BleepingComputer.com: Trojan:JS.Hiloti.F removed by MSE ( ? )

 ark.txt (11.83K)
Number of downloads: 2

Hello ,

After updating Superantyspyware and starting a routine scan , i left it to do it's thing but when i returned a few minutes later i found Microsoft Security Essentials warning of a severe infection by Trojan:JS.Hiloti.F and suggesting immediate action , strangely the spyware scan ( still running ) showed nothing. Stopped spyware scan and followed the removal instructions in MSE.
Since then i've have done several scans with : MSE, Superantispyware., Malwarebytes and SpyBot and found nothing but i'd like to make sure there aren't any hidden nasties lurking in my system.

Also i found it quite strange that this pest showed up straight after updating SAS..any thoughts on this?

Please see attached dds & gmer scan results .

Thanks in advance, cheers


 attach.txt (22.62K)
Number of downloads: 2


.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Run by Owner at 10:44:29 on 2011-09-22
Microsoft Windows XP Professional 5.1.2600.3.1252.61.1033.18.958.245 [GMT 10:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
FW: Sygate Personal Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Sygate\SPF\smc.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Seagate\Basics\Service\SyncServicesBasics.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\StartupMonitor.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\S3trayp.exe
C:\Program Files\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PeerBlock\peerblock.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page =
uStart Page = about:blank
uSearch Bar =
mDefault_Page_URL = hxxp://www.yahoo.com/
mDefault_Search_URL = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
mSearch Page = hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com
mStart Page = hxxp://www.yahoo.com/
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
mSearchAssistant =
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Easy-WebPrint: {327c2873-e90d-4c37-aa9d-10ac9baba46c} - c:\program files\canon\easy-webprint\Toolband.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil10w_Plugin.exe -update plugin
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Run StartupMonitor] StartupMonitor.exe
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [SmcService] c:\progra~1\sygate\spf\smc.exe -startgui
mRun: [S3Trayp] S3trayp.exe
mRun: [basicsmssmenu] "c:\program files\seagate\basics\basics status\MaxMenuMgrBasics.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
dRunOnce: [RunNarrator] Narrator.exe
IE: {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - c:\program files\paltalk messenger\Paltalk.exe
IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
Trusted Zone: musicmatch.com\online
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1185345645250
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
TCP: DhcpNameServer = 10.1.1.1
TCP: Interfaces\{12037513-B6D4-4D38-8316-D65F17AD8C11} : DhcpNameServer = 10.1.1.1
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: {57B86673-276A-48B2-BAE7-C6DBB3020EB8} - No File
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\owner\application data\mozilla\firefox\profiles\labmfapn.default\
FF - plugin: c:\documents and settings\owner\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\documents and settings\owner\application data\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\documents and settings\owner\local settings\application data\google\update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.2.145.5\npGoogleOneClick8.dll
FF - plugin: c:\program files\microsoft silverlight\4.0.60531.0\npctrlui.dll
.
---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true
============= SERVICES / DRIVERS ===============
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-2-28 64288]
R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [2007-7-24 17920]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2011-4-18 165648]
R1 MpKsl742c4bfb;MpKsl742c4bfb;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{74095cf3-68ee-4cdb-9fba-14fd3589582c}\MpKsl742c4bfb.sys [2011-9-22 28752]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2010-2-18 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-11 67664]
R3 pbfilter;pbfilter;c:\program files\peerblock\pbfilter.sys [2010-3-14 19056]
R3 S3GIGP;S3GIGP;c:\windows\system32\drivers\S3gIGPm.sys [2007-7-24 634880]
S1 MpKsl04d714fe;MpKsl04d714fe;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f057a188-86bc-4ffc-b3a3-b0f8a9a5cf03}\mpksl04d714fe.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f057a188-86bc-4ffc-b3a3-b0f8a9a5cf03}\MpKsl04d714fe.sys [?]
S1 MpKsl04e7a8e6;MpKsl04e7a8e6;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{78385172-5f18-4ca3-9ecd-f761ac66796d}\mpksl04e7a8e6.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{78385172-5f18-4ca3-9ecd-f761ac66796d}\MpKsl04e7a8e6.sys [?]
S1 MpKsl07051db3;MpKsl07051db3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d52ea41f-eff2-4df4-9946-8fd804d7349b}\mpksl07051db3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d52ea41f-eff2-4df4-9946-8fd804d7349b}\MpKsl07051db3.sys [?]
S1 MpKsl0fd00710;MpKsl0fd00710;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{67e63138-b424-4fc0-89b8-cd6007a22e2a}\mpksl0fd00710.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{67e63138-b424-4fc0-89b8-cd6007a22e2a}\MpKsl0fd00710.sys [?]
S1 MpKsl0fef358b;MpKsl0fef358b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{12b7e7ba-ba45-4514-a6ff-1bff1c45ae28}\mpksl0fef358b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{12b7e7ba-ba45-4514-a6ff-1bff1c45ae28}\MpKsl0fef358b.sys [?]
S1 MpKsl170db3c1;MpKsl170db3c1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9411ad19-226d-4528-bfd1-4d3961856961}\mpksl170db3c1.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9411ad19-226d-4528-bfd1-4d3961856961}\MpKsl170db3c1.sys [?]
S1 MpKsl17388059;MpKsl17388059;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ca308c93-9098-453c-b37c-4c90a327d544}\mpksl17388059.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ca308c93-9098-453c-b37c-4c90a327d544}\MpKsl17388059.sys [?]
S1 MpKsl1a9cd08c;MpKsl1a9cd08c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{73543b71-a749-4224-8f5a-7886b107d2d4}\mpksl1a9cd08c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{73543b71-a749-4224-8f5a-7886b107d2d4}\MpKsl1a9cd08c.sys [?]
S1 MpKsl1e9e9f23;MpKsl1e9e9f23;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{09bcbf48-1216-419f-b77e-2b26c7796722}\mpksl1e9e9f23.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{09bcbf48-1216-419f-b77e-2b26c7796722}\MpKsl1e9e9f23.sys [?]
S1 MpKsl2525fa26;MpKsl2525fa26;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0ce80716-b638-45ec-8ca6-ba89cc57bc13}\mpksl2525fa26.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0ce80716-b638-45ec-8ca6-ba89cc57bc13}\MpKsl2525fa26.sys [?]
S1 MpKsl31969fec;MpKsl31969fec;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9a57e9ae-1418-4c8a-b36a-68c5e0aa75af}\mpksl31969fec.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9a57e9ae-1418-4c8a-b36a-68c5e0aa75af}\MpKsl31969fec.sys [?]
S1 MpKsl32e546cd;MpKsl32e546cd;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cd136741-69ea-4a18-a9e0-295ff86a73e4}\mpksl32e546cd.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cd136741-69ea-4a18-a9e0-295ff86a73e4}\MpKsl32e546cd.sys [?]
S1 MpKsl347fd480;MpKsl347fd480;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{13b1c30d-b06b-41b9-aef8-01b75fec3478}\mpksl347fd480.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{13b1c30d-b06b-41b9-aef8-01b75fec3478}\MpKsl347fd480.sys [?]
S1 MpKsl389e5fd3;MpKsl389e5fd3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2bef926-e1f8-4cd8-a27b-c4de3ede9366}\mpksl389e5fd3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2bef926-e1f8-4cd8-a27b-c4de3ede9366}\MpKsl389e5fd3.sys [?]
S1 MpKsl44382ad0;MpKsl44382ad0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8bf75ae2-b9fb-4ecb-9e85-a4dd8b873313}\mpksl44382ad0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8bf75ae2-b9fb-4ecb-9e85-a4dd8b873313}\MpKsl44382ad0.sys [?]
S1 MpKsl4581b380;MpKsl4581b380;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{876378ca-6ceb-472a-8d2b-ed05cc8c6371}\mpksl4581b380.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{876378ca-6ceb-472a-8d2b-ed05cc8c6371}\MpKsl4581b380.sys [?]
S1 MpKsl476dc0a5;MpKsl476dc0a5;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d0fa2223-1485-42dc-a636-4fa333182b2d}\mpksl476dc0a5.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d0fa2223-1485-42dc-a636-4fa333182b2d}\MpKsl476dc0a5.sys [?]
S1 MpKsl4a3e149b;MpKsl4a3e149b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{73127315-7b70-4b4c-950b-4bb82f8f0a0c}\mpksl4a3e149b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{73127315-7b70-4b4c-950b-4bb82f8f0a0c}\MpKsl4a3e149b.sys [?]
S1 MpKsl4d3b2835;MpKsl4d3b2835;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a333ee50-a3e4-4eee-8895-6a827c9da5a1}\mpksl4d3b2835.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a333ee50-a3e4-4eee-8895-6a827c9da5a1}\MpKsl4d3b2835.sys [?]
S1 MpKsl531cdd1b;MpKsl531cdd1b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d4f88b97-7a4b-46e2-9aae-d3871c49181a}\mpksl531cdd1b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{d4f88b97-7a4b-46e2-9aae-d3871c49181a}\MpKsl531cdd1b.sys [?]
S1 MpKsl54464d27;MpKsl54464d27;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cff4b4d1-abab-4e68-9f10-2594266067c3}\mpksl54464d27.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cff4b4d1-abab-4e68-9f10-2594266067c3}\MpKsl54464d27.sys [?]
S1 MpKsl55176185;MpKsl55176185;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a333ee50-a3e4-4eee-8895-6a827c9da5a1}\mpksl55176185.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a333ee50-a3e4-4eee-8895-6a827c9da5a1}\MpKsl55176185.sys [?]
S1 MpKsl58e80e7d;MpKsl58e80e7d;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{06873e88-92af-43e8-a544-d8966d30d91c}\mpksl58e80e7d.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{06873e88-92af-43e8-a544-d8966d30d91c}\MpKsl58e80e7d.sys [?]
S1 MpKsl63a08d8f;MpKsl63a08d8f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{23d6bdcf-d123-4a0a-9da7-0cb3a50e6b93}\mpksl63a08d8f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{23d6bdcf-d123-4a0a-9da7-0cb3a50e6b93}\MpKsl63a08d8f.sys [?]
S1 MpKsl63d448cd;MpKsl63d448cd;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a84e07a1-8b4d-429a-9bef-fa99b913c155}\mpksl63d448cd.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a84e07a1-8b4d-429a-9bef-fa99b913c155}\MpKsl63d448cd.sys [?]
S1 MpKsl66d4758f;MpKsl66d4758f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d68669c-1105-4e01-95eb-40d92641cdb9}\mpksl66d4758f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{3d68669c-1105-4e01-95eb-40d92641cdb9}\MpKsl66d4758f.sys [?]
S1 MpKsl69a89e20;MpKsl69a89e20;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f1c3e15b-ebdf-4de1-a7b6-1fcfbf2749cc}\mpksl69a89e20.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f1c3e15b-ebdf-4de1-a7b6-1fcfbf2749cc}\MpKsl69a89e20.sys [?]
S1 MpKsl7277b35b;MpKsl7277b35b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5e8fc6bd-d0d4-4ab0-bb9b-69d9d6624a7d}\mpksl7277b35b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5e8fc6bd-d0d4-4ab0-bb9b-69d9d6624a7d}\MpKsl7277b35b.sys [?]
S1 MpKsl74affbca;MpKsl74affbca;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{51bd395a-821d-4830-b9a4-87979ab5c449}\mpksl74affbca.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{51bd395a-821d-4830-b9a4-87979ab5c449}\MpKsl74affbca.sys [?]
S1 MpKsl7746c900;MpKsl7746c900;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8bf75ae2-b9fb-4ecb-9e85-a4dd8b873313}\mpksl7746c900.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8bf75ae2-b9fb-4ecb-9e85-a4dd8b873313}\MpKsl7746c900.sys [?]
S1 MpKsl77cfd85a;MpKsl77cfd85a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2b21c7c-a87f-4dba-ac56-9e93ae1864d1}\mpksl77cfd85a.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2b21c7c-a87f-4dba-ac56-9e93ae1864d1}\MpKsl77cfd85a.sys [?]
S1 MpKsl780ecef3;MpKsl780ecef3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{77ff2cde-1fcd-4d62-aa43-da9329ba9953}\mpksl780ecef3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{77ff2cde-1fcd-4d62-aa43-da9329ba9953}\MpKsl780ecef3.sys [?]
S1 MpKsl79af2e12;MpKsl79af2e12;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{563561d8-e47e-43cd-939a-3d343edcab90}\mpksl79af2e12.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{563561d8-e47e-43cd-939a-3d343edcab90}\MpKsl79af2e12.sys [?]
S1 MpKsl828ed4b5;MpKsl828ed4b5;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0ab6a7ee-6b93-4041-bddc-85322b8f9d69}\mpksl828ed4b5.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0ab6a7ee-6b93-4041-bddc-85322b8f9d69}\MpKsl828ed4b5.sys [?]
S1 MpKsl8300e066;MpKsl8300e066;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ad9f832c-5fc4-4406-a686-69dd8d6758ad}\mpksl8300e066.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ad9f832c-5fc4-4406-a686-69dd8d6758ad}\MpKsl8300e066.sys [?]
S1 MpKsl85d4e895;MpKsl85d4e895;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{adcb5bdf-4662-4394-97dd-9dd45f7c38bf}\mpksl85d4e895.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{adcb5bdf-4662-4394-97dd-9dd45f7c38bf}\MpKsl85d4e895.sys [?]
S1 MpKsl8b599d77;MpKsl8b599d77;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a84e07a1-8b4d-429a-9bef-fa99b913c155}\mpksl8b599d77.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a84e07a1-8b4d-429a-9bef-fa99b913c155}\MpKsl8b599d77.sys [?]
S1 MpKsl8ef04148;MpKsl8ef04148;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{65185880-8adf-4a07-ba7e-0fba16e1c96a}\mpksl8ef04148.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{65185880-8adf-4a07-ba7e-0fba16e1c96a}\MpKsl8ef04148.sys [?]
S1 MpKsl8f1a0ffc;MpKsl8f1a0ffc;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8b61c390-81fb-4148-8734-d7cb00aa8653}\mpksl8f1a0ffc.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{8b61c390-81fb-4148-8734-d7cb00aa8653}\MpKsl8f1a0ffc.sys [?]
S1 MpKsl97d768a8;MpKsl97d768a8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{627ac2b5-1926-4aa0-b352-32690b06b5a6}\mpksl97d768a8.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{627ac2b5-1926-4aa0-b352-32690b06b5a6}\MpKsl97d768a8.sys [?]
S1 MpKsl99fb742d;MpKsl99fb742d;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{73543b71-a749-4224-8f5a-7886b107d2d4}\mpksl99fb742d.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{73543b71-a749-4224-8f5a-7886b107d2d4}\MpKsl99fb742d.sys [?]
S1 MpKsla06baf18;MpKsla06baf18;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac2b1b64-07dc-4445-9c7d-69fb3a3d33d3}\mpksla06baf18.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ac2b1b64-07dc-4445-9c7d-69fb3a3d33d3}\MpKsla06baf18.sys [?]
S1 MpKsla67c915e;MpKsla67c915e;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{71f8cbee-e893-4973-974f-b989f38107b9}\mpksla67c915e.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{71f8cbee-e893-4973-974f-b989f38107b9}\MpKsla67c915e.sys [?]
S1 MpKsla9b69f0b;MpKsla9b69f0b;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2c491561-7efd-4fd2-8d9a-246f7dfc98bb}\mpksla9b69f0b.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2c491561-7efd-4fd2-8d9a-246f7dfc98bb}\MpKsla9b69f0b.sys [?]
S1 MpKslab914ad3;MpKslab914ad3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{74095cf3-68ee-4cdb-9fba-14fd3589582c}\mpkslab914ad3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{74095cf3-68ee-4cdb-9fba-14fd3589582c}\MpKslab914ad3.sys [?]
S1 MpKslac37ab63;MpKslac37ab63;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5b31c48d-298a-4a5b-90e4-2e8a0f441fc2}\mpkslac37ab63.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{5b31c48d-298a-4a5b-90e4-2e8a0f441fc2}\MpKslac37ab63.sys [?]
S1 MpKslb7b0eec0;MpKslb7b0eec0;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cff3385f-64e8-4798-b4d1-8502b9f4a7c7}\mpkslb7b0eec0.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{cff3385f-64e8-4798-b4d1-8502b9f4a7c7}\MpKslb7b0eec0.sys [?]
S1 MpKslb90720e9;MpKslb90720e9;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9411ad19-226d-4528-bfd1-4d3961856961}\mpkslb90720e9.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{9411ad19-226d-4528-bfd1-4d3961856961}\MpKslb90720e9.sys [?]
S1 MpKslbd638e8f;MpKslbd638e8f;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a95f77fc-b515-4f75-a671-7ab342666345}\mpkslbd638e8f.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a95f77fc-b515-4f75-a671-7ab342666345}\MpKslbd638e8f.sys [?]
S1 MpKslc1b88511;MpKslc1b88511;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0012149c-998d-4a62-9af9-8a911ec2e173}\mpkslc1b88511.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0012149c-998d-4a62-9af9-8a911ec2e173}\MpKslc1b88511.sys [?]
S1 MpKslc8a89a79;MpKslc8a89a79;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{86045522-88e4-457c-9765-623151c97077}\mpkslc8a89a79.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{86045522-88e4-457c-9765-623151c97077}\MpKslc8a89a79.sys [?]
S1 MpKslc9988885;MpKslc9988885;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{698005e9-d368-4fb2-baa4-e077e34f884c}\mpkslc9988885.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{698005e9-d368-4fb2-baa4-e077e34f884c}\MpKslc9988885.sys [?]
S1 MpKslcb4215d8;MpKslcb4215d8;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a95f77fc-b515-4f75-a671-7ab342666345}\mpkslcb4215d8.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a95f77fc-b515-4f75-a671-7ab342666345}\MpKslcb4215d8.sys [?]
S1 MpKslcd879e77;MpKslcd879e77;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ad9f832c-5fc4-4406-a686-69dd8d6758ad}\mpkslcd879e77.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ad9f832c-5fc4-4406-a686-69dd8d6758ad}\MpKslcd879e77.sys [?]
S1 MpKslce5f8911;MpKslce5f8911;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0012149c-998d-4a62-9af9-8a911ec2e173}\mpkslce5f8911.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0012149c-998d-4a62-9af9-8a911ec2e173}\MpKslce5f8911.sys [?]
S1 MpKslcee42b1a;MpKslcee42b1a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f54ee5ad-869c-4db9-89e2-1ef4c02fb0f4}\mpkslcee42b1a.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{f54ee5ad-869c-4db9-89e2-1ef4c02fb0f4}\MpKslcee42b1a.sys [?]
S1 MpKsld214dea7;MpKsld214dea7;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{52d95736-fc3e-45b4-8ab3-441a3609c83c}\mpksld214dea7.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{52d95736-fc3e-45b4-8ab3-441a3609c83c}\MpKsld214dea7.sys [?]
S1 MpKsld3324570;MpKsld3324570;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e0e75fea-3ce0-41db-84ef-467f2a9e6fe4}\mpksld3324570.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e0e75fea-3ce0-41db-84ef-467f2a9e6fe4}\MpKsld3324570.sys [?]
S1 MpKsld5cb1f02;MpKsld5cb1f02;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{35bbc291-8b5e-4611-be7e-8141ef98bdb1}\mpksld5cb1f02.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{35bbc291-8b5e-4611-be7e-8141ef98bdb1}\MpKsld5cb1f02.sys [?]
S1 MpKsld72f371c;MpKsld72f371c;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7a14661e-b9d3-41c8-a6e1-3c8c8b5fbf60}\mpksld72f371c.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{7a14661e-b9d3-41c8-a6e1-3c8c8b5fbf60}\MpKsld72f371c.sys [?]
S1 MpKsld85dca15;MpKsld85dca15;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{babd71a5-44c6-48d8-8fb8-45bcaebc8457}\mpksld85dca15.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{babd71a5-44c6-48d8-8fb8-45bcaebc8457}\MpKsld85dca15.sys [?]
S1 MpKsld9902cf3;MpKsld9902cf3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2bef926-e1f8-4cd8-a27b-c4de3ede9366}\mpksld9902cf3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2bef926-e1f8-4cd8-a27b-c4de3ede9366}\MpKsld9902cf3.sys [?]
S1 MpKslda21f164;MpKslda21f164;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ad9f832c-5fc4-4406-a686-69dd8d6758ad}\mpkslda21f164.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ad9f832c-5fc4-4406-a686-69dd8d6758ad}\MpKslda21f164.sys [?]
S1 MpKsldb862bb4;MpKsldb862bb4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e117128-efef-4cc4-8f15-1c85fd0fadb1}\mpksldb862bb4.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2e117128-efef-4cc4-8f15-1c85fd0fadb1}\MpKsldb862bb4.sys [?]
S1 MpKsle35b8dc1;MpKsle35b8dc1;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e286a830-a000-47fb-9fbf-57725a94cb6c}\mpksle35b8dc1.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{e286a830-a000-47fb-9fbf-57725a94cb6c}\MpKsle35b8dc1.sys [?]
S1 MpKsle4bc8eb4;MpKsle4bc8eb4;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96356d5f-481e-4420-84cd-96a72cc45580}\mpksle4bc8eb4.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{96356d5f-481e-4420-84cd-96a72cc45580}\MpKsle4bc8eb4.sys [?]
S1 MpKsle617bb7a;MpKsle617bb7a;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2b21c7c-a87f-4dba-ac56-9e93ae1864d1}\mpksle617bb7a.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b2b21c7c-a87f-4dba-ac56-9e93ae1864d1}\MpKsle617bb7a.sys [?]
S1 MpKsleabf6615;MpKsleabf6615;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ed3e375e-5ea9-4c8f-a0a0-b6cdbb315cd8}\mpksleabf6615.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{ed3e375e-5ea9-4c8f-a0a0-b6cdbb315cd8}\MpKsleabf6615.sys [?]
S1 MpKslf1dec2d3;MpKslf1dec2d3;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b6c39d18-9e6f-4d4d-ae53-b62b08030847}\mpkslf1dec2d3.sys --> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{b6c39d18-9e6f-4d4d-ae53-b62b08030847}\MpKslf1dec2d3.sys [?]
S3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\drivers\ivusb.sys [2010-7-29 25112]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-5-13 22712]
S3 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2010-5-13 366640]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [2010-6-26 27064]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys --> d:\NTGLM7X.sys [?]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys --> c:\windows\system32\drivers\wdcsam.sys [?]
S4 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2011-5-5 116608]
S4 gupdate1c9eed8d4f11bcc;Google Update Service (gupdate1c9eed8d4f11bcc);c:\program files\google\update\GoogleUpdate.exe [2009-6-17 133104]
S4 vsdatant;vsdatant; [x]
.
=============== Created Last 30 ================
.
2011-09-21 22:38:47 28752 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{74095cf3-68ee-4cdb-9fba-14fd3589582c}\MpKsl742c4bfb.sys
2011-09-21 06:22:19 -------- d-----w- c:\windows\Paltalk Messenger
2011-09-20 23:31:13 7152464 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{74095cf3-68ee-4cdb-9fba-14fd3589582c}\mpengine.dll
2011-09-18 06:59:02 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-09-18 06:59:02 -------- d-----w- c:\windows\system32\wbem\Repository
2011-09-07 07:45:14 -------- d-----w- c:\program files\SoulseekNS
2011-09-03 10:17:37 599040 -c----w- c:\windows\system32\dllcache\crypt32.dll
2011-08-30 20:33:42 95672 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
.
==================== Find3M ====================
.
2011-09-10 00:42:50 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-09-09 09:12:13 599040 ----a-w- c:\windows\system32\crypt32.dll
2011-07-15 13:29:31 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02:00 10496 ------w- c:\windows\system32\drivers\ndistapi.sys
2011-06-30 02:38:46 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-06-24 14:10:36 139656 ------w- c:\windows\system32\drivers\rdpwd.sys
2011-06-24 11:45:59 69632 ----a-w- c:\windows\system32\realbap1.dll
2011-06-24 11:45:59 45568 ----a-w- c:\windows\system32\realbsf1.dll
2007-11-06 07:35:02 218112 ------w- c:\program files\HijackThis.exe
2001-12-18 09:27:34 221184 ------w- c:\program files\WebCast.dll
2001-12-18 09:26:36 274432 ------w- c:\program files\LWebCast.dll
2001-12-18 09:26:28 163840 ------w- c:\program files\WebCam.dll
2001-12-18 09:25:42 204800 ------w- c:\program files\LWebCam.dll
2001-12-18 09:25:34 126976 ------w- c:\program files\WebCamRT.exe
2001-12-18 09:24:50 32768 ------w- c:\program files\LWebCamR.dll
2001-12-18 09:24:42 98304 ------w- c:\program files\WCStatus.dll
2001-12-18 09:24:00 20480 ------w- c:\program files\LWCStatu.dll
2001-12-18 09:23:26 57344 ------w- c:\program files\LWCComn.dll
2001-12-18 09:23:20 53248 ------w- c:\program files\DualCam.exe
2001-12-18 09:22:42 81920 ------w- c:\program files\LDualCam.dll
2001-12-18 09:22:34 180224 ------w- c:\program files\WebAlbum.dll
2001-12-18 09:21:44 241664 ------w- c:\program files\LWebAlbu.dll
2001-12-18 09:21:08 159744 ------w- c:\program files\QCSup.dll
2001-12-18 09:20:20 73728 ------w- c:\program files\LQCSup.dll
2001-12-18 09:20:12 110592 ------w- c:\program files\VMail.dll
2001-12-18 09:19:52 20480 ------w- c:\program files\LogiMail.exe
2001-12-18 09:19:20 983040 ------w- c:\program files\LVMail.dll
2001-12-18 09:19:12 77824 ------w- c:\program files\LVMComp.dll
2001-12-18 09:18:24 20480 ------w- c:\program files\LLVMComp.dll
2001-12-18 09:18:18 53248 ------w- c:\program files\LVMAVI.dll
2001-12-18 09:18:04 36864 ------w- c:\program files\AOLMWiz.exe
2001-12-18 09:17:30 28672 ------w- c:\program files\LAOLMWiz.dll
2001-12-18 09:17:22 118784 ------w- c:\program files\Radar.dll
2001-12-18 09:16:38 126976 ------w- c:\program files\LRadar.dll
2001-12-18 09:16:30 204800 ------w- c:\program files\QuickCam.exe
2001-12-18 09:15:20 3641344 ------w- c:\program files\LQuickCa.dll
2001-12-18 09:14:40 114688 ------w- c:\program files\Update.dll
2001-12-18 09:13:56 36864 ------w- c:\program files\LUpdate.dll
2001-12-18 09:13:48 184320 ------w- c:\program files\LIU_UPD.dll
2001-12-18 09:13:40 163840 ------w- c:\program files\LIU_PROD.dll
2001-12-18 09:13:32 57344 ------w- c:\program files\WaveChk.exe
2001-12-18 09:12:56 421888 ------w- c:\program files\LWaveChe.dll
2001-12-18 09:12:48 40960 ------w- c:\program files\QCWebPre.ocx
2001-12-18 09:12:40 90112 ------w- c:\program files\QCPipe.dll
2001-12-18 09:12:02 16384 ------w- c:\program files\LQCPipe.dll
2001-12-18 09:11:56 65536 ------w- c:\program files\PUpdate.exe
2001-12-18 09:11:44 106496 ------w- c:\program files\QCCtrl.dll
2001-12-18 09:11:32 77824 ------w- c:\program files\PicVid.dll
2001-12-18 09:10:54 180224 ------w- c:\program files\LPicVid.dll
2001-12-18 09:10:46 290816 ------w- c:\program files\QCWebCOM.dll
2001-12-18 09:09:44 659456 ------w- c:\program files\LQCWebCo.dll
2001-12-18 09:09:36 61440 ------w- c:\program files\FileMenu.dll
2001-12-18 09:08:54 20480 ------w- c:\program files\LFileMen.dll
2001-12-18 09:08:48 65536 ------w- c:\program files\Edit.dll
2001-12-18 09:08:10 32768 ------w- c:\program files\LEdit.dll
2001-12-18 09:08:00 512000 ------w- c:\program files\Editor.exe
2001-12-18 09:06:52 253952 ------w- c:\program files\LEditor.dll
2001-12-18 09:06:44 241664 ------w- c:\program files\Album.dll
2001-12-18 09:05:52 225280 ------w- c:\program files\LAlbum.dll
2001-12-18 09:05:44 131072 ------w- c:\program files\Anim.dll
2001-12-18 09:05:00 1048576 ------w- c:\program files\LAnim.dll
2001-12-18 09:04:32 360448 ------w- c:\program files\QCUI.dll
2001-12-18 09:03:32 32768 ------w- c:\program files\LQCUI.dll
2001-12-18 08:58:02 81920 ------w- c:\program files\QCImage.dll
2001-12-18 08:57:52 126976 ------w- c:\program files\LVMMail.dll
2001-12-18 08:56:56 28672 ------w- c:\program files\LLVMMail.dll
2001-12-18 08:46:42 53248 ------w- c:\program files\AviToRV.dll
2001-12-18 08:39:24 58368 ------w- c:\program files\Csh263.dll
2001-12-18 08:39:24 23040 ------w- c:\program files\Csa2c.dll
2001-12-18 08:18:40 106496 ------w- c:\program files\SLINet.dll
2001-12-18 08:18:36 56320 ------w- c:\program files\DSTNCT32.dll
2001-12-18 08:18:36 47104 ------w- c:\program files\D32-FW.dll
2001-12-18 08:18:36 39936 ------w- c:\program files\GHOST32.exe
2001-02-20 07:30:44 854528 ------r- c:\program files\Ltwvc12n.dll
2001-02-20 01:10:56 189952 ------w- c:\program files\ltscr12n.ocx
2001-02-20 01:10:42 609280 ------w- c:\program files\Ltocx12n.ocx
2001-02-20 01:07:50 144384 ------w- c:\program files\LTSCR12n.DLL
2001-02-19 00:50:58 164352 ------w- c:\program files\Lfpng12n.dll
2001-02-19 00:49:04 314368 ------w- c:\program files\LFCMP12n.dll
2001-02-19 00:36:18 27136 ------w- c:\program files\Lfwfx12n.dll
2001-02-19 00:36:14 155648 ------w- c:\program files\Lftif12n.dll
2001-02-19 00:35:58 27648 ------w- c:\program files\Lftga12n.dll
2001-02-19 00:35:46 56320 ------w- c:\program files\Lfpsd12n.dll
2001-02-19 00:35:32 26112 ------w- c:\program files\lfpcd12n.dll
2001-02-19 00:35:26 33280 ------w- c:\program files\Lfpcx12n.dll
2001-02-19 00:35:22 71680 ------w- c:\program files\Lfpct12n.dll
2001-02-19 00:33:58 100352 ------w- c:\program files\Lffpx12n.dll
2001-02-19 00:32:14 36864 ------w- c:\program files\Lfbmp12n.dll
2001-02-19 00:32:04 25600 ------w- c:\program files\Lfavi12n.dll
2001-02-19 00:31:54 78336 ------w- c:\program files\Lffax12n.dll
2001-02-19 00:31:00 51712 ------w- c:\program files\lttmb12n.dll
2001-02-19 00:30:56 66048 ------w- c:\program files\ltlst12n.dll
2001-02-19 00:30:20 309760 ------w- c:\program files\ltdlg12n.dll
2001-02-19 00:29:56 41472 ------w- c:\program files\lttwn12n.dll
2001-02-19 00:29:52 166400 ------w- c:\program files\Ltimg12n.dll
2001-02-19 00:29:30 227840 ------w- c:\program files\Ltefx12n.dll
2001-02-19 00:29:18 753152 ------w- c:\program files\ltann12n.dll
2001-02-19 00:28:58 121344 ------w- c:\program files\Ltfil12n.dll
2001-02-19 00:28:42 279040 ------w- c:\program files\LTDIS12n.dll
2001-02-19 00:28:16 406016 ------w- c:\program files\Ltkrn12n.dll
.
============= FINISH: 10:46:00.73 ===============

Hello and welcome to Bleeping Computer!

I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

To help Bleeping Computer better assist you please perform the following steps:

***************************************************

In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.

CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/419956 <<< CLICK THIS LINK

If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.

***************************************************

If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:

• If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.
  
• A new DDS and GMER log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
  
  • Please do this even if you have previously posted logs for us.
    
  • If you were unable to produce the logs originally please try once more.
    
  • If you are unable to create a log please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
    
  • If you are unsure about any of these characteristics just post what you can and we will guide you.
  
  
• Please tell us if you have your original Windows CD/DVD available.
  
• Upon completing the above steps and posting a reply, another staff member will review your topic and do their best to resolve your issues.

Thank you for your patience, and again sorry for the delay.

***************************************************

We need to see some information about what is happening in your machine. Please perform the following scan again:

• Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.
  • DDS.scr
    
  • DDS.pif
  
  
• Double click on the DDS icon, allow it to run.
  
• A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  
• Notepad will open with the results.
  
• Follow the instructions that pop up for posting the results.
  
• Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE


We also need a new log from the GMER anti-rootkit Scanner.

Please note that if you are running a 64-bit version of Windows you will not be able to run GMER and you may skip this step.

Please first disable any CD emulation programs using the steps found in this topic:


Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:



As I am just a silly little program running on the BleepingComputer.com servers, please do not send me private messages as I do not know how to read and reply to them! Thanks!

Hi,

Your log is clean, but we will do a checkup.

Your java is out of date. Click your start button, open Control panel.

• Locate the Java icon (it looks like a coffee cup)
  
• double click it to open it
  
• click the Update tab
  
• Click update now

After the java is updated, reboot your computer if not prompted to.

Next, clear the java cache

To clear the Java Plug-in cache:

• Click Start > Control Panel.
  
• Double-click the Java icon in the control panel.
  
• On the General tab, Click Settings under Temporary Internet Files.
  
• On the Temporary Files Settings screen, Click Delete Files.
  
• check all boxes
  
• Click OK

===================================================

ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

Note: If you are using Windows Vista/7, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

• Hold down Control and click on the following link to open ESET OnlineScan in a new window.
  ESET OnlineScan
  
• Click the button.
  
• For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on to download the ESET Smart Installer. Save it to your desktop.
    
  • Double click on the icon on your desktop.
  
  
• Check
  
• Click the button.
  
• Accept any security warnings from your browser.
  
• Check
  
• Make sure that the option "Remove found threats" is Unchecked
  
• Push the Start button.
  
• ESET will then download updates for itself, install itself, and begin
  scanning your computer. Please be patient as this can take some time.
  
• When the scan completes, push
  
• Push , and save the file to your desktop using a unique name, such as MyEsetScan. Alternatively, look for report in C:\Program Files\ESET\ESET Online Scanner\log.txt. Include the contents of this report in your next reply.
  
• Push the Back button.
  
• Select Uninstall application on close check box and push

===================================================

On your next reply please post :
ESET log


Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

Hi Conspire,

Thanks for your response , i've updated Java , cleaned out the cache and ran the Eset scan, that found & treated one problem .
During the last week i have used several additional scans as well ( these include BitDefender , Karspesky and MS malicious SW removal tool ) besides my regular scans and none of them detected this virus nor i had any warnings about infected websites.
Awaiting your comments , cheers " bluesgirl"

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
esets_scanner_update returned -1 esets_gle=1
esets_scanner_update returned -1 esets_gle=53251
# version=7
# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
# OnlineScanner.ocx=1.0.0.6528
# api_version=3.0.2
# EOSSerial=26105d0ed21e364db928f8b854501520
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-09-28 06:07:52
# local_time=2011-09-28 04:07:52 (+1000, E. Australia Standard Time)
# country="Australia"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=768 16777215 100 0 0 0 0 0
# compatibility_mode=5891 16776533 42 87 0 13246358 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=389698
# found=1
# cleaned=1
# scan_time=11784
C:\Documents and Settings\Owner\Local Settings\Application Data\Mozilla\Firefox\Profiles\labmfapn.default\Cache\4\33\2FB73d01 HTML/ScrInject.B.Gen virus (deleted - quarantined) 00000000000000000000000000000000 C

It's normal, some will detect some will not. Most important thing now is we know we have nuked them. Unless you are experiencing some odd behaviour from when using your computer.

You may remove DDS and are good to go.

Hi Conspire,

Thanks for the help , just one question , i thought i had a pretty good security setup & routine in place, i don't engage in ' risky ' pursuits on the net , apart from visiting some music blogs.
I did some research on the HTML/ScrInject.B.Gen virus , apparently it comes from infected websites.
Would you recommend a program, or an add on for Firefox and IE8 to warn me if i happen to stumble upon a dodgy website.
Your help is much appreciated , thanks in advance.

Well below is my recommendation to most of people out there. Should be helpful

To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:

• WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
  
  • Green to go
    
  • Yellow for caution
    
  • Red to stop

• SpywareBlaster prevents the installation of ActiveX-based malware, blocks cookies, and restricts the actions of "bad" sites. See tutorial here

• MVPS HOSTS FILE replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements. It basically prevents your computer from connecting to those sites by redirecting the attempted connections to 127.0.0.1, which is the IP of your local computer. See guide here and for Windows Vista here
  
  • Download Host.zip and Save it to your Desktop.
    
  • Right-click hosts.zip and select 'Extract all files' or 'Extract files...'.
    
  • Follow the prompts and click 'Finish'.
    
  • This will open the newly created hosts folder on your Desktop.
    
  • Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated HOSTS file to the correct location on your machine.
    
  • Once updated you should see another prompt that the task was completed.

Hi Conspire , thanks for all your help & tips.. presently installing the recommended programs !
Cheers

You're welcome

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.