Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Browser Hijack From An Infected Downloaded File


  • This topic is locked This topic is locked
2 replies to this topic

#1 KiwIMoN

KiwIMoN

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:34 PM

Posted 06 May 2009 - 10:25 PM

I use Windows XP SP3 and I have Panda Antivirus Global Protection 2009. Yesterday I downloaded a file on torrents and it turns out that it was infected with adware. I tried removing it myself using Malwarebytes Anti-Malware and Spybot - Search & Destroy but when I try to run the programs the processes start but the programs don't come up, this happens in safe mode aswell. I also ran a scan with Panda thinking its adware database might find something but sadly it didn't.

In Internet Explorer or Mozilla Firefox if I search on google and click on any links or if I try going to specific sites like Spybot's site I end up getting redirected to pages showing either random ads or other pages or one constantly reoccuring ad for Stopzilla. Also not sure if this is related but since I got this my computer has totally locked up explorer.exe and all 3 times in one day causing me to have to reboot every time.

Usually when I get crap like this I just slave over my computer on Google until I get rid of it which I usually do but this time I figured i'd seek out some help and save me a few days on Google. Thanks in advance for any help you can give.



DDS (Ver_09-03-16.01) - NTFSx86
Run by Jon at 23:03:16.46 on 06/05/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1167 [GMT -4:00]

AV: Panda Global Protection 2009 *On-access scanning enabled* (Updated)
FW: Panda Personal Firewall 2009 *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\Program Files\Panda Global Protection 2009\TPSrv.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\PROGRAM FILES\PANDA GLOBAL PROTECTION 2009\WebProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\svchost -k Panda
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Panda Global Protection 2009\PsCtrls.exe
C:\Program Files\Panda Global Protection 2009\PavFnSvr.exe
C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Global Protection 2009\PsImSvc.exe
C:\Program Files\Panda Global Protection 2009\PskSvc.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program Files\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Panda Global Protection 2009\pavsrv51.exe
C:\Program Files\Intel\IntelDH\IntelŪ Quick Resume Technology\ELService.exe
C:\Program Files\Panda Global Protection 2009\AVENGINE.EXE
c:\program files\panda global protection 2009\firewall\PSHOST.EXE
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Global Protection 2009\ApvxdWin.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WeatherEye\WeatherEye.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Panda Global Protection 2009\SRVLOAD.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Panda Global Protection 2009\PavBckPT.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\HP\KBD\KBD.EXE
c:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\HPZipm12.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Documents and Settings\Jon\Desktop\dds.scr
C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.ca/
uSearch Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
mSearchAssistant = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_CA&c=63&bd=PAVILION&pf=desktop
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
BHO: hpWebHelper Class: {aaae832a-5fff-4661-9c8f-369692d1dcb9} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\plugin\WebHelper.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Aim6]
uRun: [AdobeBridge]
uRun: [WeatherEye] c:\program files\weathereye\WeatherEye.exe
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [nvd32_r] rundll32.exe "c:\documents and settings\jon\application data\unobi.dll" s
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [DMAScheduler] "c:\program files\hp digitalmedia archive\DMAScheduler.exe"
mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE
mRun: [HPBootOp] "c:\program files\hewlett-packard\hp boot optimizer\HPBootOp.exe" /run
mRun: [Reminder] "c:\windows\creator\Remind_XP.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPwuSchd2.exe
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [APVXDWIN] "c:\program files\panda global protection 2009\APVXDWIN.EXE" /s
mRun: [SCANINICIO] "c:\program files\panda global protection 2009\Inicio.exe"
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
IE: &Google Search - c:\program files\google\GoogleToolbar1.dll/cmsearch.html
IE: &Translate English Word - c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
IE: Backward Links - c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\google\GoogleToolbar1.dll/cmcache.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: Similar Pages - c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate Page into English - c:\program files\google\GoogleToolbar1.dll/cmtrans.html
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~4\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1238468078678
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
TCP: NameServer = 85.255.112.7,85.255.112.88
TCP: {88626052-950A-4FE3-AD4A-AC9478A173D7} = 85.255.112.7,85.255.112.88
TCP: {E12309A7-B70A-455C-B2DA-9EB01CF244AD} = 85.255.112.7,85.255.112.88
Notify: avldr - avldr.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\jon\applic~1\mozilla\firefox\profiles\khf264y7.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.ca/
FF - plugin: c:\program files\google\google updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\google\update\1.2.145.5\npGoogleOneClick8.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npViewpoint.dll
FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll
FF - plugin: c:\program files\vlc\npvlc.dll

============= SERVICES / DRIVERS ===============

R0 pavboot;Panda boot driver;c:\windows\system32\drivers\pavboot.sys [2009-3-31 28544]
R1 APPFLT;App Filter Plugin;c:\windows\system32\drivers\APPFLT.SYS [2009-3-31 73728]
R1 DSAFLT;DSA Filter Plugin;c:\windows\system32\drivers\dsaflt.sys [2009-3-31 52992]
R1 FNETMON;NetMon Filter Plugin;c:\windows\system32\drivers\fnetmon.sys [2009-3-31 22072]
R1 IDSFLT;Ids Filter Plugin;c:\windows\system32\drivers\idsflt.sys [2009-3-31 193792]
R1 NETFLTDI;Panda Net Driver [TDI Layer];c:\windows\system32\drivers\NETFLTDI.SYS [2009-3-31 158848]
R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [2009-3-31 41144]
R1 WNMFLT;Wifi Monitor Filter Plugin;c:\windows\system32\drivers\wnmflt.sys [2009-3-31 46720]
R2 Gwmsrv;Panda Goodware Cache Manager;c:\windows\system32\svchost -k panda --> c:\windows\system32\svchost -k Panda [?]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 Panda Software Controller;Panda Software Controller;c:\program files\panda global protection 2009\PsCtrlS.exe [2009-3-31 181504]
R2 PAVDRV;pavdrv;c:\windows\system32\drivers\pavdrv51.sys [2009-3-31 84024]
R2 PAVFNSVR;Panda Function Service;c:\program files\panda global protection 2009\PavFnSvr.exe [2009-3-31 169216]
R2 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [2009-3-31 179640]
R2 PavPrSrv;Panda Process Protection Service;c:\program files\common files\panda security\pavshld\PavPrSrv.exe [2009-3-31 62768]
R2 PAVSRV;Panda On-Access Anti-Malware Service;c:\program files\panda global protection 2009\PAVSRV51.EXE [2009-3-31 288512]
R2 PskSvcRetail;Panda PSK service;c:\program files\panda global protection 2009\psksvc.exe [2009-3-31 28928]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2009-3-30 24652]
R3 AvFlt;Antivirus Filter Driver;c:\windows\system32\drivers\av5flt.sys --> c:\windows\system32\drivers\av5flt.sys [?]
R3 NETIMFLT01060034;PANDA NDIS IM Filter Miniport v1.6.0.34;c:\windows\system32\drivers\neti1634.sys [2009-3-31 197888]
R3 PavSRK.sys;PavSRK.sys;\??\c:\windows\system32\pavsrk.sys --> c:\windows\system32\PavSRK.sys [?]
R3 PavTPK.sys;PavTPK.sys;\??\c:\windows\system32\pavtpk.sys --> c:\windows\system32\PavTPK.sys [?]
S2 gupdate1c9bee7168d5536;Google Update Service (gupdate1c9bee7168d5536);c:\program files\google\update\GoogleUpdate.exe [2009-4-16 133104]
S3 CXFALCON;Conexant Falcon II NTSC Video Capture;c:\windows\system32\drivers\cxfalcon.sys [2006-6-14 82048]
S3 getPlusŪ Helper;getPlusŪ Helper;c:\program files\nos\bin\getPlus_HelperSvc.exe [2009-4-28 33176]
S3 RkPavproc1;RkPavproc1;c:\windows\system32\drivers\RkPavproc1.sys [2009-4-28 16952]
S3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [2006-6-14 468768]

============== File Associations ===============

JSEFile=c:\progra~1\pandag~1\PAVSCRIP.EXE "%1" %*
VBEFile=c:\progra~1\pandag~1\PAVSCRIP.EXE "%1" %*
VBSFile=c:\progra~1\pandag~1\PAVSCRIP.EXE "%1" %*

=============== Created Last 30 ================

2009-05-06 22:42 <DIR> --d----- c:\documents and settings\jon\.housecall6.6
2009-05-06 22:09 <DIR> --d----- c:\program files\common files\PC Tools
2009-05-06 22:09 <DIR> --d----- c:\program files\Spyware Doctor
2009-05-06 22:09 18,190,616 a------- c:\documents and settings\jon\ltPEIRDMY.exe
2009-05-06 22:09 28,672 a------- c:\documents and settings\jon\lqTpjPHfgV.exe
2009-05-06 22:08 18,190,616 a------- c:\documents and settings\jon\cxEAHe.exe
2009-05-06 22:08 28,672 a------- c:\documents and settings\jon\ZFHEXev.exe
2009-05-06 22:05 18,190,616 a------- c:\documents and settings\jon\wTIMvGQcT.exe
2009-05-06 22:05 28,672 a------- c:\documents and settings\jon\ouwTmTKikZs.exe
2009-05-06 22:05 0 a------- c:\documents and settings\jon\avCYFc.exe
2009-05-06 22:05 28,672 a------- c:\documents and settings\jon\YDfCVcu.exe
2009-05-06 21:40 15,504 a------- c:\windows\system32\drivers\mbam.sys
2009-05-06 21:40 38,496 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-06 21:40 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-05-06 21:40 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-05-06 21:32 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2009-05-06 21:32 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2009-05-06 15:20 <DIR> --d----- c:\program files\CCleaner
2009-05-05 15:51 32,592 a------- c:\windows\system32\msonpmon.dll
2009-05-05 15:20 36,864 a------- c:\docume~1\jon\applic~1\unobi.dll
2009-05-04 19:25 <DIR> --d----- c:\program files\iTunes Global Hotkeys
2009-05-04 16:55 1,089,593 -------- c:\windows\system32\dllcache\ntprint.cat
2009-05-04 15:53 <DIR> --d----- c:\windows\system32\XPSViewer
2009-05-04 15:52 597,504 -------- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-05-04 15:52 575,488 -------- c:\windows\system32\xpsshhdr.dll
2009-05-04 15:52 575,488 -------- c:\windows\system32\dllcache\xpsshhdr.dll
2009-05-04 15:52 117,760 -------- c:\windows\system32\prntvpt.dll
2009-05-04 15:52 89,088 -------- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-05-04 15:52 <DIR> --d----- C:\66995a4ca98d8c1fd41066c5ecb44e
2009-05-04 15:52 1,676,288 -------- c:\windows\system32\xpssvcs.dll
2009-05-04 15:52 1,676,288 -------- c:\windows\system32\dllcache\xpssvcs.dll
2009-05-03 19:25 258,352 a------- c:\windows\system32\unicows.dll
2009-05-03 19:23 <DIR> --d----- c:\program files\Ether Saga Online
2009-05-03 18:41 <DIR> --d----- c:\docume~1\jon\applic~1\GetRightToGo
2009-04-28 02:12 16,952 a------- c:\windows\system32\drivers\RkPavproc1.sys
2009-04-26 04:22 <DIR> --d-h--- c:\windows\PIF
2009-04-20 18:37 <DIR> --d----- c:\program files\WMRecorder11
2009-04-19 23:56 150,528 a------- c:\windows\system32\TLBINF32.DLL
2009-04-19 23:56 224 a------- c:\windows\system32\filerenamerred.sys
2009-04-19 23:55 662,288 a------- c:\windows\system32\MSCOMCT2.OCX
2009-04-19 23:55 224,016 a------- c:\windows\system32\TABCTL32.OCX
2009-04-19 23:55 152,848 a------- c:\windows\system32\comdlg32.ocx
2009-04-19 23:55 <DIR> --d----- c:\program files\Winsome File Renamer
2009-04-19 18:41 <DIR> --d----- c:\docume~1\jon\applic~1\LimeWire
2009-04-19 18:40 <DIR> --d----- c:\program files\LimeWire
2009-04-17 21:17 <DIR> --d----- c:\program files\GoldWave
2009-04-16 09:14 <DIR> --d----- C:\temp
2009-04-15 18:20 473,600 -------- c:\windows\system32\dllcache\fastprox.dll
2009-04-15 18:20 401,408 -------- c:\windows\system32\dllcache\rpcss.dll
2009-04-15 18:20 284,160 -------- c:\windows\system32\dllcache\pdh.dll
2009-04-15 18:20 227,840 -------- c:\windows\system32\dllcache\wmiprvse.exe
2009-04-15 18:20 110,592 -------- c:\windows\system32\dllcache\services.exe
2009-04-15 18:20 729,088 -------- c:\windows\system32\dllcache\lsasrv.dll
2009-04-15 18:20 714,752 -------- c:\windows\system32\dllcache\ntdll.dll
2009-04-15 18:20 617,472 -------- c:\windows\system32\dllcache\advapi32.dll
2009-04-15 18:20 453,120 -------- c:\windows\system32\dllcache\wmiprvsd.dll
2009-04-15 18:19 1,203,922 -------- c:\windows\system32\dllcache\sysmain.sdb
2009-04-15 18:19 215,552 -------- c:\windows\system32\dllcache\wordpad.exe
2009-04-15 18:19 2,560 -------- c:\windows\system32\xpsp4res.dll
2009-04-13 20:50 <DIR> --d----- c:\program files\Algebrator
2009-04-10 09:11 410,984 a------- c:\windows\system32\deploytk.dll
2009-04-10 09:11 73,728 a------- c:\windows\system32\javacpl.cpl
2009-04-10 01:49 <DIR> --d----- c:\program files\AviSynth 2.5
2009-04-10 01:49 <DIR> --d----- c:\program files\SUPER
2009-04-10 01:11 <DIR> --d----- c:\program files\VLC

==================== Find3M ====================

2009-05-06 22:28 1,132 a------- c:\windows\system32\drivers\APPFLTR.CFG.bck
2009-05-06 22:28 1,132 a------- c:\windows\system32\drivers\APPFLTR.CFG
2009-05-06 21:48 294,940 a------- c:\windows\system32\drivers\APPFCONT.DAT.bck
2009-05-06 21:48 294,940 a------- c:\windows\system32\drivers\APPFCONT.DAT
2009-03-30 23:22 716,272 a------- c:\windows\system32\drivers\sptd.sys
2009-03-30 23:13 92,947 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2009-03-30 22:34 65,536 a------- c:\windows\IFinst27.exe
2009-03-30 20:51 112,942 a------- c:\windows\hpoins07.dat
2009-03-30 20:49 1,871 a--shr-- c:\windows\system32\drivers\103C_HP_CPC_EX329AA-ABA M7567C_YC_0Pavi_QMXR627_E63NAemMPA3_48_IEMERY2_SASUSTek Computer INC._V2.00_B3.18_T061110_WXP2_L409_M2047_J300_7Intel_8Pentium D_93.4_#070105_N10B79055_Z_G.MRK
2009-03-24 19:35 5,056,000 a------- c:\windows\system32\drivers\RtkHDAud.sys
2009-03-24 19:10 17,567,744 a------- c:\windows\RTHDCPL.EXE
2009-03-21 10:06 989,696 -------- c:\windows\system32\dllcache\kernel32.dll
2009-03-17 14:58 540,672 a------- c:\windows\RtlExUpd.dll
2009-03-17 11:07 87,296 a------- c:\windows\system32\PavLspHook.dll
2009-03-10 14:32 2,168,320 a------- c:\windows\MicCal.exe
2009-03-06 10:22 284,160 a------- c:\windows\system32\pdh.dll
2009-03-02 20:18 826,368 a------- c:\windows\system32\wininet.dll
2009-03-02 20:18 826,368 -------- c:\windows\system32\dllcache\wininet.dll
2009-03-02 11:14 57,344 a------- c:\windows\ALCMTR.EXE
2009-02-28 00:54 636,072 -------- c:\windows\system32\dllcache\iexplore.exe
2009-02-20 06:20 70,656 -------- c:\windows\system32\dllcache\ie4uinit.exe
2009-02-20 06:20 13,824 -------- c:\windows\system32\dllcache\ieudinit.exe
2009-02-20 01:14 161,792 -------- c:\windows\system32\dllcache\ieakui.dll
2009-02-17 00:17 453,152 a------- c:\windows\system32\NVUNINST.EXE
2009-02-09 08:10 729,088 -------- c:\windows\system32\lsasrv.dll
2009-02-09 08:10 401,408 a------- c:\windows\system32\rpcss.dll
2009-02-09 08:10 714,752 -------- c:\windows\system32\ntdll.dll
2009-02-09 08:10 617,472 -------- c:\windows\system32\advapi32.dll
2009-02-09 07:13 1,846,784 a------- c:\windows\system32\win32k.sys
2009-02-09 07:13 1,846,784 -------- c:\windows\system32\dllcache\win32k.sys
2009-02-07 19:02 2,066,048 -------- c:\windows\system32\dllcache\ntkrnlpa.exe
2009-02-06 18:52 49,504 a------- c:\windows\system32\sirenacm.dll
2009-02-06 07:11 110,592 -------- c:\windows\system32\services.exe
2009-02-06 07:08 2,189,056 -------- c:\windows\system32\dllcache\ntoskrnl.exe
2009-02-06 07:06 2,145,280 -------- c:\windows\system32\ntoskrnl.exe
2009-02-06 07:06 2,145,280 -------- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-02-06 06:39 35,328 -------- c:\windows\system32\sc.exe
2009-02-06 06:39 35,328 -------- c:\windows\system32\dllcache\sc.exe
2009-02-06 06:32 2,023,936 -------- c:\windows\system32\ntkrnlpa.exe
2009-02-06 06:32 2,023,936 -------- c:\windows\system32\dllcache\ntkrpamp.exe
2006-05-03 06:06 163,328 ---shr-- c:\windows\system32\flvDX.dll
2007-02-21 07:47 31,232 ---shr-- c:\windows\system32\msfDX.dll
2008-03-16 09:30 216,064 ---shr-- c:\windows\system32\nbDX.dll

============= FINISH: 23:04:09.03 ===============

Attached Files


Edited by KiwIMoN, 06 May 2009 - 10:37 PM.


BC AdBot (Login to Remove)

 


#2 KiwIMoN

KiwIMoN
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:34 PM

Posted 12 May 2009 - 08:59 PM

Thanks anyway for any help you were going to give but I've fixed the problem on my own.

#3 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,012 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:01:34 PM

Posted 14 May 2009 - 10:11 PM

Thank you for letting us know. This topic shall now be closed. ~ OB
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users