Problems setting up powerline homeplugs.....

johnnytee

Potentialy dodgy. I don't know for sure.

I ran combofix. It seemed to be working ok, but i got an error message before it compleated.

aliEnRIK

Run combofix in SAFE MODE then

What was the error message (The fact it didnt work doesnt look good)

johnnytee

Which key do you hit to start in safe mode. I've forgotten.

The error message was something like: 'You cannot rename combofix..... etc'

johnnytee

crikey!
ComboFix 09-03-13.02 - John Tindale 2009-03-14 13:22:17.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.703.396 [GMT 0:00]
Running from: c:\documents and settings\John Tindale\Desktop\ComboFix.exe
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated)
FW: COMODO Firewall Pro *enabled*
.
((((((((((((((((((((((((( Files Created from 2009-02-14 to 2009-03-14 )))))))))))))))))))))))))))))))
.
2009-03-14 11:38 . 2009-03-14 11:38 <DIR> d

---

c:\program files\Trend Micro
2009-03-14 11:27 . 2009-03-14 11:28 <DIR> d

---

c:\program files\NoAdware
2009-03-14 11:16 . 2009-03-14 11:16 <DIR> d

---

c:\program files\filehippo.com
2009-03-12 13:44 . 2009-03-12 13:44 <DIR> d

---

c:\program files\Intellon
2009-03-09 11:37 . 2009-03-09 11:37 <DIR> d

---

c:\program files\Spotify
2009-03-09 11:37 . 2009-03-09 18:08 <DIR> d

---

c:\documents and settings\John Tindale\Application Data\Spotify
2009-02-18 15:34 . 2009-02-18 15:34 <DIR> d

---

c:\program files\Core Design
2009-02-18 13:47 . 2009-02-18 13:57 <DIR> d

---

C:\Win2000
2009-02-18 13:47 . 2009-02-18 13:47 <DIR> d

---

C:\Lang
2009-02-18 12:37 . 2009-02-18 12:37 <DIR> d

---

c:\documents and settings\All Users\Application Data\PC Drivers HeadQuarters
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-14 13:25

---

d

---

w c:\documents and settings\All Users\Application Data\Kontiki
2009-03-10 09:40 15,472 ----a-w c:\documents and settings\John Tindale\Application Data\wklnhst.dat
2009-03-09 14:31

---

d

---

w c:\program files\Google
2009-03-01 12:11

---

d--h--w c:\program files\InstallShield Installation Information
2009-02-25 15:03

---

d

---

w c:\program files\SUPERAntiSpyware
2009-02-18 14:31

---

d

---

w c:\program files\EA GAMES
2009-02-17 16:26

---

d

---

w c:\program files\Lx_cats
2009-02-09 11:13 1,846,784 ----a-w c:\windows\system32\win32k.sys
2008-12-20 23:15 826,368 ----a-w c:\windows\system32\wininet.dll
2008-09-24 09:11 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008092420080925\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"MoneyAgent"="c:\program files\Microsoft Money\System\mnyexpr.exe" [2003-06-18 200704]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-02-25 1830128]
"kdx"="c:\program files\Kontiki\KHost.exe" [2007-04-23 1032640]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-05-03 68856]
"Google Update"="c:\documents and settings\John Tindale\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-05 133104]
"filehippo.com"="c:\program files\filehippo.com\UpdateChecker.exe" [2008-12-31 146432]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X]
"LtMoh"="c:\program files\ltmoh\Ltmoh.exe" [2003-09-05 184320]
"SunJavaUpdateSched"="c:\program files\Java\j2re1.4.2_03\bin\jusched.exe" [2004-07-13 32881]
"MagicKeyboard"="c:\program files\SAMSUNG\MagicKBD\PreMKBD.exe" [2004-04-14 151552]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 344064]
"InCD"="c:\program files\Ahead\InCD\InCD.exe" [2004-04-06 1298542]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-03-17 32768]
"Microsoft Works Update Detection"="c:\program files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe" [2003-06-10 50688]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SMSTray"="c:\program files\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-02-23 126976]
"MAAgent"="c:\program files\MarkAny\ContentSafer\MAAgent.exe" [2007-01-30 57344]
"COMODO Firewall Pro"="c:\program files\Comodo\Firewall\CPF.exe" [2008-03-03 1115728]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-17 266497]
"4oD"="c:\program files\Kontiki\KHost.exe" [2007-04-23 1032640]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-03-29 185896]
"LXCGCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll" [2005-04-27 69632]
"lxcgmon.exe"="c:\program files\Lexmark 2300 Series\lxcgmon.exe" [2005-05-04 200704]
"EzPrint"="c:\program files\Lexmark 2300 Series\ezprint.exe" [2005-06-08 94208]
"FaxCenterServer"="c:\program files\Lexmark Fax Solutions\fm3032.exe" [2005-05-03 299008]
"AGRSMMSG"="AGRSMMSG.exe" [2004-04-13 c:\windows\AGRSMMSG.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Microsoft Find Fast.lnk - c:\program files\Microsoft Office\Office\FINDFAST.EXE [1997-10-10 111376]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
Office Startup.lnk - c:\program files\Microsoft Office\Office\OSA.EXE [1997-10-10 51984]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"!!88485281-8b4b-4f8d-9ede-82e29a064277}"= "c:\progra~1\MarkAny\CONTEN~1\MACSMA~1.DLL" [2004-11-23 192512]
"!!5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-21 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-01-01 12:01 356352 c:\program files\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.iv31"= c:\windows\System32\ir32_32.dll
"vidc.iv32"= c:\windows\System32\ir32_32.dll
"SENTINEL"= snti386.dll
"vidc.aasc"= aasc32.dll
"vidc.aflc"= flccodec32.dll
"vidc.afli"= flccodec32.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\lxcgcoms.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Spotify\\spotify.exe"=
R0 atiide;atiide;c:\windows\system32\drivers\atiide.sys [2004-06-14 5632]
R0 avgntmgr;avgntmgr;c:\windows\system32\drivers\avgntmgr.sys [2008-03-03 22336]
R1 avgntdd;avgntdd;c:\windows\system32\drivers\avgntdd.sys [2008-03-03 45376]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2008-02-29 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2008-02-29 55024]
R2 DOSMEMIO;MEMIO;c:\windows\system32\MEMIO.SYS [2004-07-13 4300]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2006-02-16 4096]
R3 SWL52N5;SAMSUNG SWL5200 Wireless Network Adapter Service;c:\windows\system32\drivers\swl52n5.sys [2004-08-21 378816]
R3 WebSTARXP;Scientific Atlanta WebSTAR 100 & 200 series Cable Modem;c:\windows\system32\drivers\SACMXP1.sys [2008-03-03 14336]
S3 o1394bul;o1394bul;\??\c:\docume~1\JOHNTI~1\LOCALS~1\Temp\o1394bul.sys --> c:\docume~1\JOHNTI~1\LOCALS~1\Temp\o1394bul.sys [?]
S3 PLCND532;PLCND532 NDIS Protocol Driver;c:\windows\system32\drivers\PLCND532.sys [2008-03-05 26656]
S3 wlsam48d;Samsung PCCard Service;c:\windows\system32\drivers\wlsam48d.sys [2004-07-13 167936]
.
Contents of the 'Scheduled Tasks' folder
2009-03-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2337189895-375348414-24971217-1005.job
- c:\documents and settings\John Tindale\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-05 13:39]
2004-10-19 c:\windows\Tasks\Symantec NetDetect.job
- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2002-08-07 08:04]
.
- - - - ORPHANS REMOVED - - - -
HKCU-Run-Veoh - c:\program files\Veoh Networks\Veoh\VeohClient.exe

.

---

Supplementary Scan

---

.
uLocal Page = \blank.htm
uStart Page = hxxp://www.google.co.uk/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-14 13:25:52
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCGCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.

---

LOCKED REGISTRY KEYS

---

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\:õwjY*]
"DisplayName"="???\16?\11\09"
"DeviceDesc"="???\16?\11\09"
"ProviderName"="???\11??@\11??"
"MFG"="???????"
"ReinstallString"=".10.1000.3"
"DeviceInstanceIds"=multi:"s:\\mainchipsetdriver\\ba46-00181a\\ba46-00181a06\\sbdrv\\smbus\\smbusati.inf\00"
.

---

DLLs Loaded Under Running Processes

---

- - - - - - - > 'winlogon.exe'(868)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
Completion time: 2009-03-14 13:27:51
ComboFix-quarantined-files.txt 2009-03-14 13:27:23
Pre-Run: 7,206,719,488 bytes free
Post-Run: 8,266,182,656 bytes free
153 --- E O F --- 2009-03-11 09:05:02

aliEnRIK

Ok

I cant see anything wrong with the log

Id be tempted to uninstall COMODO (and switch on Windows firewall) and see how that goes

aliEnRIK

Main thing is getting the ethernet port working. If you cant then your homeplugs are useless

johnnytee

Ok

I cant see anything wrong with the log

Id be tempted to uninstall COMODO (and switch on Windows firewall) and see how that goes

Thanks Rik. Will give it a go later.

johnnytee

Ok

I cant see anything wrong with the log

Id be tempted to uninstall COMODO (and switch on Windows firewall) and see how that goes

Tried that Rik. Still no go. Is there any way I can check the ethernet port is working correctly?

aliEnRIK

I dont know how to myself no.

Did you try updating the driver like I said?

Did any driver discs come with the computer?

Try running LSPFIX

Lorian

Does the link light on the ethernet port on you laptop come on when you connect it to the "modem". You should get a tiny green light right next to the cable you plug in.

What type of modem is it anywhere, are we sure it's a network port, I didn't read all the previous posts, sorry.