Please check my Hijackthis file for anything malicious.

Hello.

What issues/problems do you have?

I want to see another scan please.

Download and run DDS

We need to see some information about what is happening in your machine. Please perform the following scan:

• Download DDS by sUBs from one of the following links. Save it to your desktop.
  • DDS.scr
  • DDS.pif
• Double click on the DDS icon, allow it to run.
• A small box will open, with an explanation about the tool. No input is needed, the scan is running.
• Notepad will open with the results soon.
• Follow the instructions that pop up for posting the results and then click Ok.
• The black and message box window shall then disappear.
• Please save both log files on your desktop and post the DDS.txt and zip up and attach Attach.txt as instructed.
  

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE

With Regards,
Extremeboy

Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll Notify: avgrsstarter - avgrsstx.dll Notify: igfxcui - igfxdev.dll SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - c:\progra~1\window~4\MpShHook.dll SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\garret\applic~1\mozilla\firefox\profiles\qx7xlm3o.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official FF - prefs.js: keyword.URL - hxxp://www.google.com/search?btnI=I%27m+Feeling+Lucky&q= FF - plugin: c:\program files\google\google updater\2.4.1636.7222\npCIDetect13.dll FF - plugin: c:\program files\google\update\1.2.183.7\npGoogleOneClick8.dll FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} —- FIREFOX POLICIES —- c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3); c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0); c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); ============= SERVICES / DRIVERS =============== R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2009-7-26 12552] R0 EMSC;COMPAL Embedded System Control;c:\windows\system32\drivers\EMSC.sys [2009-7-25 9856] R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-7-26 335240] R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-7-26 27784] R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-7-26 108552] R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2009-6-23 9968] R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-6-23 72944] R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\avg\avg8\avgemc.exe [2009-7-26 908056] R2 avg8wd;AVG8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-7-26 297752] R2 DualView Server;DualView Server Service;c:\program files\program dj\dualview server\dualviewsvc.exe [2008-5-23 126976] R2 Smart Watchdog;Smart Watchdog Service;c:\program files\program dj\smart watchdog\SWDsvc.exe [2008-4-14 208896] R2 WinDefend;Windows Defender;c:\program files\windows defender\MsMpEng.exe [2006-11-3 13592] R3 DualViewFilter;DualViewFilter;c:\windows\system32\drivers\DualviewFilter.sys [2008-5-6 20352] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [2009-7-25 110080] R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2009-7-25 81296] R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-6-23 7408] S2 gupdate1ca0e19fb50558;Google Update Service (gupdate1ca0e19fb50558);c:\program files\google\update\GoogleUpdate.exe [2009-7-26 133104] S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\microsoft sql server\100\shared\sqladhlp.exe [2008-7-10 47128] S4 RsFx0102;RsFx0102 Driver;c:\windows\system32\drivers\RsFx0102.sys [2008-7-10 242712] S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\microsoft sql server\mssql10.sqlexpress\mssql\binn\SQLAGENT.EXE [2008-7-10 369688] =============== Created Last 30 ================ 2009-08-05 13:41 -cd—– c:\windows\system32\dllcache\cache 2009-08-05 13:38 a-dshr– C:\cmdcons 2009-08-05 13:37 219,648 a——- c:\windows\PEV.exe 2009-08-05 13:37 161,792 a——- c:\windows\SWREG.exe 2009-08-05 13:37 98,816 a——- c:\windows\sed.exe 2009-08-04 23:39 –d—– c:\documents and settings\all users\AdobeTemp 2009-08-03 20:59 –d—– c:\program files\common files\Adobe Systems Shared 2009-08-01 15:50 362 a——- c:\windows\Shortcut to WINDOWS.lnk 2009-08-01 01:00 20,205 a——- c:\windows\War3Unin.dat 2009-08-01 01:00 2,829 a——- c:\windows\War3Unin.pif 2009-08-01 01:00 126,976 a——- c:\windows\War3Unin.exe 2009-07-31 23:09 –d—– c:\program files\Warcraft 3 2009-07-31 14:35 –d—– c:\windows\pss 2009-07-31 03:02 0 a—h— c:\windows\system32\drivers\Msft_Kernel_NuidFltr_01005.Wdf 2009-07-31 03:02 21,504 a——- c:\windows\system32\drivers\hidserv.dll 2009-07-31 03:00 –d—– c:\program files\MSXML 4.0 2009-07-30 22:15 –d—– c:\program files\Diablo 2 2009-07-30 22:14 –d—– c:\program files\common files\Blizzard Entertainment 2009-07-30 21:36 664 a——- c:\windows\system32\d3d9caps.dat 2009-07-30 17:53 1,025 a——- c:\windows\system32\sysprs7.tgz 2009-07-30 17:53 1,025 a——- c:\windows\system32\sysprs7.dll 2009-07-30 17:53 1,025 a——- c:\windows\system32\clauth2.dll 2009-07-30 17:53 1,025 a——- c:\windows\system32\clauth1.dll 2009-07-30 17:53 219 a——- c:\windows\system32\lsprst7.tgz 2009-07-30 17:53 87 a——- c:\windows\system32\ssprs.tgz 2009-07-30 17:53 21 a——- c:\windows\SurCode.INI 2009-07-30 17:53 –d—– c:\docume~1\alluse~1\applic~1\Minnetonka Audio Software 2009-07-30 01:02 –d—– c:\program files\common files\HP 2009-07-30 01:00 –d—– c:\program files\common files\Hewlett-Packard 2009-07-30 01:00 –d—– c:\windows\system32\URTTEMP 2009-07-30 00:59 278,584 a——- c:\windows\system32\HPZidr12.dll 2009-07-30 00:59 204,800 a——- c:\windows\system32\HPZipr12.dll 2009-07-30 00:59 94,208 a——- c:\windows\system32\HPZipt12.dll 2009-07-30 00:59 69,632 a——- c:\windows\system32\HPZipm12.exe 2009-07-30 00:59 61,440 a——- c:\windows\system32\HPZinw12.exe 2009-07-30 00:59 57,344 a——- c:\windows\system32\HPZisn12.dll 2009-07-30 00:59 306,688 a——- c:\windows\IsUninst.exe 2009-07-30 00:59 69,444 ——– c:\windows\hpoins05.dat.temp 2009-07-30 00:59 19,696 ——– c:\windows\hpomdl05.dat.temp 2009-07-30 00:25 15,104 ac—— c:\windows\system32\dllcache\usbscan.sys 2009-07-30 00:25 15,104 a——- c:\windows\system32\drivers\usbscan.sys 2009-07-29 17:20 –d—– c:\program files\Trend Micro 2009-07-28 17:01 288 a——- c:\windows\ODBC.INI 2009-07-28 17:01 –d—– c:\program files\Web Publish 2009-07-28 05:20 268,648 a——- c:\windows\system32\mucltui.dll 2009-07-28 05:20 208,744 a——- c:\windows\system32\muweb.dll 2009-07-28 05:20 27,496 a——- c:\windows\system32\mucltui.dll.mui 2009-07-27 13:27 –d—– c:\program files\HP 2009-07-27 13:26 –d—– c:\temp\HP_WebRelease 2009-07-27 13:26 –d—– C:\Temp 2009-07-27 13:19 25,856 ac—— c:\windows\system32\dllcache\usbprint.sys 2009-07-27 13:19 25,856 a——- c:\windows\system32\drivers\usbprint.sys 2009-07-26 22:38 –d-h— C:\$AVG8.VAULT$ 2009-07-26 18:05 –d—– c:\program files\VideoLAN 2009-07-26 18:04 411,368 a——- c:\windows\system32\deploytk.dll 2009-07-26 18:04 73,728 a——- c:\windows\system32\javacpl.cpl 2009-07-26 17:57 26,368 ac—— c:\windows\system32\dllcache\usbstor.sys 2009-07-26 16:49 50,200 a——- c:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.0.1600.22.dll 2009-07-26 16:49 79,896 a——- c:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.0.1600.22.dll 2009-07-26 16:48 –d—– c:\windows\system32\RsFx 2009-07-26 16:47 –d—– c:\program files\MSXML 6.0 2009-07-26 16:38 –d—– c:\program files\Microsoft SQL Server 2009-07-26 16:38 –d—– c:\program files\Microsoft Synchronization Services 2009-07-26 16:38 –d—– c:\program files\Microsoft SQL Server Compact Edition 2009-07-26 16:34 –d—– c:\windows\system32\XPSViewer 2009-07-26 16:33 1,676,288 -c—— c:\windows\system32\dllcache\xpssvcs.dll 2009-07-26 16:33 597,504 -c—— c:\windows\system32\dllcache\printfilterpipelinesvc.exe 2009-07-26 16:33 575,488 -c—— c:\windows\system32\dllcache\xpsshhdr.dll 2009-07-26 16:33 89,088 -c—— c:\windows\system32\dllcache\filterpipelineprintproc.dll 2009-07-26 16:33 1,676,288 ——– c:\windows\system32\xpssvcs.dll 2009-07-26 16:33 575,488 ——– c:\windows\system32\xpsshhdr.dll 2009-07-26 16:33 117,760 ——– c:\windows\system32\prntvpt.dll 2009-07-26 16:33 –d—– C:\1e36b190d63739f30ec025c7f16880 2009-07-26 16:32 –d—– c:\program files\common files\Macrovision Shared 2009-07-26 13:24 32,592 a——- c:\windows\system32\msonpmon.dll 2009-07-26 13:22 –d—– c:\windows\SHELLNEW 2009-07-26 13:20 12,552 a——- c:\windows\system32\drivers\avgrkx86.sys 2009-07-26 13:20 11,952 a——- c:\windows\system32\avgrsstx.dll 2009-07-26 13:20 108,552 a——- c:\windows\system32\drivers\avgtdix.sys 2009-07-26 13:20 335,240 a——- c:\windows\system32\drivers\avgldx86.sys 2009-07-26 13:20 –d—– c:\windows\system32\drivers\Avg 2009-07-26 13:20 –d—– c:\docume~1\alluse~1\applic~1\AVG Security Toolbar 2009-07-26 13:20 –d—– c:\program files\AVG 2009-07-26 13:20 –d—– c:\docume~1\alluse~1\applic~1\avg8 2009-07-26 12:15 24,064 ——– c:\windows\system32\msxml3a.dll 2009-07-26 12:15 499,712 ——– c:\windows\system32\msvcp71.dll 2009-07-26 12:15 348,160 ——– c:\windows\system32\msvcr71.dll 2009-07-26 12:14 –d—– C:\MyWorks 2009-07-26 11:59 107,368 a——- c:\windows\system32\GEARAspi.dll 2009-07-26 11:59 23,400 a——- c:\windows\system32\drivers\GEARAspiWDM.sys 2009-07-26 11:59 –d—– c:\program files\AskBarDis 2009-07-26 11:59 –d—– c:\program files\iPod 2009-07-26 11:59 –d—– c:\program files\uTorrent 2009-07-26 11:59 –d—– c:\docume~1\alluse~1\applic~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} 2009-07-26 11:59 –d—– c:\program files\iTunes 2009-07-26 11:59 –d—– c:\docume~1\garret\applic~1\uTorrent 2009-07-26 11:59 –d—– c:\program files\Bonjour 2009-07-26 11:58 2,060,288 a——- c:\windows\system32\usbaaplrc.dll 2009-07-26 11:58 39,424 a——- c:\windows\system32\drivers\usbaapl.sys 2009-07-26 11:42 –d—– c:\program files\PeerGuardian2 2009-07-26 11:36 1,071,088 a——- c:\windows\system32\MSCOMCTL.OCX 2009-07-26 11:36 118,784 a——- c:\windows\system32\MSSTDFMT.DLL 2009-07-26 11:36 –d—– c:\program files\SpywareBlaster 2009-07-26 11:33 –d—– c:\program files\CCleaner 2009-07-26 11:32 –d—– c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com 2009-07-26 11:32 –d—– c:\program files\SUPERAntiSpyware 2009-07-26 11:32 –d—– c:\docume~1\garret\applic~1\SUPERAntiSpyware.com 2009-07-26 11:31 –d—– c:\program files\common files\Wise Installation Wizard 2009-07-26 11:21 –d—– c:\docume~1\garret\applic~1\Malwarebytes 2009-07-26 11:20 38,160 a——- c:\windows\system32\drivers\mbamswissarmy.sys 2009-07-26 11:20 19,096 a——- c:\windows\system32\drivers\mbam.sys 2009-07-26 11:20 –d—– c:\program files\Malwarebytes' Anti-Malware 2009-07-26 11:20 –d—– c:\docume~1\alluse~1\applic~1\Malwarebytes 2009-07-26 01:48 –d—– c:\windows\system32\LogFiles 2009-07-26 01:05 –d—– c:\program files\Spybot - Search & Destroy 2009-07-26 01:05 –d—– c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy 2009-07-26 00:38 –dsh— c:\documents and settings\garret\IECompatCache 2009-07-26 00:38 –dsh— c:\documents and settings\garret\PrivacIE 2009-07-26 00:37 –dsh— c:\documents and settings\garret\IETldCache 2009-07-26 00:31 81,920 ac—— c:\windows\system32\dllcache\ieencode.dll 2009-07-26 00:31 81,920 a——- c:\windows\system32\ieencode.dll 2009-07-26 00:29 940,794 a——- c:\windows\system32\LoopyMusic.wav 2009-07-26 00:29 146,650 a——- c:\windows\system32\BuzzingBee.wav 2009-07-26 00:28 –d—– c:\docume~1\alluse~1\applic~1\WowVA 2009-07-26 00:09 272,128 -c—— c:\windows\system32\dllcache\bthport.sys 2009-07-26 00:09 272,128 ——– c:\windows\system32\drivers\bthport.sys 2009-07-26 00:09 2,189,056 -c—— c:\windows\system32\dllcache\ntoskrnl.exe 2009-07-26 00:09 2,145,280 -c—— c:\windows\system32\dllcache\ntkrnlmp.exe 2009-07-26 00:09 2,023,936 -c—— c:\windows\system32\dllcache\ntkrpamp.exe 2009-07-26 00:07 455,296 -c—— c:\windows\system32\dllcache\mrxsmb.sys 2009-07-26 00:04 13,646 a——- c:\windows\system32\wpa.bak 2009-07-26 00:03 2,560 ——– c:\windows\system32\xpsp4res.dll 2009-07-26 00:03 –d—– c:\windows\system32\PreInstall 2009-07-26 00:03 –d-h— c:\windows\$hf_mig$ 2009-07-25 23:50 –d—– c:\windows\system32\SoftwareDistribution 2009-07-25 23:47 3,626,112 a——- c:\windows\system32\drivers\NETw5x32.sys 2009-07-25 23:47 2,756,608 a——- c:\windows\system32\NETw5r32.dll 2009-07-25 23:47 659,456 a——- c:\windows\system32\NETw5c32.dll 2009-07-25 23:47 –d—– c:\program files\common files\Intel 2009-07-25 23:34 2,326,528 a——- c:\windows\system32\GCharger.cpl 2009-07-25 23:32 –d—– c:\docume~1\garret\applic~1\Intel 2009-07-25 23:30 106,368 a—-r– c:\windows\system32\drivers\Rtenicxp.sys 2009-07-25 23:27 251 a——- c:\windows\xUninstall.bat 2009-07-25 23:27 81,296 a—-r– c:\windows\system32\drivers\jmcr.sys 2009-07-25 23:27 15,086 —–r– c:\windows\system32\jmcr_xd.ico 2009-07-25 23:27 15,086 —–r– c:\windows\system32\jmcr_ms.ico 2009-07-25 23:27 15,086 —–r– c:\windows\system32\jmcr_mmc.ico 2009-07-25 23:27 –d—– c:\windows\JMCR_DIR 2009-07-25 23:25 0 a—h— c:\windows\system32\drivers\Msft_Kernel_Apfiltr_01005.Wdf 2009-07-25 23:25 172,592 a—-r– c:\windows\system32\drivers\Apfiltr.sys 2009-07-25 23:25 100,546 a—-r– c:\windows\system32\Vxdif.dll 2009-07-25 23:25 –d—– c:\program files\Apoint2K 2009-07-25 23:24 0 a—h— c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf 2009-07-25 23:24 26,144 a——- c:\windows\system32\spupdsvc.exe 2009-07-25 23:24 266,240 a——- c:\windows\system32\EMSC.DLL 2009-07-25 23:24 9,856 a——- c:\windows\system32\drivers\EMSC.sys 2009-07-25 23:24 –d—– c:\docume~1\alluse~1\applic~1\XP32 2009-07-25 23:24 –d—– c:\docume~1\alluse~1\applic~1\Vista64 2009-07-25 23:24 –d—– c:\docume~1\alluse~1\applic~1\Vista32 2009-07-25 23:24 –d—– c:\program files\Program DJ 2009-07-25 23:24 –d—– c:\windows\Downloaded Installations 2009-07-25 23:23 54,824 ——– c:\windows\system32\agrsmdel.exe 2009-07-25 23:23 54,824 a—-r– c:\windows\agrsmdel.exe 2009-07-25 23:23 13,312 a—-r– c:\windows\system32\agrscoin.dll 2009-07-25 23:23 12,800 a—-r– c:\windows\system32\agrsmsvc.exe 2009-07-25 23:23 1,201,632 a—-r– c:\windows\system32\drivers\AGRSM.sys 2009-07-25 23:22 –d—– c:\windows\Options 2009-07-25 23:22 553 —–r– c:\windows\USetup.iss 2009-07-25 23:21 –d—– c:\program files\Realtek 2009-07-25 23:18 6,272 ac—— c:\windows\system32\dllcache\splitter.sys 2009-07-25 23:17 5,672,960 a—-r– c:\windows\system32\igfxress.dll 2009-07-25 23:16 446,464 a——- c:\windows\system32\NVUNINST.EXE 2009-07-25 22:57 –d—– c:\windows\system32\ReinstallBackups 2009-07-25 22:57 53,248 a—-r– c:\windows\system32\CSVer.dll 2009-07-25 22:57 –d—– C:\Intel 2009-07-25 22:51 –d—– c:\documents and settings\Garret 2009-07-25 22:50 –ds—- c:\windows\system32\Microsoft 2009-07-25 22:50 8,192 a——- c:\windows\REGLOCS.OLD 2009-07-25 22:49 28,288 ac—— c:\windows\system32\dllcache\xjis.nls 2009-07-25 22:49 156,672 ac—— c:\windows\system32\dllcache\winzm.ime 2009-07-25 22:49 156,672 ac—— c:\windows\system32\dllcache\winsp.ime 2009-07-25 22:49 156,672 ac—— c:\windows\system32\dllcache\winpy.ime 2009-07-25 22:49 65,536 ac—— c:\windows\system32\dllcache\winime.ime 2009-07-25 22:49 79,360 ac—— c:\windows\system32\dllcache\winar30.ime 2009-07-25 22:49 72,704 ac—— c:\windows\system32\dllcache\wingb.ime 2009-07-25 22:49 31,232 ac—— c:\windows\system32\dllcache\weitekp9.sys 2009-07-25 22:49 53,248 ac—— c:\windows\system32\dllcache\wamreg51.dll 2009-07-25 22:49 41,600 ac—— c:\windows\system32\dllcache\weitekp9.dll 2009-07-25 22:49 9,216 ac—— c:\windows\system32\dllcache\wamps51.dll 2009-07-25 22:47 13,463,552 ac—— c:\windows\system32\dllcache\hwxjpn.dll 2009-07-25 22:46 2,577 a——- c:\windows\system32\CONFIG.NT 2009-07-25 22:46 0 a——- c:\windows\control.ini 2009-07-25 22:46 23,392 a——- c:\windows\system32\nscompat.tlb 2009-07-25 22:46 16,832 a——- c:\windows\system32\amcompat.tlb 2009-07-25 22:46 316,640 a——- c:\windows\WMSysPr9.prx 2009-07-25 22:45 –dsh— c:\documents and settings\all users\DRM 2009-07-25 22:45 –d-h— c:\program files\WindowsUpdate 2009-07-25 22:44 –d—– c:\program files\common files\MSSoap 2009-07-25 22:42 –d—– c:\program files\Online Services 2009-07-25 22:42 –d—– c:\program files\Messenger 2009-07-25 22:42 –d—– c:\program files\MSN Gaming Zone 2009-07-25 22:41 –d—– c:\program files\Windows NT 2009-07-25 13:45 –d—– c:\program files\common files\ODBC 2009-07-25 13:45 –d—– c:\program files\common files\SpeechEngines 2009-07-25 13:45 –d–r– c:\documents and settings\all users\Documents ==================== Find3M ==================== 2009-07-30 01:05 68,922 a——- c:\windows\hpoins05.dat 2009-07-25 23:21 315,392 a——- c:\windows\HideWin.exe 2009-07-25 23:15 86,327 a——- c:\windows\pchealth\helpctr\offlinecache\index.dat 2009-07-25 22:43 21,640 a——- c:\windows\system32\emptyregdb.dat 2009-06-26 10:50 666,624 a——- c:\windows\system32\wininet.dll 2009-06-16 08:36 119,808 a——- c:\windows\system32\t2embed.dll 2009-06-16 08:36 81,920 a——- c:\windows\system32\fontsub.dll 2009-06-03 13:09 1,291,264 a——- c:\windows\system32\quartz.dll 2009-05-09 01:14 1,418,120 a——- c:\windows\system32\wdfcoinstaller01005.dll ============= FINISH: 20:31:46.87 ===============

Hello.

Please answer this question:

What issues/problems do you have?

Also, the DDS log doesn't look complete. Re-run it please.

With Regards,
Extremeboy

HijackThis microtrend logfile
[Closed] Anything malicious in my hijackthis log file?
"Do you want to navigate away from this page"

You may close my hijack topics, as after a week of frustration i just reformatted. My current issue, the one unresolved, is the "navigating away from this page" one.

Actually since that other topic is going nowhere, i will just post a fresh hijackthis logfile. Thanks

Thanks Tashi. @Devoteddexter I will close this topic now. Thanks… With Regards, Extremeboy