sinnead
Same thing happened as before. Got almost all the way through and was told I had the wrong cd in. No log available.
Spyware / Malware / Virus Removal
Infected? [Solved]
91 min read
sinnead
And here's the security check. Missed this one, sorry!
Results of screen317's Security Check version 0.99.63
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Bitdefender Antivirus Free Edition
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
JavaFX 2.1.1
Java™ 6 Update 31
Java 7 Update 17
Java version out of Date!
Adobe Flash Player 11.6.602.180
Adobe Reader 10.1.6 Adobe Reader out of Date!
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Bitdefender Antivirus Free Edition gzserv.exe
Bitdefender Antivirus Free Edition gziface.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 8%
````````````````````End of Log``````````````````````
Results of screen317's Security Check version 0.99.63
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Bitdefender Antivirus Free Edition
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
JavaFX 2.1.1
Java™ 6 Update 31
Java 7 Update 17
Java version out of Date!
Adobe Flash Player 11.6.602.180
Adobe Reader 10.1.6 Adobe Reader out of Date!
````````Process Check: objlist.exe by Laurent````````
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Bitdefender Antivirus Free Edition gzserv.exe
Bitdefender Antivirus Free Edition gziface.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 8%
````````````````````End of Log``````````````````````
Satchfan
If there was no log then there were probably no problems. Apart from being told you had the wrong CD, how are things running?
Are there any outstanding problems?
sinnead
So far so good 
But I have to admit I'm really curious as to why I still can't get it to go into safe mode, or why the OTC "fix" freezes the computer up?
But I have to admit I'm really curious as to why I still can't get it to go into safe mode, or why the OTC "fix" freezes the computer up?
Satchfan
You mentioned before that the choices are there in the boot options and although it starts, it hangs: is this the same with both safe mode and safe mode with networking?I still can't get it to go into safe mode,
Run ESET Online Scan
IMPORTANT Please make sure you uncheck the box next to Remove found threats. Eset will detect anything that looks even slightly suspicious, which could include legitimate program files. If you do not uncheck the box, Eset will automatically remove all suspicious files which could leave some of your software inoperable.
Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.
Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
- click the Eset online Scanner button.
- for alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
o click on esetinstaller.exe to download the ESET Smart Installer. Save it to your desktop.
o double click on the Eset installer icon on your desktop. - check Yes, I accept the Terms of Use
- click the Start button.
- accept any security warnings from your browser.
- check Scan archives and Remove found threats.
- click Advanced settings and select the following:
o Scan potentially unwanted applications
o Scan for potentially unsafe applications
o Enable Anti-Stealth technology - ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
- when the scan completes, push List of found threats
- push Export to Text file and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Note - if ESET doesn't find any threats, no report will be created.
- push the back button.
- push Finish
Thanks
Satchfan
sinnead
No log, said no malicious items found.
Now, with the safe start. Tried both safe mode as well as safe mode with networking. Same thing happened. Here is a detailed description of what I'm doing, just in case.
Click start, click turn off computer, click restart. Windows shuts down. When the blue intel screen starts up I start tapping F8 just before the black screen comes up(sorry, can't remember what this one says). Next screen has me choose the boot method. I hit enter for Hard Disk, which drops me to the next one that says- 6th Master: WDC WD2500JS-60NCBI where I hit enter.
That then takes me to the option of safe mode, etc. I arrow down to either safe mode or safe mode with networking and hit enter again. At that point a bunch of code starts scrolling down the screen, then it beeps and I'm back at the original blue screen for intel again.
Satchfan
I'm not sure why you have to leave the first screen which should offer you 3 choices at the top:I start tapping F8 just before the black screen comes up(sorry, can't remember what this one says). Next screen has me choose the boot method. I hit enter for Hard Disk, which drops me to the next one that says- 6th Master
Safe Mode
Safe mode with networking
Safe mode with command prompt
Please see here for more information.
If you do that and it still gets stuck, can you tell me which file is at the bottom of the list when it hangs.
Thanks
Satchfan
sinnead
Okay, any ideas then? It says not to use the alternate method to try to enter safe mode if the F8 isn't working.
Satchfan
When you say "it" says, what do you mean?It says not to use the alternate method to try to enter safe mode if the F8 isn't working.
What are you attempting to do when this message comes up?
sinnead
Sorry- you're link to bleeping computer. I read through that post as well as the warnings about when NOT to attempt system config to access safe mode.
Satchfan
Yes - if you read on it explains that forcing it with msconfig could be a problem with an infected PC.the warnings about when NOT to attempt system config to access safe mode
If you use msconfig you need to tick the box for "safe mode". This makes the computer boot into safe mode each time it is started: to stop the computer from booting in safe mode all the time, this has to be reversed, ie the box for "safe mode" needs to be unchecked again.
If malware doesn't allow safe mode, you can't reach "msconfig" to reverse the action.
However, none of this relates to the problem you have.
You said you can see the options for safe mode and can choose the option but that it "hangs" at a certain point. As “sfc scannow” asked for a disk, it may be that you have corrupt/infected file.
Let’s try another tool to fix safe mode first.
Download & run SafeBootKeyRepair-CF from here:
It’ll only take a moment for it to finish running and then a log will be produced at C:\SafeBoot_Repair.txt. Please post that in your next reply.
Try booting into safe mode and if it still “hangs”, can you tell me the name of the file at the bottom of the list when it hangs.
Satchfan
sinnead
Downloaded it fine. Had to shut antivirus off to run it. Sat watching the small black window saying "please wait" for over 10 minutes. Nothing. No log. It simply wouldn't run.
Satchfan
Run ComboFix
I’d like you to try running it again.
Delete the version of ComboFix you have on your computer:
Download a new version which MUST be saved directly to your desktop. Choose save as and then make sure you choose Desktop
Download a new version from one of the following locations:
Link1
Link2
Link3
* IMPORTANT !!! Save ComboFix.exe to your Desktop
When finished, it will produce a log. Please include the ComboFix.txt in your next reply. It can be found at C:\ComboFix.txt
If it still doesn’t work, try running ComboFix this way:
Click the Windows “Start” button, select Run, then copy/paste the following bolded text into the run box and then click OK
combofix /nombr
Can you also please remember to tell me the name of the file that safe mode gets stuck on.
Satchfan
I’d like you to try running it again.
Delete the version of ComboFix you have on your computer:
Download a new version which MUST be saved directly to your desktop. Choose save as and then make sure you choose Desktop
Download a new version from one of the following locations:
Link1
Link2
Link3
* IMPORTANT !!! Save ComboFix.exe to your Desktop
- Disable your AntiVirus and AntiSpyware applications, as they may otherwise interfere with our tools. See here for programs that need to be disabled and instruction on how to disable them.
- Remember to re-enable them when we're done.
- Double click on ComboFix.exe & follow the prompts.
- As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
- Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue its malware removal procedures.
[external image: Posted Image]
Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
[external image: Posted Image]
Click on Yes, to continue scanning for malware.
When finished, it will produce a log. Please include the ComboFix.txt in your next reply. It can be found at C:\ComboFix.txt
If it still doesn’t work, try running ComboFix this way:
Click the Windows “Start” button, select Run, then copy/paste the following bolded text into the run box and then click OK
combofix /nombr
Can you also please remember to tell me the name of the file that safe mode gets stuck on.
Satchfan
sinnead
I can't get the name of the file it hangs on as it goes too fast to see, then suddenly goes back to the intel window with little warning. I can try video taping the process if you think that may help?
And by the way- combofix didn't shut itself down again, even after almost 30 minutes of it saying "producing log, please wait" Had to shut it down then search for the log.
ComboFix 13-05-12.01 - Sherry 13/05/2013 7:22:49.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1470.849 [GMT -6:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
AV: Bitdefender Antivirus Free Edition *Disabled/Updated* {9488E0FA-F058-4673-850E-E755F112BABC}
FW: *Enabled* {9488E0FA-F058-4673-850E-E755F112BABC}
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
—- Previous Run ——-
C:\Documents and Settings\All Users\Application Data\1367079887.bdinstall.bin
C:\Documents and Settings\All Users\Application Data\TEMP
C:\WINDOWS\system32\Cache
C:\WINDOWS\system32\Cache\1eeece3971bfd15f.fb
C:\WINDOWS\system32\Cache\26b2515a62af3429.fb
C:\WINDOWS\system32\Cache\26c630d098e22dd5.fb
C:\WINDOWS\system32\Cache\272512937d9e61a4.fb
C:\WINDOWS\system32\Cache\287204568329e189.fb
C:\WINDOWS\system32\Cache\28bc8f716fd76a47.fb
C:\WINDOWS\system32\Cache\2c53092c95605355.fb
C:\WINDOWS\system32\Cache\311c38d3977da3b5.fb
C:\WINDOWS\system32\Cache\31a0997e9a5b5eb3.fb
C:\WINDOWS\system32\Cache\32c84fe32bb74d60.fb
C:\WINDOWS\system32\Cache\3917078cb68ec657.fb
C:\WINDOWS\system32\Cache\41d7108c3d15c194.fb
C:\WINDOWS\system32\Cache\590ba23ce359fd0c.fb
C:\WINDOWS\system32\Cache\610289e025a3ee9a.fb
C:\WINDOWS\system32\Cache\651c5d3cdbfb8bd1.fb
C:\WINDOWS\system32\Cache\6c59ac5e7e7a3ad0.fb
C:\WINDOWS\system32\Cache\6d03dad1035885d3.fb
C:\WINDOWS\system32\Cache\95f567698be8a182.fb
C:\WINDOWS\system32\Cache\a8556537add6dfc5.fb
C:\WINDOWS\system32\Cache\ad10a52aff5e038d.fb
C:\WINDOWS\system32\Cache\ad117f6527af6f19.fb
C:\WINDOWS\system32\Cache\b0e1fee05a927328.fb
C:\WINDOWS\system32\Cache\c1fa887b03019701.fb
C:\WINDOWS\system32\Cache\c4d28dca2e7648be.fb
C:\WINDOWS\system32\Cache\c528a63c693e3f08.fb
C:\WINDOWS\system32\Cache\d201ef9910cd39de.fb
C:\WINDOWS\system32\Cache\d2e94710a5708128.fb
C:\WINDOWS\system32\Cache\d79b9dfe81484ec4.fb
C:\WINDOWS\system32\Cache\e0de16f883bea794.fb
C:\WINDOWS\system32\Cache\e6bff179d9aee27e.fb
C:\WINDOWS\system32\Cache\f20c7b2cdec6a609.fb
C:\WINDOWS\system32\Cache\f998975c9cc711ee.fb
C:\WINDOWS\system32\URTTemp
C:\WINDOWS\system32\URTTemp\regtlib.exe
((((((((((((((((((((((((( Files Created from 2013-04-13 to 2013-05-13 )))))))))))))))))))))))))))))))
2013-05-08 15:02:13 . 2013-05-08 15:03:21 ——– d—–w- C:\Program Files\Safari
2013-05-05 21:13:18 . 2008-04-14 00:12:12 116224 -c–a-w- C:\WINDOWS\system32\dllcache\xrxwiadr.dll
2013-05-05 21:13:13 . 2001-08-18 04:36:36 23040 -c–a-w- C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
2013-05-05 21:13:12 . 2008-04-14 00:12:12 18944 -c–a-w- C:\WINDOWS\system32\dllcache\xrxscnui.dll
2013-05-05 21:13:06 . 2001-08-18 04:37:02 27648 -c–a-w- C:\WINDOWS\system32\dllcache\xrxftplt.exe
2013-05-05 21:13:01 . 2001-08-18 04:37:02 4608 -c–a-w- C:\WINDOWS\system32\dllcache\xrxflnch.exe
2013-05-05 21:12:40 . 2001-08-18 04:37:02 99865 -c–a-w- C:\WINDOWS\system32\dllcache\xlog.exe
2013-05-05 21:12:34 . 2001-08-17 18:11:14 16970 -c–a-w- C:\WINDOWS\system32\dllcache\xem336n5.sys
2013-05-05 21:12:32 . 2004-08-04 04:29:50 19455 -c–a-w- C:\WINDOWS\system32\dllcache\wvchntxx.sys
2013-05-05 21:12:27 . 2008-04-13 18:46:24 19200 -c–a-w- C:\WINDOWS\system32\dllcache\wstcodec.sys
2013-05-05 21:12:25 . 2004-08-04 04:29:48 12063 -c–a-w- C:\WINDOWS\system32\dllcache\wsiintxx.sys
2013-05-05 21:12:23 . 2008-04-14 00:12:10 8192 -c–a-w- C:\WINDOWS\system32\dllcache\wshirda.dll
2013-05-05 21:12:04 . 2008-04-13 18:36:38 8832 -c–a-w- C:\WINDOWS\system32\dllcache\wmiacpi.sys
2013-05-05 21:12:01 . 2004-08-04 04:31:28 154624 -c–a-w- C:\WINDOWS\system32\dllcache\wlluc48.sys
2013-05-05 21:11:56 . 2001-08-17 18:12:38 34890 -c–a-w- C:\WINDOWS\system32\dllcache\wlandrv2.sys
2013-05-05 21:11:41 . 2001-08-17 19:28:14 771581 -c–a-w- C:\WINDOWS\system32\dllcache\winacisa.sys
2013-05-05 21:11:34 . 2001-08-18 04:36:34 53760 -c–a-w- C:\WINDOWS\system32\dllcache\wiamsmud.dll
2013-05-05 21:11:28 . 2001-08-18 04:36:34 87040 -c–a-w- C:\WINDOWS\system32\dllcache\wiafbdrv.dll
2013-05-05 21:11:16 . 2001-08-17 19:28:02 701386 -c–a-w- C:\WINDOWS\system32\dllcache\wdhaalba.sys
2013-05-05 21:11:14 . 2004-08-04 04:29:46 23615 -c–a-w- C:\WINDOWS\system32\dllcache\wch7xxnt.sys
2013-05-05 21:11:13 . 2008-04-13 18:45:38 31744 -c–a-w- C:\WINDOWS\system32\dllcache\wceusbsh.sys
2013-05-05 21:11:08 . 2001-08-17 18:10:30 35871 -c–a-w- C:\WINDOWS\system32\dllcache\wbfirdma.sys
2013-05-05 21:11:03 . 2004-08-04 04:29:44 33599 -c–a-w- C:\WINDOWS\system32\dllcache\watv04nt.sys
2013-05-05 21:11:01 . 2004-08-04 04:29:44 19551 -c–a-w- C:\WINDOWS\system32\dllcache\watv02nt.sys
2013-05-05 21:11:00 . 2004-08-04 04:29:42 29311 -c–a-w- C:\WINDOWS\system32\dllcache\watv01nt.sys
2013-05-05 21:10:57 . 2004-08-04 04:29:38 11775 -c–a-w- C:\WINDOWS\system32\dllcache\wadv05nt.sys
2013-05-05 21:10:55 . 2004-08-04 04:29:38 12127 -c–a-w- C:\WINDOWS\system32\dllcache\wadv02nt.sys
2013-05-05 21:10:54 . 2004-08-04 04:29:38 12415 -c–a-w- C:\WINDOWS\system32\dllcache\wadv01nt.sys
2013-05-05 21:10:48 . 2001-08-17 18:13:12 16925 -c–a-w- C:\WINDOWS\system32\dllcache\w940nd.sys
2013-05-05 21:10:43 . 2001-08-17 18:13:08 19016 -c–a-w- C:\WINDOWS\system32\dllcache\w926nd.sys
2013-05-05 21:10:37 . 2001-08-17 18:13:08 19528 -c–a-w- C:\WINDOWS\system32\dllcache\w840nd.sys
2013-05-05 21:10:25 . 2001-08-17 19:28:16 64605 -c–a-w- C:\WINDOWS\system32\dllcache\vvoice.sys
2013-05-05 21:10:19 . 2001-08-17 19:28:16 397502 -c–a-w- C:\WINDOWS\system32\dllcache\vpctcom.sys
2013-05-05 21:10:13 . 2001-08-17 19:28:14 604253 -c–a-w- C:\WINDOWS\system32\dllcache\vmodem.sys
2013-05-05 21:10:07 . 2001-08-17 18:14:12 249402 -c–a-w- C:\WINDOWS\system32\dllcache\vinwm.sys
2013-05-05 21:10:02 . 2001-08-17 19:49:04 24576 -c–a-w- C:\WINDOWS\system32\dllcache\viairda.sys
2013-05-05 21:10:01 . 2008-04-13 18:40:32 5376 -c–a-w- C:\WINDOWS\system32\dllcache\viaide.sys
2013-05-05 21:09:58 . 2008-04-14 00:12:08 53760 -c–a-w- C:\WINDOWS\system32\dllcache\vfwwdm32.dll
2013-05-05 21:09:51 . 2001-08-17 19:28:26 687999 -c–a-w- C:\WINDOWS\system32\dllcache\usrwdxjs.sys
2013-05-05 21:09:45 . 2001-08-17 19:28:14 765884 -c–a-w- C:\WINDOWS\system32\dllcache\usrti.sys
2013-05-05 21:09:40 . 2001-08-17 19:28:26 113762 -c–a-w- C:\WINDOWS\system32\dllcache\usrpda.sys
2013-05-05 21:09:35 . 2001-08-17 19:28:24 7556 -c–a-w- C:\WINDOWS\system32\dllcache\usroslba.sys
2013-05-05 21:09:29 . 2001-08-17 19:28:24 224802 -c–a-w- C:\WINDOWS\system32\dllcache\usr1807a.sys
2013-05-05 21:09:24 . 2001-08-17 19:28:18 794399 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806v.sys
2013-05-05 21:09:19 . 2001-08-17 19:28:16 793598 -c–a-w- C:\WINDOWS\system32\dllcache\usr1806.sys
2013-05-05 21:09:14 . 2001-08-17 19:28:16 794654 -c–a-w- C:\WINDOWS\system32\dllcache\usr1801.sys
2013-05-05 21:09:11 . 2008-04-13 18:45:36 20608 -c–a-w- C:\WINDOWS\system32\dllcache\usbuhci.sys
2013-05-05 21:09:09 . 2008-04-13 18:45:36 26112 -c–a-w- C:\WINDOWS\system32\dllcache\usbser.sys
2013-05-05 21:09:05 . 2004-08-04 04:31:26 32384 -c–a-w- C:\WINDOWS\system32\dllcache\usb101et.sys
2013-05-05 21:08:56 . 2001-08-18 04:36:34 94720 -c–a-w- C:\WINDOWS\system32\dllcache\umaxud32.dll
2013-05-05 21:08:51 . 2001-08-18 04:36:34 28160 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu40.dll
2013-05-05 21:08:46 . 2001-08-18 04:36:34 26624 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu22.dll
2013-05-05 21:08:41 . 2001-08-18 04:36:34 69632 -c–a-w- C:\WINDOWS\system32\dllcache\umaxu12.dll
2013-05-05 21:08:36 . 2001-08-18 04:36:34 50688 -c–a-w- C:\WINDOWS\system32\dllcache\umaxscan.dll
2013-05-05 21:08:31 . 2001-08-17 19:58:12 22912 -c–a-w- C:\WINDOWS\system32\dllcache\umaxpcls.sys
2013-05-05 21:08:27 . 2001-08-18 04:36:34 50176 -c–a-w- C:\WINDOWS\system32\dllcache\umaxp60.dll
2013-05-05 21:08:22 . 2001-08-18 04:36:34 47616 -c–a-w- C:\WINDOWS\system32\dllcache\umaxcam.dll
2013-05-05 21:08:17 . 2001-08-18 04:36:34 211968 -c–a-w- C:\WINDOWS\system32\dllcache\um54scan.dll
2013-05-05 21:08:11 . 2001-08-18 04:36:34 216064 -c–a-w- C:\WINDOWS\system32\dllcache\um34scan.dll
2013-05-05 21:08:06 . 2001-08-17 19:52:22 36736 -c–a-w- C:\WINDOWS\system32\dllcache\ultra.sys
2013-05-05 21:08:00 . 2001-08-17 19:48:14 11520 -c–a-w- C:\WINDOWS\system32\dllcache\twotrack.sys
2013-05-05 21:07:46 . 2001-08-17 18:51:22 166784 -c–a-w- C:\WINDOWS\system32\dllcache\tridxpm.sys
2013-05-05 21:07:41 . 2001-08-18 04:36:32 525568 -c–a-w- C:\WINDOWS\system32\dllcache\tridxp.dll
2013-05-05 21:07:36 . 2001-08-17 18:51:16 159232 -c–a-w- C:\WINDOWS\system32\dllcache\tridkbm.sys
2013-05-05 21:07:31 . 2001-08-17 20:56:06 440576 -c–a-w- C:\WINDOWS\system32\dllcache\tridkb.dll
2013-05-05 21:07:26 . 2001-08-17 18:51:16 222336 -c–a-w- C:\WINDOWS\system32\dllcache\trid3dm.sys
2013-05-05 21:07:21 . 2001-08-17 20:56:06 315520 -c–a-w- C:\WINDOWS\system32\dllcache\trid3d.dll
2013-05-05 21:07:16 . 2001-08-17 18:12:12 34375 -c–a-w- C:\WINDOWS\system32\dllcache\tpro4.sys
2013-05-05 21:07:11 . 2001-08-18 04:35:42 42496 -c–a-w- C:\WINDOWS\system32\dllcache\tp4res.dll
2013-05-05 21:07:09 . 2008-04-14 00:12:38 82944 -c–a-w- C:\WINDOWS\system32\dllcache\tp4mon.exe
2013-05-05 21:07:04 . 2001-08-18 04:36:32 31744 -c–a-w- C:\WINDOWS\system32\dllcache\tp4.dll
2013-05-05 21:06:54 . 2001-08-17 19:51:56 4992 -c–a-w- C:\WINDOWS\system32\dllcache\toside.sys
2013-05-05 21:06:49 . 2001-08-17 20:02:00 230912 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd03.sys
2013-05-05 21:06:44 . 2001-08-17 20:01:52 241664 -c–a-w- C:\WINDOWS\system32\dllcache\tosdvd02.sys
2013-05-05 21:06:39 . 2001-08-17 18:10:26 28232 -c–a-w- C:\WINDOWS\system32\dllcache\tos4mo.sys
2013-05-05 21:06:32 . 2001-08-17 18:14:26 123995 -c–a-w- C:\WINDOWS\system32\dllcache\tjisdn.sys
2013-05-05 21:06:25 . 2001-08-17 18:51:10 138528 -c–a-w- C:\WINDOWS\system32\dllcache\tgiulnt5.sys
2013-05-05 21:06:20 . 2001-08-17 20:56:04 81408 -c–a-w- C:\WINDOWS\system32\dllcache\tgiul50.dll
2013-05-05 21:06:18 . 2008-04-13 18:40:50 149376 -c–a-w- C:\WINDOWS\system32\dllcache\tffsport.sys
2013-05-05 21:06:10 . 2001-08-17 18:13:00 17129 -c–a-w- C:\WINDOWS\system32\dllcache\tdkcd31.sys
2013-05-05 21:06:06 . 2001-08-17 18:13:00 37961 -c–a-w- C:\WINDOWS\system32\dllcache\tdk100b.sys
2013-05-05 21:05:55 . 2001-08-17 19:49:46 30464 -c–a-w- C:\WINDOWS\system32\dllcache\tbatm155.sys
2013-05-05 21:05:49 . 2001-08-17 19:52:54 7040 -c–a-w- C:\WINDOWS\system32\dllcache\tandqic.sys
2013-05-05 21:05:44 . 2001-08-17 18:50:12 36640 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4mini.sys
2013-05-05 21:05:39 . 2001-08-17 20:56:04 172768 -c–a-w- C:\WINDOWS\system32\dllcache\t2r4disp.dll
2013-05-05 21:05:30 . 2001-08-17 20:07:36 32640 -c–a-w- C:\WINDOWS\system32\dllcache\symc8xx.sys
2013-05-05 21:05:26 . 2001-08-17 20:07:34 16256 -c–a-w- C:\WINDOWS\system32\dllcache\symc810.sys
2013-05-05 21:05:22 . 2001-08-17 20:07:42 30688 -c–a-w- C:\WINDOWS\system32\dllcache\sym_u3.sys
2013-05-05 21:05:17 . 2001-08-17 20:07:40 28384 -c–a-w- C:\WINDOWS\system32\dllcache\sym_hi.sys
2013-05-05 21:05:12 . 2001-08-18 04:36:32 94293 -c–a-w- C:\WINDOWS\system32\dllcache\sxports.dll
2013-05-05 21:05:08 . 2001-08-17 19:50:58 103936 -c–a-w- C:\WINDOWS\system32\dllcache\sx.sys
2013-05-05 21:05:03 . 2001-08-17 20:02:56 3968 -c–a-w- C:\WINDOWS\system32\dllcache\swusbflt.sys
2013-05-05 21:04:59 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpidflt.dll
2013-05-05 21:04:54 . 2001-08-18 04:36:32 10240 -c–a-w- C:\WINDOWS\system32\dllcache\swpdflt2.dll
2013-05-05 21:04:50 . 2001-08-18 04:36:32 53760 -c–a-w- C:\WINDOWS\system32\dllcache\sw_wheel.dll
2013-05-05 21:04:45 . 2001-08-18 04:36:32 41472 -c–a-w- C:\WINDOWS\system32\dllcache\sw_effct.dll
2013-05-05 21:04:42 . 2008-04-13 18:46:22 15232 -c–a-w- C:\WINDOWS\system32\dllcache\streamip.sys
2013-05-05 21:04:37 . 2001-08-18 04:36:32 155648 -c–a-w- C:\WINDOWS\system32\dllcache\stlnprop.dll
2013-05-05 21:04:33 . 2001-08-18 04:36:32 53248 -c–a-w- C:\WINDOWS\system32\dllcache\stlncoin.dll
2013-05-05 21:04:29 . 2001-08-17 18:18:18 285760 -c–a-w- C:\WINDOWS\system32\dllcache\stlnata.sys
2013-05-05 21:04:23 . 2001-08-17 19:51:20 16896 -c–a-w- C:\WINDOWS\system32\dllcache\stcusb.sys
2013-05-05 21:04:14 . 2001-08-17 18:11:08 48736 -c–a-w- C:\WINDOWS\system32\dllcache\srwlnd5.sys
2013-05-05 21:04:06 . 2001-08-18 04:36:32 99328 -c–a-w- C:\WINDOWS\system32\dllcache\srusd.dll
2013-05-05 21:03:58 . 2001-08-18 04:36:32 24660 -c–a-w- C:\WINDOWS\system32\dllcache\spxupchk.dll
2013-05-05 21:03:50 . 2001-08-17 19:51:00 61824 -c–a-w- C:\WINDOWS\system32\dllcache\speed.sys
2013-05-05 21:03:46 . 2001-08-18 04:36:32 106584 -c–a-w- C:\WINDOWS\system32\dllcache\spdports.dll
2013-05-05 21:03:41 . 2001-08-17 20:07:44 19072 -c–a-w- C:\WINDOWS\system32\dllcache\sparrow.sys
2013-05-05 21:03:36 . 2001-08-17 19:56:16 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonypvu1.sys
2013-05-05 21:03:32 . 2001-08-17 18:51:22 37040 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.sys
2013-05-05 21:03:27 . 2001-08-18 04:36:32 114688 -c–a-w- C:\WINDOWS\system32\dllcache\sonypi.dll
2013-05-05 21:03:23 . 2001-08-17 18:51:20 20752 -c–a-w- C:\WINDOWS\system32\dllcache\sonync.sys
2013-05-05 21:03:18 . 2001-08-17 19:53:04 9600 -c–a-w- C:\WINDOWS\system32\dllcache\sonymc.sys
2013-05-05 21:03:17 . 2008-04-13 18:40:52 7552 -c–a-w- C:\WINDOWS\system32\dllcache\sonyait.sys
2013-05-05 21:03:11 . 2001-08-17 19:53:14 7040 -c–a-w- C:\WINDOWS\system32\dllcache\snyaitmc.sys
2013-05-05 21:02:52 . 2001-08-17 18:51:00 58368 -c–a-w- C:\WINDOWS\system32\dllcache\smiminib.sys
2013-05-05 21:02:45 . 2001-08-17 20:56:04 147200 -c–a-w- C:\WINDOWS\system32\dllcache\smidispb.dll
2013-05-05 21:02:39 . 2001-08-17 18:12:48 25034 -c–a-w- C:\WINDOWS\system32\dllcache\smcpwr2n.sys
2013-05-05 21:02:34 . 2001-08-17 18:10:28 35913 -c–a-w- C:\WINDOWS\system32\dllcache\smcirda.sys
2013-05-05 21:02:30 . 2001-08-17 18:12:46 24576 -c–a-w- C:\WINDOWS\system32\dllcache\smc8000n.sys
2013-05-05 21:02:25 . 2001-08-17 19:57:56 6784 -c–a-w- C:\WINDOWS\system32\dllcache\smbhc.sys
2013-05-05 21:02:24 . 2008-04-13 18:36:34 6912 -c–a-w- C:\WINDOWS\system32\dllcache\smbclass.sys
2013-05-05 21:02:22 . 2008-04-13 18:36:34 16000 -c–a-w- C:\WINDOWS\system32\dllcache\smbbatt.sys
2013-05-05 21:02:17 . 2001-08-18 04:36:32 45568 -c–a-w- C:\WINDOWS\system32\dllcache\smb3w.dll
2013-05-05 21:02:13 . 2001-08-18 04:36:32 33792 -c–a-w- C:\WINDOWS\system32\dllcache\smb0w.dll
2013-05-05 21:02:07 . 2001-08-18 04:36:32 28672 -c–a-w- C:\WINDOWS\system32\dllcache\sma0w.dll
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2013-05-08 23:12:20 . 2012-04-08 14:12:52 691592 —-a-w- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-05-08 23:12:20 . 2011-06-13 00:36:04 71048 —-a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-04-27 15:35:23 . 2013-03-28 22:17:50 13024 —-a-w- C:\WINDOWS\system32\drivers\SWDUMon.sys
2013-04-06 22:32:14 . 2013-04-06 22:32:14 445016 —-a-w- C:\WINDOWS\system32\wrap_oal.dll
2013-04-06 22:32:14 . 2013-04-06 22:32:14 109144 —-a-w- C:\WINDOWS\system32\OpenAL32.dll
2013-04-05 16:01:27 . 2013-04-04 14:39:11 33112 —-a-w- C:\WINDOWS\system32\drivers\avgtpx86.sys
2013-04-04 20:50:32 . 2010-10-27 11:21:04 22856 —-a-w- C:\WINDOWS\system32\drivers\mbam.sys
2013-03-28 22:23:37 . 2013-03-28 22:23:37 0 —-a-w- C:\WINDOWS\system32\TempWmicBatchFile.bat
2013-03-26 13:13:07 . 2013-03-26 13:13:29 94112 —-a-w- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-03-26 13:13:02 . 2012-03-24 20:23:39 143872 —-a-w- C:\WINDOWS\system32\javacpl.cpl
2013-03-26 13:13:01 . 2012-07-15 13:39:56 861088 —-a-w- C:\WINDOWS\system32\npDeployJava1.dll
2013-03-26 13:13:01 . 2010-11-05 03:22:53 782240 —-a-w- C:\WINDOWS\system32\deployJava1.dll
2013-03-08 08:36:22 . 2006-03-15 12:00:00 293376 —-a-w- C:\WINDOWS\system32\winsrv.dll
2013-03-07 01:28:24 . 2006-03-15 12:00:00 2193408 —-a-w- C:\WINDOWS\system32\ntoskrnl.exe
2013-03-07 00:50:28 . 2004-08-03 22:59:00 2070016 —-a-w- C:\WINDOWS\system32\ntkrnlpa.exe
2013-03-02 02:06:31 . 2006-03-15 12:00:00 916480 —-a-w- C:\WINDOWS\system32\wininet.dll
2013-03-02 02:06:30 . 2006-03-15 12:00:00 43520 —-a-w- C:\WINDOWS\system32\licmgr10.dll
2013-03-02 02:06:30 . 2006-03-15 12:00:00 1469440 ——w- C:\WINDOWS\system32\inetcpl.cpl
2013-03-02 01:25:02 . 2006-03-15 12:00:00 1867264 —-a-w- C:\WINDOWS\system32\win32k.sys
2013-03-02 01:08:47 . 2006-03-15 12:00:00 385024 —-a-w- C:\WINDOWS\system32\html.iec
2013-02-27 07:56:51 . 2010-10-26 22:23:11 2067456 —-a-w- C:\WINDOWS\system32\mstscax.dll
Satchfan
Hi Sinnead
The ComboFix log you sent was not complete. Can you send the rest.
Thanks
Satchfan
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI