drchaz
Topic Starter
Hi
I opened some webages and the shortcuts had been replaced with usercash links and the other kept loading different sites at the bottom bar and froze. So worried there is a virus I have run Malware, AVG and no problems detected.
Still doing it so I ran DDS.
CAN ANYONE HELP?
DDS Scan:
DDS (Ver_09-10-26.01) - NTFSx86
Run by [removed] at 15:06:00.52 on 21/11/2009
Internet Explorer: 8.0.6001.18828
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.44.1033.18.2045.937 [GMT 0:00]
SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\rundll32.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Kontiki\KService.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Windows\sttray.exe
C:\Program Files\dvd43\DVD43_Tray.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\SyncServer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\udesmeister\Desktop\dds.scr
============== Pseudo HJT Report ===============
uSearch Page = hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
uStart Page = hxxp://my.ebay.co.uk/ws/eBayISAPI.dll?MyEbayBeta&CurrentPage=MyeBayNextWatching&ssPageName=STRK:ME:LNLK:MEWAX
uWindow Title = Internet Explorer provided by Dell
uSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
mStart Page = hxxp://www.yahoo.com/
mDefault_Page_URL = hxxp://www.yahoo.com/
mDefault_Search_URL = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
mSearch Page = hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
uURLSearchHooks: H - No File
uURLSearchHooks: H - No File
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: 1 (0x1): {02478d38-c3f9-4efb-9b51-7695eca05670} - Yahoo! Toolbar Helper
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.3.4501.1418\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_B7C5AC242193BB3E.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\bae\BAE.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup
uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Sony Ericsson PC Suite] "c:\program files\sony ericsson\sony ericsson pc suite\SEPCSuite.exe" /systray /nologon
uRun: [kdx] c:\program files\kontiki\KHost.exe -all
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe"
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: []
mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\9.0\sharedcom\RoxWatchTray9.exe"
mRun: [RoxioDragToDisc] "c:\program files\roxio\drag-to-disc\DrgToDsc.exe"
mRun: [ECenter] c:\dell\e-center\EULALauncher.exe
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [4oD] "c:\program files\kontiki\KHost.exe" -all
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Google Quick Search Box] "c:\program files\google\quick search box\GoogleQuickSearchBox.exe" /autorun
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [SigmatelSysTrayApp] sttray.exe
mRun: [dvd43] c:\program files\dvd43\dvd43_tray.exe
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {7F9DB11C-E358-4ca6-A83D-ACC663939424} - {9999A076-A9E2-4C99-8A2B-632FC9429223} - c:\program files\bonjour\ExplorerPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-24-0.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w2/resources/VistaMSNPUplden-gb.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} - hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-27-0.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.3.4.cab
Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - c:\program files\tiscali\tiscali internet\dlls\tiscalifilter.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
AppInit_DLLs: avgrsstx.dll
============= SERVICES / DRIVERS ===============
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-5-10 333192]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-5-10 360584]
R1 RapportKELL;RapportKELL;c:\program files\trusteer\rapport\bin\RapportKELL.sys [2009-8-18 58728]
R1 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2009-8-18 333928]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2009-11-3 285392]
R2 RapportMgmtService;Rapport Management Service;c:\program files\trusteer\rapport\bin\RapportMgmtService.exe [2009-8-18 955624]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2009-7-9 1153368]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-9-17 21504]
=============== Created Last 30 ================
2009-11-20 22:15:22 0 d—–w- c:\program files\Stanza
2009-11-19 11:12:42 0 d—–w- c:\program files\Windows Portable Devices
2009-11-19 11:12:27 0 —ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2009-11-19 11:12:08 0 —ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-11-19 10:36:59 847360 —-a-w- c:\windows\system32\OpcServices.dll
2009-11-19 10:36:59 793088 —-a-w- c:\windows\system32\FntCache.dll
2009-11-19 10:36:59 519680 —-a-w- c:\windows\system32\d3d11.dll
2009-11-19 10:36:59 486912 —-a-w- c:\windows\system32\d3d10level9.dll
2009-11-19 10:36:59 481792 —-a-w- c:\windows\system32\dxgi.dll
2009-11-19 10:36:59 351232 —-a-w- c:\windows\system32\XpsPrint.dll
2009-11-19 10:36:59 218112 —-a-w- c:\windows\system32\d3d10_1core.dll
2009-11-19 10:36:59 190464 —-a-w- c:\windows\system32\d3d10core.dll
2009-11-19 10:36:59 161280 —-a-w- c:\windows\system32\d3d10_1.dll
2009-11-19 10:36:59 1554432 —-a-w- c:\windows\system32\xpsservices.dll
2009-11-19 10:36:59 1064448 —-a-w- c:\windows\system32\DWrite.dll
2009-11-19 10:36:59 1030144 —-a-w- c:\windows\system32\d3d10.dll
2009-11-19 10:32:53 555520 —-a-w- c:\windows\system32\UIAutomationCore.dll
2009-11-19 10:32:53 4096 —-a-w- c:\windows\system32\oleaccrc.dll
2009-11-19 10:32:53 234496 —-a-w- c:\windows\system32\oleacc.dll
2009-11-18 22:07:50 0 d-sh–w- c:\windows\system32\%APPDATA%
2009-11-15 18:08:59 0 d—–w- c:\programdata\Microsoft Help
2009-11-12 14:41:32 0 d—–w- c:\program files\ABC Amber Palm Converter
2009-11-11 17:11:52 0 d—–w- C:\85fcfa61c074818418380e62819b
2009-11-11 08:20:03 2036736 —-a-w- c:\windows\system32\win32k.sys
2009-11-11 08:19:14 355328 —-a-w- c:\windows\system32\WSDApi.dll
2009-11-05 08:06:44 1638912 —-a-w- c:\windows\system32\mshtml.tlb
2009-11-03 15:21:53 0 d—–w- c:\program files\iPod
2009-11-03 15:21:52 0 d—–w- c:\program files\iTunes
2009-11-03 11:33:37 0 d–h–w- C:\$AVG
2009-11-03 11:32:13 0 d—–w- c:\programdata\avg9
2009-10-29 12:02:45 2421760 —-a-w- c:\windows\system32\wucltux.dll
2009-10-29 12:02:17 87552 —-a-w- c:\windows\system32\wudriver.dll
2009-10-29 12:02:11 33792 —-a-w- c:\windows\system32\wuapp.exe
2009-10-29 12:02:11 171608 —-a-w- c:\windows\system32\wuwebv.dll
2009-10-28 09:21:19 310784 —-a-w- c:\windows\system32\unregmp2.exe
2009-10-28 09:21:17 8147456 —-a-w- c:\windows\system32\wmploc.DLL
==================== Find3M ====================
2009-11-19 11:12:34 86016 —-a-w- c:\windows\inf\infpub.dat
2009-11-19 11:12:34 665600 —-a-w- c:\windows\inf\drvindex.dat
2009-11-19 11:12:34 143360 —-a-w- c:\windows\inf\infstrng.dat
2009-11-19 11:12:34 143360 —-a-w- c:\windows\inf\infstor.dat
2009-11-09 21:18:38 360584 —-a-w- c:\windows\system32\drivers\avgtdix.sys
2009-11-03 11:33:07 333192 —-a-w- c:\windows\system32\drivers\avgldx86.sys
2009-11-03 11:33:07 12464 —-a-w- c:\windows\system32\avgrsstx.dll
2009-10-17 18:21:45 411368 —-a-w- c:\windows\system32\deploytk.dll
2009-10-12 13:38:50 18816 —-a-w- c:\windows\system32\drivers\dvd43llh.sys
2009-10-01 09:29:14 195440 ——w- c:\windows\system32\MpSigStub.exe
2009-10-01 01:02:17 2537472 —-a-w- c:\windows\system32\wpdshext.dll
2009-10-01 01:02:05 30208 —-a-w- c:\windows\system32\WPDShextAutoplay.exe
2009-10-01 01:02:04 334848 —-a-w- c:\windows\system32\PortableDeviceApi.dll
2009-10-01 01:02:02 87552 —-a-w- c:\windows\system32\WPDShServiceObj.dll
2009-10-01 01:02:00 31232 —-a-w- c:\windows\system32\BthMtpContextHandler.dll
2009-10-01 01:01:59 546816 —-a-w- c:\windows\system32\wpd_ci.dll
2009-10-01 01:01:59 160256 —-a-w- c:\windows\system32\PortableDeviceTypes.dll
2009-10-01 01:01:56 60928 —-a-w- c:\windows\system32\PortableDeviceConnectApi.dll
2009-10-01 01:01:56 350208 —-a-w- c:\windows\system32\WPDSp.dll
2009-10-01 01:01:56 196608 —-a-w- c:\windows\system32\PortableDeviceWMDRM.dll
2009-10-01 01:01:56 100864 —-a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2009-10-01 01:01:54 81920 —-a-w- c:\windows\system32\wpdbusenum.dll
2009-10-01 01:01:54 40448 —-a-w- c:\windows\system32\drivers\WpdUsb.sys
2009-10-01 01:01:50 226816 —-a-w- c:\windows\system32\WpdMtp.dll
2009-10-01 01:01:49 61952 —-a-w- c:\windows\system32\WpdMtpUS.dll
2009-10-01 01:01:49 33280 —-a-w- c:\windows\system32\WpdConns.dll
2009-09-25 02:10:10 974848 —-a-w- c:\windows\system32\WindowsCodecs.dll
2009-09-25 02:07:08 189440 —-a-w- c:\windows\system32\WindowsCodecsExt.dll
2009-09-25 02:04:32 321024 —-a-w- c:\windows\system32\PhotoMetadataHandler.dll
2009-09-25 01:36:13 280064 —-a-w- c:\windows\system32\XpsGdiConverter.dll
2009-09-25 01:35:31 135680 —-a-w- c:\windows\system32\XpsRasterService.dll
2009-09-25 01:33:25 195584 —-a-w- c:\windows\system32\dxdiagn.dll
2009-09-25 01:33:15 829440 —-a-w- c:\windows\system32\d3d10warp.dll
2009-09-25 01:33:01 369664 —-a-w- c:\windows\system32\WMPhoto.dll
2009-09-25 01:32:59 252928 —-a-w- c:\windows\system32\dxdiag.exe
2009-09-25 01:31:15 828928 —-a-w- c:\windows\system32\d2d1.dll
2009-09-25 01:27:25 634880 —-a-w- c:\windows\system32\drivers\dxgkrnl.sys
2009-09-25 01:27:04 37888 —-a-w- c:\windows\system32\cdd.dll
2009-09-24 22:54:55 258048 —-a-w- c:\windows\system32\winspool.drv
2009-09-24 22:54:53 667648 —-a-w- c:\windows\system32\printfilterpipelinesvc.exe
2009-09-24 22:54:52 26112 —-a-w- c:\windows\system32\printfilterpipelineprxy.dll
2009-09-20 12:43:50 37665 —-a-w- c:\windows\fonts\GlobalUserInterface.CompositeFont
2009-09-10 16:48:01 218624 —-a-w- c:\windows\system32\msv1_0.dll
2009-09-10 02:01:02 3023360 —-a-w- c:\windows\system32\UIRibbon.dll
2009-09-10 02:00:54 1164800 —-a-w- c:\windows\system32\UIRibbonRes.dll
2009-09-10 02:00:36 92672 —-a-w- c:\windows\system32\UIAnimation.dll
2009-09-04 11:41:59 60928 —-a-w- c:\windows\system32\msasn1.dll
2009-08-29 00:27:49 4240384 —-a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-08-29 00:14:38 28672 —-a-w- c:\windows\system32\Apphlpdm.dll
2009-08-28 18:42:52 2065696 —-a-w- c:\windows\system32\usbaaplrc.dll
2009-08-27 05:22:28 916480 —-a-w- c:\windows\system32\wininet.dll
2009-08-27 05:17:43 71680 —-a-w- c:\windows\system32\iesetup.dll
2009-08-27 05:17:43 109056 —-a-w- c:\windows\system32\iesysprep.dll
2009-08-27 03:42:29 133632 —-a-w- c:\windows\system32\ieUnatt.exe
2008-09-17 15:41:22 174 –sha-w- c:\program files\desktop.ini
2006-11-02 12:42:02 30674 —-a-w- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 12:42:02 30674 —-a-w- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 12:42:02 287440 —-a-w- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 12:42:02 287440 —-a-w- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 09:20:21 287440 —-a-w- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 09:20:21 287440 —-a-w- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 09:20:19 30674 —-a-w- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 09:20:19 30674 —-a-w- c:\windows\inf\perflib\0000\perfc.dat
2007-02-15 17:23:56 8192 –sha-w- c:\windows\users\default\NTUSER.DAT
============= FINISH: 15:06:58.38 ===============
Then tried run GMER, was fine, then cut to blue screen:
Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.768.3
Locale ID: 2057
Additional information about the problem:
BCCode: 1000008e
BCP1: C0000005
BCP2: 82848D45
BCP3: A8950A34
BCP4: 00000000
OS Version: 6_0_6002
Service Pack: 2_0
Product: 768_1
Files that help describe the problem:
C:\Windows\Minidump\Mini112109-02.dmp
C:\Users\udesmeister\AppData\Local\Temp\WER-83975-0.sysdata.xml
C:\Users\udesmeister\AppData\Local\Temp\WER735B.tmp.version.txt
So I redid DDS:
DDS (Ver_09-10-26.01) - NTFSx86
Run by [removed] at 17:34:05.18 on 21/11/2009
Internet Explorer: 8.0.6001.18828
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.44.1033.18.2045.869 [GMT 0:00]
SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\rundll32.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Kontiki\KHost.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\PnkBstrB.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\Program Files\Trusteer\Rapport\bin\RapportService.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\sttray.exe
C:\Program Files\dvd43\DVD43_Tray.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\udesmeister\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
uSearch Page = hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
uStart Page = hxxp://my.ebay.co.uk/ws/eBayISAPI.dll?MyEbayBeta&CurrentPage=MyeBayNextWatching&ssPageName=STRK:ME:LNLK:MEWAX
uWindow Title = Internet Explorer provided by Dell
uSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
mStart Page = hxxp://www.yahoo.com/
mDefault_Page_URL = hxxp://www.yahoo.com/
mDefault_Search_URL = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
mSearch Page = hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
uURLSearchHooks: H - No File
uURLSearchHooks: H - No File
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: 1 (0x1): {02478d38-c3f9-4efb-9b51-7695eca05670} - Yahoo! Toolbar Helper
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.3.4501.1418\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_B7C5AC242193BB3E.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\bae\BAE.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup
uRun: [updateMgr] "c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Sony Ericsson PC Suite] "c:\program files\sony ericsson\sony ericsson pc suite\SEPCSuite.exe" /systray /nologon
uRun: [kdx] c:\program files\kontiki\KHost.exe -all
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe"
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: []
mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\9.0\sharedcom\RoxWatchTray9.exe"
mRun: [RoxioDragToDisc] "c:\program files\roxio\drag-to-disc\DrgToDsc.exe"
mRun: [ECenter] c:\dell\e-center\EULALauncher.exe
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [4oD] "c:\program files\kontiki\KHost.exe" -all
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Google Quick Search Box] "c:\program files\google\quick search box\GoogleQuickSearchBox.exe" /autorun
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [SigmatelSysTrayApp] sttray.exe
mRun: [dvd43] c:\program files\dvd43\dvd43_tray.exe
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {7F9DB11C-E358-4ca6-A83D-ACC663939424} - {9999A076-A9E2-4C99-8A2B-632FC9429223} - c:\program files\bonjour\ExplorerPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-24-0.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w2/resources/VistaMSNPUplden-gb.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} - hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-27-0.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.3.4.cab
Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - c:\program files\tiscali\tiscali internet\dlls\tiscalifilter.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
AppInit_DLLs: avgrsstx.dll
============= SERVICES / DRIVERS ===============
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-5-10 333192]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-5-10 360584]
R1 RapportKELL;RapportKELL;c:\program files\trusteer\rapport\bin\RapportKELL.sys [2009-8-18 58728]
R1 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2009-8-18 333928]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2009-11-3 285392]
R2 RapportMgmtService;Rapport Management Service;c:\program files\trusteer\rapport\bin\RapportMgmtService.exe [2009-8-18 955624]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2009-7-9 1153368]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-9-17 21504]
=============== Created Last 30 ================
2009-11-20 22:15:22 0 d—–w- c:\program files\Stanza
2009-11-19 11:12:42 0 d—–w- c:\program files\Windows Portable Devices
2009-11-19 11:12:27 0 —ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2009-11-19 11:12:08 0 —ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-11-19 10:36:59 847360 —-a-w- c:\windows\system32\OpcServices.dll
2009-11-19 10:36:59 793088 —-a-w- c:\windows\system32\FntCache.dll
2009-11-19 10:36:59 519680 —-a-w- c:\windows\system32\d3d11.dll
2009-11-19 10:36:59 486912 —-a-w- c:\windows\system32\d3d10level9.dll
2009-11-19 10:36:59 481792 —-a-w- c:\windows\system32\dxgi.dll
2009-11-19 10:36:59 351232 —-a-w- c:\windows\system32\XpsPrint.dll
2009-11-19 10:36:59 218112 —-a-w- c:\windows\system32\d3d10_1core.dll
2009-11-19 10:36:59 190464 —-a-w- c:\windows\system32\d3d10core.dll
2009-11-19 10:36:59 161280 —-a-w- c:\windows\system32\d3d10_1.dll
2009-11-19 10:36:59 1554432 —-a-w- c:\windows\system32\xpsservices.dll
2009-11-19 10:36:59 1064448 —-a-w- c:\windows\system32\DWrite.dll
2009-11-19 10:36:59 1030144 —-a-w- c:\windows\system32\d3d10.dll
2009-11-19 10:32:53 555520 —-a-w- c:\windows\system32\UIAutomationCore.dll
2009-11-19 10:32:53 4096 —-a-w- c:\windows\system32\oleaccrc.dll
2009-11-19 10:32:53 234496 —-a-w- c:\windows\system32\oleacc.dll
2009-11-18 22:07:50 0 d-sh–w- c:\windows\system32\%APPDATA%
2009-11-15 18:08:59 0 d—–w- c:\programdata\Microsoft Help
2009-11-12 14:41:32 0 d—–w- c:\program files\ABC Amber Palm Converter
2009-11-11 17:11:52 0 d—–w- C:\85fcfa61c074818418380e62819b
2009-11-11 08:20:03 2036736 —-a-w- c:\windows\system32\win32k.sys
2009-11-11 08:19:14 355328 —-a-w- c:\windows\system32\WSDApi.dll
2009-11-05 08:06:44 1638912 —-a-w- c:\windows\system32\mshtml.tlb
2009-11-03 15:21:53 0 d—–w- c:\program files\iPod
2009-11-03 15:21:52 0 d—–w- c:\program files\iTunes
2009-11-03 11:33:37 0 d–h–w- C:\$AVG
2009-11-03 11:32:13 0 d—–w- c:\programdata\avg9
2009-10-29 12:02:45 2421760 —-a-w- c:\windows\system32\wucltux.dll
2009-10-29 12:02:17 87552 —-a-w- c:\windows\system32\wudriver.dll
2009-10-29 12:02:11 33792 —-a-w- c:\windows\system32\wuapp.exe
2009-10-29 12:02:11 171608 —-a-w- c:\windows\system32\wuwebv.dll
2009-10-28 09:21:19 310784 —-a-w- c:\windows\system32\unregmp2.exe
2009-10-28 09:21:17 8147456 —-a-w- c:\windows\system32\wmploc.DLL
==================== Find3M ====================
2009-11-19 11:12:34 86016 —-a-w- c:\windows\inf\infpub.dat
2009-11-19 11:12:34 665600 —-a-w- c:\windows\inf\drvindex.dat
2009-11-19 11:12:34 143360 —-a-w- c:\windows\inf\infstrng.dat
2009-11-19 11:12:34 143360 —-a-w- c:\windows\inf\infstor.dat
2009-11-09 21:18:38 360584 —-a-w- c:\windows\system32\drivers\avgtdix.sys
2009-11-03 11:33:07 333192 —-a-w- c:\windows\system32\drivers\avgldx86.sys
2009-11-03 11:33:07 12464 —-a-w- c:\windows\system32\avgrsstx.dll
2009-10-17 18:21:45 411368 —-a-w- c:\windows\system32\deploytk.dll
2009-10-12 13:38:50 18816 —-a-w- c:\windows\system32\drivers\dvd43llh.sys
2009-10-01 09:29:14 195440 ——w- c:\windows\system32\MpSigStub.exe
2009-10-01 01:02:17 2537472 —-a-w- c:\windows\system32\wpdshext.dll
2009-10-01 01:02:05 30208 —-a-w- c:\windows\system32\WPDShextAutoplay.exe
2009-10-01 01:02:04 334848 —-a-w- c:\windows\system32\PortableDeviceApi.dll
2009-10-01 01:02:02 87552 —-a-w- c:\windows\system32\WPDShServiceObj.dll
2009-10-01 01:02:00 31232 —-a-w- c:\windows\system32\BthMtpContextHandler.dll
2009-10-01 01:01:59 546816 —-a-w- c:\windows\system32\wpd_ci.dll
2009-10-01 01:01:59 160256 —-a-w- c:\windows\system32\PortableDeviceTypes.dll
2009-10-01 01:01:56 60928 —-a-w- c:\windows\system32\PortableDeviceConnectApi.dll
2009-10-01 01:01:56 350208 —-a-w- c:\windows\system32\WPDSp.dll
2009-10-01 01:01:56 196608 —-a-w- c:\windows\system32\PortableDeviceWMDRM.dll
2009-10-01 01:01:56 100864 —-a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2009-10-01 01:01:54 81920 —-a-w- c:\windows\system32\wpdbusenum.dll
2009-10-01 01:01:54 40448 —-a-w- c:\windows\system32\drivers\WpdUsb.sys
2009-10-01 01:01:50 226816 —-a-w- c:\windows\system32\WpdMtp.dll
2009-10-01 01:01:49 61952 —-a-w- c:\windows\system32\WpdMtpUS.dll
2009-10-01 01:01:49 33280 —-a-w- c:\windows\system32\WpdConns.dll
2009-09-25 02:10:10 974848 —-a-w- c:\windows\system32\WindowsCodecs.dll
2009-09-25 02:07:08 189440 —-a-w- c:\windows\system32\WindowsCodecsExt.dll
2009-09-25 02:04:32 321024 —-a-w- c:\windows\system32\PhotoMetadataHandler.dll
2009-09-25 01:36:13 280064 —-a-w- c:\windows\system32\XpsGdiConverter.dll
2009-09-25 01:35:31 135680 —-a-w- c:\windows\system32\XpsRasterService.dll
2009-09-25 01:33:25 195584 —-a-w- c:\windows\system32\dxdiagn.dll
2009-09-25 01:33:15 829440 —-a-w- c:\windows\system32\d3d10warp.dll
2009-09-25 01:33:01 369664 —-a-w- c:\windows\system32\WMPhoto.dll
2009-09-25 01:32:59 252928 —-a-w- c:\windows\system32\dxdiag.exe
2009-09-25 01:31:15 828928 —-a-w- c:\windows\system32\d2d1.dll
2009-09-25 01:27:25 634880 —-a-w- c:\windows\system32\drivers\dxgkrnl.sys
2009-09-25 01:27:04 37888 —-a-w- c:\windows\system32\cdd.dll
2009-09-24 22:54:55 258048 —-a-w- c:\windows\system32\winspool.drv
2009-09-24 22:54:53 667648 —-a-w- c:\windows\system32\printfilterpipelinesvc.exe
2009-09-24 22:54:52 26112 —-a-w- c:\windows\system32\printfilterpipelineprxy.dll
2009-09-20 12:43:50 37665 —-a-w- c:\windows\fonts\GlobalUserInterface.CompositeFont
2009-09-10 16:48:01 218624 —-a-w- c:\windows\system32\msv1_0.dll
2009-09-10 02:01:02 3023360 —-a-w- c:\windows\system32\UIRibbon.dll
2009-09-10 02:00:54 1164800 —-a-w- c:\windows\system32\UIRibbonRes.dll
2009-09-10 02:00:36 92672 —-a-w- c:\windows\system32\UIAnimation.dll
2009-09-04 11:41:59 60928 —-a-w- c:\windows\system32\msasn1.dll
2009-08-29 00:27:49 4240384 —-a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-08-29 00:14:38 28672 —-a-w- c:\windows\system32\Apphlpdm.dll
2009-08-28 18:42:52 2065696 —-a-w- c:\windows\system32\usbaaplrc.dll
2009-08-27 05:22:28 916480 —-a-w- c:\windows\system32\wininet.dll
2009-08-27 05:17:43 71680 —-a-w- c:\windows\system32\iesetup.dll
2009-08-27 05:17:43 109056 —-a-w- c:\windows\system32\iesysprep.dll
2009-08-27 03:42:29 133632 —-a-w- c:\windows\system32\ieUnatt.exe
2008-09-17 15:41:22 174 –sha-w- c:\program files\desktop.ini
2006-11-02 12:42:02 30674 —-a-w- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 12:42:02 30674 —-a-w- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 12:42:02 287440 —-a-w- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 12:42:02 287440 —-a-w- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 09:20:21 287440 —-a-w- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 09:20:21 287440 —-a-w- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 09:20:19 30674 —-a-w- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 09:20:19 30674 —-a-w- c:\windows\inf\perflib\0000\perfc.dat
2007-02-15 17:23:56 8192 –sha-w- c:\windows\users\default\NTUSER.DAT
============= FINISH: 17:35:53.01 ===============
GMER crashes when it gets to :
\device\HardiskVolumeShadowCopy1
