\WINDOWS\system32\svchost.exe (Microsoft Corporation, Generic Host Process for Win32 Services)
0x869B1BE8 [1968] C:\WINDOWS\explorer.exe (Microsoft Corporation, Windows Explorer)
0x86457BC0 [2240] C:\Program Files\Mozilla Firefox\plugin-container.exe (Mozilla Corporation, Plugin Container for Firefox)
0x8642DC00 [2560] C:\WINDOWS\system32\wuauclt.exe (Microsoft Corporation, Windows Update)
0x868D5BC0 [2708] C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (Nero AG, Nero Home)
0x8687ADA0 [2788] C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe (Nero AG, Nero Home)
0x86C76800 [3140] C:\WINDOWS\system32\alg.exe (Microsoft Corporation, Application Layer Gateway Service)
0x8649BAF8 [3220] C:\Documents and Settings\jalla\My Documents\Downloads\RkU3.8.388.590\MustBeRandomlyNamed\Vo8bUeTQ65um.exe (UG North, RKULE, SR2 Normandy)
0x8640ABC0 [3528] C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation, Firefox)
0x86E649E0 [3880] C:\Program Files\Microsoft Office\Office12\WINWORD.EXE (Microsoft Corporation, Microsoft Office Word)
==============================================
>Drivers
==============================================
0xF6B79000 C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 7438336 bytes (NVIDIA Corporation, NVIDIA Compatible Windows 2000 Miniport Driver, Version 169.32 )
0xBF012000 C:\WINDOWS\System32\nv4_disp.dll 5775360 bytes (NVIDIA Corporation, NVIDIA Compatible Windows 2000 Display driver, Version 169.32 )
0xF4397000 C:\WINDOWS\system32\drivers\RtkHDAud.sys 4751360 bytes (Realtek Semiconductor Corp., Realtek(r) High Definition Audio Function Driver)
0x804D7000 C:\WINDOWS\system32\ntkrnlpa.exe 2146304 bytes (Microsoft Corporation, NT Kernel & System)
0x804D7000 PnpManager 2146304 bytes
0x804D7000 RAW 2146304 bytes
0x804D7000 WMIxWDM 2146304 bytes
0xBF800000 Win32k 1863680 bytes
0xBF800000 C:\WINDOWS\System32\win32k.sys 1863680 bytes (Microsoft Corporation, Multi-User Win32 Driver)
0xF7320000 Ntfs.sys 577536 bytes (Microsoft Corporation, NT File System Driver)
0xF4178000 C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 458752 bytes (Microsoft Corporation, Windows NT SMB Minirdr)
0xF427E000 C:\WINDOWS\system32\DRIVERS\tcpip.sys 360448 bytes (Microsoft Corporation, TCP/IP Protocol Driver)
0xF3479000 C:\WINDOWS\system32\DRIVERS\srv.sys 356352 bytes (Microsoft Corporation, Server driver)
0xF3000000 C:\WINDOWS\System32\Drivers\HTTP.sys 266240 bytes (Microsoft Corporation, HTTP Protocol Stack)
0xF6A07000 C:\WINDOWS\system32\DRIVERS\update.sys 212992 bytes (Microsoft Corporation, Update Driver)
0xF6A3B000 C:\WINDOWS\system32\DRIVERS\rdpdr.sys 200704 bytes (Microsoft Corporation, Microsoft RDP Device redirector)
0xF7463000 ACPI.sys 188416 bytes (Microsoft Corporation, ACPI Driver for NT)
0xF3A5E000 C:\WINDOWS\system32\DRIVERS\mrxdav.sys 184320 bytes (Microsoft Corporation, Windows NT WebDav Minirdr)
0xF72F3000 NDIS.sys 184320 bytes (Microsoft Corporation, NDIS 5.1 wrapper driver)
0xF41E8000 C:\WINDOWS\system32\DRIVERS\rdbss.sys 176128 bytes (Microsoft Corporation, Redirected Drive Buffering SubSystem Driver)
0xF2137000 C:\WINDOWS\system32\drivers\kmixer.sys 172032 bytes (Microsoft Corporation, Kernel Mode Audio Mixer)
0xF4256000 C:\WINDOWS\system32\DRIVERS\netbt.sys 163840 bytes (Microsoft Corporation, MBT Transport driver)
0xF3311000 C:\WINDOWS\system32\DRIVERS\secdrv.sys 163840 bytes (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., Macrovision SECURITY Driver)
0xF740D000 dmio.sys 155648 bytes (Microsoft Corp., Veritas Software, NT Disk Manager I/O Driver)
0xF6B40000 C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 151552 bytes (Windows (R) Server 2003 DDK provider, High Definition Audio Bus Driver v1.0a)
0xF6ACD000 C:\WINDOWS\system32\DRIVERS\ks.sys 143360 bytes (Microsoft Corporation, Kernel CSA Library)
0xF6B04000 C:\WINDOWS\system32\DRIVERS\USBPORT.SYS 143360 bytes (Microsoft Corporation, USB 1.1 & 2.0 Port Driver)
0xF4213000 C:\WINDOWS\System32\drivers\afd.sys 139264 bytes (Microsoft Corporation, Ancillary Function Driver for WinSock)
0xF4156000 C:\WINDOWS\system32\DRIVERS\avipbb.sys 139264 bytes (Avira GmbH, Avira Driver for Security Enhancement)
0xF4375000 C:\WINDOWS\system32\drivers\portcls.sys 139264 bytes (Microsoft Corporation, Port Class (Class Driver for Port/Miniport Devices))
0xF4235000 C:\WINDOWS\system32\DRIVERS\ipnat.sys 135168 bytes (Microsoft Corporation, IP Network Address Translator)
0x806E3000 ACPI_HAL 134272 bytes
0x806E3000 C:\WINDOWS\system32\hal.dll 134272 bytes (Microsoft Corporation, Hardware Abstraction Layer DLL)
0xF73D6000 fltMgr.sys 126976 bytes (Microsoft Corporation, Microsoft Filesystem Filter Manager)
0xF7433000 ftdisk.sys 126976 bytes (Microsoft Corporation, FT Disk Driver)
0xF42E9000 C:\WINDOWS\system32\drivers\InCDFs.sys 114688 bytes (Nero AG, InCD File System Driver)
0xF72D9000 Mup.sys 106496 bytes (Microsoft Corporation, Multiple UNC Provider driver)
0xF6B27000 C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys 102400 bytes (Realtek Semiconductor Corporation , Realtek 10/100/1000 NDIS 5.1 Driver )
0xF73F5000 atapi.sys 98304 bytes (Microsoft Corporation, IDE/ATAPI Port Driver)
0xF4116000 C:\WINDOWS\System32\Drivers\dump_atapi.sys 98304 bytes
0xF73AD000 KSecDD.sys 94208 bytes (Microsoft Corporation, Kernel Security Support Provider Interface)
0xF6A8E000 C:\WINDOWS\system32\DRIVERS\ndiswan.sys 94208 bytes (Microsoft Corporation, MS PPP Framing Driver (Strong Encryption))
0xF3CBB000 C:\WINDOWS\system32\DRIVERS\irda.sys 90112 bytes (Microsoft Corporation, IRDA Protocol Driver)
0xF3DC1000 C:\WINDOWS\system32\DRIVERS\avgntflt.sys 86016 bytes (Avira GmbH, Avira Minifilter Driver)
0xF3A21000 C:\WINDOWS\system32\drivers\wdmaud.sys 86016 bytes (Microsoft Corporation, MMSYSTEM Wave/Midi API mapper)
0xF6AF0000 C:\WINDOWS\system32\DRIVERS\parport.sys 81920 bytes (Microsoft Corporation, Parallel Port Driver)
0xF6B65000 C:\WINDOWS\system32\DRIVERS\VIDEOPRT.SYS 81920 bytes (Microsoft Corporation, Video Port Driver)
0xF42D6000 C:\WINDOWS\system32\DRIVERS\ipsec.sys 77824 bytes (Microsoft Corporation, IPSec Driver)
0xBF000000 C:\WINDOWS\System32\drivers\dxg.sys 73728 bytes (Microsoft Corporation, DirectX Graphics Driver)
0xF73C4000 sr.sys 73728 bytes (Microsoft Corporation, System Restore Filesystem Filter Driver)
0xF7452000 pci.sys 69632 bytes (Microsoft Corporation, NT Plug and Play PCI Enumerator)
0xF6A6C000 C:\WINDOWS\system32\DRIVERS\psched.sys 69632 bytes (Microsoft Corporation, MS QoS Packet Scheduler)
0xF76E2000 C:\WINDOWS\System32\Drivers\Cdfs.SYS 65536 bytes (Microsoft Corporation, CD-ROM File System Driver)
0xF7742000 C:\WINDOWS\system32\DRIVERS\serial.sys 65536 bytes (Microsoft Corporation, Serial Device Driver)
0xF7642000 C:\WINDOWS\system32\drivers\drmk.sys 61440 bytes (Microsoft Corporation, Microsoft Kernel DRM Descrambler Filter)
0xF7782000 C:\WINDOWS\system32\DRIVERS\redbook.sys 61440 bytes (Microsoft Corporation, Redbook Audio Filter Driver)
0xF3BDB000 C:\WINDOWS\system32\drivers\sysaudio.sys 61440 bytes (Microsoft Corporation, System Audio WDM Filter)
0xF7652000 C:\WINDOWS\system32\DRIVERS\usbhub.sys 61440 bytes (Microsoft Corporation, Default Hub Driver for USB)
0xF7772000 C:\WINDOWS\system32\DRIVERS\cdrom.sys 53248 bytes (Microsoft Corporation, SCSI CD-ROM Driver)
0xF75D2000 C:\WINDOWS\system32\DRIVERS\CLASSPNP.SYS 53248 bytes (Microsoft Corporation, SCSI Class System Dll)
0xF7752000 C:\WINDOWS\system32\DRIVERS\i8042prt.sys 53248 bytes (Microsoft Corporation, i8042 Port Driver)
0xF77A2000 C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 53248 bytes (Microsoft Corporation, RAS L2TP mini-port/call-manager driver)
0xF75B2000 VolSnap.sys 53248 bytes (Microsoft Corporation, Volume Shadow Copy Driver)
0xF77E2000 C:\WINDOWS\system32\DRIVERS\raspptp.sys 49152 bytes (Microsoft Corporation, Peer-to-Peer Tunneling Protocol)
0xF7762000 C:\WINDOWS\system32\DRIVERS\imapi.sys 45056 bytes (Microsoft Corporation, IMAPI Kernel Driver)
0xF75A2000 MountMgr.sys 45056 bytes (Microsoft Corporation, Mount Manager)
0xF77D2000 C:\WINDOWS\system32\DRIVERS\raspppoe.sys 45056 bytes (Microsoft Corporation, RAS PPPoE mini-port/call-manager driver)
0xF7622000 C:\WINDOWS\System32\Drivers\NDProxy.SYS 40960 bytes (Microsoft Corporation, NDIS Proxy)
0xF7602000 C:\WINDOWS\system32\DRIVERS\termdd.sys 40960 bytes (Microsoft Corporation, Terminal Server Driver)
0xF75C2000 disk.sys 36864 bytes (Microsoft Corporation, PnP Disk Driver)
0xF7692000 C:\WINDOWS\System32\Drivers\Fips.SYS 36864 bytes (Microsoft Corporation, FIPS Crypto Driver)
0xF76F2000 C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS 36864 bytes (Microsoft Corporation, Hid Class Library)
0xF7792000 C:\WINDOWS\system32\drivers\InCDRm.sys 36864 bytes (Nero AG, Nero MRW Filter Driver)
0xF7732000 C:\WINDOWS\system32\DRIVERS\intelppm.sys 36864 bytes (Microsoft Corporation, Processor Device Driver)
0xF7592000 isapnp.sys 36864 bytes (Microsoft Corporation, PNP ISA Bus Driver)
0xF77F2000 C:\WINDOWS\system32\DRIVERS\msgpc.sys 36864 bytes (Microsoft Corporation, MS General Packet Classifier)
0xF7682000 C:\WINDOWS\system32\DRIVERS\netbios.sys 36864 bytes (Microsoft Corporation, NetBIOS interface driver)
0xF3E6E000 C:\WINDOWS\System32\Drivers\Normandy.SYS 36864 bytes (RKU Driver)
0xF7672000 C:\WINDOWS\system32\DRIVERS\wanarp.sys 36864 bytes (Microsoft Corporation, MS Remote Access and Routing ARP Driver)
0xF7912000 C:\WINDOWS\system32\drivers\InCDPass.sys 32768 bytes (Nero AG, Ahead RW Filter Driver)
0xF7972000 C:\WINDOWS\System32\Drivers\Npfs.SYS 32768 bytes (Microsoft Corporation, NPFS Driver)
0xF798A000 C:\WINDOWS\system32\DRIVERS\usbccgp.sys 32768 bytes (Microsoft Corporation, USB Common Class Generic Parent Driver)
0xF78FA000 C:\WINDOWS\system32\DRIVERS\fdc.sys 28672 bytes (Microsoft Corporation, Floppy Disk Controller Driver)
0xF795A000 C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS 28672 bytes (Microsoft Corporation, Hid Parsing Library)
0xF7812000 C:\WINDOWS\system32\DRIVERS\PCIIDEX.SYS 28672 bytes (Microsoft Corporation, PCI IDE Bus Driver Extension)
0xF78F2000 C:\WINDOWS\system32\DRIVERS\usbehci.sys 28672 bytes (Microsoft Corporation, EHCI eUSB Miniport Driver)
0xF7942000 C:\WINDOWS\system32\DRIVERS\kbdclass.sys 24576 bytes (Microsoft Corporation, Keyboard Class Driver)
0xF790A000 C:\WINDOWS\system32\DRIVERS\mouclass.sys 24576 bytes (Microsoft Corporation, Mouse Class Driver)
0xF797A000 C:\WINDOWS\system32\DRIVERS\ssmdrv.sys 24576 bytes (Avira GmbH, AVIRA SnapShot Driver)
0xF7962000 C:\WINDOWS\System32\drivers\vga.sys 24576 bytes (Microsoft Corporation, VGA/Super VGA Video Driver)
0xF794A000 C:\WINDOWS\system32\DRIVERS\flpydisk.sys 20480 bytes (Microsoft Corporation, Floppy Driver)
0xF7902000 C:\WINDOWS\system32\DRIVERS\irsir.sys 20480 bytes (Microsoft Corporation, Serial Infrared Driver)
0xF796A000 C:\WINDOWS\System32\Drivers\Msfs.SYS 20480 bytes (Microsoft Corporation, Mailslot driver)
0xF781A000 PartMgr.sys 20480 bytes (Microsoft Corporation, Partition Manager)
0xF7932000 C:\WINDOWS\system32\DRIVERS\ptilink.sys 20480 bytes (Parallel Technologies, Inc., Parallel Technologies DirectParallel IO Library)
0xF791A000 C:\WINDOWS\system32\DRIVERS\rasirda.sys 20480 bytes (Microsoft Corporation, IrDA WAN Miniport Driver)
0xF793A000 C:\WINDOWS\system32\DRIVERS\raspti.sys 20480 bytes (Microsoft Corporation, PTI DirectParallel(R) mini-port/call-manager driver)
0xF7922000 C:\WINDOWS\system32\DRIVERS\TDI.SYS 20480 bytes (Microsoft Corporation, TDI Wrapper)
0xF78EA000 C:\WINDOWS\system32\DRIVERS\usbuhci.sys 20480 bytes (Microsoft Corporation, UHCI USB Miniport Driver)
0xF799A000 C:\WINDOWS\System32\watchdog.sys 20480 bytes (Microsoft Corporation, Watchdog Driver)
0xF4369000 C:\WINDOWS\system32\DRIVERS\kbdhid.sys 16384 bytes (Microsoft Corporation, HID Mouse Filter Driver)
0xF7A8E000 C:\WINDOWS\system32\DRIVERS\mssmbios.sys 16384 bytes (Microsoft Corporation, System Management BIOS Driver)
0xF3DEE000 C:\WINDOWS\system32\DRIVERS\ndisuio.sys 16384 bytes (Microsoft Corporation, NDIS User mode I/O Driver)
0xF7A52000 C:\WINDOWS\system32\DRIVERS\serenum.sys 16384 bytes (Microsoft Corporation, Serial Port Enumerator)
0xF79A2000 C:\WINDOWS\system32\BOOTVID.dll 12288 bytes (Microsoft Corporation, VGA Boot Driver)
0xF4345000 C:\WINDOWS\System32\drivers\Dxapi.sys 12288 bytes (Microsoft Corporation, DirectX API Driver)
0xF436D000 C:\WINDOWS\system32\DRIVERS\hidusb.sys 12288 bytes (Microsoft Corporation, USB Miniport Driver for Input Devices)
0xF7A7E000 C:\WINDOWS\System32\Drivers\InCDrec.SYS 12288 bytes (Nero AG, InCD File System Recognizer)
0xF7A56000 C:\WINDOWS\system32\DRIVERS\irenum.sys 12288 bytes (Microsoft Corporation, Infra-Red Bus Enumerator)
0xF4365000 C:\WINDOWS\system32\DRIVERS\mouhid.sys 12288 bytes (Microsoft Corporation, HID Mouse Filter Driver)
0xF7A6A000 C:\WINDOWS\system32\DRIVERS\ndistapi.sys 12288 bytes (Microsoft Corporation, NDIS 3.0 connection wrapper driver)
0xF6963000 C:\WINDOWS\system32\DRIVERS\rasacd.sys 12288 bytes (Microsoft Corporation, RAS Automatic Connection Driver)
0xF7ADC000 C:\Program Files\Avira\AntiVir Desktop\avgio.sys 8192 bytes (Avira GmbH, Avira AntiVir Support for Minifilter)
0xF7AD0000 C:\WINDOWS\System32\Drivers\Beep.SYS 8192 bytes (Microsoft Corporation, BEEP Driver)
0xF7A96000 dmload.sys 8192 bytes (Microsoft Corp., Veritas Software., NT Disk Manager Startup Driver)
0xF7ADE000 C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS 8192 bytes
0xF7ACE000 C:\WINDOWS\System32\Drivers\Fs_Rec.SYS 8192 bytes (Microsoft Corporation, File System Recognizer Driver)
0xF7A92000 C:\WINDOWS\system32\KDCOM.DLL 8192 bytes (Microsoft Corporation, Kernel Debugger HW Extension DLL)
0xF7AD2000 C:\WINDOWS\System32\Drivers\mnmdd.SYS 8192 bytes (Microsoft Corporation, Frame buffer simulator)
0xF7B24000 C:\WINDOWS\System32\Drivers\ParVdm.SYS 8192 bytes (Microsoft Corporation, VDM Parallel Driver)
0xF7AD4000 C:\WINDOWS\System32\DRIVERS\RDPCDD.sys 8192 bytes (Microsoft Corporation, RDP Miniport)
0xF7AB0000 C:\WINDOWS\system32\DRIVERS\swenum.sys 8192 bytes (Microsoft Corporation, Plug and Play Software Device Enumerator)
0xF7B26000 C:\WINDOWS\System32\Drivers\TBPanel.SYS 8192 bytes (Windows (R) 2000 DDK provider, Display Control Program)
0xF7ACC000 C:\WINDOWS\system32\DRIVERS\USBD.SYS 8192 bytes (Microsoft Corporation, Universal Serial Bus Driver)
0xF7A94000 C:\WINDOWS\system32\DRIVERS\WMILIB.SYS 8192 bytes (Microsoft Corporation, WMILIB WMI support library Dll)
0xF7BC6000 C:\WINDOWS\system32\DRIVERS\audstub.sys 4096 bytes (Microsoft Corporation, AudStub Driver)
0xF7BE6000 C:\WINDOWS\System32\drivers\dxgthk.sys 4096 bytes (Microsoft Corporation, DirectX Graphics Driver Thunk)
0xF7B72000 C:\WINDOWS\System32\Drivers\Null.SYS 4096 bytes (Microsoft Corporation, NULL Driver)
0xF7B5A000 pciide.sys 4096 bytes (Microsoft Corporation, Generic PCI IDE Bus Driver)
==============================================
>Stealth
==============================================
==============================================
>Files
==============================================
!-->[Hidden] C:\Documents and Settings\jalla\Local Settings\Application Data\Mozilla\Firefox\Profiles\8pagwy0d.default\Cache\70628C8Dd01
==============================================
>Hooks
==============================================
ntkrnlpa.exe+0x0002D530, Type: Inline - PushRet 0x80504530-->80575B5C [ntkrnlpa.exe]
ntkrnlpa.exe+0x0006EA7E, Type: Inline - RelativeJump 0x80545A7E-->80545A85 [ntkrnlpa.exe]
[1968]explorer.exe-->advapi32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77DD1218-->00000000 [shimeng.dll]
[1968]explorer.exe-->gdi32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77F110B4-->00000000 [shimeng.dll]
[1968]explorer.exe-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x01001268-->00000000 [shimeng.dll]
[1968]explorer.exe-->shell32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x7C9C15A8-->00000000 [shimeng.dll]
[1968]explorer.exe-->user32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x77D4133C-->00000000 [shimeng.dll]
[1968]explorer.exe-->wininet.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x771B1248-->00000000 [shimeng.dll]
[1968]explorer.exe-->ws2_32.dll-->kernel32.dll-->GetProcAddress, Type: IAT modification 0x71AB115C-->00000000 [shimeng.dll]
[2240]plugin-container.exe-->user32.dll-->TrackPopupMenu, Type: Inline - RelativeJump 0x77D94EDE-->00000000 [xul.dll]
[3528]firefox.exe-->ntdll.dll-->LdrLoadDll, Type: Inline - RelativeJump 0x7C915CD3-->00000000 [firefox.exe]
[3880]WINWORD.EXE-->kernel32.dll-->SetUnhandledExceptionFilter, Type: Inline - RelativeJump 0x7C8447ED-->00000000 [MSO.DLL]


!!POSSIBLE ROOTKIT ACTIVITY DETECTED!! =)

Please download MBRCheck.exe by a_d_13 from one of the links provided below and save it to your desktop.

Link 1
Link 2
Link 3

• Double-click on MBRCheck.exe to run it.
  
• It will open a black window...please do not fix anything (if it gives you an option).
  
• When complete, you should see Done! Press ENTER to exit.... Press Enter on the keyboard.
  
• A log named MBRCheck_date_time.txt (i.e. MBRCheck_07.21.10_10.22.51.txt) will appear on the desktop.
  
• Please copy and paste the contents of that log in your next reply.

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Professional
Windows Information: Service Pack 2 (build 2600)
Logical Drives Mask: 0x0000003d

Kernel Drivers (total 126):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E3000 \WINDOWS\system32\hal.dll
0xF7A92000 \WINDOWS\system32\KDCOM.DLL
0xF79A2000 \WINDOWS\system32\BOOTVID.dll
0xF7463000 ACPI.sys
0xF7A94000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xF7452000 pci.sys
0xF7592000 isapnp.sys
0xF7B5A000 pciide.sys
0xF7812000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xF75A2000 MountMgr.sys
0xF7433000 ftdisk.sys
0xF7A96000 dmload.sys
0xF740D000 dmio.sys
0xF781A000 PartMgr.sys
0xF75B2000 VolSnap.sys
0xF73F5000 atapi.sys
0xF75C2000 disk.sys
0xF75D2000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xF73D6000 fltMgr.sys
0xF73C4000 sr.sys
0xF73AD000 KSecDD.sys
0xF7320000 Ntfs.sys
0xF72F3000 NDIS.sys
0xF72D9000 Mup.sys
0xF7752000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xF6B79000 \SystemRoot\system32\DRIVERS\nv4_mini.sys
0xF6B65000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xF6B40000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xF6B27000 \SystemRoot\system32\DRIVERS\Rtenicxp.sys
0xF78E2000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xF6B04000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xF78EA000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xF78F2000 \SystemRoot\system32\DRIVERS\fdc.sys
0xF7772000 \SystemRoot\system32\DRIVERS\serial.sys
0xF7A52000 \SystemRoot\system32\DRIVERS\serenum.sys
0xF78FA000 \SystemRoot\system32\DRIVERS\irsir.sys
0xF7A56000 \SystemRoot\system32\DRIVERS\irenum.sys
0xF6AF0000 \SystemRoot\system32\DRIVERS\parport.sys
0xF7782000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xF7902000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xF7792000 \SystemRoot\system32\DRIVERS\imapi.sys
0xF77A2000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xF77C2000 \SystemRoot\system32\DRIVERS\redbook.sys
0xF6ACD000 \SystemRoot\system32\DRIVERS\ks.sys
0xF791A000 \SystemRoot\system32\drivers\InCDPass.sys
0xF77D2000 \SystemRoot\system32\drivers\InCDRm.sys
0xF7BCC000 \SystemRoot\system32\DRIVERS\audstub.sys
0xF7922000 \SystemRoot\system32\DRIVERS\rasirda.sys
0xF792A000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xF77E2000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xF7A76000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xF6A7D000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xF77F2000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xF7802000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xF6A6C000 \SystemRoot\system32\DRIVERS\psched.sys
0xF7602000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xF7932000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xF793A000 \SystemRoot\system32\DRIVERS\raspti.sys
0xF6A3B000 \SystemRoot\system32\DRIVERS\rdpdr.sys
0xF7612000 \SystemRoot\system32\DRIVERS\termdd.sys
0xF7942000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xF7AB4000 \SystemRoot\system32\DRIVERS\swenum.sys
0xF6A07000 \SystemRoot\system32\DRIVERS\update.sys
0xF7A8E000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xF7632000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xF4397000 \SystemRoot\system32\drivers\RtkHDAud.sys
0xF4375000 \SystemRoot\system32\drivers\portcls.sys
0xF7662000 \SystemRoot\system32\drivers\drmk.sys
0xF7672000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xF7AC8000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xF7952000 \SystemRoot\system32\DRIVERS\flpydisk.sys
0xF7ACA000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF7B71000 \SystemRoot\System32\Drivers\Null.SYS
0xF7ACC000 \SystemRoot\System32\Drivers\Beep.SYS
0xF7962000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xF796A000 \SystemRoot\System32\drivers\vga.sys
0xF7ACE000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF7AD0000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF6A98000 \SystemRoot\System32\Drivers\InCDrec.SYS
0xF42E9000 \SystemRoot\system32\drivers\InCDFs.sys
0xF7972000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF797A000 \SystemRoot\System32\Drivers\Npfs.SYS
0xF6A94000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xF42D6000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xF427E000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xF4256000 \SystemRoot\system32\DRIVERS\netbt.sys
0xF4235000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xF7692000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xF4213000 \SystemRoot\System32\drivers\afd.sys
0xF76A2000 \SystemRoot\system32\DRIVERS\netbios.sys
0xF7982000 \SystemRoot\system32\DRIVERS\ssmdrv.sys
0xF41E8000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xF4178000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xF76B2000 \SystemRoot\System32\Drivers\Fips.SYS
0xF4156000 \SystemRoot\system32\DRIVERS\avipbb.sys
0xF7AD6000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys
0xF7702000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xF7992000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xF7295000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xF7712000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xF7291000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0xF4371000 \SystemRoot\system32\DRIVERS\mouhid.sys
0xF4116000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF7AD8000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xF4345000 \SystemRoot\System32\drivers\Dxapi.sys
0xF782A000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF7BE2000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF012000 \SystemRoot\System32\nv4_disp.dll
0xF3DC1000 \SystemRoot\system32\DRIVERS\avgntflt.sys
0xF3CBB000 \SystemRoot\system32\DRIVERS\irda.sys
0xF3DE6000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xF3A5E000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xF38B9000 \SystemRoot\system32\drivers\wdmaud.sys
0xF39DE000 \SystemRoot\system32\drivers\sysaudio.sys
0xF788A000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xF35C6000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xF7B52000 \SystemRoot\System32\Drivers\ParVdm.SYS
0xF7B54000 \SystemRoot\System32\Drivers\TBPanel.SYS
0xF351F000 \SystemRoot\system32\DRIVERS\srv.sys
0xF3407000 \SystemRoot\system32\DRIVERS\secdrv.sys
0xF2FE5000 \SystemRoot\System32\Drivers\HTTP.sys
0xF21CD000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 44):
0 System Idle Process
4 System
660 C:\WINDOWS\system32\smss.exe
712 csrss.exe
736 C:\WINDOWS\system32\winlogon.exe
780 C:\WINDOWS\system32\services.exe
792 C:\WINDOWS\system32\lsass.exe
980 C:\WINDOWS\system32\svchost.exe
1048 svchost.exe
1144 C:\WINDOWS\system32\svchost.exe
1292 svchost.exe
1340 svchost.exe
1620 C:\WINDOWS\system32\spoolsv.exe
1684 C:\Program Files\Avira\AntiVir Desktop\sched.exe
1748 svchost.exe
1884 C:\WINDOWS\explorer.exe
1968 C:\Program Files\Common Files\Java\Java Update\jusched.exe
1984 C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
1996 C:\WINDOWS\RTHDCPL.EXE
2020 C:\WINDOWS\system32\rundll32.exe
180 C:\Program Files\Nero\Nero 7\InCD\InCD.exe
184 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
192 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
220 C:\WINDOWS\TBPanel.exe
240 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
288 C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
312 C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
368 C:\WINDOWS\system32\ctfmon.exe
472 C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
1412 C:\Program Files\Avira\AntiVir Desktop\avguard.exe
1356 C:\WINDOWS\system32\svchost.exe
1540 C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
1564 C:\Program Files\Java\jre6\bin\jqs.exe
1768 C:\Program Files\Common Files\LightScribe\LSSrvc.exe
1576 C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
188 C:\WINDOWS\system32\nvsvc32.exe
2472 C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
2760 alg.exe
2768 C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
3492 C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
2012 C:\WINDOWS\system32\wuauclt.exe
3768 C:\Program Files\Mozilla Firefox\firefox.exe
1192 C:\Program Files\Mozilla Firefox\plugin-container.exe
2900 C:\Documents and Settings\jalla\My Documents\Downloads\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)

PhysicalDrive0 Model Number: ExcelStorTechnologyJ8080S, Rev: P21OABEA

Size Device Name MBR Status
--------------------------------------------
74 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A


Done!

ESET Online Scan

Please run a free online scan with the ESET Online Scanner

• Tick the box next to YES, I accept the Terms of Use
  
• Click Start
  
• When asked, allow the ActiveX control to install
  
• Click Start
  
• Make sure that the options Remove found threats and the option Scan unwanted applications is checked
  
• Click Scan (This scan can take several hours, so please be patient)
  
• Once the scan is completed, you may close the window
  
• Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
  
• Copy and paste that log as a reply to this topic

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=2028ee2f7b6f5446a7c91d068f18dee6
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-10-18 12:38:38
# local_time=2010-10-18 07:38:38 (+0700, SE Asia Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=1797 16775125 100 93 2377 45677491 0 0
# compatibility_mode=8192 67108863 100 0 589 589 0 0
# scanned=70876
# found=0
# cleaned=0
# scan_time=3918

What other signs of infection or problems are happening?

Well, my computer time and date keeps on going back to 2007, midnight every time I open my pc...so I always have to change it because if I didn't my avira will put on a message that says that it can't update. There was also a time when I opened my pc and it could not emit any audio. I tried to truobleshoot it but it could not detect any driver/software so I had to re-install it again. And I still can't use my burner. Nero keeps on stopping the burning process saying the error message power calibration failure.

Hi. I don't mean to have to do this, but to get help on those issues, I will refer you to my colleagues at PC Help Forum.

Please go to http://www.pchelpforum.com and post in the appropriate forum for your problem there, and point them to this topic please.

The reason for reference, is so that you can get the best technical help. There is a pretty intense tech problem, more internal.

ok..thanks.