What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Is this spyware. or malaware ?or just a slow computer.

22 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I am using an acer aspire T310 desktop the past couple of days has been running so slow, to the point of lots of programs not responding all the time.. just wondering if its something that I can check to see what might be causing the problem .. thanks for any answers..
Post #2
Hello and Posted Image

My name is patndoris. I will be glad to help you with solving any malware problems. It will be very helpful if you follow these guidelines:
  • Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
  • Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
  • Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
  • Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
  • Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
  • Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  • Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!


Download and Run DDS by sUBs

Please download DDS and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.scr to run the tool.
  • When done, DDS.txt will open.
  • Save both reports to your desktop.
—————————————————

Please Please copy / paste the scan reults.

DDS.txt and Attach.txt




Download and Run GMER

[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

    [external image: Posted Image]
    Click the image to enlarge it
  • In the right panel, you will see several boxes that may have been checked. Uncheck the following …
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one - make sure it is UNCHECKED)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and paste it in your reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries





Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.
  • Download TDSSKiller and save it to your Desktop.
  • Extract its contents to your desktop.
  • Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.


    🖼Click to load external image (Posted Image)

  • If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.


    🖼Click to load external image (Posted Image)

  • If a suspicious file is detected, the default action will be Skip, click on Continue.


    🖼Click to load external image (Posted Image)

  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.


    🖼Click to load external image (Posted Image)

  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
Post #3
hi Patndoris. posted first results here for you will post others as I do them , . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows XP Home Edition Boot Device: \Device\HarddiskVolume1 Install Date: 5/22/2009 5:09:17 PM System Uptime: 10/3/2011 1:03:30 PM (2 hours ago) . Motherboard: Acer | | E61ML Processor: Intel® Celeron® CPU 2.60GHz | Socket 478 | 2600/100mhz . ==== Disk Partitions ========================= . A: is Removable C: is FIXED (NTFS) - 37 GiB total, 21.16 GiB free. D: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP759: 9/28/2011 9:18:45 PM - Restore Operation RP760: 9/28/2011 9:51:22 PM - Restore Operation RP761: 9/28/2011 10:08:07 PM - Removed Ancestry Toolbar RP762: 9/29/2011 5:58:43 PM - Revo Uninstaller's restore point - Malwarebytes' Anti-Malware version 1.51.2.1300 RP763: 9/30/2011 10:52:18 AM - Revo Uninstaller's restore point - Microsoft Silverlight RP764: 9/30/2011 10:54:24 AM - Removed Microsoft Silverlight RP765: 9/30/2011 11:01:19 AM - Revo Uninstaller's restore point - Microsoft Silverlight RP766: 9/30/2011 11:07:39 AM - Revo Uninstaller's restore point - Jasc Paint Shop Pro 8 RP767: 9/30/2011 4:30:26 PM - Installed %1 %2. RP768: 9/30/2011 8:04:14 PM - Revo Uninstaller's restore point - Adobe Reader 9.4.6 RP769: 9/30/2011 8:09:59 PM - Revo Uninstaller's restore point - Adobe Reader 9.4.6 RP770: 9/30/2011 8:11:15 PM - Revo Uninstaller's restore point - Adobe Reader 9.4.6 RP771: 9/30/2011 8:27:18 PM - Revo Uninstaller's restore point - Adobe Download Manager RP772: 10/2/2011 6:09:12 PM - Sun 2nd Oct . ==== Installed Programs ====================== . 32 Bit HP CIO Components Installer acer Adobe AIR Adobe Flash Player 10 ActiveX Adobe SVG Viewer 3.0 AVG 2012 BigPond Broadband ADSL BigPond Wireless Broadband 2.11.16 CCleaner Creative System Information CustomerResearchQFolder HighMAT Extension to Microsoft Windows XP CD Writing Wizard Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hotfix for Windows XP (KB2443685) Hotfix for Windows XP (KB2570791) Hotfix for Windows XP (KB954550-v5) HP Deskjet 2050 J510 series Basic Device Software HP Deskjet 2050 J510 series Help HP Deskjet 2050 J510 series Product Improvement Study HP Photo Creations HP Update HPSSupply ICQ7.5 IrfanView (remove only) Jasc Paint Shop Pro 8 Java Auto Updater Junk Mail filter update Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft Application Error Reporting Microsoft Choice Guard Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office 2000 Premium Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Search Enhancement Pack Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Sync Framework Runtime Native v1.0 (x86) Microsoft Sync Framework Services Native v1.0 (x86) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 MSVCRT MSVCSetup MSXML 4.0 SP2 (KB973688) MSXML 6 Service Pack 2 (KB973686) Realtek AC'97 Audio Revo Uninstaller 1.89 RTLSetup Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Security Update for Windows Internet Explorer 7 (KB2183461) Security Update for Windows Internet Explorer 7 (KB2360131) Security Update for Windows Internet Explorer 7 (KB2416400) Security Update for Windows Internet Explorer 7 (KB2482017) Security Update for Windows Internet Explorer 7 (KB2497640) Security Update for Windows Internet Explorer 7 (KB2530548) Security Update for Windows Internet Explorer 7 (KB2544521) Security Update for Windows Internet Explorer 7 (KB938127-v2) Security Update for Windows Internet Explorer 7 (KB976325) Security Update for Windows Internet Explorer 7 (KB978207) Security Update for Windows Internet Explorer 7 (KB982381) Security Update for Windows Internet Explorer 8 (KB2510531) Security Update for Windows Internet Explorer 8 (KB2530548) Security Update for Windows Internet Explorer 8 (KB2544521) Security Update for Windows Internet Explorer 8 (KB2559049) Security Update for Windows Internet Explorer 8 (KB982381) Security Update for Windows Media Player (KB911564) Security Update for Windows XP (KB2296199) Security Update for Windows XP (KB2393802) Security Update for Windows XP (KB2412687) Security Update for Windows XP (KB2419632) Security Update for Windows XP (KB2423089) Security Update for Windows XP (KB2436673) Security Update for Windows XP (KB2440591) Security Update for Windows XP (KB2443105) Security Update for Windows XP (KB2476490) Security Update for Windows XP (KB2476687) Security Update for Windows XP (KB2478960) Security Update for Windows XP (KB2478971) Security Update for Windows XP (KB2479628) Security Update for Windows XP (KB2479943) Security Update for Windows XP (KB2481109) Security Update for Windows XP (KB2483185) Security Update for Windows XP (KB2485376) Security Update for Windows XP (KB2485663) Security Update for Windows XP (KB2491683) Security Update for Windows XP (KB2503658) Security Update for Windows XP (KB2503665) Security Update for Windows XP (KB2506212) Security Update for Windows XP (KB2506223) Security Update for Windows XP (KB2507618) Security Update for Windows XP (KB2507938) Security Update for Windows XP (KB2508272) Security Update for Windows XP (KB2508429) Security Update for Windows XP (KB2509553) Security Update for Windows XP (KB2510581) Security Update for Windows XP (KB2511455) Security Update for Windows XP (KB2524375) Security Update for Windows XP (KB2535512) Security Update for Windows XP (KB2536276-v2) Security Update for Windows XP (KB2536276) Security Update for Windows XP (KB2544893) Security Update for Windows XP (KB2555917) Security Update for Windows XP (KB2562937) Security Update for Windows XP (KB2566454) Security Update for Windows XP (KB2567680) Security Update for Windows XP (KB2570222) Security Update for Windows XP (KB2570947) Security Update for Windows XP (KB971961) Segoe UI SiS 661FX_760_741_M661FX_M760_M741 Skype™ 5.5 SmartWebPrinting TeamViewer 4 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Windows Internet Explorer 7 (KB980182) Update for Windows Internet Explorer 8 (KB2447568) Update for Windows XP (KB2467659) Update for Windows XP (KB2541763) Update for Windows XP (KB2616676-v2) Update for Windows XP (KB971029) Visual C++ 2008 x86 Runtime - (v9.0.30729) Visual C++ 2008 x86 Runtime - v9.0.30729.01 WebFldrs XP Windows Driver Package - Atheros (arusb(Atheros)) Net (09/23/2008 3.0.0.131) Windows Driver Package - NETGEAR (W8335XP) Net (02/22/2005 3.1.1.7) Windows Driver Package - NETGEAR Inc. (RTLWUSB) Net (02/07/2007 5.1283.0207.2007) Windows Driver Package - Thomson (USB_RNDIS) Net (02/16/2004 1.0.0.3) Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray Windows Genuine Advantage Validation Tool (KB892130) Windows Installer Clean Up Windows Internet Explorer 8 Windows Live Call Windows Live Communications Platform Windows Live Essentials Windows Live Family Safety Windows Live Mail Windows Live Messenger Windows Live Photo Gallery Windows Live Sign-in Assistant Windows Live Sync Windows Live Toolbar Windows Live Upload Tool Windows Live Writer Windows Media Format 11 runtime Windows Media Player 11 Windows XP Service Pack 3 WOT for Internet Explorer Yahoo!7 Messenger Yontoo Layers 1.10.01 . ==== Event Viewer Messages From Past Week ======== . 9/29/2011 12:45:45 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: TfFsMon TfSysMon 9/28/2011 8:56:09 PM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found. 9/28/2011 5:13:06 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Windows Search service to connect. 9/28/2011 5:13:06 PM, error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. . ==== End Of File =========================== first one here .. thanks again next following ..
Post #4
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2011-10-03 19:16:50
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST340015A rev.3.01
Running: gmer.exe; Driver: C:\DOCUME~1\Rainee\LOCALS~1\Temp\pxtdrpob.sys


—- System - GMER 1.0.15 —-

SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwOpenProcess [0xB59E1F3C]
SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateProcess [0xB59E1FE4]
SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateThread [0xB59E2080]
SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwWriteVirtualMemory [0xB59E211C]

—- Kernel code sections - GMER 1.0.15 —-

init C:\WINDOWS\system32\drivers\ALCXSENS.SYS entry point in "init" section [0xB970B870]
? C:\DOCUME~1\Rainee\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !

—- User code sections - GMER 1.0.15 —-

.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1792] USER32.dll!DialogBoxParamW 7E4247AB 5 Bytes JMP 3E215505 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1792] USER32.dll!CreateWindowExW 7E42D0A3 5 Bytes JMP 3E2EDB3C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1792] USER32.dll!DialogBoxIndirectParamW 7E432072 5 Bytes JMP 3E3E5337 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1792] USER32.dll!MessageBoxIndirectA 7E43A082 5 Bytes JMP 3E3E5269 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1792] USER32.dll!DialogBoxParamA 7E43B144 5 Bytes JMP 3E3E52D4 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1792] USER32.dll!MessageBoxExW 7E450838 5 Bytes JMP 3E3E513A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1792] USER32.dll!MessageBoxExA 7E45085C 5 Bytes JMP 3E3E519C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1792] USER32.dll!DialogBoxIndirectParamA 7E456D7D 5 Bytes JMP 3E3E539A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1792] USER32.dll!MessageBoxIndirectW 7E4664D5 5 Bytes JMP 3E3E51FE C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\WINDOWS\system32\SearchIndexer.exe[2176] kernel32.dll!WriteFile 7C810E27 7 Bytes JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!DialogBoxParamW 7E4247AB 5 Bytes JMP 3E215505 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!SetWindowsHookExW 7E42820F 5 Bytes JMP 3E2E9AC9 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!CallNextHookEx 7E42B3C6 5 Bytes JMP 3E2DD12D C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!CreateWindowExW 7E42D0A3 5 Bytes JMP 3E2EDB3C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!UnhookWindowsHookEx 7E42D5F3 5 Bytes JMP 3E2546A6 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!DialogBoxIndirectParamW 7E432072 5 Bytes JMP 3E3E5337 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!MessageBoxIndirectA 7E43A082 5 Bytes JMP 3E3E5269 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!DialogBoxParamA 7E43B144 5 Bytes JMP 3E3E52D4 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!MessageBoxExW 7E450838 5 Bytes JMP 3E3E513A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!MessageBoxExA 7E45085C 5 Bytes JMP 3E3E519C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!DialogBoxIndirectParamA 7E456D7D 5 Bytes JMP 3E3E539A C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] USER32.dll!MessageBoxIndirectW 7E4664D5 5 Bytes JMP 3E3E51FE C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] ole32.dll!CoCreateInstance 774FF1AC 5 Bytes JMP 3E2EDB98 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[4036] ole32.dll!OleLoadFromStream 7752981B 5 Bytes JMP 3E3E569F C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)

—- Devices - GMER 1.0.15 —-

AttachedDevice \FileSystem\Ntfs \Ntfs AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )

—- EOF - GMER 1.0.15 —-
This is all that was there. more to follow for next one.. thanks again .
Post #5 last edited
19:24:38.0781 2224 TDSS rootkit removing tool [removed] Sep 26 2011 18:56:43 19:24:50.0015 2224 ============================================================ 19:24:50.0015 2224 Current date / time: 2011/10/03 19:24:50.0015 19:24:50.0015 2224 SystemInfo: 19:24:50.0015 2224 19:24:50.0015 2224 OS Version: 5.1.2600 ServicePack: 3.0 19:24:50.0015 2224 Product type: Workstation 19:24:50.0015 2224 ComputerName: ACER 19:24:50.0015 2224 UserName: Rainee 19:24:50.0015 2224 Windows directory: C:\WINDOWS 19:24:50.0015 2224 System windows directory: C:\WINDOWS 19:24:50.0015 2224 Processor architecture: Intel x86 19:24:50.0015 2224 Number of processors: 1 19:24:50.0015 2224 Page size: 0x1000 19:24:50.0015 2224 Boot type: Normal boot 19:24:50.0015 2224 ============================================================ 19:24:54.0296 2224 Initialize success 19:24:56.0921 3504 ============================================================ 19:24:56.0921 3504 Scan started 19:24:56.0921 3504 Mode: Manual; 19:24:56.0921 3504 ============================================================ 19:25:00.0500 3504 Abiosdsk - ok 19:25:00.0953 3504 abp480n5 - ok 19:25:01.0500 3504 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 19:25:01.0500 3504 ACPI - ok 19:25:02.0078 3504 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 19:25:02.0078 3504 ACPIEC - ok 19:25:02.0781 3504 adpu160m - ok 19:25:03.0328 3504 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 19:25:03.0406 3504 aec - ok 19:25:04.0765 3504 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys 19:25:04.0796 3504 AFD - ok 19:25:05.0375 3504 Aha154x - ok 19:25:05.0812 3504 aic78u2 - ok 19:25:06.0250 3504 aic78xx - ok 19:25:06.0906 3504 ALCXSENS (a9355a51698f6901b362ef738b15631d) C:\WINDOWS\system32\drivers\ALCXSENS.SYS 19:25:06.0906 3504 ALCXSENS - ok 19:25:07.0875 3504 ALCXWDM (b191753b1aa2e7b11a18d5fde8248aa2) C:\WINDOWS\system32\drivers\ALCXWDM.SYS 19:25:07.0890 3504 ALCXWDM - ok 19:25:08.0437 3504 AliIde - ok 19:25:08.0890 3504 amsint - ok 19:25:09.0687 3504 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys 19:25:09.0765 3504 Arp1394 - ok 19:25:10.0281 3504 asc - ok 19:25:10.0812 3504 asc3350p - ok 19:25:11.0281 3504 asc3550 - ok 19:25:11.0828 3504 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 19:25:11.0828 3504 AsyncMac - ok 19:25:12.0343 3504 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 19:25:12.0359 3504 atapi - ok 19:25:12.0953 3504 Atdisk - ok 19:25:13.0484 3504 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 19:25:13.0500 3504 Atmarpc - ok 19:25:14.0000 3504 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 19:25:14.0000 3504 audstub - ok 19:25:14.0562 3504 AVGIDSDriver (4fa401b33c1b50c816486f6951244a14) C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys 19:25:14.0562 3504 AVGIDSDriver - ok 19:25:15.0093 3504 AVGIDSEH (69578bc9d43d614c6b3455db4af19762) C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys 19:25:15.0093 3504 AVGIDSEH - ok 19:25:15.0609 3504 AVGIDSFilter (6df528406aa22201f392b9b19121cd6f) C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys 19:25:15.0609 3504 AVGIDSFilter - ok 19:25:16.0125 3504 AVGIDSShim (07eba0c11fa1d73b82ecc3255ddfe34d) C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys 19:25:16.0125 3504 AVGIDSShim - ok 19:25:16.0984 3504 Avgldx86 (f4dbbc8d3c5338693da23c59a50f8abc) C:\WINDOWS\system32\DRIVERS\avgldx86.sys 19:25:16.0984 3504 Avgldx86 - ok 19:25:17.0531 3504 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys 19:25:17.0531 3504 Avgmfx86 - ok 19:25:18.0265 3504 Avgrkx86 (4def59ff7d09b9ce59739102b49fd526) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys 19:25:18.0265 3504 Avgrkx86 - ok 19:25:19.0015 3504 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\WINDOWS\system32\DRIVERS\avgtdix.sys 19:25:19.0015 3504 Avgtdix - ok 19:25:19.0921 3504 basic2 (1b9c81ab9a456eabd9f8335f04b5f495) C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys 19:25:19.0968 3504 basic2 - ok 19:25:21.0109 3504 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 19:25:21.0109 3504 Beep - ok 19:25:21.0796 3504 C4C_BSC2 (bff9dcc3b7bf0274b7eda3082af2abd1) C:\WINDOWS\system32\DRIVERS\C4C_BSC2.sys 19:25:21.0812 3504 C4C_BSC2 - ok 19:25:22.0296 3504 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 19:25:22.0312 3504 cbidf2k - ok 19:25:22.0781 3504 cd20xrnt - ok 19:25:23.0468 3504 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 19:25:23.0484 3504 Cdaudio - ok 19:25:24.0062 3504 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 19:25:24.0078 3504 Cdfs - ok 19:25:24.0562 3504 Cdrom (4b0a100eaf5c49ef3cca8c641431eacc) C:\WINDOWS\system32\DRIVERS\cdrom.sys 19:25:24.0562 3504 Cdrom - ok 19:25:25.0015 3504 Changer - ok 19:25:25.0484 3504 CmdIde - ok 19:25:25.0968 3504 Cpqarray - ok 19:25:26.0468 3504 dac2w2k - ok 19:25:26.0953 3504 dac960nt - ok 19:25:27.0453 3504 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 19:25:27.0453 3504 Disk - ok 19:25:28.0656 3504 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 19:25:29.0843 3504 dmboot - ok 19:25:30.0437 3504 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 19:25:30.0515 3504 dmio - ok 19:25:31.0031 3504 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 19:25:31.0031 3504 dmload - ok 19:25:31.0734 3504 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 19:25:31.0781 3504 DMusic - ok 19:25:32.0281 3504 dpti2o - ok 19:25:32.0796 3504 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 19:25:32.0796 3504 drmkaud - ok 19:25:33.0671 3504 Fallback (62c4c409b8b3cc69d97799cdc65b5e5c) C:\WINDOWS\system32\DRIVERS\C4C_FALL.sys 19:25:33.0687 3504 Fallback - ok 19:25:34.0828 3504 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 19:25:34.0828 3504 Fastfat - ok 19:25:35.0359 3504 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 19:25:35.0359 3504 Fdc - ok 19:25:35.0843 3504 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 19:25:35.0843 3504 Fips - ok 19:25:36.0328 3504 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 19:25:36.0328 3504 Flpydisk - ok 19:25:36.0828 3504 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 19:25:36.0843 3504 FltMgr - ok 19:25:37.0390 3504 Fsks (f35ff8083487e09a28754247ec3fc6dc) C:\WINDOWS\system32\DRIVERS\C4C_FSKS.sys 19:25:37.0390 3504 Fsks - ok 19:25:38.0406 3504 fssfltr (e0087225b137e57239ff40f8ae82059b) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys 19:25:38.0406 3504 fssfltr - ok 19:25:39.0093 3504 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 19:25:39.0093 3504 Fs_Rec - ok 19:25:39.0765 3504 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 19:25:39.0765 3504 Ftdisk - ok 19:25:40.0296 3504 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys 19:25:40.0296 3504 gameenum - ok 19:25:40.0828 3504 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 19:25:40.0843 3504 Gpc - ok 19:25:41.0343 3504 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 19:25:41.0343 3504 HidUsb - ok 19:25:41.0953 3504 hpn - ok 19:25:42.0484 3504 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys 19:25:42.0500 3504 HPZid412 - ok 19:25:43.0046 3504 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys 19:25:43.0046 3504 HPZipr12 - ok 19:25:43.0578 3504 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys 19:25:43.0718 3504 HPZius12 - ok 19:25:44.0656 3504 hsf_msft (74e379857d4c0dfb56de2d19b8f4c434) C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys 19:25:44.0875 3504 hsf_msft - ok 19:25:45.0484 3504 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 19:25:45.0500 3504 HTTP - ok 19:25:45.0953 3504 i2omgmt - ok 19:25:46.0406 3504 i2omp - ok 19:25:46.0890 3504 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 19:25:46.0906 3504 i8042prt - ok 19:25:47.0453 3504 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 19:25:47.0468 3504 Imapi - ok 19:25:47.0953 3504 ini910u - ok 19:25:48.0406 3504 IntelIde - ok 19:25:49.0078 3504 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 19:25:49.0093 3504 intelppm - ok 19:25:49.0640 3504 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 19:25:49.0656 3504 Ip6Fw - ok 19:25:50.0171 3504 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 19:25:50.0187 3504 IpFilterDriver - ok 19:25:50.0718 3504 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 19:25:50.0734 3504 IpInIp - ok 19:25:51.0312 3504 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 19:25:51.0312 3504 IpNat - ok 19:25:51.0812 3504 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 19:25:51.0812 3504 IPSec - ok 19:25:52.0312 3504 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 19:25:52.0328 3504 IRENUM - ok 19:25:53.0000 3504 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 19:25:53.0015 3504 isapnp - ok 19:25:53.0718 3504 K56 (535e87aa6cd596a08f805d0ac8026701) C:\WINDOWS\system32\DRIVERS\C4C_K56K.sys 19:25:53.0718 3504 K56 - ok 19:25:54.0390 3504 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 19:25:54.0390 3504 Kbdclass - ok 19:25:54.0906 3504 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 19:25:54.0906 3504 kbdhid - ok 19:25:55.0468 3504 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 19:25:55.0531 3504 kmixer - ok 19:25:56.0093 3504 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 19:25:56.0093 3504 KSecDD - ok 19:25:56.0265 3504 Lavasoft Kernexplorer - ok 19:25:56.0843 3504 lbrtfdc - ok 19:25:57.0500 3504 massfilter (59f57b06d1e3c7a3f22d62c7c5b4c3c3) C:\WINDOWS\system32\drivers\massfilter.sys 19:25:57.0515 3504 massfilter - ok 19:25:58.0015 3504 mdmxsdk (98d8a239489211b2f230267485c5c127) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys 19:25:58.0015 3504 mdmxsdk - ok 19:25:58.0515 3504 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 19:25:58.0515 3504 mnmdd - ok 19:25:59.0187 3504 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 19:25:59.0187 3504 Modem - ok 19:25:59.0828 3504 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 19:25:59.0828 3504 Mouclass - ok 19:26:00.0343 3504 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 19:26:00.0343 3504 mouhid - ok 19:26:01.0125 3504 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 19:26:01.0125 3504 MountMgr - ok 19:26:01.0218 3504 MpKsl02a5ccfc - ok 19:26:01.0281 3504 MpKsl05e66584 - ok 19:26:01.0312 3504 MpKsl0e5fbaac - ok 19:26:01.0343 3504 MpKsl11522426 - ok 19:26:01.0390 3504 MpKsl15e61626 - ok 19:26:01.0421 3504 MpKsl194989c7 - ok 19:26:01.0468 3504 MpKsl1c1a559f - ok 19:26:01.0500 3504 MpKsl22d862a0 - ok 19:26:01.0531 3504 MpKsl248af72f - ok 19:26:01.0578 3504 MpKsl28296953 - ok 19:26:01.0609 3504 MpKsl2a138fd2 - ok 19:26:01.0656 3504 MpKsl2b0c1ff9 - ok 19:26:01.0687 3504 MpKsl2c6e1144 - ok 19:26:01.0734 3504 MpKsl2da3aa78 - ok 19:26:01.0781 3504 MpKsl2e4fa93b - ok 19:26:01.0828 3504 MpKsl36553d0f - ok 19:26:01.0859 3504 MpKsl3925c0cc - ok 19:26:01.0906 3504 MpKsl398801b1 - ok 19:26:01.0937 3504 MpKsl3e3ed6a5 - ok 19:26:01.0984 3504 MpKsl3ea2eb51 - ok 19:26:02.0015 3504 MpKsl40749fc9 - ok 19:26:02.0062 3504 MpKsl43fcba38 - ok 19:26:02.0109 3504 MpKsl45d4f11b - ok 19:26:02.0140 3504 MpKsl465f21d4 - ok 19:26:02.0187 3504 MpKsl46be9121 - ok 19:26:02.0218 3504 MpKsl4a2a9086 - ok 19:26:02.0265 3504 MpKsl4eb00f53 - ok 19:26:02.0296 3504 MpKsl51136c60 - ok 19:26:02.0343 3504 MpKsl553041b0 - ok 19:26:02.0390 3504 MpKsl63a3814c - ok 19:26:02.0421 3504 MpKsl65831d21 - ok 19:26:02.0453 3504 MpKsl68172af8 - ok 19:26:02.0500 3504 MpKsl68cac532 - ok 19:26:02.0531 3504 MpKsl69fe8a80 - ok 19:26:02.0593 3504 MpKsl6c5671f1 - ok 19:26:02.0625 3504 MpKsl6d85c800 - ok 19:26:02.0656 3504 MpKsl7319bfaa - ok 19:26:02.0703 3504 MpKsl78bcb7a5 - ok 19:26:02.0734 3504 MpKsl7f1894a8 - ok 19:26:02.0781 3504 MpKsl8c84822a - ok 19:26:02.0843 3504 MpKsl8cf39cef - ok 19:26:02.0875 3504 MpKsl92599527 - ok 19:26:02.0921 3504 MpKsl930ce27a - ok 19:26:02.0953 3504 MpKsl98c7e339 - ok 19:26:03.0000 3504 MpKsl9c18644e - ok 19:26:03.0031 3504 MpKsla34a641f - ok 19:26:03.0078 3504 MpKsla36c0e0c - ok 19:26:03.0125 3504 MpKsla42baf27 - ok 19:26:03.0156 3504 MpKsla7089f6b - ok 19:26:03.0203 3504 MpKsla762cdfb - ok 19:26:03.0234 3504 MpKslaa2eeeb6 - ok 19:26:03.0281 3504 MpKslaf51d5a2 - ok 19:26:03.0312 3504 MpKslb0c9b0d8 - ok 19:26:03.0359 3504 MpKslb9ca618d - ok 19:26:03.0406 3504 MpKslbae404d7 - ok 19:26:03.0437 3504 MpKslbeeef563 - ok 19:26:03.0484 3504 MpKslbf97f20c - ok 19:26:03.0515 3504 MpKslc44819a9 - ok 19:26:03.0546 3504 MpKslc6039585 - ok 19:26:03.0578 3504 MpKslc860d903 - ok 19:26:03.0625 3504 MpKsld14a8247 - ok 19:26:03.0671 3504 MpKsld1a387fd - ok 19:26:03.0703 3504 MpKsld344ae9d - ok 19:26:03.0875 3504 MpKsld81d263e - ok 19:26:03.0921 3504 MpKsld91b968b - ok 19:26:03.0968 3504 MpKsldbeee87c - ok 19:26:04.0000 3504 MpKsle16b9fda - ok 19:26:04.0062 3504 MpKsle3fa85ff - ok 19:26:04.0093 3504 MpKsle68e8116 - ok 19:26:04.0140 3504 MpKsle6c936b9 - ok 19:26:04.0187 3504 MpKslecff66c7 - ok 19:26:04.0218 3504 MpKslee092db6 - ok 19:26:04.0265 3504 MpKslef85915e - ok 19:26:04.0296 3504 MpKslf5afab5f - ok 19:26:04.0359 3504 MpKslfb343494 - ok 19:26:04.0484 3504 MpKslfbbf36c8 - ok 19:26:05.0015 3504 mraid35x - ok 19:26:05.0609 3504 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 19:26:05.0671 3504 MRxDAV - ok 19:26:06.0453 3504 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 19:26:06.0468 3504 MRxSmb - ok 19:26:07.0062 3504 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 19:26:07.0078 3504 Msfs - ok 19:26:07.0625 3504 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 19:26:07.0625 3504 MSKSSRV - ok 19:26:08.0171 3504 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 19:26:08.0171 3504 MSPCLOCK - ok 19:26:08.0687 3504 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 19:26:08.0703 3504 MSPQM - ok 19:26:09.0218 3504 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 19:26:09.0218 3504 mssmbios - ok 19:26:09.0890 3504 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 19:26:09.0890 3504 Mup - ok 19:26:10.0484 3504 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 19:26:10.0500 3504 NDIS - ok 19:26:10.0968 3504 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 19:26:10.0984 3504 NdisTapi - ok 19:26:11.0484 3504 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 19:26:11.0484 3504 Ndisuio - ok 19:26:12.0015 3504 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 19:26:12.0015 3504 NdisWan - ok 19:26:12.0515 3504 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 19:26:12.0515 3504 NDProxy - ok 19:26:13.0046 3504 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 19:26:13.0046 3504 NetBIOS - ok 19:26:13.0609 3504 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 19:26:13.0609 3504 NetBT - ok 19:26:14.0250 3504 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys 19:26:14.0281 3504 NIC1394 - ok 19:26:14.0984 3504 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 19:26:14.0984 3504 Npfs - ok 19:26:15.0750 3504 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 19:26:15.0750 3504 Ntfs - ok 19:26:16.0437 3504 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 19:26:16.0437 3504 Null - ok 19:26:17.0000 3504 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 19:26:17.0000 3504 NwlnkFlt - ok 19:26:17.0562 3504 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 19:26:17.0578 3504 NwlnkFwd - ok 19:26:18.0156 3504 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys 19:26:18.0171 3504 ohci1394 - ok 19:26:18.0765 3504 ossrv (8db15d0105d92c2fbca5e83cd882a477) C:\WINDOWS\system32\drivers\ctoss2k.sys 19:26:18.0843 3504 ossrv - ok 19:26:19.0375 3504 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 19:26:19.0375 3504 Parport - ok 19:26:19.0859 3504 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 19:26:19.0859 3504 PartMgr - ok 19:26:20.0515 3504 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 19:26:20.0515 3504 ParVdm - ok 19:26:21.0250 3504 PCASp50 (1961590aa191b6b7dcf18a6a693af7b8) C:\WINDOWS\system32\Drivers\PCASp50.sys 19:26:21.0265 3504 PCASp50 - ok 19:26:21.0859 3504 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 19:26:21.0875 3504 PCI - ok 19:26:22.0500 3504 PCIDump - ok 19:26:23.0015 3504 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 19:26:23.0015 3504 PCIIde - ok 19:26:23.0546 3504 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 19:26:23.0609 3504 Pcmcia - ok 19:26:24.0093 3504 PDCOMP - ok 19:26:24.0546 3504 PDFRAME - ok 19:26:24.0984 3504 PDRELI - ok 19:26:25.0593 3504 PDRFRAME - ok 19:26:26.0062 3504 perc2 - ok 19:26:26.0484 3504 perc2hib - ok 19:26:27.0062 3504 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 19:26:27.0062 3504 PptpMiniport - ok 19:26:27.0609 3504 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys 19:26:27.0625 3504 Processor - ok 19:26:28.0421 3504 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 19:26:28.0421 3504 PSched - ok 19:26:28.0921 3504 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 19:26:28.0921 3504 Ptilink - ok 19:26:29.0437 3504 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys 19:26:29.0437 3504 PxHelp20 - ok 19:26:29.0890 3504 ql1080 - ok 19:26:30.0578 3504 Ql10wnt - ok 19:26:31.0046 3504 ql12160 - ok 19:26:31.0484 3504 ql1240 - ok 19:26:31.0906 3504 ql1280 - ok 19:26:32.0375 3504 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 19:26:32.0375 3504 RasAcd - ok 19:26:32.0906 3504 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 19:26:32.0906 3504 Rasl2tp - ok 19:26:33.0390 3504 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 19:26:33.0406 3504 RasPppoe - ok 19:26:33.0875 3504 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 19:26:33.0875 3504 Raspti - ok 19:26:34.0765 3504 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 19:26:34.0781 3504 Rdbss - ok 19:26:35.0453 3504 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 19:26:35.0453 3504 RDPCDD - ok 19:26:36.0062 3504 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 19:26:36.0125 3504 RDPWD - ok 19:26:36.0687 3504 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 19:26:36.0703 3504 redbook - ok 19:26:37.0218 3504 Rksample (efa5ff9a97888e97bc25dbc1aada2c5a) C:\WINDOWS\system32\DRIVERS\C4C_SAMP.sys 19:26:37.0218 3504 Rksample - ok 19:26:37.0750 3504 RT73 - ok 19:26:38.0562 3504 RTL8023 (8b0b3474a8da1ab41050637cf34c0959) C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys 19:26:38.0562 3504 RTL8023 - ok 19:26:39.0093 3504 rtl8139 (dbd3887e257c4348e314e0b94c4cf3ff) C:\WINDOWS\system32\DRIVERS\R8139n51.SYS 19:26:39.0109 3504 rtl8139 - ok 19:26:39.0734 3504 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 19:26:39.0750 3504 Secdrv - ok 19:26:40.0468 3504 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 19:26:40.0468 3504 serenum - ok 19:26:41.0000 3504 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 19:26:41.0000 3504 Serial - ok 19:26:41.0546 3504 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 19:26:41.0546 3504 Sfloppy - ok 19:26:42.0046 3504 Simbad - ok 19:26:42.0703 3504 SiS315 (f0959ad8ea4efc9c462a5675f5128653) C:\WINDOWS\system32\DRIVERS\sisgrp.sys 19:26:42.0703 3504 SiS315 - ok 19:26:43.0218 3504 SISAGP (61ca562def09a782d26b3e7edec5369a) C:\WINDOWS\system32\DRIVERS\SISAGPX.sys 19:26:43.0218 3504 SISAGP - ok 19:26:43.0640 3504 SiSEsc (594515d1322ff3bfbe139e827925fc47) C:\WINDOWS\system32\sisesc.sys 19:26:43.0656 3504 SiSEsc - ok 19:26:44.0140 3504 SiSkp (55eaa83bd34460e75314463b5f1195f1) C:\WINDOWS\system32\DRIVERS\srvkp.sys 19:26:44.0140 3504 SiSkp - ok 19:26:44.0968 3504 SoftFax (6c865befda5d8ac4f4d780013ddbce93) C:\WINDOWS\system32\DRIVERS\C4C_FAXX.sys 19:26:44.0968 3504 SoftFax - ok 19:26:45.0859 3504 Sparrow - ok 19:26:46.0609 3504 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 19:26:46.0609 3504 splitter - ok 19:26:47.0171 3504 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 19:26:47.0171 3504 sr - ok 19:26:47.0812 3504 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 19:26:47.0828 3504 Srv - ok 19:26:48.0312 3504 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 19:26:48.0328 3504 swenum - ok 19:26:48.0828 3504 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 19:26:48.0859 3504 swmidi - ok 19:26:49.0578 3504 symc810 - ok 19:26:50.0031 3504 symc8xx - ok 19:26:50.0468 3504 sym_hi - ok 19:26:51.0093 3504 sym_u3 - ok 19:26:51.0625 3504 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 19:26:51.0625 3504 sysaudio - ok 19:26:52.0265 3504 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 19:26:52.0265 3504 Tcpip - ok 19:26:52.0765 3504 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 19:26:52.0765 3504 TDPIPE - ok 19:26:53.0281 3504 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 19:26:53.0281 3504 TDTCP - ok 19:26:53.0781 3504 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 19:26:53.0781 3504 TermDD - ok 19:26:54.0250 3504 TfFsMon - ok 19:26:54.0718 3504 TfNetMon - ok 19:26:55.0156 3504 TfSysMon - ok 19:26:55.0718 3504 Tones (6dc3635b1fc0e495ecf86aa78a60e772) C:\WINDOWS\system32\DRIVERS\C4C_TONE.sys 19:26:55.0718 3504 Tones - ok 19:26:56.0406 3504 TosIde - ok 19:26:56.0984 3504 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 19:26:57.0015 3504 Udfs - ok 19:26:57.0515 3504 ultra - ok 19:26:58.0156 3504 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 19:26:58.0156 3504 Update - ok 19:26:58.0750 3504 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 19:26:58.0765 3504 usbccgp - ok 19:26:59.0281 3504 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 19:26:59.0281 3504 usbehci - ok 19:26:59.0906 3504 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 19:26:59.0921 3504 usbhub - ok 19:27:00.0437 3504 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys 19:27:00.0453 3504 usbohci - ok 19:27:00.0921 3504 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 19:27:00.0937 3504 usbprint - ok 19:27:01.0593 3504 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 19:27:01.0609 3504 usbscan - ok 19:27:02.0140 3504 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 19:27:02.0156 3504 USBSTOR - ok 19:27:02.0843 3504 V124 (55d57524bc9c31572b5e1df0badef6c7) C:\WINDOWS\system32\DRIVERS\C4C_V124.sys 19:27:02.0859 3504 V124 - ok 19:27:03.0343 3504 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 19:27:03.0343 3504 VgaSave - ok 19:27:03.0843 3504 ViaIde - ok 19:27:04.0359 3504 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 19:27:04.0359 3504 VolSnap - ok 19:27:05.0156 3504 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 19:27:05.0156 3504 Wanarp - ok 19:27:05.0640 3504 WDICA - ok 19:27:06.0125 3504 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 19:27:06.0140 3504 wdmaud - ok 19:27:07.0171 3504 winachsf (e09a0da18d85593e3ef8708ba0c6fc7e) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys 19:27:07.0171 3504 winachsf - ok 19:27:07.0859 3504 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 19:27:07.0859 3504 WS2IFSL - ok 19:27:08.0437 3504 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 19:27:08.0468 3504 WudfPf - ok 19:27:08.0984 3504 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 19:27:09.0015 3504 WudfRd - ok 19:27:09.0593 3504 ZTEusbmdm6k (4692a3e087cf018808f376a3cc2128fa) C:\WINDOWS\system32\DRIVERS\ZTEusbmdm6k.sys 19:27:09.0640 3504 ZTEusbmdm6k - ok 19:27:10.0187 3504 ZTEusbnet (c7f13366969b1633e1ec21ebc40fea13) C:\WINDOWS\system32\DRIVERS\ZTEusbnet.sys 19:27:10.0234 3504 ZTEusbnet - ok 19:27:10.0984 3504 ZTEusbnmea (4692a3e087cf018808f376a3cc2128fa) C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys 19:27:11.0031 3504 ZTEusbnmea - ok 19:27:11.0609 3504 ZTEusbser6k (4692a3e087cf018808f376a3cc2128fa) C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys 19:27:11.0656 3504 ZTEusbser6k - ok 19:27:11.0843 3504 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0 19:27:12.0140 3504 \Device\Harddisk0\DR0 - ok 19:27:12.0171 3504 Boot (0x1200) (d266796203a982fa2df568ff6d575712) \Device\Harddisk0\DR0\Partition0 19:27:12.0171 3504 \Device\Harddisk0\DR0\Partition0 - ok 19:27:12.0187 3504 ============================================================ 19:27:12.0187 3504 Scan finished 19:27:12.0187 3504 ============================================================ 19:27:12.0234 1368 Detected object count: 0 19:27:12.0234 1368 Actual detected object count: 0 Thanks again.. now will wait till I hear from you, Cheers.. .Rainee
Post #6
I don't see the DDS.txt from the first log you posted. Can you please check your desktop and see if you can find it there to post? If not, please run DDS again and post the DDS.txt log it produces. Thanks!
Post #7
. DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 Run by [removed] at 15:18:44 on 2011-10-03 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1247.639 [GMT 11:00] . AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF} AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF} . ============== Running Processes =============== . C:\PROGRA~1\AVG\AVG2012\avgrsx.exe C:\Program Files\AVG\AVG2012\avgcsrvx.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\sistray.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Telstra\BigPond Wireless Broadband 2.0\BigPond_CM.exe C:\WINDOWS\System32\keyhook.exe C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe C:\Program Files\AVG\AVG2012\avgtray.exe C:\Program Files\AVG Secure Search\vprot.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\AVG\AVG2012\avgwdsvc.exe C:\WINDOWS\System32\svchost.exe -k HPZ12 C:\WINDOWS\System32\svchost.exe -k HPZ12 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files\AVG\AVG2012\avgnsx.exe C:\Program Files\AVG\AVG2012\avgemcx.exe C:\WINDOWS\System32\snmp.exe C:\WINDOWS\System32\svchost.exe -k imgsvc C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\8.0.1\ToolbarUpdater.exe C:\WINDOWS\system32\SearchIndexer.exe C:\WINDOWS\system32\fxssvc.exe C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Outlook Express\msimn.exe C:\Program Files\AVG\AVG2012\avgcsrvx.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE . ============== Pseudo HJT Report =============== . uSearch Page = hxxp://www.google.com uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 uStart Page = hxxp://www.google.com.au/ uSearch Bar = hxxp://www.google.com/ie uDefault_Search_URL = hxxp://www.google.com/ie uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s mURLSearchHooks: H - No File mURLSearchHooks: H - No File BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg2012\avgssie.dll BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\8.0.0.34\AVG Secure Search_toolbar.dll BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - c:\program files\wot\WOT.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll BHO: Yontoo Layers: {fd72061e-9fde-484d-a58a-0bab4151cad8} - c:\program files\yontoo layers\YontooIEClient.dll TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\8.0.0.34\AVG Secure Search_toolbar.dll TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - c:\program files\wot\WOT.dll TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File TB: {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - No File TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File {e7df6bff-55a5-4eb7-a673-4ed3e9456d39} uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background mRun: [SiSUSBRG] c:\windows\SiSUSBrg.exe mRun: [SiS Tray] c:\windows\system32\sistray.EXE mRun: [SoundMan] SOUNDMAN.EXE mRun: [BigPondWirelessBroadbandCM] "c:\program files\telstra\bigpond wireless broadband 2.0\BigPond_CM.exe" -tsr mRun: [SiS Windows KeyHook] c:\windows\system32\keyhook.exe mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe mRun: [] mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe" mRun: [vProt] "c:\program files\avg secure search\vprot.exe" dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html IE: {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\icq7.5\ICQ.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - hxxps://support.microsoft.com/dcode/ActiveX/MSDcode.cab DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} - hxxp://www.pcpitstop.com/betapit/PCPitStop.CAB DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - hxxp://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - hxxp://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37983.9344097222 DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab TCP: DhcpNameServer = 10.0.0.138 TCP: Interfaces\{CAB06F0E-2670-47CB-8036-0741AF5616C4} : DhcpNameServer = 10.0.0.138 Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\8.0.1\ViProtocol.dll Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll mASetup: {A509B1FF-37FF-4bFF-8CFF-4F3A747040FF} - c:\windows\system32\rundll32.exe c:\windows\system32\advpack.dll,launchinfsectionex c:\program files\internet explorer\clrtour.inf,DefaultInstall.ResetTour,,12 . ============= SERVICES / DRIVERS =============== . R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2011-7-11 23120] R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-7-11 32464] R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-7-11 229840] R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-8-8 40016] R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-7-11 295248] R1 SiSEsc;SISLIB_ESC;c:\windows\system32\sisesc.sys [2003-12-31 28416] R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\AVGIDSAgent.exe [2011-9-1 5265248] R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2011-8-2 192776] R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2011-8-2 54760] R2 vToolbarUpdater;vToolbarUpdater;c:\program files\common files\avg secure search\vtoolbarupdater\8.0.1\ToolbarUpdater.exe [2011-9-28 246600] R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2011-7-11 134608] R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2011-7-11 24272] R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2011-7-11 16720] R3 C4C_BSC2;C4C_BSC2;c:\windows\system32\drivers\C4C_BSC2.sys [2003-12-31 84788] S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\tffsmon.sys –> c:\windows\system32\drivers\TfFsMon.sys [?] S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\tfsysmon.sys –> c:\windows\system32\drivers\TfSysMon.sys [?] S1 MpKsl02a5ccfc;MpKsl02a5ccfc;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7c4379a3-3cb0-4a4b-bef8-479e64026e5b}\mpksl02a5ccfc.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7c4379a3-3cb0-4a4b-bef8-479e64026e5b}\MpKsl02a5ccfc.sys [?] S1 MpKsl05e66584;MpKsl05e66584;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bb4c5b1-3bd5-495e-9712-bea01c6cde92}\mpksl05e66584.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bb4c5b1-3bd5-495e-9712-bea01c6cde92}\MpKsl05e66584.sys [?] S1 MpKsl0e5fbaac;MpKsl0e5fbaac;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7a6d3e70-ddb7-4490-8944-b408c8160da1}\mpksl0e5fbaac.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7a6d3e70-ddb7-4490-8944-b408c8160da1}\MpKsl0e5fbaac.sys [?] S1 MpKsl11522426;MpKsl11522426;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a6ad7997-1826-4747-9244-00f9e4190c9c}\mpksl11522426.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a6ad7997-1826-4747-9244-00f9e4190c9c}\MpKsl11522426.sys [?] S1 MpKsl15e61626;MpKsl15e61626;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{68c61ae6-9107-4dd2-bbfd-55f6b06402a6}\mpksl15e61626.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{68c61ae6-9107-4dd2-bbfd-55f6b06402a6}\MpKsl15e61626.sys [?] S1 MpKsl194989c7;MpKsl194989c7;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2028ad5-fb7b-4f97-b85e-5d055c9d5c2f}\mpksl194989c7.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2028ad5-fb7b-4f97-b85e-5d055c9d5c2f}\MpKsl194989c7.sys [?] S1 MpKsl1c1a559f;MpKsl1c1a559f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{080ac60e-fe6d-4d57-8169-613dfe558909}\mpksl1c1a559f.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{080ac60e-fe6d-4d57-8169-613dfe558909}\MpKsl1c1a559f.sys [?] S1 MpKsl22d862a0;MpKsl22d862a0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{762857c7-6e7a-4f1f-b264-80ea3071f909}\mpksl22d862a0.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{762857c7-6e7a-4f1f-b264-80ea3071f909}\MpKsl22d862a0.sys [?] S1 MpKsl248af72f;MpKsl248af72f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3187fff3-8034-48ed-95bb-4ac6b7c8a48d}\mpksl248af72f.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3187fff3-8034-48ed-95bb-4ac6b7c8a48d}\MpKsl248af72f.sys [?] S1 MpKsl28296953;MpKsl28296953;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{010ff2f1-6829-4efc-8c77-24dbb9f70c1d}\mpksl28296953.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{010ff2f1-6829-4efc-8c77-24dbb9f70c1d}\MpKsl28296953.sys [?] S1 MpKsl2a138fd2;MpKsl2a138fd2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ce686e99-dd12-4aa4-8181-631188de23f2}\mpksl2a138fd2.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ce686e99-dd12-4aa4-8181-631188de23f2}\MpKsl2a138fd2.sys [?] S1 MpKsl2b0c1ff9;MpKsl2b0c1ff9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{32c2b4c1-2e66-4c1d-a418-85c347e00db3}\mpksl2b0c1ff9.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{32c2b4c1-2e66-4c1d-a418-85c347e00db3}\MpKsl2b0c1ff9.sys [?] S1 MpKsl2c6e1144;MpKsl2c6e1144;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4260c5f6-0703-4447-8e2f-6eb50b06ffb5}\mpksl2c6e1144.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4260c5f6-0703-4447-8e2f-6eb50b06ffb5}\MpKsl2c6e1144.sys [?] S1 MpKsl2da3aa78;MpKsl2da3aa78;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9b8b7b9c-3e97-4870-9783-c9493f30a2f4}\mpksl2da3aa78.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9b8b7b9c-3e97-4870-9783-c9493f30a2f4}\MpKsl2da3aa78.sys [?] S1 MpKsl2e4fa93b;MpKsl2e4fa93b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3187fff3-8034-48ed-95bb-4ac6b7c8a48d}\mpksl2e4fa93b.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3187fff3-8034-48ed-95bb-4ac6b7c8a48d}\MpKsl2e4fa93b.sys [?] S1 MpKsl36553d0f;MpKsl36553d0f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d85058c-4e60-442e-b4f2-b19789e7d689}\mpksl36553d0f.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d85058c-4e60-442e-b4f2-b19789e7d689}\MpKsl36553d0f.sys [?] S1 MpKsl3925c0cc;MpKsl3925c0cc;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7a6d3e70-ddb7-4490-8944-b408c8160da1}\mpksl3925c0cc.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7a6d3e70-ddb7-4490-8944-b408c8160da1}\MpKsl3925c0cc.sys [?] S1 MpKsl398801b1;MpKsl398801b1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4ad89f76-0934-4335-b669-8a966dfc4029}\mpksl398801b1.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4ad89f76-0934-4335-b669-8a966dfc4029}\MpKsl398801b1.sys [?] S1 MpKsl3e3ed6a5;MpKsl3e3ed6a5;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7c4379a3-3cb0-4a4b-bef8-479e64026e5b}\mpksl3e3ed6a5.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7c4379a3-3cb0-4a4b-bef8-479e64026e5b}\MpKsl3e3ed6a5.sys [?] S1 MpKsl3ea2eb51;MpKsl3ea2eb51;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{36971ae7-c906-4df0-af59-c4e2af640c60}\mpksl3ea2eb51.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{36971ae7-c906-4df0-af59-c4e2af640c60}\MpKsl3ea2eb51.sys [?] S1 MpKsl40749fc9;MpKsl40749fc9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e8115da0-2433-4016-8b1e-5a5f0b325f2e}\mpksl40749fc9.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e8115da0-2433-4016-8b1e-5a5f0b325f2e}\MpKsl40749fc9.sys [?] S1 MpKsl43fcba38;MpKsl43fcba38;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d85058c-4e60-442e-b4f2-b19789e7d689}\mpksl43fcba38.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d85058c-4e60-442e-b4f2-b19789e7d689}\MpKsl43fcba38.sys [?] S1 MpKsl45d4f11b;MpKsl45d4f11b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3b29cb3c-76a8-4237-8070-898b5e1b5e8f}\mpksl45d4f11b.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3b29cb3c-76a8-4237-8070-898b5e1b5e8f}\MpKsl45d4f11b.sys [?] S1 MpKsl465f21d4;MpKsl465f21d4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bb4c5b1-3bd5-495e-9712-bea01c6cde92}\mpksl465f21d4.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bb4c5b1-3bd5-495e-9712-bea01c6cde92}\MpKsl465f21d4.sys [?] S1 MpKsl46be9121;MpKsl46be9121;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{223da5c7-4228-4789-8c34-d2cf42ad4e33}\mpksl46be9121.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{223da5c7-4228-4789-8c34-d2cf42ad4e33}\MpKsl46be9121.sys [?] S1 MpKsl4a2a9086;MpKsl4a2a9086;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{06f4c615-5e4e-43e0-b1d8-a17e4b4d0601}\mpksl4a2a9086.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{06f4c615-5e4e-43e0-b1d8-a17e4b4d0601}\MpKsl4a2a9086.sys [?] S1 MpKsl4eb00f53;MpKsl4eb00f53;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{010ff2f1-6829-4efc-8c77-24dbb9f70c1d}\mpksl4eb00f53.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{010ff2f1-6829-4efc-8c77-24dbb9f70c1d}\MpKsl4eb00f53.sys [?] S1 MpKsl51136c60;MpKsl51136c60;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3b29cb3c-76a8-4237-8070-898b5e1b5e8f}\mpksl51136c60.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3b29cb3c-76a8-4237-8070-898b5e1b5e8f}\MpKsl51136c60.sys [?] S1 MpKsl553041b0;MpKsl553041b0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{06f4c615-5e4e-43e0-b1d8-a17e4b4d0601}\mpksl553041b0.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{06f4c615-5e4e-43e0-b1d8-a17e4b4d0601}\MpKsl553041b0.sys [?] S1 MpKsl63a3814c;MpKsl63a3814c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ddbbf56f-910a-401e-87d3-15ea33feb6a2}\mpksl63a3814c.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ddbbf56f-910a-401e-87d3-15ea33feb6a2}\MpKsl63a3814c.sys [?] S1 MpKsl65831d21;MpKsl65831d21;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{caa6e854-7bd9-4bce-83b3-43dd325556f0}\mpksl65831d21.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{caa6e854-7bd9-4bce-83b3-43dd325556f0}\MpKsl65831d21.sys [?] S1 MpKsl68172af8;MpKsl68172af8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e2ebc0ea-5056-4c46-ac21-d42d278c5b93}\mpksl68172af8.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e2ebc0ea-5056-4c46-ac21-d42d278c5b93}\MpKsl68172af8.sys [?] S1 MpKsl68cac532;MpKsl68cac532;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{22789511-b8ae-4063-a870-a92ec899606c}\mpksl68cac532.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{22789511-b8ae-4063-a870-a92ec899606c}\MpKsl68cac532.sys [?] S1 MpKsl69fe8a80;MpKsl69fe8a80;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{05c5ad46-b154-4589-9a84-d38457ae47b6}\mpksl69fe8a80.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{05c5ad46-b154-4589-9a84-d38457ae47b6}\MpKsl69fe8a80.sys [?] S1 MpKsl6c5671f1;MpKsl6c5671f1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e5aad01a-91e3-4586-ae39-6884bc9ac178}\mpksl6c5671f1.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e5aad01a-91e3-4586-ae39-6884bc9ac178}\MpKsl6c5671f1.sys [?] S1 MpKsl6d85c800;MpKsl6d85c800;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7a6d3e70-ddb7-4490-8944-b408c8160da1}\mpksl6d85c800.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7a6d3e70-ddb7-4490-8944-b408c8160da1}\MpKsl6d85c800.sys [?] S1 MpKsl7319bfaa;MpKsl7319bfaa;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd612875-cce9-47af-a3e8-496d9d078927}\mpksl7319bfaa.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd612875-cce9-47af-a3e8-496d9d078927}\MpKsl7319bfaa.sys [?] S1 MpKsl78bcb7a5;MpKsl78bcb7a5;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{01c35147-a3bf-4680-be55-0c8161d6eac0}\mpksl78bcb7a5.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{01c35147-a3bf-4680-be55-0c8161d6eac0}\MpKsl78bcb7a5.sys [?] S1 MpKsl7f1894a8;MpKsl7f1894a8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cd07f967-737b-463e-a170-571faa19f494}\mpksl7f1894a8.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cd07f967-737b-463e-a170-571faa19f494}\MpKsl7f1894a8.sys [?] S1 MpKsl8c84822a;MpKsl8c84822a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e8115da0-2433-4016-8b1e-5a5f0b325f2e}\mpksl8c84822a.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e8115da0-2433-4016-8b1e-5a5f0b325f2e}\MpKsl8c84822a.sys [?] S1 MpKsl8cf39cef;MpKsl8cf39cef;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{28ab62b3-2401-4d9a-b5ce-be18f8988a87}\mpksl8cf39cef.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{28ab62b3-2401-4d9a-b5ce-be18f8988a87}\MpKsl8cf39cef.sys [?] S1 MpKsl92599527;MpKsl92599527;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{92d3244c-cb9e-4ccb-b7ec-4c8ade08b403}\mpksl92599527.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{92d3244c-cb9e-4ccb-b7ec-4c8ade08b403}\MpKsl92599527.sys [?] S1 MpKsl930ce27a;MpKsl930ce27a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bb4c5b1-3bd5-495e-9712-bea01c6cde92}\mpksl930ce27a.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0bb4c5b1-3bd5-495e-9712-bea01c6cde92}\MpKsl930ce27a.sys [?] S1 MpKsl98c7e339;MpKsl98c7e339;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cd07f967-737b-463e-a170-571faa19f494}\mpksl98c7e339.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cd07f967-737b-463e-a170-571faa19f494}\MpKsl98c7e339.sys [?] S1 MpKsl9c18644e;MpKsl9c18644e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{92d3244c-cb9e-4ccb-b7ec-4c8ade08b403}\mpksl9c18644e.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{92d3244c-cb9e-4ccb-b7ec-4c8ade08b403}\MpKsl9c18644e.sys [?] S1 MpKsla34a641f;MpKsla34a641f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9b8b7b9c-3e97-4870-9783-c9493f30a2f4}\mpksla34a641f.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9b8b7b9c-3e97-4870-9783-c9493f30a2f4}\MpKsla34a641f.sys [?] S1 MpKsla36c0e0c;MpKsla36c0e0c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40ab401f-d402-4c2e-b2d0-103704f1f4da}\mpksla36c0e0c.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40ab401f-d402-4c2e-b2d0-103704f1f4da}\MpKsla36c0e0c.sys [?] S1 MpKsla42baf27;MpKsla42baf27;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40ab401f-d402-4c2e-b2d0-103704f1f4da}\mpksla42baf27.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40ab401f-d402-4c2e-b2d0-103704f1f4da}\MpKsla42baf27.sys [?] S1 MpKsla7089f6b;MpKsla7089f6b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40ab401f-d402-4c2e-b2d0-103704f1f4da}\mpksla7089f6b.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40ab401f-d402-4c2e-b2d0-103704f1f4da}\MpKsla7089f6b.sys [?] S1 MpKsla762cdfb;MpKsla762cdfb;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4d2a19c4-5291-49bb-8ab3-edd68bc1c9f2}\mpksla762cdfb.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4d2a19c4-5291-49bb-8ab3-edd68bc1c9f2}\MpKsla762cdfb.sys [?] S1 MpKslaa2eeeb6;MpKslaa2eeeb6;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{05c5ad46-b154-4589-9a84-d38457ae47b6}\mpkslaa2eeeb6.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{05c5ad46-b154-4589-9a84-d38457ae47b6}\MpKslaa2eeeb6.sys [?] S1 MpKslaf51d5a2;MpKslaf51d5a2;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{68c61ae6-9107-4dd2-bbfd-55f6b06402a6}\mpkslaf51d5a2.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{68c61ae6-9107-4dd2-bbfd-55f6b06402a6}\MpKslaf51d5a2.sys [?] S1 MpKslb0c9b0d8;MpKslb0c9b0d8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4260c5f6-0703-4447-8e2f-6eb50b06ffb5}\mpkslb0c9b0d8.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4260c5f6-0703-4447-8e2f-6eb50b06ffb5}\MpKslb0c9b0d8.sys [?] S1 MpKslb9ca618d;MpKslb9ca618d;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e868e8fb-7fd0-4af5-9c53-71a83a91eadd}\mpkslb9ca618d.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e868e8fb-7fd0-4af5-9c53-71a83a91eadd}\MpKslb9ca618d.sys [?] S1 MpKslbae404d7;MpKslbae404d7;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a6b3de3b-44d7-4a9b-bbec-c9e9b99e79bf}\mpkslbae404d7.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a6b3de3b-44d7-4a9b-bbec-c9e9b99e79bf}\MpKslbae404d7.sys [?] S1 MpKslbeeef563;MpKslbeeef563;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40ab401f-d402-4c2e-b2d0-103704f1f4da}\mpkslbeeef563.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{40ab401f-d402-4c2e-b2d0-103704f1f4da}\MpKslbeeef563.sys [?] S1 MpKslbf97f20c;MpKslbf97f20c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{099897a5-a2cf-48c7-bd78-f6ed21742f63}\mpkslbf97f20c.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{099897a5-a2cf-48c7-bd78-f6ed21742f63}\MpKslbf97f20c.sys [?] S1 MpKslc44819a9;MpKslc44819a9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{464ceda7-9b21-4c4a-9b34-6312e57317e9}\mpkslc44819a9.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{464ceda7-9b21-4c4a-9b34-6312e57317e9}\MpKslc44819a9.sys [?] S1 MpKslc6039585;MpKslc6039585;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7d4f4ef0-8fb0-410b-8a03-b0baecd8f037}\mpkslc6039585.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7d4f4ef0-8fb0-410b-8a03-b0baecd8f037}\MpKslc6039585.sys [?] S1 MpKslc860d903;MpKslc860d903;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e822f059-4f88-4cec-a3e9-1cccab4f16c1}\mpkslc860d903.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e822f059-4f88-4cec-a3e9-1cccab4f16c1}\MpKslc860d903.sys [?] S1 MpKsld14a8247;MpKsld14a8247;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bcf0bdb4-4bb4-4e18-b4cb-22cc6ea6bf61}\mpksld14a8247.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{bcf0bdb4-4bb4-4e18-b4cb-22cc6ea6bf61}\MpKsld14a8247.sys [?] S1 MpKsld1a387fd;MpKsld1a387fd;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c9bc0983-4740-4449-a2b9-9e70deea0720}\mpksld1a387fd.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{c9bc0983-4740-4449-a2b9-9e70deea0720}\MpKsld1a387fd.sys [?] S1 MpKsld344ae9d;MpKsld344ae9d;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4ad89f76-0934-4335-b669-8a966dfc4029}\mpksld344ae9d.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{4ad89f76-0934-4335-b669-8a966dfc4029}\MpKsld344ae9d.sys [?] S1 MpKsld81d263e;MpKsld81d263e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{12a81bfa-9eaf-4f57-98dd-48e012adeb61}\mpksld81d263e.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{12a81bfa-9eaf-4f57-98dd-48e012adeb61}\MpKsld81d263e.sys [?] S1 MpKsld91b968b;MpKsld91b968b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{48362045-bb95-4cb7-8b9e-3778d58e1264}\mpksld91b968b.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{48362045-bb95-4cb7-8b9e-3778d58e1264}\MpKsld91b968b.sys [?] S1 MpKsldbeee87c;MpKsldbeee87c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3187fff3-8034-48ed-95bb-4ac6b7c8a48d}\mpksldbeee87c.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3187fff3-8034-48ed-95bb-4ac6b7c8a48d}\MpKsldbeee87c.sys [?] S1 MpKsle16b9fda;MpKsle16b9fda;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{06f4c615-5e4e-43e0-b1d8-a17e4b4d0601}\mpksle16b9fda.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{06f4c615-5e4e-43e0-b1d8-a17e4b4d0601}\MpKsle16b9fda.sys [?] S1 MpKsle3fa85ff;MpKsle3fa85ff;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd612875-cce9-47af-a3e8-496d9d078927}\mpksle3fa85ff.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd612875-cce9-47af-a3e8-496d9d078927}\MpKsle3fa85ff.sys [?] S1 MpKsle68e8116;MpKsle68e8116;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{099897a5-a2cf-48c7-bd78-f6ed21742f63}\mpksle68e8116.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{099897a5-a2cf-48c7-bd78-f6ed21742f63}\MpKsle68e8116.sys [?] S1 MpKsle6c936b9;MpKsle6c936b9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd53de40-89df-4b7f-b0d3-54082c0802f6}\mpksle6c936b9.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{dd53de40-89df-4b7f-b0d3-54082c0802f6}\MpKsle6c936b9.sys [?] S1 MpKslecff66c7;MpKslecff66c7;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9b8b7b9c-3e97-4870-9783-c9493f30a2f4}\mpkslecff66c7.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9b8b7b9c-3e97-4870-9783-c9493f30a2f4}\MpKslecff66c7.sys [?] S1 MpKslee092db6;MpKslee092db6;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e868e8fb-7fd0-4af5-9c53-71a83a91eadd}\mpkslee092db6.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e868e8fb-7fd0-4af5-9c53-71a83a91eadd}\MpKslee092db6.sys [?] S1 MpKslef85915e;MpKslef85915e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2073b3e6-1c26-4717-869c-973192519c30}\mpkslef85915e.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2073b3e6-1c26-4717-869c-973192519c30}\MpKslef85915e.sys [?] S1 MpKslf5afab5f;MpKslf5afab5f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a08b96d2-0efa-407b-84f7-06d58f1e3c00}\mpkslf5afab5f.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a08b96d2-0efa-407b-84f7-06d58f1e3c00}\MpKslf5afab5f.sys [?] S1 MpKslfb343494;MpKslfb343494;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{69b665d1-bd3f-4c6e-8e20-7bad0cf2618f}\mpkslfb343494.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{69b665d1-bd3f-4c6e-8e20-7bad0cf2618f}\MpKslfb343494.sys [?] S1 MpKslfbbf36c8;MpKslfbbf36c8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{48362045-bb95-4cb7-8b9e-3778d58e1264}\mpkslfbbf36c8.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{48362045-bb95-4cb7-8b9e-3778d58e1264}\MpKslfbbf36c8.sys [?] S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2010-4-28 704872] S3 Lavasoft Kernexplorer;Lavasoft helper driver;\??\c:\program files\lavasoft\ad-aware\kernexplorer.sys –> c:\program files\lavasoft\ad-aware\KernExplorer.sys [?] S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2010-9-26 7680] S3 TfNetMon;TfNetMon;\??\c:\windows\system32\drivers\tfnetmon.sys –> c:\windows\system32\drivers\TfNetMon.sys [?] S3 ZTEusbnet;ZTE USB-NDIS miniport;c:\windows\system32\drivers\ZTEusbnet.sys [2010-9-26 110080] . =============== Created Last 30 ================ . 2011-09-30 06:39:03 ——– d—–w- c:\documents and settings\rainee\application data\ElevatedDiagnostics 2011-09-29 11:10:45 8192 —-a-w- c:\windows\system32\kbdkor.dll 2011-09-29 11:10:45 8192 —-a-w- c:\windows\system32\dllcache\kbdkor.dll 2011-09-29 11:10:44 8704 —-a-w- c:\windows\system32\kbdjpn.dll 2011-09-29 11:10:44 8704 —-a-w- c:\windows\system32\dllcache\kbdjpn.dll 2011-09-29 11:10:44 6144 —-a-w- c:\windows\system32\kbd101c.dll 2011-09-29 11:10:44 6144 —-a-w- c:\windows\system32\dllcache\kbd101c.dll 2011-09-29 11:10:44 5632 —-a-w- c:\windows\system32\kbd103.dll 2011-09-29 11:10:44 5632 —-a-w- c:\windows\system32\dllcache\kbd103.dll 2011-09-29 11:10:43 6144 —-a-w- c:\windows\system32\kbd101b.dll 2011-09-29 11:10:43 6144 —-a-w- c:\windows\system32\dllcache\kbd101b.dll 2011-09-29 11:10:41 6144 —-a-w- c:\windows\system32\kbd106.dll 2011-09-29 11:10:41 6144 —-a-w- c:\windows\system32\dllcache\kbd106.dll 2011-09-28 13:01:17 ——– d—–w- c:\program files\MALWAREBYTES ANTI-MALWARE 2011-09-28 12:30:17 ——– d—–w- c:\program files\Spybot - Search & Destroy 2011-09-28 07:43:12 ——– dc-h–w- C:\$AVG 2011-09-28 07:21:41 ——– d—–w- c:\program files\WOT 2011-09-28 06:30:00 ——– d—–w- c:\documents and settings\rainee\application data\AVG2012 2011-09-28 06:23:18 ——– d—–w- c:\documents and settings\rainee\application data\AVG Secure Search 2011-09-28 06:22:59 ——– d—–w- c:\program files\common files\AVG Secure Search 2011-09-28 06:22:56 ——– d—–w- c:\program files\AVG Secure Search 2011-09-28 06:20:21 ——– d—–w- c:\windows\system32\drivers\AVG 2011-09-28 06:20:21 ——– d—–w- c:\documents and settings\all users\application data\AVG2012 2011-09-28 06:15:50 ——– d—–w- c:\program files\AVG 2011-09-28 06:04:46 ——– d–h–w- c:\documents and settings\all users\application data\Common Files 2011-09-28 06:04:14 ——– d—–w- c:\documents and settings\all users\application data\MFAData . ==================== Find3M ==================== . 2011-09-28 10:45:12 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-09-09 09:12:13 599040 —-a-w- c:\windows\system32\crypt32.dll 2011-08-24 02:24:36 101720 —-a-w- c:\windows\system32\drivers\SBREDrv.sys 2011-07-15 13:29:31 456320 —-a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-07-10 15:14:38 295248 —-a-w- c:\windows\system32\drivers\avgtdix.sys 2011-07-10 15:14:30 16720 —-a-w- c:\windows\system32\drivers\AVGIDSShim.sys 2011-07-10 15:14:28 24272 —-a-w- c:\windows\system32\drivers\AVGIDSFilter.sys 2011-07-10 15:14:28 23120 —-a-w- c:\windows\system32\drivers\AVGIDSEH.sys 2011-07-10 15:14:26 134608 —-a-w- c:\windows\system32\drivers\AVGIDSDriver.sys 2011-07-10 15:13:46 229840 —-a-w- c:\windows\system32\drivers\avgldx86.sys 2011-07-10 15:13:42 32464 —-a-w- c:\windows\system32\drivers\avgrkx86.sys 2011-07-08 14:02:00 10496 —-a-w- c:\windows\system32\drivers\ndistapi.sys . ============= FINISH: 15:21:20.06 =============== hope this is it
Post #8
It would appear that you have more than one anti-virus solution on your machine. I can see both AVG and Microsoft Security Essentials installed.
Having more than one anti-virus program on your machine, even if only one is running, can cause conflicts and slowdowns in the performance of the machine.
Before continuing on, please completely uninstall one of the programs. If you are concerned with the speed of the computer, I would suggest removing AVG and keep Microsoft Security Essentials, but the choice is yours.


I suspect the slowness is the result of 2 Anti-Virus programs, as I'm not seeing any signs of malware on the machine. But to be on the safe side, let's do a couple of other scans.


Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.





This scan make take awhile depending on how many items are on the computer. You may want to run it at a time you won't be needing the machine. It should be run from IE and I'd recommend not doing anything else while it's running.


http://www.eset.eu/online-scanner
Go here to run an online scannner from ESET.
Click the green ESET Online Scanner button.
Read the End User License Agreement and check the box: YES, I accept the Terms of Use.
Click on the Start button next to it.
You may receive an alert on the address bar that "This site might require the following ActiveX control…Click here to install…". Click on that alert and then click Insall ActiveX component.
A new window will appear asking "Do you want to install this software?"".
Answer Yes to download and install the ActiveX controls that allows the scan to run.
Click Start.
Uncheck Remove found threats.
Click Scan to begin.
If offered the option to get information or buy software. Just close the window.
Wait for the scan to finish
Use notepad to open the logfile located at C:\Program Files\Eset\Eset Online Scanner\log.txt
Copy and paste that log as a reply to this topic.
Post #9
Malawarebytes scan.. Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 7861 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 10/4/2011 3:18:03 PM mbam-log-2011-10-04 (15-18-03).txt Scan type: Quick scan Objects scanned: 178066 Time elapsed: 34 minute(s), 45 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) I didn`t know there was two anti virus on here so have taken off avg , thanks for all your help hope both these scans are what you need.. bye for now. Eset Scan.. ESETSmartInstaller@High as CAB hook log: OnlineScanner.ocx - registred OK # version=7 # IEXPLORE.EXE=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) # OnlineScanner.ocx=1.0.0.6528 # api_version=3.0.2 # EOSSerial=cc632ce64805c944be116d4581d94b31 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-10-04 07:52:55 # local_time=2011-10-04 06:52:55 (+1000, AUS Eastern Daylight Time) # country="United States" # lang=9 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=1024 16777175 100 0 0 0 0 0 # compatibility_mode=8192 67108863 100 0 0 0 0 0 # scanned=63699 # found=4 # cleaned=0 # scan_time=10943 C:\Documents and Settings\All Users\Application Data\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application (unable to clean) 00000000000000000000000000000000 I C:\Program Files\Windows Live\Messenger\riched20.dll Win32/Toolbar.MyWebSearch application (unable to clean) 00000000000000000000000000000000 I C:\Program Files\Yontoo Layers\YontooIEClient.dll Win32/Adware.Yontoo.A application (unable to clean) 00000000000000000000000000000000 I ${Memory} Win32/Adware.Yontoo.A application 00000000000000000000000000000000 I
Post #10
Well, overall your system looks pretty good :D

I would recommend go to your Control Panel > Add/Remove Programs and uninstall Yontoo. It is what we consider a PUA (potentially unwanted application).

Yontoo Layers or Drop Down Deals browser add-on - creates virtual layers that can be edited to create the appearance of having made changes to the underlying website. Has ads in the layers with no obvious warning on install.

The choice is yours, but if it were my machine, I would not want this program on there.

That will pretty much take care of what ESET found.

Did the speed of the computer improve after removing one anti-virus?
Post #11 last edited
Thanks so much Pat n Doris the computer is going pretty good and a lot faster than it was.. I never knew what that Yontoo program was.. it was strange but I removed it as you said,,so I have no need to keep the files I sent you now , can I remove them all from the computer , just keep malawarebytes on and also do I need to pay for that one ? as it says trial version has ended . Thanks for all your help you sure do a wonderful job in securing our computers.. Bye for now and thank you again.. Rainee
Post #12
You can delete any remaining tools and logs from your desktop. Malwarebytes has a totally free version and I do recommend having it. It is an "on demand" scanner, meaning it does not run all the time, and you should periodically open, update and run it.

———————
Great job! Your logs appear to be malware free and you do not appear to be experiencing any malware related problems.
Please follow these simple steps in order to keep your computer malware free and secure:

Visit Microsoft's Windows Update Site Frequently
It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

Use and Update your AntiVirus Software
It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

Use a Firewall
I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this. Simply using a Firewall in its default configuration can lower your risk greatly.

Use only one antivirus and one firewall on your machine
Having more than one anti-virus program and one firewall on your machine, even if only one is running, can cause conflicts and slowdowns in the performance of the machine.

If you need more information on free anti-virus or firewall options please let me know and I will give you some recommendations.

Make your Internet Explorer more secure
This can be done by following these simple instructions:
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.
5. Change the Download signed ActiveX controls to Prompt
6. Change the Download unsigned ActiveX controls to Disable
7. Change the Initialize and script ActiveX controls not marked as safe to Disable
8. Change the Installation of desktop items to Prompt
9. Change the Launching programs and files in an IFRAME to Prompt
10. Change the Navigate sub-frames across different domains to Prompt
11. When all these settings have been made, click on the OK button.
12. If it prompts you as to whether or not you want to save the settings, press the Yes button.
13. Next press the Apply button and then the OK to exit the Internet Properties page.

Keep your Java, Adobe Reader and Adobe Flash Up to Date
Older versions of these programs can contain security vulnerabilities. It is very important to keep them updated.

Update and Run Malwarebytes Anti-Malware
Scan your computer with this program on a regular basis just as you would an antivirus software making sure you update definitions each time you scan.

To simplify making sure you have the latest version of many of your security programs and applications, you may want to consider:
Secunia's Personal Software Inspector (PSI). It is a free utility that scans your computer for installed applications and checks to see if they have the latest security patches and updates. If it finds any applications with possible security issues, links and/or instructions are provided for the necessariy updates.

Filehippo's Update Checker. It is free utilitiy that scan your computer for installed software, checks the versions and then sends this information to see if there are any newer releases. Available software updates are displayed and you can decide which ones to download and install. Among many other types of programs, they includes a number of the Anti-Spyware, Firewall/Security and Anti-Virus programs that have been recommended (though not all of them). Note: Definition files should be updated from within the programs themselves. The Update Checker look for newer versions of the software program, not definition files.

Good luck & Happy surfing!
Post #13
You can delete any remaining tools and logs from your desktop. Malwarebytes has a totally free version and I do recommend having it. It is an "on demand" scanner, meaning it does not run all the time, and you should periodically open, update and run it.

———————
Great job! Your logs appear to be malware free and you do not appear to be experiencing any malware related problems.
Please follow these simple steps in order to keep your computer malware free and secure:

Visit Microsoft's Windows Update Site Frequently
It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

Use and Update your AntiVirus Software
It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

Use a Firewall
I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. I am very serious about this. Simply using a Firewall in its default configuration can lower your risk greatly.

Use only one antivirus and one firewall on your machine
Having more than one anti-virus program and one firewall on your machine, even if only one is running, can cause conflicts and slowdowns in the performance of the machine.

If you need more information on free anti-virus or firewall options please let me know and I will give you some recommendations.

Make your Internet Explorer more secure
This can be done by following these simple instructions:
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.
5. Change the Download signed ActiveX controls to Prompt
6. Change the Download unsigned ActiveX controls to Disable
7. Change the Initialize and script ActiveX controls not marked as safe to Disable
8. Change the Installation of desktop items to Prompt
9. Change the Launching programs and files in an IFRAME to Prompt
10. Change the Navigate sub-frames across different domains to Prompt
11. When all these settings have been made, click on the OK button.
12. If it prompts you as to whether or not you want to save the settings, press the Yes button.
13. Next press the Apply button and then the OK to exit the Internet Properties page.

Keep your Java, Adobe Reader and Adobe Flash Up to Date
Older versions of these programs can contain security vulnerabilities. It is very important to keep them updated.

Update and Run Malwarebytes Anti-Malware
Scan your computer with this program on a regular basis just as you would an antivirus software making sure you update definitions each time you scan.

To simplify making sure you have the latest version of many of your security programs and applications, you may want to consider:
Secunia's Personal Software Inspector (PSI). It is a free utility that scans your computer for installed applications and checks to see if they have the latest security patches and updates. If it finds any applications with possible security issues, links and/or instructions are provided for the necessariy updates.

Filehippo's Update Checker. It is free utilitiy that scan your computer for installed software, checks the versions and then sends this information to see if there are any newer releases. Available software updates are displayed and you can decide which ones to download and install. Among many other types of programs, they includes a number of the Anti-Spyware, Firewall/Security and Anti-Virus programs that have been recommended (though not all of them). Note: Definition files should be updated from within the programs themselves. The Update Checker look for newer versions of the software program, not definition files.

Good luck & Happy surfing!

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI