We got hit on 3 pc's at the same time, and I reinstalled on 2 of them and kept this one to try to heal. I am at my wits end with this thing! I am pretty sure it was out of date java client that caused it, but not positive (java WAS out of date though -- I don't know how to get that through to people. . .it's so easy to update. . .) I view this as a learning experience, and a way to help me help myself in the future. Any help will be greatly appreciated!
Thank you very much in advance!
DDS (Ver_09-07-30.01) - NTFSx86
Run by Administrator at 21:14:46.46 on Wed 09/23/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1015.520 [GMT -4:00]
AV: eTrust ITM *On-access scanning enabled* (Updated) {33EA71EA-56CF-40B5-A06B-BD3A27397C44}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\CA\SharedComponents\iTechnology\igateway.exe
C:\Program Files\CA\eTrustITM\InoRpc.exe
C:\Program Files\CA\eTrustITM\InoRT.exe
C:\Program Files\CA\eTrustITM\InoTask.exe
C:\Program Files\CA\SharedComponents\PPRealtime\bin\ITMRTSVC.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CA\eTrustITM\realmon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\system32\igfxtray.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HPQ\Shared\hpqwmi.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\Documents and Settings\Administrator\Desktop\dds.scr
============== Pseudo HJT Report ===============
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll
BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [Realtime Monitor] "c:\program files\ca\etrustitm\realmon.exe" -s
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [SoundMAXPnP] c:\program files\analog devices\soundmax\SMax4PNP.exe
mRun: [SoundMAX] "c:\program files\analog devices\soundmax\Smax4.exe" /tray
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [hpWirelessAssistant] c:\program files\hpq\hp wireless assistant\HP Wireless Assistant.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [eabconfg.cpl] c:\program files\hpq\quick launch buttons\EabServr.exe /Start
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [Cpqset] c:\program files\hpq\default settings\cpqset.exe
mRun: [AGRSMMSG] AGRSMMSG.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [bubelasan] Rundll32.exe "c:\windows\system32\vahipoja.dll",a
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\deskto~1.lnk - c:\program files\research in motion\blackberry\DesktopMgr.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1211479488573
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1211481962415
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Notify: igfxcui - igfxsrvc.dll
AppInit_DLLs: lubefije.dll c:\windows\system32\vahipoja.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SSODL: OSDriver - {5447260E-F106-4857-A4CC-EB374FC6FF3A} - c:\documents and settings\all users\microsoft private data\microsoft\lan.dll
SSODL: SystemLoading - {E8A5853F-8B5C-43F6-8A52-A229C42BD00B} - c:\documents and settings\all users\microsoft private data\microsoft\rohrctwizi.dll
SSODL: dumubakak - {e490c2cd-900a-42a5-8d4a-0b9e20ddc7a5} - c:\windows\system32\vahipoja.dll
STS: kupuhivus: {e490c2cd-900a-42a5-8d4a-0b9e20ddc7a5} - c:\windows\system32\vahipoja.dll
LSA: Notification Packages = scecli zosusewa.dll
============= SERVICES / DRIVERS ===============
R3 GTIPCI21;GTIPCI21;c:\windows\system32\drivers\gtipci21.sys [2004-5-3 80384]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [2004-9-2 32640]
=============== Created Last 30 ================
2009-09-23 20:47 <DIR> --d----- c:\docume~1\admini~1\applic~1\Malwarebytes
2009-09-23 20:47 <DIR> --dsh--- c:\documents and settings\administrator\IETldCache
2009-09-22 09:59 4,707 a------- C:\SafeBoot.zip
2009-09-22 07:52 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2009-09-22 07:52 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2009-09-18 11:59 410,984 a------- c:\windows\system32\deploytk.dll
2009-09-18 11:59 73,728 a------- c:\windows\system32\javacpl.cpl
2009-09-18 09:52 38,224 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-18 09:52 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-09-18 09:52 19,160 a------- c:\windows\system32\drivers\mbam.sys
2009-09-18 09:52 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-09-18 09:35 <DIR> --d----- c:\windows\pss
2009-09-18 09:23 0 a------- c:\windows\system32\41.exe
2009-09-08 10:00 <DIR> --d----- c:\program files\MSECache
==================== Find3M ====================
2009-09-22 07:46 87,552 a--sh--- c:\windows\system32\vahipoja.dll
2009-09-22 07:46 37,376 a--sh--- c:\windows\system32\nejoweyi.dll
2009-09-21 18:30 50,176 a--sh--- c:\windows\system32\dahovibo.dll
2009-09-21 18:29 88,576 a--sh--- c:\windows\system32\visegobu.dll
2009-09-21 18:29 37,888 a--sh--- c:\windows\system32\nuzepema.dll
2009-09-21 06:31 39,424 a--sh--- c:\windows\system32\yatodimi.dll
2009-09-18 09:29 39,424 a--sh--- c:\windows\system32\seduvumo.dll
2009-08-05 05:11 204,800 a------- c:\windows\system32\mswebdvd.dll
2009-07-17 14:55 58,880 a------- c:\windows\system32\atl.dll
2009-07-13 23:43 286,208 a------- c:\windows\system32\wmpdxm.dll
2009-07-03 13:09 915,456 a------- c:\windows\system32\wininet.dll
2009-06-21 18:30 50,176 a--sh--- c:\windows\system32\lubefije.dll
2009-06-21 18:30 50,176 a--sh--- c:\windows\system32\vaditujo.dll
2009-06-21 18:30 50,176 a--sh--- c:\windows\system32\zosusewa.dll
============= FINISH: 21:15:48.29 ===============