Computer and Internet browsing is sloooooow

I tried all the tuning advice, updated my memory to 1 gig and cleaned out the inside of the computer. No speed up.

Contents of DDS follows:
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_33
Run by Melissa Griffith at 13:02:30 on 2012-06-23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.385 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
svchost.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Java\jre6\bin\jqs.exe
c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\mfevtps.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\PROGRA~1\mcafee\SITEAD~1\saui.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Melissa Griffith\Local Settings\Temporary Internet Files\Content.IE5\ESZXCT1R\Defogger[1].exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mSearch Bar = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: eBay Toolbar Helper: {22d8e815-4a5e-4dfb-845e-aab64207f5bd} - c:\program files\ebay\ebay toolbar2\eBayTB.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20120622224441.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.7227.1100\swg.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: {fdd3b846-8d59-4ffb-8758-209b6ad74acc} - c:\program files\microsoft money\system\mnyviewer.dll
TB: eBay Toolbar: {92085ad4-f48a-450d-bd93-b28cc7df67ce} - c:\program files\ebay\ebay toolbar2\eBayTB.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [Creative Detector] "c:\program files\creative\mediasource\detector\CTDetect.exe" /R
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [AdobeUpdater] c:\program files\common files\adobe\updater5\AdobeUpdater.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [mcui_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
mPolicies-explorer: <NO NAME> =
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office10\EXCEL.EXE/3000
IE: eBay Search - c:\program files\ebay\ebay toolbar2\eBayTb.dll/RCSearch.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
IE: {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - {301DA1EE-F65C-4188-A417-9E915CC8FBFA} - c:\program files\microsoft money\system\mnyviewer.dll
Trusted Zone: aol.com\free
Trusted Zone: cwreenactors.com\www
Trusted Zone: internet
Trusted Zone: mcafee.com
Trusted Zone: microsoft.com\office
Trusted Zone: prosoft-eng.com\owa2k
Trusted Zone: prosoft.tv\email
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: YExplorer1_8US.CAB - hxxp://photos.groups.yahoo.com/ocx/us/yexplorer1_8us.cab
DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} - hxxp://support.dell.com/systemprofiler/SysPro.CAB
DPF: {01CA75F1-054B-4A63-9221-C6926369EC52} - hxxp://install.homestead.com/~site/InstallFiles/SIFiles/lpxlive/HS_live.cab
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/templates/ieawsdc.cab
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://go.microsoft.com/fwlink/?linkid=58813
DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} - hxxps://support.microsoft.com/OAS/ActiveX/MSDcode.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {1DF36010-E276-11D4-A7C0-00C04F0453DD} - hxxps://secure.stamps.com/download/us/registration/3_0_0_785/sdcregie.cab
DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - hxxp://download.ebay.com/turbo_lister/US/install.cab
DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} - hxxps://support.microsoft.com/OAS/ActiveX/odc.cab
DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - hxxp://office.microsoft.com/officeupdate/content/opuc3.cab
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.0.cab
DPF: {4A3CBDDD-C4DC-4C38-B44F-704DAEF628AE} - hxxp://project.prosoft.tv/projectserver/objects/pjclient.cab
DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-3-48.cab
DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - hxxp://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,90/mcinsctl.cab
DPF: {4FAE30E1-EE9C-477D-8D06-BF8D3429B60F} - hxxp://64.143.186.133/WebIQ/bin/WebIQ.cab
DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - hxxp://software-dl.real.com/082f0ad1506e63116e21/netzip/RdxIE601.cab
DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} - hxxp://office.microsoft.com/productupdates/content/opuc.cab
DPF: {5AA5A569-F96F-4628-A528-8B3698F558BB} - hxxp://install.homestead.com/~site/InstallFiles/SIFiles/lpxlive/HS_live.cab
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - hxxps://webdl.symantec.com/activex/symdlmgr.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1251669712734
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {8E28B3A9-FE83-45D1-B657-D5426B81A121} - hxxp://cs5b.instantservice.com/jars/customerxsigned33.cab
DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} - hxxp://ftp.us.dell.com/fixes/PROFILER.CAB
DPF: {A1832535-5218-42F9-8959-19E2BCABFABF} - hxxp://plugin.inicis.com/wallet50/INIwallet50.cab
DPF: {AF9A1421-E128-4D5F-A37E-039F305867B9} - hxxp://project.prosoft.tv/projectserver/objects/1033/pjcintl.cab
DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - hxxps://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations/symbizpr/xcontrol/SymDlBrg.cab
DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - hxxp://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,23/mcgdmgr.cab
DPF: {BE5431D2-0F30-11D4-89D9-00C04F509C0A} - hxxp://www.stamps.com/download/us/cab/stamps/stamps.cab?r=0.409881591796875&file=stamps.cab
DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/1.4/jinstall-14_02-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_08-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {D1B09964-F8F7-4FAB-8F2D-B8B2AC3D3BD3} - hxxp://plugin.inicis.com/INIwallet_Eng.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {DF6A0F17-0B1E-11D4-829D-00C04F6843FE} - hxxp://officeupdate.microsoft.com/TemplateGallery/downloads/outc.cab
DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} - hxxp://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
DPF: {E856B973-45FD-4559-8F82-EAB539144667} - hxxp://pccheckup.dellfix.com/rel/35/install/gtdownde.cab
DPF: {F73BE1F4-82AA-4405-AB81-FAFB5A122359} - hxxp://stores.homestead.com/storeadmin/utilities/pssbedit.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{9D501419-1E25-425B-B1E5-A31439AE2EC6} : DhcpNameServer = 192.168.1.1
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~1\mcafee\msc\McSnIePl.dll
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
Hosts: 127.0.0.1 www.spywareinfo.com
Hosts: 61.250.85.203 www.latidoll.com
Hosts: 61.250.85.200 www.tensiya.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\melissa griffith\application data\mozilla\firefox\profiles\hyaiwu5u.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.charter.msn.com/
.
============= SERVICES / DRIVERS ===============
.
R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2010-1-5 464304]
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [2010-9-16 89792]
R2 HPPECP00;hppecp00;c:\windows\system32\drivers\hppecp00.sys [2003-1-27 42048]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\sitead~1\mcsacore.exe [2010-2-17 95200]
R2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-9-16 214904]
R2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-9-16 214904]
R2 McProxy;McAfee Proxy Service;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-9-16 214904]
R2 McShield;McAfee McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2010-9-16 166288]
R2 mfefire;McAfee Firewall Core Service;c:\program files\common files\mcafee\systemcore\mfefire.exe [2010-9-16 161632]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2010-9-16 151880]
R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-9-16 57600]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2010-9-16 180848]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2010-9-16 59456]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-9-16 340920]
R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [2010-9-16 83856]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-16 135664]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-2 257224]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-2-16 135664]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [2010-9-16 83856]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-9-16 87656]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2010-2-17 34248]
.
=============== Created Last 30 ================
.
2012-06-23 16:32:22 -------- d-----w- c:\program files\CodeStuff
2012-06-23 03:07:45 25992 ----a-w- c:\windows\system32\pgdfgsvc.exe
2012-06-23 02:44:39 29312 ----a-w- c:\program files\mozilla firefox\components\scriptff.dll
2012-06-23 02:31:22 13894 ----a-w- c:\windows\system32\dllcache\zonelibm.dll
2012-06-23 02:31:21 4677 ----a-w- c:\windows\system32\dllcache\zeeverm.dll
2012-06-23 02:31:21 29760 ----a-w- c:\windows\system32\dllcache\znetm.dll
2012-06-23 02:31:21 113222 ----a-w- c:\windows\system32\dllcache\zoneclim.dll
2012-06-23 02:31:20 41029 ----a-w- c:\windows\system32\dllcache\zcorem.dll
2012-06-23 02:31:18 116224 ----a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2012-06-23 02:31:17 23040 ----a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2012-06-23 02:31:16 18944 ----a-w- c:\windows\system32\dllcache\xrxscnui.dll
2012-06-23 02:31:15 27648 ----a-w- c:\windows\system32\dllcache\xrxftplt.exe
2012-06-23 02:31:14 4608 ----a-w- c:\windows\system32\dllcache\xrxflnch.exe
2012-06-23 02:30:44 99865 ----a-w- c:\windows\system32\dllcache\xlog.exe
2012-06-23 02:30:42 16970 ----a-w- c:\windows\system32\dllcache\xem336n5.sys
2012-06-23 02:30:34 19200 ----a-w- c:\windows\system32\dllcache\wstcodec.sys
2012-06-23 02:30:31 8192 ----a-w- c:\windows\system32\dllcache\wshirda.dll
2012-06-23 02:30:07 8832 ----a-w- c:\windows\system32\dllcache\wmiacpi.sys
2012-06-23 02:30:03 34890 ----a-w- c:\windows\system32\dllcache\wlandrv2.sys
2012-06-23 02:30:03 154624 ----a-w- c:\windows\system32\dllcache\wlluc48.sys
2012-06-23 02:28:59 60032 ----a-w- c:\windows\system32\dllcache\usbaudio.sys
2012-06-23 02:27:58 94293 ----a-w- c:\windows\system32\dllcache\sxports.dll
2012-06-23 02:26:59 38912 ----a-w- c:\windows\system32\dllcache\sm9aw.dll
2012-06-23 02:25:59 62496 ----a-w- c:\windows\system32\dllcache\s3mtrio.dll
2012-06-23 02:24:59 35328 ----a-w- c:\windows\system32\dllcache\psisload.dll
2012-06-23 02:23:58 61696 ----a-w- c:\windows\system32\dllcache\ohci1394.sys
2012-06-23 02:22:59 103296 ----a-w- c:\windows\system32\dllcache\mtxvideo.sys
2012-06-23 02:22:46 5504 ----a-w- c:\windows\system32\dllcache\mstee.sys
2012-06-23 02:22:45 49024 ----a-w- c:\windows\system32\dllcache\mstape.sys
2012-06-23 02:22:42 12416 ----a-w- c:\windows\system32\dllcache\msriffwv.sys
2012-06-23 02:22:35 2944 ----a-w- c:\windows\system32\dllcache\msmpu401.sys
2012-06-23 02:22:33 22016 ----a-w- c:\windows\system32\dllcache\msircomm.sys
2012-06-23 02:22:32 98304 ----a-w- c:\windows\system32\dllcache\msir3jp.dll
2012-06-23 02:22:21 35200 ----a-w- c:\windows\system32\dllcache\msgame.sys
2012-06-23 02:22:20 6016 ----a-w- c:\windows\system32\dllcache\msfsio.sys
2012-06-23 02:22:18 51200 ----a-w- c:\windows\system32\dllcache\msdv.sys
2012-06-23 02:22:04 15232 ----a-w- c:\windows\system32\dllcache\mpe.sys
2012-06-23 02:20:54 9216 ----a-w- c:\windows\system32\dllcache\kbdnecat.dll
2012-06-23 02:19:58 311359 ----a-w- c:\windows\system32\dllcache\imepadsv.exe
2012-06-23 02:18:59 126976 ----a-w- c:\windows\system32\dllcache\hpgt34tk.dll
2012-06-23 02:17:59 24618 ----a-w- c:\windows\system32\dllcache\fa410nd5.sys
2012-06-23 02:16:58 334208 ----a-w- c:\windows\system32\dllcache\ds1wdm.sys
2012-06-23 02:15:59 49792 ----a-w- c:\windows\system32\dllcache\cyzport.sys
2012-06-23 02:14:59 27164 ----a-w- c:\windows\system32\dllcache\ce3n5.sys
2012-06-23 02:13:59 13824 ----a-w- c:\windows\system32\dllcache\bulltlp3.sys
2012-06-23 02:12:59 268160 ----a-w- c:\windows\system32\dllcache\atidvai.dll
2012-06-23 02:11:41 7168 ----a-w- c:\windows\system32\dllcache\wamregps.dll
2012-06-23 02:11:30 66048 ----a-w- c:\windows\system32\dllcache\s3legacy.dll
2012-06-23 02:10:57 19968 ----a-w- c:\windows\system32\dllcache\inetsloc.dll
2012-06-23 02:10:56 7680 ----a-w- c:\windows\system32\dllcache\inetmgr.exe
2012-06-23 02:10:55 169984 ----a-w- c:\windows\system32\dllcache\iisui.dll
2012-06-23 02:10:54 5632 ----a-w- c:\windows\system32\dllcache\iisrstap.dll
2012-06-23 02:10:53 14336 ----a-w- c:\windows\system32\dllcache\iisreset.exe
2012-06-23 02:10:52 6144 ----a-w- c:\windows\system32\dllcache\ftpsapi2.dll
2012-06-16 18:50:10 476936 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-06-13 04:49:28 521728 ------w- c:\windows\system32\dllcache\jsdbgui.dll
2012-06-04 12:19:34 -------- d-----w- c:\program files\FreePDFTablet
.
==================== Find3M ====================
.
2012-06-16 18:49:35 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-06-16 18:49:31 472840 ----a-w- c:\windows\system32\deployJava1.dll
2012-06-11 02:19:40 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-11 02:19:40 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-06-02 19:19:44 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 19:19:38 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 19:19:38 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 19:19:34 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 19:19:30 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 19:18:58 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 19:18:58 214256 ----a-w- c:\windows\system32\muweb.dll
2012-06-02 19:18:58 17136 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-05-31 13:22:09 599040 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:08:26 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-15 13:20:33 1863168 ----a-w- c:\windows\system32\win32k.sys
2012-05-11 14:42:33 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-05-11 14:42:33 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38:02 385024 ----a-w- c:\windows\system32\html.iec
2012-05-04 13:12:30 2192640 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 12:32:19 2069120 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-02 13:46:36 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-04 19:56:40 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
.
============= FINISH: 13:12:54.32 ===============

Greetings and Welcome to The Forums!!


Note:: this may or may not be a malware issue - I will check things out very well to rule out any malware issue




My name is Gringo and I'll be glad to help you with your computer problems.

I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of us

• Please do not run any tools unless instructed to do so.
  
  • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
• Please do not attach logs or use code boxes, just copy and paste the text.
  
  • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
• Please read every post completely before doing anything.
  
  • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
• Please provide feedback about your experience as we go.
  
  • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.

NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of hartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

Security Check

• Download Security Check by screen317 from here.
• Save it to your Desktop.
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links.
Link 1
Link 2
Link 3
1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

• In your next post I need the following
  
• Log from Combofix
• let me know of any problems you may have had
  
• How is the computer doing now?

Gringo

Hello

48 Hour bump

It has been more than 48 hours since my last post.

• do you still need help with this?
• do you need more time?
• are you having problems following my instructions?
  
• if after 48hrs you have not replied to this thread then it will have to be closed!

Gringo

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.

This topic has been re-opened at the request of the person who originally posted.

Results of security check.
I had to download it from firefox.

Results of screen317's Security Check version 0.99.42
Windows XP Service Pack 3 x86
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
McAfee Anti-Virus and Anti-Spyware
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.61.0.1400
Java Web Start
Java™ 6 Update 33
Java™ SE Runtime Environment 6 Update 1
Java™ 6 Update 2
Java™ 6 Update 3
Java™ 6 Update 5
Java 2 Runtime Environment Standard Edition v1.3.1_06
Java 2 Runtime Environment, SE v1.4.1_02
Java version out of Date!
Adobe Reader X (10.1.3)
Mozilla Firefox (2.0.0 Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 28% Defragment your hard drive soon!
````````````````````End of Log``````````````````````

very good - now let me have the report from combofix



gringo

ComboFix 12-07-14.01 - Melissa Griffith 07/14/2012 18:31:05.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.590 [GMT -4:00]
Running from: c:\documents and settings\Melissa Griffith\My Documents\Downloads\ComboFix.exe
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\DirectCDUserNameE.txt
c:\documents and settings\Melissa Griffith\WINDOWS
c:\windows\system32\SET12E.tmp
c:\windows\system32\SET13A.tmp
c:\windows\system32\SET144.tmp
c:\windows\system32\SET147.tmp
c:\windows\system32\SET16D3.tmp
c:\windows\system32\SET16D6.tmp
c:\windows\system32\SET16DB.tmp
c:\windows\system32\SET16E1.tmp
c:\windows\system32\SET34B.tmp
c:\windows\system32\SET34C.tmp
c:\windows\system32\SET34E.tmp
c:\windows\system32\SET34F.tmp
c:\windows\system32\SET35.tmp
c:\windows\system32\SET354.tmp
c:\windows\system32\SET355.tmp
c:\windows\system32\SET362.tmp
c:\windows\system32\SET363.tmp
c:\windows\system32\SET3A0.tmp
c:\windows\system32\SET3A1.tmp
c:\windows\system32\SET3BA.tmp
c:\windows\system32\SET3BB.tmp
c:\windows\system32\SET3C0.tmp
c:\windows\system32\SET3C1.tmp
c:\windows\system32\SET3C9.tmp
c:\windows\system32\SET3CA.tmp
c:\windows\system32\SET41.tmp
c:\windows\system32\SET4A.tmp
c:\windows\system32\SET4B.tmp
c:\windows\system32\SET4C.tmp
c:\windows\system32\SET4E.tmp
c:\windows\system32\SET4F.tmp
c:\windows\system32\SET5C.tmp
c:\windows\system32\SET65.tmp
c:\windows\system32\Temp
.
.
((((((((((((((((((((((((( Files Created from 2012-06-14 to 2012-07-14 )))))))))))))))))))))))))))))))
.
.
2012-07-14 20:24 . 2012-07-14 20:24 -------- d-----w- c:\program files\Oracle
2012-07-14 20:24 . 2012-07-14 20:24 -------- d-----w- c:\documents and settings\Melissa Griffith\Application Data\Oracle
2012-07-14 20:17 . 2012-06-14 22:20 15757792 ----a-w- c:\program files\Mozilla Firefox\xul.dll
2012-07-14 20:17 . 2012-06-14 22:20 92640 ----a-w- c:\program files\Mozilla Firefox\nssutil3.dll
2012-07-14 20:17 . 2012-06-14 22:20 95712 ----a-w- c:\program files\Mozilla Firefox\nssdbm3.dll
2012-07-14 20:17 . 2012-06-14 22:20 117728 ----a-w- c:\program files\Mozilla Firefox\crashreporter.exe
2012-06-23 16:32 . 2012-06-23 16:32 -------- d-----w- c:\program files\CodeStuff
2012-06-23 03:07 . 2012-06-23 03:07 25992 ----a-w- c:\windows\system32\pgdfgsvc.exe
2012-06-23 02:44 . 2012-05-25 21:09 29312 ----a-w- c:\program files\Mozilla Firefox\components\scriptff.dll
2012-06-23 02:27 . 2001-08-18 02:36 7168 ----a-w- c:\windows\system32\dllcache\EXCH_snprfdll.dll
2012-06-23 02:27 . 2001-08-18 02:36 12288 ----a-w- c:\windows\system32\dllcache\EXCH_smtpctrs.dll
2012-06-23 02:25 . 2001-08-18 02:36 62496 ----a-w- c:\windows\system32\dllcache\s3mtrio.dll
2012-06-23 02:24 . 2001-08-18 02:36 35328 ----a-w- c:\windows\system32\dllcache\psisload.dll
2012-06-23 02:23 . 2008-04-13 18:46 61696 ----a-w- c:\windows\system32\dllcache\ohci1394.sys
2012-06-23 02:22 . 2001-08-17 16:50 103296 ----a-w- c:\windows\system32\dllcache\mtxvideo.sys
2012-06-23 02:22 . 2008-04-13 18:39 5504 ----a-w- c:\windows\system32\dllcache\mstee.sys
2012-06-23 02:22 . 2008-04-13 18:46 49024 ----a-w- c:\windows\system32\dllcache\mstape.sys
2012-06-23 02:22 . 2001-08-17 17:48 12416 ----a-w- c:\windows\system32\dllcache\msriffwv.sys
2012-06-23 02:22 . 2001-08-17 18:00 2944 ----a-w- c:\windows\system32\dllcache\msmpu401.sys
2012-06-23 02:22 . 2008-04-13 18:54 22016 ----a-w- c:\windows\system32\dllcache\msircomm.sys
2012-06-23 02:22 . 2002-08-29 11:00 98304 ----a-w- c:\windows\system32\dllcache\msir3jp.dll
2012-06-23 02:22 . 2001-08-17 18:02 35200 ----a-w- c:\windows\system32\dllcache\msgame.sys
2012-06-23 02:22 . 2001-08-17 17:48 6016 ----a-w- c:\windows\system32\dllcache\msfsio.sys
2012-06-23 02:22 . 2008-04-13 18:46 51200 ----a-w- c:\windows\system32\dllcache\msdv.sys
2012-06-23 02:22 . 2008-04-13 18:46 15232 ----a-w- c:\windows\system32\dllcache\mpe.sys
2012-06-23 02:20 . 2002-08-29 11:00 9216 ----a-w- c:\windows\system32\dllcache\kbdnecat.dll
2012-06-23 02:19 . 2002-08-29 11:00 311359 ----a-w- c:\windows\system32\dllcache\imepadsv.exe
2012-06-23 02:18 . 2001-08-18 02:36 126976 ----a-w- c:\windows\system32\dllcache\hpgt34tk.dll
2012-06-23 02:17 . 2001-08-17 16:12 24618 ----a-w- c:\windows\system32\dllcache\fa410nd5.sys
2012-06-23 02:16 . 2001-08-17 16:20 334208 ----a-w- c:\windows\system32\dllcache\ds1wdm.sys
2012-06-23 02:15 . 2001-08-17 17:50 49792 ----a-w- c:\windows\system32\dllcache\cyzport.sys
2012-06-23 02:14 . 2001-08-17 16:13 27164 ----a-w- c:\windows\system32\dllcache\ce3n5.sys
2012-06-23 02:13 . 2001-08-17 17:51 13824 ----a-w- c:\windows\system32\dllcache\bulltlp3.sys
2012-06-23 02:12 . 2001-08-17 18:56 268160 ----a-w- c:\windows\system32\dllcache\atidvai.dll
2012-06-23 02:11 . 2001-08-17 18:56 66048 ----a-w- c:\windows\system32\dllcache\s3legacy.dll
2012-06-23 02:10 . 2002-08-29 11:00 19968 ----a-w- c:\windows\system32\dllcache\inetsloc.dll
2012-06-23 02:10 . 2002-08-29 11:00 7680 ----a-w- c:\windows\system32\dllcache\inetmgr.exe
2012-06-23 02:10 . 2002-08-29 11:00 169984 ----a-w- c:\windows\system32\dllcache\iisui.dll
2012-06-23 02:10 . 2002-08-29 11:00 5632 ----a-w- c:\windows\system32\dllcache\iisrstap.dll
2012-06-23 02:10 . 2002-08-29 11:00 14336 ----a-w- c:\windows\system32\dllcache\iisreset.exe
2012-06-23 02:10 . 2002-08-29 11:00 6144 ----a-w- c:\windows\system32\dllcache\ftpsapi2.dll
2012-06-16 18:50 . 2012-07-06 02:06 772544 ----a-w- c:\windows\system32\npdeployJava1.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-12 08:47 . 2012-04-02 22:52 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-12 08:47 . 2011-06-28 10:41 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-06 02:07 . 2007-04-30 21:40 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-06-16 18:49 . 2010-08-04 10:16 472840 ----a-w- c:\windows\system32\deployJava1.dll
2012-06-13 13:19 . 2002-08-29 11:00 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-06-05 15:50 . 2008-09-20 04:39 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:50 . 2002-08-29 11:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 04:32 . 2002-08-29 11:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 19:19 . 2007-06-18 21:24 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 19:19 . 2007-06-18 21:24 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 19:19 . 2004-08-14 03:59 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 19:19 . 2004-08-14 03:59 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 19:19 . 2004-08-14 03:59 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 19:19 . 2007-06-18 21:24 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 19:19 . 2005-05-26 08:16 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 19:19 . 2004-08-14 03:59 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 19:19 . 2002-08-29 11:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 19:19 . 2002-08-29 11:00 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 19:19 . 2007-06-18 21:24 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 19:19 . 2004-08-14 03:59 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 19:19 . 2002-08-29 11:00 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 19:18 . 2007-06-19 18:38 17136 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 19:18 . 2006-06-17 12:02 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 19:18 . 2005-05-26 08:19 214256 ----a-w- c:\windows\system32\muweb.dll
2012-05-31 13:22 . 2002-09-23 20:10 599040 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:08 . 2004-08-24 00:32 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-11 14:42 . 2002-08-29 11:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-05-11 14:42 . 2002-08-29 11:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2004-08-04 05:59 385024 ----a-w- c:\windows\system32\html.iec
2012-05-04 13:12 . 1980-01-01 06:00 2192640 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 12:32 . 1980-01-01 06:00 2069120 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-02 13:46 . 2002-08-29 11:00 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-14 22:20 . 2012-07-14 22:02 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2007-08-25 03:52 . 2008-02-06 12:11 300400 -c--a-w- c:\program files\mozilla firefox\components\coFFPlgn.dll
2012-05-25 21:09 . 2012-06-23 02:44 29312 ----a-w- c:\program files\mozilla firefox\components\scriptff.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Creative Detector"="c:\program files\Creative\MediaSource\Detector\CTDetect.exe" [2004-12-02 102400]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-10-19 204288]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-06 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2003-10-06 5058560]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-03-22 1318816]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-07-05 421888]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
backup=c:\windows\pss\Adobe Gamma Loader.exe.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Payment Wizard Options.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Payment Wizard Options.lnk
backup=c:\windows\pss\Payment Wizard Options.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks 2001 Delivery Agent.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks 2001 Delivery Agent.lnk
backup=c:\windows\pss\QuickBooks 2001 Delivery Agent.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
backup=c:\windows\pss\QuickBooks Update Agent.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eBayToolbar]
2012-03-04 23:41 632048 ----a-w- c:\program files\eBay\eBay Toolbar2\eBayTBDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MoneyAgent]
2001-07-25 16:00 184376 ----a-w- c:\program files\Microsoft Money\System\Money Express.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2003-10-06 19:16 741376 ----a-w- c:\windows\SYSTEM32\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-07-05 22:36 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SLPMONX"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
"diagent"="c:\program files\Creative\SBLive\Diagnostics\diagent.exe" startup
"DwlClient"=c:\program files\Common Files\Dell\EUSW\Support.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Intuit\\QuickBooks Basic\\QBDBMgrN.exe"=
"c:\\Program Files\\Intuit\\QuickBooks Basic\\QBW32Pro.exe"=
"c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"10160:TCP"= 10160:TCP:Quick Books
.
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\SYSTEM32\DRIVERS\mfetdi2k.sys [9/16/2010 7:39 PM 89792]
R2 HPPECP00;hppecp00;c:\windows\SYSTEM32\DRIVERS\hppecp00.sys [1/27/2003 9:24 PM 42048]
R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [9/16/2010 7:39 PM 214904]
R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [9/16/2010 7:39 PM 214904]
R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [9/16/2010 7:40 PM 161632]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\SYSTEM32\mfevtps.exe [9/16/2010 7:39 PM 151880]
R3 cfwids;McAfee Inc. cfwids;c:\windows\SYSTEM32\DRIVERS\cfwids.sys [9/16/2010 7:39 PM 57600]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\SYSTEM32\DRIVERS\mfefirek.sys [9/16/2010 7:39 PM 340920]
R3 mfendiskmp;mfendiskmp;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [9/16/2010 7:39 PM 83856]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/16/2010 8:48 AM 135664]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\SITEAD~1\mcsacore.exe [2/17/2010 7:38 PM 95200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SYSTEM32\Macromed\Flash\FlashPlayerUpdateService.exe [4/2/2012 6:52 PM 250056]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2/16/2010 8:48 AM 135664]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [9/16/2010 7:39 PM 83856]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\SYSTEM32\DRIVERS\mferkdet.sys [9/16/2010 7:39 PM 87656]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [7/14/2012 6:02 PM 113120]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - JAVAQUICKSTARTERSERVICE
*Deregistered* - mfeavfk01
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 08:47]
.
2012-07-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-16 12:48]
.
2012-07-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-16 12:48]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mSearch Bar = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: eBay Search - c:\program files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
Trusted Zone: aol.com\free
Trusted Zone: cwreenactors.com\www
Trusted Zone: internet
Trusted Zone: mcafee.com
Trusted Zone: microsoft.com\office
Trusted Zone: prosoft-eng.com\owa2k
Trusted Zone: prosoft.tv\email
TCP: DhcpNameServer = 192.168.1.1
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {4A3CBDDD-C4DC-4C38-B44F-704DAEF628AE} - hxxp://project.prosoft.tv/projectserver/objects/pjclient.cab
DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - hxxp://software-dl.real.com/082f0ad1506e63116e21/netzip/RdxIE601.cab
DPF: {A1832535-5218-42F9-8959-19E2BCABFABF} - hxxp://plugin.inicis.com/wallet50/INIwallet50.cab
DPF: {AF9A1421-E128-4D5F-A37E-039F305867B9} - hxxp://project.prosoft.tv/projectserver/objects/1033/pjcintl.cab
DPF: {D1B09964-F8F7-4FAB-8F2D-B8B2AC3D3BD3} - hxxp://plugin.inicis.com/INIwallet_Eng.cab
DPF: {F73BE1F4-82AA-4405-AB81-FAFB5A122359} - hxxp://stores.homestead.com/storeadmin/utilities/pssbedit.cab
FF - ProfilePath - c:\documents and settings\Melissa Griffith\Application Data\Mozilla\Firefox\Profiles\hyaiwu5u.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.charter.msn.com/
.
- - - - ORPHANS REMOVED - - - -
.
MSConfigStartUp-Adobe Photo Downloader - c:\program files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
MSConfigStartUp-AdobeUpdater - c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe
AddRemove-Works2002Setup - c:\program files\Microsoft Works Suite 2002\Setup\Launcher.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-14 18:42
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Creative Detector = "c:\program files\Creative\MediaSource\Detector\CTDetect.exe" /R??D~0?A~????*?A~??B~????w?C~\???m???f???????????????L???L?????????B~w?C~\???m???f???????????????? ?sw?C~\???m???f???????L??????????sm???f???????m???????$???x??sm???f??????????????? SB~f???N??????
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
Completion time: 2012-07-14 18:48:47
ComboFix-quarantined-files.txt 2012-07-14 22:48
.
Pre-Run: 88,421,072,896 bytes free
Post-Run: 89,360,973,824 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
.
- - End Of File - - F2B569880AA8B8C6B857DF1B4B11A13A

Greetings

I want you to run these next,

tdsskiller:

Please read carefully and follow these steps.

• Download TDSSKiller and save it to your Desktop.
• doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
• If an infected file is detected, the default action will be Cure, click on Continue.
• If a suspicious file is detected, the default action will be Skip, click on Continue.
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
• If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download aswMBR to your desktop.

• Double click the aswMBR.exe icon to run it
• it will ask to download extra definitions - ALLOW IT
• Click the Scan button to start the scan
• On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

If you have any problems running either one come back and let me know

please reply with the reports from TDSSKiller and aswMBR

Gringo

Contents of tdsskiller log
07:12:03.0745 0704 TDSS rootkit removing tool 2.7.45.0 Jul 9 2012 12:46:35
07:12:05.0745 0704 ============================================================
07:12:05.0745 0704 Current date / time: 2012/07/15 07:12:05.0745
07:12:05.0745 0704 SystemInfo:
07:12:05.0745 0704
07:12:05.0745 0704 OS Version: 5.1.2600 ServicePack: 3.0
07:12:05.0745 0704 Product type: Workstation
07:12:05.0745 0704 ComputerName: MELISSA
07:12:05.0745 0704 UserName: Melissa Griffith
07:12:05.0745 0704 Windows directory: C:\WINDOWS
07:12:05.0745 0704 System windows directory: C:\WINDOWS
07:12:05.0745 0704 Processor architecture: Intel x86
07:12:05.0745 0704 Number of processors: 1
07:12:05.0745 0704 Page size: 0x1000
07:12:05.0745 0704 Boot type: Normal boot
07:12:05.0745 0704 ============================================================
07:12:08.0667 0704 Drive \Device\Harddisk0\DR0 - Size: 0x1BF08EB000 (111.76 Gb), SectorSize: 0x200, Cylinders: 0x38FD, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
07:12:08.0667 0704 ============================================================
07:12:08.0667 0704 \Device\Harddisk0\DR0:
07:12:08.0667 0704 MBR partitions:
07:12:08.0667 0704 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0xFB04, BlocksNum 0xDF741B9
07:12:08.0667 0704 ============================================================
07:12:08.0714 0704 C: <-> \Device\Harddisk0\DR0\Partition0
07:12:08.0714 0704 ============================================================
07:12:08.0714 0704 Initialize success
07:12:08.0714 0704 ============================================================
07:12:17.0339 1404 ============================================================
07:12:17.0339 1404 Scan started
07:12:17.0339 1404 Mode: Manual;
07:12:17.0339 1404 ============================================================
07:12:17.0620 1404 Abiosdsk - ok
07:12:17.0667 1404 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\System32\DRIVERS\ABP480N5.SYS
07:12:17.0808 1404 abp480n5 - ok
07:12:17.0855 1404 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
07:12:17.0870 1404 ACPI - ok
07:12:17.0902 1404 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
07:12:17.0902 1404 ACPIEC - ok
07:12:17.0964 1404 Adobe LM Service (a4ffc35a661d42dd424f22905c333979) C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
07:12:18.0120 1404 Adobe LM Service - ok
07:12:18.0183 1404 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
07:12:18.0183 1404 AdobeFlashPlayerUpdateSvc - ok
07:12:18.0214 1404 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\System32\DRIVERS\adpu160m.sys
07:12:18.0386 1404 adpu160m - ok
07:12:18.0417 1404 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
07:12:18.0433 1404 aec - ok
07:12:18.0448 1404 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
07:12:18.0558 1404 AFD - ok
07:12:18.0589 1404 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
07:12:18.0589 1404 agp440 - ok
07:12:18.0620 1404 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\System32\DRIVERS\agpCPQ.sys
07:12:18.0620 1404 agpCPQ - ok
07:12:18.0652 1404 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\System32\DRIVERS\aha154x.sys
07:12:18.0823 1404 Aha154x - ok
07:12:18.0855 1404 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\System32\DRIVERS\aic78u2.sys
07:12:19.0011 1404 aic78u2 - ok
07:12:19.0042 1404 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\System32\DRIVERS\aic78xx.sys
07:12:19.0183 1404 aic78xx - ok
07:12:19.0230 1404 Alerter (a9a3daa780ca6c9671a19d52456705b4) C:\WINDOWS\system32\alrsvc.dll
07:12:19.0230 1404 Alerter - ok
07:12:19.0261 1404 ALG (8c515081584a38aa007909cd02020b3d) C:\WINDOWS\System32\alg.exe
07:12:19.0277 1404 ALG - ok
07:12:19.0308 1404 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\System32\DRIVERS\aliide.sys
07:12:19.0464 1404 AliIde - ok
07:12:19.0495 1404 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\System32\DRIVERS\alim1541.sys
07:12:19.0511 1404 alim1541 - ok
07:12:19.0527 1404 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\System32\DRIVERS\amdagp.sys
07:12:19.0558 1404 amdagp - ok
07:12:19.0589 1404 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\System32\DRIVERS\amsint.sys
07:12:19.0714 1404 amsint - ok
07:12:19.0777 1404 AppMgmt (d8849f77c0b66226335a59d26cb4edc6) C:\WINDOWS\System32\appmgmts.dll
07:12:19.0777 1404 AppMgmt - ok
07:12:19.0823 1404 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\System32\DRIVERS\asc.sys
07:12:19.0980 1404 asc - ok
07:12:19.0995 1404 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\System32\DRIVERS\asc3350p.sys
07:12:20.0120 1404 asc3350p - ok
07:12:20.0152 1404 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\System32\DRIVERS\asc3550.sys
07:12:20.0292 1404 asc3550 - ok
07:12:20.0386 1404 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
07:12:20.0573 1404 aspnet_state - ok
07:12:20.0605 1404 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
07:12:20.0620 1404 AsyncMac - ok
07:12:20.0636 1404 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
07:12:20.0652 1404 atapi - ok
07:12:20.0652 1404 Atdisk - ok
07:12:20.0683 1404 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
07:12:20.0698 1404 Atmarpc - ok
07:12:20.0730 1404 AudioSrv (def7a7882bec100fe0b2ce2549188f9d) C:\WINDOWS\System32\audiosrv.dll
07:12:20.0745 1404 AudioSrv - ok
07:12:20.0792 1404 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
07:12:20.0792 1404 audstub - ok
07:12:20.0823 1404 basic2 (1b9c81ab9a456eabd9f8335f04b5f495) C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys
07:12:20.0964 1404 basic2 - ok
07:12:21.0011 1404 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
07:12:21.0027 1404 Beep - ok
07:12:21.0058 1404 BITS (574738f61fca2935f5265dc4e5691314) C:\WINDOWS\system32\qmgr.dll
07:12:21.0136 1404 BITS - ok
07:12:21.0183 1404 Browser (a06ce3399d16db864f55faeb1f1927a9) C:\WINDOWS\System32\browser.dll
07:12:21.0183 1404 Browser - ok
07:12:21.0198 1404 bvrp_pci - ok
07:12:21.0308 1404 catchme - ok
07:12:21.0323 1404 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\System32\DRIVERS\cbidf2k.sys
07:12:21.0323 1404 cbidf - ok
07:12:21.0339 1404 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
07:12:21.0355 1404 cbidf2k - ok
07:12:21.0355 1404 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\System32\DRIVERS\cd20xrnt.sys
07:12:21.0527 1404 cd20xrnt - ok
07:12:21.0558 1404 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
07:12:21.0558 1404 Cdaudio - ok
07:12:21.0589 1404 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
07:12:21.0589 1404 Cdfs - ok
07:12:21.0636 1404 Cdr4_xp (4dee321b7d830231853bc722d3acfdf8) C:\WINDOWS\system32\drivers\Cdr4_xp.sys
07:12:21.0808 1404 Cdr4_xp - ok
07:12:21.0839 1404 Cdralw2k (18eb04a0dfd3ffae2ab736c3c1dfea34) C:\WINDOWS\system32\drivers\Cdralw2k.sys
07:12:21.0995 1404 Cdralw2k - ok
07:12:22.0027 1404 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
07:12:22.0042 1404 Cdrom - ok
07:12:22.0058 1404 cdudf_xp (072070a498d5fad70c3a99a5f0b1331b) C:\WINDOWS\system32\drivers\cdudf_xp.sys
07:12:22.0058 1404 cdudf_xp - ok
07:12:22.0105 1404 cfwids (1c7b1e36f3ced9e4b0b13385e627fe8b) C:\WINDOWS\system32\drivers\cfwids.sys
07:12:22.0230 1404 cfwids - ok
07:12:22.0245 1404 Changer - ok
07:12:22.0277 1404 CiSvc (1cfe720eb8d93a7158a4ebc3ab178bde) C:\WINDOWS\system32\cisvc.exe
07:12:22.0292 1404 CiSvc - ok
07:12:22.0308 1404 ClipSrv (34cbe729f38138217f9c80212a2a0c82) C:\WINDOWS\system32\clipsrv.exe
07:12:22.0323 1404 ClipSrv - ok
07:12:22.0402 1404 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
07:12:22.0558 1404 clr_optimization_v2.0.50727_32 - ok
07:12:22.0605 1404 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\System32\DRIVERS\cmdide.sys
07:12:22.0605 1404 CmdIde - ok
07:12:22.0620 1404 COMSysApp - ok
07:12:22.0652 1404 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\System32\DRIVERS\cpqarray.sys
07:12:22.0652 1404 Cpqarray - ok
07:12:22.0683 1404 Creative Service for CDROM Access (3c8b6609712f4ff78e521f6dcfc4032b) C:\WINDOWS\System32\CTsvcCDA.exe
07:12:22.0839 1404 Creative Service for CDROM Access - ok
07:12:22.0870 1404 CryptSvc (3d4e199942e29207970e04315d02ad3b) C:\WINDOWS\System32\cryptsvc.dll
07:12:22.0870 1404 CryptSvc - ok
07:12:22.0964 1404 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\System32\DRIVERS\dac2w2k.sys
07:12:22.0980 1404 dac2w2k - ok
07:12:22.0995 1404 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\System32\DRIVERS\dac960nt.sys
07:12:23.0167 1404 dac960nt - ok
07:12:23.0214 1404 DcomLaunch (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\system32\rpcss.dll
07:12:23.0230 1404 DcomLaunch - ok
07:12:23.0261 1404 Dhcp (5e38d7684a49cacfb752b046357e0589) C:\WINDOWS\System32\dhcpcsvc.dll
07:12:23.0261 1404 Dhcp - ok
07:12:23.0292 1404 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
07:12:23.0292 1404 Disk - ok
07:12:23.0308 1404 dmadmin - ok
07:12:23.0370 1404 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
07:12:23.0402 1404 dmboot - ok
07:12:23.0417 1404 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
07:12:23.0433 1404 dmio - ok
07:12:23.0448 1404 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
07:12:23.0448 1404 dmload - ok
07:12:23.0495 1404 dmserver (57edec2e5f59f0335e92f35184bc8631) C:\WINDOWS\System32\dmserver.dll
07:12:23.0495 1404 dmserver - ok
07:12:23.0511 1404 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
07:12:23.0511 1404 DMusic - ok
07:12:23.0542 1404 Dnscache (5f7e24fa9eab896051ffb87f840730d2) C:\WINDOWS\System32\dnsrslvr.dll
07:12:23.0542 1404 Dnscache - ok
07:12:23.0589 1404 Dot3svc (0f0f6e687e5e15579ef4da8dd6945814) C:\WINDOWS\System32\dot3svc.dll
07:12:23.0605 1404 Dot3svc - ok
07:12:23.0636 1404 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\System32\DRIVERS\dpti2o.sys
07:12:23.0652 1404 dpti2o - ok
07:12:23.0667 1404 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
07:12:23.0667 1404 drmkaud - ok
07:12:23.0714 1404 dvd_2K (a3997baab606caa92f27e07bc4f070f0) C:\WINDOWS\system32\drivers\dvd_2K.sys
07:12:23.0870 1404 dvd_2K - ok
07:12:23.0917 1404 E100B (56ab585a307909c4447d5900a10c6bc7) C:\WINDOWS\system32\DRIVERS\e100b325.sys
07:12:23.0933 1404 E100B - ok
07:12:23.0964 1404 EapHost (2187855a7703adef0cef9ee4285182cc) C:\WINDOWS\System32\eapsvc.dll
07:12:23.0980 1404 EapHost - ok
07:12:23.0995 1404 EL90XBC (6e883bf518296a40959131c2304af714) C:\WINDOWS\system32\DRIVERS\el90xbc5.sys
07:12:24.0011 1404 EL90XBC - ok
07:12:24.0042 1404 ERSvc (bc93b4a066477954555966d77fec9ecb) C:\WINDOWS\System32\ersvc.dll
07:12:24.0042 1404 ERSvc - ok
07:12:24.0073 1404 Eventlog (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
07:12:24.0073 1404 Eventlog - ok
07:12:24.0105 1404 EventSystem (d4991d98f2db73c60d042f1aef79efae) C:\WINDOWS\System32\es.dll
07:12:24.0120 1404 EventSystem - ok
07:12:24.0136 1404 Fallback (c823debe2548656549f84a875d65237b) C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys
07:12:24.0167 1404 Fallback - ok
07:12:24.0183 1404 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
07:12:24.0183 1404 Fastfat - ok
07:12:24.0214 1404 FastUserSwitchingCompatibility (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
07:12:24.0292 1404 FastUserSwitchingCompatibility - ok
07:12:24.0308 1404 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
07:12:24.0323 1404 Fdc - ok
07:12:24.0339 1404 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
07:12:24.0355 1404 Fips - ok
07:12:24.0370 1404 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
07:12:24.0370 1404 Flpydisk - ok
07:12:24.0386 1404 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
07:12:24.0402 1404 FltMgr - ok
07:12:24.0495 1404 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
07:12:24.0511 1404 FontCache3.0.0.0 - ok
07:12:24.0542 1404 Fsks (6483414841d4cab6c3b4db2ac6edd70b) C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys
07:12:24.0714 1404 Fsks - ok
07:12:24.0745 1404 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
07:12:24.0745 1404 Fs_Rec - ok
07:12:24.0761 1404 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
07:12:24.0777 1404 Ftdisk - ok
07:12:24.0823 1404 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys
07:12:24.0823 1404 gameenum - ok
07:12:24.0855 1404 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
07:12:24.0855 1404 Gpc - ok
07:12:24.0964 1404 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe
07:12:24.0964 1404 gupdate - ok
07:12:24.0980 1404 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe
07:12:24.0980 1404 gupdatem - ok
07:12:25.0027 1404 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
07:12:25.0198 1404 gusvc - ok
07:12:25.0261 1404 helpsvc (4fcca060dfe0c51a09dd5c3843888bcd) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
07:12:25.0261 1404 helpsvc - ok
07:12:25.0277 1404 HidServ - ok
07:12:25.0308 1404 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
07:12:25.0308 1404 HidUsb - ok
07:12:25.0355 1404 hkmsvc (8878bd685e490239777bfe51320b88e9) C:\WINDOWS\System32\kmsvc.dll
07:12:25.0370 1404 hkmsvc - ok
07:12:25.0386 1404 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\System32\DRIVERS\hpn.sys
07:12:25.0527 1404 hpn - ok
07:12:25.0573 1404 HPPECP00 (64efa67e11fc9cecd8696939072f4529) C:\WINDOWS\System32\drivers\hppecp00.sys
07:12:25.0714 1404 HPPECP00 - ok
07:12:25.0777 1404 HSFHWBS2 (95b894b508db03507b61fe213ef6fe19) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys
07:12:25.0948 1404 HSFHWBS2 - ok
07:12:26.0027 1404 HSF_DP (f66402179ca2b2ae68493103db5fa48c) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys
07:12:26.0230 1404 HSF_DP - ok
07:12:26.0370 1404 hsf_msft (74e379857d4c0dfb56de2d19b8f4c434) C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys
07:12:26.0542 1404 hsf_msft - ok
07:12:26.0589 1404 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
07:12:26.0589 1404 HTTP - ok
07:12:26.0636 1404 HTTPFilter (6100a808600f44d999cebdef8841c7a3) C:\WINDOWS\System32\w3ssl.dll
07:12:26.0636 1404 HTTPFilter - ok
07:12:26.0667 1404 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
07:12:26.0683 1404 i2omgmt - ok
07:12:26.0698 1404 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\System32\DRIVERS\i2omp.sys
07:12:26.0698 1404 i2omp - ok
07:12:26.0730 1404 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
07:12:26.0745 1404 i8042prt - ok
07:12:26.0777 1404 i81x (06b7ef73ba5f302eecc294cdf7e19702) C:\WINDOWS\system32\DRIVERS\i81xnt5.sys
07:12:26.0792 1404 i81x - ok
07:12:26.0839 1404 iAimFP0 (7b5b44efe5eb9dadfb8ee29700885d23) C:\WINDOWS\system32\DRIVERS\wADV01nt.sys
07:12:26.0839 1404 iAimFP0 - ok
07:12:26.0870 1404 iAimFP1 (eb1f6bab6c22ede0ba551b527475f7e9) C:\WINDOWS\system32\DRIVERS\wADV02NT.sys
07:12:26.0870 1404 iAimFP1 - ok
07:12:26.0886 1404 iAimFP2 (03ce989d846c1aa81145cb22fcb86d06) C:\WINDOWS\system32\DRIVERS\wADV05NT.sys
07:12:26.0886 1404 iAimFP2 - ok
07:12:26.0948 1404 iAimFP3 (525849b4469de021d5d61b4db9be3a9d) C:\WINDOWS\system32\DRIVERS\wSiINTxx.sys
07:12:26.0948 1404 iAimFP3 - ok
07:12:26.0995 1404 iAimFP4 (589c2bcdb5bd602bf7b63d210407ef8c) C:\WINDOWS\system32\DRIVERS\wVchNTxx.sys
07:12:26.0995 1404 iAimFP4 - ok
07:12:27.0027 1404 iAimTV0 (d83bdd5c059667a2f647a6be5703a4d2) C:\WINDOWS\system32\DRIVERS\wATV01nt.sys
07:12:27.0027 1404 iAimTV0 - ok
07:12:27.0042 1404 iAimTV1 (ed968d23354daa0d7c621580c012a1f6) C:\WINDOWS\system32\DRIVERS\wATV02NT.sys
07:12:27.0058 1404 iAimTV1 - ok
07:12:27.0058 1404 iAimTV2 - ok
07:12:27.0073 1404 iAimTV3 (d738273f218a224c1ddac04203f27a84) C:\WINDOWS\system32\DRIVERS\wATV04nt.sys
07:12:27.0089 1404 iAimTV3 - ok
07:12:27.0105 1404 iAimTV4 (0052d118995cbab152daabe6106d1442) C:\WINDOWS\system32\DRIVERS\wCh7xxNT.sys
07:12:27.0105 1404 iAimTV4 - ok
07:12:27.0245 1404 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
07:12:27.0386 1404 IDriverT - ok
07:12:27.0511 1404 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
07:12:27.0714 1404 idsvc - ok
07:12:27.0730 1404 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
07:12:27.0745 1404 Imapi - ok
07:12:27.0792 1404 ImapiService (30deaf54a9755bb8546168cfe8a6b5e1) C:\WINDOWS\system32\imapi.exe
07:12:27.0808 1404 ImapiService - ok
07:12:27.0839 1404 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\System32\DRIVERS\ini910u.sys
07:12:27.0995 1404 ini910u - ok
07:12:28.0027 1404 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
07:12:28.0027 1404 IntelIde - ok
07:12:28.0058 1404 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
07:12:28.0058 1404 intelppm - ok
07:12:28.0073 1404 ip6fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
07:12:28.0073 1404 ip6fw - ok
07:12:28.0120 1404 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
07:12:28.0136 1404 IpFilterDriver - ok
07:12:28.0152 1404 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
07:12:28.0183 1404 IpInIp - ok
07:12:28.0230 1404 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
07:12:28.0245 1404 IpNat - ok
07:12:28.0277 1404 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
07:12:28.0277 1404 IPSec - ok
07:12:28.0308 1404 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
07:12:28.0308 1404 IRENUM - ok
07:12:28.0339 1404 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
07:12:28.0339 1404 isapnp - ok
07:12:28.0417 1404 JavaQuickStarterService (4f2143570d2250ca4c4a4c98553c82cd) C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
07:12:28.0542 1404 JavaQuickStarterService - ok
07:12:28.0573 1404 Jukebox3 (c4d1e49a7d853a6fdfe8ec2906ae5aaa) C:\WINDOWS\system32\DRIVERS\ctpdusb.sys
07:12:28.0683 1404 Jukebox3 - ok
07:12:28.0730 1404 K56 (9c5e3fdbfcc30cf71a49ca178b9ad442) C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys
07:12:28.0948 1404 K56 - ok
07:12:28.0964 1404 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
07:12:28.0980 1404 Kbdclass - ok
07:12:29.0011 1404 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
07:12:29.0011 1404 kmixer - ok
07:12:29.0042 1404 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
07:12:29.0042 1404 KSecDD - ok
07:12:29.0073 1404 lanmanserver (3a7c3cbe5d96b8ae96ce81f0b22fb527) C:\WINDOWS\System32\srvsvc.dll
07:12:29.0152 1404 lanmanserver - ok
07:12:29.0183 1404 lanmanworkstation (a8888a5327621856c0cec4e385f69309) C:\WINDOWS\System32\wkssvc.dll
07:12:29.0183 1404 lanmanworkstation - ok
07:12:29.0198 1404 lbrtfdc - ok
07:12:29.0230 1404 LmHosts (a7db739ae99a796d91580147e919cc59) C:\WINDOWS\System32\lmhsvc.dll
07:12:29.0245 1404 LmHosts - ok
07:12:29.0308 1404 McAfee SiteAdvisor Service (6c3d154fff0a97a6c3d9f78d60c41655) c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
07:12:29.0308 1404 McAfee SiteAdvisor Service - ok
07:12:29.0402 1404 McMPFSvc (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
07:12:29.0402 1404 McMPFSvc - ok
07:12:29.0417 1404 mcmscsvc (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
07:12:29.0417 1404 mcmscsvc - ok
07:12:29.0433 1404 McNaiAnn (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
07:12:29.0433 1404 McNaiAnn - ok
07:12:29.0448 1404 McNASvc (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
07:12:29.0448 1404 McNASvc - ok
07:12:29.0480 1404 McODS (135aa9e9e7047b7dc1f753205d421a26) C:\Program Files\McAfee\VirusScan\mcods.exe
07:12:29.0495 1404 McODS - ok
07:12:29.0527 1404 McProxy (7e6932eeda54c8eaf7dc6c2225261b85) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
07:12:29.0527 1404 McProxy - ok
07:12:29.0558 1404 McShield (593fa4c378818ece76ba64a11ad56cf2) C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
07:12:29.0558 1404 McShield - ok
07:12:29.0620 1404 MDM (11f714f85530a2bd134074dc30e99fca) C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
07:12:29.0620 1404 MDM - ok
07:12:29.0745 1404 mdmxsdk (a1e9d936eac07ee9386e87bac1377fad) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
07:12:29.0870 1404 mdmxsdk - ok
07:12:29.0902 1404 Messenger (986b1ff5814366d71e0ac5755c88f2d3) C:\WINDOWS\System32\msgsvc.dll
07:12:29.0917 1404 Messenger - ok
07:12:29.0948 1404 mfeapfk (43c31bdf404a6d7a7ac1bfd5ead2a566) C:\WINDOWS\system32\drivers\mfeapfk.sys
07:12:30.0089 1404 mfeapfk - ok
07:12:30.0120 1404 mfeavfk (c1dc5f42d3367f33b6451be78b38bd46) C:\WINDOWS\system32\drivers\mfeavfk.sys
07:12:30.0292 1404 mfeavfk - ok
07:12:30.0292 1404 mfeavfk01 - ok
07:12:30.0339 1404 mfebopk (0435c43f4c2be01b84868ad2a906397b) C:\WINDOWS\system32\drivers\mfebopk.sys
07:12:30.0511 1404 mfebopk - ok
07:12:30.0542 1404 mfefire (7e1f8b1bdc8240f08bd358b3a466c005) C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
07:12:30.0542 1404 mfefire - ok
07:12:30.0573 1404 mfefirek (4ea6ff90015424517843e931448e00f1) C:\WINDOWS\system32\drivers\mfefirek.sys
07:12:30.0761 1404 mfefirek - ok
07:12:30.0808 1404 mfehidk (d1e998748ba24a731106611d535c6bbf) C:\WINDOWS\system32\drivers\mfehidk.sys
07:12:30.0839 1404 mfehidk - ok
07:12:30.0870 1404 mfendisk (26c76d10ed650e6492800d6f081ecfba) C:\WINDOWS\system32\DRIVERS\mfendisk.sys
07:12:31.0042 1404 mfendisk - ok
07:12:31.0042 1404 mfendiskmp (26c76d10ed650e6492800d6f081ecfba) C:\WINDOWS\system32\DRIVERS\mfendisk.sys
07:12:31.0042 1404 mfendiskmp - ok
07:12:31.0089 1404 mferkdet (f454a13377f0a006d20a8c14a753c432) C:\WINDOWS\system32\drivers\mferkdet.sys
07:12:31.0230 1404 mferkdet - ok
07:12:31.0261 1404 mferkdk (41fe2f288e05a6c8ab85dd56770ffbad) C:\WINDOWS\system32\drivers\mferkdk.sys
07:12:31.0417 1404 mferkdk - ok
07:12:31.0448 1404 mfetdi2k (070d3faf2eac417c59d8674a8752f7a6) C:\WINDOWS\system32\drivers\mfetdi2k.sys
07:12:31.0620 1404 mfetdi2k - ok
07:12:31.0652 1404 mfevtp (b10c4efd40810c08f4b44df2efcb54f7) C:\WINDOWS\system32\mfevtps.exe
07:12:31.0652 1404 mfevtp - ok
07:12:31.0698 1404 mmc_2K (e97e3fe03b6f271336cb2fbb24734989) C:\WINDOWS\system32\drivers\mmc_2K.sys
07:12:31.0870 1404 mmc_2K - ok
07:12:31.0902 1404 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
07:12:31.0902 1404 mnmdd - ok
07:12:31.0948 1404 mnmsrvc (d18f1f0c101d06a1c1adf26eed16fcdd) C:\WINDOWS\System32\mnmsrvc.exe
07:12:31.0964 1404 mnmsrvc - ok
07:12:31.0995 1404 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
07:12:31.0995 1404 Modem - ok
07:12:32.0011 1404 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys
07:12:32.0152 1404 MODEMCSA - ok
07:12:32.0183 1404 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
07:12:32.0198 1404 Mouclass - ok
07:12:32.0230 1404 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
07:12:32.0245 1404 mouhid - ok
07:12:32.0261 1404 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
07:12:32.0261 1404 MountMgr - ok
07:12:32.0355 1404 MozillaMaintenance (15d5398eed42c2504bb3d4fc875c15d1) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
07:12:32.0511 1404 MozillaMaintenance - ok
07:12:32.0527 1404 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\System32\DRIVERS\mraid35x.sys
07:12:32.0683 1404 mraid35x - ok
07:12:32.0714 1404 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
07:12:32.0730 1404 MRxDAV - ok
07:12:32.0761 1404 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
07:12:32.0964 1404 MRxSmb - ok
07:12:32.0995 1404 MSDTC (a137f1470499a205abbb9aafb3b6f2b1) C:\WINDOWS\System32\msdtc.exe
07:12:33.0011 1404 MSDTC - ok
07:12:33.0042 1404 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
07:12:33.0042 1404 Msfs - ok
07:12:33.0042 1404 MSIServer - ok
07:12:33.0073 1404 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
07:12:33.0089 1404 MSKSSRV - ok
07:12:33.0105 1404 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
07:12:33.0120 1404 MSPCLOCK - ok
07:12:33.0136 1404 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
07:12:33.0152 1404 MSPQM - ok
07:12:33.0167 1404 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
07:12:33.0167 1404 mssmbios - ok
07:12:33.0198 1404 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
07:12:33.0198 1404 Mup - ok
07:12:33.0230 1404 MxlW2k (19dd5c581eef70134ccef87d626f4417) C:\WINDOWS\system32\drivers\MxlW2k.sys
07:12:33.0339 1404 MxlW2k - ok
07:12:33.0386 1404 napagent (0102140028fad045756796e1c685d695) C:\WINDOWS\System32\qagentrt.dll
07:12:33.0402 1404 napagent - ok
07:12:33.0417 1404 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
07:12:33.0433 1404 NDIS - ok
07:12:33.0464 1404 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
07:12:33.0558 1404 NdisTapi - ok
07:12:33.0589 1404 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
07:12:33.0589 1404 Ndisuio - ok
07:12:33.0605 1404 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
07:12:33.0620 1404 NdisWan - ok
07:12:33.0652 1404 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
07:12:33.0652 1404 NDProxy - ok
07:12:33.0667 1404 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
07:12:33.0667 1404 NetBIOS - ok
07:12:33.0698 1404 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
07:12:33.0698 1404 NetBT - ok
07:12:33.0745 1404 NetDDE (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
07:12:33.0745 1404 NetDDE - ok
07:12:33.0761 1404 NetDDEdsdm (b857ba82860d7ff85ae29b095645563b) C:\WINDOWS\system32\netdde.exe
07:12:33.0761 1404 NetDDEdsdm - ok
07:12:33.0792 1404 Netlogon (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
07:12:33.0792 1404 Netlogon - ok
07:12:33.0839 1404 Netman (13e67b55b3abd7bf3fe7aae5a0f9a9de) C:\WINDOWS\System32\netman.dll
07:12:33.0839 1404 Netman - ok
07:12:33.0948 1404 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
07:12:33.0964 1404 NetTcpPortSharing - ok
07:12:34.0011 1404 Nla (943337d786a56729263071623bbb9de5) C:\WINDOWS\System32\mswsock.dll
07:12:34.0027 1404 Nla - ok
07:12:34.0042 1404 NMSCFG (847d6d775524fa5e58d851ddec566a12) C:\WINDOWS\System32\drivers\NMSCFG.SYS
07:12:34.0230 1404 NMSCFG - ok
07:12:34.0308 1404 NMSSvc (89f315b13245c3dfda4438694f302b2e) C:\WINDOWS\System32\NMSSvc.exe
07:12:34.0542 1404 NMSSvc - ok
07:12:34.0573 1404 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
07:12:34.0573 1404 Npfs - ok
07:12:34.0620 1404 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
07:12:34.0636 1404 Ntfs - ok
07:12:34.0652 1404 NtLmSsp (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\System32\lsass.exe
07:12:34.0652 1404 NtLmSsp - ok
07:12:34.0698 1404 NtmsSvc (156f64a3345bd23c600655fb4d10bc08) C:\WINDOWS\system32\ntmssvc.dll
07:12:34.0714 1404 NtmsSvc - ok
07:12:34.0745 1404 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
07:12:34.0745 1404 Null - ok
07:12:34.0870 1404 nv (71dbdc08df86b80511e72953fa1ad6b0) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
07:12:35.0027 1404 nv - ok
07:12:35.0089 1404 NVSvc (5ed834603c36414b579979b3a9c90f54) C:\WINDOWS\System32\nvsvc32.exe
07:12:35.0105 1404 NVSvc - ok
07:12:35.0167 1404 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
07:12:35.0198 1404 NwlnkFlt - ok
07:12:35.0230 1404 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
07:12:35.0245 1404 NwlnkFwd - ok
07:12:35.0292 1404 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
07:12:35.0292 1404 NwlnkIpx - ok
07:12:35.0308 1404 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys
07:12:35.0323 1404 NwlnkNb - ok
07:12:35.0355 1404 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
07:12:35.0355 1404 NwlnkSpx - ok
07:12:35.0386 1404 NwSapAgent (4b83fcbbe72af5f99d109798653e8b78) C:\WINDOWS\System32\ipxsap.dll
07:12:35.0402 1404 NwSapAgent - ok
07:12:35.0433 1404 omci (1d98907d80461371437a7c898c58c8ae) C:\WINDOWS\system32\DRIVERS\omci.sys
07:12:35.0589 1404 omci - ok
07:12:35.0667 1404 P16X (e433c553d00d76fbc616294b60a7a530) C:\WINDOWS\system32\drivers\P16X.sys
07:12:35.0855 1404 P16X - ok
07:12:35.0980 1404 P3 (c90018bafdc7098619a4a95b046b30f3) C:\WINDOWS\system32\DRIVERS\p3.sys
07:12:35.0980 1404 P3 - ok
07:12:36.0011 1404 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
07:12:36.0027 1404 Parport - ok
07:12:36.0042 1404 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
07:12:36.0042 1404 PartMgr - ok
07:12:36.0073 1404 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
07:12:36.0089 1404 ParVdm - ok
07:12:36.0089 1404 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
07:12:36.0105 1404 PCI - ok
07:12:36.0105 1404 PCIDump - ok
07:12:36.0136 1404 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\System32\DRIVERS\pciide.sys
07:12:36.0152 1404 PCIIde - ok
07:12:36.0183 1404 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys
07:12:36.0198 1404 Pcmcia - ok
07:12:36.0198 1404 PDCOMP - ok
07:12:36.0214 1404 PDFRAME - ok
07:12:36.0230 1404 PDRELI - ok
07:12:36.0245 1404 PDRFRAME - ok
07:12:36.0261 1404 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\System32\DRIVERS\perc2.sys
07:12:36.0417 1404 perc2 - ok
07:12:36.0433 1404 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\System32\DRIVERS\perc2hib.sys
07:12:36.0448 1404 perc2hib - ok
07:12:36.0495 1404 PfModNT (0abc514f6606324ce15484d079027798) C:\WINDOWS\system32\drivers\PfModNT.sys
07:12:36.0667 1404 PfModNT - ok
07:12:36.0714 1404 PlugPlay (65df52f5b8b6e9bbd183505225c37315) C:\WINDOWS\system32\services.exe
07:12:36.0714 1404 PlugPlay - ok
07:12:36.0745 1404 PolicyAgent (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
07:12:36.0745 1404 PolicyAgent - ok
07:12:36.0761 1404 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
07:12:36.0777 1404 PptpMiniport - ok
07:12:36.0792 1404 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys
07:12:36.0808 1404 Processor - ok
07:12:36.0823 1404 ProtectedStorage (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
07:12:36.0823 1404 ProtectedStorage - ok
07:12:36.0839 1404 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
07:12:36.0839 1404 PSched - ok
07:12:36.0902 1404 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
07:12:36.0917 1404 Ptilink - ok
07:12:36.0948 1404 pwd_2k (070eddd0e4a5be55dd590d8b30dbff22) C:\WINDOWS\system32\drivers\pwd_2k.sys
07:12:37.0089 1404 pwd_2k - ok
07:12:37.0120 1404 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\System32\DRIVERS\ql1080.sys
07:12:37.0136 1404 ql1080 - ok
07:12:37.0152 1404 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\System32\DRIVERS\ql10wnt.sys
07:12:37.0167 1404 Ql10wnt - ok
07:12:37.0183 1404 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\System32\DRIVERS\ql12160.sys
07:12:37.0198 1404 ql12160 - ok
07:12:37.0214 1404 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\System32\DRIVERS\ql1240.sys
07:12:37.0230 1404 ql1240 - ok
07:12:37.0245 1404 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\System32\DRIVERS\ql1280.sys
07:12:37.0261 1404 ql1280 - ok
07:12:37.0292 1404 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
07:12:37.0308 1404 RasAcd - ok
07:12:37.0339 1404 RasAuto (ad188be7bdf94e8df4ca0a55c00a5073) C:\WINDOWS\System32\rasauto.dll
07:12:37.0339 1404 RasAuto - ok
07:12:37.0355 1404 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
07:12:37.0355 1404 Rasl2tp - ok
07:12:37.0417 1404 RasMan (76a9a3cbeadd68cc57cda5e1d7448235) C:\WINDOWS\System32\rasmans.dll
07:12:37.0417 1404 RasMan - ok
07:12:37.0433 1404 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
07:12:37.0448 1404 RasPppoe - ok
07:12:37.0464 1404 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
07:12:37.0464 1404 Raspti - ok
07:12:37.0495 1404 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
07:12:37.0511 1404 Rdbss - ok
07:12:37.0527 1404 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
07:12:37.0542 1404 RDPCDD - ok
07:12:37.0558 1404 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
07:12:37.0573 1404 rdpdr - ok
07:12:37.0620 1404 RDPWD (6589db6e5969f8eee594cf71171c5028) C:\WINDOWS\system32\drivers\RDPWD.sys
07:12:37.0620 1404 RDPWD - ok
07:12:37.0698 1404 RDSessMgr (3c37bf86641bda977c3bf8a840f3b7fa) C:\WINDOWS\system32\sessmgr.exe
07:12:37.0714 1404 RDSessMgr - ok
07:12:37.0761 1404 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
07:12:37.0761 1404 redbook - ok
07:12:37.0792 1404 RemoteAccess (7e699ff5f59b5d9de5390e3c34c67cf5) C:\WINDOWS\System32\mprdim.dll
07:12:37.0808 1404 RemoteAccess - ok
07:12:37.0823 1404 RemoteRegistry (5b19b557b0c188210a56a6b699d90b8f) C:\WINDOWS\system32\regsvc.dll
07:12:37.0839 1404 RemoteRegistry - ok
07:12:37.0870 1404 Rksample (bb7549bd94d1aac3599c7606c50c48a0) C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys
07:12:38.0042 1404 Rksample - ok
07:12:38.0089 1404 RpcLocator (aaed593f84afa419bbae8572af87cf6a) C:\WINDOWS\System32\locator.exe
07:12:38.0089 1404 RpcLocator - ok
07:12:38.0152 1404 RpcSs (6b27a5c03dfb94b4245739065431322c) C:\WINDOWS\System32\rpcss.dll
07:12:38.0167 1404 RpcSs - ok
07:12:38.0198 1404 RSVP (471b3f9741d762abe75e9deea4787e47) C:\WINDOWS\System32\rsvp.exe
07:12:38.0214 1404 RSVP - ok
07:12:38.0245 1404 SamSs (bf2466b3e18e970d8a976fb95fc1ca85) C:\WINDOWS\system32\lsass.exe
07:12:38.0245 1404 SamSs - ok
07:12:38.0292 1404 SCardSvr (86d007e7a654b9a71d1d7d856b104353) C:\WINDOWS\System32\SCardSvr.exe
07:12:38.0292 1404 SCardSvr - ok
07:12:38.0339 1404 Schedule (0a9a7365a1ca4319aa7c1d6cd8e4eafa) C:\WINDOWS\system32\schedsvc.dll
07:12:38.0355 1404 Schedule - ok
07:12:38.0386 1404 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
07:12:38.0386 1404 Secdrv - ok
07:12:38.0417 1404 seclogon (cbe612e2bb6a10e3563336191eda1250) C:\WINDOWS\System32\seclogon.dll
07:12:38.0417 1404 seclogon - ok
07:12:38.0433 1404 SENS (7fdd5d0684eca8c1f68b4d99d124dcd0) C:\WINDOWS\system32\sens.dll
07:12:38.0448 1404 SENS - ok
07:12:38.0464 1404 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
07:12:38.0480 1404 serenum - ok
07:12:38.0495 1404 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
07:12:38.0511 1404 Serial - ok
07:12:38.0542 1404 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
07:12:38.0542 1404 Sfloppy - ok
07:12:38.0589 1404 SharedAccess (83f41d0d89645d7235c051ab1d9523ac) C:\WINDOWS\System32\ipnathlp.dll
07:12:38.0605 1404 SharedAccess - ok
07:12:38.0636 1404 ShellHWDetection (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
07:12:38.0714 1404 ShellHWDetection - ok
07:12:38.0730 1404 Simbad - ok
07:12:38.0761 1404 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\System32\DRIVERS\sisagp.sys
07:12:38.0777 1404 sisagp - ok
07:12:38.0823 1404 SLPMONX (64e97a69b32d9bda5bf4924526b73c10) C:\WINDOWS\System32\slpservice.exe
07:12:38.0948 1404 SLPMONX - ok
07:12:38.0995 1404 SoftFax (d9e8e0ce154a2f6430d9efabdf730867) C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys
07:12:39.0152 1404 SoftFax - ok
07:12:39.0198 1404 SONYPVU1 (a1eceeaa5c5e74b2499eb51d38185b84) C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
07:12:39.0198 1404 SONYPVU1 - ok
07:12:39.0230 1404 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\System32\DRIVERS\sparrow.sys
07:12:39.0245 1404 Sparrow - ok
07:12:39.0261 1404 SpeakerPhone (6c843c43fd7f0b42cfe477ce88d0f9b3) C:\WINDOWS\system32\DRIVERS\HSF_SPKP.sys
07:12:39.0433 1404 SpeakerPhone - ok
07:12:39.0464 1404 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
07:12:39.0464 1404 splitter - ok
07:12:39.0495 1404 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
07:12:39.0605 1404 Spooler - ok
07:12:39.0620 1404 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
07:12:39.0620 1404 sr - ok
07:12:39.0667 1404 srservice (3805df0ac4296a34ba4bf93b346cc378) C:\WINDOWS\system32\srsvc.dll
07:12:39.0667 1404 srservice - ok
07:12:39.0714 1404 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
07:12:39.0823 1404 Srv - ok
07:12:39.0839 1404 SSDPSRV (0a5679b3714edab99e357057ee88fca6) C:\WINDOWS\System32\ssdpsrv.dll
07:12:39.0839 1404 SSDPSRV - ok
07:12:39.0886 1404 stisvc (8bad69cbac032d4bbacfce0306174c30) C:\WINDOWS\system32\wiaservc.dll
07:12:39.0886 1404 stisvc - ok
07:12:39.0917 1404 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
07:12:39.0917 1404 swenum - ok
07:12:39.0933 1404 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
07:12:39.0948 1404 swmidi - ok
07:12:39.0964 1404 SwPrv - ok
07:12:39.0995 1404 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\System32\DRIVERS\symc810.sys
07:12:40.0152 1404 symc810 - ok
07:12:40.0183 1404 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\System32\DRIVERS\symc8xx.sys
07:12:40.0292 1404 symc8xx - ok
07:12:40.0308 1404 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\System32\DRIVERS\sym_hi.sys
07:12:40.0308 1404 sym_hi - ok
07:12:40.0339 1404 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\System32\DRIVERS\sym_u3.sys
07:12:40.0511 1404 sym_u3 - ok
07:12:40.0527 1404 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
07:12:40.0542 1404 sysaudio - ok
07:12:40.0573 1404 SysmonLog (c7abbc59b43274b1109df6b24d617051) C:\WINDOWS\system32\smlogsvc.exe
07:12:40.0589 1404 SysmonLog - ok
07:12:40.0636 1404 TapiSrv (3cb78c17bb664637787c9a1c98f79c38) C:\WINDOWS\System32\tapisrv.dll
07:12:40.0652 1404 TapiSrv - ok
07:12:40.0698 1404 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
07:12:40.0714 1404 Tcpip - ok
07:12:40.0745 1404 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
07:12:40.0761 1404 TDPIPE - ok
07:12:40.0792 1404 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
07:12:40.0808 1404 TDTCP - ok
07:12:40.0839 1404 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
07:12:40.0839 1404 TermDD - ok
07:12:40.0870 1404 TermService (ff3477c03be7201c294c35f684b3479f) C:\WINDOWS\System32\termsrv.dll
07:12:40.0886 1404 TermService - ok
07:12:40.0933 1404 Themes (99bc0b50f511924348be19c7c7313bbf) C:\WINDOWS\System32\shsvcs.dll
07:12:41.0011 1404 Themes - ok
07:12:41.0042 1404 TlntSvr (db7205804759ff62c34e3efd8a4cc76a) C:\WINDOWS\System32\tlntsvr.exe
07:12:41.0058 1404 TlntSvr - ok
07:12:41.0089 1404 Tones (8021a499db46b2961c285168671cb9af) C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys
07:12:41.0261 1404 Tones - ok
07:12:41.0292 1404 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\System32\DRIVERS\toside.sys
07:12:41.0308 1404 TosIde - ok
07:12:41.0323 1404 TrkWks (55bca12f7f523d35ca3cb833c725f54e) C:\WINDOWS\system32\trkwks.dll
07:12:41.0323 1404 TrkWks - ok
07:12:41.0370 1404 UdfReadr_xp (27e66e79fd742c107fdb23280e17d869) C:\WINDOWS\system32\drivers\UdfReadr_xp.sys
07:12:41.0480 1404 UdfReadr_xp - ok
07:12:41.0495 1404 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
07:12:41.0511 1404 Udfs - ok
07:12:41.0527 1404 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\System32\DRIVERS\ultra.sys
07:12:41.0683 1404 ultra - ok
07:12:41.0730 1404 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
07:12:41.0745 1404 Update - ok
07:12:41.0792 1404 upnphost (1ebafeb9a3fbdc41b8d9c7f0f687ad91) C:\WINDOWS\System32\upnphost.dll
07:12:41.0808 1404 upnphost - ok
07:12:41.0823 1404 UPS (05365fb38fca1e98f7a566aaaf5d1815) C:\WINDOWS\System32\ups.exe
07:12:41.0839 1404 UPS - ok
07:12:41.0855 1404 USBAAPL - ok
07:12:41.0886 1404 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
07:12:41.0886 1404 usbehci - ok
07:12:41.0933 1404 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
07:12:41.0933 1404 usbhub - ok
07:12:41.0980 1404 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
07:12:41.0995 1404 usbprint - ok
07:12:42.0027 1404 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
07:12:42.0027 1404 usbscan - ok
07:12:42.0058 1404 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
07:12:42.0073 1404 USBSTOR - ok
07:12:42.0089 1404 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
07:12:42.0105 1404 usbuhci - ok
07:12:42.0167 1404 V124 (269c0ade94b90029b12497747be408cb) C:\WINDOWS\system32\DRIVERS\HSF_V124.sys
07:12:42.0323 1404 V124 - ok
07:12:42.0355 1404 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
07:12:42.0370 1404 VgaSave - ok
07:12:42.0386 1404 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\System32\DRIVERS\viaagp.sys
07:12:42.0402 1404 viaagp - ok
07:12:42.0417 1404 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\System32\DRIVERS\viaide.sys
07:12:42.0433 1404 ViaIde - ok
07:12:42.0448 1404 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
07:12:42.0464 1404 VolSnap - ok
07:12:42.0511 1404 VSS (7a9db3a67c333bf0bd42e42b8596854b) C:\WINDOWS\System32\vssvc.exe
07:12:42.0542 1404 VSS - ok
07:12:42.0573 1404 w32time (54af4b1d5459500ef0937f6d33b1914f) C:\WINDOWS\system32\w32time.dll
07:12:42.0589 1404 w32time - ok
07:12:42.0605 1404 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
07:12:42.0620 1404 Wanarp - ok
07:12:42.0636 1404 WDICA - ok
07:12:42.0652 1404 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
07:12:42.0667 1404 wdmaud - ok
07:12:42.0698 1404 WebClient (77a354e28153ad2d5e120a5a8687bc06) C:\WINDOWS\System32\webclnt.dll
07:12:42.0698 1404 WebClient - ok
07:12:42.0777 1404 winachsf (fe71b3857bed54600e02288b212e7b7c) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
07:12:42.0980 1404 winachsf - ok
07:12:43.0027 1404 winmgmt (2d0e4ed081963804ccc196a0929275b5) C:\WINDOWS\system32\wbem\WMIsvc.dll
07:12:43.0042 1404 winmgmt - ok
07:12:43.0073 1404 WMDM PMSP Service (581176f60885aef8f78c6e38dcc3cdf9) C:\WINDOWS\System32\MsPMSPSv.exe
07:12:43.0214 1404 WMDM PMSP Service - ok
07:12:43.0261 1404 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
07:12:43.0277 1404 WmdmPmSN - ok
07:12:43.0339 1404 Wmi (e76f8807070ed04e7408a86d6d3a6137) C:\WINDOWS\System32\advapi32.dll
07:12:43.0355 1404 Wmi - ok
07:12:43.0386 1404 WmiApSrv (e0673f1106e62a68d2257e376079f821) C:\WINDOWS\System32\wbem\wmiapsrv.exe
07:12:43.0402 1404 WmiApSrv - ok
07:12:43.0527 1404 WMPNetworkSvc (f74e3d9a7fa9556c3bbb14d4e5e63d3b) C:\Program Files\Windows Media Player\WMPNetwk.exe
07:12:43.0558 1404 WMPNetworkSvc - ok
07:12:43.0620 1404 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
07:12:43.0636 1404 WpdUsb - ok
07:12:43.0667 1404 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
07:12:43.0667 1404 WS2IFSL - ok
07:12:43.0698 1404 wscsvc (7c278e6408d1dce642230c0585a854d5) C:\WINDOWS\system32\wscsvc.dll
07:12:43.0714 1404 wscsvc - ok
07:12:43.0745 1404 wuauserv (35321fb577cdc98ce3eb3a3eb9e4610a) C:\WINDOWS\system32\wuauserv.dll
07:12:43.0761 1404 wuauserv - ok
07:12:43.0777 1404 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
07:12:43.0792 1404 WudfPf - ok
07:12:43.0823 1404 WUDFRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
07:12:43.0823 1404 WUDFRd - ok
07:12:43.0855 1404 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
07:12:43.0870 1404 WudfSvc - ok
07:12:43.0980 1404 WZCSVC (81dc3f549f44b1c1fff022dec9ecf30b) C:\WINDOWS\System32\wzcsvc.dll
07:12:44.0011 1404 WZCSVC - ok
07:12:44.0027 1404 xmlprov (295d21f14c335b53cb8154e5b1f892b9) C:\WINDOWS\System32\xmlprov.dll
07:12:44.0042 1404 xmlprov - ok
07:12:44.0073 1404 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
07:12:44.0605 1404 \Device\Harddisk0\DR0 - ok
07:12:44.0620 1404 Boot (0x1200) (82ab1b8030f3e2a7abf14a484299093f) \Device\Harddisk0\DR0\Partition0
07:12:44.0620 1404 \Device\Harddisk0\DR0\Partition0 - ok
07:12:44.0620 1404 ============================================================
07:12:44.0620 1404 Scan finished
07:12:44.0620 1404 ============================================================
07:12:44.0636 2784 Detected object count: 0
07:12:44.0636 2784 Actual detected object count: 0

aswMBR log file
aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-07-15 07:15:35
-----------------------------
07:15:35.948 OS Version: Windows 5.1.2600 Service Pack 3
07:15:35.948 Number of processors: 1 586 0x207
07:15:35.948 ComputerName: MELISSA UserName:
07:15:36.808 Initialize success
07:16:54.120 AVAST engine defs: 12071500
07:17:08.839 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
07:17:08.839 Disk 0 Vendor: WDC_WD1200JB-75CRA0 16.06V16 Size: 114440MB BusType: 3
07:17:08.870 Disk 0 MBR read successfully
07:17:08.870 Disk 0 MBR scan
07:17:08.902 Disk 0 Windows XP default MBR code
07:17:08.902 Disk 0 Partition 1 00 DE Dell Utility Dell 4.1 31 MB offset 63
07:17:08.933 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 114408 MB offset 64260
07:17:08.933 Disk 0 scanning sectors +234372285
07:17:09.011 Disk 0 scanning C:\WINDOWS\system32\drivers
07:17:25.089 Service scanning
07:17:41.089 Modules scanning
07:18:11.730 Disk 0 trace - called modules:
07:18:11.745 ntoskrnl.exe catchme.sys CLASSPNP.SYS disk.sys atapi.sys hal.dll intelide.sys PCIIDEX.SYS
07:18:12.277 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87754ab8]
07:18:12.277 3 CLASSPNP.SYS[f7761fd7] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x8778dd98]
07:18:12.808 AVAST engine scan C:\WINDOWS
07:18:52.261 AVAST engine scan C:\WINDOWS\system32
07:23:40.214 AVAST engine scan C:\WINDOWS\system32\drivers
07:24:04.480 AVAST engine scan C:\Documents and Settings\Melissa Griffith
07:36:02.620 AVAST engine scan C:\Documents and Settings\All Users
07:38:57.230 Scan finished successfully
07:43:53.839 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Melissa Griffith\Desktop\MBR.dat"
07:43:53.855 The log file has been saved successfully to "C:\Documents and Settings\Melissa Griffith\Desktop\aswMBR.txt"

Greetings

At this time I would like you to run this script for me and it is a good time to check out the computer to see if there is anything else that needs to be addressed.

:Run CFScript:

Open Notepad and copy/paste the text in the box into the window:

ClearJavaCache::

Save it to your desktop as CFScript.txt

Refering to the picture above, drag CFScript.txt into ComboFix.exe

This will let ComboFix run again.
Restart if you have to.
Save the produced logfile to your desktop.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

• In your next post I need the following
  
  
• report from Combofix
• let me know of any problems you may have had
• How is the computer doing now after running the script?

Gringo

Speed about the same.

ComboFix 12-07-14.01 - Melissa Griffith 07/15/2012 16:41:49.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.572 [GMT -4:00]
Running from: c:\documents and settings\Melissa Griffith\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Melissa Griffith\Desktop\CFScript.txt
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
.
.
((((((((((((((((((((((((( Files Created from 2012-06-15 to 2012-07-15 )))))))))))))))))))))))))))))))
.
.
2012-07-15 18:15 . 2012-05-25 21:09 29312 ----a-w- c:\program files\Mozilla Firefox\ScriptFF.dll
2012-07-14 20:24 . 2012-07-14 20:24 -------- d-----w- c:\program files\Oracle
2012-07-14 20:24 . 2012-07-14 20:24 -------- d-----w- c:\documents and settings\Melissa Griffith\Application Data\Oracle
2012-07-14 20:17 . 2012-06-14 22:20 15757792 ----a-w- c:\program files\Mozilla Firefox\xul.dll
2012-07-14 20:17 . 2012-06-14 22:20 92640 ----a-w- c:\program files\Mozilla Firefox\nssutil3.dll
2012-07-14 20:17 . 2012-06-14 22:20 95712 ----a-w- c:\program files\Mozilla Firefox\nssdbm3.dll
2012-07-14 20:17 . 2012-06-14 22:20 117728 ----a-w- c:\program files\Mozilla Firefox\crashreporter.exe
2012-06-23 16:32 . 2012-06-23 16:32 -------- d-----w- c:\program files\CodeStuff
2012-06-23 03:07 . 2012-06-23 03:07 25992 ----a-w- c:\windows\system32\pgdfgsvc.exe
2012-06-23 02:44 . 2012-05-25 21:09 29312 ----a-w- c:\program files\Mozilla Firefox\components\scriptff.dll
2012-06-23 02:31 . 2002-08-29 11:00 13894 ----a-w- c:\windows\system32\dllcache\zonelibm.dll
2012-06-23 02:31 . 2002-08-29 11:00 4677 ----a-w- c:\windows\system32\dllcache\zeeverm.dll
2012-06-23 02:31 . 2002-08-29 11:00 29760 ----a-w- c:\windows\system32\dllcache\znetm.dll
2012-06-23 02:31 . 2002-08-29 11:00 113222 ----a-w- c:\windows\system32\dllcache\zoneclim.dll
2012-06-23 02:31 . 2002-08-29 11:00 41029 ----a-w- c:\windows\system32\dllcache\zcorem.dll
2012-06-23 02:31 . 2008-04-14 00:12 116224 ----a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2012-06-23 02:31 . 2001-08-18 02:36 23040 ----a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2012-06-23 02:31 . 2008-04-14 00:12 18944 ----a-w- c:\windows\system32\dllcache\xrxscnui.dll
2012-06-23 02:31 . 2001-08-18 02:37 27648 ----a-w- c:\windows\system32\dllcache\xrxftplt.exe
2012-06-23 02:31 . 2001-08-18 02:37 4608 ----a-w- c:\windows\system32\dllcache\xrxflnch.exe
2012-06-23 02:30 . 2001-08-18 02:37 99865 ----a-w- c:\windows\system32\dllcache\xlog.exe
2012-06-23 02:30 . 2001-08-17 16:11 16970 ----a-w- c:\windows\system32\dllcache\xem336n5.sys
2012-06-23 02:30 . 2008-04-13 18:46 19200 ----a-w- c:\windows\system32\dllcache\wstcodec.sys
2012-06-23 02:30 . 2008-04-14 00:12 8192 ----a-w- c:\windows\system32\dllcache\wshirda.dll
2012-06-23 02:30 . 2008-04-13 18:36 8832 ----a-w- c:\windows\system32\dllcache\wmiacpi.sys
2012-06-23 02:30 . 2002-08-29 02:59 154624 ----a-w- c:\windows\system32\dllcache\wlluc48.sys
2012-06-23 02:30 . 2001-08-17 16:12 34890 ----a-w- c:\windows\system32\dllcache\wlandrv2.sys
2012-06-23 02:28 . 2008-04-13 18:45 60032 ----a-w- c:\windows\system32\dllcache\usbaudio.sys
2012-06-23 02:27 . 2001-08-18 02:36 94293 ----a-w- c:\windows\system32\dllcache\sxports.dll
2012-06-23 02:26 . 2002-08-29 11:00 38912 ----a-w- c:\windows\system32\dllcache\sm9aw.dll
2012-06-23 02:25 . 2001-08-18 02:36 62496 ----a-w- c:\windows\system32\dllcache\s3mtrio.dll
2012-06-23 02:24 . 2001-08-18 02:36 35328 ----a-w- c:\windows\system32\dllcache\psisload.dll
2012-06-23 02:23 . 2008-04-13 18:46 61696 ----a-w- c:\windows\system32\dllcache\ohci1394.sys
2012-06-23 02:22 . 2001-08-17 16:50 103296 ----a-w- c:\windows\system32\dllcache\mtxvideo.sys
2012-06-23 02:22 . 2008-04-13 18:39 5504 ----a-w- c:\windows\system32\dllcache\mstee.sys
2012-06-23 02:22 . 2008-04-13 18:46 49024 ----a-w- c:\windows\system32\dllcache\mstape.sys
2012-06-23 02:22 . 2001-08-17 17:48 12416 ----a-w- c:\windows\system32\dllcache\msriffwv.sys
2012-06-23 02:22 . 2001-08-17 18:00 2944 ----a-w- c:\windows\system32\dllcache\msmpu401.sys
2012-06-23 02:22 . 2008-04-13 18:54 22016 ----a-w- c:\windows\system32\dllcache\msircomm.sys
2012-06-23 02:22 . 2002-08-29 11:00 98304 ----a-w- c:\windows\system32\dllcache\msir3jp.dll
2012-06-23 02:22 . 2001-08-17 18:02 35200 ----a-w- c:\windows\system32\dllcache\msgame.sys
2012-06-23 02:22 . 2001-08-17 17:48 6016 ----a-w- c:\windows\system32\dllcache\msfsio.sys
2012-06-23 02:22 . 2008-04-13 18:46 51200 ----a-w- c:\windows\system32\dllcache\msdv.sys
2012-06-23 02:22 . 2008-04-13 18:46 15232 ----a-w- c:\windows\system32\dllcache\mpe.sys
2012-06-23 02:20 . 2002-08-29 11:00 9216 ----a-w- c:\windows\system32\dllcache\kbdnecat.dll
2012-06-23 02:19 . 2002-08-29 11:00 311359 ----a-w- c:\windows\system32\dllcache\imepadsv.exe
2012-06-23 02:18 . 2001-08-18 02:36 126976 ----a-w- c:\windows\system32\dllcache\hpgt34tk.dll
2012-06-23 02:17 . 2001-08-17 16:12 24618 ----a-w- c:\windows\system32\dllcache\fa410nd5.sys
2012-06-23 02:16 . 2001-08-17 16:20 334208 ----a-w- c:\windows\system32\dllcache\ds1wdm.sys
2012-06-23 02:15 . 2001-08-17 17:50 49792 ----a-w- c:\windows\system32\dllcache\cyzport.sys
2012-06-23 02:14 . 2001-08-17 16:13 27164 ----a-w- c:\windows\system32\dllcache\ce3n5.sys
2012-06-23 02:13 . 2001-08-17 17:51 13824 ----a-w- c:\windows\system32\dllcache\bulltlp3.sys
2012-06-23 02:12 . 2001-08-17 18:56 268160 ----a-w- c:\windows\system32\dllcache\atidvai.dll
2012-06-23 02:11 . 2002-08-29 11:00 7168 ----a-w- c:\windows\system32\dllcache\wamregps.dll
2012-06-23 02:11 . 2001-08-17 18:56 66048 ----a-w- c:\windows\system32\dllcache\s3legacy.dll
2012-06-23 02:10 . 2002-08-29 11:00 19968 ----a-w- c:\windows\system32\dllcache\inetsloc.dll
2012-06-23 02:10 . 2002-08-29 11:00 7680 ----a-w- c:\windows\system32\dllcache\inetmgr.exe
2012-06-23 02:10 . 2002-08-29 11:00 169984 ----a-w- c:\windows\system32\dllcache\iisui.dll
2012-06-23 02:10 . 2002-08-29 11:00 5632 ----a-w- c:\windows\system32\dllcache\iisrstap.dll
2012-06-23 02:10 . 2002-08-29 11:00 14336 ----a-w- c:\windows\system32\dllcache\iisreset.exe
2012-06-23 02:10 . 2002-08-29 11:00 6144 ----a-w- c:\windows\system32\dllcache\ftpsapi2.dll
2012-06-16 18:50 . 2012-07-06 02:06 772544 ----a-w- c:\windows\system32\npdeployJava1.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-12 08:47 . 2012-04-02 22:52 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-12 08:47 . 2011-06-28 10:41 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-06 02:07 . 2007-04-30 21:40 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-06-16 18:49 . 2010-08-04 10:16 472840 ----a-w- c:\windows\system32\deployJava1.dll
2012-06-13 13:19 . 2002-08-29 11:00 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-06-05 15:50 . 2008-09-20 04:39 1372672 ----a-w- c:\windows\system32\msxml6.dll
2012-06-05 15:50 . 2002-08-29 11:00 1172480 ----a-w- c:\windows\system32\msxml3.dll
2012-06-04 04:32 . 2002-08-29 11:00 152576 ----a-w- c:\windows\system32\schannel.dll
2012-06-02 19:19 . 2007-06-18 21:24 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 19:19 . 2007-06-18 21:24 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 19:19 . 2004-08-14 03:59 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 19:19 . 2004-08-14 03:59 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 19:19 . 2004-08-14 03:59 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 19:19 . 2007-06-18 21:24 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 19:19 . 2005-05-26 08:16 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 19:19 . 2004-08-14 03:59 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 19:19 . 2002-08-29 11:00 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 19:19 . 2002-08-29 11:00 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 19:19 . 2007-06-18 21:24 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 19:19 . 2004-08-14 03:59 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 19:19 . 2002-08-29 11:00 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 19:18 . 2007-06-19 18:38 17136 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-06-02 19:18 . 2006-06-17 12:02 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 19:18 . 2005-05-26 08:19 214256 ----a-w- c:\windows\system32\muweb.dll
2012-05-31 13:22 . 2002-09-23 20:10 599040 ----a-w- c:\windows\system32\crypt32.dll
2012-05-16 15:08 . 2004-08-24 00:32 916992 ----a-w- c:\windows\system32\wininet.dll
2012-05-11 14:42 . 2002-08-29 11:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-05-11 14:42 . 2002-08-29 11:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-05-11 11:38 . 2004-08-04 05:59 385024 ----a-w- c:\windows\system32\html.iec
2012-05-04 13:12 . 1980-01-01 06:00 2192640 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 12:32 . 1980-01-01 06:00 2069120 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-02 13:46 . 2002-08-29 11:00 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-06-14 22:20 . 2012-07-14 22:02 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2007-08-25 03:52 . 2008-02-06 12:11 300400 -c--a-w- c:\program files\mozilla firefox\components\coFFPlgn.dll
2012-05-25 21:09 . 2012-06-23 02:44 29312 ----a-w- c:\program files\mozilla firefox\components\scriptff.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-07-14_22.42.33 )))))))))))))))))))))))))))))))))))))))))
.
+ 2002-09-03 19:45 . 2012-07-15 18:15 32768 c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\History\History.IE5\INDEX.DAT
- 2002-09-03 19:45 . 2012-07-14 19:58 32768 c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\History\History.IE5\INDEX.DAT
- 2010-02-28 15:33 . 2012-07-14 19:58 16384 c:\windows\SYSTEM32\CONFIG\systemprofile\IETldCache\index.dat
+ 2010-02-28 15:33 . 2012-07-15 18:15 16384 c:\windows\SYSTEM32\CONFIG\systemprofile\IETldCache\index.dat
+ 2012-07-15 00:08 . 2012-07-15 18:15 32768 c:\windows\SYSTEM32\CONFIG\systemprofile\Cookies\index.dat
- 2002-09-03 19:45 . 2012-07-14 19:58 32768 c:\windows\SYSTEM32\CONFIG\systemprofile\Cookies\INDEX.DAT
+ 2003-08-04 19:44 . 2012-07-15 18:15 1409024 c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2003-08-04 19:44 . 2012-07-14 19:58 1409024 c:\windows\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Creative Detector"="c:\program files\Creative\MediaSource\Detector\CTDetect.exe" [2004-12-02 102400]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-10-19 204288]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-06 68856]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2003-10-06 5058560]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-03-22 1318816]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-07-05 421888]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-04-04 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
backup=c:\windows\pss\Adobe Gamma Loader.exe.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Payment Wizard Options.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Payment Wizard Options.lnk
backup=c:\windows\pss\Payment Wizard Options.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks 2001 Delivery Agent.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks 2001 Delivery Agent.lnk
backup=c:\windows\pss\QuickBooks 2001 Delivery Agent.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
backup=c:\windows\pss\QuickBooks Update Agent.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eBayToolbar]
2012-03-04 23:41 632048 ----a-w- c:\program files\eBay\eBay Toolbar2\eBayTBDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MoneyAgent]
2001-07-25 16:00 184376 ----a-w- c:\program files\Microsoft Money\System\Money Express.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2003-10-06 19:16 741376 ----a-w- c:\windows\SYSTEM32\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-07-05 22:36 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SLPMONX"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
"diagent"="c:\program files\Creative\SBLive\Diagnostics\diagent.exe" startup
"DwlClient"=c:\program files\Common Files\Dell\EUSW\Support.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Intuit\\QuickBooks Basic\\QBDBMgrN.exe"=
"c:\\Program Files\\Intuit\\QuickBooks Basic\\QBW32Pro.exe"=
"c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"10160:TCP"= 10160:TCP:Quick Books
.
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\SYSTEM32\DRIVERS\mfetdi2k.sys [9/16/2010 7:39 PM 89792]
R2 HPPECP00;hppecp00;c:\windows\SYSTEM32\DRIVERS\hppecp00.sys [1/27/2003 9:24 PM 42048]
R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [9/16/2010 7:39 PM 214904]
R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [9/16/2010 7:39 PM 214904]
R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [9/16/2010 7:40 PM 161632]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\SYSTEM32\mfevtps.exe [9/16/2010 7:39 PM 151880]
R3 cfwids;McAfee Inc. cfwids;c:\windows\SYSTEM32\DRIVERS\cfwids.sys [9/16/2010 7:39 PM 57600]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\SYSTEM32\DRIVERS\mfefirek.sys [9/16/2010 7:39 PM 340920]
R3 mfendiskmp;mfendiskmp;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [9/16/2010 7:39 PM 83856]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/16/2010 8:48 AM 135664]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\SITEAD~1\mcsacore.exe [2/17/2010 7:38 PM 95200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SYSTEM32\Macromed\Flash\FlashPlayerUpdateService.exe [4/2/2012 6:52 PM 250056]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2/16/2010 8:48 AM 135664]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\SYSTEM32\DRIVERS\mfendisk.sys [9/16/2010 7:39 PM 83856]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\SYSTEM32\DRIVERS\mferkdet.sys [9/16/2010 7:39 PM 87656]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [7/14/2012 6:02 PM 113120]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - 97347468
*NewlyCreated* - ASWMBR
*NewlyCreated* - JAVAQUICKSTARTERSERVICE
*Deregistered* - 97347468
*Deregistered* - aswMBR
*Deregistered* - mfeavfk01
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 08:47]
.
2012-07-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-16 12:48]
.
2012-07-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-16 12:48]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mSearch Bar = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: eBay Search - c:\program files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
Trusted Zone: aol.com\free
Trusted Zone: cwreenactors.com\www
Trusted Zone: internet
Trusted Zone: mcafee.com
Trusted Zone: microsoft.com\office
Trusted Zone: prosoft-eng.com\owa2k
Trusted Zone: prosoft.tv\email
TCP: DhcpNameServer = 192.168.1.1
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {4A3CBDDD-C4DC-4C38-B44F-704DAEF628AE} - hxxp://project.prosoft.tv/projectserver/objects/pjclient.cab
DPF: {A1832535-5218-42F9-8959-19E2BCABFABF} - hxxp://plugin.inicis.com/wallet50/INIwallet50.cab
DPF: {AF9A1421-E128-4D5F-A37E-039F305867B9} - hxxp://project.prosoft.tv/projectserver/objects/1033/pjcintl.cab
DPF: {D1B09964-F8F7-4FAB-8F2D-B8B2AC3D3BD3} - hxxp://plugin.inicis.com/INIwallet_Eng.cab
DPF: {F73BE1F4-82AA-4405-AB81-FAFB5A122359} - hxxp://stores.homestead.com/storeadmin/utilities/pssbedit.cab
FF - ProfilePath - c:\documents and settings\Melissa Griffith\Application Data\Mozilla\Firefox\Profiles\hyaiwu5u.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.charter.msn.com/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-15 16:51
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Creative Detector = "c:\program files\Creative\MediaSource\Detector\CTDetect.exe" /R??D~0?A~????*?A~??B~????w?C~\???m???f???????????????L???L?????????B~w?C~\???m???f???????????????? ?sw?C~\???m???f???????L??????????sm???f???????m???????$???x??sm???f??????????????? SB~f???N??????
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(3136)
c:\windows\system32\WININET.dll
c:\progra~1\mcafee\SITEAD~1\saHook.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2012-07-15 16:55:30
ComboFix-quarantined-files.txt 2012-07-15 20:55
ComboFix2.txt 2012-07-14 22:48
.
Pre-Run: 89,284,595,712 bytes free
Post-Run: 89,359,585,280 bytes free
.
- - End Of File - - 63A95A612DB628DFA100EF3387BBE4F2

Hello


I want you to reset the DMA you can do this by this script here - Reset DMA

If you have problems when you click on the link try to right click on the link and select "Save Target As" and then save to your desktop.
Once it is on your desktop right click on the file and select "Run"

If you still can't run it then you can go here "Reset DMA" to see what I want to do



I would like to see a report that combofix makes.

extra combofix report

• push the "windows key" + "R" (between the "Ctrl" button and "Alt" Button)
• please copy and past the following into the box

C:\Qoobox\Add-Remove Programs.txt

• click ok

copy and paste the report into this topic for me to review

Gringo

Greetings


I have not heard from you in a couple of days so I am coming by to check on you to see if you are having problems or you just need some more time.

Also to remind you that it is very important that we finish the process completely so as to not get reinfected. I will let you know when we are complete and I will ask to remove our tools




Gringo