Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Keep Getting Download Pc Spyware Removal Prompt.


  • This topic is locked This topic is locked
2 replies to this topic

#1 bigjosh33

bigjosh33

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:08:01 PM

Posted 08 April 2008 - 01:00 PM

here is my deckard scan, thanks in advance for the help.
Deckard's System Scanner v20071014.68
Run by josh on 2008-04-08 13:53:57
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Total Physical Memory: 1013 MiB (1024 MiB recommended).


-- HijackThis (run as josh.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:54:16 PM, on 4/8/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\ProgramData\rwphwqdk\ngryjgny.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Windows\system32\igfxsrvc.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Users\josh\Downloads\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\josh.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [vekdfrbq] C:\ProgramData\vekdfrbq\qlkpqdot.exe
O4 - HKCU\..\Run: [rwphwqdk] C:\ProgramData\rwphwqdk\ngryjgny.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {15589FA1-C456-11CE-BF01-00AA0055595A} - http://w4s2.work4sure.com/c/ge/w4sgeen9.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 7771 bytes

-- Files created between 2008-03-08 and 2008-04-08 -----------------------------

2008-04-06 15:07:40 0 d-------- C:\Users\All Users\SUPERAntiSpyware.com
2008-04-06 15:07:06 0 d-------- C:\Program Files\SUPERAntiSpyware
2008-04-06 14:55:54 0 d-------- C:\Users\All Users\Yahoo! Companion
2008-04-06 11:05:56 0 d-------- C:\Program Files\Yahoo!
2008-04-06 11:05:49 0 d-------- C:\Program Files\CCleaner
2008-04-06 11:01:58 0 d-------- C:\Users\All Users\rwphwqdk
2008-04-06 10:39:49 0 d-------- C:\Program Files\WarRock
2008-04-06 10:20:50 0 d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-04-06 03:16:29 0 d-------- C:\Users\All Users\Lavasoft
2008-04-06 03:16:29 0 d-------- C:\Program Files\Lavasoft
2008-04-05 17:59:59 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-04-05 14:14:05 0 d-------- C:\Users\josh\Desktopvirii
2008-04-05 14:14:05 4096 --a------ C:\Users\josh\DesktopFWebdEditor.exe
2008-04-05 14:14:05 4096 --a------ C:\Users\josh\Desktopfwebd.exe
2008-04-05 14:14:05 4096 --a------ C:\Users\josh\Desktopfilemanagerclient.exe
2008-04-05 14:13:55 0 d-------- C:\Users\All Users\ojqxmbun
2008-04-05 14:13:52 0 d-------- C:\Users\All Users\vekdfrbq
2008-04-03 14:32:55 0 d-------- C:\Program Files\DivX
2008-04-03 12:23:30 17408 --a------ C:\Windows\Shortcut.exe
2008-04-03 12:23:30 0 d-------- C:\Program Files\RAM Idle LE
2008-04-03 01:08:57 0 d-------- C:\Program Files\Common Files\Adobe
2008-03-30 20:20:45 0 d-------- C:\Windows\Simpsons Jeopardy!
2008-03-30 20:20:45 0 d-------- C:\Program Files\Simpsons Jeopardy!
2008-03-30 07:22:16 0 d-------- C:\Program Files\Ares
2008-03-29 21:18:45 0 d-------- C:\Program Files\Activision
2008-03-29 12:32:06 0 d-------- C:\Users\All Users\OrbNetworks
2008-03-29 12:32:02 0 d-------- C:\Program Files\Orb Networks
2008-03-28 11:25:09 0 d-------- C:\Program Files\Common Files\xing shared
2008-03-28 11:24:50 0 d-------- C:\Program Files\Real
2008-03-28 11:24:45 0 d-------- C:\Program Files\Common Files\Real
2008-03-28 11:20:52 0 d-------- C:\Users\All Users\Roxio
2008-03-27 00:28:55 0 d-------- C:\Program Files\uTorrent
2008-03-27 00:26:22 0 d-------- C:\Program Files\PeerGuardian2
2008-03-26 23:47:55 0 --a------ C:\Windows\nsreg.dat
2008-03-26 23:35:33 0 d-------- C:\Intel
2008-03-26 14:46:25 0 d-------- C:\Windows\system32\x64
2008-03-26 14:45:34 0 d-------- C:\MDT
2008-03-26 14:39:44 0 d-------- C:\Users\All Users\CyberLink
2008-03-26 14:23:01 0 dr------- C:\Users\josh\Searches
2008-03-26 14:22:50 0 dr------- C:\Users\josh\Contacts
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\Templates
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\Start Menu
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\SendTo
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\Recent
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\PrintHood
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\NetHood
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\My Documents
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\Local Settings
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\Cookies
2008-03-26 14:22:14 0 d--hs---- C:\Users\josh\Application Data
2008-03-26 14:22:13 0 dr------- C:\Users\josh\Videos
2008-03-26 14:22:13 0 dr------- C:\Users\josh\Saved Games
2008-03-26 14:22:13 0 dr------- C:\Users\josh\Pictures
2008-03-26 14:22:13 2097152 --ahs---- C:\Users\josh\NTUSER.DAT
2008-03-26 14:22:13 0 dr------- C:\Users\josh\Music
2008-03-26 14:22:13 0 dr------- C:\Users\josh\Links
2008-03-26 14:22:13 0 dr------- C:\Users\josh\Favorites
2008-03-26 14:22:13 0 dr------- C:\Users\josh\Downloads
2008-03-26 14:22:13 0 dr------- C:\Users\josh\Documents
2008-03-26 14:22:13 0 dr------- C:\Users\josh\Desktop
2008-03-26 14:22:13 0 d--h----- C:\Users\josh\AppData
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\Templates
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\Start Menu
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\SendTo
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\Recent
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\PrintHood
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\NetHood
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\My Documents
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\Local Settings
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\Cookies
2008-03-26 14:13:44 0 d--hs---- C:\Users\Default\Application Data
2008-03-26 14:13:44 0 d--hs---- C:\Users\All Users\Templates
2008-03-26 14:13:44 0 d--hs---- C:\Users\All Users\Start Menu
2008-03-26 14:13:44 0 d--hs---- C:\Users\All Users\Favorites
2008-03-26 14:13:44 0 d--hs---- C:\Users\All Users\Documents
2008-03-26 14:13:44 0 d--hs---- C:\Users\All Users\Desktop
2008-03-26 14:13:44 0 d--hs---- C:\Users\All Users\Application Data
2008-03-26 14:13:44 0 d--hs---- C:\Documents and Settings
2008-03-25 12:08:10 0 d-------- C:\Windows\Users
2008-03-25 12:05:12 0 d-------- C:\doctemp
2008-03-25 12:03:13 0 d-------- C:\Windows\system32\oem
2008-03-25 12:03:13 0 d-------- C:\Drivers
2008-03-25 12:03:13 0 d-------- C:\DELL
2008-03-25 04:51:23 0 d-------- C:\Program Files\EarthLink Setup
2008-03-25 04:50:39 0 d-------- C:\Program Files\AOL Install
2008-03-25 04:49:37 0 d-------- C:\Users\All Users\Uninstall
2008-03-25 04:49:32 0 d-------- C:\Program Files\Common Files\SureThing Shared
2008-03-25 04:48:44 0 d-------- C:\Users\All Users\Sonic
2008-03-25 04:48:31 0 d-------- C:\Program Files\Common Files\PX Storage Engine
2008-03-25 04:48:29 0 d-------- C:\Program Files\Common Files\Sonic Shared
2008-03-25 04:47:53 0 d-------- C:\Program Files\Common Files\Roxio Shared
2008-03-25 04:47:42 0 d-------- C:\Users\All Users\InstallShield
2008-03-25 04:47:39 0 d-------- C:\Program Files\Roxio
2008-03-25 04:46:19 0 d-------- C:\Program Files\Microsoft Works
2008-03-25 04:41:20 0 d-------- C:\Users\All Users\Trend Micro
2008-03-25 04:41:15 0 d-------- C:\Program Files\Trend Micro
2008-03-25 04:40:57 0 d-------- C:\Users\All Users\SupportSoft
2008-03-25 04:40:45 0 d-------- C:\Program Files\Dell Support Center
2008-03-25 04:40:44 0 d-------- C:\Program Files\Common Files\supportsoft
2008-03-25 04:39:51 0 d-------- C:\Users\All Users\Google
2008-03-25 04:39:49 0 d-------- C:\Program Files\Google
2008-03-25 04:39:48 0 d-------- C:\Program Files\Dell
2008-03-25 04:39:31 0 d-------- C:\Users\All Users\Adobe
2008-03-25 04:38:54 0 d-------- C:\Program Files\Dell DataSafe Online
2008-03-25 04:38:04 0 d-------- C:\Users\All Users\Dell
2008-03-25 04:37:47 0 d-------- C:\Program Files\CyberLink
2008-03-25 04:37:16 0 d-------- C:\Program Files\NetWaiting
2008-03-25 04:36:53 0 d-------- C:\Program Files\Digital Line Detect
2008-03-25 04:35:29 0 d-------- C:\Program Files\Intel
2008-03-25 04:35:23 0 d-------- C:\Windows\java
2008-03-25 04:35:23 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-03-25 04:35:22 0 d-------- C:\Program Files\Common Files\InstallShield
2008-03-25 04:34:34 0 d-------- C:\Program Files\Modem Diagnostic Tool
2008-03-25 04:33:41 0 d-------- C:\Program Files\Java
2008-03-25 04:33:41 0 d-------- C:\Program Files\Common Files\Java
2008-03-25 04:33:38 0 d--hs---- C:\Windows\Installer
2008-03-25 04:33:13 0 d-------- C:\Windows\system32\Macromed
2008-03-25 04:25:12 0 d-------- C:\Windows\SoftwareDistribution
2008-03-25 04:24:31 0 d-------- C:\Program Files\CONEXANT
2008-03-25 04:24:22 0 d-------- C:\Windows\system32\RTCOM
2008-03-25 04:23:10 0 d--hs---- C:\System Volume Information


-- Find3M Report ---------------------------------------------------------------

2008-04-06 15:07:06 0 d-------- C:\Users\josh\AppData\Roaming\SUPERAntiSpyware.com
2008-04-06 10:37:10 0 d-------- C:\Users\josh\AppData\Roaming\InstallShield
2008-04-05 17:59:59 0 d-------- C:\Program Files\Common Files
2008-04-03 14:30:53 0 d-------- C:\Users\josh\AppData\Roaming\uTorrent
2008-04-03 01:02:09 0 d-------- C:\Users\josh\AppData\Roaming\Adobe
2008-04-02 00:10:09 26340 --a------ C:\Users\josh\AppData\Roaming\UserTile.png
2008-04-02 00:09:36 0 d-------- C:\Users\josh\AppData\Roaming\PeerNetworking
2008-03-28 11:30:24 0 d-------- C:\Users\josh\AppData\Roaming\Real
2008-03-28 11:20:51 0 d-------- C:\Users\josh\AppData\Roaming\Roxio
2008-03-26 23:47:54 0 d-------- C:\Users\josh\AppData\Roaming\Mozilla
2008-03-26 23:30:47 0 d-------- C:\Program Files\Windows Mail
2008-03-26 14:39:55 0 d-------- C:\Users\josh\AppData\Roaming\CyberLink
2008-03-26 14:30:03 0 d-------- C:\Users\josh\AppData\Roaming\Macromedia
2008-03-26 14:29:54 0 d-------- C:\Users\josh\AppData\Roaming\Google
2008-03-26 14:22:53 0 d-------- C:\Users\josh\AppData\Roaming\Identities
2008-03-25 12:15:01 0 d-------- C:\Program Files\Windows Calendar
2008-03-25 12:11:57 0 d-------- C:\Program Files\Windows Defender
2008-03-25 12:11:00 0 d-------- C:\Program Files\Windows Sidebar
2008-03-25 04:25:21 174 --ahs---- C:\Program Files\desktop.ini
2008-02-20 22:05:44 3596288 --a------ C:\Windows\system32\qt-dx331.dll
2008-02-20 22:04:16 196608 --a------ C:\Windows\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2008-02-20 22:04:16 81920 --a------ C:\Windows\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2008-02-20 22:04:04 802816 --a------ C:\Windows\system32\divx_xx11.dll <Not Verified; DivX, Inc.; DivX?>
2008-02-20 22:04:04 823296 --a------ C:\Windows\system32\divx_xx0c.dll <Not Verified; DivX, Inc.; DivX>
2008-02-20 22:04:04 823296 --a------ C:\Windows\system32\divx_xx07.dll <Not Verified; DivX, Inc.; DivX>
2008-02-20 22:04:04 682496 --a------ C:\Windows\system32\DivX.dll <Not Verified; DivX, Inc.; DivX>
2008-02-20 22:03:24 12288 --a------ C:\Windows\system32\DivXWMPExtType.dll


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [03/25/2008 12:11 PM]
"ECenter"="C:\Dell\E-Center\EULALauncher.exe" [01/18/2008 07:40 AM]
"RtHDVCpl"="RtHDVCpl.exe" [05/11/2007 09:26 AM C:\Windows\RtHDVCpl.exe]
"PDVDDXSrv"="C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [09/17/2007 12:56 PM]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [03/25/2008 04:39 AM]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [02/13/2008 08:21 PM]
"pccguide.exe"="C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe" [08/27/2007 05:21 AM]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [01/02/2008 05:07 PM]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [01/02/2008 05:06 PM]
"Persistence"="C:\Windows\system32\igfxpers.exe" [01/02/2008 05:07 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [03/28/2008 11:24 AM]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [01/11/2008 10:16 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"="oobefldr.dll,ShowWelcomeCenter" []
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [11/02/2006 08:34 AM]
"CollaborationHost"="C:\Windows\system32\p2phost.exe" [11/02/2006 08:34 AM]
"vekdfrbq"="C:\ProgramData\vekdfrbq\qlkpqdot.exe" [04/05/2008 02:13 PM]
"rwphwqdk"="C:\ProgramData\rwphwqdk\ngryjgny.exe" [04/06/2008 11:01 AM]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [02/29/2008 04:03 PM]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [01/28/2008 11:43 AM]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [3/25/2008 4:37:12 AM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"=2 (0x2)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [12/20/2006 12:55 PM 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 04/19/2007 12:41 PM 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalService nsi lltdsvc SSDPSRV upnphost SCardSvr w32time EventSystem RemoteRegistry WinHttpAutoProxySvc lanmanworkstation TBS SLUINotify THREADORDER fdrespub netprofm fdphost wcncsvc QWAVE WebClient
LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc wlansvc EMDMgmt TabletInputService WPDBusEnum
LocalServiceNoNetwork PLA DPS BFE mpssvc


[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
C:\Windows\system32\unregmp2.exe /ShowWMP

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI



-- End of Deckard's System Scanner: finished at 2008-04-08 13:55:02 ------------

BC AdBot (Login to Remove)

 


#2 bigjosh33

bigjosh33
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:08:01 PM

Posted 08 April 2008 - 10:13 PM

problem resolved

#3 KoanYorel

KoanYorel

    Bleepin' Conundrum


  • Members
  • 19,461 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:65 miles due East of the &quot;Logic Free Zone&quot;, in Md, USA
  • Local time:08:01 PM

Posted 09 April 2008 - 08:23 AM

Thanks for informing us.

If you find other problems, please start a new topic.

This thread is closed.
The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users