Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Browser loses focus, possible virus


  • This topic is locked This topic is locked
2 replies to this topic

#1 MistahCloud

MistahCloud

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:17 AM

Posted 16 December 2012 - 05:36 PM

Hi, this is my first post to Bleepingcomputer. Hello to everyone on the forum, and i would like to say thank you in advance to anyone that reads, and replies to this post.

I have pasted my dds log and uploaded the attach log to see if anyone see's a problem that I for some reason am not finding.

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 10.9.2
Run by DaKing at 17:14:53 on 2012-12-16
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.870 [GMT -5:00]
.
AV: AVG Internet Security Business Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Computer Security *Disabled/Updated* {E7512ED5-4245-4B4D-AF3A-382D3F313F15}
FW: AVG Internet Security Business Edition 2012 *Disabled*
.
============== Running Processes ================
.
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\program files\powerstrip\pstrip.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mobile Stream\EasyTether\easytthr.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
C:\Program Files\TeamViewer\Version7\TeamViewer.exe
C:\Program Files\TeamViewer\Version7\tv_w32.exe
C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\System32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.v9.com/?utm_source=b&utm_medium=wnf&from=wnf&uid=WD-WMAMA2745822_WDCWD400BD-75JMA0&ts=1354032828
uDefault_Page_URL = hxxp://www.v9.com/?utm_source=b&utm_medium=wnf&from=wnf&uid=WD-WMAMA2745822_WDCWD400BD-75JMA0&ts=1354032828
mStart Page = hxxp://www.v9.com/?utm_source=b&utm_medium=wnf&from=wnf&uid=WD-WMAMA2745822_WDCWD400BD-75JMA0&ts=1354032828
mDefault_Page_URL = hxxp://www.v9.com/?utm_source=b&utm_medium=wnf&from=wnf&uid=WD-WMAMA2745822_WDCWD400BD-75JMA0&ts=1354032828
uURLSearchHooks: {54EB34EA-E6BE-4CFD-9F4F-C4A0C2EAFA22} - <orphaned>
uURLSearchHooks: AIM Toolbar Search Class: {03402f96-3dc7-4285-bc50-9e81fefafe43} - LocalServer32 - <no file>
uURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - <orphaned>
uURLSearchHooks: InternetHelper1.5 Toolbar: {1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} -
mURLSearchHooks: AIM Toolbar Search Class: {03402f96-3dc7-4285-bc50-9e81fefafe43} - LocalServer32 - <no file>
dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: AIM Toolbar: {61539ECD-CC67-4437-A03C-9AACCBD14326} - LocalServer32 - <no file>
TB: InternetHelper1.5 Toolbar: {1930E38A-DEEF-4CF4-9BFB-9C4EA3689A9D} -
TB: AIM Toolbar: {61539ecd-cc67-4437-a03c-9aaccbd14326} - LocalServer32 - <no file>
TB: InternetHelper1.5 Toolbar: {1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} -
EB: {32683183-48a0-441b-a342-7c2a440a9478} - <orphaned>
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" /MINIMIZED
uRun: [EasyTether] "c:\program files\mobile stream\easytether\easytthr.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [DAEMON Tools Pro Agent] "c:\program files\daemon tools pro\DTAgent.exe" -autorun
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [PowerStrip] c:\program files\powerstrip\pstrip.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRunOnce: [Malwarebytes Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
mExplorerRun: [winIogon] c:\documents and settings\daking\application data\winIogon.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:255
mPolicies-Explorer: NoDriveTypeAutoRun = dword:255
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: Download with &Media Finder - c:\program files\media finder\hook.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\daking\start menu\programs\imvu\Run IMVU.lnk
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
LSP: c:\windows\system32\iavlsp.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: dell.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {33564D57-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1349499146578
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1349499134671
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 97.81.22.195 71.92.29.130 24.217.201.67
TCP: Interfaces\{0422725E-1A81-4462-A675-C42F49E61E79} : DHCPNameServer = 97.81.22.195 71.92.29.130 24.217.201.67
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Authentication Packages = msv1_0 nwprovau
mASetup: {C493E9C0-94CE-6CCF-BFAE-4CC7F2DBDEC0} - c:\documents and settings\daking\application data\winIogon.exe
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\daking\application data\mozilla\firefox\profiles\fe5oftdo.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch
FF - prefs.js: browser.search.selectedEngine - AVG Secure Search
FF - prefs.js: browser.startup.homepage - hxxp://www.v9.com/?utm_source=b&utm_medium=wnf&from=wnf&uid=WD-WMAMA2745822_WDCWD400BD-75JMA0&ts=1354032828
FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid={75E85637-CE35-4A38-858B-30041075E53B}&mid=fc91f0e46172da5a189165132b7951fc-416a8e5f70f752ec7286332b06bdb9d650f05950&lang=en&ds=AVG&pr=pr&d=2012-11-21 10:26:14&v=13.2.0.4&sap=ku&q=
FF - plugin: c:\documents and settings\daking\application data\facebook\npfbplugin_1_0_3.dll
FF - plugin: c:\documents and settings\daking\application data\kalydo\kalydoplayer\bin2\npkalydo.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\byond\bin\npbyond.dll
FF - plugin: c:\program files\common files\motive\npMotive.dll
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npbyond.dll
FF - plugin: c:\program files\musicnotes\npmusicn.dll
FF - plugin: c:\program files\musicnotes\NPSibelius.dll
FF - plugin: c:\program files\opera\program\plugins\np_gp.dll
FF - plugin: c:\program files\opera\program\plugins\nppl3260.dll
FF - plugin: c:\program files\opera\program\plugins\nprpjplug.dll
FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_5_502_135.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
FF - ExtSQL: 2012-11-15 13:00; {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}; c:\program files\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF - ExtSQL: 2012-11-29 11:55; crossriderapp4493@crossrider.com; c:\documents and settings\daking\application data\mozilla\firefox\profiles\fe5oftdo.default\extensions\crossriderapp4493@crossrider.com
.
---- FIREFOX POLICIES ----
FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.ytff.general.dontshowhpoffer, true);user_pref(network.protocol-handler.warn-external.dnupdate, false
============= SERVICES / DRIVERS ===============
.
R0 AFPAnsi;Alfa File Protector Ansi;c:\windows\system32\drivers\AFPAnsi.sys [2012-12-6 43936]
R0 fsbts;fsbts;c:\windows\system32\drivers\fsbts.sys [2012-12-7 44240]
R0 ssfs0bbc;ssfs0bbc;c:\windows\system32\drivers\ssfs0bbc.sys [2008-8-9 29808]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-12-11 242240]
R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\charter security suite\apps\computersecurity\hips\drivers\fshs.sys [2012-12-7 73208]
R1 SuperMounter;SuperMounter;c:\windows\system32\drivers\supermounter.sys [2012-12-6 11264]
R2 cpuz133;cpuz133;c:\windows\system32\drivers\cpuz133_x32.sys [2010-4-13 20968]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-12-16 399432]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-12-16 676936]
R2 Motorola Device Manager;Motorola Device Manager Service;c:\program files\motorola mobility\motorola device manager\MotoHelperService.exe [2012-7-17 116632]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\htc\internet pass-through\PassThruSvr.exe [2011-3-31 80896]
R2 PStrip;PStrip;c:\windows\system32\drivers\pstrip.sys [2007-7-14 27992]
R2 TeamViewer7;TeamViewer 7;c:\program files\teamviewer\version7\TeamViewer_Service.exe [2012-10-5 2754984]
R2 WebrootSpySweeperService;Webroot Spy Sweeper Engine;c:\program files\webroot\spy sweeper\SpySweeper.exe [2008-8-9 3585384]
R3 EuMusDesignVirtualAudioCableWdm;Virtual Audio Cable (WDM);c:\windows\system32\drivers\vrtaucbl.sys [2010-4-30 30728]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-16 22856]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2012-12-16 40776]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 FSORSPClient;F-Secure ORSP Client;c:\program files\charter security suite\apps\ccf_reputation\fsorsp.exe [2012-5-25 61152]
S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;c:\program files\hi-rez studios\HiPatchService.exe [2012-11-18 8704]
S2 Skype C2C Service;Skype C2C Service;c:\documents and settings\all users\application data\skype\toolbars\skype c2c service\c2c_service.exe [2012-11-22 3290304]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-11-9 160944]
S3 arusb(SMC);SMCWUSB-N2 802.11n Wireless USB 2.0 Adapter Service(SMC);c:\windows\system32\drivers\arusb.sys [2011-11-9 458240]
S3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\drivers\motfilt.sys [2012-10-5 6016]
S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2009-12-18 11336]
S3 cpuz132;cpuz132;\??\c:\docume~1\daking\locals~1\temp\cpuz132\cpuz132_x32.sys --> c:\docume~1\daking\locals~1\temp\cpuz132\cpuz132_x32.sys [?]
S3 easytether;easytether;c:\windows\system32\drivers\easytthr.sys [2012-11-8 17328]
S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\charter security suite\apps\computersecurity\anti-virus\minifilter\fsgk.sys [2012-12-7 144440]
S3 fsni;fsni;c:\program files\charter security suite\apps\ccf_scanning\fsnixp32.sys [2012-10-12 48696]
S3 fsnitdi;fsnitdi;c:\program files\charter security suite\apps\ccf_scanning\fsnitdi32.sys [2012-10-12 22584]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [2012-11-20 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [2010-6-22 21248]
S3 motandroidusb;Mot ADB Interface Driver;c:\windows\system32\drivers\motoandroid.sys [2012-10-5 25856]
S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [2012-10-5 20864]
S3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [2012-10-5 8448]
S3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\drivers\Motousbnet.sys [2012-10-5 23808]
S3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\drivers\motusbdevice.sys [2012-10-5 11008]
S3 MSHUSBVideo;NX6000/NX3000/VX7000 Filter Driver;c:\windows\system32\drivers\nx6000.sys [2010-6-21 34136]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-5-13 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-5-13 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-5-13 136808]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\iobit\game booster 3\driver\WinRing0.sys [2012-10-3 14416]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S3 XIRLINK;IBM PC Camera;c:\windows\system32\drivers\C-itNT.sys [2010-6-2 899884]
S4 Updater Service for StartNow Toolbar;Updater Service for StartNow Toolbar;c:\program files\startnow toolbar\ToolbarUpdaterService.exe [2011-7-27 267488]
.
=============== Created Last 30 ================
.
2012-12-16 22:03:16 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-12-16 22:03:12 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-16 22:03:12 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-12-12 02:01:39 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-12-12 02:01:31 -------- d-----w- c:\documents and settings\daking\application data\DAEMON Tools Pro
2012-12-12 02:01:23 -------- d-----w- c:\program files\DAEMON Tools Pro
2012-12-12 02:00:23 -------- d-----w- c:\documents and settings\all users\application data\DAEMON Tools Pro
2012-12-08 03:03:33 44240 ----a-w- c:\windows\system32\drivers\fsbts.sys
2012-12-08 02:56:00 -------- d-----w- c:\program files\Charter Security Suite
2012-12-08 02:54:10 -------- d-----w- c:\documents and settings\all users\application data\F-Secure
2012-12-06 05:13:35 73728 ----a-w- c:\windows\system32\smh.dat
2012-12-06 05:13:35 6144 ----a-w- c:\windows\system32\SuperRes.dll
2012-12-06 05:13:35 5965824 ----a-w- c:\windows\system32\vbsbak.dat
2012-12-06 05:13:35 44000 ----a-w- c:\windows\system32\drivers\AFPUni.sys
2012-12-06 05:13:35 43936 ----a-w- c:\windows\system32\drivers\AFPAnsi.sys
2012-12-06 05:13:35 261120 ----a-w- c:\windows\system32\SuperMenuHook.dll
2012-12-06 05:13:35 261120 ----a-w- c:\windows\system32\baksm.dat
2012-12-06 05:13:35 11264 ----a-w- c:\windows\system32\drivers\supermounter.sys
2012-12-06 05:13:34 89088 ----a-w- c:\windows\system32\Shreder.dll
2012-12-06 05:13:34 56 ----a-w- c:\windows\system32\vb6sock.dll
2012-12-06 05:13:34 1473536 ----a-w- c:\windows\system32\context.dll
2012-12-06 05:13:34 -------- d-----w- c:\program files\SuperLogix
2012-11-29 20:16:19 -------- d-----w- c:\program files\ISO to USB
2012-11-29 16:59:16 -------- d-----w- c:\windows\setup.pss
2012-11-29 16:58:49 -------- d-----w- c:\windows\setupupd
2012-11-29 16:56:14 -------- d-----w- c:\program files\Product Key Finder
2012-11-29 16:55:50 -------- d-----w- c:\documents and settings\daking\local settings\application data\Coupon Companion
2012-11-29 16:55:37 -------- d-----w- c:\program files\Coupon Companion
2012-11-29 14:57:04 -------- d-----w- c:\program files\ooVoo
2012-11-27 16:13:51 -------- d-----w- c:\program files\v9Soft
2012-11-25 12:25:08 -------- d-----w- c:\windows\SxsCaPendDel
2012-11-22 15:34:38 5885632 ----a-w- c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll
2012-11-21 15:22:09 -------- d-----w- c:\documents and settings\all users\application data\MFAData
2012-11-21 00:36:40 24576 ----a-w- c:\windows\system32\drivers\ANDROIDUSB.sys
2012-11-21 00:36:29 -------- d-----w- c:\program files\Spirent Communications
2012-11-21 00:36:11 -------- d-----w- c:\program files\HTC
2012-11-18 23:25:17 -------- d-----w- c:\program files\NetDragon
2012-11-18 20:27:27 -------- d-----w- c:\documents and settings\daking\application data\Awesomium
2012-11-18 20:26:46 -------- d-----w- c:\documents and settings\all users\application data\Hi-Rez Studios
2012-11-18 20:26:27 -------- d-----w- c:\program files\Hi-Rez Studios
2012-11-18 16:14:33 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
.
==================== Find3M ====================
.
2012-12-11 19:39:32 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-28 19:30:02 17328 ----a-w- c:\windows\system32\drivers\easytthr.sys
2012-10-20 19:08:22 0 ----a-w- c:\windows\system32\w32apiw.dll
2012-10-20 18:16:14 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-20 18:16:12 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-10-20 18:16:11 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-20 18:16:11 746984 ----a-w- c:\windows\system32\deployJava1.dll
.
============= FINISH: 17:20:09.68 ===============

Attached Files



BC AdBot (Login to Remove)

 


#2 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:04:17 PM

Posted 18 December 2012 - 04:00 AM

Hi,

I see you have Malwarebytes installed.
Please update Malwarebytes via the Update tab. Then rescan with Malwarebytes and post the malwarebytes log in your next reply.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#3 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:04:17 PM

Posted 02 January 2013 - 07:20 AM

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users