Staff screen317 Posted June 20, 2011 Staff ID:443353 Share Posted June 20, 2011 Okay thanks for letting me know. Link to post Share on other sites More sharing options...
Geographer Posted June 23, 2011 Author ID:444743 Share Posted June 23, 2011 These are the ComboFix and DDS scans you requestedComboFix 11-06-22.05 - Dennis 06/23/2011 11:55:32.2.1 - x86Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1141 [GMT -4:00]Running from: c:\documents and settings\Dennis\Desktop\ComboFix.exeAV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}FW: McAfee Firewall *Enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}..((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))..c:\documents and settings\Dennis\Local Settings\Application Data\{68088CAC-141C-40D2-9A7A-F8B10F9B656E}c:\documents and settings\Dennis\Local Settings\Application Data\{68088CAC-141C-40D2-9A7A-F8B10F9B656E}\chrome.manifestc:\documents and settings\Dennis\Local Settings\Application Data\{68088CAC-141C-40D2-9A7A-F8B10F9B656E}\chrome\content\_cfg.jsc:\documents and settings\Dennis\Local Settings\Application Data\{68088CAC-141C-40D2-9A7A-F8B10F9B656E}\chrome\content\overlay.xulc:\documents and settings\Dennis\Local Settings\Application Data\{68088CAC-141C-40D2-9A7A-F8B10F9B656E}\install.rdf..((((((((((((((((((((((((( Files Created from 2011-05-23 to 2011-06-23 )))))))))))))))))))))))))))))))..2011-06-23 07:04 . 2011-06-23 07:04 -------- d-sh--w- c:\documents and settings\Default User\IETldCache2011-06-23 02:57 . 2011-06-23 02:57 -------- d-----w- c:\program files\Common Files\Java2011-06-23 02:47 . 2011-06-23 02:47 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl2011-06-23 00:05 . 2011-04-21 13:37 105472 -c----w- c:\windows\system32\dllcache\mup.sys2011-06-06 16:55 . 2011-06-06 16:55 183696 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll2011-06-05 00:38 . 2011-06-05 00:38 -------- d-----w- c:\program files\ESET2011-05-30 12:15 . 2011-05-30 12:15 -------- dcsh--w- c:\documents and settings\Suzi2\PrivacIE2011-05-28 23:55 . 2011-05-28 23:55 -------- dc----r- C:\Sandbox2011-05-28 23:53 . 2011-05-28 23:53 -------- d-----w- c:\program files\Sandboxie2011-05-27 22:56 . 2011-05-27 22:56 -------- dcsh--w- c:\documents and settings\Suzi2\IETldCache2011-05-27 17:09 . 2011-05-27 17:09 -------- d-sh--w- c:\documents and settings\Dennis\PrivacIE2011-05-27 11:05 . 2011-05-27 11:05 -------- d-sh--w- c:\documents and settings\Dennis\IETldCache2011-05-27 06:17 . 2011-05-27 06:17 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache2011-05-27 04:57 . 2011-05-27 04:57 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache2011-05-27 04:20 . 2011-05-27 04:20 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache2011-05-27 00:51 . 2011-05-27 00:54 -------- dc-h--w- c:\windows\ie82011-05-27 00:46 . 2010-10-18 11:10 7680 -c----w- c:\windows\system32\dllcache\iecompat.dll2011-05-27 00:46 . 2011-04-25 16:11 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll2011-05-27 00:46 . 2011-04-25 16:11 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll2011-05-27 00:46 . 2011-04-25 16:11 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll2011-05-27 00:46 . 2011-04-25 16:11 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll2011-05-27 00:46 . 2011-04-25 16:11 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll2011-05-27 00:46 . 2011-04-25 16:11 1991680 -c----w- c:\windows\system32\dllcache\iertutil.dll2011-05-27 00:46 . 2011-04-26 14:11 11081728 -c----w- c:\windows\system32\dllcache\ieframe.dll...(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))).2011-05-29 13:11 . 2010-02-12 08:14 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys2011-05-29 13:11 . 2010-02-12 08:14 22712 ----a-w- c:\windows\system32\drivers\mbam.sys2011-05-04 08:52 . 2010-05-15 14:31 472808 ----a-w- c:\windows\system32\deployJava1.dll2011-05-04 06:25 . 2011-05-23 01:15 73728 ----a-w- c:\windows\system32\javacpl.cpl2011-05-02 15:31 . 2007-02-02 18:13 692736 ----a-w- c:\windows\system32\inetcomm.dll2011-04-29 16:19 . 2003-07-16 20:34 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys2011-04-25 16:11 . 2006-06-23 16:33 916480 ----a-w- c:\windows\system32\wininet.dll2011-04-25 16:11 . 2003-07-16 20:32 43520 ------w- c:\windows\system32\licmgr10.dll2011-04-25 16:11 . 2003-07-16 20:30 1469440 ------w- c:\windows\system32\inetcpl.cpl2011-04-25 12:01 . 2004-08-04 05:59 385024 ------w- c:\windows\system32\html.iec2011-04-21 13:37 . 2003-07-16 20:37 105472 ----a-w- c:\windows\system32\drivers\mup.sys2011-04-14 18:01 . 2010-08-01 15:09 9344 ----a-w- c:\windows\system32\drivers\mfeclnk.sys2011-04-14 18:01 . 2010-08-01 15:09 88736 ----a-w- c:\windows\system32\drivers\mfendisk.sys2011-04-14 18:01 . 2010-08-01 15:09 84488 ----a-w- c:\windows\system32\drivers\mferkdet.sys2011-04-14 18:01 . 2010-08-01 15:09 84200 ----a-w- c:\windows\system32\drivers\mfetdi2k.sys2011-04-14 18:01 . 2010-08-01 15:09 95824 ----a-w- c:\windows\system32\drivers\mfeapfk.sys2011-04-14 18:01 . 2010-08-01 15:09 56064 ----a-w- c:\windows\system32\drivers\cfwids.sys2011-04-14 18:01 . 2010-08-01 15:09 314088 ----a-w- c:\windows\system32\drivers\mfefirek.sys2011-04-14 18:01 . 2007-02-03 00:17 52320 ----a-w- c:\windows\system32\drivers\mfebopk.sys2011-04-14 18:01 . 2007-02-03 00:17 387480 ----a-w- c:\windows\system32\drivers\mfehidk.sys2011-04-14 18:01 . 2007-02-03 00:17 153280 ----a-w- c:\windows\system32\drivers\mfeavfk.sys2001-05-24 16:59 . 2008-05-26 02:53 162304 ----a-w- c:\program files\UNWISE.EXE2011-04-14 16:26 . 2011-06-05 00:33 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll2011-04-14 18:01 . 2011-06-05 02:41 24376 ----a-w- c:\program files\mozilla firefox\components\Scriptff.dll..((((((((((((((((((((((((((((( SnapShot@2011-05-18_23.29.29 ))))))))))))))))))))))))))))))))))))))))).+ 2011-04-19 02:51 . 2011-04-19 02:51 51024 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f\vcomp90.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90rus.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90kor.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90jpn.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90ita.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90fra.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esp.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esn.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 53584 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90enu.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 63312 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90deu.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90cht.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 35664 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90chs.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90u.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90.dll+ 2011-05-14 00:17 . 2011-05-14 00:17 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_452bf920\vcomp.dll+ 2011-05-13 23:45 . 2011-05-13 23:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80KOR.dll+ 2011-05-13 23:45 . 2011-05-13 23:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80JPN.dll+ 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ITA.dll+ 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80FRA.dll+ 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ESP.dll+ 2011-05-13 23:45 . 2011-05-13 23:45 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ENU.dll+ 2011-05-13 23:45 . 2011-05-13 23:45 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80DEU.dll+ 2011-05-13 23:45 . 2011-05-13 23:45 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHT.dll+ 2011-05-13 23:45 . 2011-05-13 23:45 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHS.dll+ 2011-05-14 05:06 . 2011-05-14 05:06 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80u.dll+ 2011-05-14 05:23 . 2011-05-14 05:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80.dll+ 2011-05-13 22:37 . 2011-05-13 22:37 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll+ 2011-06-23 07:15 . 2011-06-23 07:15 16384 c:\windows\Temp\Perflib_Perfdata_f0.dat+ 2011-06-23 10:13 . 2011-06-23 10:13 16384 c:\windows\Temp\Perflib_Perfdata_724.dat+ 2011-06-23 07:16 . 2011-06-23 07:16 16384 c:\windows\Temp\Perflib_Perfdata_23c.dat+ 2007-02-04 22:58 . 2009-01-07 22:21 26144 c:\windows\system32\spupdsvc.exe+ 2007-02-02 18:16 . 2009-01-07 22:20 16928 c:\windows\system32\spmsg.dll+ 2003-07-16 20:41 . 2009-03-08 08:31 46592 c:\windows\system32\pngfilt.dll+ 2009-01-07 22:20 . 2009-01-07 22:20 23552 c:\windows\system32\normaliz.dll+ 2009-01-07 22:20 . 2009-01-07 22:20 24576 c:\windows\system32\nlsdl.dll+ 2003-07-16 20:35 . 2009-03-08 08:31 48128 c:\windows\system32\mshtmler.dll+ 2003-07-16 20:35 . 2011-04-25 16:11 66560 c:\windows\system32\mshtmled.dll+ 2003-07-16 20:35 . 2009-03-08 08:31 45568 c:\windows\system32\mshta.exe+ 2009-03-08 08:31 . 2009-03-08 08:31 13312 c:\windows\system32\msfeedssync.exe+ 2009-03-08 08:31 . 2011-04-25 16:11 55296 c:\windows\system32\msfeedsbs.dll+ 2003-07-16 20:31 . 2011-04-25 16:11 25600 c:\windows\system32\jsproxy.dll+ 2003-07-16 20:30 . 2009-03-08 08:32 94720 c:\windows\system32\inseng.dll+ 2003-07-16 20:30 . 2009-03-08 08:31 34816 c:\windows\system32\imgutil.dll+ 2009-03-08 08:32 . 2009-03-08 08:32 36864 c:\windows\system32\ieudinit.exe+ 2003-07-16 20:30 . 2009-03-08 08:32 71680 c:\windows\system32\iesetup.dll+ 2003-07-16 20:30 . 2009-03-08 08:32 55808 c:\windows\system32\iernonce.dll+ 2009-01-07 22:20 . 2009-01-07 22:20 26112 c:\windows\system32\idndl.dll+ 2009-03-08 08:31 . 2009-03-08 08:31 59904 c:\windows\system32\icardie.dll+ 2009-03-08 08:31 . 2009-03-08 08:31 46592 c:\windows\system32\dllcache\pngfilt.dll+ 2009-03-08 08:31 . 2009-03-08 08:31 48128 c:\windows\system32\dllcache\mshtmler.dll+ 2010-09-09 14:16 . 2011-04-25 16:11 66560 c:\windows\system32\dllcache\mshtmled.dll+ 2009-03-08 08:31 . 2009-03-08 08:31 45568 c:\windows\system32\dllcache\mshta.exe+ 2009-03-08 08:34 . 2011-04-25 16:11 43520 c:\windows\system32\dllcache\licmgr10.dll+ 2009-03-08 08:33 . 2011-04-25 16:11 25600 c:\windows\system32\dllcache\jsproxy.dll+ 2009-03-08 08:32 . 2009-03-08 08:32 94720 c:\windows\system32\dllcache\inseng.dll+ 2009-03-08 08:31 . 2009-03-08 08:31 34816 c:\windows\system32\dllcache\imgutil.dll+ 2009-03-08 08:32 . 2009-03-08 08:32 71680 c:\windows\system32\dllcache\iesetup.dll+ 2009-03-08 08:32 . 2009-03-08 08:32 55808 c:\windows\system32\dllcache\iernonce.dll+ 2009-03-08 08:24 . 2009-03-08 08:24 68608 c:\windows\system32\dllcache\hmmapi.dll+ 2009-03-08 08:33 . 2009-03-08 08:33 18944 c:\windows\system32\dllcache\corpol.dll+ 2009-03-08 08:32 . 2009-03-08 08:32 72704 c:\windows\system32\dllcache\admparse.dll+ 2003-07-16 20:25 . 2009-03-08 08:33 18944 c:\windows\system32\corpol.dll+ 2007-02-02 18:20 . 2011-06-23 11:59 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat- 2007-02-02 18:20 . 2011-05-18 16:41 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat+ 2011-05-27 04:57 . 2011-06-23 11:59 16384 c:\windows\system32\config\systemprofile\IETldCache\index.dat- 2010-02-18 07:53 . 2011-05-18 16:41 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat+ 2011-05-19 00:15 . 2011-06-23 11:59 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat+ 2003-07-16 20:23 . 2009-03-08 08:32 72704 c:\windows\system32\admparse.dll+ 2011-06-01 01:55 . 2011-06-01 01:55 21504 c:\windows\Installer\107ca9.msi+ 2011-06-02 23:04 . 2011-06-02 23:04 65536 c:\windows\Installer\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74_1.exe+ 2011-06-02 23:04 . 2011-06-02 23:04 65536 c:\windows\Installer\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}\UNINST_Uninstall_G_F6A848FB884248E6A4CDCBDCF41F6A74.exe+ 2011-06-02 23:04 . 2011-06-02 23:04 65536 c:\windows\Installer\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe+ 2011-06-02 23:04 . 2011-06-02 23:04 65536 c:\windows\Installer\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe+ 2011-06-02 23:04 . 2011-06-02 23:04 65536 c:\windows\Installer\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}\googleearth.exe1_F6A848FB884248E6A4CDCBDCF41F6A74.exe+ 2011-06-02 23:04 . 2011-06-02 23:04 65536 c:\windows\Installer\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}\googleearth.exe_F6A848FB884248E6A4CDCBDCF41F6A74.exe+ 2011-06-02 23:04 . 2011-06-02 23:04 65536 c:\windows\Installer\{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}\ARPPRODUCTICON.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 34144 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\oisicon.exe- 2011-05-02 01:33 . 2011-05-03 07:08 34144 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\oisicon.exe- 2011-05-02 01:33 . 2011-05-03 07:08 42848 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\msouc.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 42848 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\msouc.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 19296 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\cagicon.exe- 2011-05-02 01:33 . 2011-05-03 07:08 19296 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\cagicon.exe- 2009-04-08 15:42 . 2011-05-03 07:06 40960 c:\windows\Installer\{90850409-6000-11D3-8CFE-0150048383C9}\wrdvicon.exe+ 2009-04-08 15:42 . 2011-06-23 07:05 40960 c:\windows\Installer\{90850409-6000-11D3-8CFE-0150048383C9}\wrdvicon.exe- 2011-05-12 07:00 . 2011-05-12 07:00 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe+ 2011-06-23 07:09 . 2011-06-23 07:09 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe- 2010-07-19 17:52 . 2011-05-02 14:23 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll+ 2010-07-19 17:52 . 2011-06-23 07:07 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll+ 2011-05-27 00:57 . 2009-03-08 08:33 12288 c:\windows\ie8updates\KB982381-IE8\xpshims.dll+ 2011-05-27 00:57 . 2009-03-08 08:31 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll+ 2011-05-27 00:57 . 2009-03-08 08:33 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 12800 c:\windows\ie8updates\KB2530548-IE8\xpshims.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 66560 c:\windows\ie8updates\KB2530548-IE8\mshtmled.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 55296 c:\windows\ie8updates\KB2530548-IE8\msfeedsbs.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 43520 c:\windows\ie8updates\KB2530548-IE8\licmgr10.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 25600 c:\windows\ie8updates\KB2530548-IE8\jsproxy.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 12800 c:\windows\ie8updates\KB2497640-IE8\xpshims.dll+ 2011-05-27 00:58 . 2009-03-08 08:31 66560 c:\windows\ie8updates\KB2497640-IE8\mshtmled.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 55296 c:\windows\ie8updates\KB2497640-IE8\msfeedsbs.dll+ 2011-05-27 00:58 . 2009-03-08 08:34 43008 c:\windows\ie8updates\KB2497640-IE8\licmgr10.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 25600 c:\windows\ie8updates\KB2497640-IE8\jsproxy.dll+ 2011-05-27 00:51 . 2008-04-14 00:12 37888 c:\windows\ie8\url.dll+ 2011-05-27 00:52 . 2009-03-08 18:23 58464 c:\windows\ie8\spuninst\iecustom.dll+ 2011-05-27 00:51 . 2008-04-14 00:12 39424 c:\windows\ie8\pngfilt.dll+ 2011-05-27 00:51 . 2008-04-14 00:12 96256 c:\windows\ie8\occache.dll+ 2011-05-27 00:51 . 2008-04-13 16:26 56832 c:\windows\ie8\mshtmler.dll+ 2011-05-27 00:51 . 2008-04-14 00:12 29184 c:\windows\ie8\mshta.exe+ 2011-05-27 00:51 . 2008-04-14 00:11 22016 c:\windows\ie8\licmgr10.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 15872 c:\windows\ie8\jsproxy.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 96256 c:\windows\ie8\inseng.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 35840 c:\windows\ie8\imgutil.dll+ 2011-05-27 00:51 . 2008-04-14 00:12 93184 c:\windows\ie8\iexplore.exe+ 2011-05-27 00:51 . 2008-04-14 00:11 62976 c:\windows\ie8\iesetup.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 48640 c:\windows\ie8\iernonce.dll+ 2011-05-27 00:51 . 2011-02-17 13:51 81920 c:\windows\ie8\ieencode.dll+ 2011-05-27 00:51 . 2008-04-14 00:12 34304 c:\windows\ie8\ie4uinit.exe+ 2011-05-27 00:51 . 2008-04-14 00:11 38912 c:\windows\ie8\hmmapi.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 35328 c:\windows\ie8\corpol.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 99840 c:\windows\ie8\advpack.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 61440 c:\windows\ie8\admparse.dll+ 2011-05-27 00:58 . 2009-03-08 08:35 2048 c:\windows\ie8updates\KB2447568-IE8\iecompat.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 653136 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 569680 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcm90.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 159048 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_92453bb7\atl90.dll+ 2011-05-14 05:17 . 2011-05-14 05:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll+ 2011-05-14 05:12 . 2011-05-14 05:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll+ 2011-05-14 05:11 . 2011-05-14 05:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll+ 2008-11-16 04:13 . 2009-01-07 22:21 121856 c:\windows\system32\xmllite.dll+ 2009-03-08 08:34 . 2009-03-08 08:34 208384 c:\windows\system32\WinFXDocObj.exe+ 2003-07-16 20:51 . 2009-03-08 08:34 236544 c:\windows\system32\webcheck.dll+ 2003-07-16 20:49 . 2011-03-04 06:37 420864 c:\windows\system32\vbscript.dll+ 2003-07-16 20:49 . 2009-03-08 08:34 105984 c:\windows\system32\url.dll+ 2003-07-16 20:40 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll- 2003-07-16 20:40 . 2008-04-14 00:12 551936 c:\windows\system32\oleaut32.dll+ 2003-07-16 20:40 . 2011-04-25 16:11 206848 c:\windows\system32\occache.dll+ 2003-07-16 20:36 . 2011-04-25 16:11 611840 c:\windows\system32\mstime.dll+ 2003-07-16 20:36 . 2009-03-08 08:34 193536 c:\windows\system32\msrating.dll+ 2003-07-16 20:36 . 2009-03-08 08:22 156160 c:\windows\system32\msls31.dll+ 2009-03-08 08:32 . 2011-04-25 16:11 602112 c:\windows\system32\msfeeds.dll+ 2009-01-07 22:20 . 2009-01-07 22:20 265720 c:\windows\system32\msdbg2.dll+ 2011-06-23 02:47 . 2011-06-23 02:47 240288 c:\windows\system32\Macromed\Flash\FlashUtil10t_Plugin.exe+ 2006-05-18 05:58 . 2011-03-04 06:37 726528 c:\windows\system32\jscript.dll+ 2011-06-23 02:55 . 2011-05-04 08:52 157472 c:\windows\system32\javaws.exe- 2010-09-17 14:30 . 2010-07-17 09:00 145184 c:\windows\system32\javaw.exe+ 2011-06-23 02:55 . 2011-05-04 08:52 145184 c:\windows\system32\javaw.exe+ 2011-06-23 02:55 . 2011-05-04 08:52 145184 c:\windows\system32\java.exe- 2010-09-17 14:30 . 2010-07-17 09:00 145184 c:\windows\system32\java.exe+ 2009-03-08 08:22 . 2009-03-08 08:22 164352 c:\windows\system32\ieui.dll+ 2003-07-16 20:30 . 2011-04-25 16:11 184320 c:\windows\system32\iepeers.dll+ 2003-07-16 20:30 . 2011-04-25 16:11 387584 c:\windows\system32\iedkcs32.dll+ 2009-03-08 08:11 . 2009-03-08 08:11 445952 c:\windows\system32\ieapfltr.dll+ 2003-07-16 20:30 . 2009-03-08 08:32 163840 c:\windows\system32\ieakui.dll+ 2003-07-16 20:30 . 2009-03-08 08:33 229376 c:\windows\system32\ieaksie.dll+ 2003-07-16 20:30 . 2009-03-08 08:33 125952 c:\windows\system32\ieakeng.dll+ 2003-07-16 20:30 . 2011-04-25 12:01 173568 c:\windows\system32\ie4uinit.exe+ 2003-07-16 20:27 . 2009-03-08 08:31 216064 c:\windows\system32\dxtrans.dll+ 2003-07-16 20:27 . 2009-03-08 08:31 348160 c:\windows\system32\dxtmsft.dll- 2003-07-16 20:23 . 2008-10-16 14:43 138496 c:\windows\system32\drivers\afd.sys+ 2003-07-16 20:23 . 2011-02-16 13:22 138496 c:\windows\system32\drivers\afd.sys+ 2008-04-21 06:44 . 2011-04-25 16:11 916480 c:\windows\system32\dllcache\wininet.dll+ 2009-03-08 08:34 . 2009-03-08 08:34 236544 c:\windows\system32\dllcache\webcheck.dll+ 2009-03-08 08:33 . 2011-04-30 03:01 758784 c:\windows\system32\dllcache\vgx.dll+ 2010-03-09 11:09 . 2011-03-04 06:37 420864 c:\windows\system32\dllcache\vbscript.dll+ 2009-03-08 08:34 . 2009-03-08 08:34 105984 c:\windows\system32\dllcache\url.dll+ 2009-01-07 22:20 . 2009-01-07 22:20 134144 c:\windows\system32\dllcache\sqmapi.dll+ 2010-12-20 17:32 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll+ 2009-03-08 08:34 . 2011-04-25 16:11 206848 c:\windows\system32\dllcache\occache.dll+ 2010-11-05 05:05 . 2011-04-25 16:11 611840 c:\windows\system32\dllcache\mstime.dll+ 2009-03-08 08:34 . 2009-03-08 08:34 193536 c:\windows\system32\dllcache\msrating.dll+ 2003-07-16 20:36 . 2009-03-08 08:22 156160 c:\windows\system32\dllcache\msls31.dll+ 2008-11-12 04:13 . 2011-04-29 16:19 456320 c:\windows\system32\dllcache\mrxsmb.sys+ 2009-09-16 15:43 . 2011-03-04 06:37 726528 c:\windows\system32\dllcache\jscript.dll+ 2008-08-21 01:37 . 2011-05-02 15:31 692736 c:\windows\system32\dllcache\inetcomm.dll- 2008-08-21 01:37 . 2011-03-07 05:33 692736 c:\windows\system32\dllcache\inetcomm.dll+ 2009-03-08 18:09 . 2009-03-08 18:09 638816 c:\windows\system32\dllcache\iexplore.exe+ 2010-02-26 05:43 . 2011-04-25 16:11 184320 c:\windows\system32\dllcache\iepeers.dll+ 2009-03-08 18:09 . 2011-04-25 16:11 387584 c:\windows\system32\dllcache\iedkcs32.dll+ 2003-07-16 20:30 . 2009-03-08 08:32 163840 c:\windows\system32\dllcache\ieakui.dll+ 2009-03-08 08:33 . 2009-03-08 08:33 229376 c:\windows\system32\dllcache\ieaksie.dll+ 2009-03-08 08:33 . 2009-03-08 08:33 125952 c:\windows\system32\dllcache\ieakeng.dll+ 2009-03-08 08:32 . 2011-04-25 12:01 173568 c:\windows\system32\dllcache\ie4uinit.exe+ 2009-03-08 08:31 . 2009-03-08 08:31 216064 c:\windows\system32\dllcache\dxtrans.dll+ 2009-03-08 08:31 . 2009-03-08 08:31 348160 c:\windows\system32\dllcache\dxtmsft.dll- 2008-06-20 11:40 . 2008-10-16 14:43 138496 c:\windows\system32\dllcache\afd.sys+ 2008-06-20 11:40 . 2011-02-16 13:22 138496 c:\windows\system32\dllcache\afd.sys+ 2009-03-08 08:32 . 2009-03-08 08:32 128512 c:\windows\system32\dllcache\advpack.dll+ 2003-07-16 20:23 . 2009-03-08 08:32 128512 c:\windows\system32\advpack.dll+ 2011-05-28 23:53 . 2011-05-28 23:53 867920 c:\windows\Installer\SandboxieInstall32.exe+ 2011-05-23 01:14 . 2011-05-23 01:14 675840 c:\windows\Installer\a783b9.msi+ 2011-06-23 02:57 . 2011-06-23 02:57 203776 c:\windows\Installer\9e0936.msi+ 2011-06-23 07:09 . 2011-06-23 07:09 223744 c:\windows\Installer\1848fa6.msi+ 2011-03-17 22:19 . 2011-03-17 22:19 304128 c:\windows\Installer\1848f87.msp+ 2011-06-23 07:03 . 2011-06-23 07:03 467456 c:\windows\Installer\1848f4a.msi- 2011-05-02 01:33 . 2011-05-03 07:08 415584 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pubs.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 415584 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pubs.exe- 2011-05-02 01:33 . 2011-05-03 07:08 303456 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 303456 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe- 2011-05-02 01:33 . 2011-05-03 07:08 571232 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\misc.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 571232 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\misc.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 326496 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\joticon.exe- 2011-05-02 01:33 . 2011-05-03 07:08 326496 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\joticon.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 469856 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\inficon.exe- 2011-05-02 01:33 . 2011-05-03 07:08 469856 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\inficon.exe- 2011-05-02 01:33 . 2011-05-03 07:08 178528 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\grvicons.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 178528 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\grvicons.exe- 2009-04-08 15:42 . 2011-05-03 07:06 135168 c:\windows\Installer\{90850409-6000-11D3-8CFE-0150048383C9}\misc.exe+ 2009-04-08 15:42 . 2011-06-23 07:05 135168 c:\windows\Installer\{90850409-6000-11D3-8CFE-0150048383C9}\misc.exe+ 2011-05-27 00:57 . 2009-03-08 08:34 914944 c:\windows\ie8updates\KB982381-IE8\wininet.dll+ 2011-05-27 00:57 . 2010-02-22 14:23 382840 c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll+ 2011-05-27 00:57 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe+ 2011-05-27 00:57 . 2009-03-08 08:34 109568 c:\windows\ie8updates\KB982381-IE8\occache.dll+ 2011-05-27 00:57 . 2009-03-08 08:32 611840 c:\windows\ie8updates\KB982381-IE8\mstime.dll+ 2011-05-27 00:57 . 2009-03-08 08:32 594432 c:\windows\ie8updates\KB982381-IE8\msfeeds.dll+ 2011-05-27 00:57 . 2009-03-08 08:33 246784 c:\windows\ie8updates\KB982381-IE8\ieproxy.dll+ 2011-05-27 00:57 . 2009-03-08 08:31 183808 c:\windows\ie8updates\KB982381-IE8\iepeers.dll+ 2011-05-27 00:57 . 2009-03-08 08:35 742912 c:\windows\ie8updates\KB982381-IE8\iedvtool.dll+ 2011-05-27 00:57 . 2009-03-08 18:09 391536 c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll+ 2011-05-27 00:57 . 2009-03-08 08:32 173056 c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe+ 2011-06-23 07:01 . 2009-03-08 08:33 759296 c:\windows\ie8updates\KB2544521-IE8\vgx.dll+ 2011-06-23 07:01 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2544521-IE8\spuninst\updspapi.dll+ 2011-06-23 07:01 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2544521-IE8\spuninst\spuninst.exe+ 2011-06-23 07:03 . 2011-02-22 23:06 916480 c:\windows\ie8updates\KB2530548-IE8\wininet.dll+ 2011-06-23 07:03 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2530548-IE8\spuninst\updspapi.dll+ 2011-06-23 07:03 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2530548-IE8\spuninst\spuninst.exe+ 2011-06-23 07:03 . 2011-02-22 23:06 206848 c:\windows\ie8updates\KB2530548-IE8\occache.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 611840 c:\windows\ie8updates\KB2530548-IE8\mstime.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 602112 c:\windows\ie8updates\KB2530548-IE8\msfeeds.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 247808 c:\windows\ie8updates\KB2530548-IE8\ieproxy.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 184320 c:\windows\ie8updates\KB2530548-IE8\iepeers.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 743424 c:\windows\ie8updates\KB2530548-IE8\iedvtool.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 387584 c:\windows\ie8updates\KB2530548-IE8\iedkcs32.dll+ 2011-06-23 07:03 . 2011-02-18 11:49 173568 c:\windows\ie8updates\KB2530548-IE8\ie4uinit.exe+ 2011-05-28 07:01 . 2009-03-08 08:33 420352 c:\windows\ie8updates\KB2510531-IE8\vbscript.dll+ 2011-05-28 07:01 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2510531-IE8\spuninst\updspapi.dll+ 2011-05-28 07:01 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2510531-IE8\spuninst\spuninst.exe+ 2011-05-28 07:01 . 2009-03-08 08:33 726528 c:\windows\ie8updates\KB2510531-IE8\jscript.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 916480 c:\windows\ie8updates\KB2497640-IE8\wininet.dll+ 2011-05-27 00:58 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2497640-IE8\spuninst\updspapi.dll+ 2011-05-27 00:58 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2497640-IE8\spuninst\spuninst.exe+ 2011-05-27 00:58 . 2010-05-06 10:41 206848 c:\windows\ie8updates\KB2497640-IE8\occache.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 611840 c:\windows\ie8updates\KB2497640-IE8\mstime.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 599040 c:\windows\ie8updates\KB2497640-IE8\msfeeds.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 247808 c:\windows\ie8updates\KB2497640-IE8\ieproxy.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 184320 c:\windows\ie8updates\KB2497640-IE8\iepeers.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 743424 c:\windows\ie8updates\KB2497640-IE8\iedvtool.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 387584 c:\windows\ie8updates\KB2497640-IE8\iedkcs32.dll+ 2011-05-27 00:58 . 2010-05-05 13:30 173056 c:\windows\ie8updates\KB2497640-IE8\ie4uinit.exe+ 2011-05-27 00:58 . 2010-02-22 14:23 382840 c:\windows\ie8updates\KB2447568-IE8\spuninst\updspapi.dll+ 2011-05-27 00:58 . 2010-02-22 14:23 231288 c:\windows\ie8updates\KB2447568-IE8\spuninst\spuninst.exe+ 2011-05-27 00:51 . 2011-02-17 13:51 667136 c:\windows\ie8\wininet.dll+ 2011-05-27 00:51 . 2008-04-14 00:12 276480 c:\windows\ie8\webcheck.dll+ 2011-05-27 00:51 . 2008-04-14 00:12 851968 c:\windows\ie8\vgx.dll+ 2011-05-27 00:51 . 2011-03-04 06:45 434176 c:\windows\ie8\vbscript.dll+ 2011-05-27 00:51 . 2011-02-17 13:51 629760 c:\windows\ie8\urlmon.dll+ 2011-05-27 00:52 . 2009-01-07 22:21 382496 c:\windows\ie8\spuninst\updspapi.dll+ 2011-05-27 00:52 . 2009-01-07 22:20 231456 c:\windows\ie8\spuninst\spuninst.exe+ 2011-05-27 00:51 . 2011-02-17 13:51 532480 c:\windows\ie8\mstime.dll+ 2011-05-27 00:51 . 2008-04-14 00:12 146432 c:\windows\ie8\msrating.dll+ 2011-05-27 00:51 . 2003-07-16 20:36 146432 c:\windows\ie8\msls31.dll+ 2011-05-27 00:51 . 2011-02-17 13:51 449024 c:\windows\ie8\mshtmled.dll+ 2011-05-27 00:51 . 2011-03-04 06:45 512000 c:\windows\ie8\jscript.dll+ 2011-05-27 00:51 . 2011-02-17 13:51 251904 c:\windows\ie8\iepeers.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 323584 c:\windows\ie8\iedkcs32.dll+ 2011-05-27 00:51 . 2003-07-16 20:30 221184 c:\windows\ie8\ieakui.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 216576 c:\windows\ie8\ieaksie.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 143360 c:\windows\ie8\ieakeng.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 205312 c:\windows\ie8\dxtrans.dll+ 2011-05-27 00:51 . 2008-04-14 00:11 357888 c:\windows\ie8\dxtmsft.dll+ 2008-11-12 04:13 . 2011-04-29 16:19 456320 c:\windows\Driver Cache\i386\mrxsmb.sys+ 2011-04-19 02:51 . 2011-04-19 02:51 3781960 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90u.dll+ 2011-04-19 02:51 . 2011-04-19 02:51 3766600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfc90.dll+ 2011-05-14 00:04 . 2011-05-14 00:04 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80u.dll+ 2011-05-14 00:04 . 2011-05-14 00:04 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80.dll+ 2006-08-31 01:42 . 2011-04-25 16:11 1211904 c:\windows\system32\urlmon.dll+ 2003-07-16 20:35 . 2011-05-30 22:19 5964800 c:\windows\system32\mshtml.dll+ 2009-10-28 03:40 . 2011-06-23 02:47 6271136 c:\windows\system32\Macromed\Flash\NPSWF32.dll+ 2009-03-08 08:32 . 2011-04-25 16:11 1991680 c:\windows\system32\iertutil.dll+ 2009-02-07 01:07 . 2009-02-07 01:07 3698584 c:\windows\system32\ieapfltr.dat+ 2008-06-26 08:15 . 2011-04-25 16:11 1211904 c:\windows\system32\dllcache\urlmon.dll+ 2008-04-21 06:44 . 2011-05-30 22:19 5964800 c:\windows\system32\dllcache\mshtml.dll+ 2011-06-02 23:04 . 2011-06-02 23:04 1529344 c:\windows\Installer\9be1e36.msi+ 2011-06-23 15:42 . 2011-06-23 15:42 2295808 c:\windows\Installer\1ce7b47.msi+ 2011-04-29 16:28 . 2011-04-29 16:28 1995264 c:\windows\Installer\1848fae.msp+ 2011-03-17 23:20 . 2011-03-17 23:20 1961984 c:\windows\Installer\1848f9e.msp+ 2011-05-17 22:28 . 2011-05-17 22:28 6862848 c:\windows\Installer\1848f74.msp+ 2011-04-29 16:33 . 2011-04-29 16:33 8173568 c:\windows\Installer\1848f52.msp+ 2011-05-02 01:33 . 2011-06-23 07:09 1479520 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\xlicons.exe- 2011-05-02 01:33 . 2011-05-03 07:08 1479520 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\xlicons.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 1858400 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe- 2011-05-02 01:33 . 2011-05-03 07:08 1858400 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 3792736 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pptico.exe- 2011-05-02 01:33 . 2011-05-03 07:08 3792736 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pptico.exe+ 2011-05-02 01:33 . 2011-06-23 07:09 1449312 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\accicons.exe- 2011-05-02 01:33 . 2011-05-03 07:08 1449312 c:\windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\accicons.exe+ 2011-05-27 00:57 . 2009-03-08 08:34 1206784 c:\windows\ie8updates\KB982381-IE8\urlmon.dll+ 2011-05-27 00:57 . 2009-03-08 08:41 5937152 c:\windows\ie8updates\KB982381-IE8\mshtml.dll+ 2011-05-27 00:57 . 2009-03-08 08:32 1985024 c:\windows\ie8updates\KB982381-IE8\iertutil.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 1210880 c:\windows\ie8updates\KB2530548-IE8\urlmon.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 5962240 c:\windows\ie8updates\KB2530548-IE8\mshtml.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 1991680 c:\windows\ie8updates\KB2530548-IE8\iertutil.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 1209344 c:\windows\ie8updates\KB2497640-IE8\urlmon.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 5950976 c:\windows\ie8updates\KB2497640-IE8\mshtml.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 1985536 c:\windows\ie8updates\KB2497640-IE8\iertutil.dll+ 2011-05-27 00:51 . 2011-02-17 13:51 3078656 c:\windows\ie8\mshtml.dll+ 2010-03-11 14:37 . 2011-06-23 07:09 47716296 c:\windows\system32\MRT.exe+ 2009-03-08 08:39 . 2011-04-26 14:11 11081728 c:\windows\system32\ieframe.dll+ 2011-06-23 07:06 . 2011-06-23 07:06 20333056 c:\windows\Installer\1848f80.msp+ 2011-03-17 23:15 . 2011-03-17 23:15 44327424 c:\windows\Installer\1848f6a.msp+ 2011-05-27 00:57 . 2009-03-08 08:39 11063808 c:\windows\ie8updates\KB982381-IE8\ieframe.dll+ 2011-06-23 07:03 . 2011-02-22 23:06 11080704 c:\windows\ie8updates\KB2530548-IE8\ieframe.dll+ 2011-05-27 00:58 . 2010-05-06 10:41 11076096 c:\windows\ie8updates\KB2497640-IE8\ieframe.dll.-- Snapshot reset to current date --.((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))..*Note* empty entries & legit default entries are not shown REGEDIT4.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Green]@="{95A27763-F62A-4114-9072-E81D87DE3B68}"[HKEY_CLASSES_ROOT\CLSID\{95A27763-F62A-4114-9072-E81D87DE3B68}]2011-03-04 00:52 762000 ----a-r- c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Partial]@="{E300CD91-100F-4E67-9AF3-1384A6124015}"[HKEY_CLASSES_ROOT\CLSID\{E300CD91-100F-4E67-9AF3-1384A6124015}]2011-03-04 00:52 762000 ----a-r- c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Carbonite.Yellow]@="{5E529433-B50E-4bef-A63B-16A6B71B071A}"[HKEY_CLASSES_ROOT\CLSID\{5E529433-B50E-4bef-A63B-16A6B71B071A}]2011-03-04 00:52 762000 ----a-r- c:\program files\Carbonite\Carbonite Backup\CarboniteNSE.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]2010-10-06 23:36 94208 ----a-w- c:\documents and settings\Dennis\Application Data\Dropbox\bin\DropboxExt.14.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]2010-10-06 23:36 94208 ----a-w- c:\documents and settings\Dennis\Application Data\Dropbox\bin\DropboxExt.14.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]2010-10-06 23:36 94208 ----a-w- c:\documents and settings\Dennis\Application Data\Dropbox\bin\DropboxExt.14.dll.[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]2010-10-06 23:36 94208 ----a-w- c:\documents and settings\Dennis\Application Data\Dropbox\bin\DropboxExt.14.dll.[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"SandboxieControl"="c:\program files\Sandboxie\SbieCtrl.exe" [2011-03-24 409320].[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"dla"="c:\windows\system32\dla\tfswctrl.exe" [2003-08-06 114741]"StorageGuard"="c:\program files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-02-13 155648]"Acronis Scheduler2 Service"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2007-02-03 65536]"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-02-01 385024]"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-04-05 1195408]"Monitor"="c:\program files\LeapFrog\LeapFrog Connect\Monitor.exe" [2010-11-19 193880]"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]"Carbonite Backup"="c:\program files\Carbonite\Carbonite Backup\CarboniteUI.exe" [2011-03-04 948880]"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584]"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920].c:\documents and settings\Dennis\Start Menu\Programs\Startup\Dropbox.lnk - c:\documents and settings\Dennis\Application Data\Dropbox\bin\Dropbox.exe [2011-5-25 24176560].[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2010-02-12 77824].[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]2010-02-12 05:43 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL.[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]@="".[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]@="".[HKEY_LOCAL_MACHINE\software\microsoft\security center]"AntiVirusOverride"=dword:00000001"FirewallOverride"=dword:00000001.[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]"DisableMonitoring"=dword:00000001.[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]"DisableMonitoring"=dword:00000001.[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]"EnableFirewall"= 0 (0x0)"DisableNotifications"= 1 (0x1).[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]"%windir%\\system32\\sessmgr.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe"="c:\\Program Files\\SPSSInc\\Statistics17\\SPSSWinWrapIDE.exe"="c:\\Program Files\\SPSSInc\\Statistics17\\statistics.com"="c:\\Program Files\\SPSSInc\\Statistics17\\statistics.exe"="c:\\WINDOWS\\system32\\vssvc.exe"="c:\\Program Files\\McAfee\\VirusScan\\mcvsmap.exe"="c:\\Program Files\\Mozilla Firefox\\firefox.exe"="c:\\Program Files\\Common Files\\McAfee\\McSvcHost\\McSvHost.exe"="c:\\Program Files\\LeapFrog\\LeapFrog Connect\\LeapFrogConnect.exe"="c:\\Program Files\\FinalMediaPlayer\\FMPCheckForUpdates.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"="c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="c:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"="c:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"="c:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE"=.[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]"24726:TCP"= 24726:TCP:FlipShareServer"24727:TCP"= 24727:TCP:FlipShareServer.R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [8/1/2010 11:09 AM 84200]R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2/29/2008 4:03 PM 12872]R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2/29/2008 4:03 PM 67656]R2 FlipShareServer;FlipShare Server;c:\program files\Flip Video\FlipShareServer\FlipShareServer.exe [12/15/2010 2:22 PM 1085440]R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2/12/2010 4:14 AM 366640]R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [11/14/2008 9:41 PM 88176]R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [8/1/2010 11:09 AM 271480]R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [8/1/2010 11:09 AM 271480]R2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\mfefire.exe [8/1/2010 11:09 AM 188136]R2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe [8/1/2010 11:09 AM 141792]R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [8/1/2010 11:09 AM 56064]R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2/12/2010 4:14 AM 22712]R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [8/1/2010 11:09 AM 314088]R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [8/1/2010 11:09 AM 88736]R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [5/6/2008 4:06 PM 11520]S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys --> c:\windows\system32\drivers\TfFsMon.sys [?]S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys --> c:\windows\system32\drivers\TfSysMon.sys [?]S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 2:16 PM 130384]S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [9/30/2009 2:17 PM 133104]S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [12/26/2010 11:54 PM 18560]S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [9/30/2009 2:17 PM 133104]S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [8/1/2010 11:09 AM 88736]S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [8/1/2010 11:09 AM 84488]S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [3/25/2010 10:25 AM 30969208]S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [1/9/2010 9:37 PM 4640000]S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2/16/2006 4:51 PM 12872]S3 TfNetMon;TfNetMon;\??\c:\windows\system32\drivers\TfNetMon.sys --> c:\windows\system32\drivers\TfNetMon.sys [?]S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 2:16 PM 753504].--- Other Services/Drivers In Memory ---.*Deregistered* - mfeavfk01.Contents of the 'Scheduled Tasks' folder.2011-06-23 c:\windows\Tasks\Final Media Player Update Checker.job- c:\program files\FinalMediaPlayer\FMPCheckForUpdates.exe [2011-02-05 21:35].2011-06-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-30 18:17].2011-06-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-30 18:17]..------- Supplementary Scan -------.uStart Page = about:blankuInternet Connection Wizard,ShellNext = iexploreuSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%sIE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000IE: Se&nd to OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105Trusted Zone: internetTrusted Zone: intuit.com\ttlcTrusted Zone: mcafee.comTCP: DhcpNameServer = 68.105.28.11 68.105.29.11 68.105.28.12FF - ProfilePath - c:\documents and settings\Dennis\Application Data\Mozilla\Firefox\Profiles\f0hdd127.default\FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q=FF - prefs.js: browser.search.selectedEngine - GoogleFF - prefs.js: browser.startup.homepage - hxxp://FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=mcafee&p=FF - user.js: yahoo.ytff.general.dontshowhpoffer - true.- - - - ORPHANS REMOVED - - - -.WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)...**************************************************************************.catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.netRootkit scan 2011-06-23 12:03Windows 5.1.2600 Service Pack 3 NTFS.scanning hidden processes ... .scanning hidden autostart entries ... .scanning hidden files ... .scan completed successfullyhidden files: 0.**************************************************************************.--------------------- DLLs Loaded Under Running Processes ---------------------.- - - - - - - > 'winlogon.exe'(1008)c:\program files\SUPERAntiSpyware\SASWINLO.DLLc:\windows\system32\WININET.dll.Completion time: 2011-06-23 12:08:49ComboFix-quarantined-files.txt 2011-06-23 16:08ComboFix2.txt 2011-05-18 23:32ComboFix3.txt 2010-02-18 03:43.Pre-Run: 27,300,167,680 bytes freePost-Run: 27,525,718,016 bytes free.- - End Of File - - 10DF9887752944883742C78807B0B627.DDS (Ver_11-03-05.01) - NTFSx86 Run by Dennis at 12:52:05.46 on Thu 06/23/2011Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_26Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.881 [GMT -4:00].AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}FW: McAfee Firewall *Enabled* .============== Running Processes ===============.C:\WINDOWS\system32\svchost.exe -k DcomLaunchsvchost.exeC:\Program Files\Sandboxie\SbieSvc.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Acronis\Schedule2\schedul2.exeC:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exeC:\Program Files\Flip Video\FlipShare\FlipShareService.exeC:\Program Files\Flip Video\FlipShareServer\FlipShareServer.exeC:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exeC:\Program Files\McAfee\SiteAdvisor\McSACore.exeC:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exeC:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exeC:\WINDOWS\System32\HPZipm12.exeC:\Program Files\Analog Devices\SoundMAX\spkrmon.exeC:\WINDOWS\System32\svchost.exe -k imgsvcC:\Program Files\Common Files\McAfee\SystemCore\mcshield.exeC:\Program Files\Common Files\McAfee\SystemCore\mfefire.exeC:\WINDOWS\System32\svchost.exe -k HTTPFilterC:\WINDOWS\system32\dla\tfswctrl.exeC:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exeC:\Program Files\McAfee.com\Agent\mcagent.exeC:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exeC:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeC:\Program Files\Common Files\Java\Java Update\jusched.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Sandboxie\SbieCtrl.exeC:\Documents and Settings\Dennis\Application Data\Dropbox\bin\Dropbox.exeC:\WINDOWS\explorer.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\Dennis\Desktop\dds.scr.============== Pseudo HJT Report ===============.uStart Page = about:blankuInternet Connection Wizard,ShellNext = iexploreuSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%suURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dllBHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dllBHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dllBHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~3\office14\GROOVEEX.DLLBHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20110604224133.dllBHO: Catcher Class: {adecbed6-0366-4377-a739-e69dfba04663} - c:\program files\moyea\flv downloader\MoyeaCth.dllBHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dllBHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~3\office14\URLREDIR.DLLBHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dllBHO: CAdBlocker Object: {e24ad748-155e-4254-b674-4edf86e7e1df} - c:\progra~1\acronis\privac~1\Blocker.dllBHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllBHO: {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - No FileTB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dllTB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No FileEB: {32683183-48a0-441b-a342-7c2a440a9478} - No FileuRun: [sandboxieControl] "c:\program files\sandboxie\SbieCtrl.exe"mRun: [dla] c:\windows\system32\dla\tfswctrl.exemRun: [storageGuard] "c:\program files\common files\sonic\update manager\sgtray.exe" /rmRun: [Acronis Scheduler2 Service] "c:\program files\common files\acronis\schedule2\schedhlp.exe"mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottimemRun: [mcui_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkeymRun: [Monitor] "c:\program files\leapfrog\leapfrog connect\Monitor.exe"mRun: [bCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServicesmRun: [Carbonite Backup] c:\program files\carbonite\carbonite backup\CarboniteUI.exemRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttraymRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"StartupFolder: c:\docume~1\dennis\startm~1\programs\startup\dropbox.lnk - c:\documents and settings\dennis\application data\dropbox\bin\Dropbox.exeIE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office14\EXCEL.EXE/3000IE: Se&nd to OneNote - c:\progra~1\micros~3\office14\ONBttnIE.dll/105IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exeIE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exeIE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dllIE: {2E071ADC-ADF8-4b4b-8ACB-EDC49E6D45A2} - {2E071ADC-ADF8-4b4b-8ACB-EDC49E6D45A2} - c:\progra~1\acronis\privac~1\Blocker.dllIE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dllTrusted Zone: internetTrusted Zone: intuit.com\ttlcTrusted Zone: mcafee.comDPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cabDPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos-beta/OnlineScanner.cabDPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cabDPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cabDPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cabFilter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLLHandler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dllHandler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dllNotify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLLSEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLLSEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~3\office14\GROOVEEX.DLL.================= FIREFOX ===================.FF - ProfilePath - c:\docume~1\dennis\applic~1\mozilla\firefox\profiles\f0hdd127.default\FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=18&q=FF - prefs.js: browser.search.selectedEngine - GoogleFF - prefs.js: browser.startup.homepage - hxxp://FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=mcafee&p=FF - plugin: c:\progra~1\micros~3\office14\NPAUTHZ.DLLFF - plugin: c:\progra~1\micros~3\office14\NPSPWRAP.DLLFF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dllFF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dllFF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dllFF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dllFF - plugin: c:\program files\mcafee\supportability\mvt\NPMVTPlugin.dllFF - plugin: c:\program files\microsoft silverlight\4.0.60531.0\npctrlui.dllFF - plugin: c:\windows\system32\superadblocker.com\npsabffx.dll.---- FIREFOX POLICIES ----FF - user.js: yahoo.ytff.general.dontshowhpoffer - true.============= SERVICES / DRIVERS ===============.R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2007-2-2 387480]R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [2010-8-1 84200]R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2008-2-29 12872]R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2008-2-29 67656]R2 FlipShareServer;FlipShare Server;c:\program files\flip video\flipshareserver\FlipShareServer.exe [2010-12-15 1085440]R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2010-2-12 366640]R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2008-11-14 88176]R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-8-1 271480]R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-8-1 271480]R2 McProxy;McAfee Proxy Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-8-1 271480]R2 McShield;McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2010-8-1 171168]R2 mfefire;McAfee Firewall Core Service;c:\program files\common files\mcafee\systemcore\mfefire.exe [2010-8-1 188136]R2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\common files\mcafee\systemcore\mfevtps.exe [2010-8-1 141792]R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-8-1 56064]R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-2-12 22712]R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2007-2-2 153280]R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2007-2-2 52320]R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-8-1 314088]R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [2010-8-1 88736]R3 SbieDrv;SbieDrv;c:\program files\sandboxie\SbieDrv.sys [2011-3-24 126696]R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2008-5-6 11520]S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\tffsmon.sys --> c:\windows\system32\drivers\TfFsMon.sys [?]S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\tfsysmon.sys --> c:\windows\system32\drivers\TfSysMon.sys [?]S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2009-9-30 133104]S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [2010-12-26 18560]S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2009-9-30 133104]S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [2010-8-1 88736]S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-8-1 84488]S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2007-2-2 34248]S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2007-2-2 40552]S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2010-3-25 30969208]S3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2006-2-16 12872]S3 TfNetMon;TfNetMon;\??\c:\windows\system32\drivers\tfnetmon.sys --> c:\windows\system32\drivers\TfNetMon.sys [?]S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504].=============== Created Last 30 ================.2011-06-23 02:47:40 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl2011-06-23 00:05:19 105472 -c----w- c:\windows\system32\dllcache\mup.sys2011-06-06 16:55:30 183696 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll2011-06-05 02:41:33 24376 ----a-w- c:\program files\mozilla firefox\components\Scriptff.dll2011-06-05 00:38:00 -------- d-----w- c:\program files\ESET2011-05-28 23:55:04 -------- dc----r- C:\Sandbox2011-05-28 23:53:47 -------- d-----w- c:\program files\Sandboxie2011-05-27 17:09:18 -------- d-sh--w- c:\documents and settings\dennis\PrivacIE2011-05-27 11:05:57 -------- d-sh--w- c:\documents and settings\dennis\IETldCache2011-05-27 00:57:18 -------- d-----w- c:\windows\ie8updates2011-05-27 00:51:45 -------- dc-h--w- c:\windows\ie82011-05-27 00:46:58 7680 -c----w- c:\windows\system32\dllcache\iecompat.dll2011-05-27 00:46:54 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll2011-05-27 00:46:53 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll2011-05-27 00:46:52 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll2011-05-27 00:46:50 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll2011-05-27 00:46:49 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll2011-05-27 00:46:48 1991680 -c----w- c:\windows\system32\dllcache\iertutil.dll2011-05-27 00:46:45 11081728 -c----w- c:\windows\system32\dllcache\ieframe.dll.==================== Find3M ====================.2011-05-13 04:57:07 0 ----a-w- c:\windows\Griku.bin2011-05-04 08:52:22 472808 ----a-w- c:\windows\system32\deployJava1.dll2011-05-04 06:25:49 73728 ----a-w- c:\windows\system32\javacpl.cpl2011-05-02 15:31:52 692736 ----a-w- c:\windows\system32\inetcomm.dll2011-04-25 16:11:12 916480 ----a-w- c:\windows\system32\wininet.dll2011-04-25 16:11:11 43520 ------w- c:\windows\system32\licmgr10.dll2011-04-25 16:11:11 1469440 ------w- c:\windows\system32\inetcpl.cpl2011-04-25 12:01:22 385024 ------w- c:\windows\system32\html.iec2001-05-24 16:59:30 162304 ----a-w- c:\program files\UNWISE.EXE.============= FINISH: 12:56:08.53 =============== Link to post Share on other sites More sharing options...
Geographer Posted June 23, 2011 Author ID:444801 Share Posted June 23, 2011 I reset the router. Btw, the instructions provided might need to be amended to say that you need to reinstall your router setup after you reset it. I don't know if the combofix did it or the router reset did it, but it appears that I am NOT getting the redirects in Firefox anymore.How do I prevent malware from 'infecting' my router? Link to post Share on other sites More sharing options...
Staff screen317 Posted June 27, 2011 Staff ID:446097 Share Posted June 27, 2011 Hi,First let's make sure everything is gone.Next, please run a free online scan with the ESET Online ScannerNote: You will need to use Internet Explorer for this scan.Tick the box next to YES, I accept the Terms of Use.Click StartWhen asked, allow the ActiveX control to installClick StartMake sure that the options Remove found threats and the option Scan unwanted applications is checkedClick ScanWait for the scan to finishUse Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txtCopy and paste that log as a reply to this topicNext, download my Security Check from here or here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.Let me know how things are running now and what issues remain.-screen317 Link to post Share on other sites More sharing options...
Geographer Posted July 2, 2011 Author ID:448391 Share Posted July 2, 2011 Results of screen317's Security Check version 0.99.17 Windows XP Service Pack 3 Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: Windows Firewall Disabled! ESET Online Scanner v3 McAfee AntiVirus Plus McAfee Virtual Technician ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware Java 6 Update 26 Adobe Flash Player 10.3.181.26 Adobe Reader X (10.1.0) ```````````````````````````````` Process Check: objlist.exe by Laurent Malwarebytes' Anti-Malware mbamservice.exe Malwarebytes' Anti-Malware mbamgui.exe ESET ESET Online Scanner OnlineCmdLineScanner.exe ``````````End of Log```````````` Link to post Share on other sites More sharing options...
Geographer Posted July 2, 2011 Author ID:448508 Share Posted July 2, 2011 ESETSmartInstaller@High as CAB hook log:OnlineScanner.ocx - registred OK# version=7# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)# OnlineScanner.ocx=1.0.0.6522# api_version=3.0.2# EOSSerial=befee2d67ddaab4bb18ba2449d5a388f# end=finished# remove_checked=true# archives_checked=true# unwanted_checked=true# unsafe_checked=true# antistealth_checked=true# utc_time=2011-06-05 03:51:12# local_time=2011-06-04 11:51:12 (-0500, Eastern Daylight Time)# country="United States"# lang=9# osver=5.1.2600 NT Service Pack 3# compatibility_mode=512 16777215 100 0 0 0 0 0# compatibility_mode=5121 16777173 100 75 1061038 36388546 0 0# compatibility_mode=8192 67108863 100 0 0 0 0 0# scanned=116685# found=0# cleaned=0# scan_time=11449# version=7# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)# OnlineScanner.ocx=1.0.0.6522# api_version=3.0.2# EOSSerial=befee2d67ddaab4bb18ba2449d5a388f# end=finished# remove_checked=true# archives_checked=true# unwanted_checked=true# unsafe_checked=true# antistealth_checked=true# utc_time=2011-07-01 02:29:49# local_time=2011-06-30 10:29:49 (-0500, Eastern Daylight Time)# country="United States"# lang=1033# osver=5.1.2600 NT Service Pack 3# compatibility_mode=512 16777215 100 0 0 0 0 0# compatibility_mode=5121 16777173 100 75 3302311 38629819 0 0# compatibility_mode=8192 67108863 100 0 1319819 1319819 0 0# scanned=122952# found=0# cleaned=0# scan_time=11695# version=7# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)# OnlineScanner.ocx=1.0.0.6522# api_version=3.0.2# EOSSerial=befee2d67ddaab4bb18ba2449d5a388f# end=finished# remove_checked=true# archives_checked=true# unwanted_checked=true# unsafe_checked=true# antistealth_checked=true# utc_time=2011-07-02 09:47:52# local_time=2011-07-02 05:47:52 (-0500, Eastern Daylight Time)# country="United States"# lang=1033# osver=5.1.2600 NT Service Pack 3# compatibility_mode=512 16777215 100 0 0 0 0 0# compatibility_mode=5121 16777173 100 75 3457434 38784942 0 0# compatibility_mode=8192 67108863 100 0 1474942 1474942 0 0# scanned=118397# found=0# cleaned=0# scan_time=12455As far as the computer operation, everything appears to be running normally. I have not gotten a browser hijack since I reset the router and ran combofix. Link to post Share on other sites More sharing options...
Staff screen317 Posted July 6, 2011 Staff ID:449843 Share Posted July 6, 2011 Great!Navigate to Start --> Run, and type Combofix /uninstall in the box that appears. Click OK afterward. Notice the space between the X and the /uninstallThis uninstalls all of ComboFix's components.Delete SecurityCheck.I highly recommend the PRO version of MBAM; with it, it's likely that this issue would have been prevented in the first place.Now that your computer seems to be in proper working order, please take the following steps to help prevent reinfection:1) Download and install Javacool's SpywareBlaster, which will prevent malware from being installed on your computer. A tutorial on it can be found here.2) Go to Windows Update frequently to get all of the latest updates (security or otherwise) for Windows.3) Make sure your programs are up to date! Older versions may contain security risks. To find out what programs need to be updated, please run Secunia's Software Inspector.4) WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:Green to go Yellow for caution Red to stop WOT has an addon available for both Firefox and IE.5) Be sure to update your Antivirus and Antispyware programs often!Finally, please also take the time to read Tony Klein's excellent article on: So How Did I Get Infected in the First Place?Safe surfing,-screen317 Link to post Share on other sites More sharing options...
Geographer Posted July 10, 2011 Author ID:451862 Share Posted July 10, 2011 ok, will do, and thanks immensely for all your help Link to post Share on other sites More sharing options...
Staff screen317 Posted July 14, 2011 Staff ID:453609 Share Posted July 14, 2011 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts