DDS (Ver_09-09-29.01) - NTFSx86
Run by Owner at 3:39:38.85 on Tue 02/09/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.683 [GMT -5:00]
AV: McAfee VirusScan *On-access scanning enabled* (Outdated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Firewall Plus *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\dllhost.exe
C:\Documents and Settings\Owner.YOUR-8F711B701E\Desktop\dds.com
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com
uURLSearchHooks: H - No File
uURLSearchHooks: H - No File
TB: {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - No File
mRun: [SynTPLpr] "c:\program files\synaptics\syntp\SynTPLpr.exe"
mRun: [SynTPEnh] "c:\program files\synaptics\syntp\SynTPEnh.exe"
mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\iaanotif.exe"
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [SMSERIAL] "c:\program files\motorola\smserial\sm56hlpr.exe"
mRun: [IntelZeroConfig] "c:\program files\intel\wireless\bin\ZCfgSvc.exe"
mRun: [IntelWireless] "c:\program files\intel\wireless\bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
mRun: [MSKDetectorExe] "c:\program files\mcafee\spamkiller\MSKDetct.exe" /uninstall
mRun: [PKR Pal] "./\pkrpal.exe" -osboot
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Reminder] %WINDIR%\Creator\Remind_XP.exe
mRun: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [ehTray] c:\windows\ehome\ehtray.exe
dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil9f.exe
StartupFolder: c:\docume~1\owner~1.you\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe
IE: {94148DB5-B42D-4915-95DA-2CBB4F7095BF} - c:\program files\ultimatebet\UltimateBet.exe
IE: {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - c:\program files\partygaming\partypoker\RunApp.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - c:\program files\bodog poker\BPGame.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
DPF: {05D96F71-87C6-11D3-9BE4-00902742D6E0} - hxxp://quickplace.stonehill.edu/qp2.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} - hxxps://jackpotflash.microgaming.com/jackpotflash/FlashAX.cab
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: igfxcui - igfxdev.dll
Notify: WRNotifier - WRLogonNTF.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: {B0B3393C-62D1-44D8-ABF5-08E0F067F29E} - No File
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
============= SERVICES / DRIVERS ===============
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-1-5 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-1-5 74480]
S3 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-9-10 611664]
S3 ati5nuxx;ati5nuxx;\??\c:\windows\system32\drivers\ati5nuxx.sys --> c:\windows\system32\drivers\ati5nuxx.sys [?]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-2-9 38224]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2010-1-5 7408]
S4 CoUprothyap;CoUprothyap;c:\windows\system32\svchost.exe -k netsvcs [2006-6-17 14336]
S4 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
=============== Created Last 30 ================
2010-02-09 01:53 14,336 ac------ c:\windows\system32\dllcache\asyncmac.sys
2010-02-09 01:53 14,336 a------- c:\windows\system32\drivers\asyncmac.sys
2010-02-09 01:36 161,792 a------- c:\windows\SWREG.exe
2010-02-09 01:36 98,816 a------- c:\windows\sed.exe
2010-02-09 01:02 38,224 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-09 01:02 19,160 a------- c:\windows\system32\drivers\mbam.sys
2010-02-09 00:50 <DIR> --d----- c:\program files\CleanUp!
2010-02-09 00:05 <DIR> --d----- c:\program files\ESET
2010-02-08 23:53 <DIR> --dsh--- c:\documents and settings\owner.your-8f711b701e\IECompatCache
2010-02-08 23:52 <DIR> --dsh--- c:\documents and settings\owner.your-8f711b701e\PrivacIE
2010-02-08 23:50 <DIR> --dsh--- c:\documents and settings\owner.your-8f711b701e\IETldCache
2010-02-08 23:35 69,120 -c------ c:\windows\system32\dllcache\iecompat.dll
2010-02-08 23:35 <DIR> --d----- c:\windows\ie8updates
2010-02-08 23:35 11,070,464 -c------ c:\windows\system32\dllcache\ieframe.dll
2010-02-08 23:35 1,985,536 -c------ c:\windows\system32\dllcache\iertutil.dll
2010-02-08 23:35 594,432 -c------ c:\windows\system32\dllcache\msfeeds.dll
2010-02-08 23:35 246,272 -c------ c:\windows\system32\dllcache\ieproxy.dll
2010-02-08 23:35 55,296 -c------ c:\windows\system32\dllcache\msfeedsbs.dll
2010-02-08 23:35 12,800 -c------ c:\windows\system32\dllcache\xpshims.dll
2010-02-08 23:34 <DIR> -cd-h--- c:\windows\ie8
2010-02-08 23:18 1,089,593 -c------ c:\windows\system32\dllcache\ntprint.cat
2010-02-08 23:03 <DIR> --d----- c:\windows\system32\XPSViewer
2010-02-08 23:03 1,676,288 -c------ c:\windows\system32\dllcache\xpssvcs.dll
2010-02-08 23:03 597,504 -c------ c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-02-08 23:03 575,488 -c------ c:\windows\system32\dllcache\xpsshhdr.dll
2010-02-08 23:03 89,088 -c------ c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-02-08 23:03 <DIR> --d----- C:\7ca48f567fb9e01521bccd2b2e
2010-02-08 23:03 1,676,288 -------- c:\windows\system32\xpssvcs.dll
2010-02-08 23:03 575,488 -------- c:\windows\system32\xpsshhdr.dll
2010-02-08 23:03 117,760 -------- c:\windows\system32\prntvpt.dll
2010-02-08 23:00 272,128 -c------ c:\windows\system32\dllcache\bthport.sys
2010-02-08 23:00 203,136 -c------ c:\windows\system32\dllcache\rmcast.sys
2010-02-08 23:00 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2010-02-08 23:00 333,952 -c------ c:\windows\system32\dllcache\srv.sys
2010-02-08 23:00 691,712 -c------ c:\windows\system32\dllcache\inetcomm.dll
2010-02-08 23:00 337,408 -c------ c:\windows\system32\dllcache\netapi32.dll
2010-02-08 22:51 <DIR> --d----- c:\windows\system32\scripting
2010-02-08 22:51 <DIR> --d----- c:\windows\l2schemas
2010-02-08 22:51 <DIR> --d----- c:\windows\system32\en
2010-02-08 22:51 <DIR> --d----- c:\windows\system32\bits
2010-02-08 22:49 <DIR> --d----- c:\windows\ServicePackFiles
2010-02-08 22:48 <DIR> --d----- c:\windows\network diagnostic
2010-02-08 22:18 471,552 -c------ c:\windows\system32\dllcache\aclayers.dll
2010-02-08 22:11 128,512 -c------ c:\windows\system32\dllcache\dhtmled.ocx
2010-02-08 22:10 1,315,328 -c------ c:\windows\system32\dllcache\msoe.dll
2010-02-08 22:07 2,560 -------- c:\windows\system32\xpsp4res.dll
2010-02-08 22:07 1,206,508 -c------ c:\windows\system32\dllcache\sysmain.sdb
2010-02-08 22:07 215,552 -c------ c:\windows\system32\dllcache\wordpad.exe
2010-02-08 21:52 199 a------- C:\WirelessDiagLog.csv
2010-02-08 21:48 <DIR> --d----- c:\windows\DLLArchive
2010-02-08 21:36 <DIR> --d----- c:\program files\AnalogX
2010-02-08 21:04 <DIR> --d----- c:\program files\Marvell
2010-02-08 20:45 2 a------- c:\windows\msoffice.ini
2010-02-08 20:24 <DIR> --d----- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2010-02-08 20:24 <DIR> --d----- c:\program files\SUPERAntiSpyware
2010-02-08 20:24 <DIR> --d----- c:\docume~1\owner~1.you\applic~1\SUPERAntiSpyware.com
2010-02-08 20:19 <DIR> --d----- C:\cabs
2010-02-08 18:44 261,632 a------- c:\windows\PEV.exe
2010-02-08 18:44 77,312 a------- c:\windows\MBR.exe
2010-02-08 18:09 <DIR> --d----- c:\docume~1\owner~1.you\applic~1\Malwarebytes
2010-02-08 18:03 <DIR> --d----- C:\found.000
2010-02-08 17:44 61,440 a------- c:\windows\system32\drivers\oemyf.sys
2010-02-08 16:04 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2010-02-08 16:04 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-02-08 05:43 90,112 a------- c:\windows\system32\regdacl.exe
2010-02-08 05:43 <DIR> --d----- c:\windows\system32\regdacl
2010-02-08 03:48 <DIR> a-dshr-- C:\cmdcons
2010-02-08 03:48 <DIR> --d----- c:\windows\setup.pss
==================== Find3M ====================
2010-02-08 22:53 86,811 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2010-02-08 21:36 21,419 a------- c:\windows\system32\drivers\AegisP.sys
2010-02-08 05:50 90,112 a------- C:\RegDACL.exe
2010-02-08 05:50 4,175 a------- C:\SMWNCV.cmd
2009-12-22 00:20 81,920 -------- c:\windows\system32\ieencode.dll
2009-12-21 14:14 916,480 -------- c:\windows\system32\wininet.dll
2009-11-21 10:51 471,552 a------- c:\windows\apppatch\aclayers.dll
2008-10-18 23:29 18,557 a------- c:\program files\common files\okus.pif
2008-10-18 23:29 12,331 a------- c:\docume~1\owner~1.you\applic~1\apusahed.exe
2008-10-18 15:31 19,238 a------- c:\program files\common files\adowary._dl
2008-10-18 15:31 18,351 a------- c:\docume~1\alluse~1\applic~1\medowozela.dll
2008-10-18 15:31 15,127 a------- c:\docume~1\alluse~1\applic~1\webobizyk.bin
2008-10-18 15:31 12,999 a------- c:\docume~1\alluse~1\applic~1\jytocucu.bin
2008-10-18 15:31 10,253 a------- c:\docume~1\owner~1.you\applic~1\qoza.dll
============= FINISH: 3:40:18.89 ===============
Attached Files
Edited by jurollo, 09 February 2010 - 03:45 AM.