Jump to content

piersonl

Members
 View Profile  See their activity

  • Posts

    1

  • Joined

  • Last visited

 Content Type 

Posts posted by piersonl

    Trojan detected

    in Resolved Malware Removal Logs

    Posted

    Hi,

    I just found this on my computer. Please help!

    Thank you

    .

    DDS (Ver_2011-08-26.01) - NTFSAMD64

    Internet Explorer: 8.0.7600.16385

    Run by Lisa Mullany at 16:33:45 on 2012-06-16

    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3824.2321 [GMT -5:00]

    .

    AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}

    FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

    .

    ============== Running Processes ===============

    .

    C:\windows\system32\wininit.exe

    C:\windows\system32\lsm.exe

    C:\windows\system32\svchost.exe -k DcomLaunch

    C:\windows\system32\svchost.exe -k RPCSS

    C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\windows\system32\svchost.exe -k netsvcs

    C:\windows\system32\svchost.exe -k LocalService

    C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe

    C:\windows\system32\svchost.exe -k NetworkService

    C:\windows\system32\WLANExt.exe

    C:\windows\system32\conhost.exe

    C:\windows\System32\spoolsv.exe

    C:\windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

    C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\windows\system32\rundll32.exe

    C:\windows\system32\mfevtps.exe

    C:\windows\System32\svchost.exe -k HPZ12

    C:\windows\System32\svchost.exe -k HPZ12

    C:\windows\SysWOW64\rundll32.exe

    C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

    C:\windows\system32\svchost.exe -k imgsvc

    C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe

    C:\windows\system32\ThpSrv.exe

    C:\windows\system32\TODDSrv.exe

    C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

    C:\Program Files\TOSHIBA\TECO\TecoService.exe

    C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe

    C:\windows\system32\taskhost.exe

    C:\windows\system32\SearchIndexer.exe

    C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe

    C:\windows\system32\Dwm.exe

    C:\Program Files\Intel\WiFi\bin\EvtEng.exe

    C:\windows\Explorer.EXE

    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe

    C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe

    C:\windows\system32\wbem\unsecapp.exe

    C:\windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\igfxtray.exe

    C:\Windows\System32\hkcmd.exe

    C:\windows\system32\igfxsrvc.exe

    C:\Windows\System32\igfxpers.exe

    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

    C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe

    C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

    C:\Program Files\Toshiba\SmoothView\SmoothView.exe

    C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

    C:\Program Files\Toshiba\TECO\Teco.exe

    C:\Windows\System32\ThpSrv.exe

    C:\Program Files\Toshiba\ReelTime\TosReelTimeMonitor.exe

    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

    C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe

    C:\windows\system32\wbem\unsecapp.exe

    C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\windows\system32\igfxext.exe

    C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe

    C:\Program Files\McAfee.com\Agent\mcagent.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

    C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_2_202_235_ActiveX.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\windows\system32\SearchProtocolHost.exe

    C:\windows\system32\SearchFilterHost.exe

    C:\windows\SysWOW64\cmd.exe

    C:\windows\system32\conhost.exe

    C:\windows\SysWOW64\cscript.exe

    C:\windows\system32\wbem\wmiprvse.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = https://exchweb.bcm.tmc.edu/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fexchweb.bcm.tmc.edu%2fowa%2f

    uDefault_Page_URL = hxxp://www.google.com/ig?brand=TSND&bmod=TSND

    mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSND&bmod=TSND

    mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSND&bmod=TSND

    uInternet Settings,ProxyOverride = <local>

    uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

    uURLSearchHooks: H - No File

    mWinlogon: Userinit=userinit.exe,

    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120424201517.dll

    BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

    BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    BHO: TOSHIBA Media Controller Plug-in: {f3c88694-effa-4d78-b409-54b7b2535b14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll

    TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

    TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

    TB: {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - No File

    TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

    mRun: [TOSDCR] %ProgramFiles%\TOSHIBA\PasswordUtility\TOSDCR.exe

    mRun: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun

    mRun: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60

    mRun: [TSleepSrv] %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe

    mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey

    mRun: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

    mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

    mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

    mPolicies-explorer: NoActiveDesktop = 1 (0x1)

    mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

    mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\OFFICE11\EXCEL.EXE/3000

    IE: Free YouTube to MP3 Converter - C:\Users\Lisa Mullany\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

    IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~4\OFFICE11\REFIEBAR.DLL

    DPF: {2FD395CB-BD93-4BA9-AA4B-D725754E20D1} - hxxp://test.player.portalarium.com/installers/win32/PortalariumPlayer.cab

    DPF: {55963676-2F5E-4BAF-AC28-CF26AA587566} - hxxps://vpn02.bcm.edu/CACHE/stc/1/binaries/vpnweb.cab

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

    TCP: DhcpNameServer = 192.168.1.254

    TCP: Interfaces\{011ABB7A-43B1-48C0-878B-29AC43CCFFF2} : DhcpNameServer = 192.168.1.254

    TCP: Interfaces\{011ABB7A-43B1-48C0-878B-29AC43CCFFF2}\2636D6D27657563747 : DhcpNameServer = 8.8.8.8 8.8.4.4

    TCP: Interfaces\{011ABB7A-43B1-48C0-878B-29AC43CCFFF2}\2636D6D277966696 : DhcpNameServer = 128.249.38.101 128.249.38.102 128.249.237.101

    TCP: Interfaces\{011ABB7A-43B1-48C0-878B-29AC43CCFFF2}\2636D6D2E65647D237673637 : DhcpNameServer = 128.249.38.101 128.249.38.102 128.249.237.101

    TCP: Interfaces\{011ABB7A-43B1-48C0-878B-29AC43CCFFF2}\D646167657563747 : DhcpNameServer = 216.136.95.2 64.132.94.250

    TCP: Interfaces\{55BF4D12-D370-4389-AC91-890A428EC232} : DhcpNameServer = 128.249.38.101 128.249.38.102 128.249.237.101

    Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\McAfee\MSC\McSnIePl.dll

    Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\McAfee\SITEAD~1\McIEPlg.dll

    Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\McAfee\SITEAD~1\McIEPlg.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

    BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO-X64: AcroIEHelperStub - No File

    BHO-X64: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120424201517.dll

    BHO-X64: scriptproxy - No File

    BHO-X64: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

    BHO-X64: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    BHO-X64: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll

    TB-X64: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll

    TB-X64: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

    TB-X64: {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - No File

    TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

    mRun-x64: [TOSDCR] %ProgramFiles%\TOSHIBA\PasswordUtility\TOSDCR.exe

    mRun-x64: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun

    mRun-x64: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60

    mRun-x64: [TSleepSrv] %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe

    mRun-x64: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey

    mRun-x64: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

    mRun-x64: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

    mRun-x64: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 mfehidk;McAfee Inc. mfehidk;C:\windows\system32\drivers\mfehidk.sys --> C:\windows\system32\drivers\mfehidk.sys [?]

    R0 mfewfpk;McAfee Inc. mfewfpk;C:\windows\system32\drivers\mfewfpk.sys --> C:\windows\system32\drivers\mfewfpk.sys [?]

    R0 Thpdrv;TOSHIBA HDD Protection Driver;C:\windows\system32\DRIVERS\thpdrv.sys --> C:\windows\system32\DRIVERS\thpdrv.sys [?]

    R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;C:\windows\system32\DRIVERS\Thpevm.SYS --> C:\windows\system32\DRIVERS\Thpevm.SYS [?]

    R0 tos_sps64;TOSHIBA tos_sps64 Service;C:\windows\system32\DRIVERS\tos_sps64.sys --> C:\windows\system32\DRIVERS\tos_sps64.sys [?]

    R1 mfenlfk;McAfee NDIS Light Filter;C:\windows\system32\DRIVERS\mfenlfk.sys --> C:\windows\system32\DRIVERS\mfenlfk.sys [?]

    R1 vwififlt;Virtual WiFi Filter Driver;C:\windows\system32\DRIVERS\vwififlt.sys --> C:\windows\system32\DRIVERS\vwififlt.sys [?]

    R2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [2010-6-7 408576]

    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-6-13 654408]

    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-3-13 249936]

    R2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-3-13 249936]

    R2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-3-13 249936]

    R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-3-13 249936]

    R2 McShield;McAfee McShield;C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe [2011-7-30 199272]

    R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [2011-7-30 210584]

    R2 mfevtp;McAfee Validation Trust Protection Service;"C:\windows\system32\mfevtps.exe" --> C:\windows\system32\mfevtps.exe [?]

    R2 risdpcie;risdpcie;C:\windows\system32\DRIVERS\risdpe64.sys --> C:\windows\system32\DRIVERS\risdpe64.sys [?]

    R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\windows\system32\DRIVERS\TVALZFL.sys --> C:\windows\system32\DRIVERS\TVALZFL.sys [?]

    R3 bpenum;bpenum;C:\windows\system32\DRIVERS\bpenum.sys --> C:\windows\system32\DRIVERS\bpenum.sys [?]

    R3 bpmp;Intel® Centrino® WiMAX 6050 Series;C:\windows\system32\DRIVERS\bpmp.sys --> C:\windows\system32\DRIVERS\bpmp.sys [?]

    R3 bpusb;bpusb;C:\windows\system32\Drivers\bpusb.sys --> C:\windows\system32\Drivers\bpusb.sys [?]

    R3 cfwids;McAfee Inc. cfwids;C:\windows\system32\drivers\cfwids.sys --> C:\windows\system32\drivers\cfwids.sys [?]

    R3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;C:\windows\system32\DRIVERS\e1k62x64.sys --> C:\windows\system32\DRIVERS\e1k62x64.sys [?]

    R3 HECIx64;Intel® Management Engine Interface;C:\windows\system32\DRIVERS\HECIx64.sys --> C:\windows\system32\DRIVERS\HECIx64.sys [?]

    R3 Impcd;Impcd;C:\windows\system32\DRIVERS\Impcd.sys --> C:\windows\system32\DRIVERS\Impcd.sys [?]

    R3 IntcDAud;Intel® Display Audio;C:\windows\system32\DRIVERS\IntcDAud.sys --> C:\windows\system32\DRIVERS\IntcDAud.sys [?]

    R3 MBAMProtector;MBAMProtector;\??\C:\windows\system32\drivers\mbam.sys --> C:\windows\system32\drivers\mbam.sys [?]

    R3 mfeavfk;McAfee Inc. mfeavfk;C:\windows\system32\drivers\mfeavfk.sys --> C:\windows\system32\drivers\mfeavfk.sys [?]

    R3 mfefirek;McAfee Inc. mfefirek;C:\windows\system32\drivers\mfefirek.sys --> C:\windows\system32\drivers\mfefirek.sys [?]

    R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\windows\system32\DRIVERS\NETwNs64.sys --> C:\windows\system32\DRIVERS\NETwNs64.sys [?]

    R3 PGEffect;Pangu effect driver;C:\windows\system32\DRIVERS\pgeffect.sys --> C:\windows\system32\DRIVERS\pgeffect.sys [?]

    R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\windows\system32\DRIVERS\vwifimp.sys --> C:\windows\system32\DRIVERS\vwifimp.sys [?]

    R3 wdkmd;Intel WiDi KMD;C:\windows\system32\DRIVERS\WDKMD.sys --> C:\windows\system32\DRIVERS\WDKMD.sys [?]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-9-7 136176]

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-2-29 158856]

    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-4-26 257696]

    S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-9-7 136176]

    S3 mferkdet;McAfee Inc. mferkdet;C:\windows\system32\drivers\mferkdet.sys --> C:\windows\system32\drivers\mferkdet.sys [?]

    S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2010-7-19 340240]

    S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:\windows\system32\DRIVERS\nusb3hub.sys --> C:\windows\system32\DRIVERS\nusb3hub.sys [?]

    S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:\windows\system32\DRIVERS\nusb3xhc.sys --> C:\windows\system32\DRIVERS\nusb3xhc.sys [?]

    S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]

    .

    =============== Created Last 30 ================

    .

    2012-06-14 01:03:01 24904 ----a-w- C:\windows\System32\drivers\mbam.sys

    2012-06-13 22:24:59 44544 ----a-w- C:\windows\SysWow64\licmgr10.dll

    2012-06-13 22:24:52 9216 ----a-w- C:\windows\System32\rdrmemptylst.exe

    2012-06-13 22:24:52 76288 ----a-w- C:\windows\System32\rdpwsx.dll

    2012-06-13 22:24:52 149504 ----a-w- C:\windows\System32\rdpcorekmts.dll

    2012-06-13 22:00:34 208896 ----a-w- C:\windows\System32\profsvc.dll

    2012-06-13 22:00:23 5505392 ----a-w- C:\windows\System32\ntoskrnl.exe

    2012-06-13 22:00:23 3958128 ----a-w- C:\windows\SysWow64\ntkrnlpa.exe

    2012-06-13 22:00:22 3902320 ----a-w- C:\windows\SysWow64\ntoskrnl.exe

    2012-06-13 22:00:10 3144192 ----a-w- C:\windows\System32\win32k.sys

    2012-06-13 22:00:01 204800 ----a-w- C:\windows\System32\drivers\rdpwd.sys

    2012-06-13 21:59:50 2342400 ----a-w- C:\windows\SysWow64\msi.dll

    2012-06-13 21:59:49 3213824 ----a-w- C:\windows\System32\msi.dll

    2012-06-13 21:58:57 182272 ----a-w- C:\windows\System32\cryptsvc.dll

    2012-06-13 21:58:57 1460224 ----a-w- C:\windows\System32\crypt32.dll

    2012-06-13 21:58:57 140288 ----a-w- C:\windows\System32\cryptnet.dll

    2012-06-13 21:58:57 139264 ----a-w- C:\windows\SysWow64\cryptsvc.dll

    2012-06-13 21:58:57 1156608 ----a-w- C:\windows\SysWow64\crypt32.dll

    2012-06-13 21:58:57 103936 ----a-w- C:\windows\SysWow64\cryptnet.dll

    2012-05-20 02:31:22 -------- d-----w- C:\Users\Lisa Mullany\AppData\Roaming\Dofus-10.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1

    .

    ==================== Find3M ====================

    .

    2012-05-15 03:56:59 1197568 ----a-w- C:\windows\System32\wininet.dll

    2012-05-15 03:08:48 981504 ----a-w- C:\windows\SysWow64\wininet.dll

    2012-05-05 02:58:22 70304 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-05-05 02:58:22 419488 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe

    2012-05-05 02:58:08 8769696 ----a-w- C:\windows\SysWow64\FlashPlayerInstaller.exe

    2012-04-20 06:22:18 57856 ----a-w- C:\windows\System32\licmgr10.dll

    2012-04-20 05:22:36 27 ----a-w- C:\windows\msrresmap.dll

    2012-04-20 05:00:31 482816 ----a-w- C:\windows\System32\html.iec

    2012-04-20 04:15:04 1638912 ----a-w- C:\windows\System32\mshtml.tlb

    2012-04-20 03:58:07 386048 ----a-w- C:\windows\SysWow64\html.iec

    2012-04-20 03:24:18 1638912 ----a-w- C:\windows\SysWow64\mshtml.tlb

    2012-03-30 11:09:53 1895280 ----a-w- C:\windows\System32\drivers\tcpip.sys

    2012-03-20 18:11:30 162192 ----a-w- C:\windows\System32\mfevtps.exe

    .

    ============= FINISH: 16:35:19.06 ===============

    DDS.txt

    attach.txt

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.