Winsock error causing internet connectivity issues [Solved]

Malwarebytes log Malwarebytes Anti-Malware 1.60.1.1000 www.malwarebytes.org Database version: v2012.02.04.02 Windows Vista Service Pack 2 x86 NTFS (Safe Mode/Networking) Internet Explorer 9.0.8112.16421 Euclid :: EUCLID-PC [administrator] 2/4/2012 7:19:07 AM mbam-log-2012-02-04 (07-19-07).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 197468 Time elapsed: 4 minute(s), 42 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) ESET -tried the IE route and keep getting "Can not get update. Is proxy configured?" so downloaded it in safari. At first, when trying to install it also kicked back proxy issues. I kept clicking okay/next after each issue and it finally connected. Then got to the Initialization screen and back to the "Can not get update…." error.

Hi qwick,

Let's try a different online scanner…

Do an online scan with BitDefender QuickScan.
Please be patient as scanning may take some time. If you have problem running the scan, you might want to disable any real time protection that you have.

• Click here to go to BitDefender QuickScan page.
• For Firefox users:
  • Click on Free Scan Now. You will be prompted to install a plug-in. Please Allow. In case you get stuck, please refresh the page to try again.
  • A Software Installation window will appear. Click Install Now and the plugin will be installed as an Add-on.
  • Restart Firefox when done. Go back to the BitDefender QuickScan page again and click on Free Scan Now and proceed accordingly.
• For Internet Explorer users:
  • Click on Free Scan Now. You will be prompted to install an ActiveX control. Please install.
  • The page will refresh. Click on Free Scan Now again and proceed accordingly.
• When scan has completed, click on View report and a Notepad log shall open.
• If there are any infections found, you will get a warning and the link to the report will be displayed as the number of infections. Click on it.
• Post back the contents of this report. It can also be found at C:\Documents and Settings\\Application Data\QuickScan, is the Windows log-in name.

after a couple battles with Puresights pages and it not connecting in firefox or working in IE - i went with chrome QuickScan 32-bit v0.9.9.106 ————————— Scan date: Sat Feb 04 19:31:29 2012 Machine ID: 5EB59494 No infection found. ——————- Processes ——— Firefox 2004 C:\Program Files\Mozilla Firefox\firefox.exe Google Chrome 360 C:\Program Files\Google\Chrome\Application\chrome.exe Google Chrome 1388 C:\Program Files\Google\Chrome\Application\chrome.exe Google Chrome 1420 C:\Program Files\Google\Chrome\Application\chrome.exe Google Chrome 1792 C:\Program Files\Google\Chrome\Application\chrome.exe Microsoft Malware Protection 876 C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe Microsoft® Windows® Operating System 1540 C:\Windows\explorer.exe Microsoft® Windows® Operating System 428 C:\Windows\System32\csrss.exe Microsoft® Windows® Operating System 464 C:\Windows\System32\csrss.exe Microsoft® Windows® Operating System 560 C:\Windows\System32\lsass.exe Microsoft® Windows® Operating System 544 C:\Windows\System32\services.exe Microsoft® Windows® Operating System 352 C:\Windows\System32\smss.exe Microsoft® Windows® Operating System 472 C:\Windows\System32\wininit.exe Microsoft® Windows® Operating System 516 C:\Windows\System32\winlogon.exe Windows® Internet Explorer 384 C:\Program Files\Internet Explorer\iexplore.exe Windows® Internet Explorer 824 C:\Program Files\Internet Explorer\iexplore.exe Windows® Internet Explorer 1656 C:\Program Files\Internet Explorer\iexplore.exe (verified) Microsoft® Windows® Operating System 1668 C:\Program Files\Windows Media Player\wmpnscfg.exe (verified) Microsoft® Windows® Operating System 568 C:\Windows\System32\lsm.exe (verified) Microsoft® Windows® Operating System 708 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 764 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 968 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 992 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1032 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1088 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1112 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1276 C:\Windows\System32\svchost.exe Network activity —————- Process chrome.exe (360) connected on port 80 (HTTP) –> 72.14.204.95 Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (1388) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (1656) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (1656) connected on port 80 (HTTP) –> [removed] Process firefox.exe (2004) connected on port 80 (HTTP) –> [removed] Process firefox.exe (2004) connected on port 80 (HTTP) –> [removed] Process wininit.exe (472) listens on ports: 49152 (RPC) Process services.exe (544) listens on ports: 49155 (RPC) Process lsass.exe (560) listens on ports: 49154 (RPC) Process svchost.exe (764) listens on ports: 135 (RPC) Process svchost.exe (968) listens on ports: 49153 (RPC) Autoruns and critical files ————————— Ad-Aware Admin Application C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe Adobe Reader and Acrobat Manager C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe AUTOBACK.EXE C:\Program Files\ERUNT\AUTOBACK.EXE CEEment C:\Program Files\Hewlett-Packard\SDP\Ceement\HPCEE.exe Host Intrusion Prevention System C:\Windows\system32\umxsbxexw.dll Java™ Platform SE Auto Updater 2 0 C:\Program Files\Common Files\Java\Java Update\jusched.exe Microsoft Office OneNote C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE Microsoft Security Client c:\Program Files\Microsoft Security Client\msseces.exe Microsoft® Windows® Operating System C:\Windows\system32\BROWSEUI.dll Microsoft® Windows® Operating System C:\Windows\System32\logon.scr Windows® Internet Explorer c:\windows\system32\webcheck.dll (verified) Google Update C:\Program Files\Google\Update\GoogleUpdate.exe (verified) Microsoft® Windows® Operating System C:\Program Files\Windows Media Player\wmpnscfg.exe (verified) Microsoft® Windows® Operating System C:\Windows\ehome\ehTray.exe (verified) Microsoft® Windows® Operating System c:\windows\system32\userinit.exe (verified) Windows Defender C:\Program Files\Windows Defender\MSASCui.exe Browser plugins ————— AcroIEHelperShim Library c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll Adobe Acrobat C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll Adobe Acrobat C:\Program Files\Internet Explorer\plugins\nppdf32.dll Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe Bitdefender QuickScan C:\Users\Euclid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.106_0\npqscan.dll BitDefender QuickScan C:\Users\Euclid\AppData\Roaming\Mozilla\Firefox\Profiles\pc6uva85.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll BitDefender QuickScan C:\Windows\Downloaded Program Files\qsax.dll Dragon NaturalWeb c:\windows\speech\dragon\web_ie.dll Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\PhotoUploader55.ocx Google Toolbar for Internet Explorer c:\program files\google\google toolbar\googletoolbar_32.dll Google Update C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll Java™ Platform SE 6 U30 c:\program files\java\jre6\bin\jp2ssv.dll Java™ Platform SE 6 U30 C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll Java™ Platform SE 6 U30 c:\program files\java\jre6\bin\ssv.dll Microsoft® CoReXT c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll MySpace Image Uploader C:\Windows\Downloaded Program Files\MySpaceUploader.ocx npitunes.dll C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll RealNetworks Rhapsody Player Engine C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll sdhelper.dll c:\program files\spybot - search & destroy\sdhelper.dll Shockwave for Director C:\Windows\system32\Adobe\Director\np32dsw.dll Silverlight Plug-In c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll Snapfish Activia C:\Windows\Downloaded Program Files\SnapfishActivia1000.ocx Windows Live™ Photo Gallery C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll Windows Presentation Foundation c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll Windows® Internet Explorer C:\Windows\system32\IEFRAME.dll winsflt.dll C:\Windows\system32\winsflt.dll Yahoo Application State Plugin C:\Program Files\Yahoo!\Shared\npYState.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\mswsock.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\napinsp.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\NLAapi.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\pnrpnsp.dll (verified) Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll Missing files ————- File not found: "c:\program files\microsoft\bingbar\bingext.dll" –> HKLM\Software\Classes\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}\InprocServer32\"(default)" –> HKLM\Software\Classes\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f}\InprocServer32\"(default)" Scan —- MD5: 8082f66dc9c8167ff1aa548736f58457 C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll MD5: 8a3ba48b5be893e1d81bfac17a3c1b1f c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll MD5: b8e421c0890356cd4a793d8a346d9096 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe MD5: 62b7936f9036dd6ed36e6a7efa805dc0 C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe MD5: 018857ead9a077a56aedfc0e5ef7a24a C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe MD5: 6e3245df783e58375b3465f03274743e C:\Program Files\Common Files\Java\Java Update\jusched.exe MD5: 75ac54b996f7c8e17594ebc32b6614bd c:\Program Files\Common Files\LightScribe\LSSrvc.exe MD5: 938acf2a4f7fdaff322fd36f0b14d45a C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll MD5: 785f487a64950f3cb8e9f16253ba3b7b C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE MD5: 6bf01e200063d7274f3af06d226671f5 c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll MD5: 0a70f4022ec2e14c159efc4f69aa2477 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE MD5: 951f36219c7384c6ed6c9f44d45c5235 C:\Program Files\Common Files\System\Ole DB\oledb32.dll MD5: 892125b60ba6c2a66f485a89c4a6b918 C:\Program Files\Common Files\System\Ole DB\OLEDB32R.DLL MD5: 0c998f64686c3724b97c804015f17cad C:\Program Files\CyberLink\CyberLink Live\CLPushUpdateService.exe MD5: ae4a763ebf8285895a1b6d8b10455557 C:\Program Files\CyberLink\CyberLink Live\CLSomaMonitorService.exe MD5: 88c9785b287acde2265736221a916ef2 C:\Program Files\CyberLink\CyberLink Live\CLSomaService.exe MD5: e00de20f0f6bed5cd2160247ddc9443b C:\Program Files\ERUNT\AUTOBACK.EXE MD5: 97ae540b2853e7112be83a650110eb64 C:\Program Files\Google\Chrome\Application\16.0.912.77\avcodec-53.dll MD5: 72af6085baf82343cb39b543a708686c C:\Program Files\Google\Chrome\Application\16.0.912.77\avformat-53.dll MD5: 5fb8b4f19907e64bb92254c6f08b0c09 C:\Program Files\Google\Chrome\Application\16.0.912.77\avutil-51.dll MD5: 350f7cd349581497b1f31825c8decfa1 C:\Program Files\Google\Chrome\Application\16.0.912.77\chrome.dll MD5: 794f655caae44aae20139326a1d433c2 C:\Program Files\Google\Chrome\Application\16.0.912.77\icudt.dll MD5: 8cedb784eab4c35d2139adff4c8236e9 C:\Program Files\Google\Chrome\Application\16.0.912.77\pdf.dll MD5: b6639ab91b1fcf1762efb395281decf9 C:\Program Files\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll MD5: 697d3b09d8883f72265da274e0972042 C:\Program Files\Google\Chrome\Application\chrome.exe MD5: 61980095ae5d02b1e9d2ed604a90c1bf c:\program files\google\google toolbar\googletoolbar_32.dll MD5: 27626506e07795bb6357f7f2ef78a90b C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll MD5: 0d26c438e2938a3e6bdd91173bc96ff0 c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe MD5: 6ac03efd60e5ac80bf2b6c5218df8043 C:\Program Files\Hewlett-Packard\SDP\Ceement\HPCEE.exe MD5: 2e7e49077c7bbeb2947bd6d03c8454b5 C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe MD5: fcb563b0a23643e5f80b6ff1e60f610f C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll MD5: 25e443e27165c652723a92d9bdfd4649 C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll MD5: a1659e4d08fe8d0f0bc61960d8c0369e C:\Program Files\Internet Explorer\ieproxy.dll MD5: 4d0bad6e0b9a5e650fe37a05f33bf288 C:\Program Files\Internet Explorer\IEShims.dll MD5: 904e13ba41af2e353a32cf351ca53639 C:\Program Files\Internet Explorer\iexplore.exe MD5: 53fe2d34b143efdb80685281e751b91c C:\Program Files\Internet Explorer\plugins\nppdf32.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll MD5: 6e27978a4755f4789f912f5f49392f7c C:\Program Files\iPod\bin\iPodService.exe MD5: 2658ce01d183bc62e7c46a1c9969632e C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll MD5: f2121482c2968cd3b53ed53acc9277a5 c:\program files\java\jre6\bin\jp2ssv.dll MD5: ccc24faa47c47e66be61bf22603c5e3a C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll MD5: e810acafa8e6d80117414b7ca036d626 c:\program files\java\jre6\bin\ssv.dll MD5: 150d58ed027fe5bbea253357a7108d6d C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe MD5: 2a5e99e66df49b8707f5d09d34b4fa40 C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe MD5: 6c4a3804510ad8e0f0c07b5be3d44ddb C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys MD5: 07413a638ecfec8bde85105e230cba77 C:\Program Files\Lavasoft\Ad-Aware\ShellExt.dll MD5: a76efc0767acbe3ad7b0fc30905d92d8 C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll MD5: 056b19651bd7b7ce5f89a3ac46dbdc08 C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe MD5: 12b9c4fa0d4735a1873fed4083b75748 c:\Program Files\Microsoft Security Client\Antimalware\MpClient.dll MD5: 32c9e8f42348343d72013165ea86a3c6 c:\Program Files\Microsoft Security Client\Antimalware\MpOAv.dll MD5: f614ab3f0af8defe7ad91be2ba483603 c:\Program Files\Microsoft Security Client\Antimalware\MpSvc.dll MD5: cfce43b70ca0cc4dcc8adb62b792b173 C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe MD5: 364f37da8f61636ef3838db9d21488f2 c:\Program Files\Microsoft Security Client\Antimalware\NisIpsPlugin.dll MD5: a5cb074f34bbd89948e34a630d459c0c c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe MD5: d0ebe8f93c70fca792e241ce268bc837 c:\Program Files\Microsoft Security Client\msseces.exe MD5: 3edd1cf244b85581bddf79e886954e92 c:\Program Files\Microsoft Security Client\shellext.dll MD5: ce6db25ffa35fd051c503f11db745862 c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll MD5: 825f81a6f7dd073509db101f0ba6dc59 C:\Program Files\Microsoft\BingBar\BBSvc.EXE MD5: cc781378e7eda615d2cdca3b17829fa4 C:\Program Files\Microsoft\BingBar\SeaPort.EXE MD5: 76438ae6cfa727f17537701bdd7f82ee C:\Program Files\Mozilla Firefox\components\browsercomps.dll MD5: 2de2b92c4efef841ceaa9752fc8fa91f C:\Program Files\Mozilla Firefox\firefox.exe MD5: 0b60002305ce72ee8ebe6a00fffc95b6 C:\Program Files\Mozilla Firefox\freebl3.dll MD5: 0fa7d2e9361df35847b8c5a1238d9520 C:\Program Files\Mozilla Firefox\mozalloc.dll MD5: e009442495abe05d0aff81bd48022931 C:\Program Files\Mozilla Firefox\mozjs.dll MD5: d7f681f78e0b36c0d748492113a8e5ae C:\Program Files\Mozilla Firefox\mozsqlite3.dll MD5: 1d9a80a0b2f28a04aa4ab43ef9f8d740 C:\Program Files\Mozilla Firefox\mozutils.dll MD5: 37cfb217c378e9acfb8adc2a13703ac9 C:\Program Files\Mozilla Firefox\nspr4.dll MD5: fcbf87f705c8cef0ab40204dc21c564d C:\Program Files\Mozilla Firefox\nss3.dll MD5: d898c6243de3043b57cd22570c1e0274 C:\Program Files\Mozilla Firefox\nssckbi.dll MD5: 1d9f1ead9e3683db472f5e147a44e9b5 C:\Program Files\Mozilla Firefox\nssdbm3.dll MD5: b78465a326ea3efb0e637913c6409b6d C:\Program Files\Mozilla Firefox\nssutil3.dll MD5: e0e6326986618e479ee8ec0d6d087ca6 C:\Program Files\Mozilla Firefox\plc4.dll MD5: a58eba57ca5409522a220dce93ee3c45 C:\Program Files\Mozilla Firefox\plds4.dll MD5: a2310b0e1aa771a9415b3fa901d85501 C:\Program Files\Mozilla Firefox\smime3.dll MD5: 1ae11a396d1e3d4ff20c4ffba01e5566 C:\Program Files\Mozilla Firefox\softokn3.dll MD5: b99b7fea99bcc3f7b3dbbcf66ec24e54 C:\Program Files\Mozilla Firefox\ssl3.dll MD5: 050495ad42dcdeb3f0d5d18c13b75351 C:\Program Files\Mozilla Firefox\xpcom.dll MD5: 7647ce6050bef747908a319c0817c38f C:\Program Files\Mozilla Firefox\xul.dll MD5: dca419d9cf6666715b7f54bbc6d3a666 C:\Program Files\MP3 Player Utilities 4.18\AMVConverter\AmvTransform.dll MD5: 7bfadf4e537f78bd70ff62b5b4f5b155 C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll MD5: b021a5a93fc5f6454786cc7f96c1fce3 C:\Program Files\VCOM\PowerDesk\pdshext.dll MD5: b7dc98f6f4e7611a9c0849945fb28fb9 C:\Program Files\Windows Defender\MpOav.dll MD5: 94a85e956a065e23e0010a6a7826243b C:\Program Files\Windows Live\installer\WLSetupSvc.exe MD5: ac421a44de902f2627f1e63793ed89cd C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll MD5: 9e4212517ac0590a7a00365e2cab938c c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{35DAA76B-3833-4048-9525-D15FD3E5C2B8}\mpengine.dll MD5: 0aad6f0a129ddf453b2f99ee0a495923 C:\PROGRA~1\PC-DOC~1\PCD5SRVC.pkms MD5: e0ec3bc6de38f83825518d0645885f05 C:\Users\Euclid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.106_0\npqscan.dll MD5: 777d526938bbe233dbd46a10eb934dfa C:\Users\Euclid\AppData\Roaming\Mozilla\Firefox\Profiles\pc6uva85.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll MD5: 2245b3cae09af148d983f88f62153628 C:\Windows\Downloaded Program Files\MySpaceUploader.ocx MD5: bb7fcdcd4de287340b5c1bb1949ad3c6 C:\Windows\Downloaded Program Files\qsax.dll MD5: f5c79c45f1adf877dc3afdff3565ae7b C:\Windows\Downloaded Program Files\SnapfishActivia1000.ocx MD5: 219af0f9a54ebeeb3e7e20025d801034 C:\Windows\Microsoft.NET\Framework\v2.0.50727\culture.dll MD5: 5ed379a5831f6e19d26cc1ae5798a323 C:\Windows\Microsoft.NET\Framework\v2.0.50727\Shfusion.dll MD5: ab87eeffd18f2baafc274e7075ea6c67 c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll MD5: f5df6846f30e9f54ea60ccaeb3fb2055 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll MD5: dc802bd01ee3361df9ca7d626642a057 c:\windows\speech\dragon\web_ie.dll MD5: 09c91e1f199c53e1114396b59b3b4d9e C:\Windows\system32\ACLUI.dll MD5: e2cca1b3ba59949ae16ec587e89a09ba C:\Windows\system32\Adobe\Director\np32dsw.dll MD5: ce683f9b7482b31d0ec5d04fd7533f54 C:\Windows\system32\adsldp.dll MD5: e9b9c1b98c8d6d48407e1c1203eac659 C:\Windows\system32\adsldpc.dll MD5: f31eebc1a1c81fd04005489cc3dcdfe7 C:\Windows\system32\basesrv.dll MD5: 745d20b75b3bdda545022625ed5dbb1b C:\Windows\system32\CISVC.EXE MD5: 74f26fc01b180d4a99a168ed69c30a53 C:\Windows\system32\cmd.exe MD5: 7f15b4953378c8b5161d65c26d5fed4d C:\Windows\system32\cngaudit.dll MD5: 93e317d7ad783d8eaee2e3500bfe889d C:\Windows\system32\credui.dll MD5: 187076dd5d8d4d5d23079d0741195ead C:\Windows\system32\CSRSRV.dll MD5: abca209eba02cb59233614db83b4f50d C:\Windows\System32\csrss.exe MD5: 3dfeec45e5f22993216083fb777719d5 C:\Windows\system32\d2d1.dll MD5: 8b02d2ecc7ef6e1f6af08459e3f741f6 C:\Windows\system32\d3d10.dll MD5: 29e4ea31c6debe5efb384eefa4f1ef63 C:\Windows\system32\d3d10_1.dll MD5: 556f1cbe9ba19e2ccd6f8d9af71af5c7 C:\Windows\system32\d3d10_1core.dll MD5: 9c7094f537782a82b6a29b4a7172e180 C:\Windows\system32\d3d10core.dll MD5: 33ebf5dcd45f878b3622ad82ab37af3a C:\Windows\system32\D3D10Warp.dll MD5: 85e861d0b88db2b54acb0839654c09f7 C:\Windows\system32\DNSAPI.dll MD5: 57d762f6f5974af0da2be88a3349baaa c:\windows\system32\dnsrslvr.dll MD5: 3911b972b55fea0478476b2e777b29fa C:\Windows\system32\drivers\afd.sys MD5: 35f376253f687bde63976ccb3f2108ca C:\Windows\system32\DRIVERS\bowser.sys MD5: 82b8c91d327cfecf76cb58716f7d4997 C:\Windows\system32\drivers\compbatt.sys MD5: 622c41a07ca7e6dd91770f50d532cb6c C:\Windows\System32\Drivers\dfsc.sys MD5: 4f59c172c094e1a1d46463a8dc061cbd C:\Windows\system32\DRIVERS\Dot4.sys MD5: 80bf3ba09f6f2523c8f6b7cc6dbf7bd5 C:\Windows\system32\DRIVERS\Dot4Prt.sys MD5: c55004ca6b419b6695970dfe849b122f C:\Windows\system32\DRIVERS\dot4usb.sys MD5: c68ac676b0ef30cfbb1080adce49eb1f C:\Windows\System32\drivers\dxgkrnl.sys MD5: 72cc6a8ca7891031d6380db5025c773c C:\Windows\system32\DRIVERS\HSX_CNXT.sys MD5: 88749fbf8beb18c90e7d6626c8c1910b C:\Windows\system32\DRIVERS\HSX_DP.sys MD5: fe440536bd98af772130dc3a6fe1915f C:\Windows\system32\DRIVERS\HSXHWBS2.sys MD5: 8318e04a6455ced1020bcc5039b62cfa C:\Windows\system32\DRIVERS\ialmnt5.sys MD5: 62f534791ae488a475a3e508d92af4cc C:\Windows\system32\DRIVERS\igdkmd32.sys MD5: e50a95179211b12946f7e035d60af560 C:\Windows\system32\DRIVERS\irda.sys MD5: 5896b5ff6332ab2be1582523e9656a67 C:\Windows\system32\DRIVERS\irsir.sys MD5: 2b2f1638466e8cb091400c9019cc730e C:\Windows\System32\Drivers\ksecdd.sys MD5: 336abe8721cbc3110f1c6426da633417 C:\Windows\system32\DRIVERS\Lbd.sys MD5: b7ca8cc3f978201856b6ab82f40953c3 C:\Windows\system32\drivers\mbam.sys MD5: fee0baded54222e9f1dae9541212aab1 C:\Windows\system32\DRIVERS\MpFilter.sys MD5: 2c3489660d4a8d514c123c3f0d67df46 C:\Windows\system32\DRIVERS\MpNWMon.sys MD5: 1e94971c4b446ab2290deb71d01cf0c2 C:\Windows\system32\DRIVERS\mrxsmb.sys MD5: 4fccb34d793b116423209c0f8b7a3b03 C:\Windows\system32\DRIVERS\mrxsmb10.sys MD5: c3cb1b40ad4a0124d617a1199b0b9d7c C:\Windows\system32\DRIVERS\mrxsmb20.sys MD5: 7b01c6172cfd0b10116175e09200d4b4 C:\Windows\system32\DRIVERS\NisDrvWFP.sys MD5: 3b1901e401473e03eb8c874271e50c26 C:\Windows\system32\drivers\pciide.sys MD5: d9b34325ee5df78b8f28a3de9f577c7d C:\Windows\system32\DRIVERS\RimSerial.sys MD5: f17713d108aca124a139fde877eef68a C:\Windows\System32\Drivers\RimUsb.sys MD5: 75e8a6bfa7374aba833ae92bf41ae4e6 C:\Windows\System32\Drivers\RootMdm.sys MD5: 3d2b6520699d1dcd5a13f9e7cad62199 C:\Windows\system32\DRIVERS\Rtlh86.sys MD5: f06c97eca3fdb287a2affbfdb0277335 C:\Windows\system32\DRIVERS\RtNdPt60.sys MD5: 51cf56aa8bcc241f134b420b8f850406 C:\Windows\system32\drivers\sffdisk.sys MD5: 96ded8b20c734ac41641ce275250e55d C:\Windows\system32\drivers\sffp_mmc.sys MD5: 8b08cab1267b2c377883fc9e56981f90 C:\Windows\system32\drivers\sffp_sd.sys MD5: 41987f9fc0e61adf54f581e15029ad91 C:\Windows\System32\DRIVERS\srv.sys MD5: ff33aff99564b1aa534f58868cbe41ef C:\Windows\System32\DRIVERS\srv2.sys MD5: 7605c0e1d01a08f3ecd743f38b834a44 C:\Windows\System32\DRIVERS\srvnet.sys MD5: 16731b631f28f63cd9f4cb60940e7ddd C:\Windows\System32\drivers\tcpip.sys MD5: 3fc13f09af9be487c7b4fac4070a036c C:\Windows\System32\drivers\tcpipreg.sys MD5: 5c2bdc152bbab34f36473deaf7713f22 C:\Windows\System32\Drivers\usbaapl.sys MD5: c466021d31ff6c0a6069d12299d80c0b C:\Windows\system32\DRIVERS\VSTBS23.SYS MD5: ec36f1d542ed4252390d446bf6d4dfd0 C:\Windows\system32\DRIVERS\VSTDPV3.SYS MD5: 676f4b665bdd8053eaa53ac1695b8074 C:\Windows\system32\DRIVERS\WinUSB.sys MD5: 701a9f884a294327e9141d73746ee279 C:\Windows\system32\drivers\wmiacpi.sys MD5: cd5f291a1161f15896d1a4d63daff5df C:\Windows\system32\DRIVERS\xaudio.exe MD5: dab33cfa9dd24251aaa389ff36b64d4b C:\Windows\system32\DRIVERS\xaudio.sys MD5: 6843926aff733d46a04f9d4e1c1a6b14 C:\Windows\system32\DWrite.dll MD5: aaae543c535ed596ecad2ab8761c2c6f C:\Windows\system32\dxgi.dll MD5: 4312debdacbe338f0b90e7f08e7672be C:\Windows\system32\Dxtmsft.dll MD5: ca493a92da9880b6f1a89c3dbd54ba5b C:\Windows\system32\Dxtrans.dll MD5: abaeaee763e287bdd39094c4165e1f3f C:\Windows\system32\fdproxy.dll MD5: 8ce364388c8eca59b14b539179276d44 C:\Windows\system32\FntCache.dll MD5: bc74a74b020374d280fb8db82fcb8d55 C:\Windows\system32\hccutils.DLL MD5: 05b6a5ce1c7767c32df35966107cb1ec C:\Windows\System32\hhctrl.ocx MD5: 2969d26eee289be7422aa46fc55f4e38 C:\Windows\system32\HPZinw12.dll MD5: bafc9706bdf425a02b66468ab2605c59 C:\Windows\system32\HPZipm12.dll MD5: 691e93028b8723e05b4a637be77380dd C:\Windows\system32\IEFRAME.dll MD5: 1416ab557be700fa117323b6b8f32882 C:\Windows\system32\iertutil.dll MD5: 274e38af453fa9e079b1d5a85f5f0921 C:\Windows\system32\IEUI.dll MD5: fbdd6b407bef4524d71363e8d820c24b C:\Windows\system32\igfxpph.dll MD5: 68563ac389f92ee79f1c714288ba1dce C:\Windows\system32\ImgUtil.dll MD5: 8ffdeb99eac611d617016f2174d48fc6 C:\Windows\system32\inetcomm.dll MD5: dfae18c675d71fd06d57dc69d2913975 C:\Windows\system32\inetsrv\apphostsvc.dll MD5: 9ca92191c8f18e8b491a5b28e63c07b7 C:\Windows\system32\inetsrv\iisw3adm.dll MD5: 7f83b06a929a981bc001b2ea304d2036 C:\Windows\System32\iphlpsvc.dll MD5: cbb0d940221a281bcfeaea695bd1cda5 C:\Windows\System32\irmon.dll MD5: 4b65b4f93f63aa6dc1042a8aed99d093 C:\Windows\system32\jscript.dll MD5: 82586704868e3abb382cae303b41e8b7 C:\Windows\System32\jscript9.dll MD5: 574b473facaa0e91702b86578440b525 C:\Windows\system32\kernel32.dll MD5: 74c2f29cc612b2b34231bebd824d2fb2 C:\Windows\system32\keyiso.dll MD5: ca0b849566776a17f35f0339be17dfd9 C:\Windows\system32\ktmw32.dll MD5: 19ffad68a02af1bf0bc336ee26cd6767 c:\windows\system32\l2gpstore.dll MD5: 35d40113e4a5b961b6ce5c5857702518 c:\windows\system32\lmhsvc.dll MD5: b17d18fd6594aaa25cbc95e799b1bf40 C:\Windows\System32\logon.scr MD5: 178fac2b7c66e9a4400ce7ac37623e3f C:\Windows\system32\LSASRV.dll MD5: a3e186b4b935905b829219502557314e C:\Windows\System32\lsass.exe MD5: efbef826c183cf8edab324ce514d69b7 C:\Windows\system32\Macromed\Flash\Flash10t.ocx MD5: 2a58bd824d13aa6471894e75a5bac141 C:\Windows\system32\mdmcls32.exe MD5: 56e315acfb08a177b4d01e42b9044db5 C:\Windows\system32\MPRAPI.dll MD5: 554ed6988e44fdf18941429e8b2cb652 C:\Windows\system32\MSDART.DLL MD5: 66c0aee61d1c5c35bf1b4642a153b114 C:\Windows\system32\mshtml.dll MD5: 35aae2e841aa1a949775168e119482c9 C:\Windows\system32\msls31.dll MD5: abe9eea1eabea0711610a637a7b1c25d C:\Windows\system32\msprivs.dll MD5: ff41e1ac301f51e16f61ad7c0f45467c C:\Windows\System32\msshsq.dll MD5: 73fd66b14d3c4252f7a524b8836a4359 C:\Windows\System32\mstask.dll MD5: 2fa16465f64db54b1f7f511395eb4fd7 C:\Windows\system32\NCObjAPI.DLL MD5: f4d9ed6bd74ad7cc0bec83c43a1cb76b c:\windows\system32\ncsi.dll MD5: 6bc5fcef351e4cb5a269c1e84b5a06da C:\Windows\system32\netcfgx.dll MD5: 95daecf0fb120a7b5da679cc54e37dde C:\Windows\system32\netlogon.dll MD5: 8bb86f0c7eea2bded6fe095d0b4ca9bd c:\windows\system32\nsisvc.dll MD5: dda770bbd7c2ed024d6f50e279d90e5b C:\Windows\system32\ntdll.dll MD5: a7dff9642d510be1eec6664cd0369953 C:\Windows\system32\ntmssvc.dll MD5: ce2f98eb42d775644c8ebfd6f5ef2619 C:\Windows\system32\objsel.dll MD5: 9586e7cb2255a8b097a7e4538202585e C:\Windows\system32\ole32.dll MD5: dc15ab7168c0309d8f04fd95b6240422 C:\Windows\system32\OLEACC.dll MD5: b218342214d9bba0f54ea12ba2e9278c C:\Windows\system32\OLEAUT32.dll MD5: 2dd6af8e97f59c9d39329bbc2a81f13f C:\Windows\system32\RASDLG.dll MD5: ab530fdd34c67b497a20171d1234cfe9 C:\Windows\system32\riched32.dll MD5: da61f5c012a646771587a8cb9c0ae590 C:\Windows\system32\schannel.dll MD5: 1a58069db21d05eb2ab58ee5753ebe8d C:\Windows\system32\schedsvc.dll MD5: d602fedbd9155fc2ded6863fb60c950f C:\Windows\system32\Secur32.dll MD5: 167ac31450c0c53a01fa1491e94d7678 C:\Windows\system32\shdocvw.dll MD5: 33ae914c24f546aabf281ba7b138186d C:\Windows\system32\SHELL32.dll MD5: 91fa8d1db1ec243cecd4a0977c91cc6f C:\Windows\System32\ShellvRTF.dll MD5: 9176285122b7b849fec2aa1b72a8f7a8 C:\Windows\system32\SHLWAPI.dll MD5: c7230fbee14437716701c15be02c27b8 C:\Windows\system32\SHSVCS.dll MD5: 26ba81ba48c3d9fb292b4b60fde849f2 C:\Windows\System32\snmp.exe MD5: 8554097e5136c3bf9f69fe578a1b35f4 C:\Windows\System32\spoolsv.exe MD5: 1bf5eebfd518dd7298434d8c862f825d C:\Windows\system32\srvsvc.dll MD5: b5950df243837d8217f4e597919b224a C:\Windows\system32\stobject.dll MD5: b25997f9412b3e4e368493e4388dccbc C:\Windows\System32\svcprs32.exe MD5: 71f5a7104fdf16c0ac5283a6ce666553 C:\Windows\system32\SYSNTFY.dll MD5: bfa034aac103d8a6f591ac9364688339 C:\Windows\system32\t2embed.dll MD5: 52e129522c1775dbb8cc252e7a0655c7 C:\Windows\system32\taskschd.dll MD5: a275fbb7c99458c12e088dff3e58eb4d C:\Windows\System32\tcpsvcs.exe MD5: 5e1bc006cb4a26507d4512795cf08373 C:\Windows\System32\tlntsvr.exe MD5: f8873d15018f411588bec02c1725bada C:\Windows\system32\tspkg.dll MD5: e45051c374f845edf3db02a35ba13193 C:\Windows\system32\umb.dll MD5: 3cb355157768e2a8e5914dc0acbf674f C:\Windows\system32\umxsbxexw.dll MD5: 814638f572f497d96b17bf254113d9a4 C:\Windows\system32\urlmon.dll MD5: 80fff14f1757b9af8be9d314fc1ae88b C:\Windows\system32\USP10.dll MD5: dc3ae9f1554dcd97f90983ddbdacd83d C:\Windows\system32\vsstrace.dll MD5: 2c3b09e586bda2cc49a292be7badc589 C:\Windows\system32\wbem\wmiutils.dll MD5: 5193de33f3284c447e0d31dafbf92570 c:\windows\system32\webcheck.dll MD5: 0745d6ead386710110817fbec03f5161 C:\Windows\system32\wfapigp.dll MD5: dbd02e3e6f061ebbbf9b99a9d7cba30b C:\Windows\system32\WINHTTP.dll MD5: 02f98b5c0e397ad06124d84428cf8f1a C:\Windows\system32\WININET.dll MD5: 101ba3ea053480bb5d957ef37c06b5ed C:\Windows\System32\wininit.exe MD5: 14ff750efe13b0c21e5a06507c3a97b1 C:\Windows\system32\WINMM.dll MD5: fb1238e8990373e710b472f5bd7a6427 C:\Windows\system32\winsflt.dll MD5: 5ec8fb83f31aa2d6f421f02c3f4f4475 C:\Windows\system32\WINSPOOL.DRV MD5: d2293b069e4b63dc17b2f08d45e71124 C:\Windows\system32\winsrv.dll MD5: f0321da5203f1e71917f3b7a13dc4912 C:\Windows\system32\WMsgAPI.dll MD5: a9662bcf218bc76869a8d91635d5f93a C:\Windows\System32\Wpc.dll MD5: 399bb52ad0668472717498e97cf28341 c:\windows\system32\WUDFPlatform.dll MD5: 1908cc7673f72601affdca022689cedf C:\Windows\system32\xmllite.dll MD5: 0b3595a4ff0b36d68e5fc67fd7d70fdc C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9 a\MSVCP80.dll MD5: c9564cf4976e7e96b4052737aa2492b4 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9 a\MSVCR80.dll MD5: 58a14c45a5cd2528f10a889e7b0c3fc2 C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19 b\ATL90.DLL MD5: 4c39358ebdd2ffcd9132a30e1ec31e16 C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb5 7\MSVCP90.dll MD5: cdbe9690cf2b8409facad94fac9479c9 C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb5 7\MSVCR90.dll MD5: be3c082837866c4c291adaf163c10ea6 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll MD5: b5b09091b0e33c396ceec8995515bd41 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aa ca13c773\gdiplus.dll No file uploaded. Scan finished - communication took 61 sec Total traffic - 0.01 MB sent, 1.07 KB recvd Scanned 736 files and modules - 69 seconds ==============================================================================

after a couple battles with Puresight pages and it not connecting in firefox or working in IE - i went with chrome QuickScan 32-bit v0.9.9.106 ————————— Scan date: Sat Feb 04 19:31:29 2012 Machine ID: 5EB59494 No infection found. ——————- Processes ——— Firefox 2004 C:\Program Files\Mozilla Firefox\firefox.exe Google Chrome 360 C:\Program Files\Google\Chrome\Application\chrome.exe Google Chrome 1388 C:\Program Files\Google\Chrome\Application\chrome.exe Google Chrome 1420 C:\Program Files\Google\Chrome\Application\chrome.exe Google Chrome 1792 C:\Program Files\Google\Chrome\Application\chrome.exe Microsoft Malware Protection 876 C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe Microsoft® Windows® Operating System 1540 C:\Windows\explorer.exe Microsoft® Windows® Operating System 428 C:\Windows\System32\csrss.exe Microsoft® Windows® Operating System 464 C:\Windows\System32\csrss.exe Microsoft® Windows® Operating System 560 C:\Windows\System32\lsass.exe Microsoft® Windows® Operating System 544 C:\Windows\System32\services.exe Microsoft® Windows® Operating System 352 C:\Windows\System32\smss.exe Microsoft® Windows® Operating System 472 C:\Windows\System32\wininit.exe Microsoft® Windows® Operating System 516 C:\Windows\System32\winlogon.exe Windows® Internet Explorer 384 C:\Program Files\Internet Explorer\iexplore.exe Windows® Internet Explorer 824 C:\Program Files\Internet Explorer\iexplore.exe Windows® Internet Explorer 1656 C:\Program Files\Internet Explorer\iexplore.exe (verified) Microsoft® Windows® Operating System 1668 C:\Program Files\Windows Media Player\wmpnscfg.exe (verified) Microsoft® Windows® Operating System 568 C:\Windows\System32\lsm.exe (verified) Microsoft® Windows® Operating System 708 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 764 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 968 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 992 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1032 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1088 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1112 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1276 C:\Windows\System32\svchost.exe Network activity —————- Process chrome.exe (360) connected on port 80 (HTTP) –> 72.14.204.95 Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 443 (HTTP over SSL) –> [removed] Process chrome.exe (360) connected on port 80 (HTTP) –> [removed] Process chrome.exe (1388) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (1656) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (1656) connected on port 80 (HTTP) –> [removed] Process firefox.exe (2004) connected on port 80 (HTTP) –> [removed] Process firefox.exe (2004) connected on port 80 (HTTP) –> [removed] Process wininit.exe (472) listens on ports: 49152 (RPC) Process services.exe (544) listens on ports: 49155 (RPC) Process lsass.exe (560) listens on ports: 49154 (RPC) Process svchost.exe (764) listens on ports: 135 (RPC) Process svchost.exe (968) listens on ports: 49153 (RPC) Autoruns and critical files ————————— Ad-Aware Admin Application C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe Adobe Reader and Acrobat Manager C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe AUTOBACK.EXE C:\Program Files\ERUNT\AUTOBACK.EXE CEEment C:\Program Files\Hewlett-Packard\SDP\Ceement\HPCEE.exe Host Intrusion Prevention System C:\Windows\system32\umxsbxexw.dll Java™ Platform SE Auto Updater 2 0 C:\Program Files\Common Files\Java\Java Update\jusched.exe Microsoft Office OneNote C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE Microsoft Security Client c:\Program Files\Microsoft Security Client\msseces.exe Microsoft® Windows® Operating System C:\Windows\system32\BROWSEUI.dll Microsoft® Windows® Operating System C:\Windows\System32\logon.scr Windows® Internet Explorer c:\windows\system32\webcheck.dll (verified) Google Update C:\Program Files\Google\Update\GoogleUpdate.exe (verified) Microsoft® Windows® Operating System C:\Program Files\Windows Media Player\wmpnscfg.exe (verified) Microsoft® Windows® Operating System C:\Windows\ehome\ehTray.exe (verified) Microsoft® Windows® Operating System c:\windows\system32\userinit.exe (verified) Windows Defender C:\Program Files\Windows Defender\MSASCui.exe Browser plugins ————— AcroIEHelperShim Library c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll Adobe Acrobat C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll Adobe Acrobat C:\Program Files\Internet Explorer\plugins\nppdf32.dll Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe Bitdefender QuickScan C:\Users\Euclid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.106_0\npqscan.dll BitDefender QuickScan C:\Users\Euclid\AppData\Roaming\Mozilla\Firefox\Profiles\pc6uva85.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll BitDefender QuickScan C:\Windows\Downloaded Program Files\qsax.dll Dragon NaturalWeb c:\windows\speech\dragon\web_ie.dll Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\PhotoUploader55.ocx Google Toolbar for Internet Explorer c:\program files\google\google toolbar\googletoolbar_32.dll Google Update C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll Java™ Platform SE 6 U30 c:\program files\java\jre6\bin\jp2ssv.dll Java™ Platform SE 6 U30 C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll Java™ Platform SE 6 U30 c:\program files\java\jre6\bin\ssv.dll Microsoft® CoReXT c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll MySpace Image Uploader C:\Windows\Downloaded Program Files\MySpaceUploader.ocx npitunes.dll C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll RealNetworks Rhapsody Player Engine C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll sdhelper.dll c:\program files\spybot - search & destroy\sdhelper.dll Shockwave for Director C:\Windows\system32\Adobe\Director\np32dsw.dll Silverlight Plug-In c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll Snapfish Activia C:\Windows\Downloaded Program Files\SnapfishActivia1000.ocx Windows Live™ Photo Gallery C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll Windows Presentation Foundation c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll Windows® Internet Explorer C:\Windows\system32\IEFRAME.dll winsflt.dll C:\Windows\system32\winsflt.dll Yahoo Application State Plugin C:\Program Files\Yahoo!\Shared\npYState.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\mswsock.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\napinsp.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\NLAapi.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\pnrpnsp.dll (verified) Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll Missing files ————- File not found: "c:\program files\microsoft\bingbar\bingext.dll" –> HKLM\Software\Classes\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}\InprocServer32\"(default)" –> HKLM\Software\Classes\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f}\InprocServer32\"(default)" Scan —- MD5: 8082f66dc9c8167ff1aa548736f58457 C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll MD5: 8a3ba48b5be893e1d81bfac17a3c1b1f c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll MD5: b8e421c0890356cd4a793d8a346d9096 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe MD5: 62b7936f9036dd6ed36e6a7efa805dc0 C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe MD5: 018857ead9a077a56aedfc0e5ef7a24a C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe MD5: 6e3245df783e58375b3465f03274743e C:\Program Files\Common Files\Java\Java Update\jusched.exe MD5: 75ac54b996f7c8e17594ebc32b6614bd c:\Program Files\Common Files\LightScribe\LSSrvc.exe MD5: 938acf2a4f7fdaff322fd36f0b14d45a C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll MD5: 785f487a64950f3cb8e9f16253ba3b7b C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE MD5: 6bf01e200063d7274f3af06d226671f5 c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll MD5: 0a70f4022ec2e14c159efc4f69aa2477 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE MD5: 951f36219c7384c6ed6c9f44d45c5235 C:\Program Files\Common Files\System\Ole DB\oledb32.dll MD5: 892125b60ba6c2a66f485a89c4a6b918 C:\Program Files\Common Files\System\Ole DB\OLEDB32R.DLL MD5: 0c998f64686c3724b97c804015f17cad C:\Program Files\CyberLink\CyberLink Live\CLPushUpdateService.exe MD5: ae4a763ebf8285895a1b6d8b10455557 C:\Program Files\CyberLink\CyberLink Live\CLSomaMonitorService.exe MD5: 88c9785b287acde2265736221a916ef2 C:\Program Files\CyberLink\CyberLink Live\CLSomaService.exe MD5: e00de20f0f6bed5cd2160247ddc9443b C:\Program Files\ERUNT\AUTOBACK.EXE MD5: 97ae540b2853e7112be83a650110eb64 C:\Program Files\Google\Chrome\Application\16.0.912.77\avcodec-53.dll MD5: 72af6085baf82343cb39b543a708686c C:\Program Files\Google\Chrome\Application\16.0.912.77\avformat-53.dll MD5: 5fb8b4f19907e64bb92254c6f08b0c09 C:\Program Files\Google\Chrome\Application\16.0.912.77\avutil-51.dll MD5: 350f7cd349581497b1f31825c8decfa1 C:\Program Files\Google\Chrome\Application\16.0.912.77\chrome.dll MD5: 794f655caae44aae20139326a1d433c2 C:\Program Files\Google\Chrome\Application\16.0.912.77\icudt.dll MD5: 8cedb784eab4c35d2139adff4c8236e9 C:\Program Files\Google\Chrome\Application\16.0.912.77\pdf.dll MD5: b6639ab91b1fcf1762efb395281decf9 C:\Program Files\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll MD5: 697d3b09d8883f72265da274e0972042 C:\Program Files\Google\Chrome\Application\chrome.exe MD5: 61980095ae5d02b1e9d2ed604a90c1bf c:\program files\google\google toolbar\googletoolbar_32.dll MD5: 27626506e07795bb6357f7f2ef78a90b C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll MD5: 0d26c438e2938a3e6bdd91173bc96ff0 c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe MD5: 6ac03efd60e5ac80bf2b6c5218df8043 C:\Program Files\Hewlett-Packard\SDP\Ceement\HPCEE.exe MD5: 2e7e49077c7bbeb2947bd6d03c8454b5 C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe MD5: fcb563b0a23643e5f80b6ff1e60f610f C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll MD5: 25e443e27165c652723a92d9bdfd4649 C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll MD5: a1659e4d08fe8d0f0bc61960d8c0369e C:\Program Files\Internet Explorer\ieproxy.dll MD5: 4d0bad6e0b9a5e650fe37a05f33bf288 C:\Program Files\Internet Explorer\IEShims.dll MD5: 904e13ba41af2e353a32cf351ca53639 C:\Program Files\Internet Explorer\iexplore.exe MD5: 53fe2d34b143efdb80685281e751b91c C:\Program Files\Internet Explorer\plugins\nppdf32.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll MD5: 6c859c6fce6d694eafd7ea3ae66d54db C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll MD5: 6e27978a4755f4789f912f5f49392f7c C:\Program Files\iPod\bin\iPodService.exe MD5: 2658ce01d183bc62e7c46a1c9969632e C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll MD5: f2121482c2968cd3b53ed53acc9277a5 c:\program files\java\jre6\bin\jp2ssv.dll MD5: ccc24faa47c47e66be61bf22603c5e3a C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll MD5: e810acafa8e6d80117414b7ca036d626 c:\program files\java\jre6\bin\ssv.dll MD5: 150d58ed027fe5bbea253357a7108d6d C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe MD5: 2a5e99e66df49b8707f5d09d34b4fa40 C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe MD5: 6c4a3804510ad8e0f0c07b5be3d44ddb C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys MD5: 07413a638ecfec8bde85105e230cba77 C:\Program Files\Lavasoft\Ad-Aware\ShellExt.dll MD5: a76efc0767acbe3ad7b0fc30905d92d8 C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll MD5: 056b19651bd7b7ce5f89a3ac46dbdc08 C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe MD5: 12b9c4fa0d4735a1873fed4083b75748 c:\Program Files\Microsoft Security Client\Antimalware\MpClient.dll MD5: 32c9e8f42348343d72013165ea86a3c6 c:\Program Files\Microsoft Security Client\Antimalware\MpOAv.dll MD5: f614ab3f0af8defe7ad91be2ba483603 c:\Program Files\Microsoft Security Client\Antimalware\MpSvc.dll MD5: cfce43b70ca0cc4dcc8adb62b792b173 C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe MD5: 364f37da8f61636ef3838db9d21488f2 c:\Program Files\Microsoft Security Client\Antimalware\NisIpsPlugin.dll MD5: a5cb074f34bbd89948e34a630d459c0c c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe MD5: d0ebe8f93c70fca792e241ce268bc837 c:\Program Files\Microsoft Security Client\msseces.exe MD5: 3edd1cf244b85581bddf79e886954e92 c:\Program Files\Microsoft Security Client\shellext.dll MD5: ce6db25ffa35fd051c503f11db745862 c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll MD5: 825f81a6f7dd073509db101f0ba6dc59 C:\Program Files\Microsoft\BingBar\BBSvc.EXE MD5: cc781378e7eda615d2cdca3b17829fa4 C:\Program Files\Microsoft\BingBar\SeaPort.EXE MD5: 76438ae6cfa727f17537701bdd7f82ee C:\Program Files\Mozilla Firefox\components\browsercomps.dll MD5: 2de2b92c4efef841ceaa9752fc8fa91f C:\Program Files\Mozilla Firefox\firefox.exe MD5: 0b60002305ce72ee8ebe6a00fffc95b6 C:\Program Files\Mozilla Firefox\freebl3.dll MD5: 0fa7d2e9361df35847b8c5a1238d9520 C:\Program Files\Mozilla Firefox\mozalloc.dll MD5: e009442495abe05d0aff81bd48022931 C:\Program Files\Mozilla Firefox\mozjs.dll MD5: d7f681f78e0b36c0d748492113a8e5ae C:\Program Files\Mozilla Firefox\mozsqlite3.dll MD5: 1d9a80a0b2f28a04aa4ab43ef9f8d740 C:\Program Files\Mozilla Firefox\mozutils.dll MD5: 37cfb217c378e9acfb8adc2a13703ac9 C:\Program Files\Mozilla Firefox\nspr4.dll MD5: fcbf87f705c8cef0ab40204dc21c564d C:\Program Files\Mozilla Firefox\nss3.dll MD5: d898c6243de3043b57cd22570c1e0274 C:\Program Files\Mozilla Firefox\nssckbi.dll MD5: 1d9f1ead9e3683db472f5e147a44e9b5 C:\Program Files\Mozilla Firefox\nssdbm3.dll MD5: b78465a326ea3efb0e637913c6409b6d C:\Program Files\Mozilla Firefox\nssutil3.dll MD5: e0e6326986618e479ee8ec0d6d087ca6 C:\Program Files\Mozilla Firefox\plc4.dll MD5: a58eba57ca5409522a220dce93ee3c45 C:\Program Files\Mozilla Firefox\plds4.dll MD5: a2310b0e1aa771a9415b3fa901d85501 C:\Program Files\Mozilla Firefox\smime3.dll MD5: 1ae11a396d1e3d4ff20c4ffba01e5566 C:\Program Files\Mozilla Firefox\softokn3.dll MD5: b99b7fea99bcc3f7b3dbbcf66ec24e54 C:\Program Files\Mozilla Firefox\ssl3.dll MD5: 050495ad42dcdeb3f0d5d18c13b75351 C:\Program Files\Mozilla Firefox\xpcom.dll MD5: 7647ce6050bef747908a319c0817c38f C:\Program Files\Mozilla Firefox\xul.dll MD5: dca419d9cf6666715b7f54bbc6d3a666 C:\Program Files\MP3 Player Utilities 4.18\AMVConverter\AmvTransform.dll MD5: 7bfadf4e537f78bd70ff62b5b4f5b155 C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll MD5: b021a5a93fc5f6454786cc7f96c1fce3 C:\Program Files\VCOM\PowerDesk\pdshext.dll MD5: b7dc98f6f4e7611a9c0849945fb28fb9 C:\Program Files\Windows Defender\MpOav.dll MD5: 94a85e956a065e23e0010a6a7826243b C:\Program Files\Windows Live\installer\WLSetupSvc.exe MD5: ac421a44de902f2627f1e63793ed89cd C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll MD5: 9e4212517ac0590a7a00365e2cab938c c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{35DAA76B-3833-4048-9525-D15FD3E5C2B8}\mpengine.dll MD5: 0aad6f0a129ddf453b2f99ee0a495923 C:\PROGRA~1\PC-DOC~1\PCD5SRVC.pkms MD5: e0ec3bc6de38f83825518d0645885f05 C:\Users\Euclid\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.106_0\npqscan.dll MD5: 777d526938bbe233dbd46a10eb934dfa C:\Users\Euclid\AppData\Roaming\Mozilla\Firefox\Profiles\pc6uva85.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll MD5: 2245b3cae09af148d983f88f62153628 C:\Windows\Downloaded Program Files\MySpaceUploader.ocx MD5: bb7fcdcd4de287340b5c1bb1949ad3c6 C:\Windows\Downloaded Program Files\qsax.dll MD5: f5c79c45f1adf877dc3afdff3565ae7b C:\Windows\Downloaded Program Files\SnapfishActivia1000.ocx MD5: 219af0f9a54ebeeb3e7e20025d801034 C:\Windows\Microsoft.NET\Framework\v2.0.50727\culture.dll MD5: 5ed379a5831f6e19d26cc1ae5798a323 C:\Windows\Microsoft.NET\Framework\v2.0.50727\Shfusion.dll MD5: ab87eeffd18f2baafc274e7075ea6c67 c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll MD5: f5df6846f30e9f54ea60ccaeb3fb2055 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll MD5: dc802bd01ee3361df9ca7d626642a057 c:\windows\speech\dragon\web_ie.dll MD5: 09c91e1f199c53e1114396b59b3b4d9e C:\Windows\system32\ACLUI.dll MD5: e2cca1b3ba59949ae16ec587e89a09ba C:\Windows\system32\Adobe\Director\np32dsw.dll MD5: ce683f9b7482b31d0ec5d04fd7533f54 C:\Windows\system32\adsldp.dll MD5: e9b9c1b98c8d6d48407e1c1203eac659 C:\Windows\system32\adsldpc.dll MD5: f31eebc1a1c81fd04005489cc3dcdfe7 C:\Windows\system32\basesrv.dll MD5: 745d20b75b3bdda545022625ed5dbb1b C:\Windows\system32\CISVC.EXE MD5: 74f26fc01b180d4a99a168ed69c30a53 C:\Windows\system32\cmd.exe MD5: 7f15b4953378c8b5161d65c26d5fed4d C:\Windows\system32\cngaudit.dll MD5: 93e317d7ad783d8eaee2e3500bfe889d C:\Windows\system32\credui.dll MD5: 187076dd5d8d4d5d23079d0741195ead C:\Windows\system32\CSRSRV.dll MD5: abca209eba02cb59233614db83b4f50d C:\Windows\System32\csrss.exe MD5: 3dfeec45e5f22993216083fb777719d5 C:\Windows\system32\d2d1.dll MD5: 8b02d2ecc7ef6e1f6af08459e3f741f6 C:\Windows\system32\d3d10.dll MD5: 29e4ea31c6debe5efb384eefa4f1ef63 C:\Windows\system32\d3d10_1.dll MD5: 556f1cbe9ba19e2ccd6f8d9af71af5c7 C:\Windows\system32\d3d10_1core.dll MD5: 9c7094f537782a82b6a29b4a7172e180 C:\Windows\system32\d3d10core.dll MD5: 33ebf5dcd45f878b3622ad82ab37af3a C:\Windows\system32\D3D10Warp.dll MD5: 85e861d0b88db2b54acb0839654c09f7 C:\Windows\system32\DNSAPI.dll MD5: 57d762f6f5974af0da2be88a3349baaa c:\windows\system32\dnsrslvr.dll MD5: 3911b972b55fea0478476b2e777b29fa C:\Windows\system32\drivers\afd.sys MD5: 35f376253f687bde63976ccb3f2108ca C:\Windows\system32\DRIVERS\bowser.sys MD5: 82b8c91d327cfecf76cb58716f7d4997 C:\Windows\system32\drivers\compbatt.sys MD5: 622c41a07ca7e6dd91770f50d532cb6c C:\Windows\System32\Drivers\dfsc.sys MD5: 4f59c172c094e1a1d46463a8dc061cbd C:\Windows\system32\DRIVERS\Dot4.sys MD5: 80bf3ba09f6f2523c8f6b7cc6dbf7bd5 C:\Windows\system32\DRIVERS\Dot4Prt.sys MD5: c55004ca6b419b6695970dfe849b122f C:\Windows\system32\DRIVERS\dot4usb.sys MD5: c68ac676b0ef30cfbb1080adce49eb1f C:\Windows\System32\drivers\dxgkrnl.sys MD5: 72cc6a8ca7891031d6380db5025c773c C:\Windows\system32\DRIVERS\HSX_CNXT.sys MD5: 88749fbf8beb18c90e7d6626c8c1910b C:\Windows\system32\DRIVERS\HSX_DP.sys MD5: fe440536bd98af772130dc3a6fe1915f C:\Windows\system32\DRIVERS\HSXHWBS2.sys MD5: 8318e04a6455ced1020bcc5039b62cfa C:\Windows\system32\DRIVERS\ialmnt5.sys MD5: 62f534791ae488a475a3e508d92af4cc C:\Windows\system32\DRIVERS\igdkmd32.sys MD5: e50a95179211b12946f7e035d60af560 C:\Windows\system32\DRIVERS\irda.sys MD5: 5896b5ff6332ab2be1582523e9656a67 C:\Windows\system32\DRIVERS\irsir.sys MD5: 2b2f1638466e8cb091400c9019cc730e C:\Windows\System32\Drivers\ksecdd.sys MD5: 336abe8721cbc3110f1c6426da633417 C:\Windows\system32\DRIVERS\Lbd.sys MD5: b7ca8cc3f978201856b6ab82f40953c3 C:\Windows\system32\drivers\mbam.sys MD5: fee0baded54222e9f1dae9541212aab1 C:\Windows\system32\DRIVERS\MpFilter.sys MD5: 2c3489660d4a8d514c123c3f0d67df46 C:\Windows\system32\DRIVERS\MpNWMon.sys MD5: 1e94971c4b446ab2290deb71d01cf0c2 C:\Windows\system32\DRIVERS\mrxsmb.sys MD5: 4fccb34d793b116423209c0f8b7a3b03 C:\Windows\system32\DRIVERS\mrxsmb10.sys MD5: c3cb1b40ad4a0124d617a1199b0b9d7c C:\Windows\system32\DRIVERS\mrxsmb20.sys MD5: 7b01c6172cfd0b10116175e09200d4b4 C:\Windows\system32\DRIVERS\NisDrvWFP.sys MD5: 3b1901e401473e03eb8c874271e50c26 C:\Windows\system32\drivers\pciide.sys MD5: d9b34325ee5df78b8f28a3de9f577c7d C:\Windows\system32\DRIVERS\RimSerial.sys MD5: f17713d108aca124a139fde877eef68a C:\Windows\System32\Drivers\RimUsb.sys MD5: 75e8a6bfa7374aba833ae92bf41ae4e6 C:\Windows\System32\Drivers\RootMdm.sys MD5: 3d2b6520699d1dcd5a13f9e7cad62199 C:\Windows\system32\DRIVERS\Rtlh86.sys MD5: f06c97eca3fdb287a2affbfdb0277335 C:\Windows\system32\DRIVERS\RtNdPt60.sys MD5: 51cf56aa8bcc241f134b420b8f850406 C:\Windows\system32\drivers\sffdisk.sys MD5: 96ded8b20c734ac41641ce275250e55d C:\Windows\system32\drivers\sffp_mmc.sys MD5: 8b08cab1267b2c377883fc9e56981f90 C:\Windows\system32\drivers\sffp_sd.sys MD5: 41987f9fc0e61adf54f581e15029ad91 C:\Windows\System32\DRIVERS\srv.sys MD5: ff33aff99564b1aa534f58868cbe41ef C:\Windows\System32\DRIVERS\srv2.sys MD5: 7605c0e1d01a08f3ecd743f38b834a44 C:\Windows\System32\DRIVERS\srvnet.sys MD5: 16731b631f28f63cd9f4cb60940e7ddd C:\Windows\System32\drivers\tcpip.sys MD5: 3fc13f09af9be487c7b4fac4070a036c C:\Windows\System32\drivers\tcpipreg.sys MD5: 5c2bdc152bbab34f36473deaf7713f22 C:\Windows\System32\Drivers\usbaapl.sys MD5: c466021d31ff6c0a6069d12299d80c0b C:\Windows\system32\DRIVERS\VSTBS23.SYS MD5: ec36f1d542ed4252390d446bf6d4dfd0 C:\Windows\system32\DRIVERS\VSTDPV3.SYS MD5: 676f4b665bdd8053eaa53ac1695b8074 C:\Windows\system32\DRIVERS\WinUSB.sys MD5: 701a9f884a294327e9141d73746ee279 C:\Windows\system32\drivers\wmiacpi.sys MD5: cd5f291a1161f15896d1a4d63daff5df C:\Windows\system32\DRIVERS\xaudio.exe MD5: dab33cfa9dd24251aaa389ff36b64d4b C:\Windows\system32\DRIVERS\xaudio.sys MD5: 6843926aff733d46a04f9d4e1c1a6b14 C:\Windows\system32\DWrite.dll MD5: aaae543c535ed596ecad2ab8761c2c6f C:\Windows\system32\dxgi.dll MD5: 4312debdacbe338f0b90e7f08e7672be C:\Windows\system32\Dxtmsft.dll MD5: ca493a92da9880b6f1a89c3dbd54ba5b C:\Windows\system32\Dxtrans.dll MD5: abaeaee763e287bdd39094c4165e1f3f C:\Windows\system32\fdproxy.dll MD5: 8ce364388c8eca59b14b539179276d44 C:\Windows\system32\FntCache.dll MD5: bc74a74b020374d280fb8db82fcb8d55 C:\Windows\system32\hccutils.DLL MD5: 05b6a5ce1c7767c32df35966107cb1ec C:\Windows\System32\hhctrl.ocx MD5: 2969d26eee289be7422aa46fc55f4e38 C:\Windows\system32\HPZinw12.dll MD5: bafc9706bdf425a02b66468ab2605c59 C:\Windows\system32\HPZipm12.dll MD5: 691e93028b8723e05b4a637be77380dd C:\Windows\system32\IEFRAME.dll MD5: 1416ab557be700fa117323b6b8f32882 C:\Windows\system32\iertutil.dll MD5: 274e38af453fa9e079b1d5a85f5f0921 C:\Windows\system32\IEUI.dll MD5: fbdd6b407bef4524d71363e8d820c24b C:\Windows\system32\igfxpph.dll MD5: 68563ac389f92ee79f1c714288ba1dce C:\Windows\system32\ImgUtil.dll MD5: 8ffdeb99eac611d617016f2174d48fc6 C:\Windows\system32\inetcomm.dll MD5: dfae18c675d71fd06d57dc69d2913975 C:\Windows\system32\inetsrv\apphostsvc.dll MD5: 9ca92191c8f18e8b491a5b28e63c07b7 C:\Windows\system32\inetsrv\iisw3adm.dll MD5: 7f83b06a929a981bc001b2ea304d2036 C:\Windows\System32\iphlpsvc.dll MD5: cbb0d940221a281bcfeaea695bd1cda5 C:\Windows\System32\irmon.dll MD5: 4b65b4f93f63aa6dc1042a8aed99d093 C:\Windows\system32\jscript.dll MD5: 82586704868e3abb382cae303b41e8b7 C:\Windows\System32\jscript9.dll MD5: 574b473facaa0e91702b86578440b525 C:\Windows\system32\kernel32.dll MD5: 74c2f29cc612b2b34231bebd824d2fb2 C:\Windows\system32\keyiso.dll MD5: ca0b849566776a17f35f0339be17dfd9 C:\Windows\system32\ktmw32.dll MD5: 19ffad68a02af1bf0bc336ee26cd6767 c:\windows\system32\l2gpstore.dll MD5: 35d40113e4a5b961b6ce5c5857702518 c:\windows\system32\lmhsvc.dll MD5: b17d18fd6594aaa25cbc95e799b1bf40 C:\Windows\System32\logon.scr MD5: 178fac2b7c66e9a4400ce7ac37623e3f C:\Windows\system32\LSASRV.dll MD5: a3e186b4b935905b829219502557314e C:\Windows\System32\lsass.exe MD5: efbef826c183cf8edab324ce514d69b7 C:\Windows\system32\Macromed\Flash\Flash10t.ocx MD5: 2a58bd824d13aa6471894e75a5bac141 C:\Windows\system32\mdmcls32.exe MD5: 56e315acfb08a177b4d01e42b9044db5 C:\Windows\system32\MPRAPI.dll MD5: 554ed6988e44fdf18941429e8b2cb652 C:\Windows\system32\MSDART.DLL MD5: 66c0aee61d1c5c35bf1b4642a153b114 C:\Windows\system32\mshtml.dll MD5: 35aae2e841aa1a949775168e119482c9 C:\Windows\system32\msls31.dll MD5: abe9eea1eabea0711610a637a7b1c25d C:\Windows\system32\msprivs.dll MD5: ff41e1ac301f51e16f61ad7c0f45467c C:\Windows\System32\msshsq.dll MD5: 73fd66b14d3c4252f7a524b8836a4359 C:\Windows\System32\mstask.dll MD5: 2fa16465f64db54b1f7f511395eb4fd7 C:\Windows\system32\NCObjAPI.DLL MD5: f4d9ed6bd74ad7cc0bec83c43a1cb76b c:\windows\system32\ncsi.dll MD5: 6bc5fcef351e4cb5a269c1e84b5a06da C:\Windows\system32\netcfgx.dll MD5: 95daecf0fb120a7b5da679cc54e37dde C:\Windows\system32\netlogon.dll MD5: 8bb86f0c7eea2bded6fe095d0b4ca9bd c:\windows\system32\nsisvc.dll MD5: dda770bbd7c2ed024d6f50e279d90e5b C:\Windows\system32\ntdll.dll MD5: a7dff9642d510be1eec6664cd0369953 C:\Windows\system32\ntmssvc.dll MD5: ce2f98eb42d775644c8ebfd6f5ef2619 C:\Windows\system32\objsel.dll MD5: 9586e7cb2255a8b097a7e4538202585e C:\Windows\system32\ole32.dll MD5: dc15ab7168c0309d8f04fd95b6240422 C:\Windows\system32\OLEACC.dll MD5: b218342214d9bba0f54ea12ba2e9278c C:\Windows\system32\OLEAUT32.dll MD5: 2dd6af8e97f59c9d39329bbc2a81f13f C:\Windows\system32\RASDLG.dll MD5: ab530fdd34c67b497a20171d1234cfe9 C:\Windows\system32\riched32.dll MD5: da61f5c012a646771587a8cb9c0ae590 C:\Windows\system32\schannel.dll MD5: 1a58069db21d05eb2ab58ee5753ebe8d C:\Windows\system32\schedsvc.dll MD5: d602fedbd9155fc2ded6863fb60c950f C:\Windows\system32\Secur32.dll MD5: 167ac31450c0c53a01fa1491e94d7678 C:\Windows\system32\shdocvw.dll MD5: 33ae914c24f546aabf281ba7b138186d C:\Windows\system32\SHELL32.dll MD5: 91fa8d1db1ec243cecd4a0977c91cc6f C:\Windows\System32\ShellvRTF.dll MD5: 9176285122b7b849fec2aa1b72a8f7a8 C:\Windows\system32\SHLWAPI.dll MD5: c7230fbee14437716701c15be02c27b8 C:\Windows\system32\SHSVCS.dll MD5: 26ba81ba48c3d9fb292b4b60fde849f2 C:\Windows\System32\snmp.exe MD5: 8554097e5136c3bf9f69fe578a1b35f4 C:\Windows\System32\spoolsv.exe MD5: 1bf5eebfd518dd7298434d8c862f825d C:\Windows\system32\srvsvc.dll MD5: b5950df243837d8217f4e597919b224a C:\Windows\system32\stobject.dll MD5: b25997f9412b3e4e368493e4388dccbc C:\Windows\System32\svcprs32.exe MD5: 71f5a7104fdf16c0ac5283a6ce666553 C:\Windows\system32\SYSNTFY.dll MD5: bfa034aac103d8a6f591ac9364688339 C:\Windows\system32\t2embed.dll MD5: 52e129522c1775dbb8cc252e7a0655c7 C:\Windows\system32\taskschd.dll MD5: a275fbb7c99458c12e088dff3e58eb4d C:\Windows\System32\tcpsvcs.exe MD5: 5e1bc006cb4a26507d4512795cf08373 C:\Windows\System32\tlntsvr.exe MD5: f8873d15018f411588bec02c1725bada C:\Windows\system32\tspkg.dll MD5: e45051c374f845edf3db02a35ba13193 C:\Windows\system32\umb.dll MD5: 3cb355157768e2a8e5914dc0acbf674f C:\Windows\system32\umxsbxexw.dll MD5: 814638f572f497d96b17bf254113d9a4 C:\Windows\system32\urlmon.dll MD5: 80fff14f1757b9af8be9d314fc1ae88b C:\Windows\system32\USP10.dll MD5: dc3ae9f1554dcd97f90983ddbdacd83d C:\Windows\system32\vsstrace.dll MD5: 2c3b09e586bda2cc49a292be7badc589 C:\Windows\system32\wbem\wmiutils.dll MD5: 5193de33f3284c447e0d31dafbf92570 c:\windows\system32\webcheck.dll MD5: 0745d6ead386710110817fbec03f5161 C:\Windows\system32\wfapigp.dll MD5: dbd02e3e6f061ebbbf9b99a9d7cba30b C:\Windows\system32\WINHTTP.dll MD5: 02f98b5c0e397ad06124d84428cf8f1a C:\Windows\system32\WININET.dll MD5: 101ba3ea053480bb5d957ef37c06b5ed C:\Windows\System32\wininit.exe MD5: 14ff750efe13b0c21e5a06507c3a97b1 C:\Windows\system32\WINMM.dll MD5: fb1238e8990373e710b472f5bd7a6427 C:\Windows\system32\winsflt.dll MD5: 5ec8fb83f31aa2d6f421f02c3f4f4475 C:\Windows\system32\WINSPOOL.DRV MD5: d2293b069e4b63dc17b2f08d45e71124 C:\Windows\system32\winsrv.dll MD5: f0321da5203f1e71917f3b7a13dc4912 C:\Windows\system32\WMsgAPI.dll MD5: a9662bcf218bc76869a8d91635d5f93a C:\Windows\System32\Wpc.dll MD5: 399bb52ad0668472717498e97cf28341 c:\windows\system32\WUDFPlatform.dll MD5: 1908cc7673f72601affdca022689cedf C:\Windows\system32\xmllite.dll MD5: 0b3595a4ff0b36d68e5fc67fd7d70fdc C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9 a\MSVCP80.dll MD5: c9564cf4976e7e96b4052737aa2492b4 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9 a\MSVCR80.dll MD5: 58a14c45a5cd2528f10a889e7b0c3fc2 C:\Windows\WinSxS\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19 b\ATL90.DLL MD5: 4c39358ebdd2ffcd9132a30e1ec31e16 C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb5 7\MSVCP90.dll MD5: cdbe9690cf2b8409facad94fac9479c9 C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb5 7\MSVCR90.dll MD5: be3c082837866c4c291adaf163c10ea6 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll MD5: b5b09091b0e33c396ceec8995515bd41 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aa ca13c773\gdiplus.dll No file uploaded. Scan finished - communication took 61 sec Total traffic - 0.01 MB sent, 1.07 KB recvd Scanned 736 files and modules - 69 seconds ==============================================================================

Hi,

Please do the following:

Hold down the Windows key and press R to open a run box
type the following text into the run box

appwiz.cpl

This will open your Programs And Features. A list of installed programs will populate

Remove the following program if still there:

Ask Toolbar

———-

Please download JavaRa to your desktop and unzip it to its own
folder

• Run JavaRa.exe (double-click for XP/right-click and Run as Administrator for Vista), pick the language of your choice and click Select. Then
  click Remove Older Versions.
• Accept any prompts.
• Open JavaRa.exe (double-click for XP/right-click and Run as Administrator for Vista) again and select Search For Updates.
• Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest
  Java Runtime Environment (JRE) version for your computer.

———-

Run DDS once again and post both of the logs created into your next reply and let me know how your system is running.

Hi qwick,

I see that you have both Lavasoft Ad-Watch Live! Anti-Virus and Microsoft Security Essentials running on your system. Having more than one antivirus program running can cause performance problems with your computer and even make your computer less secure. You should remove either Lavasoft Ad-watch Live! or Microsoft Security Essentials.
——–

Download TFC to your desktop

• Close any open windows.
• Right-click and Run as Administrator the TFC icon to run the program
• TFC will close all open programs itself in order to run,
• Click the Start button to begin the process.
• Allow TFC to run uninterrupted.
• The program should not take long to finish it's job
• Once its finished it should automatically reboot your machine,
• if it doesn't, manually reboot to ensure a complete clean

———-

Once you get that completed let me know if you are still having connection problems. I am not seeing anything malware related jumping out at me though so that is good.

still have the connection issue. open up a web page and it says connection error. press enter in the url and it loads up fine and now works

Hi qwick,

Please download Farbar Service Scanner and run it on the computer with the issue.

• Make sure Internet Services is checked
• Press "Scan".
• It will create a log (FSS.txt) in the same directory the tool is run.
• Please copy and paste the log to your reply.

Jeff, I've been getting a pop-up from ERU ever since a day after I installed it. "Unabl[e to create file: C:\Windows\ERDNT\AutoBackup\[date]\ERDNT.INF Registry backup will continue, but no restore information for the ERDNT program will be saved. This means that later restoration of the registry can only be done manually, by using another OS to copy back the files" after hitting OK i get "Warning! Error saving file. C:Windows\ERDNT\Autobackup\2-6-2012\security! Continue with next file? [ RegCreateKeyEx: 5 = Access is denied \ [Yes] [No]" then if i hit yes, i get "Warning! Error saving file. C:Windows\ERDNT\Autobackup\2-6-2012\software! Continue with next file? [ RegCreateKeyEx: 5 = Access is denied \ [Yes] [No] then I get "Warning! Error saving file. C:Windows\ERDNT\Autobackup\2-6-2012\system! Continue with next file? [ RegCreateKeyEx: 5 = Access is denied \ [Yes] [No] then "Warning! Error saving file. C:Windows\ERDNT\Autobackup\2-6-2012\default! Continue with next file? [ RegCreateKeyEx: 5 = Access is denied \ [Yes] [No] then "Warning! Error saving file. C:Windows\ERDNT\Autobackup\2-6-2012\sam! Continue with next file? [ RegCreateKeyEx: 5 = Access is denied \ [Yes] [No] then "Warning! Error saving file. C:Windows\ERDNT\Autobackup\2-6-2012\components ! Continue with next file? [ RegCreateKeyEx: 5 = Access is denied \ [Yes] [No] then "Warning! Error saving file. C:Windows\ERDNT\Autobackup\2-6-2012\BCD ! Continue with next file? [ RegCreateKeyEx: 5 = Access is denied \ [Yes] [No] "Warning! Error saving file. C:Windows\ERDNT\Autobackup\2-6-2012\Users\00000001\ntuser.dat! Continue with next file? [ RegCreateKeyEx: 5 = Access is denied \ [Yes] [No] then the same but with Users\00000002\UsrClass.dat! then no more

Farbar Service Scanner Version: 05-02-2012 Ran by [removed] (administrator) on 06-02-2012 at 09:15:38 Running from "C:\Users\Euclid\Desktop" Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Yahoo IP is accessible. File Check: ======== C:\Windows\system32\nsisvc.dll => MD5 is legit C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit C:\Windows\system32\dhcpcsvc.dll => MD5 is legit C:\Windows\system32\Drivers\afd.sys => MD5 is legit C:\Windows\system32\Drivers\tdx.sys => MD5 is legit C:\Windows\system32\Drivers\tcpip.sys [2012-01-31 16:54] - [2011-09-20 16:02] - 0913280 ____A (Microsoft Corporation) 16731B631F28F63CD9F4CB60940E7DDD C:\Windows\system32\dnsrslvr.dll => MD5 is legit C:\Windows\system32\svchost.exe => MD5 is legit C:\Windows\system32\rpcss.dll => MD5 is legit **** End of log ****

When you are getting your connection error what exactly is it saying? Is there a code that is given that we can look up?

in IE: "Internet Explore Cannot Display this webpage" [Diagnose Connection Problem] (if i click that it says "Windows did not find any problems with this computer" in Chrome: Unable to Connect to the internet. Google Chrome can't display the webpage because your computer is not connected to the internet." Then the Page Unresponsive box pop-ups with Kill pages or Wait In both browswers, if i renter a url it then starts to work. I tried Safari and the same thing happens with that. I know it is not the connection or wire as I've used it on my laptop without any issues.

Hi qwick,

I am not seeing anything jumping out at me that is malware. I would suggest that you post a new topic in the Windows forum and have the techs there take a look into your system. They will probably be able to help you better with your connection issue than I am. They are exceptional and you are in good hands.

I will leave this open until they are done. When they finish come back and we will remove our tools and I will give you some good information on computer security.

thanks Jeff. I'll do that now. This was a computer I got from a friend and put it through a thorough cleaning and did even more with your help!