What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Need some help

55 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #31
Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 8154 Windows 6.1.7601 Service Pack 1 Internet Explorer 9.0.8112.16421 11/13/2011 16:31:48 mbam-log-2011-11-13 (16-31-48).txt Scan type: Quick scan Objects scanned: 191067 Time elapsed: 2 minute(s), 30 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
Post #33
C:\Qoobox\Quarantine\C\Windows\System32\consrv.dll.vir Win64/Sirefef.E trojan C:\Users\Benton\Downloads\Unlocker1.9.1.exe Win32/Adware.ADON application C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\562ae047-79e9f5f2 a variant of Java/Agent.DW trojan C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\562ae047-79e9f5f2 a variant of Java/Agent.DW trojan
Post #34 last edited
Hi z0ne,

Run OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :Services

:Files
C:\Users\Benton\Downloads\Unlocker1.9.1.exe	
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\562ae047-79e9f5f2	
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\562ae047-79e9f5f2

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered. There will be a log created when it completes that I will need in your next reply. Reboot when it is done.
  • Then run a new scan and post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )
——————–

How is your system running now? :)
Post #35
All processes killed ========== SERVICES/DRIVERS ========== ========== FILES ========== C:\Users\Benton\Downloads\Unlocker1.9.1.exe moved successfully. C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\562ae047-79e9f5f2 moved successfully. File\Folder C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\562ae047-79e9f5f2 not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Benton ->Temp folder emptied: 23024082 bytes ->Temporary Internet Files folder emptied: 11806805 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 51597636 bytes ->Flash cache emptied: 808 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Mcx1-CUDA-LAPTOP ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 23599 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 18804 bytes Total Files Cleaned = 82.00 mb OTL by OldTimer - Version 3.2.31.0 log created on 11132011_223204
Post #37
this one after reboot All processes killed ========== SERVICES/DRIVERS ========== ========== FILES ========== C:\Users\Benton\Downloads\Unlocker1.9.1.exe moved successfully. C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\562ae047-79e9f5f2 moved successfully. File\Folder C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\562ae047-79e9f5f2 not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Benton ->Temp folder emptied: 23024082 bytes ->Temporary Internet Files folder emptied: 11806805 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 51597636 bytes ->Flash cache emptied: 808 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Mcx1-CUDA-LAPTOP ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 23599 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 18804 bytes Total Files Cleaned = 82.00 mb OTL by OldTimer - Version 3.2.31.0 log created on 11132011_223204 Files\Folders moved on Reboot… C:\Users\Benton\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. C:\Users\Benton\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EPDV3BRF\index[3].htm moved successfully. C:\Users\Benton\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AYERXO6X\iframe[5].htm moved successfully. Registry entries deleted on Reboot…
Post #38
Hi z0ne, I apologize if I wasn't clear. I need for you to run another scan with OTL. Once you get that newly created log post that. :) Are things running better?
Post #39
OTL logfile created on: 11/13/2011 23:25:31 - Run 3
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Benton\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.80 Gb Total Physical Memory | 4.06 Gb Available Physical Memory | 69.94% Memory free
11.60 Gb Paging File | 9.62 Gb Available in Paging File | 82.86% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 566.37 Gb Total Space | 347.37 Gb Free Space | 61.33% Space Free | Partition Type: NTFS
Drive D: | 29.50 Gb Total Space | 4.33 Gb Free Space | 14.68% Space Free | Partition Type: NTFS
Drive G: | 99.34 Mb Total Space | 88.70 Mb Free Space | 89.29% Space Free | Partition Type: FAT32

Computer Name: CUDA-LAPTOP | User Name: Benton | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Benton\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Webroot\Security\Current\Framework\WRConsumerService.exe (Webroot Software, Inc. )
PRC - C:\Program Files (x86)\Webroot\Security\Current\Framework\WRTray.exe (Webroot Software, Inc. )
PRC - C:\Program Files (x86)\Webroot\Security\Current\plugins\antimalware\AEI.exe (Webroot Software, Inc. (www.webroot.com))
PRC - C:\Program Files (x86)\Webroot\Security\Current\plugins\antimalware\SSU.exe (Webroot Software, Inc. (www.webroot.com))
PRC - C:\Program Files (x86)\Webroot\Security\Current\plugins\cleanup\WRCleanupEngine.exe (Webroot Software, Inc.)
PRC - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company)
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe (Roxio)
PRC - C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe (CyberLink)
PRC - C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
PRC - C:\Program Files (x86)\Motorola\MotoConnectService\MotoConnectService.exe ()
PRC - C:\Program Files (x86)\Motorola\MotoConnectService\MotoConnect.exe (Motorola)
PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)
PRC - C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Acresso Corporation)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Webroot\Security\Current\Framework\frameworkresources.dll ()
MOD - C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll ()
MOD - C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll ()
MOD - C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (FLEXnet Licensing Service 64) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Flexera Software, Inc.)
SRV:64bit: - (DpHost) – C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DigitalPersona, Inc.)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (HPClientSvc) – C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Hewlett-Packard Company)
SRV:64bit: - (STacSV) – C:\Program Files\IDT\WDM\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (HP Wireless Assistant Service) – C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Hewlett-Packard Company)
SRV:64bit: - (EvtEng) – C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation)
SRV:64bit: - (MyWiFiDHCPDNS) – C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ()
SRV:64bit: - (RegSrvc) – C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation)
SRV:64bit: - (hpsrv) – C:\Windows\SysNative\hpservice.exe (Hewlett-Packard Company)
SRV:64bit: - (WiMAXAppSrv) – C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe (Intel® Corporation)
SRV:64bit: - (DMAgent) – C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe (Red Bend Ltd.)
SRV:64bit: - (vcsFPService) – C:\Windows\SysNative\vcsFPService.exe (Validity Sensors, Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AESTFilters) – C:\Program Files\IDT\WDM\AESTSr64.exe (Andrea Electronics Corporation)
SRV - (WRConsumerService) – C:\Program Files (x86)\Webroot\Security\Current\Framework\WRConsumerService.exe (Webroot Software, Inc. )
SRV - (WebrootSpySweeperService) – C:\Program Files (x86)\Webroot\Security\current\plugins\antimalware\AEI.exe (Webroot Software, Inc. (www.webroot.com))
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (HPDrvMntSvc.exe) – C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company)
SRV - (HPWMISVC) – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (RoxioNow Service) – C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe (Roxio)
SRV - (IntuitUpdateService) – C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
SRV - (MotoConnect Service) – C:\Program Files (x86)\Motorola\MotoConnectService\MotoConnectService.exe ()
SRV - (GameConsoleService) – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (NAUpdate) – C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
SRV - (UNS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (PSI_SVC_2) – c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)
SRV - (vcsFPService) – C:\Windows\SysWOW64\vcsFPService.exe (Validity Sensors, Inc.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (pwipf6) – C:\Windows\SysNative\drivers\pwipf6.sys (Privacyware/PWI, Inc.)
DRV:64bit: - (ssidrv) – C:\Windows\SysNative\drivers\ssidrv.sys (Webroot Software, Inc. (www.webroot.com))
DRV:64bit: - (ssfmonm) – C:\Windows\SysNative\drivers\ssfmonm.sys (Webroot Software, Inc. (www.webroot.com))
DRV:64bit: - (NETwNs64) ___ Intel® – C:\Windows\SysNative\drivers\NETwNs64.sys (Intel Corporation)
DRV:64bit: - (sptd) – C:\Windows\SysNative\drivers\sptd.sys ()
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (AtiHDAudioService) – C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices)
DRV:64bit: - (CbFs) – C:\Windows\SysNative\drivers\cbfs64.sys (EldoS Corporation)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (clwvd) – C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation)
DRV:64bit: - (wdkmd) – C:\Windows\SysNative\drivers\WDKMD.sys (Intel Corporation)
DRV:64bit: - (intelkmd) – C:\Windows\SysNative\drivers\igdpmd64.sys (Intel Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (Point64) – C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (hpdskflt) – C:\Windows\SysNative\drivers\hpdskflt.sys (Hewlett-Packard Company)
DRV:64bit: - (Accelerometer) – C:\Windows\SysNative\drivers\Accelerometer.sys (Hewlett-Packard Company)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (motmodem) – C:\Windows\SysNative\drivers\motmodem.sys (Motorola)
DRV:64bit: - (motccgp) – C:\Windows\SysNative\drivers\motccgp.sys (Motorola)
DRV:64bit: - (bpmp) Intel® Centrino® – C:\Windows\SysNative\drivers\bpmp.sys (Intel Corporation)
DRV:64bit: - (bpusb) – C:\Windows\SysNative\drivers\bpusb.sys (Intel Corporation)
DRV:64bit: - (bpenum) – C:\Windows\SysNative\drivers\bpenum.sys (Intel Corporation)
DRV:64bit: - (AtiHdmiService) – C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (HECIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (Motousbnet) – C:\Windows\SysNative\drivers\Motousbnet.sys (Motorola)
DRV:64bit: - (motusbdevice) – C:\Windows\SysNative\drivers\motusbdevice.sys (Motorola Inc)
DRV:64bit: - (RSUSBSTOR) – C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (Impcd) – C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (WSDPrintDevice) – C:\Windows\SysNative\drivers\WSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (SrvHsfV92) – C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) – C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) – C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) Intel® – C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (motccgpfl) – C:\Windows\SysNative\drivers\motccgpfl.sys (Motorola)
DRV:64bit: - (BTCFilterService) – C:\Windows\SysNative\drivers\motfilt.sys (Motorola Inc)
DRV:64bit: - (Ser2pl) – C:\Windows\SysNative\drivers\ser2pl64.sys (Prolific Technology Inc.)
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV:64bit: - (MotoSwitchService) – C:\Windows\SysNative\drivers\motswch.sys (Motorola)
DRV - (libusb0) – C:\Windows\SysWOW64\drivers\libusb0.sys (http://libusb-win32.sourceforge.net)
DRV - (wrssweep) – C:\Program Files (x86)\Webroot\Security\Current\plugins\cleanup\wrssweep.sys (Webroot Software Inc (www.webroot.com))
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypercam/{08F5E8…1-99AB2DD58CA0}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypercam/{08F5E8…1-99AB2DD58CA0}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [removed]:5.0.0.4490
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..network.proxy.type: 0

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@fileplanet.com/fpdlm: C:\Program Files (x86)\Download Manager\npfpdlm.dll (IGN Entertainment)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@photoproduct.rocketlife.com/RocketLife App Viewer;version=0.8: File not found
FF - HKCU\Software\MozillaPlugins\@hulu.com/Hulu Desktop: C:\Users\Benton\AppData\Local\HuluDesktop\instances\0.9.14.1\nphdplg.dll (Hulu LLC)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Benton\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ [2010/12/15 04:11:54 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3DF533F5-FB3C-4c4c-A1D7-99717F8C3038}: C:\Program Files (x86)\Webroot\Security\current\plugins\browserextension\ff_ptc\ [2011/08/15 17:15:02 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/11/03 19:17:04 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/11/08 17:20:43 | 000,000,000 | —D | M]

[2011/02/04 22:40:34 | 000,000,000 | —D | M] (No name found) – C:\Users\Benton\AppData\Roaming\Mozilla\Extensions
[2011/09/12 21:48:02 | 000,000,000 | —D | M] (No name found) – C:\Users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\extensions
[2011/09/12 21:48:02 | 000,000,000 | —D | M] (Webroot) – C:\Users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\extensions\{8ac62a8b-8b3f-43ba-9b1a-90c299b9dfda}
[2011/07/23 08:45:09 | 000,002,374 | —- | M] () – C:\Users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\searchplugins\search.xml
[2011/11/07 23:45:48 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/03/22 21:11:37 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/09/06 11:25:16 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011/11/07 23:45:48 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011/08/15 17:15:02 | 000,000,000 | —D | M] (Webroot malicious URL filtering) – C:\PROGRAM FILES (X86)\WEBROOT\SECURITY\CURRENT\PLUGINS\BROWSEREXTENSION\FF_PTC
[2011/09/30 16:30:22 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/05/16 21:46:34 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\mozilla firefox\plugins\NPcol400.dll
[2011/10/03 05:06:04 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

========== Chrome ==========


O1 HOSTS File: ([2011/11/13 19:51:15 | 000,000,098 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Webroot Browser Helper Object) - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - C:\Program Files (x86)\Webroot\Security\install\products\WISC\toolbar\LPBar.dll (Webroot Software, Inc.)
O2 - BHO: (WebrootBHO Class) - {D93EC24D-8741-4D41-B83D-A5793B998416} - C:\Program Files (x86)\Webroot\Security\Current\plugins\browserextension\WebrootBHO.dll (Webroot Software, Inc.)
O3 - HKLM\..\Toolbar: (Webroot Toolbar) - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\Program Files (x86)\Webroot\Security\install\products\WISC\toolbar\LPBar.dll (Webroot Software, Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe ()
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [IntelWirelessWiMAX] C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [WebrootTrayApp] C:\Program Files (x86)\Webroot\Security\Current\Framework\WRTray.exe (Webroot Software, Inc. )
O4 - HKCU..\Run: [igndlm.exe] C:\Program Files (x86)\Download Manager\DLM.exe (IGN Entertainment)
O4 - HKCU..\Run: [ISUSPM] C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Acresso Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (Reg Error: Key error.)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EBA12C3E-2801-40F4-A02A-5F372C411AA6}: DhcpNameServer = 192.168.0.1
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\Userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences Pro\FencesMenu64.dll (Stardock)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = ComFile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/11/13 16:44:32 | 000,000,000 | —D | C] – C:\Program Files (x86)\ESET
[2011/11/13 15:18:18 | 000,000,000 | —D | C] – C:\_OTL
[2011/11/13 15:08:37 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2011/11/13 15:08:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\ERUNT
[2011/11/13 15:07:48 | 000,791,393 | —- | C] (Lars Hederer ) – C:\Users\Benton\Desktop\erunt-setup.exe
[2011/11/12 22:18:13 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\Benton\Desktop\OTL.exe
[2011/11/12 17:57:05 | 000,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2011/11/11 18:33:59 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2011/11/11 18:33:59 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2011/11/11 18:33:59 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2011/11/11 18:33:50 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2011/11/11 18:33:43 | 000,000,000 | —D | C] – C:\Qoobox
[2011/11/11 17:28:00 | 000,000,000 | —D | C] – C:\TDSSKiller_Quarantine
[2011/11/11 17:21:29 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\WinZip
[2011/11/11 17:21:01 | 004,290,913 | R— | C] (Swearware) – C:\Users\Benton\Desktop\ComboFix.exe.exe
[2011/11/11 15:48:16 | 001,564,976 | —- | C] (Kaspersky Lab ZAO) – C:\Users\Benton\Desktop\TDSSKiller.exe
[2011/11/10 21:10:52 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[2011/11/10 21:10:44 | 000,000,000 | —D | C] – C:\Program Files\WinZip
[2011/11/10 20:49:31 | 001,916,416 | —- | C] (AVAST Software) – C:\Users\Benton\Desktop\aswMBR.exe
[2011/11/10 20:46:54 | 000,607,260 | R— | C] (Swearware) – C:\Users\Benton\Desktop\dds.com
[2011/11/10 18:09:56 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Real
[2011/11/09 20:15:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\Norman Malware Cleaner
[2011/11/08 22:54:58 | 000,000,000 | —D | C] – C:\ProgramData\Kaspersky Lab
[2011/11/08 17:17:34 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2011/11/08 07:07:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/11/07 23:45:41 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/11/07 23:45:41 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/11/07 23:45:41 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/11/07 23:10:28 | 000,000,000 | —D | C] – C:\Windows\TEMP
[2011/11/06 21:41:30 | 000,000,000 | —D | C] – C:\Users\Benton\Documents\My Digital Editions
[2011/11/06 21:21:07 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\Kobo
[2011/11/06 21:21:02 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo
[2011/11/06 21:20:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Kobo
[2011/11/03 06:15:29 | 000,527,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_7.dll
[2011/11/03 06:15:29 | 000,518,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_7.dll
[2011/11/03 06:15:29 | 000,077,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_5.dll
[2011/11/03 06:15:29 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_5.dll
[2011/11/03 06:15:27 | 000,239,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_7.dll
[2011/11/03 06:15:27 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_7.dll
[2011/11/03 06:15:26 | 002,526,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_43.dll
[2011/11/03 06:15:26 | 002,106,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_43.dll
[2011/11/03 06:15:26 | 001,907,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dcsx_43.dll
[2011/11/03 06:15:26 | 001,868,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dcsx_43.dll
[2011/11/03 06:15:25 | 000,511,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_43.dll
[2011/11/03 06:15:25 | 000,470,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_43.dll
[2011/11/03 06:15:25 | 000,276,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx11_43.dll
[2011/11/03 06:15:25 | 000,248,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx11_43.dll
[2011/11/03 06:15:24 | 002,401,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_43.dll
[2011/11/03 06:15:24 | 001,998,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_43.dll
[2011/11/03 06:15:23 | 000,530,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_6.dll
[2011/11/03 06:15:23 | 000,528,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_6.dll
[2011/11/03 06:15:23 | 000,078,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_4.dll
[2011/11/03 06:15:23 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_4.dll
[2011/11/03 06:15:21 | 000,238,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_6.dll
[2011/11/03 06:15:21 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_6.dll
[2011/11/03 06:15:21 | 000,024,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_7.dll
[2011/11/03 06:15:21 | 000,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_7.dll
[2011/10/15 08:47:13 | 000,000,000 | —D | C] – C:\Users\Benton\Documents\Call of Juarez - Bound in Blood
[2011/08/15 17:13:58 | 006,285,008 | —- | C] (Webroot Software, Inc.) – C:\Program Files (x86)\Common Files\wruninstall.exe

========== Files - Modified Within 30 Days ==========

[2011/11/13 23:08:08 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/13 23:08:08 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/13 23:03:33 | 000,783,354 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/11/13 23:03:33 | 000,663,472 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/11/13 23:03:33 | 000,122,308 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/11/13 22:59:16 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/11/13 22:59:09 | 377,901,055 | -HS- | M] () – C:\hiberfil.sys
[2011/11/13 22:08:01 | 000,000,932 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000UA.job
[2011/11/13 19:51:15 | 000,000,098 | —- | M] () – C:\Windows\SysNative\drivers\etc\Hosts
[2011/11/13 19:08:34 | 000,000,910 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000Core.job
[2011/11/13 16:57:05 | 000,007,612 | —- | M] () – C:\Users\Benton\AppData\Local\Resmon.ResmonCfg
[2011/11/13 15:08:37 | 000,000,924 | —- | M] () – C:\Users\Benton\Desktop\NTREGOPT.lnk
[2011/11/13 15:08:37 | 000,000,905 | —- | M] () – C:\Users\Benton\Desktop\ERUNT.lnk
[2011/11/13 15:07:48 | 000,791,393 | —- | M] (Lars Hederer ) – C:\Users\Benton\Desktop\erunt-setup.exe
[2011/11/13 13:30:08 | 000,165,376 | —- | M] () – C:\Users\Benton\Desktop\SystemLook_x64.exe
[2011/11/13 10:03:04 | 000,000,336 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForBenton.job
[2011/11/13 09:35:49 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/11/12 22:18:13 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Benton\Desktop\OTL.exe
[2011/11/11 17:21:05 | 004,290,913 | R— | M] (Swearware) – C:\Users\Benton\Desktop\ComboFix.exe.exe
[2011/11/11 17:20:20 | 001,545,878 | —- | M] () – C:\Users\Benton\Desktop\tdsskiller.zip
[2011/11/11 17:16:31 | 000,426,696 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/11/11 15:48:16 | 001,564,976 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Benton\Desktop\TDSSKiller.exe
[2011/11/10 21:28:32 | 000,000,512 | —- | M] () – C:\Users\Benton\Desktop\MBR.dat
[2011/11/10 21:14:43 | 000,005,933 | —- | M] () – C:\Users\Benton\Desktop\attach.zip
[2011/11/10 21:10:52 | 000,002,205 | —- | M] () – C:\Users\Public\Desktop\WinZip.lnk
[2011/11/10 20:49:32 | 001,916,416 | —- | M] (AVAST Software) – C:\Users\Benton\Desktop\aswMBR.exe
[2011/11/10 20:47:38 | 000,294,216 | —- | M] () – C:\Users\Benton\Desktop\gmer.zip
[2011/11/10 20:46:57 | 000,607,260 | R— | M] (Swearware) – C:\Users\Benton\Desktop\dds.com
[2011/11/08 23:51:57 | 305,063,108 | —- | M] () – C:\Windows\MEMORY.DMP
[2011/11/08 17:17:35 | 000,001,264 | —- | M] () – C:\Users\Benton\Desktop\Revo Uninstaller.lnk
[2011/11/06 21:22:48 | 000,001,011 | —- | M] () – C:\Users\Public\Desktop\Kobo.lnk
[2011/11/05 14:34:12 | 000,000,222 | —- | M] () – C:\Users\Benton\Desktop\Dark Messiah Might and Magic Single Player.url
[2011/11/04 22:00:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForCUDA-LAPTOP$.job
[2011/11/03 16:53:42 | 000,000,822 | —- | M] () – C:\Users\Public\Desktop\CCleaner.lnk
[2011/11/02 18:45:00 | 000,000,221 | —- | M] () – C:\Users\Benton\Desktop\DC Universe Online.url
[2011/10/26 17:35:19 | 000,000,258 | RHS- | M] () – C:\ProgramData\ntuser.pol
[2011/10/19 11:22:52 | 000,030,424 | —- | M] () – C:\Windows\SysWow64\wrLZMA.dll
[2011/10/19 11:22:34 | 000,019,576 | —- | M] () – C:\Windows\SysNative\SsiEfr.exe

========== Files Created - No Company Name ==========

[2011/11/13 15:08:37 | 000,000,924 | —- | C] () – C:\Users\Benton\Desktop\NTREGOPT.lnk
[2011/11/13 15:08:37 | 000,000,905 | —- | C] () – C:\Users\Benton\Desktop\ERUNT.lnk
[2011/11/13 13:30:08 | 000,165,376 | —- | C] () – C:\Users\Benton\Desktop\SystemLook_x64.exe
[2011/11/11 18:33:59 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2011/11/11 18:33:59 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2011/11/11 18:33:59 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2011/11/11 18:33:59 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2011/11/11 18:33:59 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2011/11/11 17:20:19 | 001,545,878 | —- | C] () – C:\Users\Benton\Desktop\tdsskiller.zip
[2011/11/10 21:28:32 | 000,000,512 | —- | C] () – C:\Users\Benton\Desktop\MBR.dat
[2011/11/10 21:14:43 | 000,005,933 | —- | C] () – C:\Users\Benton\Desktop\attach.zip
[2011/11/10 21:10:52 | 000,002,205 | —- | C] () – C:\Users\Public\Desktop\WinZip.lnk
[2011/11/10 20:47:37 | 000,294,216 | —- | C] () – C:\Users\Benton\Desktop\gmer.zip
[2011/11/08 23:51:57 | 305,063,108 | —- | C] () – C:\Windows\MEMORY.DMP
[2011/11/08 17:14:12 | 000,007,612 | —- | C] () – C:\Users\Benton\AppData\Local\Resmon.ResmonCfg
[2011/11/06 21:21:02 | 000,001,011 | —- | C] () – C:\Users\Public\Desktop\Kobo.lnk
[2011/11/05 14:34:12 | 000,000,222 | —- | C] () – C:\Users\Benton\Desktop\Dark Messiah Might and Magic Single Player.url
[2011/11/02 18:45:00 | 000,000,221 | —- | C] () – C:\Users\Benton\Desktop\DC Universe Online.url
[2011/08/31 22:10:50 | 000,000,153 | —- | C] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2011/08/31 21:56:51 | 000,796,360 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/08/17 13:15:48 | 000,000,064 | —- | C] () – C:\Windows\SysWow64\rp_stats.dat
[2011/08/17 13:15:48 | 000,000,044 | —- | C] () – C:\Windows\SysWow64\rp_rules.dat
[2011/08/15 17:15:00 | 000,030,424 | —- | C] () – C:\Windows\SysWow64\wrLZMA.dll
[2011/05/26 19:47:35 | 000,001,854 | —- | C] () – C:\Users\Benton\AppData\Roaming\GhostObjGAFix.xml
[2011/04/03 17:10:21 | 000,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2011/03/30 19:24:35 | 000,000,333 | —- | C] () – C:\Windows\game.ini
[2011/02/13 23:20:13 | 000,000,040 | —- | C] () – C:\ProgramData\ra3.ini
[2011/02/08 19:57:26 | 000,222,804 | —- | C] () – C:\Windows\hpwins24.dat
[2011/02/04 22:33:57 | 000,000,848 | -HS- | C] () – C:\ProgramData\KGyGaAvL.sys
[2010/12/15 03:49:28 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2010/12/15 03:39:40 | 000,002,857 | —- | C] () – C:\Windows\SysWow64\atipblup.dat
[2010/12/15 03:38:19 | 000,000,299 | —- | C] () – C:\Windows\SysWow64\RStoneLog2.ini
[2010/12/15 03:38:19 | 000,000,240 | —- | C] () – C:\Windows\SysWow64\RStoneLog.ini
[2010/10/16 14:42:34 | 000,000,188 | —- | C] () – C:\Windows\SysWow64\HPWA.ini
[2010/09/21 13:30:44 | 000,007,736 | —- | C] () – C:\Windows\hpDSTRES.DLL
[2010/07/28 17:08:46 | 000,127,868 | —- | C] () – C:\Windows\SysWow64\igcompkrng575.bin
[2010/07/28 17:08:44 | 000,104,796 | —- | C] () – C:\Windows\SysWow64\igfcg575m.bin
[2010/07/28 17:08:42 | 000,870,560 | —- | C] () – C:\Windows\SysWow64\igkrng575.bin
[2010/07/28 16:14:38 | 000,208,896 | —- | C] () – C:\Windows\SysWow64\iglhsip32.dll
[2010/07/28 16:14:38 | 000,143,360 | —- | C] () – C:\Windows\SysWow64\iglhcp32.dll
[2010/06/15 21:28:54 | 000,002,857 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2009/11/06 04:53:13 | 000,001,832 | —- | C] () – C:\Windows\hpwmdl24.dat
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:59:36 | 001,498,564 | —- | C] () – C:\Windows\SysWow64\igkrng400.bin
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat

< End of report >
Post #41
Hi z0ne,

Glad to hear things are running well again. :)

Please download JavaRa to your desktop and unzip it to its own
folder
  • Run JavaRa.exe (double-click for XP/right-click and Run as Administrator for Vista), pick the language of your choice and click Select. Then
    click Remove Older Versions.
  • Accept any prompts.
  • Open JavaRa.exe (double-click for XP/right-click and Run as Administrator for Vista) again and select Search For Updates.
  • Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest
    Java Runtime Environment (JRE) version for your computer.
———-

In your next reply let me know if you had any problems with running JavaRa and also if you have any remaining issues with your computer. :)
Post #42
Hey jeff no problem with JavaRa. It did seem a little sluggish starting up. Got to the log in screen typed in password and it froze paused whateveryou want to call in for 2-3 mins. Don't think there were any updates or anything but I will try it again tomorrow and let you know. After that it ran fine.
Post #45
hey sorry jeff my mom fell down some steps Monday and messed up her arm pretty bad had to have sugery and all that. I still would like your help just haven't been home. She is suppose to get home today so Maybe get back on this tomorrow or so. I will let you know. Thanks again for your help!!! Benton

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI