here is my rootrepeal scan.As for dds it stops running after the scan and it wont show me any logs nvm I got it running by dling from the other link
DDS (Ver_09-10-24.01) - NTFSx86
Run by User at 13:06:32.50 on Sat 10/24/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
============== Pseudo HJT Report ===============
mStart Page = hxxp://www.google.com
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
EB: &Research: {ff059e31-cc5a-4e2e-bf3b-96e929d65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe"
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [nwiz] nwiz.exe /install
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [vptray] c:\progra~1\symant~1\VPTray.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\jacklao folder\jacklao.bat.exe" /runcleanupscript
dRunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
dRunOnce: [IE7-11] rundll32 advpack.dll,LaunchINFSection NR_IE7en.inf,AfterUserStart
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_674125AABFE11C21.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\npjpi160_15.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1206029718390
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1206029712484
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: NavLogon - c:\windows\system32\NavLogon.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\wpdshserviceobj.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\user\applic~1\mozilla\firefox\profiles\ei3asatk.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
============= SERVICES / DRIVERS ===============
=============== Created Last 30 ================
2009-10-24 07:06:36 0 d-s---w- C:\ComboFix
2009-10-24 06:39:19 50176 -c--a-w- c:\windows\system32\dllcache\proquota.exe
2009-10-24 06:39:19 50176 ----a-w- c:\windows\system32\proquota.exe
2009-10-24 06:00:12 0 d-----w- c:\program files\qjjwgx
2009-10-23 22:00:38 0 d-----w- c:\documents and settings\user\Pron
2009-10-22 23:21:38 0 d-----w- c:\docume~1\user\applic~1\SUPERAntiSpyware.com
2009-10-21 21:28:17 0 d-----w- c:\program files\Spybot - Search & Destroy
2009-10-21 21:28:17 0 d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2009-10-21 04:06:45 77 ----a-w- c:\windows\system32\uses32.dat
2009-10-21 03:57:12 107 ----a-w- c:\windows\system32\wwp.htm
2009-10-18 22:28:16 0 d-----w- c:\docume~1\alluse~1\applic~1\Turbine
2009-10-18 22:28:06 0 d-----w- c:\program files\Turbine
2009-10-14 18:50:39 0 d-----w- c:\program files\iPod
2009-10-14 18:50:37 0 d-----w- c:\program files\iTunes
2009-10-13 21:14:50 1435648 -c----w- c:\windows\system32\dllcache\query.dll
2009-10-13 21:13:28 58880 -c----w- c:\windows\system32\dllcache\msasn1.dll
2009-10-12 21:29:19 0 d-----w- c:\docume~1\user\applic~1\DVD Flick
2009-10-12 21:29:05 662288 ----a-w- c:\windows\system32\mscomct2.ocx
2009-10-12 21:29:05 609824 ----a-w- c:\windows\system32\comctl32.ocx
2009-10-12 21:29:05 40960 ----a-w- c:\windows\system32\ssubtmr6.dll
2009-10-12 21:29:05 36864 ----a-w- c:\windows\system32\trayicon_handler.ocx
2009-10-12 21:29:05 28672 ----a-w- c:\windows\system32\mousewheel.ocx
2009-10-12 21:29:05 212240 ----a-w- c:\windows\system32\richtx32.ocx
2009-10-12 21:29:05 164144 ----a-w- c:\windows\system32\comct232.ocx
2009-10-12 21:29:05 0 d-----w- c:\program files\DVD Flick
2009-10-09 19:45:53 0 d-----w- c:\documents and settings\user\ALHS
2009-10-08 21:44:29 0 d-----w- c:\docume~1\alluse~1\applic~1\IObit
2009-10-08 21:44:27 0 d-----w- c:\program files\IObit
2009-10-07 22:04:06 0 d-----w- c:\program files\uTorrent
2009-10-04 17:32:31 0 d-----w- c:\program files\Microsoft
2009-09-29 02:41:57 0 d-----w- c:\program files\NVIDIA Corporation
2009-09-29 02:41:52 0 d-----w- c:\docume~1\alluse~1\applic~1\NVIDIA Corporation
2009-09-29 02:41:20 0 d-----w- C:\NVIDIA
2009-09-24 20:58:14 3248 ----a-w- c:\windows\system32\wbem\Outlook_01ca3d59bb9aba46.mof
==================== Find3M ====================
2009-09-11 14:18:39 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-10 18:54:06 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 18:53:50 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-04 21:03:36 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 08:08:21 916480 ------w- c:\windows\system32\wininet.dll
2009-08-28 23:42:52 40448 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-08-28 23:42:52 2065696 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-08-26 08:00:21 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-18 03:33:52 1193832 ----a-w- c:\windows\system32\FM20.DLL
2009-08-17 07:04:24 2173472 ----a-w- c:\windows\system32\nvcplui.exe
2009-08-17 07:04:08 81920 ----a-w- c:\windows\system32\nvwddi.dll
2009-08-17 07:03:44 3170304 ----a-w- c:\windows\system32\nvwss.dll
2009-08-17 07:03:38 4026368 ----a-w- c:\windows\system32\nvvitvs.dll
2009-08-17 07:03:28 188416 ----a-w- c:\windows\system32\nvmccss.dll
2009-08-17 07:03:28 1286144 ----a-w- c:\windows\system32\nvmobls.dll
2009-08-17 07:03:22 3547136 ----a-w- c:\windows\system32\nvgames.dll
2009-08-17 07:03:02 4923392 ----a-w- c:\windows\system32\nvdisps.dll
2009-08-17 07:03:00 86016 ----a-w- c:\windows\system32\nvmctray.dll
2009-08-17 07:03:00 168004 ----a-w- c:\windows\system32\nvsvc32.exe
2009-08-17 07:03:00 143360 ----a-w- c:\windows\system32\nvcolor.exe
2009-08-17 07:03:00 13877248 ----a-w- c:\windows\system32\nvcpl.dll
2009-08-17 07:02:52 229376 ----a-w- c:\windows\system32\nvmccs.dll
2009-08-17 04:57:00 868352 ----a-w- c:\windows\system32\nvapi.dll
2009-08-17 04:57:00 5845760 ----a-w- c:\windows\system32\nv4_disp.dll
2009-08-17 04:57:00 485920 ----a-w- c:\windows\system32\nvudisp.exe
2009-08-17 04:57:00 2189856 ----a-w- c:\windows\system32\nvcuvid.dll
2009-08-17 04:57:00 2002944 ----a-w- c:\windows\system32\nvcuda.dll
2009-08-17 04:57:00 1706528 ----a-w- c:\windows\system32\nvcuvenc.dll
2009-08-17 04:57:00 1597690 ----a-w- c:\windows\system32\nvdata.bin
2009-08-17 04:57:00 155648 ----a-w- c:\windows\system32\nvcodins.dll
2009-08-17 04:57:00 155648 ----a-w- c:\windows\system32\nvcod.dll
2009-08-17 04:57:00 10457088 ----a-w- c:\windows\system32\nvoglnt.dll
2009-08-14 17:36:18 70936 ----a-w- c:\windows\system32\PhysXLoader.dll
2009-08-11 16:35:08 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-08-07 01:43:26 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-08-05 09:01:48 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 15:13:08 2145280 ------w- c:\windows\system32\ntoskrnl.exe
2009-08-04 14:20:09 2023936 ------w- c:\windows\system32\ntkrnlpa.exe
2009-08-03 04:21:54 58648 ----a-w- c:\windows\system32\AgCPanelTraditionalChinese.dll
2009-08-03 04:21:54 58648 ----a-w- c:\windows\system32\AgCPanelSwedish.dll
2009-08-03 04:21:54 58648 ----a-w- c:\windows\system32\AgCPanelSpanish.dll
2009-08-03 04:21:54 58648 ----a-w- c:\windows\system32\AgCPanelSimplifiedChinese.dll
2009-08-03 04:21:54 58648 ----a-w- c:\windows\system32\AgCPanelPortugese.dll
2009-08-03 04:21:54 58648 ----a-w- c:\windows\system32\AgCPanelKorean.dll
2009-08-03 04:21:54 58648 ----a-w- c:\windows\system32\AgCPanelJapanese.dll
2009-08-03 04:21:54 288024 ----a-w- c:\windows\system32\PhysXCplUI.exe
2009-08-03 04:21:54 288024 ----a-w- c:\windows\system32\PhysXCompatCplUI.exe
2009-08-03 04:21:54 23320 ----a-w- c:\windows\system32\PhysXDevice.dll
2009-08-03 04:21:52 58648 ----a-w- c:\windows\system32\AgCPanelGerman.dll
2009-08-03 04:21:52 58648 ----a-w- c:\windows\system32\AgCPanelFrench.dll
2009-07-26 20:44:56 48448 ----a-w- c:\windows\system32\sirenacm.dll
2006-06-24 22:48:54 32768 ----a-r- c:\windows\inf\UpdateUSB.exe
2009-07-21 03:55:49 81920 --sha-w- c:\windows\system32\hopagatu.exe
2008-03-20 16:23:31 32768 --sha-w- c:\windows\system32\config\systemprofile\application data\microsoft\internet explorer\userdata\index.dat
2008-10-10 18:50:14 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\application data\microsoft\feeds cache\index.dat
============= FINISH: 13:07:25.82 ===============
Attached Files
Edited by Cotna, 24 October 2009 - 12:15 PM.