Double Click Virus [Closed]

Hello michael81

Thank you for the logs.

• Please perform the following scan:
  
  
  
  • Please download MalwareBytes AntiMalware by clicking here and save the file (called mbam-setup.exe) to your desktop.
  
  
  • Right click on the mbam-setup.exe icon and select "Run as Administrator" to install the program.
  • Follow the prompts during installation and have the Installation Wizzard create a desktop icon.
  • Once installed, double click on the MalwareBytes AntiMalware icon to launch the program.
  • Click on the "Update" tab and then on "Check for Updates".
  • The program will now install the latest Malware definition files.
  • Once complete, click on the "Scanner" tab, select "Perform Quick Scan"and then click on "Scan".
  • Once the program has scanned your computer, a log file will be created in Notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  
  
  
  • If the scan detects any Malware-related objects, make sure that everything is checked, and click "Remove Selected" <– Very Important.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to restart your computer.
  • The log is automatically saved by MBAM and can be viewed by clicking the "Logs" tab.
  • Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process. If asked to restart your computer, please do so immediately.
  • Come back here to this thread and Paste the log in your next reply.
  
  
• Temporary File Cleaner
  
  
  
  • Download TFC to your desktop.
  • Close any open windows.
  • Right click the TFC icon and select "Run as Administrator" to run the program.
  • TFC will close all open programs itself in order to run.
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish.
  • Once complete it should automatically reboot your machine.
  • If your machine does not reboot automatically, manually reboot to ensure a complete clean.
  • Note: After running TFC your machine may take slightly longer to boot the first time. This is normal.
  
  
• Please update your Java
  
  
  
  • Click on "Start", then on "Control Panel".
  • Go to "Add or Remove Programs" and uninstall any previous versions of Java that you find (Java™ SE Runtime Environment 6 and Java™ 6 Update 31).
  • Reboot your computer.
  • Download the latest version of Java Runtime Environment (JRE) 7
  • Scroll down the page until you reach "Java Platform Standard Edition".
  • Beneath this and to the right, you will see a button marked "Download" for Java SE 7u4.
  • Click the "Download" button.
  • Accept the licence agreement.
  • Under "Product / File Description" download the jre-7u4-windows-i586.exe file for Windows x86 Offline.
  • Save the file to your desktop.
  • From your desktop double click on jre-7u4-windows-i586.exe to install the newest version.
  • Delete the downloaded installation file after completing the above procedure and reboot your system if not prompted to do so.
  
  
• Please run the following scan
  
  
  
  • Note: You will need to use Internet Explorer for this scan.
  • Note for Vista/Windows 7 Users: ESET is compatible but Internet Explorer must be run as Administrator. To do this, right-click on your Internet Explorer icon and select "Run as Administrator".
  • Please disable your real time security programs before performing the scan.
  
  
  
  • Scan your system with Eset Online Scanner
  • Place a check mark in the box YES, I accept the Terms Of Use.
  • Click the [external image: Posted Image] button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps).
  • Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the [external image: Posted Image] icon on your desktop.
  
  
  
  • Check [external image: Posted Image]
  • Click the [external image: Posted Image] button.
  • Accept any security warnings from your browser.
  • Check [external image: Posted Image]
  • Make sure that the option to "Remove Found Threats" is UN checked.
  • Push the "Start" button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push [external image: Posted Image]
  • Push [external image: Posted Image], and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the [external image: Posted Image] button.
  • Push [external image: Posted Image]
  
  Please post the MBAM log and the ESET log in your next reply and let me know how the machine is running now.

JonTom, The Java installation apparently didn't work as I was unable to use the online scanner. I am going to try to install Java again, but it will be Sunday before I can respond. Thanks for you patience.

Hello michael81

I am going to try to install Java again, but it will be Sunday before I can respond

No problem. Let me know how it goes in your next reply.

I was not able to get Eset to run. When I accept the terms of use, it opens a new window but there's nothing in the window. Java issue, I guess? I've posted the MalwareBytes log below: Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Database version: v2012.05.05.02 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Mike :: MIKE-PC [administrator] 5/6/2012 11:15:36 AM mbam-log-2012-05-06 (11-15-36).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 243335 Time elapsed: 6 minute(s), 46 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)

Hello michael81

Java issue, I guess?

I'm not sure. Were you able to update your Java?

When I accept the terms of use, it opens a new window but there's nothing in the window.

Are you sure you have disabled all of your security programs and any script blocking programs you may have running?

If you were unable to install the latest version of java, lets try this:

• Please update your Java
  
  
  
  • To update your Java, Click on the "Windows Orb" then on "Control Panel" and then on the Java icon (looks like a coffee cup).
  • In the window that opens, click on the "Update" tab, and then on "Update Now".
  • Your Java should begin to update. Please follow any prompts that you receive.
  
  If you are able to update your java using the above method, please give ESET another try.
  
  If you are unable to update the java, or if ESET fails to run as it did before, try BitDefender instead:
  
  
• BitDefender
  
  
  
  • Lets perform an online scan with BitDefender QuickScan.
  • Please be patient as scanning can take some time.
  • We recommend that you disable any real time protection that you have before starting the scan.
  • Click here here to access the BitDefender QuickScan page
  
  
  • For Firefox users:
  • Click on the Free Scan Now button.
  • You will be prompted to install a plug-in. Please Allow the installation.
  • If the process stalls you may need to refresh the page.
  • A Software Installation window will appear.
  • Click on Install Now and the plugin will be installed as an Add-on.
  • Restart Firefox when done. Go back to the BitDefender QuickScan page again and click on Free Scan Now and proceed accordingly.
  
  
  • For Internet Explorer users:
  • Click on the Free Scan Now button.
  • You will be prompted to install an ActiveX control. Please allow the control to install.
  • The page will refresh. Click on the Free Scan Now button again and proceed accordingly.
  
  
  
  • When scan has completed, click on View report and a Notepad log will open.
  • If ant malware has been detected, you will receive a warning and the link to the report will be displayed as the number of infections. Click on it.
  • Post the contents of this report in your next reply.
  • The reports can also be found by navigating to C:\Documents and Settings\\Application Data\QuickScan, (where "" is the Windows log-in name).
  
  Please post the ESET/BitDefender log in your next reply.
  
  If you encounter any problems with the scan come back and let me know.

My machine shows the latest version of Java is installed but I still can't get Eset scanner to display. I also double checked to make sure Windows Defender and Super Anti-Spyware were disabled. In any event, here's the Bit Defender log: QuickScan 32-bit v0.9.9.114 ————————— Scan date: Sun May 06 18:36:51 2012 Machine ID: E8F686D8 Found 1 infected file! ———————- c:\program files\atttoolbar\atttoolbar.dll –> Application.Generic.46840 –> HKLM\Software\Classes\CLSID\{4E7BD74F-2B8D-469E-94BE-FD60BB9AAE29}\InprocServer32\"(default)" –> HKLM\Software\Microsoft\Internet Explorer\Toolbar\"{4E7BD74F-2B8D-469E-94BE-FD60BB9AAE29}" –> HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-94BE-FD60BB9AAE29} Processes ——— Ad-Aware 2007 Service 1476 C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe Adobe Reader and Acrobat Manager 3420 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe AT&T Internet Security Wizard 3388 C:\Program Files\AT&T\Internet Security Wizard\ISW.exe Bonjour 1860 C:\Program Files\Bonjour\mDNSResponder.exe Canon My Printer 3320 C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE CommonSDK 1972 C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe Digital Line Detection 3504 C:\Program Files\Digital Line Detect\DLG.exe Flash® Player Installer/Uninstaller 3412 C:\Windows\System32\Macromed\Flash\FlashUtil10x_ActiveX.exe HD Audio Control Panel 3220 C:\Windows\RtHDVCpl.exe Intel® Common User Interface 3360 C:\Windows\System32\hkcmd.exe Intel® Common User Interface 3380 C:\Windows\System32\igfxpers.exe Intel® Common User Interface 1844 C:\Windows\System32\igfxsrvc.exe iTunes 2420 C:\Program Files\iPod\bin\iPodService.exe iTunes 3444 C:\Program Files\iTunes\iTunesHelper.exe Java™ Platform SE Auto Updater 2 0 3468 C:\Program Files\Common Files\Java\Java Update\jusched.exe mcci+McciCMService 1896 C:\Program Files\Common Files\Motive\McciCMService.exe Microsoft® Windows Live ID 1396 C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE Microsoft® Windows Live ID 2360 C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE Microsoft® Windows® Operating System 2956 C:\Windows\explorer.exe Microsoft® Windows® Operating System 552 C:\Windows\System32\csrss.exe Microsoft® Windows® Operating System 608 C:\Windows\System32\csrss.exe Microsoft® Windows® Operating System 640 C:\Windows\System32\services.exe Microsoft® Windows® Operating System 1212 C:\Windows\System32\SLsvc.exe Microsoft® Windows® Operating System 484 C:\Windows\System32\smss.exe Microsoft® Windows® Operating System 596 C:\Windows\System32\wininit.exe Microsoft® Windows® Operating System 668 C:\Windows\System32\winlogon.exe MobileDeviceService 1832 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe OmniPage 3344 C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe SoftK56 Modem Driver 1936 C:\Windows\System32\drivers\XAudio.exe SupportSoft sprtcmd 3396 C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprtcmd.exe Windows 3276 C:\Windows\System32\wpcumi.exe Windows® Internet Explorer 3500 C:\Program Files\Internet Explorer\iexplore.exe Windows® Internet Explorer 3076 C:\Program Files\Internet Explorer\iexplore.exe Windows® Internet Explorer 4076 C:\Program Files\Internet Explorer\iexplore.exe Windows® Search 3872 C:\Windows\System32\SearchFilterHost.exe Windows® Search 3260 C:\Windows\System32\SearchProtocolHost.exe (verified) Microsoft® Windows® Operating System 532 C:\Program Files\Windows Media Player\wmpnetwk.exe (verified) Microsoft® Windows® Operating System 3584 C:\Program Files\Windows Media Player\wmpnscfg.exe (verified) Microsoft® Windows® Operating System 2492 C:\Windows\ehome\ehmsas.exe (verified) Microsoft® Windows® Operating System 3476 C:\Windows\ehome\ehtray.exe (verified) Microsoft® Windows® Operating System 2932 C:\Windows\System32\dwm.exe (verified) Microsoft® Windows® Operating System 684 C:\Windows\System32\lsass.exe (verified) Microsoft® Windows® Operating System 708 C:\Windows\System32\lsm.exe (verified) Microsoft® Windows® Operating System 1608 C:\Windows\System32\spoolsv.exe (verified) Microsoft® Windows® Operating System 948 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 912 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 860 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 852 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1632 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1400 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1240 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 2524 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1944 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1204 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1196 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1048 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 1036 C:\Windows\System32\svchost.exe (verified) Microsoft® Windows® Operating System 2568 C:\Windows\System32\taskeng.exe (verified) Microsoft® Windows® Operating System 2856 C:\Windows\System32\taskeng.exe (verified) Microsoft® Windows® Operating System 3568 C:\Windows\System32\wuauclt.exe (verified) Windows® Search 1020 C:\Windows\System32\SearchIndexer.exe Network activity —————- Process iexplore.exe (3500) connected on port 80 (HTTP) –> 174.129.35.94 Process iexplore.exe (3500) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process iexplore.exe (4076) connected on port 80 (HTTP) –> [removed] Process wininit.exe (596) listens on ports: 49152 (RPC) Process services.exe (640) listens on ports: 49157 (RPC) Process lsass.exe (684) listens on ports: 49155 (RPC) Process svchost.exe (912) listens on ports: 135 (RPC) Process svchost.exe (948) listens on ports: 49153 (RPC) Process svchost.exe (1048) listens on ports: 49154 (RPC) Autoruns and critical files ————————— C:\Dell\E-Center\EULALauncher.exe C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe Adobe Version Cue CS3 C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe Adobe Acrobat C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe Adobe Reader and Acrobat Manager C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe Apple Push C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe AT&T Internet Security Wizard C:\Program Files\AT&T\Internet Security Wizard\ISW.exe Canon My Printer C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE CNSLMAIN.EXE C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe D D S C:\Users\Mike\Desktop\dds.scr Digital Line Detection C:\Program Files\Digital Line Detect\DLG.exe HD Audio Control Panel C:\Windows\RtHDVCpl.exe InstallShield Update Service C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe Intel® Common User Interface C:\Windows\System32\hkcmd.exe Intel® Common User Interface C:\Windows\system32\igfxdev.dll Intel® Common User Interface C:\Windows\System32\igfxpers.exe Intel® Common User Interface C:\Windows\system32\igfxtray.exe iTunes C:\Program Files\iTunes\iTunesHelper.exe Java™ Platform SE Auto Updater 2 0 C:\Program Files\Common Files\Java\Java Update\jusched.exe Microsoft® Windows® Operating System C:\Windows\system32\BROWSEUI.dll OmniPage C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe QuickTime C:\Program Files\QuickTime\QTTask.exe SSBkgdUpdate C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe SuperAntiSpyware c:\program files\superantispyware\sasseh.dll SUPERAntiSpyware C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe SUPERAntiSpyware WinLogon Processor C:\Program Files\SUPERAntiSpyware\SASWINLO.dll SupportSoft sprtcmd C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprtcmd.exe Windows C:\Windows\System32\wpcumi.exe Windows® Internet Explorer c:\windows\system32\webcheck.dll (verified) Google Update C:\Program Files\Google\Update\GoogleUpdate.exe (verified) Google Update C:\Users\Mike\AppData\Local\Google\Update\GoogleUpdate.exe (verified) Microsoft® Windows® Operating System C:\Program Files\Windows Media Player\wmpnscfg.exe (verified) Microsoft® Windows® Operating System C:\Windows\ehome\ehtray.exe (verified) Microsoft® Windows® Operating System c:\windows\system32\userinit.exe Browser plugins ————— AcroIEHelper Library c:\program files\common files\adobe\acrobat\activex\acroiehelper.dll AcroIEHelperShim Library c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll Adobe Acrobat C:\Program Files\Internet Explorer\plugins\nppdf32.dll Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\CONFLICT.2\FP_AX_CAB_INSTALLER.exe Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe Akamai Download Manager ActiveX Control C:\Windows\Downloaded Program Files\DownloadManagerV2.ocx Akamai Download Manager ActiveX Control C:\Windows\Downloaded Program Files\Manager.exe anagram C:\Windows\Downloaded Program Files\AnagramLib.dll AT&T Toolbar c:\program files\atttoolbar\atttoolbar.dll Bitdefender QuickScan C:\Windows\Downloaded Program Files\qsax.dll Bonjour C:\Program Files\Bonjour\mdnsNSP.dll Browser Address Error Redirector c:\program files\dell\bae\bae.dll Download Manager IE Control C:\Windows\Downloaded Program Files\DLMControl.dll Facebook Photo Uploader 4 C:\Windows\Downloaded Program Files\ImageUploader4_5.ocx Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\PhotoUploader5.ocx Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\PhotoUploader55.ocx Flash® Player Installer/Uninstaller C:\Windows\Downloaded Program Files\CONFLICT.3\FP_AX_CAB_INSTALLER.exe Google Earth Plugin C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll Google Update C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll Google Update C:\Users\Mike\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll InstallShield Update Service C:\Windows\Downloaded Program Files\isusweb.dll Java Deployment Toolkit 7.0.40.20 C:\Windows\system32\npDeployJava1.dll Java™ Platform SE 7 U4 c:\program files\java\jre7\bin\jp2ssv.dll Java™ Platform SE 7 U4 C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll Java™ Platform SE 7 U4 c:\program files\java\jre7\bin\ssv.dll LEADTOOLS® DLL for Win32 C:\Windows\Downloaded Program Files\lfeps13n.dll LEADTOOLS® DLL for Win32 C:\Windows\Downloaded Program Files\lfpcd13n.dll LEADTOOLS® DLL for Win32 C:\Windows\Downloaded Program Files\lfpcx13n.dll LEADTOOLS® DLL for Win32 C:\Windows\Downloaded Program Files\lfpsd13n.dll LEADTOOLS® DLL for Win32 C:\Windows\Downloaded Program Files\lftga13n.dll LEADTOOLS® DLL for Win32 C:\Windows\Downloaded Program Files\lftif13n.dll LEADTOOLS® DLL for Win32 C:\Windows\Downloaded Program Files\ltefx13n.dll LinkedIn Contact Finder Control C:\Windows\Downloaded Program Files\LinkedInContactFinderControl.dll LMIGuardianDll C:\Windows\Downloaded Program Files\LMIGuardianDll.dll LMIGuardianEvt C:\Windows\Downloaded Program Files\LMIGuardianEvt.dll LMIGuardianSvc C:\Windows\Downloaded Program Files\LMIGuardian.exe LMIProxyHelper.exe C:\Windows\Downloaded Program Files\LMIProxyHelper.exe LogMeIn, Inc. Remote Access Components C:\Windows\Downloaded Program Files\LMIBroker.exe Microsoft Office Live Plug-in for Firef C:\Program Files\Microsoft\Office Live\npOLW.dll Microsoft® Windows Live ID c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll Motive Plugin C:\Program Files\Common Files\Motive\npMotive.dll Move Streaming Media Player C:\Users\Mike\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll npitunes.dll C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll QuickTime Plug-in 7.7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll QuickTime Plug-in 7.7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll QuickTime Plug-in 7.7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll QuickTime Plug-in 7.7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll QuickTime Plug-in 7.7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll QuickTime Plug-in 7.7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll QuickTime Plug-in 7.7.1 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll RACtrl.dll C:\Windows\Downloaded Program Files\RACtrl.dll sdhelper.dll c:\program files\spybot - search & destroy\sdhelper.dll Shockwave for Director C:\Windows\system32\Adobe\Director\np32dsw.dll Silverlight Plug-In c:\Program Files\Microsoft Silverlight\3.0.50611.0\npctrl.dll Windows C:\Windows\system32\wpclsp.dll Windows Presentation Foundation c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll Windows® Internet Explorer C:\Windows\system32\ieframe.dll (verified) InstallShield Update Service C:\Windows\Downloaded Program Files\dwusplay.dll (verified) InstallShield Update Service C:\Windows\Downloaded Program Files\dwusplay.exe (verified) Microsoft® Windows® Operating System C:\Windows\system32\mswsock.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\napinsp.dll (verified) Microsoft® Windows® Operating System C:\Windows\System32\nlaapi.dll (verified) Microsoft® Windows® Operating System C:\Windows\system32\pnrpnsp.dll (verified) Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll Scan —- MD5: d6b7814aa0d1412f0ea77845c0af7b51 C:\Dell\E-Center\EULALauncher.exe MD5: 12673bcf7b32087df63f0cff550ea40b C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe MD5: c6fc3b54ad1fee0fe4069ab51bf4c724 C:\Program Files\AT&T\Internet Security Wizard\ISW.exe MD5: 4c5e44442aeccf4f5a2fa949c640eed0 c:\program files\atttoolbar\atttoolbar.dll MD5: 40947436a70e0034e41123df5a0a7702 C:\Program Files\Bonjour\mdnsNSP.dll MD5: db5bea73edaf19ac68b2c0fad0f92b1a C:\Program Files\Bonjour\mDNSResponder.exe MD5: 39c497df1f9b87df673195456e4a2cfd C:\Program Files\Canon\MyPrinter\BJMyRes.dll MD5: fedb6110d3e0a7efe6996f93cd8c48e7 C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe MD5: c3104be7d2b689ebe47e2aac64c07530 c:\program files\common files\adobe\acrobat\activex\acroiehelper.dll MD5: 203a74767eb81f96a5166b1933db46d0 c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll MD5: 14c23516c990dcd6052152cf034dde40 C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe MD5: c1873d880786b6b03af781e23835d925 C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe MD5: bad6bea0de1f69c82bdb74378ce0c20a C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe MD5: 92da9ede07390b4352b29dd82079e398 C:\Program Files\Common Files\Apple\Apple Application Support\AppleVersions.dll MD5: 1f3ff6c062b311fe410ec89f6bfac213 C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe MD5: 37cf2461cb5e40c4cfab82c8fc79a2bc C:\Program Files\Common Files\Apple\Apple Application Support\ASL.dll MD5: 5d76c8cc87d0efbe0b4a3bef6b67ebf0 C:\Program Files\Common Files\Apple\Apple Application Support\CFNetwork.dll MD5: 6fe3e3a215e55c76a811b9b56a5aeb09 C:\Program Files\Common Files\Apple\Apple Application Support\CoreFoundation.dll MD5: 149d74e1128a86dc9cfb2851fbea11eb C:\Program Files\Common Files\Apple\Apple Application Support\icudt46.dll MD5: 250bf888ddbe88d61eb19a9d4957c794 C:\Program Files\Common Files\Apple\Apple Application Support\libdispatch.dll MD5: 5a963c340de1a01ba6e24945ce05d16a C:\Program Files\Common Files\Apple\Apple Application Support\libicuin.dll MD5: f4bc62990e7e5c29799a895b80fc3177 C:\Program Files\Common Files\Apple\Apple Application Support\libicuuc.dll MD5: 5e33c164dc7fa74728d8a83036c438bb C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll MD5: 794950db77aa590c2964eca0a5874a09 C:\Program Files\Common Files\Apple\Apple Application Support\objc.dll MD5: 638c7596b493f5f77db9ef6bad8fe46c C:\Program Files\Common Files\Apple\Apple Application Support\pthreadVC2.dll MD5: 8ba9851e671e8b5e49e303748ffd530c C:\Program Files\Common Files\Apple\Apple Application Support\SQLite3.dll MD5: 2503287bd19ae52e36e9de42834a2ac0 C:\Program Files\Common Files\Apple\Apple Application Support\YSCrashDump.dll MD5: 2e14406e05789f91c9282ae7cfca3a07 C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll MD5: 3debbecf665dcdde3a95d9b902010817 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe MD5: 1224bc6de919f8cd8c1c945280e63852 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService_main.dll MD5: 06a4250c9e3606cae3f68da45702f342 C:\Program Files\Common Files\Apple\Mobile Device Support\iTunesMobileDevice.dll MD5: 905b5bf5be0a86e8412801bf20357195 C:\Program Files\Common Files\Apple\Mobile Device Support\MobileDevice.dll MD5: d2aeadfd998706b4216315b2bd3fa79e C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe MD5: 995beb69ae5c50d354894354f5a6cd5a C:\Program Files\Common Files\Java\Java Update\jusched.exe MD5: 5eb87ba0b93ca7e894fc8002e3ce4c2a C:\Program Files\Common Files\Microsoft Shared\Windows Live\sqmapi.dll MD5: e6cb119ef2e148eaa1a247343550756e C:\Program Files\Common Files\Motive\McciCMService.exe MD5: b73b5999d47cd9727264f557626bce3a C:\Program Files\Common Files\Motive\npMotive.dll MD5: f6c66188def298e2c3827af6fb2c0637 C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\CPSCommonTools9.dll MD5: 3c03db6f66c9792c9b6e30473e847ca2 C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\ROXIPP41.dll MD5: 41857da3ea7a2568e1aae8fedc8d8939 C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSCommonEnglish.dll MD5: c7c30b24c8c57078654ba9574ce70e3d C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSCommonObjects.dll MD5: 1bac818025403333c11817dafbcee283 C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSFileLoader.dll MD5: 5fce5b36991dbaa99da9e9c62d8e60ac C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\LeResourceLoader.dll MD5: ebcde8b48fadc6479d96a56d0a432160 C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe MD5: ab2b1de1c8f31efce2384b14b3dc4260 C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe MD5: 900a9d261859ec999c9c7243410c3203 C:\Program Files\Common Files\Roxio Shared\DLLShared\homeutils9.dll MD5: 743e556a998074ed7eeb99ca495b2e5d C:\Program Files\Common Files\Roxio Shared\DLLShared\rsl.dll MD5: 3c84fca13c4eb607478a45f2d7e16db3 C:\Program Files\Common Files\Roxio Shared\DLLShared\SonicHTTPClient9.dll MD5: 846965ae55a2662b1576c0f392dd1d6e C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe MD5: 51778fd315c9882f1cbd932743e62a72 C:\Program Files\Common Files\SureThing Shared\stllssvr.exe MD5: 267b3a856e9f4db1cabd4e6db71e07d2 C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe MD5: 1a4f60ef6da38621f1091b0cb0fa2c09 c:\program files\dell\bae\bae.dll MD5: 245f62a2aa67f4a61f10174bf1017327 C:\Program Files\DellSupport\brkrsvc.exe MD5: 413f2d5f9d802688242c23b38f767ecb C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys MD5: cb1135906d951b574f9f2498be8f11f9 C:\Program Files\Digital Line Detect\BVRPDIAG.dll MD5: f03ffc962e18f36a922e61f96be09925 C:\Program Files\Digital Line Detect\DLG.exe MD5: c2fa196f8dd651f04e120c7214f18fd1 C:\Program Files\FastAccessDSL\HelpCenter43\bin\LIBEAY32.dll MD5: 2e73df74a297ee6b91c4f57b9bd84317 C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprtcmd.exe MD5: 3f88d3d7c8dc3f00aaf911f87050e853 C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprtevent.dll MD5: 822864a90ec876032b370855bc4f7109 C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprthook.dll MD5: 4f7929cf9f4d7bc0a3086619659c2449 C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprtsched.dll MD5: 4ecdb71337a5e13ccc52b8fa96413d9e C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprtsync.dll MD5: 4afe8423ea964c95dc0c6db0374b3ad7 C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprttrigger.dll MD5: 47765eca8b3d855deb4397eca9c2ba36 C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprtui.dll MD5: 5d6267b610c0081b6eb2edbda8c16ccf C:\Program Files\FastAccessDSL\HelpCenter43\bin\sprtupdate.dll MD5: 2437be68d5a37a75fad51c5f0e9a03ed C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll MD5: 1e6b52abdf4082374de9d43cbd2f7e08 C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll MD5: a1659e4d08fe8d0f0bc61960d8c0369e C:\Program Files\Internet Explorer\ieproxy.dll MD5: cf5d4889c15cc8a40be54f55f27093b1 C:\Program Files\Internet Explorer\IEShims.dll MD5: 904e13ba41af2e353a32cf351ca53639 C:\Program Files\Internet Explorer\iexplore.exe MD5: 700cc8a0ca98e056f7a951d0ab9f856b C:\Program Files\Internet Explorer\plugins\nppdf32.dll MD5: 47c3fa43f99202e2f92efa1eb9bdecf7 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll MD5: 47c3fa43f99202e2f92efa1eb9bdecf7 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll MD5: 47c3fa43f99202e2f92efa1eb9bdecf7 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll MD5: 47c3fa43f99202e2f92efa1eb9bdecf7 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll MD5: 47c3fa43f99202e2f92efa1eb9bdecf7 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll MD5: 47c3fa43f99202e2f92efa1eb9bdecf7 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll MD5: 47c3fa43f99202e2f92efa1eb9bdecf7 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll MD5: 178fe38b7740f598391eb2f51ae4ccac C:\Program Files\iPod\bin\iPodService.exe MD5: 7732270d44bb0f8c3111848f9e1a0b53 C:\Program Files\iPod\bin\iPodService.Resources\en.lproj\iPodServiceLocalized.DLL MD5: b8a7305083996a333089119e63c29d51 C:\Program Files\iPod\bin\iPodService.Resources\iPodService.DLL MD5: bbf53397690ba8931c21352d246c744c C:\Program Files\iTunes\iTunesHelper.dll MD5: 444eb38a256be60f2013488c49d2ab3f C:\Program Files\iTunes\iTunesHelper.exe MD5: f70af9eb44cc52c2da23ba23a69ae977 C:\Program Files\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.DLL MD5: ca4674baeb26baee4e54ae588c2c74fb C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL MD5: 64151c0799431e0304ae1bd6202131a7 C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll MD5: 92ab7417725b5951677f75a8d8728afe c:\program files\java\jre7\bin\jp2ssv.dll MD5: 791fb4a5c6bd3804427f9e1dd83f3276 C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll MD5: 04f7d230620a01d6168f26d6dd28e981 c:\program files\java\jre7\bin\ssv.dll MD5: 0629361fac4576ba48ab39f4903dce9e C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe MD5: 759c45ca544a92de4b88618894a15587 C:\Program Files\Lavasoft\Ad-Aware 2007\CEAPI.dll MD5: 46374252afa0a37f4f7af528f6f16b96 C:\Program Files\Lavasoft\Ad-Aware 2007\PKArchive85u.dll MD5: 72cce73551d24d7863369f3bfd6548c9 C:\Program Files\Lavasoft\Ad-Aware 2007\Update.dll MD5: 55b8c7b701c4d1b0c479f3ffea83850f C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll MD5: af43c4f7f3c8bc95dad95024f96cdc4a C:\Program Files\QuickTime\QTTask.exe MD5: fba22c413fe8b13ba49d7535174ddbef C:\Program Files\ScanSoft\OmniPageSE4\OpHookSE4.dll MD5: f8d427dae2984a4968e2d1cb53634784 C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe MD5: 35f73f1936bde91f1b6995510a61e7a8 c:\program files\spybot - search & destroy\sdhelper.dll MD5: d617404d119b1db10366692447d8a648 C:\Program Files\SUPERAntiSpyware\SASCTXMN.DLL MD5: c030c9a39e85b6f04a8dd25d1a50258a C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS MD5: e9c2d75c748c3f0a4c34d6cf2ae1d754 C:\Program Files\SUPERAntiSpyware\SASENUM.SYS MD5: 64c100dbf57c6cb6e7d5d24153f5e444 C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys MD5: ecd5517a6633826057d4f050927ddf56 c:\program files\superantispyware\sasseh.dll MD5: 972edede23ac8d59aac0c09799c6f18a C:\Program Files\SUPERAntiSpyware\SASWINLO.dll MD5: 7e6a38e6eda682684ce4521608125552 C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe MD5: 94a85e956a065e23e0010a6a7826243b C:\Program Files\Windows Live\installer\WLSetupSvc.exe MD5: a070b8c38ceb3a30cc18d1b7c433144c C:\Program Files\WinRAR\rarext.dll MD5: 9bd4dcb5412921864a7aacdedfbd1923 C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS MD5: 07c02c892e8e1a72d6bf35004f0e9c5e C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS MD5: 1e6b52abdf4082374de9d43cbd2f7e08 C:\Users\Mike\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll MD5: 2288d8ecb52f6b1302f89389d36149a2 C:\Users\Mike\AppData\Roaming\Move Networks\plugins\npqmp071705000014.dll MD5: 2e84724e785214f625e16d1e89519da2 C:\Users\Mike\Desktop\dds.scr MD5: 752d51004a17ca2276eb367e8d2a7cfd C:\Windows\Downloaded Program Files\AnagramLib.dll MD5: daee914abcf0081aaf23689e4a8c27dd C:\Windows\Downloaded Program Files\CONFLICT.3\FP_AX_CAB_INSTALLER.exe MD5: a76fcc7456aa3bd289f29d40772ca7a2 C:\Windows\Downloaded Program Files\DLMControl.dll MD5: 352ab6c3942e509332dec566aabcfd62 C:\Windows\Downloaded Program Files\DownloadManagerV2.ocx MD5: af52969832631a3645156fcca5db75a9 C:\Windows\Downloaded Program Files\ImageUploader4_5.ocx MD5: 3f4413dcd8d3bbabf08f68f25e6d60e1 C:\Windows\Downloaded Program Files\isusweb.dll MD5: bdd316d6479220b8fa2a911262898640 C:\Windows\Downloaded Program Files\lfeps13n.dll MD5: 1e1fde2ff4b0197ef8a36259244cf142 C:\Windows\Downloaded Program Files\lfpcd13n.dll MD5: 9d9ca493d0864df83d282e2393fe5825 C:\Windows\Downloaded Program Files\lfpcx13n.dll MD5: 4a3a0ce4ed63580116a7354e06b42cdf C:\Windows\Downloaded Program Files\lfpsd13n.dll MD5: bbbe68d622945ff8bc9ce847975b2389 C:\Windows\Downloaded Program Files\lftga13n.dll MD5: 333f810c00745c05edf17d6580a4601e C:\Windows\Downloaded Program Files\lftif13n.dll MD5: f52727543c503f4abeee473f0d1466f7 C:\Windows\Downloaded Program Files\LinkedInContactFinderControl.dll MD5: ebe1f1d8facc49606a9f9ffd3b2f58ea C:\Windows\Downloaded Program Files\LMIBroker.exe MD5: 8ddb1dc9b41b152e2c01e6cc6b26e684 C:\Windows\Downloaded Program Files\LMIGuardian.exe MD5: a02a4fde3191f652857d9c087c6c12a9 C:\Windows\Downloaded Program Files\LMIGuardianDll.dll MD5: 990ed734254b1d43884bd4a856e75b2e C:\Windows\Downloaded Program Files\LMIGuardianEvt.dll MD5: f56ba445d7d36eb4ddbfe4477bad594d C:\Windows\Downloaded Program Files\ltefx13n.dll MD5: 455ca248a92816766fad91b5ce258773 C:\Windows\Downloaded Program Files\Manager.exe MD5: 2a8c7ca8b40ca320bf88d0ff92da7cf8 C:\Windows\Downloaded Program Files\qsax.dll MD5: 705b4a5c8a19d2396ddec57a52be9f8c C:\Windows\Downloaded Program Files\RACtrl.dll MD5: ab87eeffd18f2baafc274e7075ea6c67 c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll MD5: 8c7ddbbf366869a61218ab7a6802c3e9 C:\Windows\RtHDVCpl.exe MD5: 1a5e7c6cbaed64159c6b39be64f4c2ff C:\Windows\system32\$sys$filesystem\crater.sys MD5: 07154b27860b999cc70eb6f7a1528794 C:\Windows\system32\Adobe\Director\np32dsw.dll MD5: e9b9c1b98c8d6d48407e1c1203eac659 C:\Windows\System32\adsldpc.dll MD5: f31eebc1a1c81fd04005489cc3dcdfe7 C:\Windows\system32\basesrv.dll MD5: f21f255b91ca4f04e4250decd2067cbb c:\windows\system32\bitsperf.dll MD5: d333058925ce305e39de8d5ad2b52a46 C:\Windows\system32\CLUSAPI.DLL MD5: 74f26fc01b180d4a99a168ed69c30a53 C:\Windows\system32\cmd.exe MD5: 7f15b4953378c8b5161d65c26d5fed4d C:\Windows\system32\cngaudit.dll MD5: dcf34c203284148e8db0d37a24b658b4 C:\Windows\System32\CNMLM8U.DLL MD5: b373075cc1c45c1a8f3147088e85bb15 C:\Windows\System32\cpwmon2k.dll MD5: 93e317d7ad783d8eaee2e3500bfe889d C:\Windows\System32\credui.dll MD5: 7f55c714567e2e55c79b7fd33433c93d C:\Windows\system32\CSRSRV.dll MD5: abca209eba02cb59233614db83b4f50d C:\Windows\System32\csrss.exe MD5: f654842d0653472bb37bbd016cfed0e3 C:\Windows\system32\CTAPO32.dll MD5: 3dfeec45e5f22993216083fb777719d5 C:\Windows\system32\d2d1.dll MD5: 8b02d2ecc7ef6e1f6af08459e3f741f6 C:\Windows\system32\d3d10.dll MD5: 29e4ea31c6debe5efb384eefa4f1ef63 C:\Windows\system32\d3d10_1.dll MD5: 556f1cbe9ba19e2ccd6f8d9af71af5c7 C:\Windows\system32\d3d10_1core.dll MD5: 9c7094f537782a82b6a29b4a7172e180 C:\Windows\system32\d3d10core.dll MD5: 04802864f51046e93471083a24469ace C:\Windows\system32\D3D10Level9.dll MD5: 532f5395fe1f26b8065d144c4d5f7b07 C:\Windows\system32\DaisyWrp.dll MD5: 062373995eae5f0eac9eaa9192136bfb C:\Windows\system32\dnssd.dll MD5: 53b049da317117645068f41ff6a6a80c C:\Windows\System32\Drivers\$sys$cor.sys MD5: b021d0ae4605ce5df67f06e741278cdf C:\Windows\system32\DRIVERS\a016bus.sys MD5: 5b6bc2de851012906d4aae84c802e3f2 C:\Windows\system32\DRIVERS\a016mdfl.sys MD5: c80cffb5819ccfc97f2b09e2259dfde6 C:\Windows\system32\DRIVERS\a016mdm.sys MD5: 415243177ff67d3cfba44d931b809bf3 C:\Windows\system32\DRIVERS\a016mgmt.sys MD5: 3a853f9b8b69541cde714a83a0a6434e C:\Windows\system32\DRIVERS\a016obex.sys MD5: 8b10ce1c1f9f1d47e4deb1a547a00cd4 C:\Windows\system32\drivers\agp440.sys MD5: dc67a153fdb8105b25d05334b5e1d8e2 C:\Windows\system32\drivers\aliide.sys MD5: 848f27e5b27c1c253f6cefdc1a5d8f21 C:\Windows\system32\drivers\amdagp.sys MD5: 835c4c3355088298a5ebd818fa31430f C:\Windows\system32\drivers\amdide.sys MD5: e79cbb2195e965f6e3256e2c1b23fd1c C:\Windows\system32\drivers\cmdide.sys MD5: 82b8c91d327cfecf76cb58716f7d4997 C:\Windows\system32\drivers\compbatt.sys MD5: dfeabb7cfffadea4a912ab95bdc3177a C:\Windows\system32\DRIVERS\dsunidrv.sys MD5: c68ac676b0ef30cfbb1080adce49eb1f C:\Windows\System32\drivers\dxgkrnl.sys MD5: 04944f4fc4f0477185f5d26ae0ddb90e C:\Windows\system32\DRIVERS\e1e6032.sys MD5: 6d2350bb6e77e800fc4be4e5b7a2e89a C:\Windows\system32\DRIVERS\HSX_CNXT.sys MD5: 53229dcf431d76434816cd29251168a0 C:\Windows\system32\DRIVERS\HSX_DPV.sys MD5: ed98350ecd4a5a9c9f1e641c09872bb2 C:\Windows\system32\DRIVERS\HSXHWBS2.sys MD5: 997e8f5939f2d12cd9f2e6b395724c16 C:\Windows\system32\drivers\iastor.sys MD5: c134e69ce901422d1f2d7ea8d69098fe C:\Windows\system32\DRIVERS\igdkmd32.sys MD5: 0084046c084d68e494f8cf36bcf08186 C:\Windows\system32\DRIVERS\intelide.sys MD5: 2f8ece2699e7e2070545e9b0960a8ed2 C:\Windows\system32\drivers\isapnp.sys MD5: d420bc42a637ac3cc4f411220549c0dc C:\Windows\system32\drivers\msahci.sys MD5: 055081fd5076401c1ee1bcab08d81911 C:\Windows\system32\drivers\nv_agp.sys MD5: 1636d43f10416aeb483bc6001097b26c C:\Windows\system32\drivers\pciide.sys MD5: 0245418224cfa77bf4b41c2fe0622258 C:\Windows\system32\drivers\rdpdr.sys MD5: 4eae74c8bcbca309a5d7cbad7e231427 C:\Windows\system32\drivers\RTKVHDA.sys MD5: 51cf56aa8bcc241f134b420b8f850406 C:\Windows\system32\drivers\sffdisk.sys MD5: 96ded8b20c734ac41641ce275250e55d C:\Windows\system32\drivers\sffp_mmc.sys MD5: 8b08cab1267b2c377883fc9e56981f90 C:\Windows\system32\drivers\sffp_sd.sys MD5: 08072b2fb92477fc813271a84b3a8698 C:\Windows\system32\drivers\sisagp.sys MD5: 6d72ef05921abdf59fc45c7ebfe7e8dd C:\Windows\system32\drivers\uliagpkx.sys MD5: 83cafcb53201bbac04d822f32438e244 C:\Windows\System32\Drivers\usbaapl.sys MD5: d5929a28bdff4367a12caf06af901971 C:\Windows\system32\drivers\viaagp.sys MD5: f3b4762eb85a2aff4999401f14c3262b C:\Windows\system32\drivers\viaide.sys MD5: 701a9f884a294327e9141d73746ee279 C:\Windows\system32\drivers\wmiacpi.sys MD5: 28dc5d626e036a75a572556f0a6eb1f6 C:\Windows\System32\drivers\XAudio.exe MD5: 5a7ff9a18ff6d7e0527fe3abf9204ef8 C:\Windows\system32\DRIVERS\xaudio.sys MD5: d917ff6cd6ecabcd99462110d43c769a C:\Windows\system32\DWrite.dll MD5: aaae543c535ed596ecad2ab8761c2c6f C:\Windows\system32\dxgi.dll MD5: 4312debdacbe338f0b90e7f08e7672be C:\Windows\system32\Dxtmsft.dll MD5: ca493a92da9880b6f1a89c3dbd54ba5b C:\Windows\system32\Dxtrans.dll MD5: b8a21907fe2f1a113f3487d9ab60bef9 C:\Windows\system32\en-us\tQuery.dll.mui MD5: abaeaee763e287bdd39094c4165e1f3f C:\Windows\system32\fdproxy.dll MD5: 452feaab2a8dbb42ed751754cb2594f5 c:\windows\system32\fntcache.dll MD5: 86f047b6ae9c3c7ade3140b657f00d5a C:\Windows\System32\hccutils.DLL MD5: b4b59ac042ee3733a862f26cbc0b17fc C:\Windows\system32\hidphone.tsp MD5: d4975555e91636fcf4809e51731f80d8 C:\Windows\System32\hkcmd.exe MD5: 0c84b6affa7486422235584110d7176f c:\windows\system32\ICAAPI.dll MD5: dca3fa9f9dd103dc39c24c85ef073db1 C:\Windows\system32\ICMP.DLL MD5: ee9d715af1b928982f417238b9914484 C:\Windows\system32\ieapfltr.dll MD5: 490fc0d07f7c0468e232ab8e8e956719 C:\Windows\system32\ieframe.dll MD5: cdf5b6aec538e02d5579e2e791042a1a C:\Windows\system32\iertutil.dll MD5: 07970aa4c392efb133d1a1bfbd66a58f C:\Windows\system32\IEUI.dll MD5: c9fc759d903b3ed249acec90678fb015 C:\Windows\system32\igdumd32.dll MD5: f3870c2935a3b36117eab30fe389461a C:\Windows\system32\igfxdev.dll MD5: cd12a46ae81306c2f14b19a58e1058b0 C:\Windows\System32\igfxpers.exe MD5: 08904f860b94f29fcf200b623d93389e C:\Windows\System32\igfxres.dll MD5: c6c8db2c5be7665768dbe2d50ea13a65 C:\Windows\system32\igfxsrvc.dll MD5: 8beb7107a0ce4bb1c4f7294c377df3e9 C:\Windows\System32\igfxsrvc.exe MD5: 66397a699206cf9a5f9c66a79b978125 C:\Windows\system32\igfxTMM.dll MD5: 806db5f4fc5185afc608e881979cc25f C:\Windows\system32\igfxtray.exe MD5: 7f83b06a929a981bc001b2ea304d2036 c:\windows\system32\iphlpsvc.dll MD5: 2f0971c08f73ee881bb54cc7c11dff7b C:\Windows\System32\jscript9.dll MD5: 953193a9dea40348c1086d171f6440ae C:\Windows\system32\kmddsp.tsp MD5: ca0b849566776a17f35f0339be17dfd9 c:\windows\system32\ktmw32.dll MD5: 35d40113e4a5b961b6ce5c5857702518 c:\windows\system32\lmhsvc.dll MD5: c1377779618cf33afcef5299309dbef6 C:\Windows\system32\Macromed\Flash\Flash10x.ocx MD5: a69b66b847bca675e934f2e5ea554591 C:\Windows\system32\Macromed\Flash\FlashUtil10x_ActiveX.dll MD5: 06a333e9a76cfa19848b452c5b011140 C:\Windows\System32\Macromed\Flash\FlashUtil10x_ActiveX.exe MD5: d9963d39f6711e9a1c14c939c3a25605 C:\Windows\system32\MdmXSdk.dll MD5: 67d16247c56c26a4f0d79d1a7f272b8f C:\Windows\system32\MF.dll MD5: f35a584e947a5b401feb0fe01db4a0d7 C:\Windows\system32\MFC71.DLL MD5: bf142d4f8c61ed3629a9cdd7ba867900 C:\Windows\system32\MFPlat.DLL MD5: b4f5de3dad8e6b97272f45db97674878 C:\Windows\System32\mgmtapi.dll MD5: 2e837f3d406224df131c34bc8f71621e C:\Windows\system32\modemui.dll MD5: 56e315acfb08a177b4d01e42b9044db5 C:\Windows\System32\MPRAPI.dll MD5: 7940c04ce581288a3498d57ec4ee47d2 C:\Windows\System32\msfeeds.dll MD5: 497c9c3db953a60ec4f43a097e15f75e C:\Windows\system32\MSHTML.dll MD5: aab5feaabf4cb6f76d794203831c8d94 C:\Windows\system32\Msidle.dll MD5: 35aae2e841aa1a949775168e119482c9 C:\Windows\system32\msls31.dll MD5: 5e41139ec6efbcaffd96d46925e544ab c:\windows\system32\mspatcha.dll MD5: abe9eea1eabea0711610a637a7b1c25d C:\Windows\system32\msprivs.dll MD5: 2fa16465f64db54b1f7f511395eb4fd7 C:\Windows\system32\NCObjAPI.DLL MD5: f4d9ed6bd74ad7cc0bec83c43a1cb76b c:\windows\system32\ncsi.dll MD5: 2f6776acefe41ee889c464ea407918f2 C:\Windows\system32\ndptsp.tsp MD5: 6bc5fcef351e4cb5a269c1e84b5a06da C:\Windows\system32\netcfgx.dll MD5: 95daecf0fb120a7b5da679cc54e37dde C:\Windows\system32\netlogon.dll MD5: 4bf053944e973c073339be841c9ecf28 C:\Windows\System32\NETRAP.dll MD5: 42f5e25eb0ae6705fce2661868aa5f8e C:\Windows\system32\npDeployJava1.dll MD5: 8bb86f0c7eea2bded6fe095d0b4ca9bd c:\windows\system32\nsisvc.dll MD5: f0062778f50838145ac46b384ffb4fa3 C:\Windows\system32\pcadm.dll MD5: e340845c8e96d107c36420065d7a5733 C:\Windows\system32\printcom.dll MD5: 10f13fff542fec4a2c4fa734eebe56b9 C:\Windows\system32\qmgrprxy.dll MD5: 801f1e963f7eeffda3f9ef89db3ef133 C:\Windows\system32\radardt.dll MD5: 2dd6af8e97f59c9d39329bbc2a81f13f C:\Windows\System32\RASDLG.dll MD5: 88225070dd2f7b0b2ed51e7935078641 C:\Windows\system32\RASQEC.DLL MD5: b9f3ff52b84fd9e3cafb29b8ee385e5b C:\Windows\system32\RESUTILS.DLL MD5: 8efda5e4d177f3ccf5d620675909ed42 C:\Windows\system32\RtkAPO.dll MD5: 167ac31450c0c53a01fa1491e94d7678 C:\Windows\system32\shdocvw.dll MD5: 07853103157575e6de0bab68e2b892d9 C:\Windows\system32\spool\PRTPROCS\W32X86\CNMPD8U.DLL MD5: bf7e4d6f60a6d9e866432855c6f8c262 c:\windows\system32\sqmapi.dll MD5: 452341e471d2d961229dfe0842957272 C:\Windows\system32\SSCORE.DLL MD5: b5950df243837d8217f4e597919b224a C:\Windows\system32\stobject.dll MD5: 71f5a7104fdf16c0ac5283a6ce666553 C:\Windows\system32\SYSNTFY.dll MD5: 5091452dc719281cf1dd69367e13b494 C:\Windows\System32\tcpmib.dll MD5: f8873d15018f411588bec02c1725bada C:\Windows\system32\tspkg.dll MD5: 0b71899e60d1265229bf3d080eab573d C:\Windows\system32\unimdmat.dll MD5: dfbaadf1b624dc71e88d34d86b3595be C:\Windows\system32\uniplat.dll MD5: 79f14b5df9e17e12193337ed4ee1c491 C:\Windows\system32\urlmon.dll MD5: 0bf0bb276f17b6ad61a8694d2551ec28 C:\Windows\System32\usbmon.dll MD5: dc3ae9f1554dcd97f90983ddbdacd83d C:\Windows\system32\vsstrace.dll MD5: 83c2f5076e1b4a63c04f2b14ee7cad47 C:\Windows\system32\wbem\wbemdisp.dll MD5: 2c3b09e586bda2cc49a292be7badc589 C:\Windows\system32\wbem\wmiutils.dll MD5: e7d0f91e44d9d3b2116fa549bdcdb756 c:\windows\system32\WDSCORE.dll MD5: 5193de33f3284c447e0d31dafbf92570 c:\windows\system32\webcheck.dll MD5: 0745d6ead386710110817fbec03f5161 C:\Windows\system32\wfapigp.dll MD5: 73fe2e5fa55088a241aa2732f5d387d6 C:\Windows\system32\wiarpc.dll MD5: 1d94fa7c81d2ffe494af094619ba706f C:\Windows\system32\WININET.dll MD5: 101ba3ea053480bb5d957ef37c06b5ed C:\Windows\System32\wininit.exe MD5: 5ec8fb83f31aa2d6f421f02c3f4f4475 c:\windows\system32\WINSPOOL.DRV MD5: 92283d9e33ec5f41ecc0b430b7459241 C:\Windows\system32\wls0wndh.dll MD5: 0727200f10320a6ba7e59433094fbba7 C:\Windows\system32\WMALFXGFXDSP.dll MD5: 0c9f94c3bb100c1fe1c06a8eb4b88283 C:\Windows\system32\wmpmde.dll MD5: 617f9a5813e69f6e9ed94b811ec75396 C:\Windows\System32\wmpps.dll MD5: f0321da5203f1e71917f3b7a13dc4912 C:\Windows\system32\WMsgAPI.dll MD5: a9662bcf218bc76869a8d91635d5f93a C:\Windows\System32\Wpc.dll MD5: dd1d685d387a8ac666ba3b7539c774e8 C:\Windows\system32\wpclsp.dll MD5: c456658af90f42be3cdf1048f9cdb5ca C:\Windows\System32\wpcumi.exe MD5: 399bb52ad0668472717498e97cf28341 c:\windows\system32\WUDFPlatform.dll MD5: 0b3595a4ff0b36d68e5fc67fd7d70fdc C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9 a\MSVCP80.dll MD5: c9564cf4976e7e96b4052737aa2492b4 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9 a\MSVCR80.dll No file uploaded. Scan finished - communication took 2 sec Total traffic - 0.02 MB sent, 1.36 KB recvd Scanned 864 files and modules - 43 seconds ==============================================================================

Hello michael81

Lets take a closer look at that detection:

Please scan the following file using Virus Total:

c:\program files\atttoolbar\atttoolbar.dll

Post the link to the results page in your next reply.

Hello. Here's the link to the virustotal scan:

https://www.virustotal.com/file/f2be561044e…sis/1336615058/

Hello michael81

Thank you for the link.

• Please search for and delete the following file
  
  
  
• Right-click your "Start" button and select "Explore".
• Navigate to and delete the following files/folders in bold.

C:\Program Files\ATTToolbar\ATTToolbar.dll <==== Delete this file.

• Once deleted, empty your recycle bin.

Please post a new set of DDS logs in your next reply and let me know how the machine is running.

Hello michael81

I would like to double check something before we continue.

Please scan your machine again with aswMBR and post the new log in your next reply.

Hi, JonTom. I've tried to run aswMBR twice but it seems like it hangs up at this point. The log is below. Also, I'm still experiencing double-click problems. In fact, they're as bad as ever. aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-04-28 15:38:12 —————————– 15:38:12.941 OS Version: Windows 6.0.6002 Service Pack 2 15:38:12.941 Number of processors: 2 586 0xF0D 15:38:12.941 ComputerName: MIKE-PC UserName: Mike 15:38:16.763 Initialize success 15:44:10.018 AVAST engine defs: 12042801 15:44:58.346 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 15:44:58.346 Disk 0 Vendor: ST3500630AS 3.ADG Size: 476940MB BusType: 3 15:44:58.362 Disk 0 MBR read successfully 15:44:58.362 Disk 0 MBR scan 15:44:58.409 Disk 0 Windows VISTA default MBR code 15:44:58.424 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 47 MB offset 63 15:44:58.440 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 10240 MB offset 98304 15:44:58.456 Disk 0 Partition 3 80 (A) 07 HPFS/NTFS NTFS 466651 MB offset 21069824 15:44:58.471 Disk 0 scanning sectors +976771072 15:44:58.549 Disk 0 scanning C:\Windows\system32\drivers 15:45:10.703 Service scanning 15:45:11.327 Service $sys$DRMServer C:\Windows\system32\$sys$filesystem\$sys$DRMServer.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:45:13.713 Service CD_Proxy C:\Windows\CDProxyServ.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:45:34.524 Modules scanning 15:45:41.466 Disk 0 trace - called modules: 15:45:41.513 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys 15:45:41.513 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x83eed568] 15:45:41.528 3 CLASSPNP.SYS[85bac8b3] -> nt!IofCallDriver -> [0x83360950] 15:45:41.528 5 acpi.sys[8069a6bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x8334ab98] 15:45:42.714 AVAST engine scan C:\Windows 15:45:42.948 File: C:\Windows\CDProxyServ.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:45:46.021 AVAST engine scan C:\Windows\system32 15:45:46.224 File: C:\Windows\system32\$sys$caj.dll **INFECTED** Win32:Rootkit-gen [Rtk] 15:45:46.286 File: C:\Windows\system32\$sys$upgtool.exe **INFECTED** Win32:Rootkit-gen [Rtk] 15:49:17.120 AVAST engine scan C:\Windows\system32\drivers 15:49:40.100 AVAST engine scan C:\Users\Mike 16:04:17.899 File: C:\Users\Mike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\26774810-11676934 **INFECTED** Win32:Alureon-GF [Rtk] 16:04:28.757 File: C:\Users\Mike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\e06415b-2d00e7b3 **INFECTED** Win32:MalOb-GY [Cryp] 16:04:34.311 File: C:\Users\Mike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\60cbe462-3b0c4324 **INFECTED** Win32:Malware-gen 16:04:58.881 File: C:\Users\Mike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\425101be-58b3ff47 **INFECTED** Win32:Malware-gen 16:05:01.080 File: C:\Users\Mike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\43914a07-18cd3937 **INFECTED** Win32:MalOb-IJ [Cryp] 16:19:49.303 AVAST engine scan C:\ProgramData 16:23:05.849 Scan finished successfully 16:25:38.829 Disk 0 MBR has been saved successfully to "C:\Users\Mike\Desktop\MBR.dat" 16:25:38.844 The log file has been saved successfully to "C:\Users\Mike\Desktop\aswMBR.txt" aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-05-02 20:26:15 —————————– 20:26:15.801 OS Version: Windows 6.0.6002 Service Pack 2 20:26:15.801 Number of processors: 2 586 0xF0D 20:26:15.801 ComputerName: MIKE-PC UserName: Mike 20:27:01.429 Initialize success 20:27:16.835 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 20:27:16.835 Disk 0 Vendor: ST3500630AS 3.ADG Size: 476940MB BusType: 3 20:27:16.866 Disk 0 MBR read successfully 20:27:16.866 Disk 0 MBR scan 20:27:16.866 Disk 0 Windows VISTA default MBR code 20:27:16.866 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 47 MB offset 63 20:27:16.882 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 10240 MB offset 98304 20:27:16.898 Disk 0 Partition 3 80 (A) 07 HPFS/NTFS NTFS 466651 MB offset 21069824 20:27:16.913 Disk 0 scanning sectors +976771072 20:27:16.976 Disk 0 scanning C:\Windows\system32\drivers 20:27:24.647 Service scanning 20:27:38.997 Modules scanning 20:27:43.879 Disk 0 trace - called modules: 20:27:43.911 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys 20:27:43.942 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84379ac8] 20:27:43.942 3 CLASSPNP.SYS[85b9e8b3] -> nt!IofCallDriver -> [0x83ce3858] 20:27:43.957 5 acpi.sys[8069c6bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x8334bb98] 20:27:43.973 Scan finished successfully 20:28:00.595 Disk 0 MBR has been saved successfully to "C:\Users\Mike\Desktop\MBR.dat" 20:28:00.610 The log file has been saved successfully to "C:\Users\Mike\Desktop\aswMBR.txt" aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-05-02 20:26:15 —————————– 20:26:15.801 OS Version: Windows 6.0.6002 Service Pack 2 20:26:15.801 Number of processors: 2 586 0xF0D 20:26:15.801 ComputerName: MIKE-PC UserName: Mike 20:27:01.429 Initialize success 20:27:16.835 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 20:27:16.835 Disk 0 Vendor: ST3500630AS 3.ADG Size: 476940MB BusType: 3 20:27:16.866 Disk 0 MBR read successfully 20:27:16.866 Disk 0 MBR scan 20:27:16.866 Disk 0 Windows VISTA default MBR code 20:27:16.866 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 47 MB offset 63 20:27:16.882 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 10240 MB offset 98304 20:27:16.898 Disk 0 Partition 3 80 (A) 07 HPFS/NTFS NTFS 466651 MB offset 21069824 20:27:16.913 Disk 0 scanning sectors +976771072 20:27:16.976 Disk 0 scanning C:\Windows\system32\drivers 20:27:24.647 Service scanning 20:27:38.997 Modules scanning 20:27:43.879 Disk 0 trace - called modules: 20:27:43.911 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys 20:27:43.942 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84379ac8] 20:27:43.942 3 CLASSPNP.SYS[85b9e8b3] -> nt!IofCallDriver -> [0x83ce3858] 20:27:43.957 5 acpi.sys[8069c6bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x8334bb98] 20:27:43.973 Scan finished successfully 20:28:00.595 Disk 0 MBR has been saved successfully to "C:\Users\Mike\Desktop\MBR.dat" 20:28:00.610 The log file has been saved successfully to "C:\Users\Mike\Desktop\aswMBR.txt" 20:28:29.015 Disk 0 MBR has been saved successfully to "C:\Users\Mike\Desktop\MBR.dat" 20:28:29.031 The log file has been saved successfully to "C:\Users\Mike\Desktop\aswMBR.txt" aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-05-11 14:41:16 —————————– 14:41:16.055 OS Version: Windows 6.0.6002 Service Pack 2 14:41:16.055 Number of processors: 2 586 0xF0D 14:41:16.055 ComputerName: MIKE-PC UserName: Mike 14:41:18.114 Initialize success 14:41:28.566 AVAST engine defs: 12051100 14:41:33.807 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 14:41:33.807 Disk 0 Vendor: ST3500630AS 3.ADG Size: 476940MB BusType: 3 14:41:33.870 Disk 0 MBR read successfully 14:41:33.885 Disk 0 MBR scan 14:41:33.963 Disk 0 Windows VISTA default MBR code 14:41:33.979 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 47 MB offset 63 14:41:34.010 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 10240 MB offset 98304 14:41:34.026 Disk 0 Partition 3 80 (A) 07 HPFS/NTFS NTFS 466651 MB offset 21069824 14:41:34.057 Disk 0 scanning sectors +976771072 14:41:34.197 Disk 0 scanning C:\Windows\system32\drivers 14:42:11.202 Service scanning 14:42:35.818 Modules scanning 14:43:00.201 Disk 0 trace - called modules: 14:43:00.232 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys 14:43:00.232 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x84304ac8] 14:43:00.248 3 CLASSPNP.SYS[85b9f8b3] -> nt!IofCallDriver -> [0x83ce24c8] 14:43:00.248 5 acpi.sys[806936bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x8334bb98] 14:43:01.621 AVAST engine scan C:\Windows 14:43:02.042 File: C:\Windows\CDProxyServ.exe **INFECTED** Win32:Rootkit-gen [Rtk] 14:43:52.588 AVAST engine scan C:\Windows\system32 14:48:19.756 AVAST engine scan C:\Windows\system32\drivers 14:48:59.273 AVAST engine scan C:\Users\Mike 14:55:12.381 Disk 0 MBR has been saved successfully to "C:\Users\Mike\Desktop\MBR.dat" 14:55:12.427 The log file has been saved successfully to "C:\Users\Mike\Desktop\aswMBR.txt"