[Resolved] search engine redirector

Computer seems to be back to the way it was last week. Thank you. What can I do (products?) to more reliably protect myself in the future? I had run Norton antivirus but didn't like the resource commitment and now I run Bitdefender. I am not real familiar with Bitdefender and find it somewhat confusing to try to negotiate. please advise, I will not take any information on this subject as an endorsement. Just info, Again, Thanks so much for your time, patience and knowledge on my behalf. Marc UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_09-06-26.01) Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 9/27/2005 10:18:26 PM System Uptime: 5/26/2010 2:55:38 PM (2 hours ago) Motherboard: MICRO-STAR INTERNATIONAL CO., LTD | | MS-7142 Processor: AMD Athlon™ 64 Processor 3000+ | Socket 754 | 1999/200mhz ==== Disk Partitions ========================= A: is Removable C: is FIXED (NTFS) - 149 GiB total, 96.722 GiB free. D: is FIXED (NTFS) - 114 GiB total, 103.89 GiB free. E: is CDROM () ==== Disabled Device Manager Items ============= Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318} Description: Universal Serial Bus (USB) Controller Device ID: PCI\VEN_1106&DEV;_3104&SUBSYS;_71421462&REV;_86\3&13C0B0C5&0&84 Manufacturer: Name: Universal Serial Bus (USB) Controller PNP Device ID: PCI\VEN_1106&DEV;_3104&SUBSYS;_71421462&REV;_86\3&13C0B0C5&0&84 Service: ==== System Restore Points =================== RP1124: 2/23/2010 9:57:26 AM - Installed Java™ 6 Update 18 RP1125: 2/24/2010 1:50:52 PM - System Checkpoint RP1126: 2/25/2010 10:10:39 PM - System Checkpoint RP1127: 2/26/2010 10:52:00 PM - System Checkpoint RP1128: 2/28/2010 5:15:15 PM - System Checkpoint RP1129: 3/1/2010 6:16:45 PM - System Checkpoint RP1130: 3/3/2010 3:51:37 PM - System Checkpoint RP1131: 3/4/2010 6:36:03 PM - System Checkpoint RP1132: 3/6/2010 7:14:44 PM - System Checkpoint RP1133: 3/8/2010 5:38:53 PM - System Checkpoint RP1134: 3/9/2010 8:08:40 PM - System Checkpoint RP1135: 3/10/2010 8:45:08 PM - System Checkpoint RP1136: 3/11/2010 10:41:21 PM - System Checkpoint RP1137: 3/13/2010 8:54:16 PM - System Checkpoint RP1138: 3/16/2010 5:53:19 PM - System Checkpoint RP1139: 3/17/2010 9:23:33 PM - System Checkpoint RP1140: 3/19/2010 7:31:50 PM - System Checkpoint RP1141: 3/20/2010 8:57:28 PM - System Checkpoint RP1142: 3/22/2010 4:54:52 PM - System Checkpoint RP1143: 3/24/2010 5:51:12 PM - System Checkpoint RP1144: 3/27/2010 6:25:06 AM - System Checkpoint RP1145: 3/28/2010 2:16:31 PM - System Checkpoint RP1146: 3/29/2010 7:51:53 PM - System Checkpoint RP1147: 3/31/2010 5:47:42 PM - System Checkpoint RP1148: 4/1/2010 6:34:42 PM - System Checkpoint RP1149: 4/2/2010 6:44:59 PM - System Checkpoint RP1150: 4/3/2010 11:14:23 PM - System Checkpoint RP1151: 4/6/2010 6:06:44 AM - System Checkpoint RP1152: 4/8/2010 7:01:14 PM - System Checkpoint RP1153: 4/10/2010 9:02:42 PM - System Checkpoint RP1154: 4/12/2010 4:14:59 PM - System Checkpoint RP1155: 4/13/2010 7:31:45 PM - System Checkpoint RP1156: 4/14/2010 9:50:51 PM - System Checkpoint RP1157: 4/16/2010 5:47:02 PM - System Checkpoint RP1158: 4/19/2010 7:39:12 PM - System Checkpoint RP1159: 4/20/2010 7:47:33 PM - System Checkpoint RP1160: 4/21/2010 8:11:56 PM - System Checkpoint RP1161: 4/22/2010 9:43:18 PM - System Checkpoint RP1162: 4/25/2010 9:31:44 PM - System Checkpoint RP1163: 4/27/2010 11:28:02 AM - System Checkpoint RP1164: 4/28/2010 5:39:35 PM - System Checkpoint RP1165: 4/29/2010 8:17:15 PM - System Checkpoint RP1166: 5/1/2010 6:27:29 AM - System Checkpoint RP1167: 5/2/2010 1:32:58 PM - System Checkpoint RP1168: 5/3/2010 5:49:17 PM - System Checkpoint RP1169: 5/4/2010 9:54:06 PM - System Checkpoint RP1170: 5/6/2010 8:48:04 AM - System Checkpoint RP1171: 5/7/2010 8:49:11 PM - System Checkpoint RP1172: 5/9/2010 5:31:04 PM - System Checkpoint RP1173: 5/10/2010 6:24:15 PM - System Checkpoint RP1174: 5/11/2010 8:29:59 PM - System Checkpoint RP1175: 5/12/2010 11:15:12 PM - System Checkpoint RP1176: 5/14/2010 4:16:16 PM - System Checkpoint RP1177: 5/15/2010 7:28:21 PM - Software Distribution Service 3.0 RP1178: 5/17/2010 7:47:30 PM - System Checkpoint RP1179: 5/19/2010 6:16:43 PM - System Checkpoint RP1180: 5/20/2010 6:54:20 PM - System Checkpoint RP1181: 5/22/2010 10:10:06 AM - System Checkpoint RP1182: 5/23/2010 6:38:35 PM - System Checkpoint RP1183: 5/24/2010 9:32:59 PM - System Checkpoint RP1184: 5/26/2010 3:12:42 PM - System Checkpoint ==== Installed Programs ====================== 2 Acrobat.com Adobe AIR Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 9.3.2 American Civil War Gettysburg Anti-Spyware AnyDVD ArcSoft PhotoImpression 5 ArcSoft Software Suite Authentium BitDefender Total Security 2009 CloneCD CloneDVD2 CorelDRAW Graphics Suite X4 CorelDRAW Graphics Suite X4 - Capture CorelDRAW Graphics Suite X4 - Content CorelDRAW Graphics Suite X4 - Draw CorelDRAW Graphics Suite X4 - Filters CorelDRAW Graphics Suite X4 - FontNav CorelDRAW Graphics SUite X4 - ICA CorelDRAW Graphics Suite X4 - IPM CorelDRAW Graphics Suite X4 - Lang BR CorelDRAW Graphics Suite X4 - Lang EN CorelDRAW Graphics Suite X4 - Lang ES CorelDRAW Graphics Suite X4 - Lang FR CorelDRAW Graphics Suite X4 - PP CorelDRAW Graphics Suite X4 - VBA CorelDRAW® Graphics Suite X4 CorelDRAW® Graphics Suite X4 - Windows Shell Extension DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.1.1.0 East-Tec Eraser 2008 Version 8.9 EPSON CX 3800 Guide EPSON Printer Software EPSON Scan Eraser Finale NotePad 2006 GlobalTec Streaming News Google Earth Google Update Helper Google Updater GoToMeeting 4.0.0.320 Hotfix for Windows XP (KB926239) InterActual Player J2SE Runtime Environment 5.0 Update 7 Java 2 Runtime Environment Standard Edition v1.3.0_01 Java Auto Updater Java™ 6 Update 18 Malwarebytes' Anti-Malware MBT Navigator Microsoft .NET Framework 1.1 Microsoft .NET Framework 2.0 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Data Access Components KB870669 Microsoft Office 2000 Premium Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft Software Update for Web Folders (English) 12 Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 Redistributable Microsoft Web Publishing Wizard 1.52 Move Media Player Mozilla Firefox (3.6.3) MSN Music Assistant MSXML 6.0 Parser Nikon Message Center PictureProject PrintMaster® Premier 8.0 QuickTime Registerdllsetup Security Update for CAPICOM (KB931906) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893066) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896422) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899588) Security Update for Windows XP (KB899589) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB912919) Serif DrawPlus 3.0 Tracks Eraser Pro v6.0 Update for Windows XP (KB898461) Update for Windows XP (KB910437) Update for Windows XP (KB933360) Verizon PC Security Checkup VIA Audio Driver Setup Program Visual Basic for Applications ® Core Visual Basic for Applications ® Core - English WebEx WebFldrs XP Windows Genuine Advantage v1.3.0254.0 Windows Genuine Advantage Validation Tool (KB892130) Windows Installer 3.1 (KB893803) Windows Media Format 11 runtime Windows XP Hotfix - KB873333 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 Windows XP Hotfix - KB893086 Windows XP Service Pack 2 ==== Event Viewer Messages From Past Week ======== 5/23/2010 8:18:39 PM, error: Service Control Manager [7000] - The Application Layer Gateway Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 5/23/2010 8:18:37 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Application Layer Gateway Service service to connect. 5/23/2010 4:25:27 PM, error: Service Control Manager [7034] - The Windows Driver Foundation - User-mode Driver Framework service terminated unexpectedly. It has done this 1 time(s). 5/23/2010 4:24:58 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Remote Registry service to connect. 5/23/2010 4:24:58 PM, error: Service Control Manager [7000] - The Remote Registry service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 5/23/2010 4:24:57 PM, error: Service Control Manager [7034] - The WebClient service terminated unexpectedly. It has done this 1 time(s). 5/23/2010 4:24:57 PM, error: Service Control Manager [7034] - The TCP/IP NetBIOS Helper service terminated unexpectedly. It has done this 1 time(s). 5/23/2010 4:24:57 PM, error: Service Control Manager [7034] - The SSDP Discovery Service service terminated unexpectedly. It has done this 1 time(s). 5/23/2010 4:24:57 PM, error: Service Control Manager [7031] - The Remote Registry service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service. 5/23/2010 4:24:44 PM, error: Service Control Manager [7034] - The BitDefender Virus Shield service terminated unexpectedly. It has done this 1 time(s). ==== End Of File =========================== DDS (Ver_09-06-26.01) - NTFSx86 Run by [removed] at 16:19:27.50 on Wed 05/26/2010 Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_18 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1535.944 [GMT -7:00] AV: BitDefender Antivirus *On-access scanning enabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB} FW: BitDefender Firewall *enabled* {4055920F-2E99-48A8-A270-4243D2B8F242} ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Command Software\dvpapi.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\System32\svchost.exe -k imgsvc C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe C:\Program Files\Eraser\eraser.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe C:\Program Files\East-Tec Eraser 2008\etRiskMon.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\DMG\Desktop\dds.scr ============== Pseudo HJT Report =============== uStart Page = hxxp://www.foxnews.com mStart Page = hxxp://www.foxnews.com mWindow Title = uInternet Connection Wizard,ShellNext = iexplore BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: BitDefender Toolbar: {381ffde8-2394-4f90-b10d-fc6124a40f8c} - c:\program files\bitdefender\bitdefender 2009\IEToolbar.dll uRun: [Eraser] c:\program files\eraser\eraser.exe -hide uRun: [Eraser RiskMonitor] "c:\program files\east-tec eraser 2008\launch.exe" "c:\program files\east-tec eraser 2008\etRiskMon.exe" uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe" mRun: [BDAgent] "c:\program files\bitdefender\bitdefender 2009\bdagent.exe" mRun: [BitDefender Antiphishing Helper] "c:\program files\bitdefender\bitdefender 2009\IEShow.exe" mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" IE: E&xport; to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL DPF: vzTCPConfig - hxxps://www.verizon.net/WhatsNext/CheckMyPc/vzTCPConfig.CAB DPF: {3334504D-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/0/C/8/0C8EDFAB-30BC-4792-898E-2DABE27B2C4D/mp43dmo.CAB DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB DPF: {33564D57-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - hxxp://office.microsoft.com/officeupdate/content/opuc3.cab DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1204568885234 DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1204568839578 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - hxxp://a532.g.akamai.net/f/532/6712/5m/virtools.download.akamai.com/6712/player/install/installer.exe DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} - hxxps://commandtrade.webex.com/client/T26L/training/ieatgpc.cab DPF: {E19F9330-3110-11d4-991C-005004D3B3DB} - hxxp://java.sun.com/products/plugin/1.3.0_01/jinstall-130_01-win.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GR99D3~1.DLL SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\dmg\applic~1\mozilla\firefox\profiles\azy2tjyk.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.foxnews.com FF - plugin: c:\documents and settings\dmg\application data\move networks\plugins\npqmp071701000002.dll FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll FF - plugin: c:\program files\google\google updater\2.4.1536.6592\npCIDetect13.dll FF - plugin: c:\program files\google\update\1.2.183.13\npGoogleOneClick8.dll FF - plugin: c:\program files\mozilla firefox\plugins\npatgpc.dll FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} —- FIREFOX POLICIES —- c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true); c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32); c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600); c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", "-1"); c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false); c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5); c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pr ef", true); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", ""); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com"); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); // now unused c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.delay", 50); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20); ============= SERVICES / DRIVERS =============== R2 BDVEDISK;BDVEDISK;c:\program files\bitdefender\bitdefender 2009\BDVEDISK.sys [2008-10-6 82696] R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [2008-9-18 111112] R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [2009-2-3 104456] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2009-12-21 135664] S3 Arrakis3;BitDefender Arrakis Server;c:\program files\common files\bitdefender\bitdefender arrakis server\bin\Arrakis3.exe [2008-7-17 118784] S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys –> d:\NTGLM7X.sys [?] =============== Created Last 30 ================ 2010-05-25 17:48 3,243 a——- c:\windows\system32\wbem\Outlook_01cafc6d18e7f02e.mof 2010-05-24 20:12 a-dshr– C:\cmdcons 2010-05-24 20:09 256,512 a——- c:\windows\PEV.exe 2010-05-24 20:09 161,792 a——- c:\windows\SWREG.exe 2010-05-24 20:09 98,816 a——- c:\windows\sed.exe 2010-05-24 20:09 77,312 a——- c:\windows\MBR.exe 2010-05-22 22:02 –d—– c:\program files\TeaTimer (Spybot - Search & Destroy) 2010-05-22 22:02 –d—– c:\program files\Misc. Support Library (Spybot - Search & Destroy) 2010-05-22 22:01 –d—– c:\program files\SDHelper (Spybot - Search & Destroy) 2010-05-12 18:13 54,156 a—h— c:\windows\QTFont.qfn 2010-05-12 18:13 1,409 a——- c:\windows\QTFont.for ==================== Find3M ==================== 2010-05-26 14:55 81,984 a——- c:\windows\system32\bdod.bin 2010-05-25 17:50 1,744 a——- c:\windows\system32\d3d9caps.dat 2010-05-24 20:53 1,632 a——- c:\windows\system32\d3d8caps.dat 2010-04-30 20:42 2,209 a——- c:\windows\EntPack.dat 2010-04-29 15:39 38,224 a——- c:\windows\system32\drivers\mbamswissarmy.sys 2010-04-29 15:39 20,952 a——- c:\windows\system32\drivers\mbam.sys 2008-12-11 09:21 47,360 a——- c:\docume~1\dmg\applic~1\pcouffin.sys ============= FINISH: 16:20:28.35 ===============