DDS (Ver_10-03-17.01) - NTFSx86 Run by [removed] at 0:00:52.29 on 30/06/2010 Internet Explorer: 8.0.7600.16385 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.2.1033.18.2047.489 [GMT -3:00] ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\PnkBstrA.exe C:\Windows\system32\PnkBstrB.exe C:\Program Files\Sandboxie\SbieSvc.exe C:\Windows\system32\nvvsvc.exe C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\WUDFHost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\System32\svchost.exe -k secsvcs C:\Program Files\Ventrilo\Ventrilo.exe C:\Program Files\Heroes of Newerth\hon.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil10d.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Users\ROB\Desktop\dds.scr C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uStart Page = hxxp://www.facebook.com/ BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll mRun: [PC Pitstop Optimize Reminder] c:\program files\pcpitstop\optimize3\Reminder-Optimize3.exe mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} - hxxp://www.pcpitstop.com/internet/pcpConnCheck.cab DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} - hxxp://utilities.pcpitstop.com/Optimize3/pcpitstop2.dll Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll ============= SERVICES / DRIVERS =============== R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2010-4-3 240232] R3 SbieDrv;SbieDrv;c:\program files\sandboxie\SbieDrv.sys [2010-2-3 115432] R3 VST_DPV;VST_DPV;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992] R3 VSTHWBS2;VSTHWBS2;c:\windows\system32\drivers\VSTBS23.SYS [2009-7-13 266752] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888] S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-5-29 1343400] S4 PCPitstop Scheduling;PCPitstop Scheduling;c:\program files\pcpitstop\PCPitstopScheduleService.exe [2010-6-29 90352] =============== Created Last 30 ================ 2010-06-29 21:43:16 0 d-----w- c:\programdata\PCPitstop 2010-06-29 21:43:16 0 d-----w- c:\program files\PCPitstop 2010-06-28 23:20:31 0 d-----w- c:\program files\PFPortChecker 2010-06-28 16:26:08 0 d-----w- c:\users\rob\appdata\roaming\Malwarebytes 2010-06-28 16:25:55 0 d-----w- c:\programdata\Malwarebytes 2010-06-28 16:25:55 0 d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-06-28 13:43:40 0 d-sh--w- C:\$RECYCLE.BIN 2010-06-28 13:30:28 98816 ----a-w- c:\windows\sed.exe 2010-06-28 13:30:28 77312 ----a-w- c:\windows\MBR.exe 2010-06-28 13:30:28 256512 ----a-w- c:\windows\PEV.exe 2010-06-28 13:30:28 161792 ----a-w- c:\windows\SWREG.exe 2010-06-25 02:17:17 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll 2010-06-25 02:17:17 49472 ----a-w- c:\windows\system32\netfxperf.dll 2010-06-25 02:17:17 297808 ----a-w- c:\windows\system32\mscoree.dll 2010-06-25 02:17:17 295264 ----a-w- c:\windows\system32\PresentationHost.exe 2010-06-25 02:17:17 1130824 ----a-w- c:\windows\system32\dfshim.dll 2010-06-25 01:55:05 977920 ----a-w- c:\windows\system32\wininet.dll 2010-06-25 01:54:24 67584 ----a-w- c:\windows\system32\asycfilt.dll 2010-06-25 01:54:21 2326528 ----a-w- c:\windows\system32\win32k.sys 2010-06-25 01:54:00 34304 ----a-w- c:\windows\system32\atmlib.dll 2010-06-25 01:54:00 293888 ----a-w- c:\windows\system32\atmfd.dll 2010-06-16 08:45:32 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2010-06-16 03:00:43 0 d-----w- c:\users\rob\appdata\roaming\NVIDIA 2010-06-16 02:58:41 138056 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys 2010-06-16 02:58:41 138056 ----a-w- c:\users\rob\appdata\roaming\PnkBstrK.sys 2010-06-16 02:58:09 189248 ----a-w- c:\windows\system32\PnkBstrB.exe 2010-06-16 02:58:05 75064 ----a-w- c:\windows\system32\PnkBstrA.exe 2010-06-16 02:58:04 2419568 ----a-w- c:\windows\system32\pbsvc_apb.exe 2010-06-14 03:54:57 0 d-----w- c:\program files\NVIDIA Corporation 2010-06-14 03:54:20 7772 ----a-w- c:\windows\system32\nvinfo.pb 2010-06-14 03:40:00 0 d-----w- c:\program files\SystemRequirementsLab 2010-06-14 03:32:36 0 d-----w- c:\program files\Realtime Worlds 2010-06-03 04:34:23 0 d-----w- c:\program files\StarCraft II Beta ==================== Find3M ==================== 2010-05-21 17:14:28 221568 ------w- c:\windows\system32\MpSigStub.exe 2010-05-08 06:02:49 77105 ----a-w- c:\windows\War3Unin.dat 2010-05-08 05:44:57 2829 ----a-w- c:\windows\War3Unin.pif 2010-05-08 05:44:57 139264 ----a-w- c:\windows\War3Unin.exe 2010-04-23 07:13:36 2048 ----a-w- c:\windows\system32\tzres.dll 2010-04-03 21:27:00 985704 ----a-w- c:\windows\system32\nvsvc.dll 2010-04-03 21:27:00 66664 ----a-w- c:\windows\system32\nvshext.dll 2010-04-03 21:27:00 13683816 ----a-w- c:\windows\system32\nvcpl.dll 2010-04-03 21:27:00 129640 ----a-w- c:\windows\system32\nvvsvc.exe 2010-04-03 21:27:00 110696 ----a-w- c:\windows\system32\nvmctray.dll 2010-04-02 19:54:38 600680 ----a-w- c:\windows\system32\NVUNINST.EXE 2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat 2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat 2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat 2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat 2009-07-14 04:41:57 174 --sha-w- c:\program files\desktop.ini 2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat 2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat 2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat 2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat 2009-06-10 21:26:35 9633792 --sha-r- c:\windows\fonts\StaticCache.dat 2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe ============= FINISH: 0:01:36.55 ===============