17 replies to this topic

[AFirebaugh]

Today my mother used my laptop while I was at a meeting and when I returned home she said that my homepage, google.com, was not pulling up when she tried to start Firefox or IE. Instead it says that there was a problem with the program and if a solution is found I would be notified then another search engine starts. I cannot open internet options to change my homepage, nor can I open any of the windows security features. I'm not sure if this is some sort of redirect virus or what since everything I've seen so far on those are the search result links in google redirect to another site that had nothing to do with the search. I ran the malware scan and it showed 4 threats and after the restart it said they were removed, however the same issue is happening. I'm lost!



.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_35
Run by owner at 3:51:01 on 2012-09-21
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1580 [GMT -4:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\SMINST\BLService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtblfs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_278.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_278.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb
mStart Page = hxxp://news.searchonme.com/
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: MRI_DISABLED - No File
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Canon Easy-WebPrint EX BHO: {3785d0ad-bfff-47f6-bf5b-a587c162fed9} - c:\program files\canon\easy-webprint ex\ewpexbho.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Microsoft Live Search Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: Canon Easy-WebPrint EX: {759d9886-0c6f-4498-bab6-4a5f47c6c72f} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll
TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
EB: Canon Easy-WebPrint EX: {21347690-ec41-4f9a-8887-1f4aee672439} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [PhotoshopElements8SyncAgent] c:\program files\adobe\elements organizer 8.0\ElementsOrganizerSyncAgent.exe
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe"
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [<NO NAME>]
mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon
mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [CarboniteSetupLite] "c:\program files\carbonite\CarbonitePreinstaller.exe" /preinstalled /showonfirst /reshowat=900
mRun: [MaxMenuMgr] "c:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe"
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
StartupFolder: c:\users\owner\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Video Converter... - c:\program files\media player utilities 5.22\aviconverter\grab.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemydsl.verizon.net/sdcCommon/download/DSL/Verizon%20High%20Speed%20Internet%20Installer.cab
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} - hxxp://www.photodex.com/pxplay.cab
DPF: {D8AA889B-2C65-47C3-8C16-3DCD4EF76A47}
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{5BFE09BE-457F-46D2-8C44-E2109BE37AEF} : DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{CA1C5711-860D-4A79-B755-7CB579CEDBEA} : DhcpNameServer = 68.87.64.230 68.87.66.234
Notify: igfxcui - igfxdev.dll
Notify: klogon - c:\windows\system32\klogon.dll
AppInit_DLLs: c:\progra~1\sprote~1\sprote~1.dll
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\owner\appdata\roaming\mozilla\firefox\profiles\ehpubqd6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: browser.search.selectedEngine - SearchOnMe
FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/
FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\canon\easy-photoprint ex\NPEZFFPI.DLL
FF - plugin: c:\program files\canon\mycamera download plugin\NPCIG.dll
FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll
FF - plugin: c:\users\owner\appdata\locallow\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\users\owner\appdata\roaming\mozilla\plugins\npPxPlay.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_278.dll
FF - plugin: c:\windows\system32\npdeployJava1.dll
FF - plugin: c:\windows\system32\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2011-3-10 23856]
R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\adobe\elements organizer 8.0\PhotoshopElementsFileAgent.exe [2009-9-6 169312]
R2 AVP;Kaspersky Anti-Virus Service;c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r --> c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r [?]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2009-12-18 189736]
R2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\verizon\iha_messagecenter\bin\Verizon_IHAMessageCenter.exe [2011-12-12 290832]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-9-21 399432]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-9-21 676936]
R2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\sminst\BLService.exe [2009-4-22 365952]
R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-6-29 112128]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-9-21 22856]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 Norton Internet Security;Norton Internet Security;"c:\program files\norton internet security\engine\16.0.0.125\ccsvchst.exe" /s "norton internet security" /m "c:\program files\norton internet security\engine\16.0.0.125\dimaster.dll" /prefetch:1 --> c:\program files\norton internet security\engine\16.0.0.125\ccSvcHst.exe [?]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-5-25 250288]
S3 Com4QLBEx;Com4QLBEx;c:\program files\hewlett-packard\hp quick launch buttons\Com4QLBEx.exe [2009-4-22 193840]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-6-7 113120]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2012-09-21 06:35:34 -------- d-----w- c:\users\owner\appdata\roaming\Malwarebytes
2012-09-21 06:35:13 -------- d-----w- c:\programdata\Malwarebytes
2012-09-21 06:35:09 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-21 06:35:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-09-21 06:33:35 477168 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-09-21 05:59:35 6980552 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{a7b63c3d-ac3c-41c9-8c97-6c53ae632628}\mpengine.dll
2012-09-19 23:08:26 -------- d-----w- c:\programdata\Premium
2012-09-19 23:07:37 -------- d-----w- c:\program files\SProtector
2012-09-19 23:06:36 -------- d-----w- c:\programdata\InstallMate
.
==================== Find3M ====================
.
2012-09-21 06:32:44 473072 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-20 20:59:24 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-20 20:59:24 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-04 14:02:46 2047488 ----a-w- c:\windows\system32\win32k.sys
2012-06-29 00:16:58 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-06-29 00:09:01 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-06-29 00:08:59 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-06-29 00:04:43 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-06-29 00:00:45 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-06-28 19:39:17 260 ----a-w- c:\windows\system32\cmdVBS.vbs
2012-06-28 19:39:17 256 ----a-w- c:\windows\system32\MSIevent.bat
.
============= FINISH: 3:52:01.50 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 5/16/2009 5:05:14 PM
System Uptime: 9/21/2012 3:00:23 AM (0 hours ago)
.
Motherboard: Wistron | | 3612
Processor: Intel® Celeron® CPU 900 @ 2.20GHz | CPU | 2194/800mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 138 GiB total, 27.924 GiB free.
D: is FIXED (NTFS) - 11 GiB total, 1.831 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
.
Update for Microsoft Office 2007 (KB2508958)
Acrobat.com
ActiveCheck component for HP Active Support Library
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Photoshop Elements 8.0
Adobe Photoshop.com Inspiration Browser
Adobe Reader 9.4.0
Adobe Shockwave Player
Amazon MP3 Downloader 1.0.12
Atheros Driver Installation Program
Barnes & Noble Desktop Reader
BufferChm
Canon Easy-WebPrint EX
CANON iMAGE GATEWAY MyCamera Download Plugin
CANON iMAGE GATEWAY Task for ZoomBrowser EX
Canon Inkjet Printer/Scanner/Fax Extended Survey Program
Canon MOV Decoder
Canon MOV Encoder
Canon MovieEdit Task for ZoomBrowser EX
Canon MP Navigator EX 3.0
Canon MP250 series MP Drivers
Canon MP250 series User Registration
Canon Utilities Digital Photo Professional 3.10
Canon Utilities Easy-PhotoPrint EX
Canon Utilities EOS Sample Music
Canon Utilities EOS Utility
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX
Canon Utilities Movie Uploader for YouTube
Canon Utilities My Printer
Canon Utilities PhotoStitch
Canon Utilities Picture Style Editor
Canon Utilities Solution Menu
Canon Utilities ZoomBrowser EX
Canon ZoomBrowser EX Memory Card Utility
Carbonite Online Backup Setup
Compatibility Pack for the 2007 Office system
Conexant HD Audio
Coupon Printer for Windows
CustomerResearchQFolder
CyberLink DVD Suite
D1500
D1500_Help
DeviceDiscovery
DeviceManagementQFolder
DJ_SF_03_D1500_ProductContext
DJ_SF_03_D1500_Software
DJ_SF_03_D1500_Software_Min
EA Download Manager
ESU for Microsoft Vista
eSupportQFolder
GPBaseService
HDAUDIO Soft Data Fax Modem with SmartCP
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Active Support Library
HP Customer Experience Enhancements
HP Customer Participation Program 10.0
HP Deskjet D1500 Printer Driver Software 10.0 Rel .3
HP Doc Viewer
HP DVD Play 3.7
HP Help and Support
HP Imaging Device Functions 10.0
HP Photosmart Essential 3.5
HP Quick Launch Buttons 6.40 H2
HP Smart Web Printing 4.60
HP Solution Center 10.0
HP Update
HP User Guides 0118
HP Wireless Assistant
HPAsset component for HP Active Support Library
HPNetworkAssistant
HPPhotoSmartDiscLabelContent1
HPPhotosmartEssential
HPProductAssistant
HPSSupply
IHA_MessageCenter
Intel® Graphics Media Accelerator Driver
Invoke Solutions Participant 6.2.0.1452
Java Auto Updater
Java™ 6 Update 35
Java™ 6 Update 7
Kaspersky Anti-Virus 2012
LabelPrint
LightScribe System Software 1.14.17.1
Malwarebytes Anti-Malware version 1.65.0.1400
MarketResearch
Media Player Utilities 5.22
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Live Search Toolbar
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft Works
Microsoft WSE 3.0 Runtime
Mozilla Firefox 14.0.1 (x86 en-US)
Mozilla Maintenance Service
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
muvee Reveal
muvee Reveal Seagate Edition
My HP Games
NetWaiting
Norton Internet Security
OGA Notifier 2.0.0048.0
OpenOffice.org 3.2
Photodex Presenter
Power2Go
PowerDirector
PSSWCORE
Realtek 8169 8168 8101E 8102E Ethernet Driver
RegWork
Seagate Manager Installer
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2596786) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition
Shop for HP Supplies
SmartWebPrinting
SolutionCenter
SPORE Creature Creator Trial Edition
sprotector 1.62
Status
Synaptics Pointing Device Driver
System Requirements Lab
The Sims Medieval
The Sims™ 3
The Sims™ 3 Ambitions
The Sims™ 3 High-End Loft Stuff
The Sims™ 3 Late Night
The Sims™ 3 Outdoor Living Stuff
The Sims™ 3 World Adventures
Toolbox
TrayApp
Unity Web Player
UnloadSupport
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Verizon High Speed Internet
Verizon Yahoo! Applications
VideoToolkit01
WebReg
.
==== Event Viewer Messages From Past Week ========
.
9/17/2012 7:24:34 PM, Error: EventLog [6008] - The previous system shutdown at 8:29:44 PM on 9/16/2012 was unexpected.
9/15/2012 9:12:23 AM, Error: EventLog [6008] - The previous system shutdown at 11:54:53 AM on 9/13/2012 was unexpected.
.
==== End Of File ===========================

[Maniac]

Hello AFirebaugh and ! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

• If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  
• I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  
• Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  
• Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  
• Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.

Step 1

Anti-Virus programs take up an enormous amount of your computer's resources when they are actively scanning your computer. Having two anti-virus programs running at the same time can cause your computer to run very slow, become unstable and even, in rare cases, crash. You have: Norton Internet Security and Kaspersky Anti-Virus 2012. Both are paid products, so it is good idea to keep what you pay for and to uninstall the other one. Reboot your PC.


Step 2

• Launch Malwarebytes' Anti-Malware
  
• Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
  
• Go to Scanner tab and select Perform Quick Scan, then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy&Paste the entire report in your next reply.

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.


Step 3

Please download AdwCleaner from here and save it on your Desktop.

• Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
  
• Now click on the Search tab.
  
• Please post the contents of the log-file created in your next post.

Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <-- Denotes the number of times the application has been ran, so in this should be something like R1.


Step 4

Download aswMBR.exe to your desktop.

Double click the aswMBR.exe to run it

Click the "Scan" button to start scan


On completion of the scan click save log, save it to your desktop and post in your next reply



In your next reply, post the following log files:

• Malwarebytes' Anti-Malware log
  
• AdwCleaner log
  
• aswMBR log
  
• a new fresh DDS log

[AFirebaugh]

I will follow all the directions you just gave me....but first, I may sound really dumb, but I cannot find Norton Internet Security anywhere on my computer. I didn't even know I had it. How can I find it to uninstall it?

[AFirebaugh]

Malwarebytes Anti-Malware (Trial) 1.65.0.1400
www.malwarebytes.org

Database version: v2012.09.21.04

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
owner :: OWNER-PC [administrator]

Protection: Enabled

9/21/2012 7:54:16 AM
mbam-log-2012-09-21 (07-54-16).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 204843
Time elapsed: 7 minute(s), 40 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)


# AdwCleaner v2.002 - Logfile created 09/21/2012 at 08:03:46
# Updated 16/09/2012 by Xplode
# Operating system : Windows Vista ™ Home Premium Service Pack 2 (32 bits)
# User : owner - OWNER-PC
# Boot Mode : Normal
# Running from : C:\Users\owner\Documents\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\ProgramData\InstallMate
Folder Found : C:\ProgramData\Premium

***** [Registry] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : HKU\S-1-5-21-869652560-2776403528-2443925462-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v14.0.1 (en-US)

Profile name : default
File : C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\prefs.js

Found : user_pref("aol_toolbar.default.homepage.check", false);
Found : user_pref("aol_toolbar.default.search.check", false);
Found : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Found : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Found : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Found : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Found : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Found : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Found : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Found : user_pref("sweetim.toolbar.searchguard.enable", "");

*************************

AdwCleaner[R1].txt - [2142 octets] - [21/09/2012 08:03:46]

########## EOF - C:\AdwCleaner[R1].txt - [2202 octets] ##########


aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-09-21 08:07:57
-----------------------------
08:07:57.474 OS Version: Windows 6.0.6002 Service Pack 2
08:07:57.474 Number of processors: 1 586 0x170A
08:07:57.480 ComputerName: OWNER-PC UserName: owner
08:08:00.367 Initialize success
08:08:08.126 AVAST engine defs: 12092100
08:08:26.999 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
08:08:27.001 Disk 0 Vendor: ST9160827AS 3.AHC Size: 152627MB BusType: 3
08:08:27.032 Disk 0 MBR read successfully
08:08:27.035 Disk 0 MBR scan
08:08:27.078 Disk 0 unknown MBR code
08:08:27.090 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 141441 MB offset 2048
08:08:27.116 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 11182 MB offset 289673216
08:08:27.152 Disk 0 scanning sectors +312573952
08:08:27.336 Disk 0 scanning C:\Windows\system32\drivers
08:08:43.987 Service scanning
08:08:45.134 Service ACPI C:\Windows\system32\drivers\acpi.sys **LOCKED** 32
08:08:45.838 Service adp94xx C:\Windows\system32\drivers\adp94xx.sys **LOCKED** 32
08:08:46.301 Service adpahci C:\Windows\system32\drivers\adpahci.sys **LOCKED** 32
08:08:46.370 Service adpu160m C:\Windows\system32\drivers\adpu160m.sys **LOCKED** 32
08:08:46.415 Service adpu320 C:\Windows\system32\drivers\adpu320.sys **LOCKED** 32
08:08:46.550 Service AFD C:\Windows\system32\drivers\afd.sys **LOCKED** 32
08:08:46.639 Service agp440 C:\Windows\system32\drivers\agp440.sys **LOCKED** 32
08:08:46.680 Service aic78xx C:\Windows\system32\drivers\djsvs.sys **LOCKED** 32
08:08:46.753 Service aliide C:\Windows\system32\drivers\aliide.sys **LOCKED** 32
08:08:46.836 Service amdagp C:\Windows\system32\drivers\amdagp.sys **LOCKED** 32
08:08:46.888 Service amdide C:\Windows\system32\drivers\amdide.sys **LOCKED** 32
08:08:46.930 Service AmdK7 C:\Windows\system32\drivers\amdk7.sys **LOCKED** 32
08:08:46.965 Service AmdK8 C:\Windows\system32\drivers\amdk8.sys **LOCKED** 32
08:08:47.089 Service arc C:\Windows\system32\drivers\arc.sys **LOCKED** 32
08:08:47.127 Service arcsas C:\Windows\system32\drivers\arcsas.sys **LOCKED** 32
08:08:47.312 Service AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys **LOCKED** 32
08:08:47.360 Service atapi C:\Windows\system32\drivers\atapi.sys **LOCKED** 32
08:08:47.505 Service athr C:\Windows\system32\DRIVERS\athr.sys **LOCKED** 32
08:08:47.917 Service Beep C:\Windows\System32\Drivers\Beep.sys **LOCKED** 32
08:08:48.262 Service blbdrive C:\Windows\system32\drivers\blbdrive.sys **LOCKED** 32
08:08:48.403 Service BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys **LOCKED** 32
08:08:48.443 Service BrFiltUp C:\Windows\system32\drivers\brfiltup.sys **LOCKED** 32
08:08:48.578 Service Brserid C:\Windows\system32\drivers\brserid.sys **LOCKED** 32
08:08:48.622 Service BrSerWdm C:\Windows\system32\drivers\brserwdm.sys **LOCKED** 32
08:08:48.753 Service BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys **LOCKED** 32
08:08:48.807 Service BrUsbSer C:\Windows\system32\drivers\brusbser.sys **LOCKED** 32
08:08:48.878 Service BTHMODEM C:\Windows\system32\drivers\bthmodem.sys **LOCKED** 32
08:08:48.989 Service cdrom C:\Windows\system32\DRIVERS\cdrom.sys **LOCKED** 32
08:08:49.149 Service circlass C:\Windows\system32\drivers\circlass.sys **LOCKED** 32
08:08:49.255 Service CLFS C:\Windows\System32\CLFS.sys **LOCKED** 32
08:08:49.510 Service CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys **LOCKED** 32
08:08:49.552 Service cmdide C:\Windows\system32\drivers\cmdide.sys **LOCKED** 32
08:08:49.652 Service CnxtHdAudService C:\Windows\system32\drivers\CHDRT32.sys **LOCKED** 32
08:08:49.939 Service Compbatt C:\Windows\system32\DRIVERS\compbatt.sys **LOCKED** 32
08:08:50.006 Service crcdisk C:\Windows\system32\drivers\crcdisk.sys **LOCKED** 32
08:08:50.066 Service Crusoe C:\Windows\system32\drivers\crusoe.sys **LOCKED** 32
08:08:50.894 Service disk C:\Windows\system32\drivers\disk.sys **LOCKED** 32
08:08:51.239 Service drmkaud C:\Windows\system32\drivers\drmkaud.sys **LOCKED** 32
08:08:51.388 Service DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys **LOCKED** 32
08:08:51.493 Service E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys **LOCKED** 32
08:08:51.631 Service Ecache C:\Windows\System32\drivers\ecache.sys **LOCKED** 32
08:08:51.905 Service elxstor C:\Windows\system32\drivers\elxstor.sys **LOCKED** 32
08:08:52.063 Service ErrDev C:\Windows\system32\drivers\errdev.sys **LOCKED** 32
08:08:52.549 Service fdc C:\Windows\system32\DRIVERS\fdc.sys **LOCKED** 32
08:08:53.012 Service flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys **LOCKED** 32
08:08:53.993 Service gagp30kx C:\Windows\system32\drivers\gagp30kx.sys **LOCKED** 32
08:08:54.332 Service HdAudAddService C:\Windows\system32\drivers\HdAudio.sys **LOCKED** 32
08:08:54.433 Service HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys **LOCKED** 32
08:08:54.496 Service HidBth C:\Windows\system32\drivers\hidbth.sys **LOCKED** 32
08:08:54.532 Service HidIr C:\Windows\system32\drivers\hidir.sys **LOCKED** 32
08:08:54.676 Service HidUsb C:\Windows\system32\DRIVERS\hidusb.sys **LOCKED** 32
08:08:54.911 Service HpCISSs C:\Windows\system32\drivers\hpcisss.sys **LOCKED** 32
08:08:55.250 Service HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys **LOCKED** 32
08:08:55.772 Service HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys **LOCKED** 32
08:08:55.834 Service HSXHWAZL C:\Windows\system32\DRIVERS\HSXHWAZL.sys **LOCKED** 32
08:08:55.956 Service HTTP C:\Windows\system32\drivers\HTTP.sys **LOCKED** 32
08:08:55.993 Service i2omp C:\Windows\system32\drivers\i2omp.sys **LOCKED** 32
08:08:56.040 Service i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys **LOCKED** 32
08:08:56.099 Service iaStorV C:\Windows\system32\drivers\iastorv.sys **LOCKED** 32
08:08:58.107 Service igfx C:\Windows\system32\DRIVERS\igdkmd32.sys **LOCKED** 32
08:08:58.574 Service iirsp C:\Windows\system32\drivers\iirsp.sys **LOCKED** 32
08:08:58.859 Service IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys **LOCKED** 32
08:08:58.905 Service intelide C:\Windows\system32\drivers\intelide.sys **LOCKED** 32
08:08:58.953 Service intelppm C:\Windows\system32\DRIVERS\intelppm.sys **LOCKED** 32
08:08:59.030 Service IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys **LOCKED** 32
08:08:59.173 Service IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys **LOCKED** 32
08:08:59.281 Service IPNAT C:\Windows\system32\DRIVERS\ipnat.sys **LOCKED** 32
08:08:59.335 Service IRENUM C:\Windows\system32\drivers\irenum.sys **LOCKED** 32
08:08:59.420 Service isapnp C:\Windows\system32\drivers\isapnp.sys **LOCKED** 32
08:08:59.667 Service iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys **LOCKED** 32
08:08:59.726 Service iteatapi C:\Windows\system32\drivers\iteatapi.sys **LOCKED** 32
08:08:59.763 Service iteraid C:\Windows\system32\drivers\iteraid.sys **LOCKED** 32
08:08:59.800 Service kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys **LOCKED** 32
08:08:59.853 Service kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys **LOCKED** 32
08:08:59.992 Service kl1 C:\Windows\system32\DRIVERS\kl1.sys **LOCKED** 32
08:09:00.056 Service kl2 C:\Windows\system32\DRIVERS\kl2.sys **LOCKED** 32
08:09:00.252 Service KLIM6 C:\Windows\system32\DRIVERS\klim6.sys **LOCKED** 32
08:09:00.297 Service klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys **LOCKED** 32
08:09:00.365 Service KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys **LOCKED** 32
08:09:00.451 Service KSecDD C:\Windows\System32\Drivers\ksecdd.sys **LOCKED** 32
08:09:00.851 Service lltdio C:\Windows\system32\DRIVERS\lltdio.sys **LOCKED** 32
08:09:01.006 Service LSI_FC C:\Windows\system32\drivers\lsi_fc.sys **LOCKED** 32
08:09:01.042 Service LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys **LOCKED** 32
08:09:01.079 Service LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys **LOCKED** 32
08:09:01.583 Service mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys **LOCKED** 32
08:09:01.628 Service megasas C:\Windows\system32\drivers\megasas.sys **LOCKED** 32
08:09:01.688 Service MegaSR C:\Windows\system32\drivers\megasr.sys **LOCKED** 32
08:09:01.780 Service Modem C:\Windows\system32\drivers\modem.sys **LOCKED** 32
08:09:01.817 Service monitor C:\Windows\system32\DRIVERS\monitor.sys **LOCKED** 32
08:09:01.876 Service mouclass C:\Windows\system32\DRIVERS\mouclass.sys **LOCKED** 32
08:09:01.927 Service mouhid C:\Windows\system32\DRIVERS\mouhid.sys **LOCKED** 32
08:09:01.975 Service MountMgr C:\Windows\System32\drivers\mountmgr.sys **LOCKED** 32
08:09:02.161 Service mpio C:\Windows\system32\drivers\mpio.sys **LOCKED** 32
08:09:02.200 Service mpsdrv C:\Windows\System32\drivers\mpsdrv.sys **LOCKED** 32
08:09:02.364 Service Mraid35x C:\Windows\system32\drivers\mraid35x.sys **LOCKED** 32
08:09:02.612 Service msahci C:\Windows\system32\drivers\msahci.sys **LOCKED** 32
08:09:02.671 Service msdsm C:\Windows\system32\drivers\msdsm.sys **LOCKED** 32
08:09:02.792 Service msisadrv C:\Windows\system32\drivers\msisadrv.sys **LOCKED** 32
08:09:03.063 Service MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys **LOCKED** 32
08:09:03.159 Service MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys **LOCKED** 32
08:09:03.197 Service MSPQM C:\Windows\system32\drivers\MSPQM.sys **LOCKED** 32
08:09:03.261 Service MsRPC C:\Windows\System32\Drivers\MsRPC.sys **LOCKED** 32
08:09:03.330 Service mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys **LOCKED** 32
08:09:03.429 Service MSTEE C:\Windows\system32\drivers\MSTEE.sys **LOCKED** 32
08:09:03.664 Service NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys **LOCKED** 32
08:09:03.746 Service NDIS C:\Windows\system32\drivers\ndis.sys **LOCKED** 32
08:09:03.794 Service NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys **LOCKED** 32
08:09:03.939 Service Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys **LOCKED** 32
08:09:04.061 Service NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys **LOCKED** 32
08:09:04.135 Service NDProxy C:\Windows\System32\Drivers\NDProxy.sys **LOCKED** 32
08:09:04.247 Service netbt C:\Windows\System32\DRIVERS\netbt.sys **LOCKED** 32
08:09:05.163 Service NETw3v32 C:\Windows\system32\DRIVERS\NETw3v32.sys **LOCKED** 32
08:09:05.268 Service nfrd960 C:\Windows\system32\drivers\nfrd960.sys **LOCKED** 32
08:09:05.579 Service nsiproxy C:\Windows\system32\drivers\nsiproxy.sys **LOCKED** 32
08:09:05.906 Service ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys **LOCKED** 32
08:09:05.947 Service Null C:\Windows\System32\Drivers\Null.sys **LOCKED** 32
08:09:06.014 Service nvraid C:\Windows\system32\drivers\nvraid.sys **LOCKED** 32
08:09:06.048 Service nvstor C:\Windows\system32\drivers\nvstor.sys **LOCKED** 32
08:09:06.091 Service nv_agp C:\Windows\system32\drivers\nv_agp.sys **LOCKED** 32
08:09:06.368 Service ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys **LOCKED** 32
08:09:06.769 Service Parport C:\Windows\system32\drivers\parport.sys **LOCKED** 32
08:09:06.834 Service partmgr C:\Windows\System32\drivers\partmgr.sys **LOCKED** 32
08:09:06.940 Service Parvdm C:\Windows\system32\drivers\parvdm.sys **LOCKED** 32
08:09:07.174 Service pci C:\Windows\system32\drivers\pci.sys **LOCKED** 32
08:09:07.223 Service pciide C:\Windows\system32\drivers\pciide.sys **LOCKED** 32
08:09:07.304 Service pcmcia C:\Windows\system32\drivers\pcmcia.sys **LOCKED** 32
08:09:07.449 Service PEAUTH C:\Windows\system32\drivers\peauth.sys **LOCKED** 32
08:09:08.332 Service PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys **LOCKED** 32
08:09:08.395 Service Processor C:\Windows\system32\drivers\processr.sys **LOCKED** 32
08:09:08.610 Service PSched C:\Windows\system32\DRIVERS\pacer.sys **LOCKED** 32
08:09:08.679 Service PxHelp20 C:\Windows\System32\Drivers\PxHelp20.sys **LOCKED** 32
08:09:08.987 Service ql2300 C:\Windows\system32\drivers\ql2300.sys **LOCKED** 32
08:09:09.046 Service ql40xx C:\Windows\system32\drivers\ql40xx.sys **LOCKED** 32
08:09:09.241 Service QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys **LOCKED** 32
08:09:09.298 Service RasAcd C:\Windows\System32\DRIVERS\rasacd.sys **LOCKED** 32
08:09:09.517 Service Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys **LOCKED** 32
08:09:09.656 Service RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys **LOCKED** 32
08:09:09.700 Service RasSstp C:\Windows\system32\DRIVERS\rassstp.sys **LOCKED** 32
08:09:09.828 Service RDPCDD C:\Windows\System32\DRIVERS\RDPCDD.sys **LOCKED** 32
08:09:09.892 Service rdpdr C:\Windows\system32\drivers\rdpdr.sys **LOCKED** 32
08:09:09.918 Service RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys **LOCKED** 32
08:09:09.995 Service RDPWD C:\Windows\System32\Drivers\RDPWD.sys **LOCKED** 32
08:09:10.734 Service rspndr C:\Windows\system32\DRIVERS\rspndr.sys **LOCKED** 32
08:09:10.804 Service RTL8169 C:\Windows\system32\DRIVERS\Rtlh86.sys **LOCKED** 32
08:09:10.961 Service sbp2port C:\Windows\system32\drivers\sbp2port.sys **LOCKED** 32
08:09:11.253 Service sdbus C:\Windows\system32\DRIVERS\sdbus.sys **LOCKED** 32
08:09:11.371 Service secdrv C:\Windows\System32\Drivers\secdrv.sys **LOCKED** 32
08:09:11.488 Service Serenum C:\Windows\system32\drivers\serenum.sys **LOCKED** 32
08:09:11.573 Service Serial C:\Windows\system32\drivers\serial.sys **LOCKED** 32
08:09:11.676 Service sermouse C:\Windows\system32\drivers\sermouse.sys **LOCKED** 32
08:09:11.820 Service sffdisk C:\Windows\system32\drivers\sffdisk.sys **LOCKED** 32
08:09:11.876 Service sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys **LOCKED** 32
08:09:11.931 Service sffp_sd C:\Windows\system32\drivers\sffp_sd.sys **LOCKED** 32
08:09:11.970 Service sfloppy C:\Windows\system32\drivers\sfloppy.sys **LOCKED** 32
08:09:12.241 Service sisagp C:\Windows\system32\drivers\sisagp.sys **LOCKED** 32
08:09:12.288 Service SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys **LOCKED** 32
08:09:12.395 Service SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys **LOCKED** 32
08:09:13.142 Service Smb C:\Windows\system32\DRIVERS\smb.sys **LOCKED** 32
08:09:13.244 Service spldr C:\Windows\System32\Drivers\spldr.sys **LOCKED** 32
08:09:13.902 Service swenum C:\Windows\system32\DRIVERS\swenum.sys **LOCKED** 32
08:09:14.037 Service Symc8xx C:\Windows\system32\drivers\symc8xx.sys **LOCKED** 32
08:09:14.136 Service Sym_hi C:\Windows\system32\drivers\sym_hi.sys **LOCKED** 32
08:09:14.187 Service Sym_u3 C:\Windows\system32\drivers\sym_u3.sys **LOCKED** 32
08:09:14.249 Service SynTP C:\Windows\system32\DRIVERS\SynTP.sys **LOCKED** 32
08:09:14.898 Service Tcpip C:\Windows\System32\drivers\tcpip.sys **LOCKED** 32
08:09:15.030 Service Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys **LOCKED** 32
08:09:15.123 Service tcpipreg C:\Windows\System32\drivers\tcpipreg.sys **LOCKED** 32
08:09:15.179 Service TDPIPE C:\Windows\system32\drivers\tdpipe.sys **LOCKED** 32
08:09:15.311 Service TDTCP C:\Windows\system32\drivers\tdtcp.sys **LOCKED** 32
08:09:15.400 Service tdx C:\Windows\system32\DRIVERS\tdx.sys **LOCKED** 32
08:09:15.460 Service TermDD C:\Windows\system32\DRIVERS\termdd.sys **LOCKED** 32
08:09:15.976 Service tssecsrv C:\Windows\System32\DRIVERS\tssecsrv.sys **LOCKED** 32
08:09:16.034 Service tunmp C:\Windows\system32\DRIVERS\tunmp.sys **LOCKED** 32
08:09:16.101 Service tunnel C:\Windows\system32\DRIVERS\tunnel.sys **LOCKED** 32
08:09:16.161 Service uagp35 C:\Windows\system32\drivers\uagp35.sys **LOCKED** 32
08:09:16.372 Service uliagpkx C:\Windows\system32\drivers\uliagpkx.sys **LOCKED** 32
08:09:16.445 Service uliahci C:\Windows\system32\drivers\uliahci.sys **LOCKED** 32
08:09:16.510 Service UlSata C:\Windows\system32\drivers\ulsata.sys **LOCKED** 32
08:09:16.547 Service ulsata2 C:\Windows\system32\drivers\ulsata2.sys **LOCKED** 32
08:09:16.633 Service umbus C:\Windows\system32\DRIVERS\umbus.sys **LOCKED** 32
08:09:16.813 Service usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys **LOCKED** 32
08:09:16.890 Service usbcir C:\Windows\system32\drivers\usbcir.sys **LOCKED** 32
08:09:16.931 Service usbehci C:\Windows\system32\DRIVERS\usbehci.sys **LOCKED** 32
08:09:16.981 Service usbhub C:\Windows\system32\DRIVERS\usbhub.sys **LOCKED** 32
08:09:17.043 Service usbohci C:\Windows\system32\drivers\usbohci.sys **LOCKED** 32
08:09:17.109 Service usbprint C:\Windows\system32\DRIVERS\usbprint.sys **LOCKED** 32
08:09:17.186 Service usbscan C:\Windows\system32\DRIVERS\usbscan.sys **LOCKED** 32
08:09:17.299 Service USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS **LOCKED** 32
08:09:17.356 Service usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys **LOCKED** 32
08:09:17.551 Service vga C:\Windows\system32\DRIVERS\vgapnp.sys **LOCKED** 32
08:09:17.685 Service VgaSave C:\Windows\System32\drivers\vga.sys **LOCKED** 32
08:09:17.766 Service viaagp C:\Windows\system32\drivers\viaagp.sys **LOCKED** 32
08:09:17.850 Service ViaC7 C:\Windows\system32\drivers\viac7.sys **LOCKED** 32
08:09:17.899 Service viaide C:\Windows\system32\drivers\viaide.sys **LOCKED** 32
08:09:17.939 Service volmgr C:\Windows\system32\drivers\volmgr.sys **LOCKED** 32
08:09:18.052 Service volmgrx C:\Windows\System32\drivers\volmgrx.sys **LOCKED** 32
08:09:18.101 Service volsnap C:\Windows\system32\drivers\volsnap.sys **LOCKED** 32
08:09:18.171 Service vsmraid C:\Windows\system32\drivers\vsmraid.sys **LOCKED** 32
08:09:18.428 Service WacomPen C:\Windows\system32\drivers\wacompen.sys **LOCKED** 32
08:09:18.470 Service Wanarp C:\Windows\system32\DRIVERS\wanarp.sys **LOCKED** 32
08:09:18.542 Service Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys **LOCKED** 32
08:09:18.754 Service Wd C:\Windows\system32\drivers\wd.sys **LOCKED** 32
08:09:18.832 Service Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys **LOCKED** 32
08:09:19.697 Service winachsf C:\Windows\system32\DRIVERS\HSX_CNXT.sys **LOCKED** 32
08:09:20.514 Service WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys **LOCKED** 32
08:09:21.208 Service WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys **LOCKED** 32
08:09:21.610 Service ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys **LOCKED** 32
08:09:22.138 Service XAudio C:\Windows\system32\DRIVERS\xaudio.sys **LOCKED** 32
08:09:22.294 Service yukonwlh C:\Windows\system32\DRIVERS\yk60x86.sys **LOCKED** 32
08:09:22.809 Modules scanning
08:09:33.744 Disk 0 trace - called modules:
08:09:33.777 ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS hal.dll PCIIDEX.SYS msahci.sys
08:09:33.782 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x876ddac8]
08:09:33.791 3 CLASSPNP.SYS[8074b8b3] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x86e874f8]
08:09:37.829 AVAST engine scan C:\Windows
08:09:41.647 AVAST engine scan C:\Windows\system32
08:15:08.180 AVAST engine scan C:\Windows\system32\drivers
08:15:26.901 AVAST engine scan C:\Users\owner
08:17:52.947 Disk 0 MBR has been saved successfully to "C:\Users\owner\Documents\MBR.dat"
08:17:52.968 The log file has been saved successfully to "C:\Users\owner\Documents\aswMBR.txt"


.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_35
Run by owner at 8:27:18 on 2012-09-21
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1719 [GMT -4:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\SMINST\BLService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtblfs.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb
mStart Page = hxxp://news.searchonme.com/
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb
BHO: MRI_DISABLED - No File
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Canon Easy-WebPrint EX BHO: {3785d0ad-bfff-47f6-bf5b-a587c162fed9} - c:\program files\canon\easy-webprint ex\ewpexbho.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Microsoft Live Search Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll
TB: Canon Easy-WebPrint EX: {759d9886-0c6f-4498-bab6-4a5f47c6c72f} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll
TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
EB: Canon Easy-WebPrint EX: {21347690-ec41-4f9a-8887-1f4aee672439} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [PhotoshopElements8SyncAgent] c:\program files\adobe\elements organizer 8.0\ElementsOrganizerSyncAgent.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe"
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [<NO NAME>]
mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon
mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [CarboniteSetupLite] "c:\program files\carbonite\CarbonitePreinstaller.exe" /preinstalled /showonfirst /reshowat=900
mRun: [MaxMenuMgr] "c:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe"
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
StartupFolder: c:\users\owner\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Video Converter... - c:\program files\media player utilities 5.22\aviconverter\grab.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemydsl.verizon.net/sdcCommon/download/DSL/Verizon%20High%20Speed%20Internet%20Installer.cab
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab
DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} - hxxp://www.photodex.com/pxplay.cab
DPF: {D8AA889B-2C65-47C3-8C16-3DCD4EF76A47}
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{5BFE09BE-457F-46D2-8C44-E2109BE37AEF} : DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{CA1C5711-860D-4A79-B755-7CB579CEDBEA} : DhcpNameServer = 68.87.64.230 68.87.66.234
Notify: igfxcui - igfxdev.dll
Notify: klogon - c:\windows\system32\klogon.dll
AppInit_DLLs: c:\progra~1\sprote~1\sprote~1.dll
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\owner\appdata\roaming\mozilla\firefox\profiles\ehpubqd6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/
FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\program files\canon\easy-photoprint ex\NPEZFFPI.DLL
FF - plugin: c:\program files\canon\mycamera download plugin\NPCIG.dll
FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll
FF - plugin: c:\users\owner\appdata\locallow\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\users\owner\appdata\roaming\mozilla\plugins\npPxPlay.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_278.dll
FF - plugin: c:\windows\system32\npdeployJava1.dll
FF - plugin: c:\windows\system32\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2011-3-10 23856]
R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\adobe\elements organizer 8.0\PhotoshopElementsFileAgent.exe [2009-9-6 169312]
R2 AVP;Kaspersky Anti-Virus Service;c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r --> c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r [?]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2009-12-18 189736]
R2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\verizon\iha_messagecenter\bin\Verizon_IHAMessageCenter.exe [2011-12-12 290832]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-9-21 399432]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-9-21 676936]
R2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\sminst\BLService.exe [2009-4-22 365952]
R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-6-29 112128]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-9-21 22856]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-5-25 250288]
S3 Com4QLBEx;Com4QLBEx;c:\program files\hewlett-packard\hp quick launch buttons\Com4QLBEx.exe [2009-4-22 193840]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-6-7 113120]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2012-09-21 06:35:34 -------- d-----w- c:\users\owner\appdata\roaming\Malwarebytes
2012-09-21 06:35:13 -------- d-----w- c:\programdata\Malwarebytes
2012-09-21 06:35:09 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-21 06:35:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-09-21 06:33:35 477168 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-09-21 05:59:35 6980552 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{a7b63c3d-ac3c-41c9-8c97-6c53ae632628}\mpengine.dll
2012-09-19 23:08:26 -------- d-----w- c:\programdata\Premium
2012-09-19 23:07:37 -------- d-----w- c:\program files\SProtector
2012-09-19 23:06:36 -------- d-----w- c:\programdata\InstallMate
.
==================== Find3M ====================
.
2012-09-21 06:32:44 473072 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-20 20:59:24 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-20 20:59:24 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-04 14:02:46 2047488 ----a-w- c:\windows\system32\win32k.sys
2012-06-29 00:16:58 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-06-29 00:09:01 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-06-29 00:08:59 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-06-29 00:04:43 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-06-29 00:00:45 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-06-28 19:39:17 260 ----a-w- c:\windows\system32\cmdVBS.vbs
2012-06-28 19:39:17 256 ----a-w- c:\windows\system32\MSIevent.bat
.
============= FINISH: 8:28:23.79 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 5/16/2009 5:05:14 PM
System Uptime: 9/21/2012 7:18:41 AM (1 hours ago)
.
Motherboard: Wistron | | 3612
Processor: Intel® Celeron® CPU 900 @ 2.20GHz | CPU | 2194/800mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 138 GiB total, 28.525 GiB free.
D: is FIXED (NTFS) - 11 GiB total, 1.831 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
.
Update for Microsoft Office 2007 (KB2508958)
Acrobat.com
ActiveCheck component for HP Active Support Library
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Photoshop Elements 8.0
Adobe Photoshop.com Inspiration Browser
Adobe Reader 9.4.0
Adobe Shockwave Player
Amazon MP3 Downloader 1.0.12
Atheros Driver Installation Program
Barnes & Noble Desktop Reader
BufferChm
Canon Easy-WebPrint EX
CANON iMAGE GATEWAY MyCamera Download Plugin
CANON iMAGE GATEWAY Task for ZoomBrowser EX
Canon Inkjet Printer/Scanner/Fax Extended Survey Program
Canon MOV Decoder
Canon MOV Encoder
Canon MovieEdit Task for ZoomBrowser EX
Canon MP Navigator EX 3.0
Canon MP250 series MP Drivers
Canon MP250 series User Registration
Canon Utilities Digital Photo Professional 3.10
Canon Utilities Easy-PhotoPrint EX
Canon Utilities EOS Sample Music
Canon Utilities EOS Utility
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX
Canon Utilities Movie Uploader for YouTube
Canon Utilities My Printer
Canon Utilities PhotoStitch
Canon Utilities Picture Style Editor
Canon Utilities Solution Menu
Canon Utilities ZoomBrowser EX
Canon ZoomBrowser EX Memory Card Utility
Carbonite Online Backup Setup
Compatibility Pack for the 2007 Office system
Conexant HD Audio
Coupon Printer for Windows
CustomerResearchQFolder
CyberLink DVD Suite
D1500
D1500_Help
DeviceDiscovery
DeviceManagementQFolder
DJ_SF_03_D1500_ProductContext
DJ_SF_03_D1500_Software
DJ_SF_03_D1500_Software_Min
EA Download Manager
ESU for Microsoft Vista
eSupportQFolder
GPBaseService
HDAUDIO Soft Data Fax Modem with SmartCP
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Active Support Library
HP Customer Experience Enhancements
HP Customer Participation Program 10.0
HP Deskjet D1500 Printer Driver Software 10.0 Rel .3
HP Doc Viewer
HP DVD Play 3.7
HP Help and Support
HP Imaging Device Functions 10.0
HP Photosmart Essential 3.5
HP Quick Launch Buttons 6.40 H2
HP Smart Web Printing 4.60
HP Solution Center 10.0
HP Update
HP User Guides 0118
HP Wireless Assistant
HPAsset component for HP Active Support Library
HPNetworkAssistant
HPPhotoSmartDiscLabelContent1
HPPhotosmartEssential
HPProductAssistant
HPSSupply
IHA_MessageCenter
Intel® Graphics Media Accelerator Driver
Invoke Solutions Participant 6.2.0.1452
Java Auto Updater
Java™ 6 Update 35
Java™ 6 Update 7
Kaspersky Anti-Virus 2012
LabelPrint
LightScribe System Software 1.14.17.1
Malwarebytes Anti-Malware version 1.65.0.1400
MarketResearch
Media Player Utilities 5.22
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Live Search Toolbar
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Microsoft Works
Microsoft WSE 3.0 Runtime
Mozilla Firefox 14.0.1 (x86 en-US)
Mozilla Maintenance Service
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
muvee Reveal
muvee Reveal Seagate Edition
My HP Games
NetWaiting
OGA Notifier 2.0.0048.0
OpenOffice.org 3.2
Photodex Presenter
Power2Go
PowerDirector
PSSWCORE
Realtek 8169 8168 8101E 8102E Ethernet Driver
RegWork
Seagate Manager Installer
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2596786) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition
Shop for HP Supplies
SmartWebPrinting
SolutionCenter
SPORE Creature Creator Trial Edition
sprotector 1.62
Status
Synaptics Pointing Device Driver
System Requirements Lab
The Sims Medieval
The Sims™ 3
The Sims™ 3 Ambitions
The Sims™ 3 High-End Loft Stuff
The Sims™ 3 Late Night
The Sims™ 3 Outdoor Living Stuff
The Sims™ 3 World Adventures
Toolbox
TrayApp
Unity Web Player
UnloadSupport
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
VideoToolkit01
WebReg
.
==== Event Viewer Messages From Past Week ========
.
9/17/2012 7:24:34 PM, Error: EventLog [6008] - The previous system shutdown at 8:29:44 PM on 9/16/2012 was unexpected.
9/15/2012 9:12:23 AM, Error: EventLog [6008] - The previous system shutdown at 11:54:53 AM on 9/13/2012 was unexpected.
.
==== End Of File ===========================

[Maniac]

Step 1

• Please re-run AdwCleaner
  
• Click on Delete button.
  
• Confirm each time with OK.
  
• Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.

Note: You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.


Step 2

Note: Please do not run this tool without special supervision and instruction of someone authorized to do so. Otherwise, you could end up with serious problems. For more details, read this article: ComboFix usage, Questions, Help? - Look here

Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingc...to-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please post the C:\ComboFix.txt in your next reply for further review.

Note: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.


In your next reply, post the following log files:

• AdwCleaner log
  
• ComboFix log

[AFirebaugh]

# AdwCleaner v2.002 - Logfile created 09/21/2012 at 12:44:23
# Updated 16/09/2012 by Xplode
# Operating system : Windows Vista ™ Home Premium Service Pack 2 (32 bits)
# User : owner - OWNER-PC
# Boot Mode : Normal
# Running from : C:\Users\owner\Documents\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\ProgramData\InstallMate
Folder Deleted : C:\ProgramData\Premium

***** [Registry] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

Restored : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

-\\ Mozilla Firefox v14.0.1 (en-US)

Profile name : default
File : C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\prefs.js

Deleted : user_pref("aol_toolbar.default.homepage.check", false);
Deleted : user_pref("aol_toolbar.default.search.check", false);
Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Deleted : user_pref("sweetim.toolbar.searchguard.enable", "");

*************************

AdwCleaner[R1].txt - [2271 octets] - [21/09/2012 08:03:46]
AdwCleaner[R2].txt - [2331 octets] - [21/09/2012 12:44:00]
AdwCleaner[S1].txt - [2565 octets] - [21/09/2012 12:44:23]

########## EOF - C:\AdwCleaner[S1].txt - [2625 octets] ##########

ComboFix 12-09-20.03 - owner 09/21/2012 13:11:39.1.1 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1701 [GMT -4:00]
Running from: c:\users\owner\Documents\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\owner\GoToAssistDownloadHelper.exe
c:\windows\security\Database\tmp.edb
.
.
((((((((((((((((((((((((( Files Created from 2012-08-21 to 2012-09-21 )))))))))))))))))))))))))))))))
.
.
2012-09-21 17:24 . 2012-09-21 17:24 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\users\owner\AppData\Roaming\Malwarebytes
2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\programdata\Malwarebytes
2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-09-21 06:35 . 2012-09-07 21:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-21 06:33 . 2012-09-21 06:32 477168 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-09-21 05:59 . 2012-08-30 08:17 6980552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A7B63C3D-AC3C-41C9-8C97-6C53AE632628}\mpengine.dll
2012-09-19 23:07 . 2012-09-19 23:07 -------- d-----w- c:\program files\SProtector
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-21 06:32 . 2010-04-26 02:17 473072 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-20 20:59 . 2012-05-25 20:23 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-20 20:59 . 2012-05-25 20:23 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-04 14:02 . 2012-08-15 07:04 2047488 ----a-w- c:\windows\system32\win32k.sys
2012-06-29 00:16 . 2012-08-15 07:04 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-06-29 00:09 . 2012-08-15 07:04 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-06-29 00:08 . 2012-08-15 07:04 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-06-29 00:04 . 2012-08-15 07:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-06-29 00:00 . 2012-08-15 07:04 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-06-28 19:39 . 2012-06-28 19:39 260 ----a-w- c:\windows\system32\cmdVBS.vbs
2012-06-28 19:39 . 2012-06-28 19:39 256 ----a-w- c:\windows\system32\MSIevent.bat
2012-07-18 18:41 . 2012-06-07 20:54 136672 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"PhotoshopElements8SyncAgent"="c:\program files\Adobe\Elements Organizer 8.0\ElementsOrganizerSyncAgent.exe" [2009-09-06 1893728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-09-24 468264]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-15 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-27 1983816]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-26 136216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-26 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-26 170520]
"CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096]
"MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-12-18 197928]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-25 202296]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 08:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]
2008-10-09 14:58 75008 ----a-w- c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-10-15 01:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]
2008-04-15 21:51 488752 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]
2008-08-01 23:14 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDIRShortCut]
2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut]
2008-10-07 03:42 210216 ------w- c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2012-09-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-25 20:59]
.
2012-09-03 c:\windows\Tasks\HPCeeScheduleForowner.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2009-04-22 18:34]
.
2010-03-04 c:\windows\Tasks\Regwork.job
- c:\program files\RegWork\RegWork.exe [2010-03-01 21:37]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://news.searchonme.com/
IE: Add to Video Converter... - c:\program files\Media Player Utilities 5.22\AVIConverter\grab.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab
DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab
FF - ProfilePath - c:\users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/
FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-09-21 13:24
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-869652560-2776403528-2443925462-1000\Software\SecuROM\License information*]
"datasecu"=hex:a1,e8,07,07,42,7d,16,6e,08,4c,d6,46,6b,bd,28,29,db,34,33,b5,52,
74,2a,b3,ce,9b,c4,a0,1d,a2,d8,81,91,c3,21,56,0f,60,c5,e0,f5,03,af,4b,0a,bc,\
"rkeysecu"=hex:db,05,85,fc,e0,c8,04,65,36,51,08,bd,3e,4e,15,cd
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2012-09-21 13:26:52
ComboFix-quarantined-files.txt 2012-09-21 17:26
.
Pre-Run: 31,253,110,784 bytes free
Post-Run: 34,124,558,336 bytes free
.
- - End Of File - - 0E4832103C3D2B601C861DB780BB707E

[Maniac]

Is your problem fixed? If not, is your problem: searchonme.com ?

[AFirebaugh]

Maniac, on 22 September 2012 - 07:10 AM, said:

Is your problem fixed? If not, is your problem: searchonme.com ?

No, not fixed yet. And yes the searchonme.com is my problem.

[Maniac]

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

DDS::
mStart Page = hxxp://news.searchonme.com/

FireFox::
FF - ProfilePath - c:\users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/
FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: network.proxy.type - 0

Save this as CFScript.txt, in the same location as ComboFix.exe



Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

[AFirebaugh]

Maniac, on 22 September 2012 - 12:01 PM, said:

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

DDS::
mStart Page = hxxp://news.searchonme.com/

FireFox::
FF - ProfilePath - c:\users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/
FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: network.proxy.type - 0

Save this as CFScript.txt, in the same location as ComboFix.exe



Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

I followed your directions however, I am not able to post the log because FireFox and IE now will not open at all. It says illegal operation attempted on a registry key that has been marked for deletion. I cannot get to a web browser from my laptop, I am mobile right now. What should I do?

[AFirebaugh]

nevermind, I went back and read through your replies and saw that this message can occur and to reboot. doing that now.

[AFirebaugh]

ComboFix 12-09-23.03 - owner 09/23/2012 20:31:43.2.1 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1677 [GMT -4:00]
Running from: c:\users\owner\Desktop\ComboFix.exe
Command switches used :: c:\users\owner\Desktop\CFScript.txt.lnk
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-08-24 to 2012-09-24 )))))))))))))))))))))))))))))))
.
.
2012-09-24 00:44 . 2012-09-24 00:44 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-21 21:34 . 2012-09-21 21:34 73696 ----a-w- c:\program files\Mozilla Firefox\breakpadinjector.dll
2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\users\owner\AppData\Roaming\Malwarebytes
2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\programdata\Malwarebytes
2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-09-21 06:35 . 2012-09-07 21:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-21 06:33 . 2012-09-21 06:32 477168 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-09-21 05:59 . 2012-08-30 08:17 6980552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A7B63C3D-AC3C-41C9-8C97-6C53AE632628}\mpengine.dll
2012-09-19 23:07 . 2012-09-19 23:07 -------- d-----w- c:\program files\SProtector
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-21 06:32 . 2010-04-26 02:17 473072 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-20 20:59 . 2012-05-25 20:23 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-20 20:59 . 2012-05-25 20:23 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-04 14:02 . 2012-08-15 07:04 2047488 ----a-w- c:\windows\system32\win32k.sys
2012-06-29 00:16 . 2012-08-15 07:04 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-06-29 00:09 . 2012-08-15 07:04 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-06-29 00:08 . 2012-08-15 07:04 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-06-29 00:04 . 2012-08-15 07:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-06-29 00:00 . 2012-08-15 07:04 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-06-28 19:39 . 2012-06-28 19:39 260 ----a-w- c:\windows\system32\cmdVBS.vbs
2012-06-28 19:39 . 2012-06-28 19:39 256 ----a-w- c:\windows\system32\MSIevent.bat
2012-09-21 21:34 . 2012-06-07 20:54 266720 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"PhotoshopElements8SyncAgent"="c:\program files\Adobe\Elements Organizer 8.0\ElementsOrganizerSyncAgent.exe" [2009-09-06 1893728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-09-24 468264]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-15 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-27 1983816]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-26 136216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-26 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-26 170520]
"CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096]
"MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-12-18 197928]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-25 202296]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 08:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]
2008-10-09 14:58 75008 ----a-w- c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-10-15 01:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]
2008-04-15 21:51 488752 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]
2008-08-01 23:14 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDIRShortCut]
2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut]
2008-10-07 03:42 210216 ------w- c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2012-09-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-25 20:59]
.
2012-09-03 c:\windows\Tasks\HPCeeScheduleForowner.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2009-04-22 18:34]
.
2010-03-04 c:\windows\Tasks\Regwork.job
- c:\program files\RegWork\RegWork.exe [2010-03-01 21:37]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://news.searchonme.com/
IE: Add to Video Converter... - c:\program files\Media Player Utilities 5.22\AVIConverter\grab.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab
DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab
FF - ProfilePath - c:\users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/
FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q=
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-09-23 20:44
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-869652560-2776403528-2443925462-1000\Software\SecuROM\License information*]
"datasecu"=hex:a1,e8,07,07,42,7d,16,6e,08,4c,d6,46,6b,bd,28,29,db,34,33,b5,52,
74,2a,b3,ce,9b,c4,a0,1d,a2,d8,81,91,c3,21,56,0f,60,c5,e0,f5,03,af,4b,0a,bc,\
"rkeysecu"=hex:db,05,85,fc,e0,c8,04,65,36,51,08,bd,3e,4e,15,cd
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2012-09-23 20:47:01
ComboFix-quarantined-files.txt 2012-09-24 00:46
ComboFix2.txt 2012-09-21 17:26
.
Pre-Run: 33,770,848,256 bytes free
Post-Run: 33,385,033,728 bytes free
.
- - End Of File - - 7F44A0DF09EB96F4300B56E1E6306B95

[Maniac]

The script was not activated:

Quote

Command switches used :: c:\users\owner\Desktop\CFScript.txt.lnk

You should create CFScript.txt, not CFScript.txt.lnk. Please try again.

[AFirebaugh]

Maniac, on 24 September 2012 - 02:54 AM, said:

The script was not activated:



You should create CFScript.txt, not CFScript.txt.lnk. Please try again.

I hope I did it correctly this time. When I opened up Firefox it came up with the Firefox home screen so hopefully I'm doing this right!


ComboFix 12-09-24.03 - owner 09/25/2012 14:57:37.3.1 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1824 [GMT -4:00]
Running from: c:\users\owner\Desktop\ComboFix.exe
Command switches used :: c:\users\owner\Desktop\CFScript.txt
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-08-25 to 2012-09-25 )))))))))))))))))))))))))))))))
.
.
2012-09-25 19:08 . 2012-09-25 19:08 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-21 21:34 . 2012-09-21 21:34 73696 ----a-w- c:\program files\Mozilla Firefox\breakpadinjector.dll
2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\users\owner\AppData\Roaming\Malwarebytes
2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\programdata\Malwarebytes
2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-09-21 06:35 . 2012-09-07 21:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-21 06:33 . 2012-09-21 06:32 477168 ----a-w- c:\windows\system32\npdeployJava1.dll
2012-09-21 05:59 . 2012-08-30 08:17 6980552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A7B63C3D-AC3C-41C9-8C97-6C53AE632628}\mpengine.dll
2012-09-19 23:07 . 2012-09-19 23:07 -------- d-----w- c:\program files\SProtector
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-21 06:32 . 2010-04-26 02:17 473072 ----a-w- c:\windows\system32\deployJava1.dll
2012-09-20 20:59 . 2012-05-25 20:23 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-20 20:59 . 2012-05-25 20:23 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-04 14:02 . 2012-08-15 07:04 2047488 ----a-w- c:\windows\system32\win32k.sys
2012-06-29 00:16 . 2012-08-15 07:04 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-06-29 00:09 . 2012-08-15 07:04 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-06-29 00:08 . 2012-08-15 07:04 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-06-29 00:04 . 2012-08-15 07:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-06-29 00:00 . 2012-08-15 07:04 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-06-28 19:39 . 2012-06-28 19:39 260 ----a-w- c:\windows\system32\cmdVBS.vbs
2012-06-28 19:39 . 2012-06-28 19:39 256 ----a-w- c:\windows\system32\MSIevent.bat
2012-09-21 21:34 . 2012-06-07 20:54 266720 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"PhotoshopElements8SyncAgent"="c:\program files\Adobe\Elements Organizer 8.0\ElementsOrganizerSyncAgent.exe" [2009-09-06 1893728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-09-24 468264]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-15 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-27 1983816]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-26 136216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-26 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-26 170520]
"CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096]
"MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-12-18 197928]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-25 202296]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 08:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]
2008-10-09 14:58 75008 ----a-w- c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-10-15 01:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]
2008-04-15 21:51 488752 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]
2008-08-01 23:14 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDIRShortCut]
2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut]
2008-10-07 03:42 210216 ------w- c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2012-09-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-25 20:59]
.
2012-09-03 c:\windows\Tasks\HPCeeScheduleForowner.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2009-04-22 18:34]
.
2010-03-04 c:\windows\Tasks\Regwork.job
- c:\program files\RegWork\RegWork.exe [2010-03-01 21:37]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
IE: Add to Video Converter... - c:\program files\Media Player Utilities 5.22\AVIConverter\grab.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 75.75.75.75 75.75.76.76
DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab
DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab
FF - ProfilePath - c:\users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\
FF - prefs.js: browser.search.selectedEngine - Google
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-09-25 15:08
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-869652560-2776403528-2443925462-1000\Software\SecuROM\License information*]
"datasecu"=hex:a1,e8,07,07,42,7d,16,6e,08,4c,d6,46,6b,bd,28,29,db,34,33,b5,52,
74,2a,b3,ce,9b,c4,a0,1d,a2,d8,81,91,c3,21,56,0f,60,c5,e0,f5,03,af,4b,0a,bc,\
"rkeysecu"=hex:db,05,85,fc,e0,c8,04,65,36,51,08,bd,3e,4e,15,cd
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2012-09-25 15:11:49
ComboFix-quarantined-files.txt 2012-09-25 19:11
ComboFix2.txt 2012-09-24 00:47
ComboFix3.txt 2012-09-21 17:26
.
Pre-Run: 34,695,651,328 bytes free
Post-Run: 34,413,191,168 bytes free
.
- - End Of File - - B856CD6BA1646ED89175DA8E6B7AC70A

[Maniac]

Good!

How are things now?

[AFirebaugh]

Maniac, on 26 September 2012 - 03:56 AM, said:

Good!

How are things now?

I am no longer getting messages stating that my programs are not working and it is searching for a solution. And now the Firefox home screen comes up when I open the browser. Everything seems to be working fine now.

[Maniac]

Glad I could help!

• Download OTC to your desktop and run it
  
• Click Yes to beginning the Cleanup process and remove these components, including this application.
  
• You will be asked to reboot the machine to finish the Cleanup process. Choose Yes.

Next, manually delete DDS.

Some malware prevention tips:
users.telenet.be/bluepatchy/miekiemoes/prevention.html


Safe surfing!

[LDTate]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!