Jump to content

callenb

Members
 View Profile  See their activity

  • Posts

    14

  • Joined

  • Last visited

 Content Type 

Posts posted by callenb

    My logs. Please help

    in Resolved Malware Removal Logs

    Posted

    Ok, here is the report:

    RogueKiller V8.5.2 [Mar 9 2013] by Tigzy

    mail : tigzyRK<at>gmail<dot>com

    Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

    Website : http://tigzy.geekstogo.com/roguekiller.php

    Blog : http://tigzyrk.blogspot.com/

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

    Started in : Normal mode

    User : Callen [Admin rights]

    Mode : Scan -- Date : 03/12/2013 13:10:47

    | ARK || FAK || MBR |

    ¤¤¤ Bad processes : 0 ¤¤¤

    ¤¤¤ Registry Entries : 6 ¤¤¤

    [HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND

    [HJ] HKLM\[...]\Wow6432Node\System : ConsentPromptBehaviorAdmin (0) -> FOUND

    [HJ] HKLM\[...]\System : EnableLUA (0) -> FOUND

    [HJ] HKLM\[...]\Wow6432Node\System : EnableLUA (0) -> FOUND

    [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

    [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

    ¤¤¤ Particular Files / Folders: ¤¤¤

    ¤¤¤ Driver : [NOT LOADED] ¤¤¤

    ¤¤¤ HOSTS File: ¤¤¤

    --> C:\windows\system32\drivers\etc\hosts

    127.0.0.1 activate.adobe.com

    127.0.0.1 practivate.adobe.com

    127.0.0.1 lm.licenses.adobe.com

    ¤¤¤ MBR Check: ¤¤¤

    +++++ PhysicalDrive0: ST31000524AS ATA Device +++++

    --- User ---

    [MBR] 4b6ed35d3240f251e49318bdfe6d33f6

    [bSP] 1c6ea76c4506c2df82a20b8ed62ae68e : Windows 7/8 MBR Code

    Partition table:

    0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo

    1 - [XXXXXX] FAT32 (0x1b) [HIDDEN!] Offset (sectors): 206848 | Size: 14524 Mo

    2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29952000 | Size: 939243 Mo

    User = LL1 ... OK!

    User = LL2 ... OK!

    +++++ PhysicalDrive2: Seagate Expansion Desk USB Device +++++

    --- User ---

    [MBR] 6faf9783c7f3af0d7441fa5b3b245284

    [bSP] ce934f1dfcfc351deb816297fd617f04 : MBR Code unknown

    Partition table:

    0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907726 Mo

    User = LL1 ... OK!

    Error reading LL2 MBR!

    Finished : << RKreport[1]_S_03122013_02d1310.txt >>

    RKreport[1]_S_03122013_02d1310.txt

    My logs. Please help

    in Resolved Malware Removal Logs

    Posted

    Hello, I've noticed things are behaving strangly inside my browsers as of late. Below are my 2 log files. Please let me know what to do. Thanks.

    DDS (Ver_2012-11-20.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16464

    Run by Callen at 9:31:32 on 2013-03-12

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5847.3782 [GMT -7:00]

    .

    AV: Kaspersky PURE 2.0 *Enabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}

    SP: Kaspersky PURE 2.0 *Enabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    FW: Kaspersky PURE 2.0 *Enabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}

    .

    ============== Running Processes ===============

    .

    C:\windows\system32\lsm.exe

    C:\windows\system32\svchost.exe -k DcomLaunch

    C:\windows\system32\svchost.exe -k RPCSS

    C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\windows\system32\svchost.exe -k LocalService

    C:\windows\system32\svchost.exe -k netsvcs

    C:\windows\system32\svchost.exe -k NetworkService

    C:\windows\system32\WLANExt.exe

    C:\windows\System32\spoolsv.exe

    C:\windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe

    C:\Program Files (x86)\ASUS\AAHM\1.00.16\aaHMSvc.exe

    C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe

    C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.06\AsusFanControlService.exe

    C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe

    C:\Windows\SysWOW64\AsHookDevice.exe

    C:\Program Files\Intel\iCLS Client\HeciServer.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

    C:\windows\System32\svchost.exe -k HPZ12

    C:\Program Files (x86)\PDF Architect\HelperService.exe

    C:\Program Files (x86)\PDF Architect\ConversionService.exe

    C:\windows\System32\svchost.exe -k HPZ12

    C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\windows\system32\svchost.exe -k imgsvc

    C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\windows\System32\WUDFHost.exe

    C:\windows\system32\taskhost.exe

    C:\windows\system32\taskeng.exe

    C:\windows\system32\Dwm.exe

    C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe

    C:\Program Files (x86)\ASUS\ASUS Instant On\AsInstantOn.exe

    C:\windows\Explorer.EXE

    C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe

    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

    C:\Windows\System32\igfxtray.exe

    C:\Windows\System32\hkcmd.exe

    C:\Windows\System32\igfxpers.exe

    C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe

    C:\Program Files (x86)\TechSmith\Jing\Jing.exe

    C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe

    C:\windows\system32\SearchIndexer.exe

    C:\windows\system32\RunDll32.exe

    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe

    C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe

    C:\Program Files\HP\HP Photosmart 5520 series\bin\HPNetworkCommunicator.exe

    C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe

    C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe

    C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe

    C:\Program Files (x86)\iTunes\iTunesHelper.exe

    C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicator.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    C:\windows\System32\svchost.exe -k secsvcs

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_171.exe

    C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_171.exe

    C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

    C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

    C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe

    C:\windows\system32\taskhost.exe

    C:\windows\notepad.exe

    C:\windows\system32\SearchProtocolHost.exe

    C:\windows\system32\SearchFilterHost.exe

    C:\windows\system32\wbem\wmiprvse.exe

    C:\windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    mStart Page = hxxp://asus.msn.com

    mWinlogon: Userinit = userinit.exe

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: PDF Architect Helper: {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll

    BHO: IEVkbdBHO Class: {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll

    BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

    BHO: FilterBHO Class: {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll

    BHO: SmartSelect Class: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

    TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

    TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    TB: PDF Architect Toolbar: {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll

    uRun: [HP Photosmart 5520 series (NET)] "C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN275192FG05ST:NW" -scfn "HP Photosmart 5520 series (NET)" -AutoStart 1

    uRun: [Jing] C:\Program Files (x86)\TechSmith\Jing\Jing.exe

    uRun: [AdobeBridge] <no file>

    mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    mRun: [RunAIShell] C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe

    mRun: [ASUS AiChargerPlus Execute] C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe

    mRun: [ASUS Easy Update] C:\Program Files (x86)\ASUS\ASUS Easy Update\ALU.exe

    mRun: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.104.216\AsusWSPanel.exe /S

    mRun: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

    mRun: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin

    mRun: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"

    mRun: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"

    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    mRun: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe"

    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

    mRunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

    StartupFolder: C:\Users\Callen\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\MONITO~1.LNK - C:\windows\System32\RunDll32.exe

    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\ASUSVI~1.LNK - C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe

    uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:0

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableLUA = dword:0

    mPolicies-System: EnableUIADesktopToggle = dword:0

    mPolicies-System: PromptOnSecureDesktop = dword:0

    IE: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ie_banner_deny.htm

    IE: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

    IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000

    IE: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html

    IE: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html

    IE: Se&nd to OneNote - C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105

    IE: Show RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\ievkbd.dll

    IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\klwtbbho.dll

    TCP: NameServer = 69.10.169.10 69.10.169.11 8.8.8.8

    TCP: Interfaces\{ACC8FA5E-7FF1-406E-B191-D9606FD518DB} : DHCPNameServer = 127.0.0.1

    TCP: Interfaces\{B951A44F-C0AB-49A1-B6A7-2A30723608D7} : DHCPNameServer = 69.10.169.10 69.10.169.11 8.8.8.8

    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    SSODL: WebCheck - <orphaned>

    x64-BHO: IEVkbdBHO Class: {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\ievkbd.dll

    x64-BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

    x64-BHO: FilterBHO Class: {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\klwtbbho.dll

    x64-TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

    x64-Run: [igfxTray] C:\windows\System32\igfxtray.exe

    x64-Run: [HotKeysCmds] C:\windows\System32\hkcmd.exe

    x64-Run: [Persistence] C:\windows\System32\igfxpers.exe

    x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

    x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\ievkbd.dll

    x64-IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\x64\klwtbbho.dll

    x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

    x64-Notify: igfxcui - igfxdev.dll

    x64-Notify: klogon - C:\windows\System32\klogon.dll

    x64-SSODL: WebCheck - <orphaned>

    .

    ================= FIREFOX ===================

    .

    FF - ProfilePath - C:\Users\Callen\AppData\Roaming\Mozilla\Firefox\Profiles\b11eoto7.default\

    FF - prefs.js: browser.startup.homepage - about:home

    FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

    FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

    FF - plugin: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll

    FF - plugin: C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX64.dll

    FF - plugin: C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll

    FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

    FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

    FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

    FF - plugin: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll

    FF - plugin: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll

    FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll

    FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

    FF - plugin: C:\ProgramData\Best Buy pc app\npBestBuyPcAppDetector.dll

    FF - plugin: C:\Users\Callen\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll

    FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll

    FF - ExtSQL: 2013-02-26 14:40; FFPDFArchitectConverter@pdfarchitect.com; C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

    .

    ---- FIREFOX POLICIES ----

    FF - user.js: extensions.autoDisableScopes - 14

    FF - user.js: security.csp.enable - false

    .

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 asahci64;asahci64;C:\windows\System32\drivers\asahci64.sys [2012-4-10 49760]

    R0 CSCrySec;InfoWatch Encrypt Sector Library driver;C:\windows\System32\drivers\CSCrySec.sys [2013-1-7 85048]

    R0 PxHlpa64;PxHlpa64;C:\windows\System32\drivers\PxHlpa64.sys [2012-9-11 56208]

    R0 SCMNdisP;General NDIS Protocol Driver;C:\windows\System32\drivers\SCMNdisP.sys [2012-9-5 25056]

    R1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;C:\windows\System32\drivers\CSVirtualDiskDrv.sys [2013-1-7 66104]

    R1 kl2;kl2;C:\windows\System32\drivers\kl2.sys [2011-10-20 13616]

    R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\windows\System32\drivers\klim6.sys [2011-3-10 29488]

    R2 asComSvc;ASUS Com Service;C:\Program Files (x86)\ASUS\AXSP\1.00.18\atkexComSvc.exe [2012-4-10 918448]

    R2 asHmComSvc;ASUS HM Com Service;C:\Program Files (x86)\ASUS\AAHM\1.00.16\aaHMSvc.exe [2012-4-10 947328]

    R2 AsSysCtrlService;ASUS System Control Service;C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [2012-4-10 586880]

    R2 AsusFanControlService;AsusFanControlService;C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.06\AsusFanControlService.exe [2012-4-10 1399296]

    R2 AVP;Kaspersky Anti-Virus Service;C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 2.0\avp.exe [2012-8-30 202328]

    R2 CSObjectsSrv;CryptoStorage control service;C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [2009-12-21 743992]

    R2 Device Handle Service;Device Handle Service;C:\Windows\SysWOW64\AsHookDevice.exe [2012-4-10 203392]

    R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-2-2 628448]

    R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe [2012-4-10 161560]

    R2 PDF Architect Helper Service;PDF Architect Helper Service;C:\Program Files (x86)\PDF Architect\HelperService.exe [2013-1-9 1324104]

    R2 PDF Architect Service;PDF Architect Service;C:\Program Files (x86)\PDF Architect\ConversionService.exe [2013-1-9 795208]

    R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-1-31 3289208]

    R2 TeamViewer7;TeamViewer 7;C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-9-11 2754984]

    R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-4-10 363800]

    R2 WSWNA3100;WSWNA3100;C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe [2012-9-5 303360]

    R3 asmthub3;ASMedia USB3 Hub Service;C:\windows\System32\drivers\asmthub3.sys [2011-9-14 129000]

    R3 asmtxhci;ASMEDIA XHCI Service;C:\windows\System32\drivers\asmtxhci.sys [2011-9-14 394216]

    R3 IntcDAud;Intel® Display Audio;C:\windows\System32\drivers\IntcDAud.sys [2012-4-10 331264]

    R3 klmouflt;Kaspersky Lab KLMOUFLT;C:\windows\System32\drivers\klmouflt.sys [2009-11-2 22544]

    R3 Linksys_adapter_H;Linksys Adapter Network Driver;C:\windows\System32\drivers\AE2500w764.sys [2012-9-5 1254464]

    R3 RTL8167;Realtek 8167 NT Driver;C:\windows\System32\drivers\Rt64win7.sys [2012-4-10 646248]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-1-8 161536]

    S3 BCMH43XX;Broadcom 802.11 USB Network Adapter Driver;C:\windows\System32\drivers\bcmwlhigh664.sys [2012-9-5 1256192]

    S3 fssfltr;fssfltr;C:\windows\System32\drivers\fssfltr.sys [2012-4-10 48488]

    S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840]

    S3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista;C:\windows\System32\drivers\netr28x.sys [2009-6-10 620544]

    S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]

    S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]

    S3 TsUsbFlt;TsUsbFlt;C:\windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

    S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\System32\Wat\WatAdminSvc.exe [2012-9-5 1255736]

    S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

    .

    =============== File Associations ===============

    .

    FileExt: .js: jsfile="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\Dreamweaver.exe","%1"

    ShellExec: dreamweaver.exe: Open="C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\dreamweaver.exe", "%1"

    .

    =============== Created Last 30 ================

    .

    2013-03-12 15:52:28 24176 ----a-w- C:\windows\System32\drivers\mbam.sys

    2013-03-12 15:52:28 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2013-03-12 10:12:34 76232 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D1547568-6E1F-4C9D-B412-0196E1C0B001}\offreg.dll

    2013-03-12 10:11:57 9162192 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D1547568-6E1F-4C9D-B412-0196E1C0B001}\mpengine.dll

    2013-03-12 00:06:05 388096 ----a-r- C:\Users\Callen\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2013-03-12 00:06:05 -------- d-----w- C:\Program Files (x86)\Trend Micro

    2013-03-04 19:03:27 -------- d-----w- C:\Program Files (x86)\KindleElite

    2013-03-02 00:48:26 -------- d-----w- C:\Users\Callen\AppData\Roaming\TechSmith

    2013-02-27 17:32:29 15846768 ----a-w- C:\windows\SysWow64\FlashPlayerInstaller.exe

    2013-02-26 22:44:14 -------- d-----w- C:\ProgramData\PDF Architect

    2013-02-26 22:41:10 -------- d-----w- C:\Users\Callen\AppData\Roaming\PDF Architect

    2013-02-26 22:40:09 -------- d-----w- C:\Program Files (x86)\PDF Architect

    2013-02-26 22:39:53 -------- d-----w- C:\Users\Callen\AppData\Roaming\pdfforge

    2013-02-26 22:39:51 662288 ----a-w- C:\windows\SysWow64\MSCOMCT2.OCX

    2013-02-26 22:39:51 137000 ----a-w- C:\windows\SysWow64\MSMAPI32.OCX

    2013-02-26 22:39:51 1070152 ----a-w- C:\windows\SysWow64\MSCOMCTL.OCX

    2013-02-26 22:39:51 103936 ----a-w- C:\windows\System32\pdfcmon.dll

    2013-02-26 22:39:50 23552 ----a-w- C:\windows\SysWow64\MSMPIDE.DLL

    2013-02-26 22:39:50 -------- d-----w- C:\Users\Callen\AppData\Roaming\OpenCandy

    2013-02-26 22:39:50 -------- d-----w- C:\Program Files (x86)\PDFCreator

    2013-02-26 22:37:29 -------- d-----w- C:\Users\Callen\AppData\Local\Programs

    2013-02-26 05:06:25 -------- d-----w- C:\Users\Callen\AppData\Roaming\Keyword Elite 2.0

    2013-02-26 05:06:23 -------- d-----w- C:\Program Files (x86)\Keyword Elite 2.0

    2013-02-26 05:05:04 -------- d-----w- C:\ProgramData\Keyword Elite

    2013-02-26 05:04:50 -------- d-----w- C:\Program Files (x86)\Keyword Elite

    2013-02-23 19:48:28 -------- d-----w- C:\Program Files (x86)\Moyea

    2013-02-23 19:35:08 -------- d-----w- C:\Users\Callen\AppData\Roaming\Moyea

    2013-02-20 17:35:06 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

    2013-02-20 17:35:06 -------- d-----w- C:\Program Files\iTunes

    2013-02-20 17:35:06 -------- d-----w- C:\Program Files\iPod

    2013-02-20 17:35:06 -------- d-----w- C:\Program Files (x86)\iTunes

    2013-02-13 11:01:50 996352 ----a-w- C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll

    2013-02-13 11:01:50 768000 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll

    2013-02-12 23:55:04 5553512 ----a-w- C:\windows\System32\ntoskrnl.exe

    2013-02-12 23:55:04 3967848 ----a-w- C:\windows\SysWow64\ntkrnlpa.exe

    2013-02-12 23:55:04 3913064 ----a-w- C:\windows\SysWow64\ntoskrnl.exe

    2013-02-12 23:54:20 3153408 ----a-w- C:\windows\System32\win32k.sys

    2013-02-12 23:53:59 7680 ----a-w- C:\windows\SysWow64\instnm.exe

    2013-02-12 23:53:59 5120 ----a-w- C:\windows\SysWow64\wow32.dll

    2013-02-12 23:53:59 25600 ----a-w- C:\windows\SysWow64\setup16.exe

    2013-02-12 23:53:59 215040 ----a-w- C:\windows\System32\winsrv.dll

    2013-02-12 23:53:59 2048 ----a-w- C:\windows\SysWow64\user.exe

    2013-02-12 23:53:59 14336 ----a-w- C:\windows\SysWow64\ntvdm64.dll

    2013-02-12 23:53:37 288088 ----a-w- C:\windows\System32\drivers\FWPKCLNT.SYS

    2013-02-12 23:53:37 1913192 ----a-w- C:\windows\System32\drivers\tcpip.sys

    .

    ==================== Find3M ====================

    .

    2013-02-27 17:32:37 71024 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2013-02-27 17:32:37 691568 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe

    2013-01-17 09:28:58 273840 ------w- C:\windows\System32\MpSigStub.exe

    2013-01-13 21:17:03 9728 ---ha-w- C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

    2013-01-13 21:17:02 2560 ---ha-w- C:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

    2013-01-13 21:16:42 10752 ---ha-w- C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

    2013-01-13 21:12:46 3584 ---ha-w- C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll

    2013-01-13 21:11:21 4096 ---ha-w- C:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll

    2013-01-13 21:11:08 5632 ---ha-w- C:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll

    2013-01-13 21:11:07 5632 ---ha-w- C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

    2013-01-13 21:11:07 3072 ---ha-w- C:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll

    2013-01-13 21:11:07 3072 ---ha-w- C:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll

    2013-01-13 20:35:31 9728 ---ha-w- C:\windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

    2013-01-13 20:35:31 2560 ---ha-w- C:\windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll

    2013-01-13 20:35:18 10752 ---ha-w- C:\windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll

    2013-01-13 20:32:07 3584 ---ha-w- C:\windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll

    2013-01-13 20:31:48 4096 ---ha-w- C:\windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll

    2013-01-13 20:31:41 5632 ---ha-w- C:\windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll

    2013-01-13 20:31:40 5632 ---ha-w- C:\windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

    2013-01-13 20:31:40 3072 ---ha-w- C:\windows\System32\api-ms-win-downlevel-version-l1-1-0.dll

    2013-01-13 20:31:40 3072 ---ha-w- C:\windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll

    2013-01-13 20:31:00 1247744 ----a-w- C:\windows\SysWow64\DWrite.dll

    2013-01-13 20:22:22 1988096 ----a-w- C:\windows\SysWow64\d3d10warp.dll

    2013-01-13 20:20:31 293376 ----a-w- C:\windows\SysWow64\dxgi.dll

    2013-01-13 20:09:00 249856 ----a-w- C:\windows\SysWow64\d3d10_1core.dll

    2013-01-13 20:08:43 220160 ----a-w- C:\windows\SysWow64\d3d10core.dll

    2013-01-13 20:08:35 1504768 ----a-w- C:\windows\SysWow64\d3d11.dll

    2013-01-13 19:59:04 1643520 ----a-w- C:\windows\System32\DWrite.dll

    2013-01-13 19:58:28 1175552 ----a-w- C:\windows\System32\FntCache.dll

    2013-01-13 19:54:01 604160 ----a-w- C:\windows\SysWow64\d3d10level9.dll

    2013-01-13 19:53:58 207872 ----a-w- C:\windows\SysWow64\WindowsCodecsExt.dll

    2013-01-13 19:53:14 187392 ----a-w- C:\windows\SysWow64\UIAnimation.dll

    2013-01-13 19:51:30 2565120 ----a-w- C:\windows\System32\d3d10warp.dll

    2013-01-13 19:49:17 363008 ----a-w- C:\windows\System32\dxgi.dll

    2013-01-13 19:48:47 161792 ----a-w- C:\windows\SysWow64\d3d10_1.dll

    2013-01-13 19:46:25 1080832 ----a-w- C:\windows\SysWow64\d3d10.dll

    2013-01-13 19:43:21 1230336 ----a-w- C:\windows\SysWow64\WindowsCodecs.dll

    2013-01-13 19:38:39 333312 ----a-w- C:\windows\System32\d3d10_1core.dll

    2013-01-13 19:38:32 1887232 ----a-w- C:\windows\System32\d3d11.dll

    2013-01-13 19:38:21 296960 ----a-w- C:\windows\System32\d3d10core.dll

    2013-01-13 19:37:57 3419136 ----a-w- C:\windows\SysWow64\d2d1.dll

    2013-01-13 19:25:04 245248 ----a-w- C:\windows\System32\WindowsCodecsExt.dll

    2013-01-13 19:24:33 648192 ----a-w- C:\windows\System32\d3d10level9.dll

    2013-01-13 19:24:30 221184 ----a-w- C:\windows\System32\UIAnimation.dll

    2013-01-13 19:20:42 194560 ----a-w- C:\windows\System32\d3d10_1.dll

    2013-01-13 19:20:04 1238528 ----a-w- C:\windows\System32\d3d10.dll

    2013-01-13 19:15:40 1424384 ----a-w- C:\windows\System32\WindowsCodecs.dll

    2013-01-13 19:10:36 3928064 ----a-w- C:\windows\System32\d2d1.dll

    2013-01-13 19:02:06 417792 ----a-w- C:\windows\SysWow64\WMPhoto.dll

    2013-01-13 18:34:58 364544 ----a-w- C:\windows\SysWow64\XpsGdiConverter.dll

    2013-01-13 18:32:43 465920 ----a-w- C:\windows\System32\WMPhoto.dll

    2013-01-13 18:09:52 522752 ----a-w- C:\windows\System32\XpsGdiConverter.dll

    2013-01-13 17:26:42 1158144 ----a-w- C:\windows\SysWow64\XpsPrint.dll

    2013-01-13 17:05:09 1682432 ----a-w- C:\windows\System32\XpsPrint.dll

    2013-01-09 01:19:09 2312704 ----a-w- C:\windows\System32\jscript9.dll

    2013-01-09 01:12:03 1392128 ----a-w- C:\windows\System32\wininet.dll

    2013-01-09 01:11:06 1494528 ----a-w- C:\windows\System32\inetcpl.cpl

    2013-01-09 01:07:51 173056 ----a-w- C:\windows\System32\ieUnatt.exe

    2013-01-09 01:07:47 599040 ----a-w- C:\windows\System32\vbscript.dll

    2013-01-09 01:04:42 2382848 ----a-w- C:\windows\System32\mshtml.tlb

    2013-01-08 22:11:21 1800704 ----a-w- C:\windows\SysWow64\jscript9.dll

    2013-01-08 22:03:20 1129472 ----a-w- C:\windows\SysWow64\wininet.dll

    2013-01-08 22:03:12 1427968 ----a-w- C:\windows\SysWow64\inetcpl.cpl

    2013-01-08 21:59:02 142848 ----a-w- C:\windows\SysWow64\ieUnatt.exe

    2013-01-08 21:58:29 420864 ----a-w- C:\windows\SysWow64\vbscript.dll

    2013-01-08 21:56:23 2382848 ----a-w- C:\windows\SysWow64\mshtml.tlb

    2013-01-04 06:11:21 2284544 ----a-w- C:\windows\SysWow64\msmpeg2vdec.dll

    2013-01-04 06:11:13 2776576 ----a-w- C:\windows\System32\msmpeg2vdec.dll

    2013-01-04 04:43:21 44032 ----a-w- C:\windows\apppatch\acwow64.dll

    2012-12-16 17:11:22 46080 ----a-w- C:\windows\System32\atmlib.dll

    2012-12-16 14:45:03 367616 ----a-w- C:\windows\System32\atmfd.dll

    2012-12-16 14:13:28 295424 ----a-w- C:\windows\SysWow64\atmfd.dll

    2012-12-16 14:13:20 34304 ----a-w- C:\windows\SysWow64\atmlib.dll

    2012-12-13 21:50:38 6112864 ----a-w- C:\windows\System32\usbaaplrc.dll

    2012-12-13 21:50:36 54784 ----a-w- C:\windows\System32\drivers\usbaapl64.sys

    .

    ============= FINISH: 9:31:59.54 ===============

    .

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    .

    DDS (Ver_2012-11-20.01)

    .

    Microsoft Windows 7 Home Premium

    Boot Device: \Device\HarddiskVolume1

    Install Date: 9/5/2012 12:06:47 AM

    System Uptime: 3/11/2013 4:57:40 PM (17 hours ago)

    .

    Motherboard: ASUSTeK COMPUTER INC. | | CM6330_CM6630_CM6730_CM6830

    Processor: Intel® Core i5-2320 CPU @ 3.00GHz | LGA1155 | 2790/100mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 917 GiB total, 770.002 GiB free.

    D: is CDROM ()

    E: is Removable

    F: is FIXED (NTFS) - 1863 GiB total, 1775.589 GiB free.

    .

    ==== Disabled Device Manager Items =============

    .

    ==== System Restore Points ===================

    .

    RP84: 2/19/2013 5:48:30 AM - Windows Update

    RP85: 2/26/2013 3:42:18 AM - Windows Update

    RP86: 2/27/2013 3:00:11 AM - Windows Update

    RP87: 3/1/2013 4:45:18 PM - Installed Camtasia Studio 8

    RP88: 3/4/2013 10:21:56 PM - Windows Update

    RP89: 3/8/2013 3:20:08 AM - Windows Update

    RP90: 3/11/2013 5:05:45 PM - Installed HiJackThis

    RP91: 3/12/2013 3:11:46 AM - Windows Update

    .

    ==== Installed Programs ======================

    .

    64 Bit HP CIO Components Installer

    Adobe Acrobat X Pro - English, Français, Deutsch

    Adobe AIR

    Adobe Creative Suite 6 Master Collection

    Adobe Flash Player 11 ActiveX

    Adobe Flash Player 11 Plugin

    Adobe Help Manager

    Adobe Reader X (10.1.5) MUI

    Adobe Widget Browser

    AI Manager

    AI Suite II

    Amazon Kindle

    Apple Application Support

    Apple Mobile Device Support

    Apple Software Update

    Asmedia ASM104x USB 3.0 Host Controller Driver

    ASUS Backup Wizard

    ASUS Easy Update

    ASUS Instant On

    ASUS WebStorage

    AsusVibe2.0

    Audacity 2.0.2

    Best Buy pc app

    bl

    Bonjour

    Camtasia Studio 7

    Camtasia Studio 8

    CCleaner

    Contrôle ActiveX Windows Live Mesh pour connexions à distance

    Control ActiveX de Windows Live Mesh para conexiones remotas

    Controlo ActiveX do Windows Live Mesh para Ligações Remotas

    D3DX10

    Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition

    Directory Submitter 1.0.29

    FileZilla Client 3.6.0.2

    Galeria de Fotografias do Windows Live

    Galerie de photos Windows Live

    Galería fotográfica de Windows Live

    Google Chrome

    GoToMeeting 5.1.0.880

    HiJackThis

    HP Photosmart 5520 series Basic Device Software

    iCloud

    Intel® Management Engine Components

    Intel® OpenCL CPU Runtime

    Intel® Processor Graphics

    Intel® Trusted Connect Service Client

    iTunes

    Jing

    Junk Mail filter update

    Kaspersky PURE 2.0

    KindleElite

    LAME v3.99.3 (for Windows)

    Malwarebytes Anti-Malware version 1.70.0.1100

    Mesh Runtime

    Microsoft .NET Framework 4 Client Profile

    Microsoft .NET Framework 4 Extended

    Microsoft Application Error Reporting

    Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170)

    Microsoft Office 2010

    Microsoft Office 2010 Service Pack 1 (SP1)

    Microsoft Office Access MUI (English) 2010

    Microsoft Office Access Setup Metadata MUI (English) 2010

    Microsoft Office Excel MUI (English) 2010

    Microsoft Office Home and Business 2010

    Microsoft Office Office 32-bit Components 2010

    Microsoft Office OneNote MUI (English) 2010

    Microsoft Office Outlook MUI (English) 2010

    Microsoft Office PowerPoint MUI (English) 2010

    Microsoft Office Proof (English) 2010

    Microsoft Office Proof (French) 2010

    Microsoft Office Proof (Spanish) 2010

    Microsoft Office Proofing (English) 2010

    Microsoft Office Publisher MUI (English) 2010

    Microsoft Office Shared 32-bit MUI (English) 2010

    Microsoft Office Shared MUI (English) 2010

    Microsoft Office Shared Setup Metadata MUI (English) 2010

    Microsoft Office Single Image 2010

    Microsoft Office Word MUI (English) 2010

    Microsoft Silverlight

    Microsoft SQL Server 2005 Compact Edition [ENU]

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2005 Redistributable (x64)

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

    Microsoft_VC80_CRT_x86

    Microsoft_VC90_CRT_x86

    Microsoft_VC90_MFC_x86

    Microsoft_VC90_MFCLOC_x86

    Moyea FLV Editor Ultimate version: 1.1.2.846

    Mozilla Firefox 19.0 (x86 en-US)

    Mozilla Maintenance Service

    Mozilla Thunderbird 17.0.2 (x86 en-US)

    MSVCRT

    MSVCRT_amd64

    MSXML 4.0 SP2 (KB973688)

    MSXML 4.0 SP3 Parser (KB2721691)

    MSXML 4.0 SP3 Parser (KB2758694)

    MSXML 4.0 SP3 Parser (KB973685)

    NETGEAR WNA3100 wireless USB 2.0 adapter

    Passware Kit Basic Demo 12.0

    PDF Architect

    PDF Settings CS6

    PDFCreator

    ph

    QuickTime

    Raccolta foto di Windows Live

    Realtek Ethernet Controller Driver

    Realtek High Definition Audio Driver

    Riva FLV Player

    RoboForm 7-8-4-7 (All Users)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

    Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

    Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

    Security Update for Microsoft Excel 2010 (KB2597126) 64-Bit Edition

    Security Update for Microsoft InfoPath 2010 (KB2687417) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553091)

    Security Update for Microsoft Office 2010 (KB2553096)

    Security Update for Microsoft Office 2010 (KB2553371) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553447) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2589320) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2598243) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2687501) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2687510) 64-Bit Edition

    Security Update for Microsoft Visio Viewer 2010 (KB2598287) 64-Bit Edition

    Security Update for Microsoft Word 2010 (KB2760410) 64-Bit Edition

    Skype Click to Call

    Skype™ 6.1

    TeamViewer 7

    Trillian

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

    Update for Microsoft .NET Framework 4 Extended (KB2468871)

    Update for Microsoft .NET Framework 4 Extended (KB2533523)

    Update for Microsoft .NET Framework 4 Extended (KB2600217)

    Update for Microsoft Office 2010 (KB2553065)

    Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553378) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2566458)

    Update for Microsoft Office 2010 (KB2598242) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2687509) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition

    Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition

    Update for Microsoft OneNote 2010 (KB2687277) 64-Bit Edition

    Update for Microsoft Outlook 2010 (KB2597090) 64-Bit Edition

    Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition

    Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition

    Update for Microsoft PowerPoint 2010 (KB2598240) 64-Bit Edition

    Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition

    Vuze

    Windows Live

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live Family Safety

    Windows Live Fotogalerie

    Windows Live ID Sign-in Assistant

    Windows Live Installer

    Windows Live Language Selector

    Windows Live Mail

    Windows Live Mesh

    Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen

    Windows Live Mesh ActiveX Control for Remote Connections

    Windows Live Messenger

    Windows Live MIME IFilter

    Windows Live Movie Maker

    Windows Live Photo Common

    Windows Live Photo Gallery

    Windows Live PIMT Platform

    Windows Live Remote Client

    Windows Live Remote Client Resources

    Windows Live Remote Service

    Windows Live Remote Service Resources

    Windows Live SOXE

    Windows Live SOXE Definitions

    Windows Live UX Platform

    Windows Live UX Platform Language Pack

    Windows Live Writer

    Windows Live Writer Resources

    WinZip 17.0

    Xenu's Link Sleuth

    .

    ==== Event Viewer Messages From Past Week ========

    .

    3/11/2013 4:56:56 PM, Error: Service Control Manager [7023] - The Windows Time service terminated with the following error: A system shutdown is in progress.

    3/11/2013 4:41:58 PM, Error: Schannel [36888] - The following fatal alert was generated: 10. The internal error state is 10.

    .

    ==== End Of File ===========================

    I have some sort of browser hijacker on my laptop and get this when I run hijackthis. Please help smart guys :-)

    in Resolved Malware Removal Logs

    Posted

    ComboFix 12-12-17.01 - callenb 12/16/2012 22:36:59.1.2 - x64

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4092.2492 [GMT -5:00]

    Running from: c:\bryxen software, inc\1_Random\ComboFix.exe

    AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}

    SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\users\callenb\AppData\Local\Microsoft\Windows\Temporary Internet Files\{C196016C-1E9C-4F2F-A3A5-B6B91500688D}.xps

    c:\users\callenb\g2mdlhlpx.exe

    c:\users\Public\videos\HP MediaSmart Demo.exe

    c:\windows\SysWow64\html

    c:\windows\SysWow64\html\calendar.html

    c:\windows\SysWow64\html\calendarbottom.html

    c:\windows\SysWow64\html\calendartop.html

    c:\windows\SysWow64\html\crystalexportdialog.htm

    c:\windows\SysWow64\html\crystalprinthost.html

    c:\windows\SysWow64\images

    c:\windows\SysWow64\images\toolbar\calendar.gif

    c:\windows\SysWow64\images\toolbar\crlogo.gif

    c:\windows\SysWow64\images\toolbar\export.gif

    c:\windows\SysWow64\images\toolbar\export_over.gif

    c:\windows\SysWow64\images\toolbar\exportd.gif

    c:\windows\SysWow64\images\toolbar\First.gif

    c:\windows\SysWow64\images\toolbar\first_over.gif

    c:\windows\SysWow64\images\toolbar\Firstd.gif

    c:\windows\SysWow64\images\toolbar\gotopage.gif

    c:\windows\SysWow64\images\toolbar\gotopage_over.gif

    c:\windows\SysWow64\images\toolbar\gotopaged.gif

    c:\windows\SysWow64\images\toolbar\grouptree.gif

    c:\windows\SysWow64\images\toolbar\grouptree_over.gif

    c:\windows\SysWow64\images\toolbar\grouptreed.gif

    c:\windows\SysWow64\images\toolbar\grouptreepressed.gif

    c:\windows\SysWow64\images\toolbar\Last.gif

    c:\windows\SysWow64\images\toolbar\last_over.gif

    c:\windows\SysWow64\images\toolbar\Lastd.gif

    c:\windows\SysWow64\images\toolbar\Next.gif

    c:\windows\SysWow64\images\toolbar\next_over.gif

    c:\windows\SysWow64\images\toolbar\Nextd.gif

    c:\windows\SysWow64\images\toolbar\Prev.gif

    c:\windows\SysWow64\images\toolbar\prev_over.gif

    c:\windows\SysWow64\images\toolbar\Prevd.gif

    c:\windows\SysWow64\images\toolbar\print.gif

    c:\windows\SysWow64\images\toolbar\print_over.gif

    c:\windows\SysWow64\images\toolbar\printd.gif

    c:\windows\SysWow64\images\toolbar\Refresh.gif

    c:\windows\SysWow64\images\toolbar\refresh_over.gif

    c:\windows\SysWow64\images\toolbar\refreshd.gif

    c:\windows\SysWow64\images\toolbar\Search.gif

    c:\windows\SysWow64\images\toolbar\search_over.gif

    c:\windows\SysWow64\images\toolbar\searchd.gif

    c:\windows\SysWow64\images\toolbar\up.gif

    c:\windows\SysWow64\images\toolbar\up_over.gif

    c:\windows\SysWow64\images\toolbar\upd.gif

    c:\windows\SysWow64\images\tree\begindots.gif

    c:\windows\SysWow64\images\tree\beginminus.gif

    c:\windows\SysWow64\images\tree\beginplus.gif

    c:\windows\SysWow64\images\tree\blank.gif

    c:\windows\SysWow64\images\tree\blankdots.gif

    c:\windows\SysWow64\images\tree\dots.gif

    c:\windows\SysWow64\images\tree\lastdots.gif

    c:\windows\SysWow64\images\tree\lastminus.gif

    c:\windows\SysWow64\images\tree\lastplus.gif

    c:\windows\SysWow64\images\tree\Magnify.gif

    c:\windows\SysWow64\images\tree\minus.gif

    c:\windows\SysWow64\images\tree\minusbox.gif

    c:\windows\SysWow64\images\tree\plus.gif

    c:\windows\SysWow64\images\tree\plusbox.gif

    c:\windows\SysWow64\images\tree\singleminus.gif

    c:\windows\SysWow64\images\tree\singleplus.gif

    .

    .

    ((((((((((((((((((((((((( Files Created from 2012-11-17 to 2012-12-17 )))))))))))))))))))))))))))))))

    .

    .

    2012-12-17 03:49 . 2012-12-17 03:49 -------- d-----w- c:\users\Default\AppData\Local\temp

    2012-12-17 03:19 . 2012-11-19 06:01 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F2C762CC-5821-4AD0-BB46-4BD2FF39EF6B}\mpengine.dll

    2012-12-15 16:59 . 2012-11-19 06:01 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

    2012-12-05 05:39 . 2012-12-05 05:39 -------- d-----w- c:\program files (x86)\Common Files\Java

    2012-11-29 22:48 . 2012-11-29 22:48 -------- d-----w- c:\users\callenb\AppData\Roaming\Malwarebytes

    2012-11-29 22:48 . 2012-11-29 22:48 -------- d-----w- c:\programdata\Malwarebytes

    2012-11-29 22:48 . 2012-11-29 22:48 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

    2012-11-29 22:48 . 2012-09-30 00:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys

    2012-11-28 18:28 . 2012-11-28 18:27 972264 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{4AE0ABCC-6698-40E2-AF21-EF36382122A8}\gapaengine.dll

    2012-11-27 04:40 . 2012-11-27 04:40 388096 ----a-r- c:\users\callenb\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2012-11-27 04:40 . 2012-11-27 04:40 -------- d-----w- c:\program files (x86)\Trend Micro

    2012-11-25 01:25 . 2012-08-07 21:18 972192 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

    2012-11-24 00:21 . 2012-11-24 00:21 -------- d-----w- c:\program files (x86)\Microsoft Security Client

    2012-11-24 00:21 . 2012-11-24 00:22 -------- d-----w- c:\program files\Microsoft Security Client

    2012-11-23 22:35 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll

    2012-11-23 22:35 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll

    2012-11-23 22:35 . 2012-08-24 18:13 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys

    2012-11-23 22:35 . 2012-08-24 18:09 458712 ----a-w- c:\windows\system32\drivers\cng.sys

    2012-11-23 22:35 . 2012-08-24 18:05 340992 ----a-w- c:\windows\system32\schannel.dll

    2012-11-23 22:35 . 2012-08-24 18:04 307200 ----a-w- c:\windows\system32\ncrypt.dll

    2012-11-23 22:35 . 2012-08-24 18:03 1448448 ----a-w- c:\windows\system32\lsasrv.dll

    2012-11-23 22:35 . 2012-08-24 16:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll

    2012-11-23 22:35 . 2012-08-24 16:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll

    2012-11-23 22:35 . 2012-08-24 16:57 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll

    2012-11-23 22:35 . 2012-08-24 16:53 96768 ----a-w- c:\windows\SysWow64\sspicli.dll

    2012-11-23 22:08 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys

    2012-11-23 22:08 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys

    2012-11-23 22:08 . 2012-07-26 04:47 2560 ----a-w- c:\windows\system32\drivers\en-US\wdf01000.sys.mui

    2012-11-23 22:08 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll

    2012-11-23 22:00 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys

    2012-11-23 22:00 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys

    2012-11-23 22:00 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll

    2012-11-23 22:00 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll

    2012-11-23 21:59 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe

    2012-11-23 21:59 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll

    2012-11-23 21:59 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll

    2012-11-23 21:58 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8A1D1CEE-788A-485B-8C92-E248893F3FA1}\mpengine.dll

    2012-11-23 21:56 . 2012-10-18 18:25 3149824 ----a-w- c:\windows\system32\win32k.sys

    2012-11-23 21:55 . 2012-09-25 22:47 78336 ----a-w- c:\windows\SysWow64\synceng.dll

    2012-11-23 21:55 . 2012-09-25 22:46 95744 ----a-w- c:\windows\system32\synceng.dll

    .

    .

    .

    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-12-11 18:03 . 2012-09-10 13:59 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

    2012-12-11 18:03 . 2011-05-14 22:02 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-11-23 22:00 . 2010-04-27 00:55 66395536 ----a-w- c:\windows\system32\MRT.exe

    2012-10-25 08:12 . 2012-10-25 08:12 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx

    2012-10-25 08:12 . 2012-10-25 08:12 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts

    2012-09-24 20:32 . 2012-06-05 03:01 477168 ----a-w- c:\windows\SysWow64\npdeployJava1.dll

    2012-09-24 20:32 . 2010-06-09 22:55 473072 ----a-w- c:\windows\SysWow64\deployJava1.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Note* empty entries & legit default entries are not shown

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{ABD3B5E1-B268-407B-A150-2641DAB8D898}]

    2009-06-08 21:41 120104 ----a-w- c:\program files (x86)\Common Files\Homepage Protection\HomepageProtection.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]

    "Jing"="c:\program files (x86)\TechSmith\Jing\Jing.exe" [2012-02-01 2918224]

    "GoToMeeting"="c:\program files (x86)\Citrix\GoToMeeting\970\g2mstart.exe" [2012-06-06 39848]

    "RoboForm"="c:\program files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2012-09-05 109336]

    "HP Photosmart 5520 series (NET)"="c:\program files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe" [2012-01-31 2551656]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-02 98304]

    "HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408]

    "Corel File Shell Monitor"="c:\program files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe" [2009-06-22 16712]

    "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-06-24 320056]

    "UpdatePRCShortCut"="c:\program files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]

    "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]

    "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2010-03-23 500792]

    "AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-09-27 59240]

    "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-12 59280]

    "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872]

    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008]

    "ISUSPM"="c:\programdata\FLEXnet\Connect\11\\isuspm.exe" [2010-05-21 324976]

    "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-09-10 421776]

    "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]

    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-09-17 254896]

    .

    c:\users\callenb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

    Monitor Ink Alerts - HP Photosmart 5520 series (Network).lnk - c:\windows\system32\RunDll32.exe [2009-7-13 45568]

    .

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

    McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe [2012-9-5 271808]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]

    "WallpaperStyle"= 2

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

    @="Service"

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

    @="Driver"

    .

    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

    R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-01-31 158856]

    R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-07-07 195336]

    R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [2012-09-05 234776]

    R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]

    R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-31 128456]

    R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2012-09-13 368896]

    R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-10 174440]

    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]

    R3 RoxMediaDBVHS;RoxMediaDBVHS;c:\program files (x86)\Common Files\Roxio Shared\VHStoDVD\SharedCOM\RoxMediaDBVHS.exe [2011-12-19 1114384]

    R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]

    R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]

    R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]

    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]

    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736]

    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-02-27 1255736]

    R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-06-10 389120]

    S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]

    S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600]

    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-02 203264]

    S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-06-15 249648]

    S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-09-09 86072]

    S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264]

    S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2011-05-13 30520]

    S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-01-27 2253688]

    S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]

    S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2009-06-29 70656]

    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-23 215040]

    S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-03-09 36408]

    .

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

    2009-06-17 20:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

    .

    Contents of the 'Scheduled Tasks' folder

    .

    2012-12-17 c:\windows\Tasks\Adobe Flash Player Updater.job

    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-10 18:03]

    .

    2012-12-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-31 20:38]

    .

    2012-12-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-03-31 20:38]

    .

    2012-12-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2993880263-2118343362-2539320663-1001Core.job

    - c:\users\callenb\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-05 23:33]

    .

    2012-12-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2993880263-2118343362-2539320663-1001UA.job

    - c:\users\callenb\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-05 23:33]

    .

    2012-12-17 c:\windows\Tasks\HPCeeScheduleForcallenb.job

    - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 03:15]

    .

    .

    --------- X64 Entries -----------

    .

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-07-21 610872]

    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-15 171520]

    "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-03-23 487424]

    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-13 1289704]

    .

    ------- Supplementary Scan -------

    .

    uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    uLocal Page = c:\windows\system32\blank.htm

    mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    mLocal Page = c:\windows\SysWOW64\blank.htm

    uInternet Settings,ProxyOverride = *.local

    IE: Customize Menu - file://c:\program files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000

    IE: Fill Forms - file://c:\program files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html

    IE: S&end to OneNote - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105

    IE: Save Forms - file://c:\program files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html

    IE: Show RoboForm Toolbar - file://c:\program files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

    TCP: DhcpNameServer = 192.168.1.254

    FF - ProfilePath - c:\users\callenb\AppData\Roaming\Mozilla\Firefox\Profiles\dfikeofs.default\

    FF - prefs.js: browser.startup.homepage - hxxp://www.gmail.com

    FF - ExtSQL: 2012-11-06 12:20; {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}; c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

    FF - ExtSQL: !HIDDEN! 2010-02-12 21:46; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

    FF - user.js: yahoo.ytff.general.dontshowhpoffer - true

    .

    - - - - ORPHANS REMOVED - - - -

    .

    URLSearchHooks-{ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)

    Wow6432Node-HKCU-Run-MobileDocuments - c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe

    WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file)

    ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

    AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe

    AddRemove-{6F44AF95-3CDE-4513-AD3F-6D45F17BF324} - c:\program files (x86)\InstallShield Installation Information\{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}\setup.exe

    .

    .

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\MySQL]

    "ImagePath"="\"c:\program files (x86)\MySQL\MySQL Server 5.1\bin\mysqld\" --defaults-file=\"c:\program files (x86)\MySQL\MySQL Server 5.1\my.ini\" MySQL"

    .

    --------------------- LOCKED REGISTRY KEYS ---------------------

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker5"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Shockwave Flash Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

    @="0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

    @="ShockwaveFlash.ShockwaveFlash.11"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="ShockwaveFlash.ShockwaveFlash"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Macromedia Flash Factory Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

    @="FlashFactory.FlashFactory.1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="FlashFactory.FlashFactory"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker5"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

    @Denied: (A) (Everyone)

    "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

    .

    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B9A09F18-45AB-4F09-A117-A4ADDA8FA8C8}]

    @Denied: (A) (Everyone)

    "Solution"="{36eb6792-3a29-43b3-8cd0-f67d266fb426}"

    .

    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane]

    @Denied: (A) (Everyone)

    .

    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane\0]

    "Key"="ActionsPane"

    "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\8.0\\ActionsPane.xsd"

    .

    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

    @Denied: (A) (Everyone)

    .

    [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

    "Key"="ActionsPane3"

    "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    "MSCurrentCountry"=dword:000000b5

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    Completion time: 2012-12-16 22:56:40

    ComboFix-quarantined-files.txt 2012-12-17 03:56

    .

    Pre-Run: 331,991,416,832 bytes free

    Post-Run: 334,261,645,312 bytes free

    .

    - - End Of File - - 1183B9AB2C9C8F6DC91CACE9CE9F8945

    I have some sort of browser hijacker on my laptop and get this when I run hijackthis. Please help smart guys :-)

    in Resolved Malware Removal Logs

    Posted

    ---------------------------------------

    Malwarebytes Anti-Rootkit BETA 1.01.0.1011

    © Malwarebytes Corporation 2011-2012

    OS version: 6.1.7601 Windows 7 Service Pack 1 x64

    Account is Administrative

    Internet Explorer version: 9.0.8112.16421

    Java version: 1.6.0_37

    File system is: NTFS

    Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED

    CPU speed: 2.394000 GHz

    Memory total: 4290981888, free: 2577838080

    ------------ Kernel report ------------

    12/11/2012 23:18:42

    ------------ Loaded modules -----------

    \SystemRoot\system32\ntoskrnl.exe

    \SystemRoot\system32\hal.dll

    \SystemRoot\system32\kdcom.dll

    \SystemRoot\system32\mcupdate_AuthenticAMD.dll

    \SystemRoot\system32\PSHED.dll

    \SystemRoot\system32\CLFS.SYS

    \SystemRoot\system32\CI.dll

    \SystemRoot\system32\drivers\Wdf01000.sys

    \SystemRoot\system32\drivers\WDFLDR.SYS

    \SystemRoot\system32\drivers\ACPI.sys

    \SystemRoot\system32\drivers\WMILIB.SYS

    \SystemRoot\system32\drivers\msisadrv.sys

    \SystemRoot\system32\drivers\pci.sys

    \SystemRoot\system32\drivers\vdrvroot.sys

    \SystemRoot\system32\drivers\isapnp.sys

    \SystemRoot\system32\drivers\mpio.sys

    \SystemRoot\System32\drivers\partmgr.sys

    \SystemRoot\system32\DRIVERS\compbatt.sys

    \SystemRoot\system32\DRIVERS\BATTC.SYS

    \SystemRoot\system32\drivers\volmgr.sys

    \SystemRoot\System32\drivers\volmgrx.sys

    \SystemRoot\system32\drivers\intelide.sys

    \SystemRoot\system32\drivers\PCIIDEX.SYS

    \SystemRoot\system32\drivers\aliide.sys

    \SystemRoot\system32\drivers\amdide.sys

    \SystemRoot\system32\drivers\cmdide.sys

    \SystemRoot\System32\drivers\mountmgr.sys

    \SystemRoot\system32\drivers\msdsm.sys

    \SystemRoot\system32\drivers\nvraid.sys

    \SystemRoot\system32\drivers\CLASSPNP.SYS

    \SystemRoot\system32\drivers\pciide.sys

    \SystemRoot\system32\drivers\viaide.sys

    \SystemRoot\system32\drivers\iaStorV.sys

    \SystemRoot\system32\drivers\atapi.sys

    \SystemRoot\system32\drivers\ataport.SYS

    \SystemRoot\system32\DRIVERS\lsi_sas.sys

    \SystemRoot\system32\DRIVERS\storport.sys

    \SystemRoot\system32\drivers\msahci.sys

    \SystemRoot\system32\drivers\HpSAMD.sys

    \SystemRoot\system32\DRIVERS\adp94xx.sys

    \SystemRoot\system32\DRIVERS\adpahci.sys

    \SystemRoot\system32\DRIVERS\adpu320.sys

    \SystemRoot\system32\drivers\amdsata.sys

    \SystemRoot\system32\DRIVERS\amdsbs.sys

    \SystemRoot\system32\drivers\amdxata.sys

    \SystemRoot\system32\DRIVERS\arc.sys

    \SystemRoot\system32\DRIVERS\arcsas.sys

    \SystemRoot\system32\DRIVERS\elxstor.sys

    \SystemRoot\system32\DRIVERS\iirsp.sys

    \SystemRoot\system32\DRIVERS\lsi_fc.sys

    \SystemRoot\system32\DRIVERS\lsi_sas2.sys

    \SystemRoot\system32\DRIVERS\lsi_scsi.sys

    \SystemRoot\system32\DRIVERS\megasas.sys

    \SystemRoot\system32\DRIVERS\MegaSR.sys

    \SystemRoot\system32\DRIVERS\nfrd960.sys

    \SystemRoot\system32\drivers\nvstor.sys

    \SystemRoot\system32\DRIVERS\ql2300.sys

    \SystemRoot\system32\DRIVERS\ql40xx.sys

    \SystemRoot\system32\DRIVERS\SiSRaid2.sys

    \SystemRoot\system32\DRIVERS\sisraid4.sys

    \SystemRoot\system32\DRIVERS\stexstor.sys

    \SystemRoot\system32\DRIVERS\vsmraid.sys

    \SystemRoot\system32\drivers\fltmgr.sys

    \SystemRoot\system32\drivers\fileinfo.sys

    \SystemRoot\system32\DRIVERS\MpFilter.sys

    \SystemRoot\System32\Drivers\PxHlpa64.sys

    \SystemRoot\System32\Drivers\Ntfs.sys

    \SystemRoot\System32\Drivers\msrpc.sys

    \SystemRoot\System32\Drivers\ksecdd.sys

    \SystemRoot\System32\Drivers\cng.sys

    \SystemRoot\System32\drivers\pcw.sys

    \SystemRoot\System32\Drivers\Fs_Rec.sys

    \SystemRoot\system32\drivers\ndis.sys

    \SystemRoot\system32\drivers\NETIO.SYS

    \SystemRoot\System32\Drivers\ksecpkg.sys

    \SystemRoot\System32\drivers\tcpip.sys

    \SystemRoot\System32\drivers\fwpkclnt.sys

    \SystemRoot\system32\DRIVERS\wd.sys

    \SystemRoot\system32\drivers\volsnap.sys

    \SystemRoot\System32\Drivers\spldr.sys

    \SystemRoot\system32\drivers\sbp2port.sys

    \SystemRoot\System32\drivers\rdyboost.sys

    \SystemRoot\System32\Drivers\mup.sys

    \SystemRoot\System32\drivers\hwpolicy.sys

    \SystemRoot\system32\DRIVERS\hpdskflt.sys

    \SystemRoot\System32\DRIVERS\fvevol.sys

    \SystemRoot\system32\DRIVERS\disk.sys

    \SystemRoot\system32\DRIVERS\AtiPcie.sys

    \SystemRoot\system32\DRIVERS\cdrom.sys

    \SystemRoot\System32\Drivers\Null.SYS

    \SystemRoot\System32\Drivers\Beep.SYS

    \SystemRoot\System32\drivers\vga.sys

    \SystemRoot\System32\drivers\VIDEOPRT.SYS

    \SystemRoot\System32\drivers\watchdog.sys

    \SystemRoot\System32\DRIVERS\RDPCDD.sys

    \SystemRoot\system32\drivers\rdpencdd.sys

    \SystemRoot\system32\drivers\rdprefmp.sys

    \SystemRoot\System32\Drivers\Msfs.SYS

    \SystemRoot\System32\Drivers\Npfs.SYS

    \SystemRoot\system32\DRIVERS\tdx.sys

    \SystemRoot\system32\DRIVERS\TDI.SYS

    \SystemRoot\system32\drivers\afd.sys

    \SystemRoot\System32\DRIVERS\netbt.sys

    \SystemRoot\system32\DRIVERS\wfplwf.sys

    \SystemRoot\system32\DRIVERS\pacer.sys

    \SystemRoot\system32\DRIVERS\vwififlt.sys

    \SystemRoot\system32\DRIVERS\netbios.sys

    \SystemRoot\system32\DRIVERS\wanarp.sys

    \SystemRoot\system32\drivers\termdd.sys

    \SystemRoot\system32\DRIVERS\rdbss.sys

    \SystemRoot\system32\drivers\nsiproxy.sys

    \SystemRoot\system32\drivers\mssmbios.sys

    \SystemRoot\System32\drivers\discache.sys

    \SystemRoot\System32\Drivers\dfsc.sys

    \SystemRoot\system32\DRIVERS\blbdrive.sys

    \SystemRoot\system32\DRIVERS\tunnel.sys

    \SystemRoot\system32\DRIVERS\amdppm.sys

    \SystemRoot\system32\DRIVERS\atikmdag.sys

    \SystemRoot\System32\drivers\dxgkrnl.sys

    \SystemRoot\System32\drivers\dxgmms1.sys

    \SystemRoot\system32\drivers\HDAudBus.sys

    \SystemRoot\System32\Drivers\fastfat.SYS

    \SystemRoot\system32\DRIVERS\Rt64win7.sys

    \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys

    \SystemRoot\system32\DRIVERS\usbohci.sys

    \SystemRoot\system32\DRIVERS\USBPORT.SYS

    \SystemRoot\system32\DRIVERS\usbfilter.sys

    \SystemRoot\system32\DRIVERS\USBD.SYS

    \SystemRoot\system32\DRIVERS\usbehci.sys

    \SystemRoot\system32\DRIVERS\i8042prt.sys

    \SystemRoot\system32\DRIVERS\HpqKbFiltr.sys

    \SystemRoot\system32\drivers\kbdclass.sys

    \SystemRoot\system32\DRIVERS\SynTP.sys

    \SystemRoot\system32\DRIVERS\mouclass.sys

    \SystemRoot\system32\DRIVERS\enecir.sys

    \SystemRoot\system32\DRIVERS\CmBatt.sys

    \SystemRoot\system32\drivers\wmiacpi.sys

    \SystemRoot\system32\DRIVERS\Accelerometer.sys

    \SystemRoot\system32\drivers\CompositeBus.sys

    \SystemRoot\system32\DRIVERS\AgileVpn.sys

    \SystemRoot\system32\DRIVERS\rasl2tp.sys

    \SystemRoot\system32\DRIVERS\ndistapi.sys

    \SystemRoot\system32\DRIVERS\ndiswan.sys

    \SystemRoot\system32\DRIVERS\raspppoe.sys

    \SystemRoot\system32\DRIVERS\raspptp.sys

    \SystemRoot\system32\DRIVERS\rassstp.sys

    \SystemRoot\system32\DRIVERS\serscan.sys

    \SystemRoot\system32\drivers\ksthunk.sys

    \SystemRoot\system32\drivers\ks.sys

    \SystemRoot\system32\drivers\swenum.sys

    \SystemRoot\system32\DRIVERS\circlass.sys

    \SystemRoot\system32\DRIVERS\MarvinBus64.sys

    \SystemRoot\system32\drivers\umbus.sys

    \SystemRoot\system32\DRIVERS\usbhub.sys

    \SystemRoot\System32\Drivers\NDProxy.SYS

    \SystemRoot\system32\drivers\AtiHdmi.sys

    \SystemRoot\system32\drivers\portcls.sys

    \SystemRoot\system32\drivers\drmk.sys

    \SystemRoot\system32\DRIVERS\stwrt64.sys

    \SystemRoot\system32\DRIVERS\agrsm64.sys

    \SystemRoot\system32\drivers\modem.sys

    \SystemRoot\system32\DRIVERS\hidir.sys

    \SystemRoot\system32\DRIVERS\HIDCLASS.SYS

    \SystemRoot\system32\DRIVERS\HIDPARSE.SYS

    \SystemRoot\system32\drivers\kbdhid.sys

    \SystemRoot\system32\DRIVERS\mouhid.sys

    \SystemRoot\System32\win32k.sys

    \SystemRoot\System32\drivers\Dxapi.sys

    \SystemRoot\System32\Drivers\crashdmp.sys

    \SystemRoot\System32\Drivers\dump_dumpata.sys

    \SystemRoot\System32\Drivers\dump_msahci.sys

    \SystemRoot\System32\Drivers\dump_dumpfve.sys

    \SystemRoot\system32\DRIVERS\usbccgp.sys

    \SystemRoot\System32\Drivers\usbvideo.sys

    \SystemRoot\System32\TSDDD.dll

    \SystemRoot\System32\cdd.dll

    \SystemRoot\System32\ATMFD.DLL

    \SystemRoot\system32\drivers\luafv.sys

    \SystemRoot\system32\drivers\WudfPf.sys

    \SystemRoot\system32\DRIVERS\lltdio.sys

    \SystemRoot\system32\DRIVERS\nwifi.sys

    \SystemRoot\system32\DRIVERS\ndisuio.sys

    \SystemRoot\system32\DRIVERS\rspndr.sys

    \SystemRoot\system32\drivers\HTTP.sys

    \SystemRoot\system32\DRIVERS\bowser.sys

    \SystemRoot\System32\drivers\mpsdrv.sys

    \SystemRoot\system32\DRIVERS\mrxsmb.sys

    \SystemRoot\system32\DRIVERS\mrxsmb10.sys

    \SystemRoot\system32\DRIVERS\mrxsmb20.sys

    \SystemRoot\system32\DRIVERS\NisDrvWFP.sys

    \SystemRoot\system32\drivers\peauth.sys

    \SystemRoot\System32\Drivers\secdrv.SYS

    \SystemRoot\System32\DRIVERS\srvnet.sys

    \SystemRoot\System32\drivers\tcpipreg.sys

    \SystemRoot\System32\DRIVERS\srv2.sys

    \SystemRoot\System32\DRIVERS\srv.sys

    \SystemRoot\system32\DRIVERS\athrx.sys

    \SystemRoot\system32\DRIVERS\vwifibus.sys

    \SystemRoot\system32\DRIVERS\monitor.sys

    \??\C:\Windows\system32\drivers\mbamchameleon.sys

    \??\C:\Windows\system32\drivers\mbamswissarmy.sys

    \Windows\System32\ntdll.dll

    \Windows\System32\smss.exe

    \Windows\System32\apisetschema.dll

    \Windows\System32\autochk.exe

    \Windows\System32\usp10.dll

    \Windows\System32\psapi.dll

    \Windows\System32\shell32.dll

    \Windows\System32\lpk.dll

    \Windows\System32\msctf.dll

    \Windows\System32\difxapi.dll

    \Windows\System32\oleaut32.dll

    \Windows\System32\sechost.dll

    \Windows\System32\ole32.dll

    \Windows\System32\msvcrt.dll

    \Windows\System32\comdlg32.dll

    \Windows\System32\advapi32.dll

    \Windows\System32\rpcrt4.dll

    \Windows\System32\kernel32.dll

    \Windows\System32\imagehlp.dll

    \Windows\System32\ws2_32.dll

    \Windows\System32\shlwapi.dll

    \Windows\System32\user32.dll

    \Windows\System32\gdi32.dll

    \Windows\System32\clbcatq.dll

    \Windows\System32\Wldap32.dll

    \Windows\System32\imm32.dll

    \Windows\System32\nsi.dll

    \Windows\System32\setupapi.dll

    \Windows\System32\wininet.dll

    \Windows\System32\urlmon.dll

    \Windows\System32\normaliz.dll

    \Windows\System32\iertutil.dll

    \Windows\System32\cfgmgr32.dll

    \Windows\System32\devobj.dll

    \Windows\System32\comctl32.dll

    \Windows\System32\KernelBase.dll

    \Windows\System32\crypt32.dll

    \Windows\System32\wintrust.dll

    \Windows\System32\msasn1.dll

    \Windows\SysWOW64\normaliz.dll

    ----------- End -----------

    <<<1>>>

    Upper Device Name: \Device\Harddisk0\DR0

    Upper Device Object: 0xfffffa800468a790

    Upper Device Driver Name: \Driver\Disk\

    Lower Device Name: \Device\Ide\IdeDeviceP0T0L0-0\

    Lower Device Object: 0xfffffa80045fe060

    Lower Device Driver Name: \Driver\atapi\

    Driver name found: atapi

    DriverEntry returned 0x0

    Function returned 0x0

    Downloaded database version: v2012.12.12.02

    Initializing...

    Done!

    <<<2>>>

    Device number: 0, partition: 2

    Physical Sector Size: 512

    Drive: 0, DevicePointer: 0xfffffa800468a790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

    --------- Disk Stack ------

    DevicePointer: 0xfffffa800468b040, DeviceName: Unknown, DriverName: \Driver\partmgr\

    DevicePointer: 0xfffffa800468a790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

    DevicePointer: 0xfffffa800468a040, DeviceName: Unknown, DriverName: \Driver\hpdskflt\

    DevicePointer: 0xfffffa80045fe060, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\

    ------------ End ----------

    Upper DeviceData: 0xfffff8a00e8a7590, 0xfffffa800468a790, 0xfffffa80041d6790

    Lower DeviceData: 0xfffff8a0042a0880, 0xfffffa80045fe060, 0xfffffa800397fe40

    <<<3>>>

    Volume: C:

    File system type: NTFS

    SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

    Scanning directory: C:\Windows\system32\drivers...

    Done!

    Drive 0

    Scanning MBR on drive 0...

    Inspecting partition table:

    MBR Signature: 55AA

    Disk Signature: 6FE0338E

    Partition information:

    Partition 0 type is Primary (0x7)

    Partition is ACTIVE.

    Partition starts at LBA: 2048 Numsec = 407552

    Partition file system is NTFS

    Partition is bootable

    Partition 1 type is Primary (0x7)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 409600 Numsec = 943996928

    Partition 2 type is Primary (0x7)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 944406528 Numsec = 32153600

    Partition 3 type is Other (0xc)

    Partition is NOT ACTIVE.

    Partition starts at LBA: 976560128 Numsec = 210992

    Disk Size: 500107862016 bytes

    Sector size: 512 bytes

    Scanning physical sectors of unpartitioned space on drive 0 (1-2047-976753168-976773168)...

    Done!

    Performing system, memory and registry scan...

    Done!

    Scan finished

    =======================================

    I have some sort of browser hijacker on my laptop and get this when I run hijackthis. Please help smart guys :-)

    in Resolved Malware Removal Logs

    Posted

    Malwarebytes Anti-Rootkit 1.01.0.1011

    www.malwarebytes.org

    Database version: v2012.12.12.02

    Windows 7 Service Pack 1 x64 NTFS

    Internet Explorer 9.0.8112.16421

    callenb :: CALLENB-PC [administrator]

    12/11/2012 11:46:25 PM

    mbar-log-2012-12-11 (23-46-25).txt

    Scan type: Quick scan

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P

    Scan options disabled:

    Objects scanned: 35517

    Time elapsed: 27 minute(s), 14 second(s)

    Memory Processes Detected: 0

    (No malicious items detected)

    Memory Modules Detected: 0

    (No malicious items detected)

    Registry Keys Detected: 0

    (No malicious items detected)

    Registry Values Detected: 0

    (No malicious items detected)

    Registry Data Items Detected: 0

    (No malicious items detected)

    Folders Detected: 0

    (No malicious items detected)

    Files Detected: 0

    (No malicious items detected)

    (end)

    I have some sort of browser hijacker on my laptop and get this when I run hijackthis. Please help smart guys :-)

    in Resolved Malware Removal Logs

    Posted

    .

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    .

    DDS (Ver_2012-11-20.01)

    .

    Microsoft Windows 7 Home Premium

    Boot Device: \Device\HarddiskVolume1

    Install Date: 2/12/2010 7:34:25 PM

    System Uptime: 12/11/2012 6:43:48 PM (6 hours ago)

    .

    Motherboard: Quanta | | 3639

    Processor: AMD Turion II Ultra Dual-Core Mobile M600 | Socket S1G3 | 792/200mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 450 GiB total, 310.19 GiB free.

    D: is FIXED (NTFS) - 15 GiB total, 2.519 GiB free.

    E: is CDROM ()

    .

    ==== Disabled Device Manager Items =============

    .

    ==== System Restore Points ===================

    .

    RP436: 11/26/2012 11:13:26 PM - Windows Update

    RP437: 11/26/2012 11:40:32 PM - Installed HiJackThis

    RP438: 11/30/2012 12:21:10 AM - Windows Update

    RP439: 12/3/2012 1:11:02 AM - Windows Update

    RP440: 12/5/2012 12:37:07 AM - Removed Java 6 Update 37

    RP441: 12/5/2012 12:38:40 AM - Installed Java 6 Update 37

    RP442: 12/6/2012 1:35:33 AM - Windows Update

    RP443: 12/10/2012 10:59:28 AM - Windows Update

    .

    ==== Installed Programs ======================

    .

    Acrobat.com

    Adobe AIR

    Adobe Anchor Service CS3

    Adobe Asset Services CS3

    Adobe Bridge CS3

    Adobe Bridge Start Meeting

    Adobe Camera Raw 4.0

    Adobe CMaps

    Adobe Color - Photoshop Specific

    Adobe Color Common Settings

    Adobe Color EU Extra Settings

    Adobe Color JA Extra Settings

    Adobe Color NA Recommended Settings

    Adobe Default Language CS3

    Adobe Device Central CS3

    Adobe ExtendScript Toolkit 2

    Adobe Flash Player 11 ActiveX

    Adobe Flash Player 11 Plugin

    Adobe Fonts All

    Adobe Help Viewer CS3

    Adobe Linguistics CS3

    Adobe PDF Library Files

    Adobe Photoshop CS3

    Adobe Reader 9.5.2

    Adobe Setup

    Adobe Shockwave Player 11.5

    Adobe Stock Photos CS3

    Adobe Type Support

    Adobe Update Manager CS3

    Adobe Version Cue CS3 Client

    Adobe WinSoft Linguistics Plugin

    Adobe XMP Panels CS3

    AMD USB Filter Driver

    Apple Application Support

    Apple Mobile Device Support

    Apple Software Update

    Atheros Driver Installation Program

    ATI Catalyst Install Manager

    Audacity 1.2.6

    Bing Bar

    Bonjour

    Catalyst Control Center - Branding

    Catalyst Control Center Core Implementation

    Catalyst Control Center Graphics Full Existing

    Catalyst Control Center Graphics Full New

    Catalyst Control Center Graphics Light

    Catalyst Control Center Graphics Previews Common

    Catalyst Control Center Graphics Previews Vista

    Catalyst Control Center InstallProxy

    Catalyst Control Center Localization All

    ccc-core-static

    ccc-utility64

    CCC Help Chinese Standard

    CCC Help Chinese Traditional

    CCC Help Czech

    CCC Help Danish

    CCC Help Dutch

    CCC Help English

    CCC Help Finnish

    CCC Help French

    CCC Help German

    CCC Help Greek

    CCC Help Hungarian

    CCC Help Italian

    CCC Help Japanese

    CCC Help Korean

    CCC Help Norwegian

    CCC Help Polish

    CCC Help Portuguese

    CCC Help Russian

    CCC Help Spanish

    CCC Help Swedish

    CCC Help Thai

    CCC Help Turkish

    CCleaner

    Cisco EAP-FAST Module

    Cisco LEAP Module

    Cisco PEAP Module

    Combined Community Codec Pack 2010-10-10

    Corel Paint Shop Pro Photo X2

    Corel VideoStudio 12

    Crystal Reports Basic for Visual Studio 2008

    Crystal Reports Basic Runtime for Visual Studio 2008 (x64)

    CutePDF Writer 2.8

    CyberLink DVD Suite

    D3DX10

    Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition

    DirectX 9 Runtime

    ENE CIR Receiver Driver

    Express Burn Disc Burning Software

    FileZilla Client 3.5.3

    FLV Player

    Google Chrome

    Google Gears

    Google Talk Plugin

    Google Update Helper

    GoToMeeting 5.3.0.970

    Hewlett-Packard ACLM.NET v1.1.2.0

    HiJackThis

    Homepage Protection

    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB971091)

    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB973674)

    HP 3D DriveGuard

    HP Advisor

    HP Customer Experience Enhancements

    HP Games

    HP MediaSmart DVD

    HP MediaSmart Internet TV

    HP MediaSmart Live TV

    HP MediaSmart Movie Themes

    HP MediaSmart Music/Photo/Video

    HP MediaSmart SlingPlayer

    HP MediaSmart SmartMenu

    HP MediaSmart Software Notebook Demo

    HP MediaSmart Webcam

    HP Photosmart 5520 series Basic Device Software

    HP Quick Launch Buttons

    HP Setup

    HP Smart Web Printing 4.60

    HP Support Assistant

    HP Update

    HP User Guides 0153

    HP Wireless Assistant

    iCloud

    IDT Audio

    iMacros V6.90

    iTunes

    Java Auto Updater

    Java 6 Update 14 (64-bit)

    Java 6 Update 37

    Jing

    JMicron Flash Media Controller Driver

    Junk Mail filter update

    Keyword Cloud Generator 1.0.21

    LabelPrint

    LAME v3.98.3 for Audacity

    LightScribe System Software

    LSI HDA Modem

    Malwarebytes Anti-Malware version 1.65.1.1000

    McAfee Security Scan Plus

    Microsoft .NET Compact Framework 2.0 SP2

    Microsoft .NET Compact Framework 3.5

    Microsoft .NET Framework 4 Client Profile

    Microsoft .NET Framework 4 Extended

    Microsoft Application Error Reporting

    Microsoft Device Emulator (64 bit) version 3.0 - ENU

    Microsoft Document Explorer 2008

    Microsoft Live Search Toolbar

    Microsoft Office 2007 Service Pack 3 (SP3)

    Microsoft Office 2010 Service Pack 1 (SP1)

    Microsoft Office Access MUI (English) 2010

    Microsoft Office Access Setup Metadata MUI (English) 2010

    Microsoft Office Excel MUI (English) 2010

    Microsoft Office Home and Business 2010

    Microsoft Office Office 32-bit Components 2010

    Microsoft Office OneNote MUI (English) 2010

    Microsoft Office Outlook MUI (English) 2010

    Microsoft Office PowerPoint MUI (English) 2010

    Microsoft Office Proof (English) 2010

    Microsoft Office Proof (French) 2010

    Microsoft Office Proof (Spanish) 2010

    Microsoft Office Proofing (English) 2010

    Microsoft Office Publisher MUI (English) 2010

    Microsoft Office Shared 32-bit MUI (English) 2010

    Microsoft Office Shared MUI (English) 2007

    Microsoft Office Shared MUI (English) 2010

    Microsoft Office Shared Setup Metadata MUI (English) 2007

    Microsoft Office Shared Setup Metadata MUI (English) 2010

    Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3)

    Microsoft Office Single Image 2010

    Microsoft Office Visual Web Developer 2007

    Microsoft Office Visual Web Developer MUI (English) 2007

    Microsoft Office Word MUI (English) 2010

    Microsoft Security Client

    Microsoft Security Essentials

    Microsoft Silverlight

    Microsoft SQL Server 2005

    Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)

    Microsoft SQL Server Compact 3.5 Design Tools ENU

    Microsoft SQL Server Compact 3.5 ENU

    Microsoft SQL Server Compact 3.5 for Devices ENU

    Microsoft SQL Server Database Publishing Wizard 1.2

    Microsoft SQL Server Native Client

    Microsoft SQL Server Setup Support Files (English)

    Microsoft SQL Server VSS Writer

    Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2005 Redistributable (x64)

    Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175

    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual Studio 2005 Tools for Office Runtime

    Microsoft Visual Studio 2008 Professional Edition - ENU

    Microsoft Visual Studio 2008 Remote Debugger - ENU

    Microsoft Visual Studio Web Authoring Component

    Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools

    Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries

    Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense

    Microsoft Windows SDK for Visual Studio 2008 Tools

    Microsoft Windows SDK for Visual Studio 2008 Win32 Tools

    MobileMe Control Panel

    Money Keyword Finder 2.6

    Money Keyword Finder 2.7

    Mozilla Firefox 17.0.1 (x86 en-US)

    Mozilla Maintenance Service

    MSVCRT

    MSVCRT_amd64

    MSXML 4.0 SP2 (KB954430)

    MSXML 4.0 SP2 (KB973688)

    MySQL Server 5.1

    Niche Finder

    Ninja Pinner

    Nuclear Link Blaster

    PDF Settings

    Pinnacle Video Driver

    Power2Go

    PowerDirector

    PowerRecover

    QLBCASL

    QuickTime

    Realtek 8136 8168 8169 Ethernet Driver

    RoboForm 7-8-2-5 (All Users)

    Roxio CinePlayer Decoder Pack

    Roxio Easy VHS to DVD 3

    Roxio Express Labeler

    ROXIOVHS3X64

    Safari

    Security Update for 2007 Microsoft Office System (KB2288621)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

    Security Update for Microsoft Excel 2010 (KB2597126) 64-Bit Edition

    Security Update for Microsoft InfoPath 2010 (KB2687417) 64-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553091)

    Security Update for Microsoft Office 2010 (KB2553096)

    Security Update for Microsoft Office 2010 (KB2553260) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553371) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553447) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2589320) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2589322) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2598243) 64-Bit Edition

    Security Update for Microsoft Office system 2007 (KB974234)

    Security Update for Microsoft PowerPoint 2010 (KB2553185) 64-Bit Edition

    Security Update for Microsoft Visio Viewer 2010 (KB2598287) 64-Bit Edition

    Security Update for Microsoft Word 2010 (KB2553488) 64-Bit Edition

    Skype Click to Call

    Skype™ 5.8

    SlingBoxWatchYourTVAnyWhere

    SmartWebPrinting

    Spotify

    SWF & FLV Player 3.0 (build 3.0.33.5106)

    Synaptics Pointing Device Driver

    TeamViewer 6

    TextPad 5

    Uninstall 1.0.0.1

    Update for 2007 Microsoft Office System (KB967642)

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

    Update for Microsoft .NET Framework 4 Extended (KB2468871)

    Update for Microsoft .NET Framework 4 Extended (KB2533523)

    Update for Microsoft .NET Framework 4 Extended (KB2600217)

    Update for Microsoft Office 2007 Help for Common Features (KB963673)

    Update for Microsoft Office 2007 System (KB2539530)

    Update for Microsoft Office 2010 (KB2553065)

    Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553270) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553272) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2566458)

    Update for Microsoft Office 2010 (KB2687509) 64-Bit Edition

    Update for Microsoft Office Script Editor Help (KB963671)

    Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition

    Update for Microsoft OneNote 2010 (KB2687277) 64-Bit Edition

    Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition

    Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition

    Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition

    Update for Microsoft Visual Studio 2008 Professional Edition - ENU (KB972221)

    V1 Home 2.0

    VC Runtimes MSI

    VideoStudio

    Visual Studio .NET Prerequisites - English

    Visual Studio 2005 Tools for Office Second Edition Runtime

    Visual Studio Tools for the Office system 3.0 Runtime

    Winamp

    Winamp Detector Plug-in

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live ID Sign-in Assistant

    Windows Live Installer

    Windows Live Language Selector

    Windows Live Mail

    Windows Live Messenger

    Windows Live MIME IFilter

    Windows Live Photo Common

    Windows Live PIMT Platform

    Windows Live SOXE

    Windows Live SOXE Definitions

    Windows Live UX Platform

    Windows Live UX Platform Language Pack

    Windows Live Writer

    Windows Live Writer Resources

    Windows Media Encoder 9 Series

    Windows Media Player Firefox Plugin

    Windows Mobile 5.0 SDK R2 for Pocket PC

    Windows Mobile 5.0 SDK R2 for Smartphone

    WinRAR archiver

    WinZip 14.5

    Yahoo! Detect

    Yahoo! Messenger

    Yahoo! Software Update

    Yahoo! Toolbar

    .

    ==== Event Viewer Messages From Past Week ========

    .

    12/7/2012 4:17:41 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer TVNOTEBOOK that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B2A01354-49C0-48AA-B50F-262D91EA3403}. The master browser is stopping or an election is being forced.

    12/7/2012 2:15:41 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.141.1192.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.9002.0 Error code: 0x80072f76 Error description: The requested header was not found

    12/6/2012 9:41:38 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer ERICMILLS-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B2A01354-49C0-48AA-B50F-262D91EA3403}. The master browser is stopping or an election is being forced.

    12/6/2012 10:23:49 AM, Error: ACPI [13] - : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.

    12/10/2012 11:57:35 PM, Error: Service Control Manager [7000] - The Google Update Service (gupdate) service failed to start due to the following error: The pipe has been ended.

    12/10/2012 11:57:35 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "109" attempting to start the service gupdate with arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

    12/10/2012 1:28:22 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.141.1351.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.9002.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

    .

    ==== End Of File ===========================

    I have some sort of browser hijacker on my laptop and get this when I run hijackthis. Please help smart guys :-)

    in Resolved Malware Removal Logs

    Posted

    DDS (Ver_2012-11-20.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16455 BrowserJavaVersion: 1.6.0_37

    Run by callenb at 0:24:49 on 2012-12-12

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4092.2451 [GMT -5:00]

    .

    AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}

    SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    ============== Running Processes ===============

    .

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\svchost.exe -k RPCSS

    c:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\Windows\system32\atiesrxx.exe

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe

    C:\Windows\system32\svchost.exe -k GPSvcGroup

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\system32\Hpservice.exe

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\system32\atieclxx.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\taskhost.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Windows\Explorer.EXE

    C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe

    C:\Program Files\LSI SoftModem\agr64svc.exe

    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler.exe

    C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler64.exe

    C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

    C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

    c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe

    C:\Program Files (x86)\MySQL\MySQL Server 5.1\bin\mysqld.exe

    C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

    C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

    c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe

    c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Program Files\Java\jre6\bin\jusched.exe

    C:\Program Files\IDT\WDM\sttray64.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe

    C:\Program Files (x86)\TechSmith\Jing\Jing.exe

    c:\Program Files\Microsoft Security Client\NisSrv.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe

    C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe

    C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe

    C:\Windows\system32\RunDll32.exe

    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

    C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe

    C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

    C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

    C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

    C:\Program Files (x86)\iTunes\iTunesHelper.exe

    C:\Program Files (x86)\QuickTime\QTTask.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

    C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe

    C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe

    C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\Windows\system32\wuauclt.exe

    C:\Windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Program Files\HP\HP Photosmart 5520 series\bin\HPNetworkCommunicator.exe

    C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicator.exe

    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

    C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe

    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe

    C:\Windows\explorer.exe

    C:\Windows\system32\taskeng.exe

    C:\Windows\System32\svchost.exe -k WerSvcGroup

    C:\Windows\system32\SearchProtocolHost.exe

    C:\Windows\system32\SearchFilterHost.exe

    c:\Program Files\Microsoft Security Client\MpCmdRun.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    uURLSearchHooks: {ba14329e-9550-4989-b3f2-9732e92d17cc} - <orphaned>

    mWinlogon: Userinit = userinit.exe

    BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll

    BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: hpBHO Class: {ABD3B5E1-B268-407B-A150-2641DAB8D898} - C:\Program Files (x86)\Common Files\Homepage Protection\HomepageProtection.dll

    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

    BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -

    BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    BHO: Google Gears Helper: {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

    BHO: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll

    BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll

    TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -

    TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll

    EB: iOpus iMacros: {0483894E-2422-45E0-8384-021AFF1AF3CD} - C:\Program Files (x86)\iMacros\imacros.dll

    EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll

    uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

    uRun: [Jing] C:\Program Files (x86)\TechSmith\Jing\Jing.exe

    uRun: [Google Update] "C:\Users\callenb\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    uRun: [GoToMeeting] "C:\Program Files (x86)\Citrix\GoToMeeting\970\g2mstart.exe" "/Trigger RunAtLogon"

    uRun: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe

    uRun: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

    uRun: [HP Photosmart 5520 series (NET)] "C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN275192FG05ST:NW" -scfn "HP Photosmart 5520 series (NET)" -AutoStart 1

    mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    mRun: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"

    mRun: [Corel File Shell Monitor] C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe

    mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

    mRun: [updatePRCShortCut] "C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Hewlett-Packard\Recovery" UpdateWithCreateOnce "Software\CyberLink\PowerRecover"

    mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

    mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

    mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    mRun: [iSUSPM] C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe -scheduler

    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

    mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    mRunOnce: [Z1] C:\Bryxen Software, Inc\1_Random\malwarebytes\mbar\mbar.exe /cleanup /s

    StartupFolder: C:\Users\callenb\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\MONITO~1.LNK - C:\Windows\System32\RunDll32.exe

    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe

    uPolicies-System: WallpaperStyle = 2

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    mPolicies-System: WallpaperStyle = 2

    IE: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000

    IE: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html

    IE: S&end to OneNote - C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105

    IE: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html

    IE: Show RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

    IE: {0483894E-2422-45E0-8384-021AFF1AF3CD} - {0483894E-2422-45E0-8384-021AFF1AF3CD}

    IE: {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - {0B4350D1-055F-47A3-B112-5F2F2B0D6F08} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

    TCP: NameServer = 69.10.169.10 69.10.169.11 8.8.8.8

    TCP: Interfaces\{5F56ABD8-4005-49E5-887B-346B691F2D94} : DHCPNameServer = 192.168.6.1 64.134.255.2 64.134.255.10

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403} : DHCPNameServer = 69.10.169.10 69.10.169.11 8.8.8.8

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\24C494E4B4755424 : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\64169627D6F6E647 : DHCPNameServer = 65.106.1.196 65.106.7.196 8.8.8.8 8.8.4.4

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\64169627D6F6E647F5D456564796E676 : DHCPNameServer = 65.106.1.196 65.106.7.196 8.8.8.8 8.8.4.4

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\8696568702B6C616D6164786026616C6C63702D202F627 : DHCPNameServer = 68.116.46.115 68.116.46.70 205.171.3.65 205.171.2.65

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\B497C656027586964756C656972E08993702960586F6E656 : DHCPNameServer = 172.26.38.1 172.26.38.2

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\E4544574541425 : DHCPNameServer = 192.168.1.1

    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    SSODL: WebCheck - <orphaned>

    mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"

    x64-mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    x64-mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    x64-BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

    x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    x64-TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

    x64-Run: [smartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background

    x64-Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

    x64-Run: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe

    x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab

    x64-DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab

    x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab

    x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - <orphaned>

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

    x64-SSODL: WebCheck - <orphaned>

    .

    ================= FIREFOX ===================

    .

    FF - ProfilePath - C:\Users\callenb\AppData\Roaming\Mozilla\Firefox\Profiles\dfikeofs.default\

    FF - prefs.js: browser.startup.homepage - hxxp://www.gmail.com

    FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL

    FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL

    FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

    FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll

    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll

    FF - plugin: C:\Users\callenb\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll

    FF - plugin: C:\Users\callenb\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll

    FF - plugin: C:\Users\callenb\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll

    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll

    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll

    FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll

    FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

    FF - ExtSQL: 2012-11-06 12:20; {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}; C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

    FF - ExtSQL: !HIDDEN! 2010-02-12 21:46; smartwebprinting@hp.com; C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

    .

    ---- FIREFOX POLICIES ----

    FF - user.js: yahoo.ytff.general.dontshowhpoffer - true

    ============= SERVICES / DRIVERS ===============

    .

    R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2012-8-30 228768]

    R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2012-8-1 56208]

    R2 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-3-2 89600]

    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2009-7-2 203264]

    R2 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-6-15 249648]

    R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2011-9-9 86072]

    R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-3-28 94264]

    R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2011-5-13 30520]

    R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2012-8-30 128456]

    R2 TeamViewer6;TeamViewer 6;C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-1-29 2253688]

    R3 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-8-15 228408]

    R3 enecir;ENE CIR Receiver;C:\Windows\System32\drivers\enecir.sys [2009-6-29 70656]

    R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-9-12 368896]

    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-11-6 215040]

    R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2009-11-6 36408]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-1-31 158856]

    S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-7-7 195336]

    S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [2012-9-5 234776]

    S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]

    S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]

    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2012-11-23 19456]

    S3 RoxMediaDBVHS;RoxMediaDBVHS;C:\Program Files (x86)\Common Files\Roxio Shared\VHStoDVD\SharedCOM\RoxMediaDBVHS.exe [2011-12-19 1114384]

    S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]

    S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]

    S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]

    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2012-11-23 57856]

    S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-2-27 1255736]

    S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]

    .

    =============== Created Last 30 ================

    .

    2012-12-11 18:06:03 9125352 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{987136D7-F7F6-4FFB-8DAB-19019FE17820}\mpengine.dll

    2012-12-10 16:00:12 9125352 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

    2012-11-29 22:48:51 -------- d-----w- C:\Users\callenb\AppData\Roaming\Malwarebytes

    2012-11-29 22:48:26 -------- d-----w- C:\ProgramData\Malwarebytes

    2012-11-29 22:48:24 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

    2012-11-29 22:48:24 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2012-11-28 18:28:12 972264 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4AE0ABCC-6698-40E2-AF21-EF36382122A8}\gapaengine.dll

    2012-11-27 04:40:47 388096 ----a-r- C:\Users\callenb\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2012-11-27 04:40:46 -------- d-----w- C:\Program Files (x86)\Trend Micro

    2012-11-25 02:28:21 -------- d-----w- C:\Users\callenb\AppData\Local\{15083A5A-AE5F-473E-88EF-CF667D1074E1}

    2012-11-25 01:25:06 972192 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

    2012-11-24 00:21:49 -------- d-----w- C:\Program Files (x86)\Microsoft Security Client

    2012-11-24 00:21:45 -------- d-----w- C:\Program Files\Microsoft Security Client

    2012-11-23 22:35:59 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll

    2012-11-23 22:35:59 366592 ----a-w- C:\Windows\System32\qdvd.dll

    2012-11-23 22:35:57 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll

    2012-11-23 22:35:57 458712 ----a-w- C:\Windows\System32\drivers\cng.sys

    2012-11-23 22:35:57 340992 ----a-w- C:\Windows\System32\schannel.dll

    2012-11-23 22:35:57 307200 ----a-w- C:\Windows\System32\ncrypt.dll

    2012-11-23 22:35:57 247808 ----a-w- C:\Windows\SysWow64\schannel.dll

    2012-11-23 22:35:57 220160 ----a-w- C:\Windows\SysWow64\ncrypt.dll

    2012-11-23 22:35:57 22016 ----a-w- C:\Windows\SysWow64\secur32.dll

    2012-11-23 22:35:57 154480 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys

    2012-11-23 22:35:57 1448448 ----a-w- C:\Windows\System32\lsasrv.dll

    2012-11-23 22:08:56 9728 ----a-w- C:\Windows\System32\Wdfres.dll

    2012-11-23 22:08:56 785512 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys

    2012-11-23 22:08:56 54376 ----a-w- C:\Windows\System32\drivers\WdfLdr.sys

    2012-11-23 22:08:56 2560 ----a-w- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui

    2012-11-23 22:00:03 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys

    2012-11-23 22:00:03 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys

    2012-11-23 22:00:01 84992 ----a-w- C:\Windows\System32\WUDFSvc.dll

    2012-11-23 22:00:01 194048 ----a-w- C:\Windows\System32\WUDFPlatform.dll

    2012-11-23 21:59:57 744448 ----a-w- C:\Windows\System32\WUDFx.dll

    2012-11-23 21:59:57 45056 ----a-w- C:\Windows\System32\WUDFCoinstaller.dll

    2012-11-23 21:59:57 229888 ----a-w- C:\Windows\System32\WUDFHost.exe

    2012-11-23 21:58:40 9125352 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8A1D1CEE-788A-485B-8C92-E248893F3FA1}\mpengine.dll

    2012-11-23 21:56:56 3149824 ----a-w- C:\Windows\System32\win32k.sys

    2012-11-23 21:55:51 95744 ----a-w- C:\Windows\System32\synceng.dll

    2012-11-23 21:55:51 78336 ----a-w- C:\Windows\SysWow64\synceng.dll

    .

    ==================== Find3M ====================

    .

    2012-12-11 18:03:26 73656 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-12-11 18:03:26 697272 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

    2012-10-25 08:12:26 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx

    2012-10-25 08:12:26 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts

    2012-10-09 18:17:13 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll

    2012-10-09 18:17:13 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll

    2012-10-09 17:40:31 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll

    2012-10-09 17:40:31 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll

    2012-10-08 11:31:03 2312704 ----a-w- C:\Windows\System32\jscript9.dll

    2012-10-08 11:23:52 1392128 ----a-w- C:\Windows\System32\wininet.dll

    2012-10-08 11:22:55 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

    2012-10-08 11:18:22 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

    2012-10-08 11:17:35 599040 ----a-w- C:\Windows\System32\vbscript.dll

    2012-10-08 11:13:33 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

    2012-10-08 07:56:24 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

    2012-10-08 07:48:03 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

    2012-10-08 07:47:44 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

    2012-10-08 07:44:05 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

    2012-10-08 07:43:21 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

    2012-10-08 07:40:56 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

    2012-10-03 17:56:54 1914248 ----a-w- C:\Windows\System32\drivers\tcpip.sys

    2012-10-03 17:44:21 70656 ----a-w- C:\Windows\System32\nlaapi.dll

    2012-10-03 17:44:21 303104 ----a-w- C:\Windows\System32\nlasvc.dll

    2012-10-03 17:44:17 246272 ----a-w- C:\Windows\System32\netcorehc.dll

    2012-10-03 17:44:17 18944 ----a-w- C:\Windows\System32\netevent.dll

    2012-10-03 17:44:16 216576 ----a-w- C:\Windows\System32\ncsi.dll

    2012-10-03 17:42:16 569344 ----a-w- C:\Windows\System32\iphlpsvc.dll

    2012-10-03 16:42:24 18944 ----a-w- C:\Windows\SysWow64\netevent.dll

    2012-10-03 16:42:24 175104 ----a-w- C:\Windows\SysWow64\netcorehc.dll

    2012-10-03 16:42:23 156672 ----a-w- C:\Windows\SysWow64\ncsi.dll

    2012-10-03 16:07:26 45568 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys

    2012-09-24 20:32:24 477168 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll

    2012-09-24 20:32:20 473072 ----a-w- C:\Windows\SysWow64\deployJava1.dll

    2012-09-14 19:19:29 2048 ----a-w- C:\Windows\System32\tzres.dll

    2012-09-14 18:28:53 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

    .

    ============= FINISH: 0:25:52.64 ===============

    I have some sort of browser hijacker on my laptop and get this when I run hijackthis. Please help smart guys :-)

    in Resolved Malware Removal Logs

    Posted

    Log file 2:

    DDS (Ver_2012-11-20.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16455 BrowserJavaVersion: 1.6.0_37

    Run by callenb at 23:40:45 on 2012-11-30

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4092.1925 [GMT -5:00]

    .

    AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}

    SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    ============== Running Processes ===============

    .

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\svchost.exe -k RPCSS

    c:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\Windows\system32\atiesrxx.exe

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe

    C:\Windows\system32\svchost.exe -k GPSvcGroup

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\system32\Hpservice.exe

    C:\Windows\system32\atieclxx.exe

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\system32\Dwm.exe

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Windows\Explorer.EXE

    C:\Windows\system32\taskhost.exe

    C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe

    C:\Program Files\LSI SoftModem\agr64svc.exe

    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler.exe

    C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

    C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler64.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

    C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

    c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe

    C:\Program Files (x86)\MySQL\MySQL Server 5.1\bin\mysqld.exe

    C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

    C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

    c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

    C:\Program Files\Java\jre6\bin\jusched.exe

    c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe

    C:\Program Files\IDT\WDM\sttray64.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe

    C:\Program Files (x86)\TechSmith\Jing\Jing.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files (x86)\Citrix\GoToMeeting\970\g2mstart.exe

    C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe

    C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe

    C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe

    C:\Windows\system32\RunDll32.exe

    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

    C:\Program Files (x86)\Citrix\GoToMeeting\970\g2mcomm.exe

    C:\Program Files (x86)\Citrix\GoToMeeting\970\g2mlauncher.exe

    C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe

    C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

    C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

    C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

    C:\Program Files (x86)\iTunes\iTunesHelper.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    C:\Program Files (x86)\QuickTime\QTTask.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Program Files\HP\HP Photosmart 5520 series\bin\HPNetworkCommunicator.exe

    C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

    c:\Program Files\Microsoft Security Client\NisSrv.exe

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicator.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

    C:\Windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe

    C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe

    C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

    C:\Windows\system32\wuauclt.exe

    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe

    C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\Users\callenb\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe

    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe

    C:\Windows\system32\taskeng.exe

    C:\Windows\system32\taskeng.exe

    C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe

    C:\Program Files (x86)\Internet Explorer\IELowutil.exe

    C:\Windows\system32\taskhost.exe

    C:\Windows\system32\SearchProtocolHost.exe

    C:\Windows\system32\SearchFilterHost.exe

    c:\Program Files\Microsoft Security Client\MpCmdRun.exe

    C:\Windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    uURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll

    mURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll

    mWinlogon: Userinit = userinit.exe

    BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll

    BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: hpBHO Class: {ABD3B5E1-B268-407B-A150-2641DAB8D898} - C:\Program Files (x86)\Common Files\Homepage Protection\HomepageProtection.dll

    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

    BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll

    BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -

    BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    BHO: Google Gears Helper: {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

    BHO: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll

    BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    TB: Vuze Remote Toolbar: {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll

    TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll

    TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -

    TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll

    TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll

    EB: iOpus iMacros: {0483894E-2422-45E0-8384-021AFF1AF3CD} - C:\Program Files (x86)\iMacros\imacros.dll

    EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll

    uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

    uRun: [Jing] C:\Program Files (x86)\TechSmith\Jing\Jing.exe

    uRun: [Google Update] "C:\Users\callenb\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    uRun: [GoToMeeting] "C:\Program Files (x86)\Citrix\GoToMeeting\970\g2mstart.exe" "/Trigger RunAtLogon"

    uRun: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe

    uRun: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

    uRun: [HP Photosmart 5520 series (NET)] "C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN275192FG05ST:NW" -scfn "HP Photosmart 5520 series (NET)" -AutoStart 1

    mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    mRun: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"

    mRun: [Corel File Shell Monitor] C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe

    mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

    mRun: [updatePRCShortCut] "C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Hewlett-Packard\Recovery" UpdateWithCreateOnce "Software\CyberLink\PowerRecover"

    mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

    mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

    mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    mRun: [iSUSPM] C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe -scheduler

    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

    mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

    mRunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

    StartupFolder: C:\Users\callenb\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\MONITO~1.LNK - C:\Windows\System32\RunDll32.exe

    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe

    uPolicies-System: WallpaperStyle = 2

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    mPolicies-System: WallpaperStyle = 2

    IE: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000

    IE: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html

    IE: S&end to OneNote - C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105

    IE: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html

    IE: Show RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

    IE: {0483894E-2422-45E0-8384-021AFF1AF3CD} - {0483894E-2422-45E0-8384-021AFF1AF3CD}

    IE: {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - {0B4350D1-055F-47A3-B112-5F2F2B0D6F08} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

    TCP: NameServer = 69.10.169.10 69.10.169.11 8.8.8.8

    TCP: Interfaces\{5F56ABD8-4005-49E5-887B-346B691F2D94} : DHCPNameServer = 192.168.6.1 64.134.255.2 64.134.255.10

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403} : DHCPNameServer = 69.10.169.10 69.10.169.11 8.8.8.8

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\24C494E4B4755424 : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\64169627D6F6E647 : DHCPNameServer = 65.106.1.196 65.106.7.196 8.8.8.8 8.8.4.4

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\64169627D6F6E647F5D456564796E676 : DHCPNameServer = 65.106.1.196 65.106.7.196 8.8.8.8 8.8.4.4

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\B497C656027586964756C656972E08993702960586F6E656 : DHCPNameServer = 172.26.38.1 172.26.38.2

    TCP: Interfaces\{B2A01354-49C0-48AA-B50F-262D91EA3403}\E4544574541425 : DHCPNameServer = 192.168.1.1

    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    SSODL: WebCheck - <orphaned>

    mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"

    x64-mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    x64-mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_US&c=94&bd=Pavilion&pf=cnnb

    x64-BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

    x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    x64-TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

    x64-Run: [smartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background

    x64-Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

    x64-Run: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe

    x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

    x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab

    x64-DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab

    x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab

    x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - <orphaned>

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

    x64-SSODL: WebCheck - <orphaned>

    .

    ================= FIREFOX ===================

    .

    FF - ProfilePath - C:\Users\callenb\AppData\Roaming\Mozilla\Firefox\Profiles\dfikeofs.default\

    FF - prefs.js: browser.startup.homepage - hxxp://www.gmail.com

    FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL

    FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL

    FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.53\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.57\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll

    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npdeployJava1.dll

    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

    FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll

    FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll

    FF - plugin: C:\Users\callenb\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll

    FF - plugin: C:\Users\callenb\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll

    FF - plugin: C:\Users\callenb\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll

    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll

    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll

    FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll

    FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

    FF - ExtSQL: 2012-11-06 12:20; {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}; C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

    FF - ExtSQL: !HIDDEN! 2010-02-12 21:46; smartwebprinting@hp.com; C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

    .

    ---- FIREFOX POLICIES ----

    FF - user.js: yahoo.ytff.general.dontshowhpoffer - true

    ============= SERVICES / DRIVERS ===============

    .

    R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2012-8-30 228768]

    R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2012-8-1 56208]

    R2 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-3-2 89600]

    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2009-7-2 203264]

    R2 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-6-15 249648]

    R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2011-9-9 86072]

    R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-3-28 94264]

    R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2011-5-13 30520]

    R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2012-8-30 128456]

    R2 TeamViewer6;TeamViewer 6;C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-1-29 2253688]

    R3 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-8-15 228408]

    R3 enecir;ENE CIR Receiver;C:\Windows\System32\drivers\enecir.sys [2009-6-29 70656]

    R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-9-12 368896]

    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-11-6 215040]

    R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2009-11-6 36408]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-1-31 158856]

    S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-7-7 195336]

    S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [2012-9-5 234776]

    S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]

    S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 174440]

    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2012-11-23 19456]

    S3 RoxMediaDBVHS;RoxMediaDBVHS;C:\Program Files (x86)\Common Files\Roxio Shared\VHStoDVD\SharedCOM\RoxMediaDBVHS.exe [2011-12-19 1114384]

    S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]

    S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]

    S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]

    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2012-11-23 57856]

    S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-2-27 1255736]

    S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]

    .

    =============== Created Last 30 ================

    .

    2012-11-30 05:21:50 9125352 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{8BFA9007-3027-4799-8E01-F3BE3A56181B}\mpengine.dll

    2012-11-29 22:56:37 9125352 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

    2012-11-29 22:48:51 -------- d-----w- C:\Users\callenb\AppData\Roaming\Malwarebytes

    2012-11-29 22:48:26 -------- d-----w- C:\ProgramData\Malwarebytes

    2012-11-29 22:48:24 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

    2012-11-29 22:48:24 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2012-11-28 18:28:12 972264 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4AE0ABCC-6698-40E2-AF21-EF36382122A8}\gapaengine.dll

    2012-11-27 04:40:47 388096 ----a-r- C:\Users\callenb\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2012-11-27 04:40:46 -------- d-----w- C:\Program Files (x86)\Trend Micro

    2012-11-25 02:28:21 -------- d-----w- C:\Users\callenb\AppData\Local\{15083A5A-AE5F-473E-88EF-CF667D1074E1}

    2012-11-25 01:25:06 972192 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

    2012-11-25 01:25:05 972192 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{24E74879-2286-45B2-8B0B-7CCD209DFB5C}\gapaengine.dll

    2012-11-24 00:21:49 -------- d-----w- C:\Program Files (x86)\Microsoft Security Client

    2012-11-24 00:21:45 -------- d-----w- C:\Program Files\Microsoft Security Client

    2012-11-23 22:35:59 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll

    2012-11-23 22:35:59 366592 ----a-w- C:\Windows\System32\qdvd.dll

    2012-11-23 22:35:57 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll

    2012-11-23 22:35:57 458712 ----a-w- C:\Windows\System32\drivers\cng.sys

    2012-11-23 22:35:57 340992 ----a-w- C:\Windows\System32\schannel.dll

    2012-11-23 22:35:57 307200 ----a-w- C:\Windows\System32\ncrypt.dll

    2012-11-23 22:35:57 247808 ----a-w- C:\Windows\SysWow64\schannel.dll

    2012-11-23 22:35:57 220160 ----a-w- C:\Windows\SysWow64\ncrypt.dll

    2012-11-23 22:35:57 22016 ----a-w- C:\Windows\SysWow64\secur32.dll

    2012-11-23 22:35:57 154480 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys

    2012-11-23 22:35:57 1448448 ----a-w- C:\Windows\System32\lsasrv.dll

    2012-11-23 22:08:56 9728 ----a-w- C:\Windows\System32\Wdfres.dll

    2012-11-23 22:08:56 785512 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys

    2012-11-23 22:08:56 54376 ----a-w- C:\Windows\System32\drivers\WdfLdr.sys

    2012-11-23 22:08:56 2560 ----a-w- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui

    2012-11-23 22:00:03 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys

    2012-11-23 22:00:03 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys

    2012-11-23 22:00:01 84992 ----a-w- C:\Windows\System32\WUDFSvc.dll

    2012-11-23 22:00:01 194048 ----a-w- C:\Windows\System32\WUDFPlatform.dll

    2012-11-23 21:59:57 744448 ----a-w- C:\Windows\System32\WUDFx.dll

    2012-11-23 21:59:57 45056 ----a-w- C:\Windows\System32\WUDFCoinstaller.dll

    2012-11-23 21:59:57 229888 ----a-w- C:\Windows\System32\WUDFHost.exe

    2012-11-23 21:58:40 9125352 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8A1D1CEE-788A-485B-8C92-E248893F3FA1}\mpengine.dll

    2012-11-23 21:56:56 3149824 ----a-w- C:\Windows\System32\win32k.sys

    2012-11-23 21:55:51 95744 ----a-w- C:\Windows\System32\synceng.dll

    2012-11-23 21:55:51 78336 ----a-w- C:\Windows\SysWow64\synceng.dll

    2012-11-02 18:42:21 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe

    2012-11-02 18:42:19 3914096 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe

    2012-11-02 18:42:18 3968880 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe

    2012-11-02 18:42:14 1659760 ----a-w- C:\Windows\System32\drivers\ntfs.sys

    2012-11-02 18:42:11 245760 ----a-w- C:\Windows\System32\OxpsConverter.exe

    2012-11-02 18:42:00 424448 ----a-w- C:\Windows\System32\KernelBase.dll

    2012-11-02 18:42:00 338432 ----a-w- C:\Windows\System32\conhost.exe

    2012-11-02 18:42:00 215040 ----a-w- C:\Windows\System32\winsrv.dll

    .

    ==================== Find3M ====================

    .

    2012-11-09 16:06:39 73656 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-11-09 16:06:39 697272 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

    2012-10-25 08:12:26 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx

    2012-10-25 08:12:26 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts

    2012-10-09 18:17:13 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll

    2012-10-09 18:17:13 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll

    2012-10-09 17:40:31 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll

    2012-10-09 17:40:31 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll

    2012-10-08 11:31:03 2312704 ----a-w- C:\Windows\System32\jscript9.dll

    2012-10-08 11:23:52 1392128 ----a-w- C:\Windows\System32\wininet.dll

    2012-10-08 11:22:55 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

    2012-10-08 11:18:22 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

    2012-10-08 11:17:35 599040 ----a-w- C:\Windows\System32\vbscript.dll

    2012-10-08 11:13:33 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

    2012-10-08 07:56:24 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

    2012-10-08 07:48:03 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

    2012-10-08 07:47:44 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

    2012-10-08 07:44:05 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

    2012-10-08 07:43:21 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

    2012-10-08 07:40:56 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

    2012-10-03 17:56:54 1914248 ----a-w- C:\Windows\System32\drivers\tcpip.sys

    2012-10-03 17:44:21 70656 ----a-w- C:\Windows\System32\nlaapi.dll

    2012-10-03 17:44:21 303104 ----a-w- C:\Windows\System32\nlasvc.dll

    2012-10-03 17:44:17 246272 ----a-w- C:\Windows\System32\netcorehc.dll

    2012-10-03 17:44:17 18944 ----a-w- C:\Windows\System32\netevent.dll

    2012-10-03 17:44:16 216576 ----a-w- C:\Windows\System32\ncsi.dll

    2012-10-03 17:42:16 569344 ----a-w- C:\Windows\System32\iphlpsvc.dll

    2012-10-03 16:42:24 18944 ----a-w- C:\Windows\SysWow64\netevent.dll

    2012-10-03 16:42:24 175104 ----a-w- C:\Windows\SysWow64\netcorehc.dll

    2012-10-03 16:42:23 156672 ----a-w- C:\Windows\SysWow64\ncsi.dll

    2012-10-03 16:07:26 45568 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys

    2012-09-24 20:32:24 477168 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll

    2012-09-24 20:32:20 473072 ----a-w- C:\Windows\SysWow64\deployJava1.dll

    2012-09-14 19:19:29 2048 ----a-w- C:\Windows\System32\tzres.dll

    2012-09-14 18:28:53 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

    .

    ============= FINISH: 23:41:26.13 ===============

    I have some sort of browser hijacker on my laptop and get this when I run hijackthis. Please help smart guys :-)

    in Resolved Malware Removal Logs

    Posted

    Log file 1:

    .

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    .

    DDS (Ver_2012-11-20.01)

    .

    Microsoft Windows 7 Home Premium

    Boot Device: \Device\HarddiskVolume1

    Install Date: 2/12/2010 7:34:25 PM

    System Uptime: 11/27/2012 5:40:54 PM (78 hours ago)

    .

    Motherboard: Quanta | | 3639

    Processor: AMD Turion II Ultra Dual-Core Mobile M600 | Socket S1G3 | 2400/200mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 450 GiB total, 309.517 GiB free.

    D: is FIXED (NTFS) - 15 GiB total, 2.519 GiB free.

    E: is CDROM ()

    .

    ==== Disabled Device Manager Items =============

    .

    ==== System Restore Points ===================

    .

    RP433: 11/23/2012 4:57:43 PM - Windows Update

    RP434: 11/23/2012 5:36:08 PM - Windows Update

    RP435: 11/26/2012 10:05:27 AM - Removed Market Samurai

    RP436: 11/26/2012 11:13:26 PM - Windows Update

    RP437: 11/26/2012 11:40:32 PM - Installed HiJackThis

    RP438: 11/30/2012 12:21:10 AM - Windows Update

    .

    ==== Installed Programs ======================

    .

    Acrobat.com

    Adobe AIR

    Adobe Anchor Service CS3

    Adobe Asset Services CS3

    Adobe Bridge CS3

    Adobe Bridge Start Meeting

    Adobe Camera Raw 4.0

    Adobe CMaps

    Adobe Color - Photoshop Specific

    Adobe Color Common Settings

    Adobe Color EU Extra Settings

    Adobe Color JA Extra Settings

    Adobe Color NA Recommended Settings

    Adobe Default Language CS3

    Adobe Device Central CS3

    Adobe ExtendScript Toolkit 2

    Adobe Flash Player 11 ActiveX

    Adobe Flash Player 11 Plugin

    Adobe Fonts All

    Adobe Help Viewer CS3

    Adobe Linguistics CS3

    Adobe PDF Library Files

    Adobe Photoshop CS3

    Adobe Reader 9.5.2

    Adobe Setup

    Adobe Shockwave Player 11.5

    Adobe Stock Photos CS3

    Adobe Type Support

    Adobe Update Manager CS3

    Adobe Version Cue CS3 Client

    Adobe WinSoft Linguistics Plugin

    Adobe XMP Panels CS3

    AMD USB Filter Driver

    Apple Application Support

    Apple Mobile Device Support

    Apple Software Update

    Atheros Driver Installation Program

    ATI Catalyst Install Manager

    Audacity 1.2.6

    Bing Bar

    Bonjour

    Catalyst Control Center - Branding

    Catalyst Control Center Core Implementation

    Catalyst Control Center Graphics Full Existing

    Catalyst Control Center Graphics Full New

    Catalyst Control Center Graphics Light

    Catalyst Control Center Graphics Previews Common

    Catalyst Control Center Graphics Previews Vista

    Catalyst Control Center InstallProxy

    Catalyst Control Center Localization All

    ccc-core-static

    ccc-utility64

    CCC Help Chinese Standard

    CCC Help Chinese Traditional

    CCC Help Czech

    CCC Help Danish

    CCC Help Dutch

    CCC Help English

    CCC Help Finnish

    CCC Help French

    CCC Help German

    CCC Help Greek

    CCC Help Hungarian

    CCC Help Italian

    CCC Help Japanese

    CCC Help Korean

    CCC Help Norwegian

    CCC Help Polish

    CCC Help Portuguese

    CCC Help Russian

    CCC Help Spanish

    CCC Help Swedish

    CCC Help Thai

    CCC Help Turkish

    CCleaner

    Cisco EAP-FAST Module

    Cisco LEAP Module

    Cisco PEAP Module

    Combined Community Codec Pack 2010-10-10

    Corel Paint Shop Pro Photo X2

    Corel VideoStudio 12

    Crystal Reports Basic for Visual Studio 2008

    Crystal Reports Basic Runtime for Visual Studio 2008 (x64)

    CutePDF Writer 2.8

    CyberLink DVD Suite

    D3DX10

    Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition

    DirectX 9 Runtime

    ENE CIR Receiver Driver

    Express Burn Disc Burning Software

    FileZilla Client 3.5.3

    FLV Player

    Google Chrome

    Google Gears

    Google Talk Plugin

    Google Update Helper

    GoToMeeting 5.3.0.970

    Hewlett-Packard ACLM.NET v1.1.2.0

    HiJackThis

    Homepage Protection

    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB971091)

    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB973674)

    HP 3D DriveGuard

    HP Advisor

    HP Customer Experience Enhancements

    HP Games

    HP MediaSmart DVD

    HP MediaSmart Internet TV

    HP MediaSmart Live TV

    HP MediaSmart Movie Themes

    HP MediaSmart Music/Photo/Video

    HP MediaSmart SlingPlayer

    HP MediaSmart SmartMenu

    HP MediaSmart Software Notebook Demo

    HP MediaSmart Webcam

    HP Photosmart 5520 series Basic Device Software

    HP Quick Launch Buttons

    HP Setup

    HP Smart Web Printing 4.60

    HP Support Assistant

    HP Update

    HP User Guides 0153

    HP Wireless Assistant

    iCloud

    IDT Audio

    iMacros V6.90

    iTunes

    Java Auto Updater

    Java 6 Update 14 (64-bit)

    Java 6 Update 37

    Jing

    JMicron Flash Media Controller Driver

    Junk Mail filter update

    Keyword Cloud Generator 1.0.21

    LabelPrint

    LAME v3.98.3 for Audacity

    LightScribe System Software

    LSI HDA Modem

    Malwarebytes Anti-Malware version 1.65.1.1000

    McAfee Security Scan Plus

    Microsoft .NET Compact Framework 2.0 SP2

    Microsoft .NET Compact Framework 3.5

    Microsoft .NET Framework 4 Client Profile

    Microsoft .NET Framework 4 Extended

    Microsoft Application Error Reporting

    Microsoft Device Emulator (64 bit) version 3.0 - ENU

    Microsoft Document Explorer 2008

    Microsoft Live Search Toolbar

    Microsoft Office 2007 Service Pack 3 (SP3)

    Microsoft Office 2010 Service Pack 1 (SP1)

    Microsoft Office Access MUI (English) 2010

    Microsoft Office Access Setup Metadata MUI (English) 2010

    Microsoft Office Excel MUI (English) 2010

    Microsoft Office Home and Business 2010

    Microsoft Office Office 32-bit Components 2010

    Microsoft Office OneNote MUI (English) 2010

    Microsoft Office Outlook MUI (English) 2010

    Microsoft Office PowerPoint MUI (English) 2010

    Microsoft Office Proof (English) 2010

    Microsoft Office Proof (French) 2010

    Microsoft Office Proof (Spanish) 2010

    Microsoft Office Proofing (English) 2010

    Microsoft Office Publisher MUI (English) 2010

    Microsoft Office Shared 32-bit MUI (English) 2010

    Microsoft Office Shared MUI (English) 2007

    Microsoft Office Shared MUI (English) 2010

    Microsoft Office Shared Setup Metadata MUI (English) 2007

    Microsoft Office Shared Setup Metadata MUI (English) 2010

    Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3)

    Microsoft Office Single Image 2010

    Microsoft Office Visual Web Developer 2007

    Microsoft Office Visual Web Developer MUI (English) 2007

    Microsoft Office Word MUI (English) 2010

    Microsoft Security Client

    Microsoft Security Essentials

    Microsoft Silverlight

    Microsoft SQL Server 2005

    Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)

    Microsoft SQL Server Compact 3.5 Design Tools ENU

    Microsoft SQL Server Compact 3.5 ENU

    Microsoft SQL Server Compact 3.5 for Devices ENU

    Microsoft SQL Server Database Publishing Wizard 1.2

    Microsoft SQL Server Native Client

    Microsoft SQL Server Setup Support Files (English)

    Microsoft SQL Server VSS Writer

    Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2005 Redistributable (x64)

    Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175

    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual Studio 2005 Tools for Office Runtime

    Microsoft Visual Studio 2008 Professional Edition - ENU

    Microsoft Visual Studio 2008 Remote Debugger - ENU

    Microsoft Visual Studio Web Authoring Component

    Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools

    Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries

    Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense

    Microsoft Windows SDK for Visual Studio 2008 Tools

    Microsoft Windows SDK for Visual Studio 2008 Win32 Tools

    MobileMe Control Panel

    Money Keyword Finder 2.6

    Money Keyword Finder 2.7

    Mozilla Firefox 16.0.2 (x86 en-US)

    Mozilla Maintenance Service

    MSVCRT

    MSVCRT_amd64

    MSXML 4.0 SP2 (KB954430)

    MSXML 4.0 SP2 (KB973688)

    MySQL Server 5.1

    Niche Finder

    Ninja Pinner

    Nuclear Link Blaster

    PDF Settings

    Pinnacle Video Driver

    Power2Go

    PowerDirector

    PowerRecover

    QLBCASL

    QuickTime

    Realtek 8136 8168 8169 Ethernet Driver

    RoboForm 7-8-2-5 (All Users)

    Roxio CinePlayer Decoder Pack

    Roxio Easy VHS to DVD 3

    Roxio Express Labeler

    ROXIOVHS3X64

    Safari

    Security Update for 2007 Microsoft Office System (KB2288621)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

    Security Update for Microsoft Excel 2010 (KB2597126) 64-Bit Edition

    Security Update for Microsoft InfoPath 2010 (KB2687417) 64-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553091)

    Security Update for Microsoft Office 2010 (KB2553096)

    Security Update for Microsoft Office 2010 (KB2553260) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553371) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553447) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2589320) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2589322) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2598243) 64-Bit Edition

    Security Update for Microsoft Office system 2007 (KB974234)

    Security Update for Microsoft PowerPoint 2010 (KB2553185) 64-Bit Edition

    Security Update for Microsoft Visio Viewer 2010 (KB2598287) 64-Bit Edition

    Security Update for Microsoft Word 2010 (KB2553488) 64-Bit Edition

    Skype Click to Call

    Skype™ 5.8

    SlingBoxWatchYourTVAnyWhere

    SmartWebPrinting

    Spotify

    SWF & FLV Player 3.0 (build 3.0.33.5106)

    Synaptics Pointing Device Driver

    TeamViewer 6

    TextPad 5

    Uninstall 1.0.0.1

    Update for 2007 Microsoft Office System (KB967642)

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

    Update for Microsoft .NET Framework 4 Extended (KB2468871)

    Update for Microsoft .NET Framework 4 Extended (KB2533523)

    Update for Microsoft .NET Framework 4 Extended (KB2600217)

    Update for Microsoft Office 2007 Help for Common Features (KB963673)

    Update for Microsoft Office 2007 System (KB2539530)

    Update for Microsoft Office 2010 (KB2553065)

    Update for Microsoft Office 2010 (KB2553181) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553270) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553272) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2566458)

    Update for Microsoft Office 2010 (KB2687509) 64-Bit Edition

    Update for Microsoft Office Script Editor Help (KB963671)

    Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition

    Update for Microsoft OneNote 2010 (KB2687277) 64-Bit Edition

    Update for Microsoft Outlook 2010 (KB2687623) 64-Bit Edition

    Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition

    Update for Microsoft SharePoint Workspace 2010 (KB2589371) 64-Bit Edition

    Update for Microsoft Visual Studio 2008 Professional Edition - ENU (KB972221)

    V1 Home 2.0

    VC Runtimes MSI

    VideoStudio

    Visual Studio .NET Prerequisites - English

    Visual Studio 2005 Tools for Office Second Edition Runtime

    Visual Studio Tools for the Office system 3.0 Runtime

    Vuze

    Vuze Remote Toolbar

    Winamp

    Winamp Detector Plug-in

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live ID Sign-in Assistant

    Windows Live Installer

    Windows Live Language Selector

    Windows Live Mail

    Windows Live Messenger

    Windows Live MIME IFilter

    Windows Live Photo Common

    Windows Live PIMT Platform

    Windows Live SOXE

    Windows Live SOXE Definitions

    Windows Live UX Platform

    Windows Live UX Platform Language Pack

    Windows Live Writer

    Windows Live Writer Resources

    Windows Media Encoder 9 Series

    Windows Media Player Firefox Plugin

    Windows Mobile 5.0 SDK R2 for Pocket PC

    Windows Mobile 5.0 SDK R2 for Smartphone

    WinRAR archiver

    WinZip 14.5

    Yahoo! Detect

    Yahoo! Messenger

    Yahoo! Software Update

    Yahoo! Toolbar

    .

    ==== Event Viewer Messages From Past Week ========

    .

    11/27/2012 1:17:11 PM, Error: Service Control Manager [7034] - The Google Update Service (gupdate) service terminated unexpectedly. It has done this 1 time(s).

    11/25/2012 12:10:39 AM, Error: NetBT [4321] - The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.71.144.72. The computer with the IP address 10.71.91.177 did not allow the name to be claimed by this computer.

    11/25/2012 11:28:17 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the SQL Server (SQLEXPRESS) service to connect.

    11/25/2012 11:28:17 AM, Error: Service Control Manager [7000] - The SQL Server (SQLEXPRESS) service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

    11/25/2012 11:14:30 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.141.381.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.9002.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

    11/24/2012 11:14:49 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer GREENVAIO that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B2A01354-49C0-48AA-B50F-262D91EA3403}. The master browser is stopping or an election is being forced.

    11/24/2012 1:05:03 AM, Error: bowser [8003] - The master browser has received a server announcement from the computer UKI-SAPPHIRE that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B2A01354-49C0-48AA-B50F-262D91EA3403}. The master browser is stopping or an election is being forced.

    11/23/2012 8:15:25 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer SONY-VAIO that believes that it is the master browser for the domain on transport NetBT_Tcpip_{B2A01354-49C0-48AA-B50F-262D91EA3403}. The master browser is stopping or an election is being forced.

    11/23/2012 7:23:04 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

    11/23/2012 7:23:04 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?LinkID=121721&clcid=0x409&arch=x64&eng=0.0.0.0&avdelta=0.0.0.0&asdelta=0.0.0.0∏=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094 Signature Type: AntiVirus Update Type: Full User: callenb-PC\callenb Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved

    11/23/2012 7:23:04 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?LinkID=121721&clcid=0x409&arch=x64&eng=0.0.0.0&avdelta=0.0.0.0&asdelta=0.0.0.0∏=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094 Signature Type: AntiSpyware Update Type: Full User: callenb-PC\callenb Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved

    11/23/2012 7:22:07 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?LinkID=121721&clcid=0x409&arch=x64&eng=0.0.0.0&avdelta=0.0.0.0&asdelta=0.0.0.0∏=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094 Signature Type: AntiVirus Update Type: Full User: callenb-PC\callenb Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved

    11/23/2012 7:22:07 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Malware Protection Center Update Stage: Search Source Path: http://go.microsoft.com/fwlink/?LinkID=121721&clcid=0x409&arch=x64&eng=0.0.0.0&avdelta=0.0.0.0&asdelta=0.0.0.0∏=EDB4FA23-53B8-4AFA-8C5D-99752CCA7094 Signature Type: AntiSpyware Update Type: Full User: callenb-PC\callenb Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x80072ee7 Error description: The server name or address could not be resolved

    11/23/2012 7:22:06 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 0.0.0.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 0.0.0.0 Error code: 0x8024402c Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.

    11/23/2012 5:21:46 PM, Error: ACPI [13] - : The embedded controller (EC) did not respond within the specified timeout period. This may indicate that there is an error in the EC hardware or firmware or that the BIOS is accessing the EC incorrectly. You should check with your computer manufacturer for an upgraded BIOS. In some situations, this error may cause the computer to function incorrectly.

    .

    ==== End Of File ===========================

    I have some sort of browser hijacker on my laptop and get this when I run hijackthis. Please help smart guys :-)

    in Resolved Malware Removal Logs

    Posted

    Hi Maniac, thanks a lot for your reply. I've followed the instructions. Malwarebytes didn't find any problems and the problem still persists. I ran the dds file I was told to run. Here are the 2 files that the program created and saved to my desktop:

    1. http://www.blogorizer.com/attach.txt

    2. www.blogorizer.com/dds.txt

    Please let me know what I need to do now. Thanks again for your help.

    I have some sort of browser hijacker on my laptop and get this when I run hijackthis. Please help smart guys :-)

    in Resolved Malware Removal Logs

    Posted

    Ok, I have no idea how I managed to get this. I'm fairly smart when it comes to computer stuff and know not to download anything randomly. I wouldn't get tricked into downloading something with spyware etc. in it, but apparently I did.

    Could you guys help me clean up my computer?

    When I run hijack this, this is the message I get: http://screencast.com/t/tlKKHcgSNl

    and when I try to follow the steps, it opens a text file, but the text file doesn't contain any lines that I would/could delete. It's just instructions.

    Anyway, could someone please step me through what I need to do to get rid of this malware/spyware/browser hijacker thing?

    Thank you!

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.