Two RUNdll errors

ajjmh

I just purchased this program because upon starting my pc which is now a few months old I am getting 2 error messages. I have not been able to determine what they mean, can't find them on the internet or anything about them. The 2 errors are both RUNdll errors:

1)C:\Users\AJJMH\AppData\Local\KBDWs327.dll

2)C:\Users\AJJMH\AppData\Local\orucoqaf.dll

First, has anyone ever seen these errors or know what they are for? Second, I was reading above and (not knowing what to do with this program I "assumed" it knew what to do. Therefore I ran a report and put a check in all the boxes and selected "FIX". Since doing this I seem to be having a few more issues like my mouse and keyboard not being recognized. Did I do something to my pc that I should not have? I really don't know anything about this program other than Kim Komando recommended it and I trust her. Finally (I think) third, how I first noticed a problem was while making a movie of photos and the program (Power Director 8 ultra) would close down on me during various functions. This did not happen each time I did those functions, but it did happen at various times on numerous occassions. I paid $1200 for this system to make these movies and I would like to figure out what is wrong and fix it so that I can continue making movies and not have issues. I hope someone can help me - PLEASE.

Please guide me to getting my pc back to good running order. My system is a Cyberpower unit with Win 7 Premium- 64 bit OS. I have an Intel(R) Core(TM) i5 CPU 650@3.20GHz 3.10, 4.0 GB Ram, I run McAfee as my security system. Is there anything else I should mention?

I see there seems to be a lot to this program for reg cleaning and I am not familiar with it or any other at all so please talk to me with that in mind. I am pretty good with common sense. Thanks.

Any and ALL assistance is greatly appreciated.

redseujac

First of all you have to give some more details.

Which operating system do you use?

Which version of jv16 PowerTools did you use?

Which tool did you use? Registry Cleaner? With which settings? Did you use the default settings?

Did you let the program make a backup(s) before clicking on "Fix"?

If so, have you restored those backup(s)?

leonardo

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

redseujac

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

redseujac

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

ajjmh

Re: MRU Data Question

by redseujac on Sat Aug 28, 2010 11 am

First of all you have to give some more details.

Which operating system do you use? Yes I am using a Win 7 64 bit system.

Which version of jv16 PowerTools did you use? It is the Jv16 2010 version of Macecraft. If there is more info relating to the version, please help me understand where to find it. I have NO experience with this type of program. Thanks.

Which tool did you use? Registry Cleaner? With which settings? Did you use the default settings? I originally assumed the CLCleaner came with the Macecraft Software but now I see it is: CLCleaner-PowerDirector. It appears that Cyberlink (?) put this on the computer. I have looked through the properties and do not see any other data that describes this any more than what I have, meaning no version or other type descriptor. I have not changed any of these settings so I am guessing they are default settings.

Did you let the program make a backup(s) before clicking on "Fix"? I do believe the Macecraft software program said it was storing a back up, however I am not sure where to verify that. Wouldn't I be able to reset the computer itself thought to an earlier time if the Macecraft software did not save for some reason?

If so, have you restored those backup(s)? No I will try to locate the backup within the Macecraft progrram and restore, if I am unable I can try to reset the computer to an earlier time. Is there a preference on which I should do?

Please remember that I am TOTALLY NEW TO THIS TYPE OF PROGRAM, consider me UNEDUCATED about anything to do with CLCleaner and Macecraft software. Thanks.

redseujac

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

leonardo

AJJMH wrote

Which version of jv16 PowerTools did you use? It is the Jv16 2010 version of Macecraft. If there is more info relating to the version, please help me understand where to find it. I have NO experience with this type of program. Thanks.

Which tool did you use? Registry Cleaner? With which settings? Did you use the default settings? I originally assumed the CLCleaner came with the Macecraft Software but now I see it is: CLCleaner-PowerDirector. It appears that Cyberlink (?) put this on the computer. I have looked through the properties and do not see any other data that describes this any more than what I have, meaning no version or other type descriptor. I have not changed any of these settings so I am guessing they are default settings.

Please remember that I am TOTALLY NEW TO THIS TYPE OF PROGRAM, consider me UNEDUCATED about anything to do with CLCleaner and Macecraft software.

Are you really sure that you used Macecraft jv16 Power Tools?

Does the main window look like this? If so than it is obvious to click the 'BackUp botton' to start the Restore process of the BackUp you hopefully took.

Clicking the 'Help" button shows a pull down menu, click 'About jv16 Power Tools' to show you the version that you are using.

However if you did NOT take a BackUp or if you did not use jv16 Power Tools, than I can not help you further!

ajjmh

Allow me to try to clarify and answer your questions. YES, I had 2 RUNDLL errors PRIOR to installing Macecraft jv16 2010. Yes my page looks like the one in the photo. Yes I have begun to restore the previous things I did VIA Macecraft jv16 2010. NO the RUNDLL errors did not occur as a result of jv16, HOWEVER If I DID NOT HAVE these errors, I would not have purchased this program. Prior to this my pc was working just fine. So in an attempt to identify and fix those 2 problems with my pc (since I could not identify via internet what the 2 RUNDLL errors controlled) I purchased Macecraft jv16 2010. Great, once I have restored all of the fixes I performed via this program what next? Will this program identify the source of the RUNDLL errors and allow me to fix them via this program or not? Did I make a mistake purchasing this program?????? I still have some files to restore (replace via backup with jv16) but at this moment the main page of jv16 2010 shows my pc at 94% health and my registry at 89% health. When I started (prior to any fixes) I believe both said 87 or 89% health. So I would like to learn more about this program and use it to my advantage and make my pc and registry as healthy as possible. I will continue restoring (via backup of jv16 2010) my pc to original settings and then can somone please guide me through the process of using this program and getting the most out of it for my pc and registry????

Thanks, Hope that clears up any questions.

AJJMH

leonardo

Sorry, we encountered an error while displaying this content. If you're a user, please try again later. If you're an administrator, take a look in your Flarum log files for more information.

siliconman01

AJJMH wrote
I just purchased this program because upon starting my pc which is now a few months old I am getting 2 error messages. I have not been able to determine what they mean, can't find them on the internet or anything about them. The 2 errors are both RUNdll errors:

1)C:\Users\AJJMH\AppData\Local\KBDWs327.dll

2)C:\Users\AJJMH\AppData\Local\orucoqaf.dll

First, has anyone ever seen these errors or know what they are for? Second, I was reading above and (not knowing what to do with this program I "assumed" it knew what to do. .

These 2 dlls look to me to be associated with malware/spyware. I suspect what is causing these errors is that malware was removed at some time; however, the registry keys that activated the malware dlls were not adequately removed by whatever security program removed the malware dlls. (It is characteristic that a DLL is associated with malware if no results occur when googling them.) Please do this:

1. Go to the link below and download/install freebie program Hijackthis V2.0.4

http://free.antivirus.com/hijackthis/

2. After HJT is installed, run a scan with HiJackthis and post the scan log back here.

If I am correct in my premise, we will be able to fix this problem via Hijackthis. DO NOT fix anything with Hijackthis until I have a chance to review the posted scan log.

ajjmh

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 3 PM, on 9/4/2010

Platform: Windows 7 (WinNT 6.00.3504)

MSIE: Internet Explorer v8.00 (8.00.7600.16385)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\Internet Explorer\IELowutil.exe

C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.exe

C:\Program Files (x86)\CyberLink\PowerDirector\PDHanumanSvr.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe

C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Users\AJJMH\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AZZCN3TB\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

F2 - REG.ini: UserInit=userinit.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll

O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

O2 - BHO: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0379.0\npwinext.dll

O4 - HKLM\..\Run: "C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe" /runkey

O4 - HKLM\..\Run: C:\PROGRA~2\McAfee\MHN\McENUI.exe /hide

O4 - HKLM\..\Run: "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume

O4 - HKLM\..\Run: "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: C:\Users\AJJMH\AppData\Local\lumhdbavl\dwepljxtssd.exe

O4 - HKCU\..\Run: rundll32.exe "C:\Users\AJJMH\AppData\Local\KBDWs327.dll",Startup

O4 - HKCU\..\Run: C:\Users\AJJMH\AppData\Local\acyyfrjpn\dnlmdattssd.exe

O4 - HKCU\..\Run: rundll32.exe "C:\Users\AJJMH\AppData\Local\orucoqaf.dll",Startup

O4 - HKCU\..\Run: C:\Windows\System32\StikyNot.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} (FBootloaderAX) - http://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab?1270740276418

O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe

O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe

O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mna\mcnasvc.exe

O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe

O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~2\COMMON~1\mcafee\mcproxy\mcproxy.exe

O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe

O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe

O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

End of file - 10665 bytes

siliconman01

Okay, please do this:

1. Run another Hijackthis scan. When the scan is completed, place a checkmark in the box next to the following items. BE SURE that these are the only items that are checkmarked.

O4 - HKCU\..\Run: rundll32.exe "C:\Users\AJJMH\AppData\Local\KBDWs327.dll",Startup

O4 - HKCU\..\Run: rundll32.exe "C:\Users\AJJMH\AppData\Local\orucoqaf.dll",Startup

2. Click on Fix Checked which is at the lower left of the Hijackthis windows.

3. Confirm that you want HJT to fix these items and let it fix them.

4. Close HJT and reboot

You should no longer get the 2 Rundll errors on system reboot.

There are two other 04 entries that I am suspicious of. They are:

O4 - HKCU\..\Run: C:\Users\AJJMH\AppData\Local\lumhdbavl\dwepljxtssd.exe

O4 - HKCU\..\Run: C:\Users\AJJMH\AppData\Local\acyyfrjpn\dnlmdattssd.exe

Please make all files and folders visible on your computer via the instructions in the link below

http://www.bleepingcomputer.com/tutorials/tutorial151.html

Would you please perform a SEARCH on your C drive and see if files dwepljxtssd.exe and

dnlmdattssd.exe exist on your computer.

Also do have solid state disk drives on your computer?

It looks to me like your Windows 7 x64 system was infected with Antispyware Soft which is described in the link below. McAfee must have detected and quarantined this nasty.

http://www.precisesecurity.com/rogue/antispyware-soft/

ajjmh

Siliconman01 you are awesome. I am going to try this right now. Thanks. I will report back on this.

ajjmh

Siliconman,

I have performed the instructions you left. I am happy to report that the 2 rundll errors are gone upon rebooting my system. I have selected the 2 lines you listed and fixed them. I also have performed a search for the two files you requested I search for on my C drive. Neither show up.

As far as you question on the solid state drive - I am not sure. Not 100% sure what the drives I use are but let me try to answer this. I do use the little flash drives from Sandisk and I also have a Western Digital 1T external hard drive. I will be adding a LG Internal/GH24 DVD writer with lightscribe to my existing system. The only drive in my pc now is the DVD Super Writemaster that was installed by Cyberpower. It does not have any other markings on it to identify the namebrand, as well as the multiple ports for various sizes of photo chips. Don't know if that answers the SSD question or not. I have tried looking up that info to be more precise but sorry, I just don't have any experience in that lingo.

Is there anything else you would recommend I do now or on a regular basis to keep my pc up to like new status? I have also been having problems with one of my programs crashing. The program is the PowerDirector 8 Ultra. I ususally crashes after I have been working with it for an hour or so, and while making changes to the timeline. What are the chances that these 2 files have been causing that? Any recomendations regarding this problem?

Thanks so much. You have been a huge help and I really appreciate your time.

Sincerely,

Avona (AJJMH)

siliconman01

Okay, first files dwepljxtssd.exe and dnlmdattssd.exe need to be removed from your startup registry. Please do this.

1. Run another HJT scan. When the scan is completed, place a checkmark in the box next to the following two entries. Be sure that these are the only items checkmarked.

O4 - HKCU\..\Run: C:\Users\AJJMH\AppData\Local\lumhdbavl\dwepljxtssd.exe

O4 - HKCU\..\Run: C:\Users\AJJMH\AppData\Local\acyyfrjpn\dnlmdattssd.exe

2. Click on Fix Checked located at the lower left of the HJT window.

3. Confirm that you want HJT to fix these items and let it fix them.

4. Close HiJackThis and reboot.

I recommend that you supplement your system's security. I will send you a Private Message concerning my recommendations. Concerning PowerDirector 8 Ultra crashing, see the "Cons" on the review link below. "A bit buggy" sounds like crash potential. Be sure that you have the latest updates for it.

http://www.pcmag.com/article2/0,2817,2354987,00.asp