AFirebaugh

I am no longer getting messages stating that my programs are not working and it is searching for a solution. And now the Firefox home screen comes up when I open the browser. Everything seems to be working fine now.

I hope I did it correctly this time. When I opened up Firefox it came up with the Firefox home screen so hopefully I'm doing this right! ComboFix 12-09-24.03 - owner 09/25/2012 14:57:37.3.1 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1824 [GMT -4:00] Running from: c:\users\owner\Desktop\ComboFix.exe Command switches used :: c:\users\owner\Desktop\CFScript.txt SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2012-08-25 to 2012-09-25 ))))))))))))))))))))))))))))))) . . 2012-09-25 19:08 . 2012-09-25 19:08 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-09-21 21:34 . 2012-09-21 21:34 73696 ----a-w- c:\program files\Mozilla Firefox\breakpadinjector.dll 2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\users\owner\AppData\Roaming\Malwarebytes 2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\programdata\Malwarebytes 2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-09-21 06:35 . 2012-09-07 21:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-09-21 06:33 . 2012-09-21 06:32 477168 ----a-w- c:\windows\system32\npdeployJava1.dll 2012-09-21 05:59 . 2012-08-30 08:17 6980552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A7B63C3D-AC3C-41C9-8C97-6C53AE632628}\mpengine.dll 2012-09-19 23:07 . 2012-09-19 23:07 -------- d-----w- c:\program files\SProtector . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-21 06:32 . 2010-04-26 02:17 473072 ----a-w- c:\windows\system32\deployJava1.dll 2012-09-20 20:59 . 2012-05-25 20:23 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-09-20 20:59 . 2012-05-25 20:23 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-07-04 14:02 . 2012-08-15 07:04 2047488 ----a-w- c:\windows\system32\win32k.sys 2012-06-29 00:16 . 2012-08-15 07:04 1800704 ----a-w- c:\windows\system32\jscript9.dll 2012-06-29 00:09 . 2012-08-15 07:04 1129472 ----a-w- c:\windows\system32\wininet.dll 2012-06-29 00:08 . 2012-08-15 07:04 1427968 ----a-w- c:\windows\system32\inetcpl.cpl 2012-06-29 00:04 . 2012-08-15 07:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe 2012-06-29 00:00 . 2012-08-15 07:04 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-06-28 19:39 . 2012-06-28 19:39 260 ----a-w- c:\windows\system32\cmdVBS.vbs 2012-06-28 19:39 . 2012-06-28 19:39 256 ----a-w- c:\windows\system32\MSIevent.bat 2012-09-21 21:34 . 2012-06-07 20:54 266720 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "PhotoshopElements8SyncAgent"="c:\program files\Adobe\Elements Organizer 8.0\ElementsOrganizerSyncAgent.exe" [2009-09-06 1893728] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-09-24 468264] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-15 49152] "hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-27 1983816] "CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-26 136216] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-26 171032] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-26 170520] "CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096] "MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-12-18 197928] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-25 202296] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696] . c:\users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2010-09-23 08:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler] 2008-10-09 14:58 75008 ----a-w- c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] 2007-10-15 01:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant] 2008-04-15 21:51 488752 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe] 2008-08-01 23:14 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut] 2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut] 2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDIRShortCut] 2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut] 2008-10-07 03:42 210216 ------w- c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x] S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . Contents of the 'Scheduled Tasks' folder . 2012-09-25 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-25 20:59] . 2012-09-03 c:\windows\Tasks\HPCeeScheduleForowner.job - c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2009-04-22 18:34] . 2010-03-04 c:\windows\Tasks\Regwork.job - c:\program files\RegWork\RegWork.exe [2010-03-01 21:37] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ IE: Add to Video Converter... - c:\program files\Media Player Utilities 5.22\AVIConverter\grab.html IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 75.75.75.75 75.75.76.76 DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab FF - ProfilePath - c:\users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\ FF - prefs.js: browser.search.selectedEngine - Google . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-09-25 15:08 Windows 6.0.6002 Service Pack 2 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\S-1-5-21-869652560-2776403528-2443925462-1000\Software\SecuROM\License information*] "datasecu"=hex:a1,e8,07,07,42,7d,16,6e,08,4c,d6,46,6b,bd,28,29,db,34,33,b5,52, 74,2a,b3,ce,9b,c4,a0,1d,a2,d8,81,91,c3,21,56,0f,60,c5,e0,f5,03,af,4b,0a,bc,\ "rkeysecu"=hex:db,05,85,fc,e0,c8,04,65,36,51,08,bd,3e,4e,15,cd . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Completion time: 2012-09-25 15:11:49 ComboFix-quarantined-files.txt 2012-09-25 19:11 ComboFix2.txt 2012-09-24 00:47 ComboFix3.txt 2012-09-21 17:26 . Pre-Run: 34,695,651,328 bytes free Post-Run: 34,413,191,168 bytes free . - - End Of File - - B856CD6BA1646ED89175DA8E6B7AC70A

ComboFix 12-09-23.03 - owner 09/23/2012 20:31:43.2.1 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1677 [GMT -4:00] Running from: c:\users\owner\Desktop\ComboFix.exe Command switches used :: c:\users\owner\Desktop\CFScript.txt.lnk SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2012-08-24 to 2012-09-24 ))))))))))))))))))))))))))))))) . . 2012-09-24 00:44 . 2012-09-24 00:44 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-09-21 21:34 . 2012-09-21 21:34 73696 ----a-w- c:\program files\Mozilla Firefox\breakpadinjector.dll 2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\users\owner\AppData\Roaming\Malwarebytes 2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\programdata\Malwarebytes 2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-09-21 06:35 . 2012-09-07 21:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-09-21 06:33 . 2012-09-21 06:32 477168 ----a-w- c:\windows\system32\npdeployJava1.dll 2012-09-21 05:59 . 2012-08-30 08:17 6980552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A7B63C3D-AC3C-41C9-8C97-6C53AE632628}\mpengine.dll 2012-09-19 23:07 . 2012-09-19 23:07 -------- d-----w- c:\program files\SProtector . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-21 06:32 . 2010-04-26 02:17 473072 ----a-w- c:\windows\system32\deployJava1.dll 2012-09-20 20:59 . 2012-05-25 20:23 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-09-20 20:59 . 2012-05-25 20:23 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-07-04 14:02 . 2012-08-15 07:04 2047488 ----a-w- c:\windows\system32\win32k.sys 2012-06-29 00:16 . 2012-08-15 07:04 1800704 ----a-w- c:\windows\system32\jscript9.dll 2012-06-29 00:09 . 2012-08-15 07:04 1129472 ----a-w- c:\windows\system32\wininet.dll 2012-06-29 00:08 . 2012-08-15 07:04 1427968 ----a-w- c:\windows\system32\inetcpl.cpl 2012-06-29 00:04 . 2012-08-15 07:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe 2012-06-29 00:00 . 2012-08-15 07:04 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-06-28 19:39 . 2012-06-28 19:39 260 ----a-w- c:\windows\system32\cmdVBS.vbs 2012-06-28 19:39 . 2012-06-28 19:39 256 ----a-w- c:\windows\system32\MSIevent.bat 2012-09-21 21:34 . 2012-06-07 20:54 266720 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "PhotoshopElements8SyncAgent"="c:\program files\Adobe\Elements Organizer 8.0\ElementsOrganizerSyncAgent.exe" [2009-09-06 1893728] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-09-24 468264] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-15 49152] "hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-27 1983816] "CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-26 136216] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-26 171032] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-26 170520] "CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096] "MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-12-18 197928] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-25 202296] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696] . c:\users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2010-09-23 08:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler] 2008-10-09 14:58 75008 ----a-w- c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] 2007-10-15 01:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant] 2008-04-15 21:51 488752 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe] 2008-08-01 23:14 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut] 2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut] 2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDIRShortCut] 2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut] 2008-10-07 03:42 210216 ------w- c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x] S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x] . . --- Other Services/Drivers In Memory --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . Contents of the 'Scheduled Tasks' folder . 2012-09-22 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-25 20:59] . 2012-09-03 c:\windows\Tasks\HPCeeScheduleForowner.job - c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2009-04-22 18:34] . 2010-03-04 c:\windows\Tasks\Regwork.job - c:\program files\RegWork\RegWork.exe [2010-03-01 21:37] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://news.searchonme.com/ IE: Add to Video Converter... - c:\program files\Media Player Utilities 5.22\AVIConverter\grab.html IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 75.75.75.75 75.75.76.76 DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab FF - ProfilePath - c:\users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\ FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/ FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q= FF - prefs.js: network.proxy.type - 0 . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-09-23 20:44 Windows 6.0.6002 Service Pack 2 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\S-1-5-21-869652560-2776403528-2443925462-1000\Software\SecuROM\License information*] "datasecu"=hex:a1,e8,07,07,42,7d,16,6e,08,4c,d6,46,6b,bd,28,29,db,34,33,b5,52, 74,2a,b3,ce,9b,c4,a0,1d,a2,d8,81,91,c3,21,56,0f,60,c5,e0,f5,03,af,4b,0a,bc,\ "rkeysecu"=hex:db,05,85,fc,e0,c8,04,65,36,51,08,bd,3e,4e,15,cd . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Completion time: 2012-09-23 20:47:01 ComboFix-quarantined-files.txt 2012-09-24 00:46 ComboFix2.txt 2012-09-21 17:26 . Pre-Run: 33,770,848,256 bytes free Post-Run: 33,385,033,728 bytes free . - - End Of File - - 7F44A0DF09EB96F4300B56E1E6306B95

nevermind, I went back and read through your replies and saw that this message can occur and to reboot. doing that now.

I followed your directions however, I am not able to post the log because FireFox and IE now will not open at all. It says illegal operation attempted on a registry key that has been marked for deletion. I cannot get to a web browser from my laptop, I am mobile right now. What should I do?

No, not fixed yet. And yes the searchonme.com is my problem.

# AdwCleaner v2.002 - Logfile created 09/21/2012 at 12:44:23 # Updated 16/09/2012 by Xplode # Operating system : Windows Vista Home Premium Service Pack 2 (32 bits) # User : owner - OWNER-PC # Boot Mode : Normal # Running from : C:\Users\owner\Documents\Downloads\adwcleaner.exe # Option [Delete] ***** [services] ***** ***** [Files / Folders] ***** Folder Deleted : C:\ProgramData\InstallMate Folder Deleted : C:\ProgramData\Premium ***** [Registry] ***** Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} ***** [internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16421 Restored : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] -\\ Mozilla Firefox v14.0.1 (en-US) Profile name : default File : C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\prefs.js Deleted : user_pref("aol_toolbar.default.homepage.check", false); Deleted : user_pref("aol_toolbar.default.search.check", false); Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0); Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0); Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", ""); Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", ""); Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", ""); Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", ""); Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", ""); Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", ""); Deleted : user_pref("sweetim.toolbar.searchguard.enable", ""); ************************* AdwCleaner[R1].txt - [2271 octets] - [21/09/2012 08:03:46] AdwCleaner[R2].txt - [2331 octets] - [21/09/2012 12:44:00] AdwCleaner[s1].txt - [2565 octets] - [21/09/2012 12:44:23] ########## EOF - C:\AdwCleaner[s1].txt - [2625 octets] ########## ComboFix 12-09-20.03 - owner 09/21/2012 13:11:39.1.1 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1701 [GMT -4:00] Running from: c:\users\owner\Documents\Downloads\ComboFix.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\owner\GoToAssistDownloadHelper.exe c:\windows\security\Database\tmp.edb . . ((((((((((((((((((((((((( Files Created from 2012-08-21 to 2012-09-21 ))))))))))))))))))))))))))))))) . . 2012-09-21 17:24 . 2012-09-21 17:24 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\users\owner\AppData\Roaming\Malwarebytes 2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\programdata\Malwarebytes 2012-09-21 06:35 . 2012-09-21 06:35 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-09-21 06:35 . 2012-09-07 21:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-09-21 06:33 . 2012-09-21 06:32 477168 ----a-w- c:\windows\system32\npdeployJava1.dll 2012-09-21 05:59 . 2012-08-30 08:17 6980552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A7B63C3D-AC3C-41C9-8C97-6C53AE632628}\mpengine.dll 2012-09-19 23:07 . 2012-09-19 23:07 -------- d-----w- c:\program files\SProtector . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-21 06:32 . 2010-04-26 02:17 473072 ----a-w- c:\windows\system32\deployJava1.dll 2012-09-20 20:59 . 2012-05-25 20:23 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-09-20 20:59 . 2012-05-25 20:23 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-07-04 14:02 . 2012-08-15 07:04 2047488 ----a-w- c:\windows\system32\win32k.sys 2012-06-29 00:16 . 2012-08-15 07:04 1800704 ----a-w- c:\windows\system32\jscript9.dll 2012-06-29 00:09 . 2012-08-15 07:04 1129472 ----a-w- c:\windows\system32\wininet.dll 2012-06-29 00:08 . 2012-08-15 07:04 1427968 ----a-w- c:\windows\system32\inetcpl.cpl 2012-06-29 00:04 . 2012-08-15 07:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe 2012-06-29 00:00 . 2012-08-15 07:04 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-06-28 19:39 . 2012-06-28 19:39 260 ----a-w- c:\windows\system32\cmdVBS.vbs 2012-06-28 19:39 . 2012-06-28 19:39 256 ----a-w- c:\windows\system32\MSIevent.bat 2012-07-18 18:41 . 2012-06-07 20:54 136672 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "PhotoshopElements8SyncAgent"="c:\program files\Adobe\Elements Organizer 8.0\ElementsOrganizerSyncAgent.exe" [2009-09-06 1893728] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-09-24 468264] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-15 49152] "hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-27 1983816] "CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-26 136216] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-26 171032] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-26 170520] "CarboniteSetupLite"="c:\program files\Carbonite\CarbonitePreinstaller.exe" [2009-08-04 318096] "MaxMenuMgr"="c:\program files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe" [2009-12-18 197928] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe" [2011-04-25 202296] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696] . c:\users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2010-09-23 08:47 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler] 2008-10-09 14:58 75008 ----a-w- c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] 2007-10-15 01:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant] 2008-04-15 21:51 488752 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe] 2008-08-01 23:14 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut] 2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut] 2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDIRShortCut] 2008-06-14 01:11 210216 ------w- c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut] 2008-10-07 03:42 210216 ------w- c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x] S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . Contents of the 'Scheduled Tasks' folder . 2012-09-21 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-25 20:59] . 2012-09-03 c:\windows\Tasks\HPCeeScheduleForowner.job - c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2009-04-22 18:34] . 2010-03-04 c:\windows\Tasks\Regwork.job - c:\program files\RegWork\RegWork.exe [2010-03-01 21:37] . . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://news.searchonme.com/ IE: Add to Video Converter... - c:\program files\Media Player Utilities 5.22\AVIConverter\grab.html IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 75.75.75.75 75.75.76.76 DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab FF - ProfilePath - c:\users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\ FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/ FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q= FF - prefs.js: network.proxy.type - 0 . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2012-09-21 13:24 Windows 6.0.6002 Service Pack 2 NTFS . scanning hidden processes ... . scanning hidden autostart entries ... . scanning hidden files ... . scan completed successfully hidden files: 0 . ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\S-1-5-21-869652560-2776403528-2443925462-1000\Software\SecuROM\License information*] "datasecu"=hex:a1,e8,07,07,42,7d,16,6e,08,4c,d6,46,6b,bd,28,29,db,34,33,b5,52, 74,2a,b3,ce,9b,c4,a0,1d,a2,d8,81,91,c3,21,56,0f,60,c5,e0,f5,03,af,4b,0a,bc,\ "rkeysecu"=hex:db,05,85,fc,e0,c8,04,65,36,51,08,bd,3e,4e,15,cd . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Completion time: 2012-09-21 13:26:52 ComboFix-quarantined-files.txt 2012-09-21 17:26 . Pre-Run: 31,253,110,784 bytes free Post-Run: 34,124,558,336 bytes free . - - End Of File - - 0E4832103C3D2B601C861DB780BB707E

Malwarebytes Anti-Malware (Trial) 1.65.0.1400 www.malwarebytes.org Database version: v2012.09.21.04 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 owner :: OWNER-PC [administrator] Protection: Enabled 9/21/2012 7:54:16 AM mbam-log-2012-09-21 (07-54-16).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 204843 Time elapsed: 7 minute(s), 40 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) # AdwCleaner v2.002 - Logfile created 09/21/2012 at 08:03:46 # Updated 16/09/2012 by Xplode # Operating system : Windows Vista Home Premium Service Pack 2 (32 bits) # User : owner - OWNER-PC # Boot Mode : Normal # Running from : C:\Users\owner\Documents\Downloads\adwcleaner.exe # Option [search] ***** [services] ***** ***** [Files / Folders] ***** Folder Found : C:\ProgramData\InstallMate Folder Found : C:\ProgramData\Premium ***** [Registry] ***** Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} Key Found : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F} Key Found : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A} Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} Key Found : HKU\S-1-5-21-869652560-2776403528-2443925462-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE} ***** [internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16421 [OK] Registry is clean. -\\ Mozilla Firefox v14.0.1 (en-US) Profile name : default File : C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\ehpubqd6.default\prefs.js Found : user_pref("aol_toolbar.default.homepage.check", false); Found : user_pref("aol_toolbar.default.search.check", false); Found : user_pref("extensions.BabylonToolbar.prtkDS", 0); Found : user_pref("extensions.BabylonToolbar.prtkHmpg", 0); Found : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", ""); Found : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", ""); Found : user_pref("sweetim.toolbar.previous.browser.startup.homepage", ""); Found : user_pref("sweetim.toolbar.previous.keyword.URL", ""); Found : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", ""); Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", ""); Found : user_pref("sweetim.toolbar.searchguard.enable", ""); ************************* AdwCleaner[R1].txt - [2142 octets] - [21/09/2012 08:03:46] ########## EOF - C:\AdwCleaner[R1].txt - [2202 octets] ########## aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-09-21 08:07:57 ----------------------------- 08:07:57.474 OS Version: Windows 6.0.6002 Service Pack 2 08:07:57.474 Number of processors: 1 586 0x170A 08:07:57.480 ComputerName: OWNER-PC UserName: owner 08:08:00.367 Initialize success 08:08:08.126 AVAST engine defs: 12092100 08:08:26.999 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 08:08:27.001 Disk 0 Vendor: ST9160827AS 3.AHC Size: 152627MB BusType: 3 08:08:27.032 Disk 0 MBR read successfully 08:08:27.035 Disk 0 MBR scan 08:08:27.078 Disk 0 unknown MBR code 08:08:27.090 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 141441 MB offset 2048 08:08:27.116 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 11182 MB offset 289673216 08:08:27.152 Disk 0 scanning sectors +312573952 08:08:27.336 Disk 0 scanning C:\Windows\system32\drivers 08:08:43.987 Service scanning 08:08:45.134 Service ACPI C:\Windows\system32\drivers\acpi.sys **LOCKED** 32 08:08:45.838 Service adp94xx C:\Windows\system32\drivers\adp94xx.sys **LOCKED** 32 08:08:46.301 Service adpahci C:\Windows\system32\drivers\adpahci.sys **LOCKED** 32 08:08:46.370 Service adpu160m C:\Windows\system32\drivers\adpu160m.sys **LOCKED** 32 08:08:46.415 Service adpu320 C:\Windows\system32\drivers\adpu320.sys **LOCKED** 32 08:08:46.550 Service AFD C:\Windows\system32\drivers\afd.sys **LOCKED** 32 08:08:46.639 Service agp440 C:\Windows\system32\drivers\agp440.sys **LOCKED** 32 08:08:46.680 Service aic78xx C:\Windows\system32\drivers\djsvs.sys **LOCKED** 32 08:08:46.753 Service aliide C:\Windows\system32\drivers\aliide.sys **LOCKED** 32 08:08:46.836 Service amdagp C:\Windows\system32\drivers\amdagp.sys **LOCKED** 32 08:08:46.888 Service amdide C:\Windows\system32\drivers\amdide.sys **LOCKED** 32 08:08:46.930 Service AmdK7 C:\Windows\system32\drivers\amdk7.sys **LOCKED** 32 08:08:46.965 Service AmdK8 C:\Windows\system32\drivers\amdk8.sys **LOCKED** 32 08:08:47.089 Service arc C:\Windows\system32\drivers\arc.sys **LOCKED** 32 08:08:47.127 Service arcsas C:\Windows\system32\drivers\arcsas.sys **LOCKED** 32 08:08:47.312 Service AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys **LOCKED** 32 08:08:47.360 Service atapi C:\Windows\system32\drivers\atapi.sys **LOCKED** 32 08:08:47.505 Service athr C:\Windows\system32\DRIVERS\athr.sys **LOCKED** 32 08:08:47.917 Service Beep C:\Windows\System32\Drivers\Beep.sys **LOCKED** 32 08:08:48.262 Service blbdrive C:\Windows\system32\drivers\blbdrive.sys **LOCKED** 32 08:08:48.403 Service BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys **LOCKED** 32 08:08:48.443 Service BrFiltUp C:\Windows\system32\drivers\brfiltup.sys **LOCKED** 32 08:08:48.578 Service Brserid C:\Windows\system32\drivers\brserid.sys **LOCKED** 32 08:08:48.622 Service BrSerWdm C:\Windows\system32\drivers\brserwdm.sys **LOCKED** 32 08:08:48.753 Service BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys **LOCKED** 32 08:08:48.807 Service BrUsbSer C:\Windows\system32\drivers\brusbser.sys **LOCKED** 32 08:08:48.878 Service BTHMODEM C:\Windows\system32\drivers\bthmodem.sys **LOCKED** 32 08:08:48.989 Service cdrom C:\Windows\system32\DRIVERS\cdrom.sys **LOCKED** 32 08:08:49.149 Service circlass C:\Windows\system32\drivers\circlass.sys **LOCKED** 32 08:08:49.255 Service CLFS C:\Windows\System32\CLFS.sys **LOCKED** 32 08:08:49.510 Service CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys **LOCKED** 32 08:08:49.552 Service cmdide C:\Windows\system32\drivers\cmdide.sys **LOCKED** 32 08:08:49.652 Service CnxtHdAudService C:\Windows\system32\drivers\CHDRT32.sys **LOCKED** 32 08:08:49.939 Service Compbatt C:\Windows\system32\DRIVERS\compbatt.sys **LOCKED** 32 08:08:50.006 Service crcdisk C:\Windows\system32\drivers\crcdisk.sys **LOCKED** 32 08:08:50.066 Service Crusoe C:\Windows\system32\drivers\crusoe.sys **LOCKED** 32 08:08:50.894 Service disk C:\Windows\system32\drivers\disk.sys **LOCKED** 32 08:08:51.239 Service drmkaud C:\Windows\system32\drivers\drmkaud.sys **LOCKED** 32 08:08:51.388 Service DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys **LOCKED** 32 08:08:51.493 Service E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys **LOCKED** 32 08:08:51.631 Service Ecache C:\Windows\System32\drivers\ecache.sys **LOCKED** 32 08:08:51.905 Service elxstor C:\Windows\system32\drivers\elxstor.sys **LOCKED** 32 08:08:52.063 Service ErrDev C:\Windows\system32\drivers\errdev.sys **LOCKED** 32 08:08:52.549 Service fdc C:\Windows\system32\DRIVERS\fdc.sys **LOCKED** 32 08:08:53.012 Service flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys **LOCKED** 32 08:08:53.993 Service gagp30kx C:\Windows\system32\drivers\gagp30kx.sys **LOCKED** 32 08:08:54.332 Service HdAudAddService C:\Windows\system32\drivers\HdAudio.sys **LOCKED** 32 08:08:54.433 Service HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys **LOCKED** 32 08:08:54.496 Service HidBth C:\Windows\system32\drivers\hidbth.sys **LOCKED** 32 08:08:54.532 Service HidIr C:\Windows\system32\drivers\hidir.sys **LOCKED** 32 08:08:54.676 Service HidUsb C:\Windows\system32\DRIVERS\hidusb.sys **LOCKED** 32 08:08:54.911 Service HpCISSs C:\Windows\system32\drivers\hpcisss.sys **LOCKED** 32 08:08:55.250 Service HpqKbFiltr C:\Windows\system32\DRIVERS\HpqKbFiltr.sys **LOCKED** 32 08:08:55.772 Service HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys **LOCKED** 32 08:08:55.834 Service HSXHWAZL C:\Windows\system32\DRIVERS\HSXHWAZL.sys **LOCKED** 32 08:08:55.956 Service HTTP C:\Windows\system32\drivers\HTTP.sys **LOCKED** 32 08:08:55.993 Service i2omp C:\Windows\system32\drivers\i2omp.sys **LOCKED** 32 08:08:56.040 Service i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys **LOCKED** 32 08:08:56.099 Service iaStorV C:\Windows\system32\drivers\iastorv.sys **LOCKED** 32 08:08:58.107 Service igfx C:\Windows\system32\DRIVERS\igdkmd32.sys **LOCKED** 32 08:08:58.574 Service iirsp C:\Windows\system32\drivers\iirsp.sys **LOCKED** 32 08:08:58.859 Service IntcHdmiAddService C:\Windows\system32\drivers\IntcHdmi.sys **LOCKED** 32 08:08:58.905 Service intelide C:\Windows\system32\drivers\intelide.sys **LOCKED** 32 08:08:58.953 Service intelppm C:\Windows\system32\DRIVERS\intelppm.sys **LOCKED** 32 08:08:59.030 Service IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys **LOCKED** 32 08:08:59.173 Service IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys **LOCKED** 32 08:08:59.281 Service IPNAT C:\Windows\system32\DRIVERS\ipnat.sys **LOCKED** 32 08:08:59.335 Service IRENUM C:\Windows\system32\drivers\irenum.sys **LOCKED** 32 08:08:59.420 Service isapnp C:\Windows\system32\drivers\isapnp.sys **LOCKED** 32 08:08:59.667 Service iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys **LOCKED** 32 08:08:59.726 Service iteatapi C:\Windows\system32\drivers\iteatapi.sys **LOCKED** 32 08:08:59.763 Service iteraid C:\Windows\system32\drivers\iteraid.sys **LOCKED** 32 08:08:59.800 Service kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys **LOCKED** 32 08:08:59.853 Service kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys **LOCKED** 32 08:08:59.992 Service kl1 C:\Windows\system32\DRIVERS\kl1.sys **LOCKED** 32 08:09:00.056 Service kl2 C:\Windows\system32\DRIVERS\kl2.sys **LOCKED** 32 08:09:00.252 Service KLIM6 C:\Windows\system32\DRIVERS\klim6.sys **LOCKED** 32 08:09:00.297 Service klmouflt C:\Windows\system32\DRIVERS\klmouflt.sys **LOCKED** 32 08:09:00.365 Service KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys **LOCKED** 32 08:09:00.451 Service KSecDD C:\Windows\System32\Drivers\ksecdd.sys **LOCKED** 32 08:09:00.851 Service lltdio C:\Windows\system32\DRIVERS\lltdio.sys **LOCKED** 32 08:09:01.006 Service LSI_FC C:\Windows\system32\drivers\lsi_fc.sys **LOCKED** 32 08:09:01.042 Service LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys **LOCKED** 32 08:09:01.079 Service LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys **LOCKED** 32 08:09:01.583 Service mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys **LOCKED** 32 08:09:01.628 Service megasas C:\Windows\system32\drivers\megasas.sys **LOCKED** 32 08:09:01.688 Service MegaSR C:\Windows\system32\drivers\megasr.sys **LOCKED** 32 08:09:01.780 Service Modem C:\Windows\system32\drivers\modem.sys **LOCKED** 32 08:09:01.817 Service monitor C:\Windows\system32\DRIVERS\monitor.sys **LOCKED** 32 08:09:01.876 Service mouclass C:\Windows\system32\DRIVERS\mouclass.sys **LOCKED** 32 08:09:01.927 Service mouhid C:\Windows\system32\DRIVERS\mouhid.sys **LOCKED** 32 08:09:01.975 Service MountMgr C:\Windows\System32\drivers\mountmgr.sys **LOCKED** 32 08:09:02.161 Service mpio C:\Windows\system32\drivers\mpio.sys **LOCKED** 32 08:09:02.200 Service mpsdrv C:\Windows\System32\drivers\mpsdrv.sys **LOCKED** 32 08:09:02.364 Service Mraid35x C:\Windows\system32\drivers\mraid35x.sys **LOCKED** 32 08:09:02.612 Service msahci C:\Windows\system32\drivers\msahci.sys **LOCKED** 32 08:09:02.671 Service msdsm C:\Windows\system32\drivers\msdsm.sys **LOCKED** 32 08:09:02.792 Service msisadrv C:\Windows\system32\drivers\msisadrv.sys **LOCKED** 32 08:09:03.063 Service MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys **LOCKED** 32 08:09:03.159 Service MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys **LOCKED** 32 08:09:03.197 Service MSPQM C:\Windows\system32\drivers\MSPQM.sys **LOCKED** 32 08:09:03.261 Service MsRPC C:\Windows\System32\Drivers\MsRPC.sys **LOCKED** 32 08:09:03.330 Service mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys **LOCKED** 32 08:09:03.429 Service MSTEE C:\Windows\system32\drivers\MSTEE.sys **LOCKED** 32 08:09:03.664 Service NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys **LOCKED** 32 08:09:03.746 Service NDIS C:\Windows\system32\drivers\ndis.sys **LOCKED** 32 08:09:03.794 Service NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys **LOCKED** 32 08:09:03.939 Service Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys **LOCKED** 32 08:09:04.061 Service NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys **LOCKED** 32 08:09:04.135 Service NDProxy C:\Windows\System32\Drivers\NDProxy.sys **LOCKED** 32 08:09:04.247 Service netbt C:\Windows\System32\DRIVERS\netbt.sys **LOCKED** 32 08:09:05.163 Service NETw3v32 C:\Windows\system32\DRIVERS\NETw3v32.sys **LOCKED** 32 08:09:05.268 Service nfrd960 C:\Windows\system32\drivers\nfrd960.sys **LOCKED** 32 08:09:05.579 Service nsiproxy C:\Windows\system32\drivers\nsiproxy.sys **LOCKED** 32 08:09:05.906 Service ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys **LOCKED** 32 08:09:05.947 Service Null C:\Windows\System32\Drivers\Null.sys **LOCKED** 32 08:09:06.014 Service nvraid C:\Windows\system32\drivers\nvraid.sys **LOCKED** 32 08:09:06.048 Service nvstor C:\Windows\system32\drivers\nvstor.sys **LOCKED** 32 08:09:06.091 Service nv_agp C:\Windows\system32\drivers\nv_agp.sys **LOCKED** 32 08:09:06.368 Service ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys **LOCKED** 32 08:09:06.769 Service Parport C:\Windows\system32\drivers\parport.sys **LOCKED** 32 08:09:06.834 Service partmgr C:\Windows\System32\drivers\partmgr.sys **LOCKED** 32 08:09:06.940 Service Parvdm C:\Windows\system32\drivers\parvdm.sys **LOCKED** 32 08:09:07.174 Service pci C:\Windows\system32\drivers\pci.sys **LOCKED** 32 08:09:07.223 Service pciide C:\Windows\system32\drivers\pciide.sys **LOCKED** 32 08:09:07.304 Service pcmcia C:\Windows\system32\drivers\pcmcia.sys **LOCKED** 32 08:09:07.449 Service PEAUTH C:\Windows\system32\drivers\peauth.sys **LOCKED** 32 08:09:08.332 Service PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys **LOCKED** 32 08:09:08.395 Service Processor C:\Windows\system32\drivers\processr.sys **LOCKED** 32 08:09:08.610 Service PSched C:\Windows\system32\DRIVERS\pacer.sys **LOCKED** 32 08:09:08.679 Service PxHelp20 C:\Windows\System32\Drivers\PxHelp20.sys **LOCKED** 32 08:09:08.987 Service ql2300 C:\Windows\system32\drivers\ql2300.sys **LOCKED** 32 08:09:09.046 Service ql40xx C:\Windows\system32\drivers\ql40xx.sys **LOCKED** 32 08:09:09.241 Service QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys **LOCKED** 32 08:09:09.298 Service RasAcd C:\Windows\System32\DRIVERS\rasacd.sys **LOCKED** 32 08:09:09.517 Service Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys **LOCKED** 32 08:09:09.656 Service RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys **LOCKED** 32 08:09:09.700 Service RasSstp C:\Windows\system32\DRIVERS\rassstp.sys **LOCKED** 32 08:09:09.828 Service RDPCDD C:\Windows\System32\DRIVERS\RDPCDD.sys **LOCKED** 32 08:09:09.892 Service rdpdr C:\Windows\system32\drivers\rdpdr.sys **LOCKED** 32 08:09:09.918 Service RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys **LOCKED** 32 08:09:09.995 Service RDPWD C:\Windows\System32\Drivers\RDPWD.sys **LOCKED** 32 08:09:10.734 Service rspndr C:\Windows\system32\DRIVERS\rspndr.sys **LOCKED** 32 08:09:10.804 Service RTL8169 C:\Windows\system32\DRIVERS\Rtlh86.sys **LOCKED** 32 08:09:10.961 Service sbp2port C:\Windows\system32\drivers\sbp2port.sys **LOCKED** 32 08:09:11.253 Service sdbus C:\Windows\system32\DRIVERS\sdbus.sys **LOCKED** 32 08:09:11.371 Service secdrv C:\Windows\System32\Drivers\secdrv.sys **LOCKED** 32 08:09:11.488 Service Serenum C:\Windows\system32\drivers\serenum.sys **LOCKED** 32 08:09:11.573 Service Serial C:\Windows\system32\drivers\serial.sys **LOCKED** 32 08:09:11.676 Service sermouse C:\Windows\system32\drivers\sermouse.sys **LOCKED** 32 08:09:11.820 Service sffdisk C:\Windows\system32\drivers\sffdisk.sys **LOCKED** 32 08:09:11.876 Service sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys **LOCKED** 32 08:09:11.931 Service sffp_sd C:\Windows\system32\drivers\sffp_sd.sys **LOCKED** 32 08:09:11.970 Service sfloppy C:\Windows\system32\drivers\sfloppy.sys **LOCKED** 32 08:09:12.241 Service sisagp C:\Windows\system32\drivers\sisagp.sys **LOCKED** 32 08:09:12.288 Service SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys **LOCKED** 32 08:09:12.395 Service SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys **LOCKED** 32 08:09:13.142 Service Smb C:\Windows\system32\DRIVERS\smb.sys **LOCKED** 32 08:09:13.244 Service spldr C:\Windows\System32\Drivers\spldr.sys **LOCKED** 32 08:09:13.902 Service swenum C:\Windows\system32\DRIVERS\swenum.sys **LOCKED** 32 08:09:14.037 Service Symc8xx C:\Windows\system32\drivers\symc8xx.sys **LOCKED** 32 08:09:14.136 Service Sym_hi C:\Windows\system32\drivers\sym_hi.sys **LOCKED** 32 08:09:14.187 Service Sym_u3 C:\Windows\system32\drivers\sym_u3.sys **LOCKED** 32 08:09:14.249 Service SynTP C:\Windows\system32\DRIVERS\SynTP.sys **LOCKED** 32 08:09:14.898 Service Tcpip C:\Windows\System32\drivers\tcpip.sys **LOCKED** 32 08:09:15.030 Service Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys **LOCKED** 32 08:09:15.123 Service tcpipreg C:\Windows\System32\drivers\tcpipreg.sys **LOCKED** 32 08:09:15.179 Service TDPIPE C:\Windows\system32\drivers\tdpipe.sys **LOCKED** 32 08:09:15.311 Service TDTCP C:\Windows\system32\drivers\tdtcp.sys **LOCKED** 32 08:09:15.400 Service tdx C:\Windows\system32\DRIVERS\tdx.sys **LOCKED** 32 08:09:15.460 Service TermDD C:\Windows\system32\DRIVERS\termdd.sys **LOCKED** 32 08:09:15.976 Service tssecsrv C:\Windows\System32\DRIVERS\tssecsrv.sys **LOCKED** 32 08:09:16.034 Service tunmp C:\Windows\system32\DRIVERS\tunmp.sys **LOCKED** 32 08:09:16.101 Service tunnel C:\Windows\system32\DRIVERS\tunnel.sys **LOCKED** 32 08:09:16.161 Service uagp35 C:\Windows\system32\drivers\uagp35.sys **LOCKED** 32 08:09:16.372 Service uliagpkx C:\Windows\system32\drivers\uliagpkx.sys **LOCKED** 32 08:09:16.445 Service uliahci C:\Windows\system32\drivers\uliahci.sys **LOCKED** 32 08:09:16.510 Service UlSata C:\Windows\system32\drivers\ulsata.sys **LOCKED** 32 08:09:16.547 Service ulsata2 C:\Windows\system32\drivers\ulsata2.sys **LOCKED** 32 08:09:16.633 Service umbus C:\Windows\system32\DRIVERS\umbus.sys **LOCKED** 32 08:09:16.813 Service usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys **LOCKED** 32 08:09:16.890 Service usbcir C:\Windows\system32\drivers\usbcir.sys **LOCKED** 32 08:09:16.931 Service usbehci C:\Windows\system32\DRIVERS\usbehci.sys **LOCKED** 32 08:09:16.981 Service usbhub C:\Windows\system32\DRIVERS\usbhub.sys **LOCKED** 32 08:09:17.043 Service usbohci C:\Windows\system32\drivers\usbohci.sys **LOCKED** 32 08:09:17.109 Service usbprint C:\Windows\system32\DRIVERS\usbprint.sys **LOCKED** 32 08:09:17.186 Service usbscan C:\Windows\system32\DRIVERS\usbscan.sys **LOCKED** 32 08:09:17.299 Service USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS **LOCKED** 32 08:09:17.356 Service usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys **LOCKED** 32 08:09:17.551 Service vga C:\Windows\system32\DRIVERS\vgapnp.sys **LOCKED** 32 08:09:17.685 Service VgaSave C:\Windows\System32\drivers\vga.sys **LOCKED** 32 08:09:17.766 Service viaagp C:\Windows\system32\drivers\viaagp.sys **LOCKED** 32 08:09:17.850 Service ViaC7 C:\Windows\system32\drivers\viac7.sys **LOCKED** 32 08:09:17.899 Service viaide C:\Windows\system32\drivers\viaide.sys **LOCKED** 32 08:09:17.939 Service volmgr C:\Windows\system32\drivers\volmgr.sys **LOCKED** 32 08:09:18.052 Service volmgrx C:\Windows\System32\drivers\volmgrx.sys **LOCKED** 32 08:09:18.101 Service volsnap C:\Windows\system32\drivers\volsnap.sys **LOCKED** 32 08:09:18.171 Service vsmraid C:\Windows\system32\drivers\vsmraid.sys **LOCKED** 32 08:09:18.428 Service WacomPen C:\Windows\system32\drivers\wacompen.sys **LOCKED** 32 08:09:18.470 Service Wanarp C:\Windows\system32\DRIVERS\wanarp.sys **LOCKED** 32 08:09:18.542 Service Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys **LOCKED** 32 08:09:18.754 Service Wd C:\Windows\system32\drivers\wd.sys **LOCKED** 32 08:09:18.832 Service Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys **LOCKED** 32 08:09:19.697 Service winachsf C:\Windows\system32\DRIVERS\HSX_CNXT.sys **LOCKED** 32 08:09:20.514 Service WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys **LOCKED** 32 08:09:21.208 Service WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys **LOCKED** 32 08:09:21.610 Service ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys **LOCKED** 32 08:09:22.138 Service XAudio C:\Windows\system32\DRIVERS\xaudio.sys **LOCKED** 32 08:09:22.294 Service yukonwlh C:\Windows\system32\DRIVERS\yk60x86.sys **LOCKED** 32 08:09:22.809 Modules scanning 08:09:33.744 Disk 0 trace - called modules: 08:09:33.777 ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS hal.dll PCIIDEX.SYS msahci.sys 08:09:33.782 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x876ddac8] 08:09:33.791 3 CLASSPNP.SYS[8074b8b3] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x86e874f8] 08:09:37.829 AVAST engine scan C:\Windows 08:09:41.647 AVAST engine scan C:\Windows\system32 08:15:08.180 AVAST engine scan C:\Windows\system32\drivers 08:15:26.901 AVAST engine scan C:\Users\owner 08:17:52.947 Disk 0 MBR has been saved successfully to "C:\Users\owner\Documents\MBR.dat" 08:17:52.968 The log file has been saved successfully to "C:\Users\owner\Documents\aswMBR.txt" . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_35 Run by owner at 8:27:18 on 2012-09-21 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1719 [GMT -4:00] . SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe C:\Windows\system32\svchost.exe -k hpdevmgmt C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\SMINST\BLService.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\DRIVERS\xaudio.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\system32\taskeng.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Windows\ehome\ehtray.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\ehome\ehmsas.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtblfs.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com/ uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb mStart Page = hxxp://news.searchonme.com/ mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb BHO: MRI_DISABLED - No File BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Canon Easy-WebPrint EX BHO: {3785d0ad-bfff-47f6-bf5b-a587c162fed9} - c:\program files\canon\easy-webprint ex\ewpexbho.dll BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll BHO: Java Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll TB: Microsoft Live Search Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll TB: Canon Easy-WebPrint EX: {759d9886-0c6f-4498-bab6-4a5f47c6c72f} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll EB: Canon Easy-WebPrint EX: {21347690-ec41-4f9a-8887-1f4aee672439} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe uRun: [PhotoshopElements8SyncAgent] c:\program files\adobe\elements organizer 8.0\ElementsOrganizerSyncAgent.exe mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe" mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe mRun: [<NO NAME>] mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [igfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [CarboniteSetupLite] "c:\program files\carbonite\CarbonitePreinstaller.exe" /preinstalled /showonfirst /reshowat=900 mRun: [MaxMenuMgr] "c:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe" mRun: [AVP] "c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe" mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" StartupFolder: c:\users\owner\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1) mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Add to Video Converter... - c:\program files\media player utilities 5.22\aviconverter\grab.html IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemydsl.verizon.net/sdcCommon/download/DSL/Verizon%20High%20Speed%20Internet%20Installer.cab DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} - hxxp://www.photodex.com/pxplay.cab DPF: {D8AA889B-2C65-47C3-8C16-3DCD4EF76A47} DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: DhcpNameServer = 75.75.75.75 75.75.76.76 TCP: Interfaces\{5BFE09BE-457F-46D2-8C44-E2109BE37AEF} : DhcpNameServer = 75.75.75.75 75.75.76.76 TCP: Interfaces\{CA1C5711-860D-4A79-B755-7CB579CEDBEA} : DhcpNameServer = 68.87.64.230 68.87.66.234 Notify: igfxcui - igfxdev.dll Notify: klogon - c:\windows\system32\klogon.dll AppInit_DLLs: c:\progra~1\sprote~1\sprote~1.dll mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe" . ================= FIREFOX =================== . FF - ProfilePath - c:\users\owner\appdata\roaming\mozilla\firefox\profiles\ehpubqd6.default\ FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/ FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q= FF - prefs.js: network.proxy.type - 0 FF - plugin: c:\program files\canon\easy-photoprint ex\NPEZFFPI.DLL FF - plugin: c:\program files\canon\mycamera download plugin\NPCIG.dll FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll FF - plugin: c:\users\owner\appdata\locallow\unity\webplayer\loader\npUnity3D32.dll FF - plugin: c:\users\owner\appdata\roaming\mozilla\plugins\npPxPlay.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_278.dll FF - plugin: c:\windows\system32\npdeployJava1.dll FF - plugin: c:\windows\system32\npmproxy.dll . ============= SERVICES / DRIVERS =============== . R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352] R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2011-3-10 23856] R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\adobe\elements organizer 8.0\PhotoshopElementsFileAgent.exe [2009-9-6 169312] R2 AVP;Kaspersky Anti-Virus Service;c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r --> c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r [?] R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504] R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2009-12-18 189736] R2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\verizon\iha_messagecenter\bin\Verizon_IHAMessageCenter.exe [2011-12-12 290832] R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-9-21 399432] R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-9-21 676936] R2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\sminst\BLService.exe [2009-4-22 365952] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-6-29 112128] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-9-21 22856] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-5-25 250288] S3 Com4QLBEx;Com4QLBEx;c:\program files\hewlett-packard\hp quick launch buttons\Com4QLBEx.exe [2009-4-22 193840] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-6-7 113120] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2012-09-21 06:35:34 -------- d-----w- c:\users\owner\appdata\roaming\Malwarebytes 2012-09-21 06:35:13 -------- d-----w- c:\programdata\Malwarebytes 2012-09-21 06:35:09 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-09-21 06:35:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-09-21 06:33:35 477168 ----a-w- c:\windows\system32\npdeployJava1.dll 2012-09-21 05:59:35 6980552 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{a7b63c3d-ac3c-41c9-8c97-6c53ae632628}\mpengine.dll 2012-09-19 23:08:26 -------- d-----w- c:\programdata\Premium 2012-09-19 23:07:37 -------- d-----w- c:\program files\SProtector 2012-09-19 23:06:36 -------- d-----w- c:\programdata\InstallMate . ==================== Find3M ==================== . 2012-09-21 06:32:44 473072 ----a-w- c:\windows\system32\deployJava1.dll 2012-09-20 20:59:24 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-09-20 20:59:24 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-07-04 14:02:46 2047488 ----a-w- c:\windows\system32\win32k.sys 2012-06-29 00:16:58 1800704 ----a-w- c:\windows\system32\jscript9.dll 2012-06-29 00:09:01 1129472 ----a-w- c:\windows\system32\wininet.dll 2012-06-29 00:08:59 1427968 ----a-w- c:\windows\system32\inetcpl.cpl 2012-06-29 00:04:43 142848 ----a-w- c:\windows\system32\ieUnatt.exe 2012-06-29 00:00:45 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-06-28 19:39:17 260 ----a-w- c:\windows\system32\cmdVBS.vbs 2012-06-28 19:39:17 256 ----a-w- c:\windows\system32\MSIevent.bat . ============= FINISH: 8:28:23.79 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft® Windows Vista™ Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 5/16/2009 5:05:14 PM System Uptime: 9/21/2012 7:18:41 AM (1 hours ago) . Motherboard: Wistron | | 3612 Processor: Intel® Celeron® CPU 900 @ 2.20GHz | CPU | 2194/800mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 138 GiB total, 28.525 GiB free. D: is FIXED (NTFS) - 11 GiB total, 1.831 GiB free. E: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . . ==== Installed Programs ====================== . . Update for Microsoft Office 2007 (KB2508958) Acrobat.com ActiveCheck component for HP Active Support Library Adobe AIR Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Photoshop Elements 8.0 Adobe Photoshop.com Inspiration Browser Adobe Reader 9.4.0 Adobe Shockwave Player Amazon MP3 Downloader 1.0.12 Atheros Driver Installation Program Barnes & Noble Desktop Reader BufferChm Canon Easy-WebPrint EX CANON iMAGE GATEWAY MyCamera Download Plugin CANON iMAGE GATEWAY Task for ZoomBrowser EX Canon Inkjet Printer/Scanner/Fax Extended Survey Program Canon MOV Decoder Canon MOV Encoder Canon MovieEdit Task for ZoomBrowser EX Canon MP Navigator EX 3.0 Canon MP250 series MP Drivers Canon MP250 series User Registration Canon Utilities Digital Photo Professional 3.10 Canon Utilities Easy-PhotoPrint EX Canon Utilities EOS Sample Music Canon Utilities EOS Utility Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX Canon Utilities Movie Uploader for YouTube Canon Utilities My Printer Canon Utilities PhotoStitch Canon Utilities Picture Style Editor Canon Utilities Solution Menu Canon Utilities ZoomBrowser EX Canon ZoomBrowser EX Memory Card Utility Carbonite Online Backup Setup Compatibility Pack for the 2007 Office system Conexant HD Audio Coupon Printer for Windows CustomerResearchQFolder CyberLink DVD Suite D1500 D1500_Help DeviceDiscovery DeviceManagementQFolder DJ_SF_03_D1500_ProductContext DJ_SF_03_D1500_Software DJ_SF_03_D1500_Software_Min EA Download Manager ESU for Microsoft Vista eSupportQFolder GPBaseService HDAUDIO Soft Data Fax Modem with SmartCP Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) HP Active Support Library HP Customer Experience Enhancements HP Customer Participation Program 10.0 HP Deskjet D1500 Printer Driver Software 10.0 Rel .3 HP Doc Viewer HP DVD Play 3.7 HP Help and Support HP Imaging Device Functions 10.0 HP Photosmart Essential 3.5 HP Quick Launch Buttons 6.40 H2 HP Smart Web Printing 4.60 HP Solution Center 10.0 HP Update HP User Guides 0118 HP Wireless Assistant HPAsset component for HP Active Support Library HPNetworkAssistant HPPhotoSmartDiscLabelContent1 HPPhotosmartEssential HPProductAssistant HPSSupply IHA_MessageCenter Intel® Graphics Media Accelerator Driver Invoke Solutions Participant 6.2.0.1452 Java Auto Updater Java 6 Update 35 Java 6 Update 7 Kaspersky Anti-Virus 2012 LabelPrint LightScribe System Software 1.14.17.1 Malwarebytes Anti-Malware version 1.65.0.1400 MarketResearch Media Player Utilities 5.22 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft Live Search Toolbar Microsoft Office 2007 Service Pack 3 (SP3) Microsoft Office Excel MUI (English) 2007 Microsoft Office File Validation Add-In Microsoft Office Home and Student 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Works Microsoft WSE 3.0 Runtime Mozilla Firefox 14.0.1 (x86 en-US) Mozilla Maintenance Service MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) muvee Reveal muvee Reveal Seagate Edition My HP Games NetWaiting OGA Notifier 2.0.0048.0 OpenOffice.org 3.2 Photodex Presenter Power2Go PowerDirector PSSWCORE Realtek 8169 8168 8101E 8102E Ethernet Driver RegWork Seagate Manager Installer Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition Security Update for Microsoft Office InfoPath 2007 (KB2596786) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition Shop for HP Supplies SmartWebPrinting SolutionCenter SPORE Creature Creator Trial Edition sprotector 1.62 Status Synaptics Pointing Device Driver System Requirements Lab The Sims Medieval The Sims™ 3 The Sims™ 3 Ambitions The Sims™ 3 High-End Loft Stuff The Sims™ 3 Late Night The Sims™ 3 Outdoor Living Stuff The Sims™ 3 World Adventures Toolbox TrayApp Unity Web Player UnloadSupport Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2600217) Update for Microsoft Office 2007 Help for Common Features (KB963673) Update for Microsoft Office Excel 2007 Help (KB963678) Update for Microsoft Office OneNote 2007 Help (KB963670) Update for Microsoft Office Powerpoint 2007 Help (KB963669) Update for Microsoft Office Script Editor Help (KB963671) Update for Microsoft Office Word 2007 Help (KB963665) VideoToolkit01 WebReg . ==== Event Viewer Messages From Past Week ======== . 9/17/2012 7:24:34 PM, Error: EventLog [6008] - The previous system shutdown at 8:29:44 PM on 9/16/2012 was unexpected. 9/15/2012 9:12:23 AM, Error: EventLog [6008] - The previous system shutdown at 11:54:53 AM on 9/13/2012 was unexpected. . ==== End Of File ===========================

I will follow all the directions you just gave me....but first, I may sound really dumb, but I cannot find Norton Internet Security anywhere on my computer. I didn't even know I had it. How can I find it to uninstall it?

Today my mother used my laptop while I was at a meeting and when I returned home she said that my homepage, google.com, was not pulling up when she tried to start Firefox or IE. Instead it says that there was a problem with the program and if a solution is found I would be notified then another search engine starts. I cannot open internet options to change my homepage, nor can I open any of the windows security features. I'm not sure if this is some sort of redirect virus or what since everything I've seen so far on those are the search result links in google redirect to another site that had nothing to do with the search. I ran the malware scan and it showed 4 threats and after the restart it said they were removed, however the same issue is happening. I'm lost! . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_35 Run by owner at 3:51:01 on 2012-09-21 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3002.1580 [GMT -4:00] . SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe C:\Windows\system32\svchost.exe -k hpdevmgmt C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\SMINST\BLService.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\DRIVERS\xaudio.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\system32\taskeng.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Windows\ehome\ehtray.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Windows\system32\wbem\unsecapp.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtblfs.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_278.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_278.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com/ uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb mStart Page = hxxp://news.searchonme.com/ mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Presario&pf=cnnb uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll BHO: MRI_DISABLED - No File BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Canon Easy-WebPrint EX BHO: {3785d0ad-bfff-47f6-bf5b-a587c162fed9} - c:\program files\canon\easy-webprint ex\ewpexbho.dll BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll BHO: Java Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll TB: Microsoft Live Search Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\program files\msn\toolbar\3.0.0541.0\msneshellx.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll TB: Canon Easy-WebPrint EX: {759d9886-0c6f-4498-bab6-4a5f47c6c72f} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll EB: Canon Easy-WebPrint EX: {21347690-ec41-4f9a-8887-1f4aee672439} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe uRun: [PhotoshopElements8SyncAgent] c:\program files\adobe\elements organizer 8.0\ElementsOrganizerSyncAgent.exe uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe" mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe mRun: [<NO NAME>] mRun: [CanonMyPrinter] c:\program files\canon\myprinter\BJMyPrt.exe /logon mRun: [CanonSolutionMenu] c:\program files\canon\solutionmenu\CNSLMAIN.exe /logon mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [igfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [CarboniteSetupLite] "c:\program files\carbonite\CarbonitePreinstaller.exe" /preinstalled /showonfirst /reshowat=900 mRun: [MaxMenuMgr] "c:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe" mRun: [AVP] "c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe" mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" StartupFolder: c:\users\owner\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1) mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Add to Video Converter... - c:\program files\media player utilities 5.22\aviconverter\grab.html IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemydsl.verizon.net/sdcCommon/download/DSL/Verizon%20High%20Speed%20Internet%20Installer.cab DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll DPF: {445F47D7-E043-4BD6-82EB-7A1BD0EBA773} - hxxp://www.psapoll.com/CopyGuardIE.cab DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab DPF: {A7846ED2-9DE6-4E8A-B116-A8ACEBFA7DB1} - hxxp://rms2.invokesolutions.com/events/bin/6.2.0.1452/MILive.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} - hxxp://www.photodex.com/pxplay.cab DPF: {D8AA889B-2C65-47C3-8C16-3DCD4EF76A47} DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: DhcpNameServer = 75.75.75.75 75.75.76.76 TCP: Interfaces\{5BFE09BE-457F-46D2-8C44-E2109BE37AEF} : DhcpNameServer = 75.75.75.75 75.75.76.76 TCP: Interfaces\{CA1C5711-860D-4A79-B755-7CB579CEDBEA} : DhcpNameServer = 68.87.64.230 68.87.66.234 Notify: igfxcui - igfxdev.dll Notify: klogon - c:\windows\system32\klogon.dll AppInit_DLLs: c:\progra~1\sprote~1\sprote~1.dll mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe" . ================= FIREFOX =================== . FF - ProfilePath - c:\users\owner\appdata\roaming\mozilla\firefox\profiles\ehpubqd6.default\ FF - prefs.js: browser.search.defaulturl - hxxp://news.searchonme.com/?l=1&q= FF - prefs.js: browser.search.selectedEngine - SearchOnMe FF - prefs.js: browser.startup.homepage - hxxp://news.searchonme.com/ FF - prefs.js: keyword.URL - hxxp://news.searchonme.com/?l=1&q= FF - prefs.js: network.proxy.type - 0 FF - plugin: c:\program files\canon\easy-photoprint ex\NPEZFFPI.DLL FF - plugin: c:\program files\canon\mycamera download plugin\NPCIG.dll FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll FF - plugin: c:\users\owner\appdata\locallow\unity\webplayer\loader\npUnity3D32.dll FF - plugin: c:\users\owner\appdata\roaming\mozilla\plugins\npPxPlay.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_278.dll FF - plugin: c:\windows\system32\npdeployJava1.dll FF - plugin: c:\windows\system32\npmproxy.dll . ============= SERVICES / DRIVERS =============== . R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352] R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2011-3-10 23856] R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files\adobe\elements organizer 8.0\PhotoshopElementsFileAgent.exe [2009-9-6 169312] R2 AVP;Kaspersky Anti-Virus Service;c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r --> c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe -r [?] R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504] R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2009-12-18 189736] R2 IHA_MessageCenter;IHA_MessageCenter;c:\program files\verizon\iha_messagecenter\bin\Verizon_IHAMessageCenter.exe [2011-12-12 290832] R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-9-21 399432] R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-9-21 676936] R2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\sminst\BLService.exe [2009-4-22 365952] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-6-29 112128] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-9-21 22856] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 Norton Internet Security;Norton Internet Security;"c:\program files\norton internet security\engine\16.0.0.125\ccsvchst.exe" /s "norton internet security" /m "c:\program files\norton internet security\engine\16.0.0.125\dimaster.dll" /prefetch:1 --> c:\program files\norton internet security\engine\16.0.0.125\ccSvcHst.exe [?] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-5-25 250288] S3 Com4QLBEx;Com4QLBEx;c:\program files\hewlett-packard\hp quick launch buttons\Com4QLBEx.exe [2009-4-22 193840] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-6-7 113120] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2012-09-21 06:35:34 -------- d-----w- c:\users\owner\appdata\roaming\Malwarebytes 2012-09-21 06:35:13 -------- d-----w- c:\programdata\Malwarebytes 2012-09-21 06:35:09 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-09-21 06:35:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-09-21 06:33:35 477168 ----a-w- c:\windows\system32\npdeployJava1.dll 2012-09-21 05:59:35 6980552 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{a7b63c3d-ac3c-41c9-8c97-6c53ae632628}\mpengine.dll 2012-09-19 23:08:26 -------- d-----w- c:\programdata\Premium 2012-09-19 23:07:37 -------- d-----w- c:\program files\SProtector 2012-09-19 23:06:36 -------- d-----w- c:\programdata\InstallMate . ==================== Find3M ==================== . 2012-09-21 06:32:44 473072 ----a-w- c:\windows\system32\deployJava1.dll 2012-09-20 20:59:24 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-09-20 20:59:24 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-07-04 14:02:46 2047488 ----a-w- c:\windows\system32\win32k.sys 2012-06-29 00:16:58 1800704 ----a-w- c:\windows\system32\jscript9.dll 2012-06-29 00:09:01 1129472 ----a-w- c:\windows\system32\wininet.dll 2012-06-29 00:08:59 1427968 ----a-w- c:\windows\system32\inetcpl.cpl 2012-06-29 00:04:43 142848 ----a-w- c:\windows\system32\ieUnatt.exe 2012-06-29 00:00:45 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-06-28 19:39:17 260 ----a-w- c:\windows\system32\cmdVBS.vbs 2012-06-28 19:39:17 256 ----a-w- c:\windows\system32\MSIevent.bat . ============= FINISH: 3:52:01.50 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft® Windows Vista™ Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 5/16/2009 5:05:14 PM System Uptime: 9/21/2012 3:00:23 AM (0 hours ago) . Motherboard: Wistron | | 3612 Processor: Intel® Celeron® CPU 900 @ 2.20GHz | CPU | 2194/800mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 138 GiB total, 27.924 GiB free. D: is FIXED (NTFS) - 11 GiB total, 1.831 GiB free. E: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . . ==== Installed Programs ====================== . . Update for Microsoft Office 2007 (KB2508958) Acrobat.com ActiveCheck component for HP Active Support Library Adobe AIR Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Photoshop Elements 8.0 Adobe Photoshop.com Inspiration Browser Adobe Reader 9.4.0 Adobe Shockwave Player Amazon MP3 Downloader 1.0.12 Atheros Driver Installation Program Barnes & Noble Desktop Reader BufferChm Canon Easy-WebPrint EX CANON iMAGE GATEWAY MyCamera Download Plugin CANON iMAGE GATEWAY Task for ZoomBrowser EX Canon Inkjet Printer/Scanner/Fax Extended Survey Program Canon MOV Decoder Canon MOV Encoder Canon MovieEdit Task for ZoomBrowser EX Canon MP Navigator EX 3.0 Canon MP250 series MP Drivers Canon MP250 series User Registration Canon Utilities Digital Photo Professional 3.10 Canon Utilities Easy-PhotoPrint EX Canon Utilities EOS Sample Music Canon Utilities EOS Utility Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX Canon Utilities Movie Uploader for YouTube Canon Utilities My Printer Canon Utilities PhotoStitch Canon Utilities Picture Style Editor Canon Utilities Solution Menu Canon Utilities ZoomBrowser EX Canon ZoomBrowser EX Memory Card Utility Carbonite Online Backup Setup Compatibility Pack for the 2007 Office system Conexant HD Audio Coupon Printer for Windows CustomerResearchQFolder CyberLink DVD Suite D1500 D1500_Help DeviceDiscovery DeviceManagementQFolder DJ_SF_03_D1500_ProductContext DJ_SF_03_D1500_Software DJ_SF_03_D1500_Software_Min EA Download Manager ESU for Microsoft Vista eSupportQFolder GPBaseService HDAUDIO Soft Data Fax Modem with SmartCP Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) HP Active Support Library HP Customer Experience Enhancements HP Customer Participation Program 10.0 HP Deskjet D1500 Printer Driver Software 10.0 Rel .3 HP Doc Viewer HP DVD Play 3.7 HP Help and Support HP Imaging Device Functions 10.0 HP Photosmart Essential 3.5 HP Quick Launch Buttons 6.40 H2 HP Smart Web Printing 4.60 HP Solution Center 10.0 HP Update HP User Guides 0118 HP Wireless Assistant HPAsset component for HP Active Support Library HPNetworkAssistant HPPhotoSmartDiscLabelContent1 HPPhotosmartEssential HPProductAssistant HPSSupply IHA_MessageCenter Intel® Graphics Media Accelerator Driver Invoke Solutions Participant 6.2.0.1452 Java Auto Updater Java 6 Update 35 Java 6 Update 7 Kaspersky Anti-Virus 2012 LabelPrint LightScribe System Software 1.14.17.1 Malwarebytes Anti-Malware version 1.65.0.1400 MarketResearch Media Player Utilities 5.22 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft Live Search Toolbar Microsoft Office 2007 Service Pack 3 (SP3) Microsoft Office Excel MUI (English) 2007 Microsoft Office File Validation Add-In Microsoft Office Home and Student 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Silverlight Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Works Microsoft WSE 3.0 Runtime Mozilla Firefox 14.0.1 (x86 en-US) Mozilla Maintenance Service MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) muvee Reveal muvee Reveal Seagate Edition My HP Games NetWaiting Norton Internet Security OGA Notifier 2.0.0048.0 OpenOffice.org 3.2 Photodex Presenter Power2Go PowerDirector PSSWCORE Realtek 8169 8168 8101E 8102E Ethernet Driver RegWork Seagate Manager Installer Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111) Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Security Update for Microsoft .NET Framework 4 Extended (KB2416472) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition Security Update for Microsoft Office InfoPath 2007 (KB2596786) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition Shop for HP Supplies SmartWebPrinting SolutionCenter SPORE Creature Creator Trial Edition sprotector 1.62 Status Synaptics Pointing Device Driver System Requirements Lab The Sims Medieval The Sims™ 3 The Sims™ 3 Ambitions The Sims™ 3 High-End Loft Stuff The Sims™ 3 Late Night The Sims™ 3 Outdoor Living Stuff The Sims™ 3 World Adventures Toolbox TrayApp Unity Web Player UnloadSupport Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2600217) Update for Microsoft Office 2007 Help for Common Features (KB963673) Update for Microsoft Office Excel 2007 Help (KB963678) Update for Microsoft Office OneNote 2007 Help (KB963670) Update for Microsoft Office Powerpoint 2007 Help (KB963669) Update for Microsoft Office Script Editor Help (KB963671) Update for Microsoft Office Word 2007 Help (KB963665) Verizon High Speed Internet Verizon Yahoo! Applications VideoToolkit01 WebReg . ==== Event Viewer Messages From Past Week ======== . 9/17/2012 7:24:34 PM, Error: EventLog [6008] - The previous system shutdown at 8:29:44 PM on 9/16/2012 was unexpected. 9/15/2012 9:12:23 AM, Error: EventLog [6008] - The previous system shutdown at 11:54:53 AM on 9/13/2012 was unexpected. . ==== End Of File ===========================