Hello, I am very happy I found this site. I have tried everything I can think of and cannot get RID of this thing. This all started after Xmas. My Gf's daughter got one of those cheap china made MP4 players for Xmas. When we installed the AVI converter that came on it ONTO my GF's computer. I noticed the computer started to be sluggish and act funny. I found out I did not have access to TASK MANAGER or REGEDIT. I then decided, Okay i'll just format. I did a quick format and had task manager back. HOWEVER, by the time I was done loading all of my programs, ( yes I do all of windows updates ) This thing had some how gotten me again. NO taskmanager or regedit. It said Task manager has been disabled by the administrator! I AM THE ADMINISTRATOR!! I've been building pc's since 98 and have NEVER had this happen. I then decided OKAY ill just do a FULL format this time. I then did a full format and loaded everything sequentially like I always do, and guess what? somehow this thing had gotten me AGAIN!!!!!! SO now I have no idea where this thing comes from or if I ever REALLY got rid of it in the first place. Could this thing be getting me Via Internet Explorer? because on this computer, thats is what I am using. I cannot run a virus scan with anti vir because when I click on the button, nothing happens. This virus will not let it run but, when I reboot the anti Vir GUARD itself shows a Sality.32 virus. I cannot go into safe mode because when I do that it flashes a blue error screen at me but its so quick I cant read it. It then proceeds to boot normally. Every TOOL that I use to try to get to this virus gets corrupted within a matter of 30 minutes or so to where the tool will not even run. SO without further delay, I only have so much hair left!! Here are some logs for you guys. and TY


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:25:10 PM, on 1/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Portrait Displays\ImageTune\dthtml.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Portrait Displays\ImageTune\dtsslsrv.exe
C:\Program Files\Portrait Displays\ImageTune\DTSRVC.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\WINMINE.EXE
C:\WINDOWS\explorer.exe
C:\DOCUME~1\topaz01\LOCALS~1\Temp\icou.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - Global Startup: ImageTune.lnk = C:\Program Files\Portrait Displays\ImageTune\dthtml.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1231562677031
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Asset Management Daemon - Unknown owner - C:\Program Files\Portrait Displays\ImageTune\dtsslsrv.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Portrait Displays\ImageTune\DTSRVC.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5451 bytes
ComboFix 09-01-10.03 - topaz01 2009-01-11 13:32:39.3 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.824 [GMT -5:00]
Running from: c:\documents and settings\topaz01\Desktop\ComboFix.exe
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated)
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-12-11 to 2009-01-11 )))))))))))))))))))))))))))))))
.

2009-01-11 01:47 . 2009-01-11 01:47d--------c:\program files\Trend Micro
2009-01-11 01:14 . 2009-01-11 01:21250--a------c:\windows\gmer.ini
2009-01-11 01:03 . 2009-01-11 01:03d--------c:\program files\Digital Support
2009-01-11 01:01 . 2009-01-11 01:01d--------c:\program files\Avira
2009-01-11 01:01 . 2009-01-11 01:01d--------c:\documents and settings\All Users\Application Data\Avira
2009-01-11 00:35 . 2009-01-11 00:35d--------c:\documents and settings\topaz01\Application Data\Digital Support
2009-01-11 00:08 . 2009-01-11 01:30d--------c:\program files\Malwarebytes' Anti-Malware
2009-01-11 00:08 . 2009-01-11 00:08d--------c:\documents and settings\topaz01\Application Data\Malwarebytes
2009-01-11 00:08 . 2009-01-11 00:08d--------c:\documents and settings\All Users\Application Data\Malwarebytes
2009-01-11 00:08 . 2009-01-04 18:3938,496--a------c:\windows\system32\drivers\mbamswissarmy.sys
2009-01-11 00:08 . 2009-01-04 18:3915,504--a------c:\windows\system32\drivers\mbam.sys
2009-01-10 23:58 . 2009-01-10 23:58d--------c:\documents and settings\topaz01\Application Data\Windows Search
2009-01-10 23:29 . 2009-01-10 23:29d--------c:\windows\system32\Lang
2009-01-10 23:29 . 2009-01-10 23:29940,794--a------c:\windows\system32\LoopyMusic.wav
2009-01-10 23:29 . 2009-01-10 23:29146,650--a------c:\windows\system32\BuzzingBee.wav
2009-01-10 23:29 . 2009-01-10 23:2960,416--a------c:\windows\ALCFDRTM.VER
2009-01-10 23:29 . 2009-01-10 23:2960,416--a------c:\windows\ALCFDRTM.EXE
2009-01-10 23:25 . 2009-01-10 23:25d--------c:\program files\Windows Defender
2009-01-10 23:13 . 2009-01-10 23:13d--------c:\program files\Lavasoft
2009-01-10 23:09 . 2003-06-25 16:05335,992--a------c:\windows\system32\TweakUI.exe
2009-01-10 23:09 . 2002-06-21 15:09160,217--a------c:\windows\system32\PowerToysLicense.rtf
2009-01-10 22:56 . 2009-01-10 22:56d--------c:\program files\Safer Networking
2009-01-10 14:06 . 2009-01-10 14:06d--------c:\documents and settings\topaz01\Application Data\Safer Networking
2009-01-10 14:00 . 2009-01-10 14:01d--------c:\documents and settings\topaz01\Application Data\MalwareRemovalBot
2009-01-10 13:46 . 2009-01-10 23:13d--------c:\documents and settings\All Users\Application Data\Lavasoft
2009-01-10 13:45 . 2009-01-10 13:45d--------c:\program files\Ventrilo
2009-01-10 13:45 . 2009-01-10 13:45d--------c:\program files\Rainlendar2
2009-01-10 13:45 . 2009-01-10 23:13d--------c:\program files\Common Files\Wise Installation Wizard
2009-01-10 13:45 . 2009-01-11 10:50d--------c:\documents and settings\topaz01\.rainlendar2
2009-01-10 13:45 . 2009-01-10 13:45262--a------c:\windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
2009-01-10 13:42 . 2009-01-11 01:05d--------c:\documents and settings\topaz01\Tracing
2009-01-10 13:41 . 2009-01-10 13:41d--------c:\program files\Windows Live SkyDrive
2009-01-10 13:41 . 2009-01-10 13:41d--------c:\program files\Windows Live
2009-01-10 13:41 . 2009-01-10 13:41d--------c:\program files\Microsoft
2009-01-10 13:38 . 2009-01-10 13:38d--------c:\program files\Common Files\Windows Live
2009-01-10 13:35 . 2009-01-10 13:35d--------c:\documents and settings\topaz01\Application Data\acccore
2009-01-10 13:34 . 2009-01-10 13:34d--------c:\program files\Common Files\AOL
2009-01-10 13:34 . 2009-01-10 13:34d--------c:\program files\AIM6
2009-01-10 13:34 . 2009-01-10 15:20d--------c:\documents and settings\All Users\Application Data\Viewpoint
2009-01-10 13:34 . 2009-01-10 13:35d--------c:\documents and settings\All Users\Application Data\AOL OCP
2009-01-10 13:34 . 2009-01-10 13:34d--------c:\documents and settings\All Users\Application Data\AOL
2009-01-10 13:34 . 2009-01-10 13:34d--------c:\documents and settings\All Users\Application Data\acccore
2009-01-10 13:34 . 2009-01-10 13:34462--ah-----C:\IPH.PH
2009-01-10 13:33 . 2009-01-10 13:33d--------c:\program files\*censored* NFO Viewer
2009-01-10 10:31 . 2009-01-11 10:41d--------c:\program files\World of Warcraft
2009-01-10 10:31 . 2009-01-10 11:29d--------c:\program files\Common Files\Blizzard Entertainment
2009-01-10 10:30 . 2009-01-10 10:30d--------c:\documents and settings\All Users\Application Data\Blizzard
2009-01-10 04:42 . 2008-10-16 14:06268,648--a------c:\windows\system32\mucltui.dll
2009-01-10 04:42 . 2008-10-16 14:0627,496--a------c:\windows\system32\mucltui.dll.mui
2009-01-10 00:53 . 2009-01-10 13:24d--------c:\program files\Common Files\LightScribe
2009-01-10 00:53 . 2005-04-20 06:322,916,352---------c:\windows\UNNMP.exe
2009-01-10 00:53 . 2006-05-23 11:3047,894---------c:\windows\UNNMP.cfg
2009-01-10 00:52 . 2009-01-10 00:52d--------c:\program files\Common Files\Nero
2009-01-10 00:52 . 2006-01-12 16:40225,280--a------c:\windows\system32\NeroCheck.exe
2009-01-10 00:51 . 2009-01-10 00:51d--------c:\program files\Common Files\Ahead
2009-01-10 00:51 . 2009-01-10 00:53d--------c:\program files\Ahead
2009-01-10 00:51 . 2009-01-10 00:51d--------c:\documents and settings\All Users\Application Data\Ahead
2009-01-10 00:51 . 2005-07-29 10:122,977,792---------c:\windows\UNNeroVision.exe
2009-01-10 00:51 . 2004-07-26 17:161,568,768---------c:\windows\system32\ImagX7.dll
2009-01-10 00:51 . 2004-07-26 17:16476,320---------c:\windows\system32\ImagXpr7.dll
2009-01-10 00:51 . 2004-07-26 17:16471,040---------c:\windows\system32\ImagXRA7.dll
2009-01-10 00:51 . 2004-07-09 09:43364,544---------c:\windows\system32\TwnLib4.dll
2009-01-10 00:51 . 2004-07-26 17:16262,144---------c:\windows\system32\ImagXR7.dll
2009-01-10 00:51 . 2006-05-23 11:30179,288---------c:\windows\UNNeroVision.cfg
2009-01-10 00:51 . 2000-06-26 11:45106,496--a------c:\windows\system32\TwnLib20.dll
2009-01-10 00:51 . 2001-06-26 08:1538,912---------c:\windows\system32\picn20.dll
2009-01-10 00:51 . 2001-03-08 19:3024,064---------c:\windows\system32\msxml3a.dll
2009-01-10 00:49 . 2009-01-10 00:49d--------c:\documents and settings\topaz01\Application Data\DisplayTune
2009-01-10 00:47 . 2009-01-10 00:47d--------c:\program files\Portrait Displays
2009-01-10 00:47 . 2005-03-04 15:3711,776--a------c:\windows\system32\drivers\pdiddcci.sys
2009-01-10 00:47 . 2005-03-04 15:348,960--a------c:\windows\system32\drivers\PdiPorts.sys
2009-01-10 00:41 . 2007-03-12 16:423,495,784--a------c:\windows\system32\d3dx9_33.dll
2009-01-10 00:39 . 2009-01-10 00:39d--------c:\windows\nview
2009-01-10 00:39 . 2008-01-03 17:26360,448--a------c:\windows\system32\nvudisp.exe
2009-01-10 00:39 . 2009-01-11 01:05160,827--a------c:\windows\system32\nvapps.xml
2009-01-10 00:39 . 2008-01-03 17:2617,737--a------c:\windows\system32\nvdisp.nvu
2009-01-10 00:38 . 2009-01-10 01:00d--------c:\documents and settings\topaz01\Application Data\DivX
2009-01-10 00:37 . 2009-01-10 13:23d--------c:\program files\DivX
2009-01-10 00:36 . 2009-01-10 00:36d--------c:\program files\Common Files\Adobe
2009-01-10 00:35 . 2008-04-13 13:4526,368--a--c---c:\windows\system32\dllcache\usbstor.sys
2009-01-10 00:18 . 2009-01-10 00:18d--------c:\windows\system32\GroupPolicy
2009-01-10 00:18 . 2009-01-10 00:18d--------c:\program files\Windows Media Connect 2
2009-01-10 00:18 . 2009-01-10 00:18d--------c:\program files\Windows Desktop Search
2009-01-10 00:18 . 2009-01-10 00:18d--------c:\program files\Microsoft Silverlight
2009-01-10 00:18 . 2009-01-10 00:18d--------c:\documents and settings\topaz01\Application Data\Windows Desktop Search
2009-01-10 00:18 . 2008-03-07 12:02192,000-----c---c:\windows\system32\dllcache\offfilt.dll
2009-01-10 00:18 . 2008-03-07 12:0298,304-----c---c:\windows\system32\dllcache\nlhtml.dll
2009-01-10 00:18 . 2008-03-07 12:0229,696-----c---c:\windows\system32\dllcache\mimefilt.dll
2009-01-10 00:17 . 2009-01-10 13:45d--------c:\windows\system32\LogFiles
2009-01-10 00:17 . 2009-01-10 00:17d--------c:\windows\system32\drivers\UMDF
2009-01-10 00:15 . 2009-01-10 00:15d--------c:\windows\system32\URTTemp
2009-01-10 00:04 . 2008-10-16 15:386,066,176-----c---c:\windows\system32\dllcache\ieframe.dll
2009-01-10 00:04 . 2007-04-17 04:322,455,488-----c---c:\windows\system32\dllcache\ieapfltr.dat
2009-01-10 00:04 . 2007-03-08 00:10991,232-----c---c:\windows\system32\dllcache\ieframe.dll.mui
2009-01-10 00:04 . 2008-10-16 15:38459,264-----c---c:\windows\system32\dllcache\msfeeds.dll
2009-01-10 00:04 . 2008-10-16 15:38383,488-----c---c:\windows\system32\dllcache\ieapfltr.dll
2009-01-10 00:04 . 2008-10-16 15:38267,776-----c---c:\windows\system32\dllcache\iertutil.dll
2009-01-10 00:04 . 2008-10-16 15:3863,488-----c---c:\windows\system32\dllcache\icardie.dll
2009-01-10 00:04 . 2008-10-16 15:3852,224-----c---c:\windows\system32\dllcache\msfeedsbs.dll
2009-01-10 00:04 . 2008-10-16 08:1113,824-----c---c:\windows\system32\dllcache\ieudinit.exe
2009-01-10 00:01 . 2008-08-14 05:112,189,184-----c---c:\windows\system32\dllcache\ntoskrnl.exe
2009-01-10 00:01 . 2008-08-14 05:092,145,280-----c---c:\windows\system32\dllcache\ntkrnlmp.exe
2009-01-10 00:01 . 2008-08-14 04:332,066,048-----c---c:\windows\system32\dllcache\ntkrnlpa.exe
2009-01-10 00:01 . 2008-08-14 04:332,023,936-----c---c:\windows\system32\dllcache\ntkrpamp.exe
2009-01-10 00:01 . 2008-09-15 07:121,846,400-----c---c:\windows\system32\dllcache\win32k.sys
2009-01-10 00:01 . 2008-09-04 12:151,106,944-----c---c:\windows\system32\dllcache\msxml3.dll
2009-01-10 00:01 . 2008-10-24 06:21455,296-----c---c:\windows\system32\dllcache\mrxsmb.sys
2009-01-10 00:01 . 2008-10-15 11:34337,408-----c---c:\windows\system32\dllcache\netapi32.dll
2009-01-10 00:01 . 2008-09-08 05:41333,824-----c---c:\windows\system32\dllcache\srv.sys
2009-01-10 00:01 . 2008-05-01 09:33331,776-----c---c:\windows\system32\dllcache\msadce.dll
2009-01-10 00:01 . 2008-08-14 05:04138,496-----c---c:\windows\system32\dllcache\afd.sys
2009-01-10 00:00 . 2008-04-11 14:04691,712-----c---c:\windows\system32\dllcache\inetcomm.dll
2009-01-10 00:00 . 2008-06-13 06:05272,128-----c---c:\windows\system32\dllcache\bthport.sys
2009-01-10 00:00 . 2008-05-08 09:02203,136-----c---c:\windows\system32\dllcache\rmcast.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-10 05:47---------d--h--wc:\program files\InstallShield Installation Information
2009-01-10 04:39---------d-----wc:\program files\Realtek Sound Manager
2009-01-10 04:39---------d-----wc:\program files\AvRack
2009-01-10 04:38---------d-----wc:\program files\Common Files\InstallShield
2009-01-10 04:33---------d-----wc:\program files\microsoft frontpage
2008-12-11 00:3386,016----a-wc:\windows\system32\dpl100.dll
2008-12-11 00:33200,704----a-wc:\windows\system32\dtu100.dll
2008-12-09 02:28593,920----a-wc:\windows\system32\dpuGUI11.dll
2008-12-09 02:2857,344----a-wc:\windows\system32\dpv11.dll
2008-12-09 02:28344,064----a-wc:\windows\system32\dpus11.dll
2008-12-09 02:28294,912----a-wc:\windows\system32\dpu11.dll
2008-12-03 03:3749,480----a-wc:\windows\system32\sirenacm.dll
2008-11-06 16:37524,288----a-wc:\windows\system32\DivXsm.exe
2008-11-06 16:373,596,288----a-wc:\windows\system32\qt-dx331.dll
2008-11-06 16:37129,784------wc:\windows\system32\pxafs.dll
2008-11-06 16:37120,056------wc:\windows\system32\pxcpyi64.exe
2008-11-06 16:37118,520------wc:\windows\system32\pxinsi64.exe
2008-11-06 16:35200,704----a-wc:\windows\system32\ssldivx.dll
2008-11-06 16:351,044,480----a-wc:\windows\system32\libdivx.dll
2008-11-06 16:33823,296----a-wc:\windows\system32\divx_xx0c.dll
2008-11-06 16:33823,296----a-wc:\windows\system32\divx_xx07.dll
2008-11-06 16:33815,104----a-wc:\windows\system32\divx_xx0a.dll
2008-11-06 16:33802,816----a-wc:\windows\system32\divx_xx11.dll
2008-11-06 16:33684,032----a-wc:\windows\system32\DivX.dll
2008-11-06 16:3312,288----a-wc:\windows\system32\DivXWMPExtType.dll
2008-10-23 12:36286,720----a-wc:\windows\system32\gdi32.dll
2008-10-16 20:38826,368----a-wc:\windows\system32\wininet.dll
2008-10-16 19:13202,776----a-wc:\windows\system32\wuweb.dll
2008-10-16 19:131,809,944----a-wc:\windows\system32\wuaueng.dll
2008-10-16 19:12561,688----a-wc:\windows\system32\wuapi.dll
2008-10-16 19:12323,608----a-wc:\windows\system32\wucltui.dll
2008-10-16 19:0992,696----a-wc:\windows\system32\cdm.dll
2008-10-16 19:0951,224----a-wc:\windows\system32\wuauclt.exe
2008-10-16 19:0943,544----a-wc:\windows\system32\wups2.dll
2008-10-16 19:0834,328----a-wc:\windows\system32\wups.dll
2008-10-16 19:07208,744----a-wc:\windows\system32\muweb.dll
.

((((((((((((((((((((((((((((( [emailprotected]_ 1.39.33.45 )))))))))))))))))))))))))))))))))))))))))
.I take it you didn't install the AVI converter again, after each format?I forgot to mention that, no I did not.