Firefox & IE Redirecting to unknown/unwanted search engine

AFirebaugh · September 21, 2012

Today my mother used my laptop while I was at a meeting and when I returned home she said that my homepage, google.com, was not pulling up when she tried to start Firefox or IE. Instead it says that there was a problem with the program and if a solution is found I would be notified then another search engine starts. I cannot open internet options to change my homepage, nor can I open any of the windows security features. I'm not sure if this is some sort of redirect virus or what since everything I've seen so far on those are the search result links in google redirect to another site that had nothing to do with the search. I ran the malware scan and it showed 4 threats and after the restart it said they were removed, however the same issue is happening. I'm lost!

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_35

Run by owner at 3:51:01 on 2012-09-21

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1580 [GMT -4:00]

.

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe

C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe

C:\Windows\system32\svchost.exe -k hpdevmgmt

C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe

C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\SMINST\BLService.exe

C:\Program Files\CyberLink\Shared files\RichVideo.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\DRIVERS\xaudio.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Windows\system32\igfxsrvc.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\HP\QuickPlay\QPService.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe

c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtblfs.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_278.exe

C:\Windows\system32\DllHost.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/

uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb

mStart Page = hxxp://news.searchonme.com/

mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb

uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll

BHO: MRI_DISABLED - No File

BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll

BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Canon Easy-WebPrint EX BHO: {3785d0ad-bfff-47f6-bf5b-a587c162fed9} - c:\program files\canon\easy-webprint ex\ewpexbho.dll

BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll

BHO: Java Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll

BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll

BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll

TB: Microsoft Live Search Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll

TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll

TB: Canon Easy-WebPrint EX: {759d9886-0c6f-4498-bab6-4a5f47c6c72f} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll

TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File

EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll

EB: Canon Easy-WebPrint EX: {21347690-ec41-4f9a-8887-1f4aee672439} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll

uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe

uRun: [PhotoshopElements8SyncAgent] c:\program files\adobe\elements organizer 8.0\ElementsOrganizerSyncAgent.exe

uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet

mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe

mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe"

mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe

mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe

mRun: [<NO NAME>]

mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon

mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [igfxTray] c:\windows\system32\igfxtray.exe

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [CarboniteSetupLite] "c:\program files\carbonite\CarbonitePreinstaller.exe" /preinstalled /showonfirst /reshowat=900

mRun: [MaxMenuMgr] "c:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe"

mRun: [AVP] "c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe"

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

StartupFolder: c:\users\owner\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe

StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe

uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)

mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: Add to Video Converter... - c:\program files\media player utilities 5.22\aviconverter\grab.html

IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll

IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL

IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll

IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll

DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemydsl.verizon.net/sdcCommon/download/DSL/Verizon%20High%20Speed%20Internet%20Installer.cab

DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab

DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab

DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll

DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab

DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab

DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab

DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} - hxxp://www.photodex.com/pxplay.cab

DPF: {D8AA889B-2C65-47C3-8C16-3DCD4EF76A47}

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: DhcpNameServer = 75.75.75.75 75.75.76.76

TCP: Interfaces\{5BFE09BE-457F-46D2-8C44-E2109BE37AEF} : DhcpNameServer = 75.75.75.75 75.75.76.76

TCP: Interfaces\{CA1C5711-860D-4A79-B755-7CB579CEDBEA} : DhcpNameServer = 68.87.64.230 68.87.66.234

Notify: igfxcui - igfxdev.dll

Notify: klogon - c:\windows\system32\klogon.dll

AppInit_DLLs: c:\progra~1\sprote~1\sprote~1.dll

mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\users\owner\appdata\roaming\mozilla\firefox\profiles\ehpubqd6.default\

FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q=

FF - prefs.js: browser.search.selectedEngine - SearchOnMe

FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/

FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q=

FF - prefs.js: network.proxy.type - 0

FF - plugin: c:\program files\canon\easy-photoprint ex\NPEZFFPI.DLL

FF - plugin: c:\program files\canon\mycamera download plugin\NPCIG.dll

FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll

FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll

FF - plugin: c:\users\owner\appdata\locallow\unity\webplayer\loader\npUnity3D32.dll

FF - plugin: c:\users\owner\appdata\roaming\mozilla\plugins\npPxPlay.dll

FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_278.dll

FF - plugin: c:\windows\system32\npdeployJava1.dll

FF - plugin: c:\windows\system32\npmproxy.dll

.

============= SERVICES / DRIVERS ===============

.

R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352]

R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2011-3-10 23856]

R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\adobe\elements organizer 8.0\PhotoshopElementsFileAgent.exe [2009-9-6 169312]

R2 AVP;Kaspersky Anti-Virus Service;c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r --> c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r [?]

R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]

R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2009-12-18 189736]

R2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\verizon\iha_messagecenter\bin\Verizon_IHAMessageCenter.exe [2011-12-12 290832]

R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-9-21 399432]

R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-9-21 676936]

R2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\sminst\BLService.exe [2009-4-22 365952]

R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-6-29 112128]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-9-21 22856]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 Norton Internet Security;Norton Internet Security;"c:\program files\norton internet security\engine\16.0.0.125\ccsvchst.exe" /s "norton internet security" /m "c:\program files\norton internet security\engine\16.0.0.125\dimaster.dll" /prefetch:1 --> c:\program files\norton internet security\engine\16.0.0.125\ccSvcHst.exe [?]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-5-25 250288]

S3 Com4QLBEx;Com4QLBEx;c:\program files\hewlett-packard\hp quick launch buttons\Com4QLBEx.exe [2009-4-22 193840]

S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984]

S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-6-7 113120]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

.

=============== Created Last 30 ================

.

2012-09-21 06:35:34 -------- d-----w- c:\users\owner\appdata\roaming\Malwarebytes

2012-09-21 06:35:13 -------- d-----w- c:\programdata\Malwarebytes

2012-09-21 06:35:09 22856 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-09-21 06:35:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2012-09-21 06:33:35 477168 ----a-w- c:\windows\system32\npdeployJava1.dll

2012-09-21 05:59:35 6980552 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{a7b63c3d-ac3c-41c9-8c97-6c53ae632628}\mpengine.dll

2012-09-19 23:08:26 -------- d-----w- c:\programdata\Premium

2012-09-19 23:07:37 -------- d-----w- c:\program files\SProtector

2012-09-19 23:06:36 -------- d-----w- c:\programdata\InstallMate

.

==================== Find3M ====================

.

2012-09-21 06:32:44 473072 ----a-w- c:\windows\system32\deployJava1.dll

2012-09-20 20:59:24 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-09-20 20:59:24 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-07-04 14:02:46 2047488 ----a-w- c:\windows\system32\win32k.sys

2012-06-29 00:16:58 1800704 ----a-w- c:\windows\system32\jscript9.dll

2012-06-29 00:09:01 1129472 ----a-w- c:\windows\system32\wininet.dll

2012-06-29 00:08:59 1427968 ----a-w- c:\windows\system32\inetcpl.cpl

2012-06-29 00:04:43 142848 ----a-w- c:\windows\system32\ieUnatt.exe

2012-06-29 00:00:45 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2012-06-28 19:39:17 260 ----a-w- c:\windows\system32\cmdVBS.vbs

2012-06-28 19:39:17 256 ----a-w- c:\windows\system32\MSIevent.bat

.

============= FINISH: 3:52:01.50 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft® Windows Vista™ Home Premium

Boot Device: \Device\HarddiskVolume1

Install Date: 5/16/2009 5:05:14 PM

System Uptime: 9/21/2012 3:00:23 AM (0 hours ago)

.

Motherboard: Wistron | | 3612

Processor: Intel® Celeron® CPU 900 @ 2.20GHz | CPU | 2194/800mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 138 GiB total, 27.924 GiB free.

D: is FIXED (NTFS) - 11 GiB total, 1.831 GiB free.

E: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

==== Installed Programs ======================

.

Update for Microsoft Office 2007 (KB2508958)

Acrobat.com

ActiveCheck component for HP Active Support Library

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Photoshop Elements 8.0

Adobe Photoshop.com Inspiration Browser

Adobe Reader 9.4.0

Adobe Shockwave Player

Amazon MP3 Downloader 1.0.12

Atheros Driver Installation Program

Barnes & Noble Desktop Reader

BufferChm

Canon Easy-WebPrint EX

CANON iMAGE GATEWAY MyCamera Download Plugin

CANON iMAGE GATEWAY Task for ZoomBrowser EX

Canon Inkjet Printer/Scanner/Fax Extended Survey Program

Canon MOV Decoder

Canon MOV Encoder

Canon MovieEdit Task for ZoomBrowser EX

Canon MP Navigator EX 3.0

Canon MP250 series MP Drivers

Canon MP250 series User Registration

Canon Utilities Digital Photo Professional 3.10

Canon Utilities Easy-PhotoPrint EX

Canon Utilities EOS Sample Music

Canon Utilities EOS Utility

Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX

Canon Utilities Movie Uploader for YouTube

Canon Utilities My Printer

Canon Utilities PhotoStitch

Canon Utilities Picture Style Editor

Canon Utilities Solution Menu

Canon Utilities ZoomBrowser EX

Canon ZoomBrowser EX Memory Card Utility

Carbonite Online Backup Setup

Compatibility Pack for the 2007 Office system

Conexant HD Audio

Coupon Printer for Windows

CustomerResearchQFolder

CyberLink DVD Suite

D1500

D1500_Help

DeviceDiscovery

DeviceManagementQFolder

DJ_SF_03_D1500_ProductContext

DJ_SF_03_D1500_Software

DJ_SF_03_D1500_Software_Min

EA Download Manager

ESU for Microsoft Vista

eSupportQFolder

GPBaseService

HDAUDIO Soft Data Fax Modem with SmartCP

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

HP Active Support Library

HP Customer Experience Enhancements

HP Customer Participation Program 10.0

HP Deskjet D1500 Printer Driver Software 10.0 Rel .3

HP Doc Viewer

HP DVD Play 3.7

HP Help and Support

HP Imaging Device Functions 10.0

HP Photosmart Essential 3.5

HP Quick Launch Buttons 6.40 H2

HP Smart Web Printing 4.60

HP Solution Center 10.0

HP Update

HP User Guides 0118

HP Wireless Assistant

HPAsset component for HP Active Support Library

HPNetworkAssistant

HPPhotoSmartDiscLabelContent1

HPPhotosmartEssential

HPProductAssistant

HPSSupply

IHA_MessageCenter

Intel® Graphics Media Accelerator Driver

Invoke Solutions Participant 6.2.0.1452

Java Auto Updater

Java 6 Update 35

Java 6 Update 7

Kaspersky Anti-Virus 2012

LabelPrint

LightScribe System Software 1.14.17.1

Malwarebytes Anti-Malware version 1.65.0.1400

MarketResearch

Media Player Utilities 5.22

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Live Search Toolbar

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Excel MUI (English) 2007

Microsoft Office File Validation Add-In

Microsoft Office Home and Student 2007

Microsoft Office OneNote MUI (English) 2007

Microsoft Office PowerPoint MUI (English) 2007

Microsoft Office PowerPoint Viewer 2007 (English)

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office Word MUI (English) 2007

Microsoft Silverlight

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

Microsoft Works

Microsoft WSE 3.0 Runtime

Mozilla Firefox 14.0.1 (x86 en-US)

Mozilla Maintenance Service

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

muvee Reveal

muvee Reveal Seagate Edition

My HP Games

NetWaiting

Norton Internet Security

OGA Notifier 2.0.0048.0

OpenOffice.org 3.2

Photodex Presenter

Power2Go

PowerDirector

PSSWCORE

Realtek 8169 8168 8101E 8102E Ethernet Driver

RegWork

Seagate Manager Installer

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Extended (KB2416472)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition

Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition

Security Update for Microsoft Office InfoPath 2007 (KB2596786) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition

Shop for HP Supplies

SmartWebPrinting

SolutionCenter

SPORE Creature Creator Trial Edition

sprotector 1.62

Status

Synaptics Pointing Device Driver

System Requirements Lab

The Sims Medieval

The Sims™ 3

The Sims™ 3 Ambitions

The Sims™ 3 High-End Loft Stuff

The Sims™ 3 Late Night

The Sims™ 3 Outdoor Living Stuff

The Sims™ 3 World Adventures

Toolbox

TrayApp

Unity Web Player

UnloadSupport

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft Office 2007 Help for Common Features (KB963673)

Update for Microsoft Office Excel 2007 Help (KB963678)

Update for Microsoft Office OneNote 2007 Help (KB963670)

Update for Microsoft Office Powerpoint 2007 Help (KB963669)

Update for Microsoft Office Script Editor Help (KB963671)

Update for Microsoft Office Word 2007 Help (KB963665)

Verizon High Speed Internet

Verizon Yahoo! Applications

VideoToolkit01

WebReg

.

==== Event Viewer Messages From Past Week ========

.

9/17/2012 7:24:34 PM, Error: EventLog [6008] - The previous system shutdown at 8:29:44 PM on 9/16/2012 was unexpected.

9/15/2012 9:12:23 AM, Error: EventLog [6008] - The previous system shutdown at 11:54:53 AM on 9/13/2012 was unexpected.

.

==== End Of File ===========================

Maniac · September 21, 2012

Hello AFirebaugh and :welcome: ! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
Make sure you read all of the instructions and fixes thoroughly before continuing with them.
Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.

Step 1

Anti-Virus programs take up an enormous amount of your computer's resources when they are actively scanning your computer. Having two anti-virus programs running at the same time can cause your computer to run very slow, become unstable and even, in rare cases, crash. You have: Norton Internet Security and Kaspersky Anti-Virus 2012. Both are paid products, so it is good idea to keep what you pay for and to uninstall the other one. Reboot your PC.

Step 2

Launch Malwarebytes' Anti-Malware
Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
Go to Scanner tab and select Perform Quick Scan, then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.

Step 3

Please download AdwCleaner from here and save it on your Desktop.

Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
Now click on the Search tab.
Please post the contents of the log-file created in your next post.

Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <-- Denotes the number of times the application has been ran, so in this should be something like R1.

Step 4

Download aswMBR.exe to your desktop.

Double click the aswMBR.exe to run it

Click the "Scan" button to start scan

On completion of the scan click save log, save it to your desktop and post in your next reply

In your next reply, post the following log files:

Malwarebytes' Anti-Malware log
AdwCleaner log
aswMBR log
a new fresh DDS log

AFirebaugh · September 21, 2012

I will follow all the directions you just gave me....but first, I may sound really dumb, but I cannot find Norton Internet Security anywhere on my computer. I didn't even know I had it. How can I find it to uninstall it?

AFirebaugh · September 21, 2012

Malwarebytes Anti-Malware (Trial) 1.65.0.1400

www.malwarebytes.org

Database version: v2012.09.21.04

Windows Vista Service Pack 2 x86 NTFS

Internet Explorer 9.0.8112.16421

owner :: OWNER-PC [administrator]

Protection: Enabled

9/21/2012 7:54:16 AM

mbam-log-2012-09-21 (07-54-16).txt

Scan type: Quick scan

Scan options disabled: P2P

Objects scanned: 204843

Time elapsed: 7 minute(s), 40 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

# AdwCleaner v2.002 - Logfile created 09/21/2012 at 08:03:46

# Updated 16/09/2012 by Xplode

# Operating system : Windows Vista Home Premium Service Pack 2 (32 bits)

# User : owner - OWNER-PC

# Boot Mode : Normal

# Running from : C:\Users\owner\Documents\Downloads\adwcleaner.exe

# Option [search]

***** [services] *****

***** [Files / Folders] *****

Folder Found : C:\ProgramData\InstallMate

Folder Found : C:\ProgramData\Premium

***** [Registry] *****

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Key Found : HKU\S-1-5-21-869652560-2776403528-2443925462-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

***** [internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v14.0.1 (en-US)

Profile name : default

File : C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\prefs.js

Found : user_pref("aol_toolbar.default.homepage.check", false);

Found : user_pref("aol_toolbar.default.search.check", false);

Found : user_pref("extensions.BabylonToolbar.prtkDS", 0);

Found : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);

Found : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");

Found : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");

Found : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");

Found : user_pref("sweetim.toolbar.previous.keyword.URL", "");

Found : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");

Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");

Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");

Found : user_pref("sweetim.toolbar.searchguard.enable", "");

*************************

AdwCleaner[R1].txt - [2142 octets] - [21/09/2012 08:03:46]

########## EOF - C:\AdwCleaner[R1].txt - [2202 octets] ##########

Run date: 2012-09-21 08:07:57

-----------------------------

08:07:57.474 OS Version: Windows 6.0.6002 Service Pack 2

08:07:57.474 Number of processors: 1 586 0x170A

08:07:57.480 ComputerName: OWNER-PC UserName: owner

08:08:00.367 Initialize success

08:08:08.126 AVAST engine defs: 12092100

08:08:26.999 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0

08:08:27.001 Disk 0 Vendor: ST9160827AS 3.AHC Size: 152627MB BusType: 3

08:08:27.032 Disk 0 MBR read successfully

08:08:27.035 Disk 0 MBR scan

08:08:27.078 Disk 0 unknown MBR code

08:08:27.090 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 141441 MB offset 2048

08:08:27.116 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 11182 MB offset 289673216

08:08:27.152 Disk 0 scanning sectors +312573952

08:08:27.336 Disk 0 scanning C:\Windows\system32\drivers

08:08:43.987 Service scanning

08:08:45.134 Service ACPI C:\Windows\system32\drivers\acpi.sys **LOCKED** 32

08:08:45.838 Service adp94xx C:\Windows\system32\drivers\adp94xx.sys **LOCKED** 32

08:08:46.301 Service adpahci C:\Windows\system32\drivers\adpahci.sys **LOCKED** 32

08:08:46.370 Service adpu160m C:\Windows\system32\drivers\adpu160m.sys **LOCKED** 32

08:08:46.415 Service adpu320 C:\Windows\system32\drivers\adpu320.sys **LOCKED** 32

08:08:46.550 Service AFD C:\Windows\system32\drivers\afd.sys **LOCKED** 32

08:08:46.639 Service agp440 C:\Windows\system32\drivers\agp440.sys **LOCKED** 32

08:08:46.680 Service aic78xx C:\Windows\system32\drivers\djsvs.sys **LOCKED** 32

08:08:46.753 Service aliide C:\Windows\system32\drivers\aliide.sys **LOCKED** 32

08:08:46.836 Service amdagp C:\Windows\system32\drivers\amdagp.sys **LOCKED** 32

08:08:46.888 Service amdide C:\Windows\system32\drivers\amdide.sys **LOCKED** 32

08:08:46.930 Service AmdK7 C:\Windows\system32\drivers\amdk7.sys **LOCKED** 32

08:08:46.965 Service AmdK8 C:\Windows\system32\drivers\amdk8.sys **LOCKED** 32

08:08:47.089 Service arc C:\Windows\system32\drivers\arc.sys **LOCKED** 32

08:08:47.127 Service arcsas C:\Windows\system32\drivers\arcsas.sys **LOCKED** 32

08:08:47.312 Service AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys **LOCKED** 32

08:08:47.360 Service atapi C:\Windows\system32\drivers\atapi.sys **LOCKED** 32

08:08:47.505 Service athr C:\Windows\system32\DRIVERS\athr.sys **LOCKED** 32

08:08:47.917 Service Beep C:\Windows\System32\Drivers\Beep.sys **LOCKED** 32

08:08:48.262 Service blbdrive C:\Windows\system32\drivers\blbdrive.sys **LOCKED** 32

08:08:48.403 Service BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys **LOCKED** 32

08:08:48.443 Service BrFiltUp C:\Windows\system32\drivers\brfiltup.sys **LOCKED** 32

08:08:48.578 Service Brserid C:\Windows\system32\drivers\brserid.sys **LOCKED** 32

08:08:48.622 Service BrSerWdm C:\Windows\system32\drivers\brserwdm.sys **LOCKED** 32

08:08:48.753 Service BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys **LOCKED** 32

08:08:48.807 Service BrUsbSer C:\Windows\system32\drivers\brusbser.sys **LOCKED** 32

08:08:48.878 Service BTHMODEM C:\Windows\system32\drivers\bthmodem.sys **LOCKED** 32

08:08:48.989 Service cdrom C:\Windows\system32\DRIVERS\cdrom.sys **LOCKED** 32

08:08:49.149 Service circlass C:\Windows\system32\drivers\circlass.sys **LOCKED** 32

08:08:49.255 Service CLFS C:\Windows\System32\CLFS.sys **LOCKED** 32

08:08:49.510 Service CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys **LOCKED** 32

08:08:49.552 Service cmdide C:\Windows\system32\drivers\cmdide.sys **LOCKED** 32

08:08:49.652 Service CnxtHdAudService C:\Windows\system32\drivers\CHDRT32.sys **LOCKED** 32

08:08:49.939 Service Compbatt C:\Windows\system32\DRIVERS\compbatt.sys **LOCKED** 32

08:08:50.006 Service crcdisk C:\Windows\system32\drivers\crcdisk.sys **LOCKED** 32

08:08:50.066 Service Crusoe C:\Windows\system32\drivers\crusoe.sys **LOCKED** 32

08:08:50.894 Service disk C:\Windows\system32\drivers\disk.sys **LOCKED** 32

08:08:51.239 Service drmkaud C:\Windows\system32\drivers\drmkaud.sys **LOCKED** 32

08:08:51.388 Service DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys **LOCKED** 32

08:08:51.493 Service E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys **LOCKED** 32

08:08:51.631 Service Ecache C:\Windows\System32\drivers\ecache.sys **LOCKED** 32

08:08:51.905 Service elxstor C:\Windows\system32\drivers\elxstor.sys **LOCKED** 32

08:08:52.063 Service ErrDev C:\Windows\system32\drivers\errdev.sys **LOCKED** 32

08:08:52.549 Service fdc C:\Windows\system32\DRIVERS\fdc.sys **LOCKED** 32

08:08:53.012 Service flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys **LOCKED** 32

08:08:53.993 Service gagp30kx C:\Windows\system32\drivers\gagp30kx.sys **LOCKED** 32

08:08:54.332 Service HdAudAddService C:\Windows\system32\drivers\HdAudio.sys **LOCKED** 32

08:08:54.433 Service HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys **LOCKED** 32

08:08:54.496 Service HidBth C:\Windows\system32\drivers\hidbth.sys **LOCKED** 32

08:08:54.532 Service HidIr C:\Windows\system32\drivers\hidir.sys **LOCKED** 32

08:08:54.676 Service HidUsb C:\Windows\system32\DRIVERS\hidusb.sys **LOCKED** 32

08:08:54.911 Service HpCISSs C:\Windows\system32\drivers\hpcisss.sys **LOCKED** 32

08:08:55.250 Service HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys **LOCKED** 32

08:08:55.772 Service HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys **LOCKED** 32

08:08:55.834 Service HSXHWAZL C:\Windows\system32\DRIVERS\HSXHWAZL.sys **LOCKED** 32

08:08:55.956 Service HTTP C:\Windows\system32\drivers\HTTP.sys **LOCKED** 32

08:08:55.993 Service i2omp C:\Windows\system32\drivers\i2omp.sys **LOCKED** 32

08:08:56.040 Service i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys **LOCKED** 32

08:08:56.099 Service iaStorV C:\Windows\system32\drivers\iastorv.sys **LOCKED** 32

08:08:58.107 Service igfx C:\Windows\system32\DRIVERS\igdkmd32.sys **LOCKED** 32

08:08:58.574 Service iirsp C:\Windows\system32\drivers\iirsp.sys **LOCKED** 32

08:08:58.859 Service IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys **LOCKED** 32

08:08:58.905 Service intelide C:\Windows\system32\drivers\intelide.sys **LOCKED** 32

08:08:58.953 Service intelppm C:\Windows\system32\DRIVERS\intelppm.sys **LOCKED** 32

08:08:59.030 Service IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys **LOCKED** 32

08:08:59.173 Service IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys **LOCKED** 32

08:08:59.281 Service IPNAT C:\Windows\system32\DRIVERS\ipnat.sys **LOCKED** 32

08:08:59.335 Service IRENUM C:\Windows\system32\drivers\irenum.sys **LOCKED** 32

08:08:59.420 Service isapnp C:\Windows\system32\drivers\isapnp.sys **LOCKED** 32

08:08:59.667 Service iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys **LOCKED** 32

08:08:59.726 Service iteatapi C:\Windows\system32\drivers\iteatapi.sys **LOCKED** 32

08:08:59.763 Service iteraid C:\Windows\system32\drivers\iteraid.sys **LOCKED** 32

08:08:59.800 Service kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys **LOCKED** 32

08:08:59.853 Service kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys **LOCKED** 32

08:08:59.992 Service kl1 C:\Windows\system32\DRIVERS\kl1.sys **LOCKED** 32

08:09:00.056 Service kl2 C:\Windows\system32\DRIVERS\kl2.sys **LOCKED** 32

08:09:00.252 Service KLIM6 C:\Windows\system32\DRIVERS\klim6.sys **LOCKED** 32

08:09:00.297 Service klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys **LOCKED** 32

08:09:00.365 Service KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys **LOCKED** 32

08:09:00.451 Service KSecDD C:\Windows\System32\Drivers\ksecdd.sys **LOCKED** 32

08:09:00.851 Service lltdio C:\Windows\system32\DRIVERS\lltdio.sys **LOCKED** 32

08:09:01.006 Service LSI_FC C:\Windows\system32\drivers\lsi_fc.sys **LOCKED** 32

08:09:01.042 Service LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys **LOCKED** 32

08:09:01.079 Service LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys **LOCKED** 32

08:09:01.583 Service mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys **LOCKED** 32

08:09:01.628 Service megasas C:\Windows\system32\drivers\megasas.sys **LOCKED** 32

08:09:01.688 Service MegaSR C:\Windows\system32\drivers\megasr.sys **LOCKED** 32

08:09:01.780 Service Modem C:\Windows\system32\drivers\modem.sys **LOCKED** 32

08:09:01.817 Service monitor C:\Windows\system32\DRIVERS\monitor.sys **LOCKED** 32

08:09:01.876 Service mouclass C:\Windows\system32\DRIVERS\mouclass.sys **LOCKED** 32

08:09:01.927 Service mouhid C:\Windows\system32\DRIVERS\mouhid.sys **LOCKED** 32

08:09:01.975 Service MountMgr C:\Windows\System32\drivers\mountmgr.sys **LOCKED** 32

08:09:02.161 Service mpio C:\Windows\system32\drivers\mpio.sys **LOCKED** 32

08:09:02.200 Service mpsdrv C:\Windows\System32\drivers\mpsdrv.sys **LOCKED** 32

08:09:02.364 Service Mraid35x C:\Windows\system32\drivers\mraid35x.sys **LOCKED** 32

08:09:02.612 Service msahci C:\Windows\system32\drivers\msahci.sys **LOCKED** 32

08:09:02.671 Service msdsm C:\Windows\system32\drivers\msdsm.sys **LOCKED** 32

08:09:02.792 Service msisadrv C:\Windows\system32\drivers\msisadrv.sys **LOCKED** 32

08:09:03.063 Service MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys **LOCKED** 32

08:09:03.159 Service MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys **LOCKED** 32

08:09:03.197 Service MSPQM C:\Windows\system32\drivers\MSPQM.sys **LOCKED** 32

08:09:03.261 Service MsRPC C:\Windows\System32\Drivers\MsRPC.sys **LOCKED** 32

08:09:03.330 Service mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys **LOCKED** 32

08:09:03.429 Service MSTEE C:\Windows\system32\drivers\MSTEE.sys **LOCKED** 32

08:09:03.664 Service NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys **LOCKED** 32

08:09:03.746 Service NDIS C:\Windows\system32\drivers\ndis.sys **LOCKED** 32

08:09:03.794 Service NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys **LOCKED** 32

08:09:03.939 Service Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys **LOCKED** 32

08:09:04.061 Service NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys **LOCKED** 32

08:09:04.135 Service NDProxy C:\Windows\System32\Drivers\NDProxy.sys **LOCKED** 32

08:09:04.247 Service netbt C:\Windows\System32\DRIVERS\netbt.sys **LOCKED** 32

08:09:05.163 Service NETw3v32 C:\Windows\system32\DRIVERS\NETw3v32.sys **LOCKED** 32

08:09:05.268 Service nfrd960 C:\Windows\system32\drivers\nfrd960.sys **LOCKED** 32

08:09:05.579 Service nsiproxy C:\Windows\system32\drivers\nsiproxy.sys **LOCKED** 32

08:09:05.906 Service ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys **LOCKED** 32

08:09:05.947 Service Null C:\Windows\System32\Drivers\Null.sys **LOCKED** 32

08:09:06.014 Service nvraid C:\Windows\system32\drivers\nvraid.sys **LOCKED** 32

08:09:06.048 Service nvstor C:\Windows\system32\drivers\nvstor.sys **LOCKED** 32

08:09:06.091 Service nv_agp C:\Windows\system32\drivers\nv_agp.sys **LOCKED** 32

08:09:06.368 Service ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys **LOCKED** 32

08:09:06.769 Service Parport C:\Windows\system32\drivers\parport.sys **LOCKED** 32

08:09:06.834 Service partmgr C:\Windows\System32\drivers\partmgr.sys **LOCKED** 32

08:09:06.940 Service Parvdm C:\Windows\system32\drivers\parvdm.sys **LOCKED** 32

08:09:07.174 Service pci C:\Windows\system32\drivers\pci.sys **LOCKED** 32

08:09:07.223 Service pciide C:\Windows\system32\drivers\pciide.sys **LOCKED** 32

08:09:07.304 Service pcmcia C:\Windows\system32\drivers\pcmcia.sys **LOCKED** 32

08:09:07.449 Service PEAUTH C:\Windows\system32\drivers\peauth.sys **LOCKED** 32

08:09:08.332 Service PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys **LOCKED** 32

08:09:08.395 Service Processor C:\Windows\system32\drivers\processr.sys **LOCKED** 32

08:09:08.610 Service PSched C:\Windows\system32\DRIVERS\pacer.sys **LOCKED** 32

08:09:08.679 Service PxHelp20 C:\Windows\System32\Drivers\PxHelp20.sys **LOCKED** 32

08:09:08.987 Service ql2300 C:\Windows\system32\drivers\ql2300.sys **LOCKED** 32

08:09:09.046 Service ql40xx C:\Windows\system32\drivers\ql40xx.sys **LOCKED** 32

08:09:09.241 Service QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys **LOCKED** 32

08:09:09.298 Service RasAcd C:\Windows\System32\DRIVERS\rasacd.sys **LOCKED** 32

08:09:09.517 Service Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys **LOCKED** 32

08:09:09.656 Service RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys **LOCKED** 32

08:09:09.700 Service RasSstp C:\Windows\system32\DRIVERS\rassstp.sys **LOCKED** 32

08:09:09.828 Service RDPCDD C:\Windows\System32\DRIVERS\RDPCDD.sys **LOCKED** 32

08:09:09.892 Service rdpdr C:\Windows\system32\drivers\rdpdr.sys **LOCKED** 32

08:09:09.918 Service RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys **LOCKED** 32

08:09:09.995 Service RDPWD C:\Windows\System32\Drivers\RDPWD.sys **LOCKED** 32

08:09:10.734 Service rspndr C:\Windows\system32\DRIVERS\rspndr.sys **LOCKED** 32

08:09:10.804 Service RTL8169 C:\Windows\system32\DRIVERS\Rtlh86.sys **LOCKED** 32

08:09:10.961 Service sbp2port C:\Windows\system32\drivers\sbp2port.sys **LOCKED** 32

08:09:11.253 Service sdbus C:\Windows\system32\DRIVERS\sdbus.sys **LOCKED** 32

08:09:11.371 Service secdrv C:\Windows\System32\Drivers\secdrv.sys **LOCKED** 32

08:09:11.488 Service Serenum C:\Windows\system32\drivers\serenum.sys **LOCKED** 32

08:09:11.573 Service Serial C:\Windows\system32\drivers\serial.sys **LOCKED** 32

08:09:11.676 Service sermouse C:\Windows\system32\drivers\sermouse.sys **LOCKED** 32

08:09:11.820 Service sffdisk C:\Windows\system32\drivers\sffdisk.sys **LOCKED** 32

08:09:11.876 Service sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys **LOCKED** 32

08:09:11.931 Service sffp_sd C:\Windows\system32\drivers\sffp_sd.sys **LOCKED** 32

08:09:11.970 Service sfloppy C:\Windows\system32\drivers\sfloppy.sys **LOCKED** 32

08:09:12.241 Service sisagp C:\Windows\system32\drivers\sisagp.sys **LOCKED** 32

08:09:12.288 Service SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys **LOCKED** 32

08:09:12.395 Service SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys **LOCKED** 32

08:09:13.142 Service Smb C:\Windows\system32\DRIVERS\smb.sys **LOCKED** 32

08:09:13.244 Service spldr C:\Windows\System32\Drivers\spldr.sys **LOCKED** 32

08:09:13.902 Service swenum C:\Windows\system32\DRIVERS\swenum.sys **LOCKED** 32

08:09:14.037 Service Symc8xx C:\Windows\system32\drivers\symc8xx.sys **LOCKED** 32

08:09:14.136 Service Sym_hi C:\Windows\system32\drivers\sym_hi.sys **LOCKED** 32

08:09:14.187 Service Sym_u3 C:\Windows\system32\drivers\sym_u3.sys **LOCKED** 32

08:09:14.249 Service SynTP C:\Windows\system32\DRIVERS\SynTP.sys **LOCKED** 32

08:09:14.898 Service Tcpip C:\Windows\System32\drivers\tcpip.sys **LOCKED** 32

08:09:15.030 Service Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys **LOCKED** 32

08:09:15.123 Service tcpipreg C:\Windows\System32\drivers\tcpipreg.sys **LOCKED** 32

08:09:15.179 Service TDPIPE C:\Windows\system32\drivers\tdpipe.sys **LOCKED** 32

08:09:15.311 Service TDTCP C:\Windows\system32\drivers\tdtcp.sys **LOCKED** 32

08:09:15.400 Service tdx C:\Windows\system32\DRIVERS\tdx.sys **LOCKED** 32

08:09:15.460 Service TermDD C:\Windows\system32\DRIVERS\termdd.sys **LOCKED** 32

08:09:15.976 Service tssecsrv C:\Windows\System32\DRIVERS\tssecsrv.sys **LOCKED** 32

08:09:16.034 Service tunmp C:\Windows\system32\DRIVERS\tunmp.sys **LOCKED** 32

08:09:16.101 Service tunnel C:\Windows\system32\DRIVERS\tunnel.sys **LOCKED** 32

08:09:16.161 Service uagp35 C:\Windows\system32\drivers\uagp35.sys **LOCKED** 32

08:09:16.372 Service uliagpkx C:\Windows\system32\drivers\uliagpkx.sys **LOCKED** 32

08:09:16.445 Service uliahci C:\Windows\system32\drivers\uliahci.sys **LOCKED** 32

08:09:16.510 Service UlSata C:\Windows\system32\drivers\ulsata.sys **LOCKED** 32

08:09:16.547 Service ulsata2 C:\Windows\system32\drivers\ulsata2.sys **LOCKED** 32

08:09:16.633 Service umbus C:\Windows\system32\DRIVERS\umbus.sys **LOCKED** 32

08:09:16.813 Service usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys **LOCKED** 32

08:09:16.890 Service usbcir C:\Windows\system32\drivers\usbcir.sys **LOCKED** 32

08:09:16.931 Service usbehci C:\Windows\system32\DRIVERS\usbehci.sys **LOCKED** 32

08:09:16.981 Service usbhub C:\Windows\system32\DRIVERS\usbhub.sys **LOCKED** 32

08:09:17.043 Service usbohci C:\Windows\system32\drivers\usbohci.sys **LOCKED** 32

08:09:17.109 Service usbprint C:\Windows\system32\DRIVERS\usbprint.sys **LOCKED** 32

08:09:17.186 Service usbscan C:\Windows\system32\DRIVERS\usbscan.sys **LOCKED** 32

08:09:17.299 Service USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS **LOCKED** 32

08:09:17.356 Service usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys **LOCKED** 32

08:09:17.551 Service vga C:\Windows\system32\DRIVERS\vgapnp.sys **LOCKED** 32

08:09:17.685 Service VgaSave C:\Windows\System32\drivers\vga.sys **LOCKED** 32

08:09:17.766 Service viaagp C:\Windows\system32\drivers\viaagp.sys **LOCKED** 32

08:09:17.850 Service ViaC7 C:\Windows\system32\drivers\viac7.sys **LOCKED** 32

08:09:17.899 Service viaide C:\Windows\system32\drivers\viaide.sys **LOCKED** 32

08:09:17.939 Service volmgr C:\Windows\system32\drivers\volmgr.sys **LOCKED** 32

08:09:18.052 Service volmgrx C:\Windows\System32\drivers\volmgrx.sys **LOCKED** 32

08:09:18.101 Service volsnap C:\Windows\system32\drivers\volsnap.sys **LOCKED** 32

08:09:18.171 Service vsmraid C:\Windows\system32\drivers\vsmraid.sys **LOCKED** 32

08:09:18.428 Service WacomPen C:\Windows\system32\drivers\wacompen.sys **LOCKED** 32

08:09:18.470 Service Wanarp C:\Windows\system32\DRIVERS\wanarp.sys **LOCKED** 32

08:09:18.542 Service Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys **LOCKED** 32

08:09:18.754 Service Wd C:\Windows\system32\drivers\wd.sys **LOCKED** 32

08:09:18.832 Service Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys **LOCKED** 32

08:09:19.697 Service winachsf C:\Windows\system32\DRIVERS\HSX_CNXT.sys **LOCKED** 32

08:09:20.514 Service WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys **LOCKED** 32

08:09:21.208 Service WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys **LOCKED** 32

08:09:21.610 Service ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys **LOCKED** 32

08:09:22.138 Service XAudio C:\Windows\system32\DRIVERS\xaudio.sys **LOCKED** 32

08:09:22.294 Service yukonwlh C:\Windows\system32\DRIVERS\yk60x86.sys **LOCKED** 32

08:09:22.809 Modules scanning

08:09:33.744 Disk 0 trace - called modules:

08:09:33.777 ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS hal.dll PCIIDEX.SYS msahci.sys

08:09:33.782 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x876ddac8]

08:09:33.791 3 CLASSPNP.SYS[8074b8b3] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x86e874f8]

08:09:37.829 AVAST engine scan C:\Windows

08:09:41.647 AVAST engine scan C:\Windows\system32

08:15:08.180 AVAST engine scan C:\Windows\system32\drivers

08:15:26.901 AVAST engine scan C:\Users\owner

08:17:52.947 Disk 0 MBR has been saved successfully to "C:\Users\owner\Documents\MBR.dat"

08:17:52.968 The log file has been saved successfully to "C:\Users\owner\Documents\aswMBR.txt"

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_35

Run by owner at 8:27:18 on 2012-09-21

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1719 [GMT -4:00]

.

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe

C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe

C:\Windows\system32\svchost.exe -k hpdevmgmt

C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe

C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\SMINST\BLService.exe

C:\Program Files\CyberLink\Shared files\RichVideo.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\DRIVERS\xaudio.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Windows\system32\igfxsrvc.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\HP\QuickPlay\QPService.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\ehome\ehmsas.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtblfs.exe

C:\Windows\system32\DllHost.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/

uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb

mStart Page = hxxp://news.searchonme.com/

mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb

BHO: MRI_DISABLED - No File

BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File