jeff matthews
Topic Starter
Please refer to this link to get caught up on what i been experiencing with this machine, if you have any questions, just ask.
http://forums.whatthetech.com/index.php?showtopic=126752
Here is my DDS log:
DDS (Ver_2012-11-20.01) - NTFS_AMD64 NETWORK
Internet Explorer: 10.0.9200.16660 BrowserJavaVersion: 10.25.2
Run by [removed] at 20:24:49 on 2013-08-19
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8126.7093 [GMT -7:00]
.
AV: avast! Internet Security *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Internet Security *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: avast! Internet Security *Enabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uProxyOverride =
BHO: DivX Plus Web Player HTML5 : {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: GetSavin 5.0: {913E5B85-561D-4532-B8CA-B08D28F2C80F} -
BHO: {C4401D0E-088C-4AD4-B14A-8D6B1181A5E4} -
BHO: SelectionLinks: {D9C8D61C-A7E4-4CA2-8427-CCAF098EB352} -
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
uRun: [GoogleChromeAutoLaunch_E21A55733DE47A9C91846541BA1A406D] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" –no-startup-window
uRun: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
uRun: [Akamai NetSession Interface] "C:\Users\Ashley\AppData\Local\Akamai\netsession_win.exe"
mRun: [IMSS] "C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe"
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
mRun: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
mRun: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [wmime] C:\Program Files (x86)\HEM\wmime.exe /STARTUP
mRun: [PowerDVD13Agent] "C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe"
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
TCP: NameServer = 192.168.0.1 205.171.2.65
TCP: Interfaces\{03EA97B4-FE79-4431-946A-69738F82AE95} : DHCPNameServer = 192.168.0.1 [removed]
SSODL: WebCheck -
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe" –configure-user-settings –verbose-logging –system-level –multi-install –chrome
x64-BHO: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-TB: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
x64-Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
.
INFO: x64-HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
x64-SSODL: WebCheck -
.
============= SERVICES / DRIVERS ===============
.
R0 aswKbd;aswKbd;C:\Windows\System32\drivers\aswKbd.sys [2013-4-19 22600]
R0 aswNdis;avast! Firewall NDIS Filter Service;C:\Windows\System32\drivers\aswNdis.sys [2013-4-19 12368]
R0 aswNdis2;avast! Firewall Core Firewall Service;C:\Windows\System32\drivers\aswNdis2.sys [2013-4-19 270824]
R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2013-4-7 19264]
R1 aswFW;avast! TDI Firewall driver;C:\Windows\System32\drivers\aswFW.sys [2013-4-19 131232]
R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2013-6-14 45856]
R1 ndisrd;WinpkFilter LightWeight Filter;C:\Windows\System32\drivers\ndisrd.sys [2013-4-7 32400]
R3 ICCWDT;Intel® Watchdog Timer Driver (Intel® WDT);C:\Windows\System32\drivers\ICCWDT.sys [2012-5-17 26136]
R3 iusb3hub;Intel® USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2013-4-7 357184]
R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2013-4-7 789824]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2013-4-7 726160]
S0 aswRvrt;aswRvrt;C:\Windows\System32\drivers\aswRvrt.sys [2013-4-19 65336]
S0 aswVmm;aswVmm;C:\Windows\System32\drivers\aswVmm.sys [2013-4-19 189936]
S1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2013-4-19 1030952]
S1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2013-4-19 378944]
S2 {09F57980-3432-4AFC-957D-27AC45FAE1F5};Power Control [2013/07/05 22:47:41];C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [2013-3-19 130320]
S2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-3-28 241152]
S2 asComSvc;ASUS Com Service;C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [2012-6-1 920736]
S2 asHmComSvc;ASUS HM Com Service;C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [2012-6-1 951936]
S2 AsSysCtrlService;ASUS System Control Service;C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [2013-4-7 149120]
S2 AsusFanControlService;AsusFanControlService;C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.08\AsusFanControlService.exe [2013-4-7 324608]
S2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2013-4-19 33400]
S2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2013-4-19 80816]
S2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-6-12 46808]
S2 avast! Firewall;avast! Firewall;C:\Program Files\AVAST Software\Avast\afwServ.exe [2013-6-12 137960]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 CyberLink PowerDVD 13 Media Server Monitor Service;CyberLink PowerDVD 13 Media Server Monitor Service;C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [2013-7-5 77576]
S2 CyberLink PowerDVD 13 Media Server Service;CyberLink PowerDVD 13 Media Server Service;C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [2013-7-5 323336]
S2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-6-19 634632]
S2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe [2013-4-7 166720]
S2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2013-4-15 1153368]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-1-18 383264]
S2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2013-4-7 365376]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2013-2-14 96768]
S3 hitmanpro37;HitmanPro 3.7 Support Driver;C:\Windows\System32\drivers\hitmanpro37.sys [2013-6-19 32000]
S3 ICCS;Intel® Integrated Clock Controller Service - Intel® ICCS;C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [2013-4-7 160768]
S3 npggsvc;nProtect GameGuard Service;C:\Windows\System32\GameMon.des -service –> C:\Windows\System32\GameMon.des -service [?]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-4-7 20992]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-4-30 59392]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-4-11 1255736]
S4 vToolbarUpdater15.2.0;vToolbarUpdater15.2.0;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe –> C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [?]
.
=============== Created Last 30 ================
.
2013-08-20 00:29:09 5113896 —-a-w- C:\Windows\SysWow64\GameMon.des
2013-08-20 00:28:13 5174 —-a-w- C:\Windows\SysWow64\nppt9x.vxd
2013-08-20 00:28:13 4682 —-a-w- C:\Windows\SysWow64\npptNT2.sys
2013-08-20 00:27:51 ——– d—–w- C:\Program Files\Common Files\INCA Shared
2013-08-18 23:14:19 ——– d—–w- C:\Program Files\Gpotato
2013-08-18 01:41:23 ——– d—–w- C:\ProgramData\NexonUS
2013-08-18 01:36:13 ——– d—–w- C:\Users\Ashley\AppData\Roaming\Xfire
2013-08-18 01:36:10 ——– d—–w- C:\ProgramData\Xfire
2013-08-18 01:36:09 ——– d—–w- C:\Program Files (x86)\Xfire
2013-08-18 01:34:58 ——– d—–w- C:\Program Files (x86)\SealOnline Blades of Destiny
2013-08-17 20:34:04 ——– d—–w- C:\Users\Ashley\AppData\Local\Akamai
2013-08-17 20:34:02 ——– d—–w- C:\AeriaGames
2013-08-17 20:20:00 ——– d—–w- C:\Users\Ashley\AppData\Local\PMB Files
2013-08-17 20:19:58 ——– d—–w- C:\ProgramData\PMB Files
2013-08-17 20:18:05 ——– d—–w- C:\Program Files (x86)\Pando Networks
2013-08-16 09:20:17 9460976 —-a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1047A39E-00BC-419C-9E56-526A2E407D44}\mpengine.dll
2013-08-14 15:01:13 ——– d—–w- C:\Windows\System32\MRT
2013-08-14 10:41:01 2048 —-a-w- C:\Windows\SysWow64\tzres.dll
2013-08-14 10:41:01 2048 —-a-w- C:\Windows\System32\tzres.dll
2013-08-14 02:27:21 ——– d—–w- C:\Users\Ashley\AppData\Local\ATI
2013-08-14 02:24:41 0 —-a-w- C:\Windows\ativpsrm.bin
2013-08-14 02:19:41 ——– d—–w- C:\ProgramData\AMD
2013-08-14 02:19:40 ——– d—–w- C:\Program Files (x86)\AMD AVT
2013-08-14 02:19:36 ——– d—–w- C:\Program Files (x86)\Common Files\ATI Technologies
2013-08-14 02:17:37 ——– d—–w- C:\Program Files\Common Files\ATI Technologies
2013-08-14 02:17:28 ——– d—–w- C:\Program Files (x86)\ATI Technologies
2013-08-14 02:17:20 ——– d—–w- C:\Program Files\ATI Technologies
2013-08-14 02:17:16 ——– d—–w- C:\Program Files\ATI
2013-08-14 02:15:53 ——– d—–w- C:\AMD
2013-08-12 01:16:29 ——– d–h–w- C:\ProgramData\CanonIJEGV
2013-08-07 22:55:20 ——– d—–w- C:\Program Files\CPUID
.
==================== Find3M ====================
.
2013-07-26 05:13:37 2241024 —-a-w- C:\Windows\System32\wininet.dll
2013-07-26 05:12:08 3958784 —-a-w- C:\Windows\System32\jscript9.dll
2013-07-26 05:12:04 136704 —-a-w- C:\Windows\System32\iesysprep.dll
2013-07-26 05:12:03 67072 —-a-w- C:\Windows\System32\iesetup.dll
2013-07-26 03:35:08 2706432 —-a-w- C:\Windows\System32\mshtml.tlb
2013-07-26 03:13:24 1767936 —-a-w- C:\Windows\SysWow64\wininet.dll
2013-07-26 03:12:04 2877440 —-a-w- C:\Windows\SysWow64\jscript9.dll
2013-07-26 03:12:00 61440 —-a-w- C:\Windows\SysWow64\iesetup.dll
2013-07-26 03:12:00 109056 —-a-w- C:\Windows\SysWow64\iesysprep.dll
2013-07-26 02:49:14 2706432 —-a-w- C:\Windows\SysWow64\mshtml.tlb
2013-07-26 02:39:38 89600 —-a-w- C:\Windows\System32\RegisterIEPKEYs.exe
2013-07-26 01:59:38 71680 —-a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
2013-07-25 09:25:54 1888768 —-a-w- C:\Windows\System32\WMVDECOD.DLL
2013-07-25 08:57:27 1620992 —-a-w- C:\Windows\SysWow64\WMVDECOD.DLL
2013-07-09 06:03:30 5550528 —-a-w- C:\Windows\System32\ntoskrnl.exe
2013-07-09 05:54:22 1732032 —-a-w- C:\Windows\System32\ntdll.dll
2013-07-09 05:53:12 243712 —-a-w- C:\Windows\System32\wow64.dll
2013-07-09 05:52:52 224256 —-a-w- C:\Windows\System32\wintrust.dll
2013-07-09 05:51:16 1217024 —-a-w- C:\Windows\System32\rpcrt4.dll
2013-07-09 05:46:20 184320 —-a-w- C:\Windows\System32\cryptsvc.dll
2013-07-09 05:46:20 1472512 —-a-w- C:\Windows\System32\crypt32.dll
2013-07-09 05:46:20 139776 —-a-w- C:\Windows\System32\cryptnet.dll
2013-07-09 05:03:34 3968960 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2013-07-09 05:03:34 3913664 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe
2013-07-09 04:53:47 1292192 —-a-w- C:\Windows\SysWow64\ntdll.dll
2013-07-09 04:52:33 663552 —-a-w- C:\Windows\SysWow64\rpcrt4.dll
2013-07-09 04:52:33 5120 —-a-w- C:\Windows\SysWow64\wow32.dll
2013-07-09 04:52:10 175104 —-a-w- C:\Windows\SysWow64\wintrust.dll
2013-07-09 04:46:31 140288 —-a-w- C:\Windows\SysWow64\cryptsvc.dll
2013-07-09 04:46:31 1166848 —-a-w- C:\Windows\SysWow64\crypt32.dll
2013-07-09 04:46:31 103936 —-a-w- C:\Windows\SysWow64\cryptnet.dll
2013-07-09 04:45:07 44032 —-a-w- C:\Windows\apppatch\acwow64.dll
2013-07-09 02:49:42 25600 —-a-w- C:\Windows\SysWow64\setup16.exe
2013-07-09 02:49:41 7680 —-a-w- C:\Windows\SysWow64\instnm.exe
2013-07-09 02:49:39 14336 —-a-w- C:\Windows\SysWow64\ntvdm64.dll
2013-07-09 02:49:38 2048 —-a-w- C:\Windows\SysWow64\user.exe
2013-07-06 06:03:53 1910208 —-a-w- C:\Windows\System32\drivers\tcpip.sys
2013-06-27 20:58:01 189936 —-a-w- C:\Windows\System32\drivers\aswVmm.sys
2013-06-27 20:58:01 1030952 —-a-w- C:\Windows\System32\drivers\aswSnx.sys
2013-06-22 21:18:24 96168 —-a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-22 21:18:22 867240 —-a-w- C:\Windows\SysWow64\npDeployJava1.dll
2013-06-22 21:18:22 789416 —-a-w- C:\Windows\SysWow64\deployJava1.dll
2013-06-19 22:45:40 173 —-a-w- C:\Windows\DeleteOnReboot.bat
2013-06-19 21:19:53 32000 —-a-w- C:\Windows\System32\drivers\hitmanpro37.sys
2013-06-15 04:35:40 1111552 —-a-w- C:\Windows\System32\rdpcorets.dll
2013-06-15 04:32:16 39936 —-a-w- C:\Windows\System32\drivers\tssecsrv.sys
2013-06-14 22:16:45 45856 —-a-w- C:\Windows\System32\drivers\avgtpx64.sys
2013-06-05 15:03:35 9728 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-05 03:34:27 3153920 —-a-w- C:\Windows\System32\win32k.sys
2013-06-04 06:00:13 624128 —-a-w- C:\Windows\System32\qedit.dll
2013-06-04 04:53:07 509440 —-a-w- C:\Windows\SysWow64\qedit.dll
.
============= FINISH: 20:25:52.21 ===============
http://forums.whatthetech.com/index.php?showtopic=126752
Here is my DDS log:
DDS (Ver_2012-11-20.01) - NTFS_AMD64 NETWORK
Internet Explorer: 10.0.9200.16660 BrowserJavaVersion: 10.25.2
Run by [removed] at 20:24:49 on 2013-08-19
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8126.7093 [GMT -7:00]
.
AV: avast! Internet Security *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Internet Security *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: avast! Internet Security *Enabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uProxyOverride =
BHO: DivX Plus Web Player HTML5 : {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: GetSavin 5.0: {913E5B85-561D-4532-B8CA-B08D28F2C80F} -
BHO: {C4401D0E-088C-4AD4-B14A-8D6B1181A5E4} -
BHO: SelectionLinks: {D9C8D61C-A7E4-4CA2-8427-CCAF098EB352} -
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
uRun: [GoogleChromeAutoLaunch_E21A55733DE47A9C91846541BA1A406D] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" –no-startup-window
uRun: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
uRun: [Akamai NetSession Interface] "C:\Users\Ashley\AppData\Local\Akamai\netsession_win.exe"
mRun: [IMSS] "C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe"
mRun: [USB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
mRun: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
mRun: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
mRun: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [wmime] C:\Program Files (x86)\HEM\wmime.exe /STARTUP
mRun: [PowerDVD13Agent] "C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe"
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
TCP: NameServer = 192.168.0.1 205.171.2.65
TCP: Interfaces\{03EA97B4-FE79-4431-946A-69738F82AE95} : DHCPNameServer = 192.168.0.1 [removed]
SSODL: WebCheck -
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.110\Installer\chrmstp.exe" –configure-user-settings –verbose-logging –system-level –multi-install –chrome
x64-BHO: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-TB: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
x64-Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
.
INFO: x64-HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
x64-SSODL: WebCheck -
.
============= SERVICES / DRIVERS ===============
.
R0 aswKbd;aswKbd;C:\Windows\System32\drivers\aswKbd.sys [2013-4-19 22600]
R0 aswNdis;avast! Firewall NDIS Filter Service;C:\Windows\System32\drivers\aswNdis.sys [2013-4-19 12368]
R0 aswNdis2;avast! Firewall Core Firewall Service;C:\Windows\System32\drivers\aswNdis2.sys [2013-4-19 270824]
R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;C:\Windows\System32\drivers\iusb3hcs.sys [2013-4-7 19264]
R1 aswFW;avast! TDI Firewall driver;C:\Windows\System32\drivers\aswFW.sys [2013-4-19 131232]
R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2013-6-14 45856]
R1 ndisrd;WinpkFilter LightWeight Filter;C:\Windows\System32\drivers\ndisrd.sys [2013-4-7 32400]
R3 ICCWDT;Intel® Watchdog Timer Driver (Intel® WDT);C:\Windows\System32\drivers\ICCWDT.sys [2012-5-17 26136]
R3 iusb3hub;Intel® USB 3.0 Hub Driver;C:\Windows\System32\drivers\iusb3hub.sys [2013-4-7 357184]
R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;C:\Windows\System32\drivers\iusb3xhc.sys [2013-4-7 789824]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2013-4-7 726160]
S0 aswRvrt;aswRvrt;C:\Windows\System32\drivers\aswRvrt.sys [2013-4-19 65336]
S0 aswVmm;aswVmm;C:\Windows\System32\drivers\aswVmm.sys [2013-4-19 189936]
S1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2013-4-19 1030952]
S1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2013-4-19 378944]
S2 {09F57980-3432-4AFC-957D-27AC45FAE1F5};Power Control [2013/07/05 22:47:41];C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [2013-3-19 130320]
S2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-3-28 241152]
S2 asComSvc;ASUS Com Service;C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [2012-6-1 920736]
S2 asHmComSvc;ASUS HM Com Service;C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [2012-6-1 951936]
S2 AsSysCtrlService;ASUS System Control Service;C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [2013-4-7 149120]
S2 AsusFanControlService;AsusFanControlService;C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.08\AsusFanControlService.exe [2013-4-7 324608]
S2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2013-4-19 33400]
S2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2013-4-19 80816]
S2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-6-12 46808]
S2 avast! Firewall;avast! Firewall;C:\Program Files\AVAST Software\Avast\afwServ.exe [2013-6-12 137960]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 CyberLink PowerDVD 13 Media Server Monitor Service;CyberLink PowerDVD 13 Media Server Monitor Service;C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [2013-7-5 77576]
S2 CyberLink PowerDVD 13 Media Server Service;CyberLink PowerDVD 13 Media Server Service;C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [2013-7-5 323336]
S2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-6-19 634632]
S2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe [2013-4-7 166720]
S2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2013-4-15 1153368]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-1-18 383264]
S2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2013-4-7 365376]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2013-2-14 96768]
S3 hitmanpro37;HitmanPro 3.7 Support Driver;C:\Windows\System32\drivers\hitmanpro37.sys [2013-6-19 32000]
S3 ICCS;Intel® Integrated Clock Controller Service - Intel® ICCS;C:\Program Files (x86)\Intel\Intel® Integrated Clock Controller Service\ICCProxy.exe [2013-4-7 160768]
S3 npggsvc;nProtect GameGuard Service;C:\Windows\System32\GameMon.des -service –> C:\Windows\System32\GameMon.des -service [?]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-4-7 20992]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-4-30 59392]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-4-11 1255736]
S4 vToolbarUpdater15.2.0;vToolbarUpdater15.2.0;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe –> C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [?]
.
=============== Created Last 30 ================
.
2013-08-20 00:29:09 5113896 —-a-w- C:\Windows\SysWow64\GameMon.des
2013-08-20 00:28:13 5174 —-a-w- C:\Windows\SysWow64\nppt9x.vxd
2013-08-20 00:28:13 4682 —-a-w- C:\Windows\SysWow64\npptNT2.sys
2013-08-20 00:27:51 ——– d—–w- C:\Program Files\Common Files\INCA Shared
2013-08-18 23:14:19 ——– d—–w- C:\Program Files\Gpotato
2013-08-18 01:41:23 ——– d—–w- C:\ProgramData\NexonUS
2013-08-18 01:36:13 ——– d—–w- C:\Users\Ashley\AppData\Roaming\Xfire
2013-08-18 01:36:10 ——– d—–w- C:\ProgramData\Xfire
2013-08-18 01:36:09 ——– d—–w- C:\Program Files (x86)\Xfire
2013-08-18 01:34:58 ——– d—–w- C:\Program Files (x86)\SealOnline Blades of Destiny
2013-08-17 20:34:04 ——– d—–w- C:\Users\Ashley\AppData\Local\Akamai
2013-08-17 20:34:02 ——– d—–w- C:\AeriaGames
2013-08-17 20:20:00 ——– d—–w- C:\Users\Ashley\AppData\Local\PMB Files
2013-08-17 20:19:58 ——– d—–w- C:\ProgramData\PMB Files
2013-08-17 20:18:05 ——– d—–w- C:\Program Files (x86)\Pando Networks
2013-08-16 09:20:17 9460976 —-a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1047A39E-00BC-419C-9E56-526A2E407D44}\mpengine.dll
2013-08-14 15:01:13 ——– d—–w- C:\Windows\System32\MRT
2013-08-14 10:41:01 2048 —-a-w- C:\Windows\SysWow64\tzres.dll
2013-08-14 10:41:01 2048 —-a-w- C:\Windows\System32\tzres.dll
2013-08-14 02:27:21 ——– d—–w- C:\Users\Ashley\AppData\Local\ATI
2013-08-14 02:24:41 0 —-a-w- C:\Windows\ativpsrm.bin
2013-08-14 02:19:41 ——– d—–w- C:\ProgramData\AMD
2013-08-14 02:19:40 ——– d—–w- C:\Program Files (x86)\AMD AVT
2013-08-14 02:19:36 ——– d—–w- C:\Program Files (x86)\Common Files\ATI Technologies
2013-08-14 02:17:37 ——– d—–w- C:\Program Files\Common Files\ATI Technologies
2013-08-14 02:17:28 ——– d—–w- C:\Program Files (x86)\ATI Technologies
2013-08-14 02:17:20 ——– d—–w- C:\Program Files\ATI Technologies
2013-08-14 02:17:16 ——– d—–w- C:\Program Files\ATI
2013-08-14 02:15:53 ——– d—–w- C:\AMD
2013-08-12 01:16:29 ——– d–h–w- C:\ProgramData\CanonIJEGV
2013-08-07 22:55:20 ——– d—–w- C:\Program Files\CPUID
.
==================== Find3M ====================
.
2013-07-26 05:13:37 2241024 —-a-w- C:\Windows\System32\wininet.dll
2013-07-26 05:12:08 3958784 —-a-w- C:\Windows\System32\jscript9.dll
2013-07-26 05:12:04 136704 —-a-w- C:\Windows\System32\iesysprep.dll
2013-07-26 05:12:03 67072 —-a-w- C:\Windows\System32\iesetup.dll
2013-07-26 03:35:08 2706432 —-a-w- C:\Windows\System32\mshtml.tlb
2013-07-26 03:13:24 1767936 —-a-w- C:\Windows\SysWow64\wininet.dll
2013-07-26 03:12:04 2877440 —-a-w- C:\Windows\SysWow64\jscript9.dll
2013-07-26 03:12:00 61440 —-a-w- C:\Windows\SysWow64\iesetup.dll
2013-07-26 03:12:00 109056 —-a-w- C:\Windows\SysWow64\iesysprep.dll
2013-07-26 02:49:14 2706432 —-a-w- C:\Windows\SysWow64\mshtml.tlb
2013-07-26 02:39:38 89600 —-a-w- C:\Windows\System32\RegisterIEPKEYs.exe
2013-07-26 01:59:38 71680 —-a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
2013-07-25 09:25:54 1888768 —-a-w- C:\Windows\System32\WMVDECOD.DLL
2013-07-25 08:57:27 1620992 —-a-w- C:\Windows\SysWow64\WMVDECOD.DLL
2013-07-09 06:03:30 5550528 —-a-w- C:\Windows\System32\ntoskrnl.exe
2013-07-09 05:54:22 1732032 —-a-w- C:\Windows\System32\ntdll.dll
2013-07-09 05:53:12 243712 —-a-w- C:\Windows\System32\wow64.dll
2013-07-09 05:52:52 224256 —-a-w- C:\Windows\System32\wintrust.dll
2013-07-09 05:51:16 1217024 —-a-w- C:\Windows\System32\rpcrt4.dll
2013-07-09 05:46:20 184320 —-a-w- C:\Windows\System32\cryptsvc.dll
2013-07-09 05:46:20 1472512 —-a-w- C:\Windows\System32\crypt32.dll
2013-07-09 05:46:20 139776 —-a-w- C:\Windows\System32\cryptnet.dll
2013-07-09 05:03:34 3968960 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2013-07-09 05:03:34 3913664 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe
2013-07-09 04:53:47 1292192 —-a-w- C:\Windows\SysWow64\ntdll.dll
2013-07-09 04:52:33 663552 —-a-w- C:\Windows\SysWow64\rpcrt4.dll
2013-07-09 04:52:33 5120 —-a-w- C:\Windows\SysWow64\wow32.dll
2013-07-09 04:52:10 175104 —-a-w- C:\Windows\SysWow64\wintrust.dll
2013-07-09 04:46:31 140288 —-a-w- C:\Windows\SysWow64\cryptsvc.dll
2013-07-09 04:46:31 1166848 —-a-w- C:\Windows\SysWow64\crypt32.dll
2013-07-09 04:46:31 103936 —-a-w- C:\Windows\SysWow64\cryptnet.dll
2013-07-09 04:45:07 44032 —-a-w- C:\Windows\apppatch\acwow64.dll
2013-07-09 02:49:42 25600 —-a-w- C:\Windows\SysWow64\setup16.exe
2013-07-09 02:49:41 7680 —-a-w- C:\Windows\SysWow64\instnm.exe
2013-07-09 02:49:39 14336 —-a-w- C:\Windows\SysWow64\ntvdm64.dll
2013-07-09 02:49:38 2048 —-a-w- C:\Windows\SysWow64\user.exe
2013-07-06 06:03:53 1910208 —-a-w- C:\Windows\System32\drivers\tcpip.sys
2013-06-27 20:58:01 189936 —-a-w- C:\Windows\System32\drivers\aswVmm.sys
2013-06-27 20:58:01 1030952 —-a-w- C:\Windows\System32\drivers\aswSnx.sys
2013-06-22 21:18:24 96168 —-a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-22 21:18:22 867240 —-a-w- C:\Windows\SysWow64\npDeployJava1.dll
2013-06-22 21:18:22 789416 —-a-w- C:\Windows\SysWow64\deployJava1.dll
2013-06-19 22:45:40 173 —-a-w- C:\Windows\DeleteOnReboot.bat
2013-06-19 21:19:53 32000 —-a-w- C:\Windows\System32\drivers\hitmanpro37.sys
2013-06-15 04:35:40 1111552 —-a-w- C:\Windows\System32\rdpcorets.dll
2013-06-15 04:32:16 39936 —-a-w- C:\Windows\System32\drivers\tssecsrv.sys
2013-06-14 22:16:45 45856 —-a-w- C:\Windows\System32\drivers\avgtpx64.sys
2013-06-05 15:03:35 9728 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-06-05 03:34:27 3153920 —-a-w- C:\Windows\System32\win32k.sys
2013-06-04 06:00:13 624128 —-a-w- C:\Windows\System32\qedit.dll
2013-06-04 04:53:07 509440 —-a-w- C:\Windows\SysWow64\qedit.dll
.
============= FINISH: 20:25:52.21 ===============