Jump to content

Folders CrashDump and NativeFus_Log placed in Documents

Tony_The_Kid
 Share

Recommended Posts

Tony_The_Kid

Tony_The_Kid

Posted
Posted

Hello everyone:

I've been researching on this problem for the last few days and I thought you could help me guys. The thing is somehow and suddenly two new folders have appeared on my 'Documents' folder these are named 'NativeFus_Log' and 'CrashDump'. I have not created them. If I delete them they keep appearing back. In 'properties' they appear as 'shared' and that is what really scares me. Am I being tracked or is there someone spying everything I do with my PC just waiting to pounce on it and hijack it? I've run my antivirus (after updating it) and it found nothing. Spybot detected some minor problems and they must be fixed by now. Malwarebytes Anti-Malware detected nothing. What can I do? Are those folders harmful or not? Thanks for your help in advance.

Tony

  • Confused 1
Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Hello Tony and :welcome:! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

  • If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  • I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  • Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  • Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  • Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  • Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Please follow the instructions here and post the log files in your next reply:

http://forums.malwarebytes.org/index.php?showtopic=9573

Link to post
Share on other sites
Tony_The_Kid

Tony_The_Kid

Posted
  • Author
Posted

Many thanks for your help Maniac. Here you have the first log: Attach.txt

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Ultimate

Boot Device: \Device\HarddiskVolume2

Install Date: 19/06/2011 16:03:39

System Uptime: 08/12/2012 11:50:36 (0 hours ago)

.

Motherboard: TOSHIBA | | ISKAA

Processor: Intel® Pentium® Dual CPU T2310 @ 1.46GHz | U2E1 | 1467/mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 110 GiB total, 61,722 GiB free.

D: is CDROM ()

E: is CDROM ()

.

==== Disabled Device Manager Items =============

.

Class GUID:

Description: Controladora de dispositivo de almacenamiento

Device ID: PCI\VEN_104C&DEV_803B&SUBSYS_FF021179&REV_00\4&2811837F&0&22F0

Manufacturer:

Name: Controladora de dispositivo de almacenamiento

PNP Device ID: PCI\VEN_104C&DEV_803B&SUBSYS_FF021179&REV_00\4&2811837F&0&22F0

Service:

.

==== System Restore Points ===================

.

RP148: 23/11/2012 13:57:57 - Windows Update

RP149: 24/11/2012 22:06:53 - Windows Update

RP150: 30/11/2012 16:42:22 - Windows Update

RP151: 04/12/2012 14:58:41 - Windows Update

RP152: 05/12/2012 10:44:48 - Windows Update

.

==== Installed Programs ======================

.

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader X (10.1.4) - Español

Angry Birds Space

AoA Audio Extractor

µTorrent

aTube Catcher

Audiograbber 1.83 SE

Audiograbber MP3 Plugin

avast! Free Antivirus

Canon MP Navigator EX 3.0

Canon MP490 series MP Drivers

Canon My Printer

CCleaner

Content Transfer

Cool Edit Pro 2.1

D3DX10

DAEMON Tools Lite

Dropbox

DVD Decrypter (Remove Only)

DVD Shrink 3.2

EVEREST Ultimate Edition v5.50

Glary Utilities 2.51.0.1666

Google Chrome

ImgBurn

Intel® Graphics Media Accelerator Driver

Intel® TV Wizard

Java 7 Update 7

Java Auto Updater

Java 6 Update 22

Java 6 Update 31

KigoVideoConverter 1.1.1

Los Sims 2

Malwarebytes Anti-Malware versión 1.65.1.1000

Microsoft Application Error Reporting

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (Spanish) 2007

Microsoft Office Enterprise 2007

Microsoft Office Excel MUI (Spanish) 2007

Microsoft Office File Validation Add-In

Microsoft Office Groove MUI (Spanish) 2007

Microsoft Office InfoPath MUI (Spanish) 2007

Microsoft Office OneNote MUI (Spanish) 2007

Microsoft Office Outlook MUI (Spanish) 2007

Microsoft Office PowerPoint MUI (Spanish) 2007

Microsoft Office Proof (Basque) 2007

Microsoft Office Proof (Catalan) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Galician) 2007

Microsoft Office Proof (Portuguese (Brazil)) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (Spanish) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (Spanish) 2007

Microsoft Office Shared MUI (Spanish) 2007

Microsoft Office Word MUI (Spanish) 2007

Microsoft Silverlight

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Mozilla Firefox 17.0.1 (x86 es-ES)

Mozilla Maintenance Service

MSVCRT

MyFreeCodec

PhotoScape

Plantas Contra Zombis

RealNetworks - Microsoft Visual C++ 2008 Runtime

RealPlayer

RealUpgrade 1.1

Samsung Kies

SAMSUNG USB Driver for Mobile Phones

Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687314) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition

Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition

Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition

Security Update for Microsoft Office Word 2007 (KB2687315) 32-Bit Edition

Skype™ 5.10

Spotify

Spybot - Search & Destroy

Synaptics Pointing Device Driver

The KMPlayer (remove only)

TVersity Codec Pack 1.7

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2760413) 32-Bit Edition

VLC media player 2.0.2

Winamp

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Messenger

Windows Live Photo Common

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

WinRAR 4.01 (32-bit)

Xiph.Org Open Codecs 0.85.17777

.

==== Event Viewer Messages From Past Week ========

.

08/12/2012 11:51:47, Error: Service Control Manager [7009] - Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Windows Live ID Sign-in Assistant.

08/12/2012 11:51:47, Error: Service Control Manager [7000] - El servicio Windows Live ID Sign-in Assistant no pudo iniciarse debido al siguiente error: El servicio no respondió a tiempo a la solicitud de inicio o de control.

05/12/2012 10:35:29, Error: Service Control Manager [7031] - El servicio Windows Search terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 30000 milisegundos: Reiniciar el servicio.

05/12/2012 10:35:29, Error: Service Control Manager [7024] - El servicio Windows Search se cerró con el error específico de servicio %%-1073473535.

03/12/2012 0:23:27, Error: Service Control Manager [7011] - Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio avast! Antivirus.

.

==== End Of File ===========================

Link to post
Share on other sites
Tony_The_Kid

Tony_The_Kid

Posted
  • Author
Posted

And there you are the second one: DDS.txt

DDS (Ver_2012-11-20.01) - NTFS_x86

Internet Explorer: 9.0.8112.16455 BrowserJavaVersion: 10.7.2

Run by gus at 11:57:37 on 2012-12-08

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.34.3082.18.2038.1012 [GMT 1:00]

.

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ================

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\Samsung\USB Drivers\26_VIA_driver2\x86\VIAService.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\Synaptics\SynTP\SynToshiba.exe

C:\Program Files\Real\RealPlayer\Update\realsched.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

C:\Windows\system32\SearchIndexer.exe

C:\Users\gus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Program Files\Samsung\Kies\Kies.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Users\gus\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\gus\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\gus\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\gus\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\gus\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\servicing\TrustedInstaller.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\System32\svchost.exe -k secsvcs

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=ES&userid=ecaf8b72-261e-4ada-a0cb-8f1c426518f5&affid=111585&searchtype=hp&babsrc=lnkry_nt

uSearch Bar = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=ES&userid=ecaf8b72-261e-4ada-a0cb-8f1c426518f5&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms}

uSearch Page = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=ES&userid=ecaf8b72-261e-4ada-a0cb-8f1c426518f5&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms}

uSearchAssistant = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=ES&userid=ecaf8b72-261e-4ada-a0cb-8f1c426518f5&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms}

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\programdata\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll

BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll

BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll

BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll

TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll

uRun: [spybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe

uRun: [KiesPDLR] c:\program files\samsung\kies\external\firmwareupdate\KiesPDLR.exe

uRun: [spotify Web Helper] "c:\users\gus\appdata\roaming\spotify\data\SpotifyWebHelper.exe"

uRun: [KiesAirMessage] c:\program files\samsung\kies\KiesAirMessage.exe -startup

uRun: [KiesPreload] c:\program files\samsung\kies\Kies.exe /preload

uRun: [] c:\program files\samsung\kies\external\firmwareupdate\KiesPDLR.exe

mRun: [KiesTrayAgent] c:\program files\samsung\kies\KiesTrayAgent.exe

mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui

mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe

mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"

mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-System: ConsentPromptBehaviorAdmin = dword:0

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableLUA = dword:0

mPolicies-System: EnableUIADesktopToggle = dword:0

mPolicies-System: PromptOnSecureDesktop = dword:0

IE: E&xportar a Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll

DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

TCP: NameServer = 80.58.61.250 80.58.61.254

TCP: Interfaces\{3D7F2FCF-BC6A-4C80-B3AB-C2E7FE2D3A7F} : DHCPNameServer = 80.58.61.250 80.58.61.254

TCP: Interfaces\{F15C96B2-14AF-4CAE-90FB-432E5966BDEE} : DHCPNameServer = 80.58.61.250 80.58.61.254

TCP: Interfaces\{F15C96B2-14AF-4CAE-90FB-432E5966BDEE}\14E64627F696461405 : DHCPNameServer = 192.168.43.1

TCP: Interfaces\{F15C96B2-14AF-4CAE-90FB-432E5966BDEE}\5736F6E65647 : DHCPNameServer = 150.214.110.3 150.214.110.60

TCP: Interfaces\{F15C96B2-14AF-4CAE-90FB-432E5966BDEE}\75C414E4F53454 : DHCPNameServer = 80.58.61.250 80.58.61.254

TCP: Interfaces\{F15C96B2-14AF-4CAE-90FB-432E5966BDEE}\942656272616E6461623 : DHCPNameServer = 192.168.1.1

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll

Notify: igfxcui - igfxdev.dll

SSODL: WebCheck - <orphaned>

SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\users\gus\appdata\roaming\mozilla\firefox\profiles\zzpidlkn.default\

FF - prefs.js: browser.startup.homepage - www.google.es

FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll

FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll

FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll

FF - plugin: c:\program files\real\realplayer\netscape6\nprpplugin.dll

FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll

FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll

FF - plugin: c:\users\gus\appdata\local\google\update\1.3.21.123\npGoogleUpdate3.dll

FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_287.dll

FF - plugin: c:\windows\system32\npDeployJava1.dll

FF - plugin: c:\windows\system32\npmproxy.dll

FF - ExtSQL: 2012-10-09 12:19; {0153E448-190B-4987-BDE1-F256CADA672F}; c:\programdata\real\realplayer\browserrecordplugin\firefox\Ext

FF - ExtSQL: 2012-11-09 10:26; wrc@avast.com; c:\program files\avast software\avast\webrep\FF

.

============= SERVICES / DRIVERS ===============

.

R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-11-1 738504]

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-11-1 361032]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-8-28 242240]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-11-1 21256]

R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-11-1 58680]

R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-11-9 44808]

R2 CDMA Device Service;CDMA Device Service;c:\program files\samsung\usb drivers\26_via_driver2\x86\VIAService.exe [2011-9-6 63488]

R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2011-6-19 1153368]

R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-3-1 139776]

S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-7-13 160944]

S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [2011-9-6 30312]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-11-18 14848]

S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2011-9-6 121064]

S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2011-9-6 12776]

S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2011-9-6 136808]

S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [2011-9-6 114280]

S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-11-18 49664]

.

=============== Created Last 30 ================

.

2012-12-07 13:35:43 6812136 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{ce684c4c-04d2-480a-ac70-0ce918caa07c}\mpengine.dll

2012-12-02 13:10:43 -------- d-----w- c:\program files\KigoVideoConverter

2012-12-02 12:13:50 -------- d-----w- c:\users\gus\appdata\roaming\OpenCandy

2012-12-02 12:13:50 -------- d-----w- c:\program files\Freemake

2012-11-21 19:56:46 -------- d-----w- c:\program files\EA GAMES

2012-11-21 19:56:45 442368 ----a-r- c:\windows\system32\vp6vfw.dll

2012-11-21 15:42:29 33104 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\msonpppr.dll

2012-11-21 15:42:28 31640 ----a-w- c:\windows\system32\msonpmon.dll

2012-11-21 15:35:38 -------- d-----w- c:\program files\Microsoft Visual Studio 8

2012-11-21 15:34:34 -------- d-----w- c:\users\gus\appdata\local\Microsoft Help

2012-11-18 12:46:02 12288 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2012-11-18 12:46:00 14848 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys

2012-11-18 12:43:49 499712 ----a-w- c:\windows\system32\iphlpsvc.dll

2012-11-18 12:43:49 156672 ----a-w- c:\windows\system32\ncsi.dll

2012-11-18 12:43:49 1293680 ----a-w- c:\windows\system32\drivers\tcpip.sys

2012-11-18 12:43:48 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys

2012-11-18 12:43:48 242176 ----a-w- c:\windows\system32\nlasvc.dll

2012-11-18 12:43:48 175104 ----a-w- c:\windows\system32\netcorehc.dll

2012-11-18 12:43:47 52224 ----a-w- c:\windows\system32\nlaapi.dll

2012-11-18 12:43:47 18944 ----a-w- c:\windows\system32\netevent.dll

2012-11-18 12:43:32 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll

2012-11-18 12:43:32 193536 ----a-w- c:\windows\system32\dhcpcore6.dll

2012-11-15 17:35:02 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2012-11-15 17:35:02 140960 ----a-w- c:\program files\internet explorer\sqmapi.dll

2012-11-15 17:35:01 420864 ----a-w- c:\windows\system32\vbscript.dll

2012-11-15 17:35:01 194048 ----a-w- c:\program files\internet explorer\IEShims.dll

2012-11-15 17:35:00 142848 ----a-w- c:\windows\system32\ieUnatt.exe

2012-11-15 17:33:41 78336 ----a-w- c:\windows\system32\synceng.dll

2012-11-15 17:33:06 2345984 ----a-w- c:\windows\system32\win32k.sys

.

==================== Find3M ====================

.

2012-10-30 22:51:58 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2012-10-30 22:51:57 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

2012-10-30 22:51:07 41224 ----a-w- c:\windows\avastSS.scr

2012-10-16 07:39:52 561664 ----a-w- c:\windows\apppatch\AcLayers.dll

2012-10-15 16:59:28 44784 ----a-w- c:\windows\system32\drivers\aswRdr2.sys

2012-10-09 10:18:50 499712 ----a-w- c:\windows\system32\msvcp71.dll

2012-10-09 10:18:50 348160 ----a-w- c:\windows\system32\msvcr71.dll

2012-10-09 10:13:34 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-10-09 10:13:34 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-10-08 07:56:24 1800704 ----a-w- c:\windows\system32\jscript9.dll

2012-10-08 07:48:03 1129472 ----a-w- c:\windows\system32\wininet.dll

2012-10-08 07:47:44 1427968 ----a-w- c:\windows\system32\inetcpl.cpl

2012-09-29 18:54:26 22856 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-09-26 11:57:14 45320 ----a-w- c:\windows\system32\MAMACExtract.dll

2012-09-14 18:28:53 2048 ----a-w- c:\windows\system32\tzres.dll

.

============= FINISH: 11:58:34,29 ===============

Link to post
Share on other sites
Tony_The_Kid

Tony_The_Kid

Posted
  • Author
Posted

The folder named NativeFus_Log is part of Samsung Kies software. About the another folder is difficult to told you. It comes from a program which generate a dump file that would help their developers to fix any crashes.

So do you think I'm safe? No weird things running on my laptop? No one spying on it? That would be a relief.

Thanks for everything again Maniac. Help really appreciated.

Link to post
Share on other sites
  • 3 weeks later...
  • Staff
screen317

screen317

Posted
  • Staff
Posted

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.