Suddenly I cannot run System Restore. I also cannot install Adobe Reader or Windows Installer. My XP machine seems to be running a little slower than normal, too.
When trying to install Adobe Reader 8.1 I get:
getPlus+(R): Error
Operating system error! (16249.203.296 - 42172312.8007007E.FFFFFFFF.80080005)
System Restore just hangs when saying 'restoring files'. I have to do a hard boot to bring the machine back up.
Here is the HJT log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:25:34 AM, on 12/7/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesCisco SystemsVPN Clientcvpnd.exe
C:WINDOWSsystem32dldocoms.exe
C:Program FilesTrend MicroOfficeScan Clientntrtscan.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesTrend MicroOfficeScan Clienttmlisten.exe
C:WINDOWSsystem32ctfmon.exe
C:WINDOWSTEMPOVF87C.EXE
C:Program FilesTrend MicroOfficeScan ClientCNTAoSMgr.exe
C:Program FilesCreativeMixerCTSVolFE.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:Program FilesTrend MicroOfficeScan Clientpccntmon.exe
C:WINDOWSstsystra.exe
C:Program FilesDell 968 AIO Printerdldomon.exe
C:Program FilesDell 968 AIO Printermemcard.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesiPodbiniPodService.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:WINDOWSsystem32DllHost.exe
C:WINDOWSsystem32notepad.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://us.mg201.mail.yahoo.com/dc/launch?.partner=sbc&.gx=1&.rand=53k6036dcicr2
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:Program FilesTechSmithSnagIt 8SnagItBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Program FilesRealRealPlayerrpbrowserrecordplugin.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:Program FilesMSNToolbar3.0.1203.0msneshellx.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:Program FilesMSNToolbar3.0.1203.0msneshellx.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dll
O4 - HKLM..Run: [CTSVolFE] 'C:Program FilesCreativeMixerCTSVolFE.exe' /r
O4 - HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 - HKLM..Run: [Adobe Reader Speed Launcher] 'C:Program FilesAdobeReader 8.0ReaderReader_sl.exe'
O4 - HKLM..Run: [OfficeScanNT Monitor] 'C:Program FilesTrend MicroOfficeScan Clientpccntmon.exe' -HideWindow
O4 - HKLM..Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM..Run: [BJCFD] C:Program FilesBroadJumpClient FoundationCFD.exe
O4 - HKLM..Run: [dldomon.exe] 'C:Program FilesDell 968 AIO Printerdldomon.exe'
O4 - HKLM..Run: [MemoryCardManager] 'C:Program FilesDell 968 AIO Printermemcard.exe'
O4 - HKLM..Run: [Dell 968 AIO Printer Fax Server] 'C:Program FilesDell 968 AIO Printerfm3032.exe' /s
O4 - HKLM..Run: [QuickTime Task] 'C:Program FilesQuickTimeqttask.exe' -atboottime
O4 - HKLM..Run: [iTunesHelper] 'C:Program FilesiTunesiTunesHelper.exe'
O4 - HKLM..Run: [AppleSyncNotifier] C:Program FilesCommon FilesAppleMobile Device SupportbinAppleSyncNotifier.exe
O4 - HKLM..Run: [TkBellExe] 'C:Program FilesCommon FilesRealUpdate_OBrealsched.exe' -osboot
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2Office12EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O15 - Trusted Zone: http://*.att.net
O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://192.168.25.37:4343/officescan/console/html/ClientInstall/WinNTChk.cab
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://192.168.25.37:4343/officescan/console/html/ClientInstall/setup.cab
O16 - DPF: {35C3D91E-401A-4E45-88A5-F3B32CD72DF4} (Encrypt Class) - https://192.168.25.37:4343/officescan/console/html/root/AtxEnc.cab
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - https://lva.msllab.microsoft.com/msllabs/vmrc/VMRCActiveXClient.cab
O16 - DPF: {4F3DCE50-E8E7-40AC-AB8D-99F87F1F89BD} (Trend Micro OfficeScan Management Console) - https://192.168.25.37:4343/officescan/console/html/root/AtxConsole.cab
O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) - https://192.168.25.37:4343/officescan/console/html/ClientInstall/RemoveCtrl.cab
O16 - DPF: {A050E865-64E3-431B-8079-F0DFCEA90A2D} (PieChart Class) - https://192.168.25.37:4343/officescan/console/html/root/AtxPie.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:Program FilesCisco SystemsVPN Clientcvpnd.exe
O23 - Service: dldoCATSCustConnectService - Unknown owner - C:WINDOWSSystem32spoolDRIVERSW32X863dldoserv.exe
O23 - Service: dldo_device - - C:WINDOWSsystem32dldocoms.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - C:Program FilesGoogleUpdateGoogleUpdate.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:Program FilesTrend MicroOfficeScan Clientntrtscan.exe
O23 - Service: OfficeScan NT Listener (tmlisten) - Trend Micro Inc. - C:Program FilesTrend MicroOfficeScan Clienttmlisten.exe
O23 - Service: OfficeScan NT Proxy Service (TmProxy) - Trend Micro Inc. - C:Program FilesTrend MicroOfficeScan ClientTmProxy.exe
--
End of file - 7763 bytes

3.9 on 31960 votes

3.8 on 1214 votes

3.9 on 420 votes

3.7 on 53 votes

4 on 5523 votes