Spyware / Malware / Virus Removal

Antivir Solution Pro Removed but now no IE

1 min read

Looking for the outcome? Ask AI

NlightN Topic Starter

Post #1August 8, 2010, 11:01 PM UTC

Well got the Antiviri Solution Pro was is a fake antivirus program. Ran Norton 360 and Malwarebytes and found 5 infections and 3 infections respectively. But now My IE8 wont bring up a web page and I install Firefox which states I have a proxy error. The following is the HJT file and OTL file. Thanks in advance.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:09:11 PM, on 8/8/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18470)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\hp\kbd\kbd.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Greene Turtle\Desktop\Mozilla FireFox 3.6\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6522
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.1.0.32\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.1.0.32\IPSBHO.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.1.0.32\coIEPlg.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{53BD23A1-05C7-43D7-A86D-B2B242EFA34D}: NameServer = 68.87.77.130
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.1.0.32\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

–
End of file - 6351 bytes

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~`

OTL logfile created on: 8/8/2010 6:19:04 PM - Run 2
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Greene Turtle\Desktop\Mozilla FireFox 3.6
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 52.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 78.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 363.75 Gb Total Space | 274.43 Gb Free Space | 75.44% Space Free | Partition Type: NTFS
Drive D: | 8.86 Gb Total Space | 1.16 Gb Free Space | 13.13% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive K: | 3.86 Gb Total Space | 2.05 Gb Free Space | 53.27% Space Free | Partition Type: FAT

Computer Name: GREENETURTLE-PC
Current User Name: Greene Turtle
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Greene Turtle\Desktop\Mozilla FireFox 3.6\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Norton 360\Engine\4.1.0.32\ccsvchst.exe (Symantec Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Brother\ControlCenter3\BrccMCtl.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
PRC - C:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)

========== Modules (SafeList) ==========

MOD - C:\Users\Greene Turtle\Desktop\Mozilla FireFox 3.6\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Norton 360\Engine\4.1.0.32\asoehook.dll (Symantec Corporation)
MOD - C:\Program Files\Norton 360\Engine\4.1.0.32\microsoft.vc90.crt\msvcr90.dll (Microsoft Corporation)
MOD - C:\Program Files\Norton 360\Engine\4.1.0.32\microsoft.vc90.crt\msvcp90.dll (Microsoft Corporation)
MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV - (WPFFontCache_v0400) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (N360) – C:\Program Files\Norton 360\Engine\4.1.0.32\ccSvcHst.exe (Symantec Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (WcesComm) – C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) – C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (NwlnkFwd) – C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) – C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) – C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (blbdrive) – C:\Windows\System32\drivers\blbdrive.sys File not found
DRV - (SymEvent) – C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100304.005\navex15.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100304.005\naveng.sys (Symantec Corporation)
DRV - (SymIRON) – C:\Windows\system32\drivers\N360\0401000.020\Ironx86.SYS (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\system32\drivers\N360\0401000.020\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\system32\drivers\N360\0401000.020\SRTSPX.SYS (Symantec Corporation)
DRV - (ccHP) – C:\Windows\system32\drivers\N360\0401000.020\ccHPx86.sys (Symantec Corporation)
DRV - (BHDrvx86) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20100211.001\bhdrvx86.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (SymEFA) – C:\Windows\system32\drivers\N360\0401000.020\SYMEFA.SYS (Symantec Corporation)
DRV - (SYMTDIv) – C:\Windows\system32\drivers\N360\0401000.020\SYMTDIV.SYS (Symantec Corporation)
DRV - (IDSVix86) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20091105.001\IDSVix86.sys (Symantec Corporation)
DRV - (SymDS) – C:\Windows\system32\drivers\N360\0401000.020\SYMDS.SYS (Symantec Corporation)
DRV - (nvlddmkm) – C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (netr73) – C:\Windows\System32\drivers\netr73.sys (Ralink Technology, Corp.)
DRV - (MCSTRM) – C:\Windows\System32\drivers\mcstrm.sys (RealNetworks, Inc.)
DRV - (WINUSB) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (nvstor32) – C:\Windows\system32\drivers\nvstor32.sys (NVIDIA Corporation)
DRV - (xcbdaNtsc) ViXS Tuner Card (NTSC) – C:\Windows\System32\drivers\xcbda.sys (ViXS Systems Inc.)
DRV - (NVENETFD) – C:\Windows\System32\drivers\nvmfdx32.sys (NVIDIA Corporation)
DRV - (HPFXBULK) – C:\Windows\System32\drivers\hpfxbulk.sys (Hewlett Packard)
DRV - (BrSerIf) – C:\Windows\System32\drivers\BrSerIf.sys (Brother Industries Ltd.)
DRV - (ql2300) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (SiSRaid4) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) – C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) – C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (viaide) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (E1G60) Intel® – C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (BrUsbSer) – C:\Windows\System32\drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (Ps2) – C:\Windows\System32\drivers\PS2.sys (Hewlett-Packard Company)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 2
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:6522

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6
FF - prefs.js..extensions.enabledItems: [removed]:7

FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2010/08/08 12:50:22 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2010/08/08 12:50:26 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/08/08 17:53:08 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/08/08 17:53:07 | 000,000,000 | —D | M]

[2010/08/08 17:53:23 | 000,000,000 | —D | M] – C:\Users\Greene Turtle\AppData\Roaming\Mozilla\Extensions
[2010/08/08 17:55:36 | 000,000,000 | —D | M] – C:\Users\Greene Turtle\AppData\Roaming\Mozilla\Firefox\Profiles\j5gyywrd.default\extensions
[2010/08/08 17:55:36 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Greene Turtle\AppData\Roaming\Mozilla\Firefox\Profiles\j5gyywrd.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/08/08 17:53:07 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions

O1 HOSTS File: ([2006/09/18 17:41:30 | 000,000,761 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.1.0.32\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.1.0.32\ipsbho.dll (Symantec Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.1.0.32\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.1.0.32\coieplg.dll (Symantec Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PPort11reminder] C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll (Sun Microsystems, Inc.)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Greene Turtle\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Greene Turtle\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/08/11 04:15:15 | 000,000,074 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{33fd0ee1-6e41-11df-acb4-0016441967a1}\Shell\AutoRun\command - "" = K:\Player\DVR_Player.exe ..\20 – File not found
O33 - MountPoints2\{b96b1cd8-4d85-11dd-b096-001d60935dbe}\Shell\AutoRun\command - "" = J:\Autorun.exe – File not found
O33 - MountPoints2\{b96b1cd8-4d85-11dd-b096-001d60935dbe}\Shell\Shell00\Command - "" = J:\Autorun.exe – File not found
O33 - MountPoints2\{b96b1cd8-4d85-11dd-b096-001d60935dbe}\Shell\Shell01\Command - "" = J:\Autorun.exe – File not found
O33 - MountPoints2\{b96b1cd8-4d85-11dd-b096-001d60935dbe}\Shell\Shell02\Command - "" = J:\Autorun.exe – File not found
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\Start.exe – File not found
O33 - MountPoints2\E\Shell\Install\Command - "" = E:\Start.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/08/08 18:00:09 | 000,000,000 | —D | C] – C:\Users\Greene Turtle\Desktop\Mozilla FireFox 3.6
[2010/08/08 17:53:15 | 000,000,000 | —D | C] – C:\Users\Greene Turtle\AppData\Roaming\Mozilla
[2010/08/08 17:53:15 | 000,000,000 | —D | C] – C:\Users\Greene Turtle\AppData\Local\Mozilla
[2010/08/08 16:56:34 | 000,000,000 | —D | C] – C:\Windows\pss
[2010/08/08 15:47:45 | 000,000,000 | —D | C] – C:\Users\Greene Turtle\AppData\Roaming\Malwarebytes
[2010/08/08 15:47:35 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/08/08 15:47:34 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2010/08/08 15:47:34 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2010/08/08 15:47:34 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2010/08/08 13:11:59 | 000,000,000 | —D | C] – C:\Users\Greene Turtle\AppData\Roaming\Tific
[2010/08/08 11:06:06 | 000,107,368 | R— | C] (GEAR Software Inc.) – C:\Windows\System32\GEARAspi.dll
[2010/08/08 11:06:06 | 000,000,000 | —D | C] – C:\Windows\System32\DRVSTORE
[2010/08/08 11:06:05 | 000,124,976 | —- | C] (Symantec Corporation) – C:\Windows\System32\drivers\SYMEVENT.SYS
[2010/08/08 11:05:40 | 000,000,000 | —D | C] – C:\Program Files\Symantec
[2010/08/08 11:05:31 | 000,501,888 | —- | C] (Symantec Corporation) – C:\Windows\System32\drivers\N360\0401000.020\cchpx86.sys
[2010/08/08 11:05:31 | 000,340,016 | R— | C] (Symantec Corporation) – C:\Windows\System32\drivers\N360\0401000.020\symtdiv.sys
[2010/08/08 11:05:31 | 000,328,752 | R— | C] (Symantec Corporation) – C:\Windows\System32\drivers\N360\0401000.020\symds.sys
[2010/08/08 11:05:31 | 000,325,680 | —- | C] (Symantec Corporation) – C:\Windows\System32\drivers\N360\0401000.020\srtsp.sys
[2010/08/08 11:05:31 | 000,172,592 | R— | C] (Symantec Corporation) – C:\Windows\System32\drivers\N360\0401000.020\symefa.sys
[2010/08/08 11:05:31 | 000,116,784 | —- | C] (Symantec Corporation) – C:\Windows\System32\drivers\N360\0401000.020\ironx86.sys
[2010/08/08 11:05:31 | 000,043,696 | —- | C] (Symantec Corporation) – C:\Windows\System32\drivers\N360\0401000.020\srtspx.sys
[2010/08/08 11:05:18 | 000,000,000 | —D | C] – C:\Windows\System32\drivers\N360\0401000.020
[2010/08/08 11:04:56 | 000,000,000 | —D | C] – C:\Windows\System32\drivers\N360
[2010/08/08 11:04:54 | 000,000,000 | —D | C] – C:\Program Files\Norton 360
[2010/08/08 10:47:38 | 000,000,000 | —D | C] – C:\ProgramData\PCSettings
[2010/08/08 10:46:12 | 000,000,000 | —D | C] – C:\ProgramData\NortonInstaller
[2010/08/08 10:46:12 | 000,000,000 | —D | C] – C:\Program Files\NortonInstaller
[2010/08/07 14:29:03 | 000,000,000 | —D | C] – C:\Users\Greene Turtle\AppData\Local\nelwrsjma
[2010/08/05 09:22:55 | 000,000,000 | —D | C] – C:\Users\Greene Turtle\Desktop\DCPR
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/08/08 18:21:45 | 004,718,592 | -HS- | M] () – C:\Users\Greene Turtle\NTUSER.DAT
[2010/08/08 18:12:00 | 000,000,886 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/08/08 17:53:59 | 000,604,264 | —- | M] () – C:\Windows\System32\perfh009.dat
[2010/08/08 17:53:58 | 000,703,388 | —- | M] () – C:\Windows\System32\PerfStringBackup.INI
[2010/08/08 17:53:58 | 000,103,964 | —- | M] () – C:\Windows\System32\perfc009.dat
[2010/08/08 17:53:09 | 000,001,750 | —- | M] () – C:\Users\Greene Turtle\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/08/08 17:53:09 | 000,001,726 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/08/08 17:20:27 | 000,003,568 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/08/08 17:20:27 | 000,003,568 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/08/08 17:20:26 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/08/08 17:20:19 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/08/08 17:20:16 | 2011,750,400 | -HS- | M] () – C:\hiberfil.sys
[2010/08/08 17:17:58 | 000,524,288 | -HS- | M] () – C:\Users\Greene Turtle\NTUSER.DAT{d55e558a-496f-11de-a99c-0016441967a1}.TMContainer00000000000000000001.regtrans-ms
[2010/08/08 17:17:58 | 000,065,536 | -HS- | M] () – C:\Users\Greene Turtle\NTUSER.DAT{d55e558a-496f-11de-a99c-0016441967a1}.TM.blf
[2010/08/08 17:06:14 | 002,114,533 | -H– | M] () – C:\Users\Greene Turtle\AppData\Local\IconCache.db
[2010/08/08 17:05:50 | 002,057,892 | —- | M] () – C:\Windows\System32\drivers\N360\0401000.020\Cat.DB
[2010/08/08 16:58:48 | 000,000,945 | —- | M] () – C:\Users\Greene Turtle\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/08/08 15:47:38 | 000,000,820 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/08/08 11:05:40 | 000,124,976 | —- | M] (Symantec Corporation) – C:\Windows\System32\drivers\SYMEVENT.SYS
[2010/08/08 11:05:40 | 000,007,443 | —- | M] () – C:\Windows\System32\drivers\SYMEVENT.CAT
[2010/08/08 11:05:40 | 000,000,805 | —- | M] () – C:\Windows\System32\drivers\SYMEVENT.INF
[2010/08/08 11:05:38 | 000,000,620 | —- | M] () – C:\Windows\tasks\Norton Internet Security - Run Full System Scan - Greene Turtle.job
[2010/08/08 11:05:37 | 000,002,142 | —- | M] () – C:\Users\Public\Desktop\Norton 360.lnk
[2010/08/07 16:11:51 | 000,000,882 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/08/07 09:21:38 | 047,457,792 | —- | M] () – C:\Users\Greene Turtle\Desktop\Slide Show August 2010.ppt
[2010/08/07 09:08:54 | 000,001,226 | —- | M] () – C:\Users\Greene Turtle\Desktop\2010 Background Slides - Shortcut.lnk
[2010/08/07 02:44:06 | 000,109,056 | —- | M] () – C:\Users\Greene Turtle\Desktop\Daily_Cash_Performance_Report 8-5-10.xls
[2010/08/07 02:41:37 | 000,047,071 | —- | M] () – C:\Users\Greene Turtle\Desktop\Lewes_Aug_COGS.xlsx
[2010/08/01 23:33:24 | 000,022,528 | —- | M] () – C:\Users\Greene Turtle\Desktop\Monthly Deposit Log.xls
[2010/07/31 01:43:14 | 000,192,754 | —- | M] () – C:\Users\Greene Turtle\Desktop\Active_Lewes_Waste_Report.xlsx
[2010/07/30 09:39:50 | 000,025,600 | —- | M] () – C:\Users\Greene Turtle\Desktop\Important Numbers.xls
[2010/07/29 17:02:08 | 000,294,219 | —- | M] () – C:\Users\Greene Turtle\Desktop\Tips_2010.pdf
[2010/07/23 01:31:25 | 000,136,704 | —- | M] () – C:\Users\Greene Turtle\Documents\TEES.pub
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/08/08 17:53:09 | 000,001,750 | —- | C] () – C:\Users\Greene Turtle\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/08/08 17:53:09 | 000,001,726 | —- | C] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/08/08 16:51:17 | 2011,750,400 | -HS- | C] () – C:\hiberfil.sys
[2010/08/08 15:47:38 | 000,000,820 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/08/08 12:49:17 | 002,057,892 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\Cat.DB
[2010/08/08 11:06:05 | 000,007,443 | —- | C] () – C:\Windows\System32\drivers\SYMEVENT.CAT
[2010/08/08 11:06:05 | 000,000,805 | —- | C] () – C:\Windows\System32\drivers\SYMEVENT.INF
[2010/08/08 11:05:37 | 000,002,142 | —- | C] () – C:\Users\Public\Desktop\Norton 360.lnk
[2010/08/08 11:05:31 | 000,007,787 | R— | C] () – C:\Windows\System32\drivers\N360\0401000.020\symnetv.cat
[2010/08/08 11:05:31 | 000,007,444 | R— | C] () – C:\Windows\System32\drivers\N360\0401000.020\symefa.cat
[2010/08/08 11:05:31 | 000,007,442 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\srtspx.cat
[2010/08/08 11:05:31 | 000,007,438 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\srtsp.cat
[2010/08/08 11:05:31 | 000,007,438 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\iron.cat
[2010/08/08 11:05:31 | 000,007,425 | R— | C] () – C:\Windows\System32\drivers\N360\0401000.020\symds.cat
[2010/08/08 11:05:31 | 000,007,396 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\cchpx86.cat
[2010/08/08 11:05:31 | 000,007,368 | R— | C] () – C:\Windows\System32\drivers\N360\0401000.020\symnet.cat
[2010/08/08 11:05:31 | 000,003,374 | R— | C] () – C:\Windows\System32\drivers\N360\0401000.020\symefa.inf
[2010/08/08 11:05:31 | 000,002,793 | R— | C] () – C:\Windows\System32\drivers\N360\0401000.020\symds.inf
[2010/08/08 11:05:31 | 000,001,754 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\cchpx86.inf
[2010/08/08 11:05:31 | 000,001,473 | R— | C] () – C:\Windows\System32\drivers\N360\0401000.020\symnetv.inf
[2010/08/08 11:05:31 | 000,001,445 | R— | C] () – C:\Windows\System32\drivers\N360\0401000.020\symnet.inf
[2010/08/08 11:05:31 | 000,001,388 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\srtspx.inf
[2010/08/08 11:05:31 | 000,001,382 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\srtsp.inf
[2010/08/08 11:05:31 | 000,000,741 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\iron.inf
[2010/08/08 11:05:31 | 000,000,172 | —- | C] () – C:\Windows\System32\drivers\N360\0401000.020\isolate.ini
[2010/08/07 09:08:50 | 000,001,226 | —- | C] () – C:\Users\Greene Turtle\Desktop\2010 Background Slides - Shortcut.lnk
[2010/08/03 08:26:58 | 000,047,071 | —- | C] () – C:\Users\Greene Turtle\Desktop\Lewes_Aug_COGS.xlsx
[2010/08/01 23:33:24 | 000,022,528 | —- | C] () – C:\Users\Greene Turtle\Desktop\Monthly Deposit Log.xls
[2010/08/01 21:15:53 | 000,109,056 | —- | C] () – C:\Users\Greene Turtle\Desktop\Daily_Cash_Performance_Report 8-5-10.xls
[2010/07/31 15:43:04 | 047,457,792 | —- | C] () – C:\Users\Greene Turtle\Desktop\Slide Show August 2010.ppt
[2010/07/31 01:43:14 | 000,192,754 | —- | C] () – C:\Users\Greene Turtle\Desktop\Active_Lewes_Waste_Report.xlsx
[2010/07/29 17:01:01 | 000,294,219 | —- | C] () – C:\Users\Greene Turtle\Desktop\Tips_2010.pdf
[2010/07/23 01:31:25 | 000,136,704 | —- | C] () – C:\Users\Greene Turtle\Documents\TEES.pub
[2009/10/06 14:35:56 | 000,053,248 | —- | C] () – C:\Windows\System32\PretzelSpellCheck.dll
[2009/10/06 14:35:50 | 000,000,751 | —- | C] () – C:\Windows\Bti.ini
[2009/10/06 14:35:48 | 000,116,640 | —- | C] () – C:\Windows\System32\Ptsaci40.dll
[2009/06/26 11:55:53 | 000,000,746 | —- | C] () – C:\Windows\Brpfx04a.ini
[2009/06/26 11:55:53 | 000,000,093 | —- | C] () – C:\Windows\brpcfx.ini
[2009/06/26 11:53:33 | 000,000,419 | —- | C] () – C:\Windows\BRWMARK.INI
[2009/06/26 11:53:33 | 000,000,027 | —- | C] () – C:\Windows\BRPP2KA.INI
[2009/06/26 11:49:26 | 000,106,496 | —- | C] () – C:\Windows\System32\BrMuSNMP.dll
[2009/06/26 11:49:26 | 000,000,066 | —- | C] () – C:\Windows\Brfaxrx.ini
[2009/06/26 11:45:46 | 000,031,567 | —- | C] () – C:\Windows\maxlink.ini
[2009/06/15 13:52:56 | 000,241,664 | —- | C] () – C:\Windows\System32\hppapr04.dll
[2008/04/13 09:13:16 | 000,000,291 | —- | C] () – C:\Windows\System32\XMLConfig_SYSID.ini
[2008/02/04 19:23:10 | 000,693,792 | —- | C] () – C:\Windows\System32\OGACheckControl.DLL
[2008/01/11 13:34:41 | 000,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2007/08/11 03:38:25 | 000,327,680 | —- | C] () – C:\Windows\System32\pythoncom25.dll
[2007/08/11 03:38:25 | 000,102,400 | —- | C] () – C:\Windows\System32\pywintypes25.dll
[2007/05/14 08:28:10 | 000,000,000 | —- | C] () – C:\Windows\System32\px.ini
[2006/12/14 02:01:36 | 000,520,192 | —- | C] () – C:\Windows\System32\CddbPlaylist2Roxio.dll
[2006/12/14 02:01:36 | 000,204,800 | —- | C] () – C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 08:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 03:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2003/01/07 19:05:08 | 000,002,695 | —- | C] () – C:\Windows\System32\OUTLPERF.INI
< End of report >

LDTate

Post #2August 8, 2010, 11:23 PM UTC last edited August 8, 2010, 11:24 PM UTC

I suggest you do this:

Please do not delete anything unless instructed to.

1. All tools MUST be run from the executable. (.exe)
With Admin Rights (Right click on HijackTHis each time you use it, choose "Run as Administrator")

Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a checkmark/tick in the box on the left side on these:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6522

Close ALL windows and browsers except HijackThis and click "Fix checked"

check some settings on your system:

Enter your Control Panel and double-click on Network Connections
Then right click on your Default Connection
- Usually Local Area Connection for Cable and DSL, or AOL Connection.
Left click on Properties
Double-Click on the Internet Protocol (TCP/IP) item
Select the radio dial that says Obtain DNS Servers Automatically
Press OK twice to get out of the properties screen

Reboot and "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.

NlightN

Post #3August 9, 2010, 1:21 PM UTC

Thanks LDTate. Will do later today when I get back in the office.

NlightN

Post #4August 9, 2010, 4:49 PM UTC last edited August 9, 2010, 4:51 PM UTC

Did as instructed and both Firefox and IE are working now. I was thinking the same line was the problem but rather confirm with somebody who does it everyday. The IP address is custom configured for the network and other devices associated, so I left that alone. Thanks for your help.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:03:43 PM, on 8/9/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18470)
Boot mode: Normal

Running processes:
C:\Program Files\Norton 360\Engine\4.1.0.32\ccSvcHst.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\hp\kbd\kbd.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\jusched.exe
C:\Program Files\Microsoft Office\OFFICE11\POWERPNT.EXE
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Greene Turtle\Desktop\Mozilla FireFox 3.6\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.1.0.32\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.1.0.32\IPSBHO.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.1.0.32\coIEPlg.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{53BD23A1-05C7-43D7-A86D-B2B242EFA34D}: NameServer = 68.87.77.130
O17 - HKLM\System\CS1\Services\Tcpip\..\{53BD23A1-05C7-43D7-A86D-B2B242EFA34D}: NameServer = 68.87.77.130
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.1.0.32\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

–
End of file - 6927 bytes

LDTate

Post #5August 9, 2010, 4:55 PM UTC

You're more than welcome. Glad we were able to help Peace be with you

LDTate

Post #6August 14, 2010, 3:51 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Antivir Solution Pro Removed but now no IE

✨ Ask AI

Ask AI