possible infected system. unexpected computer behaviour (page 2)

tranquillizer

Post #16August 4, 2010, 9:17 AM UTC

system is running much smoother now, less work on processor and quick too.
here are the scan results.

===========================
Security Check Log
===========================

Results of screen317's Security Check version 0.99.5
Windows XP Service Pack 3
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Security Center service is not running! This report may not be accurate!
Windows Firewall Disabled!
ESET Online Scanner v3
Norton AntiVirus
Norton AntiVirus Help
Norton Internet Security (Symantec Corporation)
Norton Internet Security
Antivirus up to date!
```````````````````````````````
Anti-malware/Other Utilities Check:
Ad-Aware
Malwarebytes' Anti-Malware
Java™ 6 Update 20
Out of date Java installed!
Adobe Flash Player
````````````````````````````````
Process Check:
objlist.exe by Laurent
Norton ccSvcHst.exe
Ad-Aware AAWService.exe
Ad-Aware AAWTray.exe
WinPatrol winpatrol.exe
BillP Studios WinPatrol WinPatrol.exe
````````````````````````````````
DNS Vulnerability Check:
GREAT! (Not vulnerable to DNS cache poisoning)

``````````End of Log````````````

==============================
OTL Log
==============================

OTL logfile created on: 4/08/2010 7:12:38 PM - Run 3
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Mianz\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 60.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 29.29 Gb Total Space | 6.40 Gb Free Space | 21.86% Space Free | Partition Type: NTFS
Drive D: | 14.65 Gb Total Space | 10.88 Gb Free Space | 74.31% Space Free | Partition Type: NTFS
Drive E: | 14.65 Gb Total Space | 7.54 Gb Free Space | 51.46% Space Free | Partition Type: NTFS
Drive F: | 14.65 Gb Total Space | 1.79 Gb Free Space | 12.20% Space Free | Partition Type: NTFS
Drive G: | 19.53 Gb Total Space | 0.16 Gb Free Space | 0.81% Space Free | Partition Type: NTFS
Drive H: | 19.53 Gb Total Space | 0.82 Gb Free Space | 4.19% Space Free | Partition Type: NTFS
Drive I: | 19.53 Gb Total Space | 0.47 Gb Free Space | 2.43% Space Free | Partition Type: NTFS
Drive J: | 19.53 Gb Total Space | 5.03 Gb Free Space | 25.75% Space Free | Partition Type: NTFS
Drive K: | 19.53 Gb Total Space | 0.79 Gb Free Space | 4.06% Space Free | Partition Type: NTFS
Drive L: | 19.53 Gb Total Space | 10.11 Gb Free Space | 51.76% Space Free | Partition Type: NTFS
Drive M: | 19.53 Gb Total Space | 8.54 Gb Free Space | 43.72% Space Free | Partition Type: NTFS
Drive N: | 19.53 Gb Total Space | 9.74 Gb Free Space | 49.84% Space Free | Partition Type: NTFS
Drive O: | 14.65 Gb Total Space | 2.96 Gb Free Space | 20.19% Space Free | Partition Type: NTFS
Drive P: | 14.65 Gb Total Space | 4.32 Gb Free Space | 29.46% Space Free | Partition Type: NTFS
Drive Q: | 14.65 Gb Total Space | 1.51 Gb Free Space | 10.31% Space Free | Partition Type: NTFS
Drive R: | 14.65 Gb Total Space | 7.53 Gb Free Space | 51.40% Space Free | Partition Type: NTFS
Drive S: | 9.99 Gb Total Space | 4.64 Gb Free Space | 46.42% Space Free | Partition Type: NTFS

Computer Name: TRQLZR
Current User Name: Mianz
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Minimal
Quick Scan

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Mianz\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\WINDOWS\system32\PrintCtrl.exe (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
PRC - C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files\Common Files\Symantec Shared\CCSVCHST.EXE (Symantec Corporation)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
PRC - C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe (BillP Studios)
PRC - C:\Program Files\Canon\MultiPASS4\mpservic.exe (Canon Inc.)

========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Mianz\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
MOD - C:\Program Files\BillP Studios\WinPatrol\patrolpro.dll (BillP Studios)

========== Win32 Services (SafeList) ==========

SRV - (ServiceLayer) – C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (Printer Control) – C:\WINDOWS\system32\PrintCtrl.exe (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
SRV - (vvdsvc) – C:\WINDOWS\system32\nagasoft\vjocx.dll (NanJing Nagasoft Co, LTD.)
SRV - (Symantec Core LC) – C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (LiveUpdate Notice) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (CLTNetCnService) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccSetMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (LiveUpdate) – C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE (Symantec Corporation)
SRV - (wampmysqld) – H:\wamp\bin\mysql\mysql5.0.51b\bin\mysqld-nt.exe ()
SRV - (ACDaemon) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (Automatic LiveUpdate Scheduler) – C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
SRV - (wampapache) – H:\wamp\bin\apache\apache2.2.8\bin\httpd.exe (Apache Software Foundation)
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (comHost) – C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe (Symantec Corporation)
SRV - (MpService) – C:\Program Files\Canon\MultiPASS4\mpservic.exe (Canon Inc.)

========== Driver Services (SafeList) ==========

DRV - (catchme) – C:\DOCUME~1\Mianz\LOCALS~1\Temp\catchme.sys File not found
DRV - (APL531) – C:\WINDOWS\System32\Drivers\ov550i.sys File not found
DRV - (aiptektp) – C:\WINDOWS\System32\DRIVERS\aiptektp.sys File not found
DRV - (NAVEX15) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20100803.041\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20100803.041\NAVENG.SYS (Symantec Corporation)
DRV - (SYMIDSCO) – C:\Program Files\Common Files\Symantec Shared\SymcData\ipsdefs\20100729.001\SymIDSCo.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (UsbserFilt) – C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys (Nokia)
DRV - (upperdev) – C:\WINDOWS\system32\drivers\usbser_lowerflt.sys (Nokia)
DRV - (nmwcdc) – C:\WINDOWS\system32\drivers\ccdcmbo.sys (Nokia)
DRV - (nmwcd) – C:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia)
DRV - (nmwcdnsu) – C:\WINDOWS\system32\drivers\nmwcdnsu.sys (Nokia)
DRV - (nmwcdnsuc) – C:\WINDOWS\system32\drivers\nmwcdnsuc.sys (Nokia)
DRV - (Lbd) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (SymIMMP) – C:\WINDOWS\system32\drivers\SymIM.sys (Symantec Corporation)
DRV - (SymIM) – C:\WINDOWS\system32\drivers\SymIM.sys (Symantec Corporation)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMFW) – C:\WINDOWS\System32\Drivers\SYMFW.SYS (Symantec Corporation)
DRV - (SYMIDS) – C:\WINDOWS\System32\Drivers\SYMIDS.SYS (Symantec Corporation)
DRV - (SYMNDIS) – C:\WINDOWS\System32\Drivers\SYMNDIS.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (SYMDNS) – C:\WINDOWS\System32\Drivers\SYMDNS.SYS (Symantec Corporation)
DRV - (SymEvent) – C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (GUCI_AVS) – C:\WINDOWS\system32\drivers\GUCI_AVS.sys (PixArt Imaging Incorporation)
DRV - (SPBBCDrv) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (pccsmcfd) – C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (COH_Mon) – C:\WINDOWS\system32\drivers\COH_Mon.sys (Symantec Corporation)
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (SRTSPL) – C:\WINDOWS\system32\drivers\srtspl.sys (Symantec Corporation)
DRV - (SRTSP) – C:\WINDOWS\system32\drivers\srtsp.sys (Symantec Corporation)
DRV - (SRTSPX) – C:\WINDOWS\system32\drivers\srtspx.sys (Symantec Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (CO_Mon) – C:\WINDOWS\system32\drivers\CO_Mon.sys (Symantec Corporation)
DRV - (AtcL001) – C:\WINDOWS\system32\drivers\l151x86.sys (Atheros Communications Inc.)
DRV - (nv) – C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (s116unic) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM) – C:\WINDOWS\system32\drivers\s116unic.sys (MCCI Corporation)
DRV - (s116obex) – C:\WINDOWS\system32\drivers\s116obex.sys (MCCI Corporation)
DRV - (s116nd5) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS) – C:\WINDOWS\system32\drivers\s116nd5.sys (MCCI Corporation)
DRV - (s116mgmt) Sony Ericsson Device 116 USB WMC Device Management Drivers (WDM) – C:\WINDOWS\system32\drivers\s116mgmt.sys (MCCI Corporation)
DRV - (s116mdm) – C:\WINDOWS\system32\drivers\s116mdm.sys (MCCI Corporation)
DRV - (s116mdfl) – C:\WINDOWS\system32\drivers\s116mdfl.sys (MCCI Corporation)
DRV - (s116bus) Sony Ericsson Device 116 driver (WDM) – C:\WINDOWS\system32\drivers\s116bus.sys (MCCI Corporation)
DRV - (Afc) – C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (MTsensor) – C:\WINDOWS\system32\drivers\ASACPI.sys ()

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://au.yahoo.com
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

O1 HOSTS File: ([2010/07/27 20:29:46 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [osCheck] C:\Program Files\Norton Internet Security\osCheck.exe (Symantec Corporation)
O4 - HKLM..\Run: [WinPatrol System Monitor] C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe (BillP Studios)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Advanced\Folder\Hidden\SHOWALL: CheckedValue = 1
O8 - Extra context menu item: Append to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/2008.1…toUploader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} http://dl.tvunetworks.com/TVUAx.cab (CTVUAxCtrl Object)
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} http://lads.myspace.com/upload/MySpaceUploader1006.cab (MySpace Uploader Control)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.0…oUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {82FFA573-38AA-482A-99AD-91F697B91631} http://static.35mb.com/applet/applet_o.cab (Installer.InstallControl)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A903E5AB-C67E-40FB-94F1-E1305982F6E0} http://www.ooxtv.com/livetv.ocx (KooPlayer Control)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D4003189-95B1-4A2F-9A87-F2B03665960D} http://www.ooxtv.com/vjocx-en.cab (VodClient Control Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx1.hotmail.com/mail/w4/pr01/photo…ol/MSNPUpld.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.1.6.cab (DownloadManager Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.1.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Mianz\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mianz\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/11/19 17:55:32 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2009/12/31 20:08:13 | 000,000,000 | —D | M] - O:\automan – [ NTFS ]
O33 - MountPoints2\{d278e382-499e-11dd-b5cc-001d60196f62}\Shell\AutoRun\command - "" = .\Docs\print.exe
O33 - MountPoints2\{d278e382-499e-11dd-b5cc-001d60196f62}\Shell\explore\command - "" = .\\\\Docs/print.exe
O33 - MountPoints2\{d278e382-499e-11dd-b5cc-001d60196f62}\Shell\open\command - "" = Docs////print.exe
O33 - MountPoints2\{d36228a1-7eac-11de-b87e-001d60196f62}\Shell - "" = AutoRun
O33 - MountPoints2\{d36228a1-7eac-11de-b87e-001d60196f62}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d36228a1-7eac-11de-b87e-001d60196f62}\Shell\AutoRun\command - "" = U:\LaunchU3.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.siren - C:\WINDOWS\System32\sirenacm.dll (Microsoft Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.ffds - C:\Program Files\Combined Community Codec Pack\Filters\FFDShow\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\WINDOWS\System32\frapsvid.dll (Beepa P/L)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)

========== Files/Folders - Created Within 90 Days ==========

[2010/08/02 03:30:46 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2010/07/31 01:11:22 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2010/07/27 20:24:16 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2010/07/27 20:24:16 | 000,161,792 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2010/07/27 20:24:16 | 000,136,704 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2010/07/27 20:24:16 | 000,031,232 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2010/07/27 20:23:12 | 000,000,000 | —D | C] – C:\Qoobox
[2010/07/27 20:06:51 | 000,000,000 | —D | C] – C:\_OTL
[2010/07/23 11:26:35 | 000,574,976 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Mianz\Desktop\OTL.exe
[2010/07/10 21:57:32 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Real
[2010/07/04 23:14:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Mianz\Desktop\New Folder (4)
[2010/06/29 08:16:42 | 000,000,000 | —D | C] – C:\Documents and Settings\Mianz\Desktop\aniver dine out
[2010/06/24 16:24:03 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2010/06/24 00:21:50 | 000,000,000 | —D | C] – C:\Documents and Settings\Mianz\Desktop\New Folder (3)
[2010/06/23 16:17:43 | 000,000,000 | —D | C] – C:\Documents and Settings\Mianz\Application Data\iVisit Data
[2010/06/23 16:15:52 | 000,897,024 | —- | C] (ActMask http://www.all2pdf.com) – C:\WINDOWS\System32\SaveTo.dll
[2010/06/23 16:15:29 | 002,535,424 | —- | C] (DynaForms GmbH) – C:\WINDOWS\System32\CPDF.dll
[2010/06/23 16:15:29 | 000,883,200 | —- | C] (ActMask Co.,Ltd - http://www.all2pdf.com) – C:\WINDOWS\System32\PrintDisp.exe
[2010/06/23 16:15:29 | 000,065,536 | —- | C] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) – C:\WINDOWS\System32\PrintCtrl.exe
[2010/06/23 16:15:23 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Temp
[2010/06/23 16:15:20 | 001,170,944 | —- | C] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) – C:\WINDOWS\System32\PrtClient.exe
[2010/06/23 16:15:20 | 000,826,880 | —- | C] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) – C:\WINDOWS\System32\SetupDrv.exe
[2010/06/23 16:15:20 | 000,740,864 | —- | C] (ActMask - http://www.all2pdf.com) – C:\WINDOWS\System32\PrtTools.exe
[2010/06/23 16:15:20 | 000,724,480 | —- | C] (ActMask Co.,Ltd http://www.all2pdf.com) – C:\WINDOWS\System32\MergePDF.exe
[2010/06/23 16:15:20 | 000,708,608 | —- | C] (ActMask Co.,Ltd http://www.all2pdf.com) – C:\WINDOWS\System32\MergeImage.exe
[2010/06/23 16:15:20 | 000,375,808 | —- | C] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) – C:\WINDOWS\System32\SetPrinter.exe
[2010/06/23 16:15:20 | 000,000,000 | —D | C] – C:\WINDOWS\iVisit Virtual Printer
[2010/06/10 00:48:15 | 000,000,000 | —D | C] – C:\Documents and Settings\Mianz\Desktop\nimrah travel
[2010/05/28 19:44:05 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Nokia
[2010/05/28 18:03:20 | 000,000,000 | —D | C] – C:\Program Files\PC Connectivity Solution
[2010/05/28 18:02:56 | 000,008,320 | —- | C] (Nokia) – C:\WINDOWS\System32\drivers\nmwcdnsuc.sys
[2010/05/28 18:02:55 | 000,137,344 | —- | C] (Nokia) – C:\WINDOWS\System32\drivers\nmwcdnsu.sys
[2010/05/28 18:02:55 | 000,008,192 | —- | C] (Nokia) – C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys
[2010/05/28 18:02:54 | 000,022,528 | —- | C] (Nokia) – C:\WINDOWS\System32\drivers\ccdcmbo.sys
[2010/05/28 18:02:54 | 000,008,192 | —- | C] (Nokia) – C:\WINDOWS\System32\drivers\usbser_lowerflt.sys
[2010/05/28 18:02:53 | 000,662,016 | —- | C] (Nokia) – C:\WINDOWS\System32\nmwcdcocls.dll
[2010/05/28 18:02:53 | 000,018,176 | —- | C] (Nokia) – C:\WINDOWS\System32\drivers\ccdcmb.sys
[2010/05/09 22:57:37 | 000,000,000 | —D | C] – C:\Documents and Settings\Mianz\Desktop\New Folder (2)
[2010/05/09 18:04:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Mianz\Desktop\image trial
[2010/05/09 14:54:17 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Sun
[2010/05/09 14:54:15 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2010/05/06 20:40:09 | 000,000,000 | —D | C] – C:\Documents and Settings\Mianz\Application Data\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/05/06 20:29:31 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2010/05/06 20:24:40 | 000,000,000 | —D | C] – C:\Program Files\Adobe Media Player
[2010/05/06 20:21:53 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe AIR

========== Files - Modified Within 90 Days ==========

[2010/08/04 19:08:39 | 000,869,051 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\SecurityCheck.exe
[2010/08/04 18:18:06 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/08/04 18:18:05 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010/08/04 18:18:05 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010/08/04 18:18:05 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010/08/04 18:18:05 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010/08/04 15:24:45 | 014,417,920 | -H– | M] () – C:\Documents and Settings\Mianz\NTUSER.DAT
[2010/08/04 13:23:07 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{9E778CB5-D3CF-4D0C-B311-A0ECC96E9A68}.job
[2010/08/04 13:07:34 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/08/04 13:07:31 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/08/04 13:00:22 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/08/04 13:00:02 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/08/03 23:08:38 | 002,098,230 | —- | M] () – C:\WINDOWS\ACD Wallpaper.bmp
[2010/08/03 22:30:57 | 000,087,552 | —- | M] () – C:\Documents and Settings\Mianz\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/03 17:42:40 | 000,018,481 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\August prayer timings.pdf
[2010/08/02 20:00:20 | 000,000,622 | —- | M] () – C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Mianz.job
[2010/07/28 16:47:49 | 000,020,616 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\ramadan timings.pdf
[2010/07/27 20:30:02 | 000,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2010/07/27 20:29:46 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2010/07/27 20:19:07 | 003,744,545 | R— | M] () – C:\Documents and Settings\Mianz\Desktop\ComboFix.exe
[2010/07/25 22:19:25 | 000,000,560 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\stealth
[2010/07/25 22:17:24 | 000,132,096 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\RootRepeal.exe
[2010/07/23 11:26:43 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Mianz\Desktop\OTL.exe
[2010/07/14 21:30:29 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/07/03 10:25:00 | 003,295,907 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\IMG_9759.JPG
[2010/06/24 00:21:56 | 000,523,110 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010/06/24 00:21:56 | 000,444,358 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/06/24 00:21:56 | 000,072,108 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/06/24 00:17:55 | 000,001,908 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Nokia Software Updater.lnk
[2010/06/23 16:15:19 | 000,000,616 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\iVisit Presenter.lnk
[2010/06/22 15:34:33 | 000,093,115 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\929.pdf
[2010/06/20 23:51:57 | 000,025,600 | —- | M] () – C:\Documents and Settings\Mianz\My Documents\Blank CV.doc
[2010/06/13 04:30:18 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2010/06/12 18:40:57 | 003,696,888 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/06/12 08:27:49 | 000,001,031 | —- | M] () – C:\WINDOWS\win.ini
[2010/06/04 20:49:06 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2010/06/04 20:49:05 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2010/05/28 17:59:29 | 035,607,992 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\NokiaSoftwareUpdaterSetup_en.exe
[2010/05/20 17:57:18 | 000,081,914 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\learn to fight right.pdf
[2010/05/16 15:06:54 | 000,001,922 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/07 19:52:34 | 003,934,112 | —- | M] () – C:\Documents and Settings\Mianz\My Documents\Nimrah Year book final with text.psd
[2010/05/07 19:23:20 | 003,934,112 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\Nimrah Year book final with text.psd
[2010/05/07 19:23:20 | 003,934,112 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\Copy of nimrah yearbook photoshop layer 1 with text.psd
[2010/05/07 01:23:42 | 003,810,647 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\nimrah yearbook photoshop layer 1 saved master.psd
[2010/05/07 01:10:57 | 003,805,498 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\nimrah yearbook sharpened layer 2 saved.psd
[2010/05/07 01:04:12 | 000,193,384 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\Untitled-1.jpg
[2010/05/07 01:04:12 | 000,193,384 | —- | M] () – C:\Documents and Settings\Mianz\Desktop\nimrah year book final indesign.jpg
[2010/05/07 00:54:47 | 006,123,520 | —- | M] () – C:\Documents and Settings\Mianz\My Documents\Untitled-1.indd
[2010/05/06 20:33:22 | 000,047,344 | —- | M] () – C:\Documents and Settings\Mianz\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

========== Files Created - No Company Name ==========

[2010/08/04 19:08:39 | 000,869,051 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\SecurityCheck.exe
[2010/08/03 17:42:40 | 000,018,481 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\August prayer timings.pdf
[2010/07/28 16:47:49 | 000,020,616 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\ramadan timings.pdf
[2010/07/27 20:24:16 | 000,256,512 | —- | C] () – C:\WINDOWS\PEV.exe
[2010/07/27 20:24:16 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2010/07/27 20:24:16 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2010/07/27 20:24:16 | 000,077,312 | —- | C] () – C:\WINDOWS\MBR.exe
[2010/07/27 20:24:16 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2010/07/27 20:19:07 | 003,744,545 | R— | C] () – C:\Documents and Settings\Mianz\Desktop\ComboFix.exe
[2010/07/25 22:19:25 | 000,000,560 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\stealth
[2010/07/25 22:17:23 | 000,132,096 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\RootRepeal.exe
[2010/07/03 10:25:00 | 003,295,907 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\IMG_9759.JPG
[2010/06/29 15:17:06 | 000,000,422 | -H– | C] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{9E778CB5-D3CF-4D0C-B311-A0ECC96E9A68}.job
[2010/06/23 16:15:29 | 001,391,616 | —- | C] () – C:\WINDOWS\System32\ActPDF.dll
[2010/06/23 16:15:20 | 000,691,200 | —- | C] () – C:\WINDOWS\System32\PrintLog.exe
[2010/06/23 16:15:20 | 000,524,288 | —- | C] () – C:\WINDOWS\System32\PrtPass.exe
[2010/06/23 16:15:19 | 000,000,616 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\iVisit Presenter.lnk
[2010/06/22 15:34:33 | 000,093,115 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\929.pdf
[2010/06/20 23:51:56 | 000,025,600 | —- | C] () – C:\Documents and Settings\Mianz\My Documents\Blank CV.doc
[2010/06/04 20:49:06 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2010/06/04 20:49:05 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2010/05/28 18:02:02 | 000,001,908 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Nokia Software Updater.lnk
[2010/05/28 17:59:29 | 035,607,992 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\NokiaSoftwareUpdaterSetup_en.exe
[2010/05/20 17:57:18 | 000,081,914 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\learn to fight right.pdf
[2010/05/16 15:06:54 | 000,001,922 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/07 19:52:34 | 003,934,112 | —- | C] () – C:\Documents and Settings\Mianz\My Documents\Nimrah Year book final with text.psd
[2010/05/07 19:37:42 | 003,934,112 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\Nimrah Year book final with text.psd
[2010/05/07 18:58:18 | 003,934,112 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\Copy of nimrah yearbook photoshop layer 1 with text.psd
[2010/05/07 01:13:04 | 003,810,647 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\nimrah yearbook photoshop layer 1 saved master.psd
[2010/05/07 01:10:57 | 003,805,498 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\nimrah yearbook sharpened layer 2 saved.psd
[2010/05/07 01:06:51 | 000,193,384 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\nimrah year book final indesign.jpg
[2010/05/06 22:14:38 | 006,123,520 | —- | C] () – C:\Documents and Settings\Mianz\My Documents\Untitled-1.indd
[2010/05/06 21:27:48 | 000,193,384 | —- | C] () – C:\Documents and Settings\Mianz\Desktop\Untitled-1.jpg
[2010/03/01 22:22:36 | 000,002,057 | —- | C] () – C:\WINDOWS\System32\GUCI_AVS.ini
[2009/12/27 17:27:41 | 000,000,048 | —- | C] () – C:\WINDOWS\wininit.ini
[2009/11/14 13:07:04 | 000,138,184 | —- | C] () – C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009/10/10 23:20:04 | 000,000,118 | —- | C] () – C:\WINDOWS\System32\MRT.INI
[2009/08/03 14:07:42 | 000,403,816 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/03/30 20:32:38 | 000,003,200 | —- | C] () – C:\WINDOWS\PSPICEEV.INI
[2009/03/30 20:32:36 | 000,176,128 | —- | C] () – C:\WINDOWS\System32\lffax60n.dll
[2009/03/30 20:32:36 | 000,141,824 | —- | C] () – C:\WINDOWS\System32\lfcmp60n.dll
[2009/03/30 20:32:36 | 000,110,080 | —- | C] () – C:\WINDOWS\System32\lfpng60n.dll
[2009/03/30 20:32:36 | 000,046,080 | —- | C] () – C:\WINDOWS\System32\lftif60n.dll
[2009/03/30 20:32:36 | 000,043,008 | —- | C] () – C:\WINDOWS\System32\ltfil60n.dll
[2009/03/30 20:32:36 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\lfpcx60n.dll
[2009/03/30 20:32:36 | 000,022,528 | —- | C] () – C:\WINDOWS\System32\lfpct60n.dll
[2009/03/30 20:32:36 | 000,022,528 | —- | C] () – C:\WINDOWS\System32\lfeps60n.dll
[2009/03/30 20:32:36 | 000,022,016 | —- | C] () – C:\WINDOWS\System32\lfbmp60n.dll
[2009/03/30 20:32:36 | 000,020,480 | —- | C] () – C:\WINDOWS\System32\lfpsd60n.dll
[2009/03/30 20:32:36 | 000,019,968 | —- | C] () – C:\WINDOWS\System32\lftga60n.dll
[2009/03/30 20:32:36 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\lfwpg60n.dll
[2009/03/30 20:32:36 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\lfwmf60n.dll
[2009/03/30 20:32:36 | 000,018,432 | —- | C] () – C:\WINDOWS\System32\lfmsp60n.dll
[2009/03/30 20:32:36 | 000,017,920 | —- | C] () – C:\WINDOWS\System32\lfmac60n.dll
[2009/03/30 20:32:36 | 000,017,920 | —- | C] () – C:\WINDOWS\System32\implode.dll
[2009/02/15 21:56:22 | 000,036,864 | —- | C] () – C:\WINDOWS\JPGL.DLL
[2009/02/15 21:56:22 | 000,032,768 | —- | C] () – C:\WINDOWS\DIV_IYUV.DLL
[2008/04/25 23:13:16 | 000,000,071 | —- | C] () – C:\WINDOWS\RmFile.ini
[2008/04/25 23:13:15 | 000,000,010 | —- | C] () – C:\WINDOWS\System32\MprExe.Ini
[2008/03/22 11:36:47 | 000,000,025 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2008/03/04 17:52:34 | 000,286,720 | —- | C] () – C:\WINDOWS\System32\libcurl.dll
[2007/12/14 12:52:54 | 000,010,831 | —- | C] () – C:\WINDOWS\System32\MpUpMon.dll
[2007/12/14 12:52:38 | 000,001,302 | —- | C] () – C:\WINDOWS\System32\MpEnum.ini
[2007/12/14 12:52:38 | 000,000,026 | —- | C] () – C:\WINDOWS\System32\MpNetIpc.ini
[2007/11/20 19:05:12 | 000,013,269 | —- | C] () – C:\WINDOWS\Ascd_tmp.ini
[2007/11/20 18:58:01 | 000,010,959 | —- | C] () – C:\WINDOWS\Ascd_log.ini
[2007/11/20 18:57:21 | 000,005,810 | R— | C] () – C:\WINDOWS\System32\drivers\ASACPI.sys
[2007/11/20 18:56:59 | 000,010,288 | —- | C] () – C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007/11/20 18:39:42 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2007/10/31 08:39:54 | 000,059,904 | —- | C] () – C:\WINDOWS\System32\zlib1.dll
[2007/06/29 02:43:00 | 001,703,936 | —- | C] () – C:\WINDOWS\System32\nvwdmcpl.dll
[2007/06/29 02:43:00 | 001,474,560 | —- | C] () – C:\WINDOWS\System32\nview.dll
[2007/06/29 02:43:00 | 001,019,904 | —- | C] () – C:\WINDOWS\System32\nvwimg.dll
[2007/06/29 02:43:00 | 000,466,944 | —- | C] () – C:\WINDOWS\System32\nvshell.dll
[2007/06/29 02:43:00 | 000,286,720 | —- | C] () – C:\WINDOWS\System32\nvnt4cpl.dll
[2007/05/17 12:58:10 | 000,143,360 | —- | C] () – C:\WINDOWS\System32\libexpatw.dll
[2006/04/19 08:30:56 | 003,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2006/03/22 10:38:42 | 000,012,288 | —- | C] () – C:\WINDOWS\System32\DivXWMPExtType.dll
[2004/09/28 05:38:30 | 000,114,688 | —- | C] () – C:\WINDOWS\System32\wmatimer.dll
[2003/01/07 14:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
[2002/03/21 12:51:52 | 000,503,808 | R— | C] () – C:\WINDOWS\System32\lt_xtrans.dll
[2002/03/21 12:51:52 | 000,286,720 | R— | C] () – C:\WINDOWS\System32\MrSIDD.dll
[2002/03/21 12:51:52 | 000,163,840 | R— | C] () – C:\WINDOWS\System32\lt_common.dll
[2002/03/21 12:51:52 | 000,126,976 | R— | C] () – C:\WINDOWS\System32\lt_trans.dll
[2002/03/21 12:51:52 | 000,069,632 | R— | C] () – C:\WINDOWS\System32\lt_meta.dll
[2002/03/21 12:51:52 | 000,053,248 | R— | C] () – C:\WINDOWS\System32\lt_encrypt.dll
[2002/03/21 12:51:52 | 000,020,480 | R— | C] () – C:\WINDOWS\System32\lt_messagetext.dll
[2002/03/20 21:01:06 | 000,006,688 | R— | C] () – C:\WINDOWS\System32\Digita.sys
[2002/03/20 21:00:20 | 000,049,152 | R— | C] () – C:\WINDOWS\System32\TransportUSB.dll
[2002/03/20 21:00:20 | 000,049,152 | R— | C] () – C:\WINDOWS\System32\TransportSerial.dll
[2002/03/20 21:00:20 | 000,049,152 | R— | C] () – C:\WINDOWS\System32\TransportIrDA.dll
[2002/03/20 21:00:20 | 000,049,152 | R— | C] () – C:\WINDOWS\System32\TransportIrCOMM.dll

========== LOP Check ==========

[2007/12/12 22:54:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ACD Systems
[2007/12/14 12:52:40 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Canon
[2007/12/26 20:49:16 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FlashFXP
[2009/04/10 01:45:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\id Software
[2010/05/28 18:00:37 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Installations
[2010/05/28 19:44:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nokia
[2007/12/14 20:24:27 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PC Suite
[2010/05/06 20:29:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2009/12/27 18:33:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SITEguard
[2010/01/01 01:34:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\STOPzilla!
[2010/06/23 16:15:23 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Temp
[2007/12/30 23:50:19 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\vsosdk
[2007/12/14 11:28:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WinZip
[2009/12/12 17:16:08 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
[2008/01/03 16:17:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\ACD Systems
[2009/03/04 22:50:43 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\AI Internet Solutions
[2009/09/18 23:52:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\Audacity
[2008/09/05 02:06:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\Bytescout SWF To Video Scout
[2008/07/04 20:56:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\Canon
[2010/05/06 20:40:09 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2007/12/26 20:52:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\FlashFXP
[2009/02/26 00:00:56 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\HDRsoft
[2009/01/14 16:59:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\ICQ
[2009/04/10 11:25:14 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\id Software
[2010/06/23 16:17:43 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\iVisit Data
[2008/11/19 16:43:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\Leadertech
[2010/06/24 00:22:43 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\Nokia
[2009/05/01 20:48:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\Opera
[2009/08/28 20:30:08 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\PC Suite
[2007/12/25 20:59:14 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\Teleca
[2008/10/11 21:05:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\TextPad
[2010/08/04 19:14:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\uTorrent
[2009/09/30 21:09:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\Vso
[2008/05/07 10:56:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\WeGame
[2007/12/12 22:51:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Mianz\Application Data\WinPatrol
[2010/08/04 18:18:05 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job
[2010/08/04 18:18:05 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job
[2010/08/04 18:18:05 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job
[2010/08/04 18:18:05 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job
[2010/08/04 18:18:06 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2010/08/04 13:23:07 | 000,000,422 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{9E778CB5-D3CF-4D0C-B311-A0ECC96E9A68}.job

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2010/08/04 12:59:52 | 000,058,457 | —- | M] () – C:\aaw7boot.log
[2007/11/19 17:55:32 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2007/11/19 17:50:36 | 000,000,211 | —- | M] () – C:\Boot.bak
[2010/01/03 13:42:43 | 000,000,281 | RHS- | M] () – C:\boot.ini
[2004/08/03 22:00:00 | 000,260,272 | —- | M] () – C:\cmldr
[2010/07/27 20:31:22 | 000,013,325 | —- | M] () – C:\ComboFix.txt
[2007/11/19 17:55:32 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2009/07/07 14:06:30 | 000,003,532 | —- | M] () – C:\drmHeader.bin
[2007/11/19 17:55:32 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/08/01 00:10:10 | 000,000,109 | —- | M] () – C:\mbam-error.txt
[2007/11/19 17:55:32 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004/08/03 22:38:34 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/09/14 18:39:38 | 000,250,048 | RHS- | M] () – C:\ntldr
[2010/08/04 12:59:54 | 2145,386,496 | -HS- | M] () – C:\pagefile.sys
[2010/03/01 22:42:57 | 000,230,436 | —- | M] () – C:\PAP7501.dat
[2007/11/20 19:00:41 | 000,000,575 | —- | M] () – C:\RHDSetup.log
[2007/12/07 02:49:02 | 000,000,268 | -H– | M] () – C:\sqmdata00.sqm
[2007/12/07 11:01:01 | 000,000,268 | -H– | M] () – C:\sqmdata01.sqm
[2007/12/07 12:20:38 | 000,000,268 | -H– | M] () – C:\sqmdata02.sqm
[2007/12/07 13:22:29 | 000,000,268 | -H– | M] () – C:\sqmdata03.sqm
[2007/12/11 10:13:23 | 000,000,268 | -H– | M] () – C:\sqmdata04.sqm
[2007/12/12 09:10:59 | 000,000,268 | -H– | M] () – C:\sqmdata05.sqm
[2007/12/12 20:37:31 | 000,000,268 | -H– | M] () – C:\sqmdata06.sqm
[2007/12/07 02:49:02 | 000,000,244 | -H– | M] () – C:\sqmnoopt00.sqm
[2007/12/07 11:01:01 | 000,000,244 | -H– | M] () – C:\sqmnoopt01.sqm
[2007/12/07 12:20:38 | 000,000,244 | -H– | M] () – C:\sqmnoopt02.sqm
[2007/12/07 13:22:29 | 000,000,244 | -H– | M] () – C:\sqmnoopt03.sqm
[2007/12/11 10:13:23 | 000,000,244 | -H– | M] () – C:\sqmnoopt04.sqm
[2007/12/12 09:10:59 | 000,000,244 | -H– | M] () – C:\sqmnoopt05.sqm
[2007/12/12 20:37:31 | 000,000,244 | -H– | M] () – C:\sqmnoopt06.sqm

< %systemroot%\system32\*.wt >

< %systemroot%\system32\*.ruy >

< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2007/11/19 17:55:16 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2009/11/22 02:46:30 | 000,030,208 | —- | M] (ActMask Co.,Ltd) – C:\WINDOWS\system32\spool\prtprocs\w32x86\ActPrint.dll
[2002/10/09 16:35:24 | 000,013,824 | R— | M] (CANON INC.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPDyc.DLL
[2002/10/09 16:35:24 | 000,043,008 | R— | M] (CANON INC.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPPyc.DLL
[2008/07/06 22:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007/04/09 13:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 20:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2009/03/08 04:31:44 | 000,348,160 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\WINDOWS\system32\dxtmsft.dll
[2009/03/08 04:31:38 | 000,216,064 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\WINDOWS\system32\dxtrans.dll
[2010/05/06 20:41:50 | 000,184,320 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\WINDOWS\system32\iepeers.dll

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2007/11/20 04:40:51 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2007/11/20 04:40:51 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2007/11/20 04:40:51 | 000,905,216 | —- | M] () – C:\WINDOWS\system32\config\system.sav

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-08-03 07:50:32
< End of report >

mowman

Post #17August 4, 2010, 4:16 PM UTC

Hello tranquiliser you appear clean of infections,please do the following.

ComboFix - Cleanup
Time for some housekeeping

Click Start…select Run from the menu.
Copy and paste the following into the text entry box:
Combofix /Uninstall
Click the OK button. (See image below as reference.)

🖼Click to load external image (Posted Image)

Clean up with OTL:

Double-click OTL.exe to start the program.
Close all other programs apart from OTL as this step will require a reboot
On the OTL main screen, press the CLEANUP button
Say Yes to the prompt and then allow the program to reboot your computer.

[external image: Posted Image]
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

Download the latest version of Java Runtime Environment (JRE) 21 and save it to your desktop.
Scroll down to where it says JDK 6 Update 21 (JDK or JRE)
Click the Download JRE button to the right
Select the Windows platform from the dropdown menu.
Read the License Agreement and then check the box that says: "I agree to the Java SE Runtime Environment 6u21 with JavaFX 1 License Agreement". Click on Continue.The page will refresh.
Click on the link to download Windows Offline Installation and save the file to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel, double-click on Add or Remove Programs and remove all older versions of Java.
Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java™ 6) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u21-windows-i586-p.exe to install the newest version.

After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
- On the General tab, under Temporary Internet Files, click the Settings button.
- Next, click on the Delete Files button
- There are two options in the window to clear the cache - Leave BOTH CheckedApplications and Applets
  Trace and Log Files
Click OK on Delete Temporary Files Window
Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
Click OK to leave the Temporary Files Window
Click OK to leave the Java Control Panel.

Here are some recommendations to help you stay clean.

Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.

Visit Microsoft often to get the latest updates for your computer.
http://www.update.microsoft.com/

Make sure you are running a FIREWALL.The windows firewall is not sufficient to protect your system. It doesn't monitor outgoing traffic and this is a must.
Please read this article 'Safe Computing Practices'.
So how did I get infected in the first place.

please take a moment to read quietman7's excellent prevention tips in post 3 here
Click >>>> Tips to protect yourself against malware and reduce the potential for re-infection:

Preventing Infections in the Future

Please also have a look at the following links, giving some advice and Tips to protect yourself against malware and reduce the potential for re-infection:

So How did I get infected?
Miekies' prevention suggestions
Hardening Windows Security - Part 1 & Part 2.

Avoid gaming sites, underground web pages, pirated software sites, and peer-to-peer (P2P) file sharing programs. They are a security risk which can make your computer susceptible to a smörgåsbord of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites. Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users. The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications. Read P2P Software User Advisories and Risks of File-Sharing Technology.

Update Non-Microsoft Programs

It is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities. You can check these by visiting Secunia Software Inspector and Calendar of Updates.

Thats it you are good to go.Safe surfing

tranquillizer

Post #18August 6, 2010, 1:11 PM UTC

i have done all the above mentioned. can you please briefly explain me that what was wrong with my system and what did you do to fix it. thanks

mowman

Post #19August 6, 2010, 1:23 PM UTC

Not that much really as your computer was not that badly infected,just got rid of a few malware files and some unneeded registry entries.

tranquillizer

Post #20August 7, 2010, 11:12 AM UTC

thanks for the help. cheers

mowman

Post #21August 7, 2010, 11:17 AM UTC

You're welcome,glad we could help

SweetTech

Post #22August 7, 2010, 2:49 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.

possible infected system. unexpected computer behaviour

✨ Ask AI

Ask AI