Jump to content

lisarichards

Members
 View Profile  See their activity

  • Posts

    2

  • Joined

  • Last visited

 Content Type 

Posts posted by lisarichards

    Still infected

    in Resolved Malware Removal Logs

    Posted

    After all that, same symptoms.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Junkware Removal Tool (JRT) by Thisisu

    Version: 4.3.8 (01.03.2013:2)

    OS: Windows 7 Professional x64

    Ran by Lisa on Sat 01/05/2013 at 12:27:10.51

    Blog: http://thisisudax.blogspot.com

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    ~~~ Services

    ~~~ Registry Values

    Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\main\\Start Page

    Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\searchscopes\\DefaultScope

    Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\searchscopes\\DefaultScope

    Successfully repaired: [Registry Value] hkey_users\.default\software\microsoft\internet explorer\searchscopes\\DefaultScope

    Successfully repaired: [Registry Value] hkey_users\s-1-5-18\software\microsoft\internet explorer\searchscopes\\DefaultScope

    Successfully repaired: [Registry Value] hkey_users\s-1-5-19\software\microsoft\internet explorer\searchscopes\\DefaultScope

    Successfully repaired: [Registry Value] hkey_users\s-1-5-20\software\microsoft\internet explorer\searchscopes\\DefaultScope

    Successfully repaired: [Registry Value] hkey_users\S-1-5-21-490268317-2128658434-948393421-1000\software\microsoft\internet explorer\searchscopes\\DefaultScope

    Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\searchscopes\{6a1806cd-94d4-4689-ba73-e35ea1ea9990}\\DisplayName

    Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\searchscopes\{6a1806cd-94d4-4689-ba73-e35ea1ea9990}\\URL

    ~~~ Registry Keys

    Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escort.dll

    Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escortapp.dll

    Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escorteng.dll

    Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escortlbr.dll

    ~~~ Files

    Successfully deleted: [File] "C:\Users\Lisa\appdata\local\funmoods-speeddial.crx"

    ~~~ Folders

    Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"

    Successfully deleted: [Folder] "C:\ProgramData\partner"

    Successfully deleted: [Folder] "C:\Users\Lisa\appdata\local\ilivid player"

    Failed to delete: [Folder] "C:\Program Files (x86)\ilivid"

    ~~~ Event Viewer Logs were cleared

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Scan was completed on Sat 01/05/2013 at 12:53:38.00

    End of JRT log

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Malwarebytes Anti-Malware (Trial) 1.70.0.1100

    www.malwarebytes.org

    Database version: v2013.01.05.07

    Windows 7 Service Pack 1 x64 NTFS

    Internet Explorer 9.0.8112.16421

    Lisa :: LISA-LAPTOP [administrator]

    Protection: Enabled

    1/5/2013 2:04:39 PM

    mbam-log-2013-01-05 (14-04-39).txt

    Scan type: Quick scan

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

    Scan options disabled: P2P

    Objects scanned: 229322

    Time elapsed: 3 minute(s), 35 second(s)

    Memory Processes Detected: 0

    (No malicious items detected)

    Memory Modules Detected: 0

    (No malicious items detected)

    Registry Keys Detected: 0

    (No malicious items detected)

    Registry Values Detected: 0

    (No malicious items detected)

    Registry Data Items Detected: 0

    (No malicious items detected)

    Folders Detected: 0

    (No malicious items detected)

    Files Detected: 0

    (No malicious items detected)

    (end)

    .

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    .

    DDS (Ver_2012-11-20.01)

    .

    Microsoft Windows 7 Professional

    Boot Device: \Device\HarddiskVolume1

    Install Date: 5/3/2012 11:43:45 AM

    System Uptime: 1/5/2013 1:15:18 PM (1 hours ago)

    .

    Motherboard: LENOVO | | 06222FU

    Processor: AMD E-300 APU with Radeon HD Graphics | Socket FT1 | 780/100mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 281 GiB total, 223.524 GiB free.

    Q: is FIXED (NTFS) - 16 GiB total, 6.543 GiB free.

    .

    ==== Disabled Device Manager Items =============

    .

    Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

    Description: Symantec Iron Driver

    Device ID: ROOT\LEGACY_SYMIRON\0000

    Manufacturer:

    Name: Symantec Iron Driver

    PNP Device ID: ROOT\LEGACY_SYMIRON\0000

    Service: SymIRON

    .

    Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

    Description: BHDrvx64

    Device ID: ROOT\LEGACY_BHDRVX64\0000

    Manufacturer:

    Name: BHDrvx64

    PNP Device ID: ROOT\LEGACY_BHDRVX64\0000

    Service: BHDrvx64

    .

    Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}

    Description: Norton 360 Settings Manager

    Device ID: ROOT\LEGACY_CCSET_N360\0000

    Manufacturer:

    Name: Norton 360 Settings Manager

    PNP Device ID: ROOT\LEGACY_CCSET_N360\0000

    Service: ccSet_N360

    .

    ==== System Restore Points ===================

    .

    RP35: 12/2/2012 10:27:26 AM - Scheduled Checkpoint

    RP36: 12/7/2012 6:33:53 AM - Windows Update

    RP37: 12/24/2012 3:57:16 PM - Windows Update

    RP38: 1/3/2013 8:55:21 AM - Installed STOPzilla. Available with Windows Installer version 1.2 and later.

    RP39: 1/3/2013 9:09:15 AM - StopZILLA! Restore Point.

    RP40: 1/3/2013 4:15:25 PM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.

    RP41: 1/4/2013 2:56:28 PM - Restore Operation

    RP42: 1/4/2013 3:12:43 PM - Windows Update

    RP43: 1/5/2013 9:53:20 AM - Restore Operation

    RP44: 1/5/2013 10:21:35 AM - Windows Update

    .

    ==== Installed Programs ======================

    .

    Adobe AIR

    Adobe Flash Player 11 ActiveX

    Adobe Reader 9.5.2

    AMD APP SDK Runtime

    AMD Catalyst Install Manager

    AMD Media Foundation Decoders

    AMD VISION Engine Control Center

    Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver

    ATI Uninstaller

    Broadcom InConcert Maestro

    Catalyst Control Center - Branding

    Catalyst Control Center Graphics Previews Common

    Catalyst Control Center InstallProxy

    Catalyst Control Center Localization All

    ccc-utility64

    CCC Help Chinese Standard

    CCC Help Chinese Traditional

    CCC Help Czech

    CCC Help Danish

    CCC Help Dutch

    CCC Help English

    CCC Help Finnish

    CCC Help French

    CCC Help German

    CCC Help Greek

    CCC Help Hungarian

    CCC Help Italian

    CCC Help Japanese

    CCC Help Korean

    CCC Help Norwegian

    CCC Help Polish

    CCC Help Portuguese

    CCC Help Russian

    CCC Help Spanish

    CCC Help Swedish

    CCC Help Thai

    CCC Help Turkish

    Cisco EAP-FAST Module

    Cisco LEAP Module

    Cisco PEAP Module

    Conexant HD Audio

    Create Recovery Media

    D3DX10

    Digsby

    Evernote v. 4.2.3

    Flickr Uploadr 3.2.1

    Google Chrome

    Google Earth

    Google Talk Plugin

    Google Toolbar for Internet Explorer

    Google Update Helper

    Integrated Camera

    Junk Mail filter update

    Lenovo Auto Scroll Utility

    Lenovo Patch Utility

    Lenovo Patch Utility 64 bit

    Lenovo Registration

    Lenovo Screen Reading Optimizer

    Lenovo SimpleTap

    Lenovo Solution Center

    Lenovo System Interface Driver

    Lenovo User Guide

    Lenovo Warranty Information

    Lenovo Welcome

    Malwarebytes Anti-Malware version 1.70.0.1100

    Mesh Runtime

    Message Center Plus

    Microsoft .NET Framework 4 Client Profile

    Microsoft .NET Framework 4 Extended

    Microsoft Application Error Reporting

    Microsoft Office 2010

    Microsoft Silverlight

    Microsoft SQL Server 2005 Compact Edition [ENU]

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2005 Redistributable (x64)

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319

    MSVCRT

    MSVCRT_amd64

    Norton 360

    On Screen Display

    RapidBoot

    Realtek PCIE Card Reader

    Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

    Skype™ 5.10

    System Update

    ThinkPad Bluetooth with Enhanced Data Rate Software

    ThinkPad Power Management Driver

    ThinkPad Power Manager

    ThinkPad UltraNav Driver

    ThinkPad Wireless LAN Adapter Software

    ThinkVantage Active Protection System

    ThinkVantage AutoLock

    ThinkVantage Communications Utility

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

    Update for Microsoft .NET Framework 4 Extended (KB2468871)

    Update for Microsoft .NET Framework 4 Extended (KB2533523)

    Update for Microsoft .NET Framework 4 Extended (KB2600217)

    Windows Driver Package - AMD (amdsata) HDC (04/07/2010 1.2.001.197)

    Windows Driver Package - AMD USB (03/30/2010 1.0.0.5)

    Windows Driver Package - Lenovo 1.64.00.00 (07/28/2011 1.64.00.00)

    Windows Driver Package - Synaptics (SynTP) Mouse (05/19/2011 15.3.8.0)

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live ID Sign-in Assistant

    Windows Live Installer

    Windows Live Language Selector

    Windows Live Mail

    Windows Live Mesh

    Windows Live Mesh ActiveX Control for Remote Connections

    Windows Live Messenger

    Windows Live MIME IFilter

    Windows Live Movie Maker

    Windows Live Photo Common

    Windows Live Photo Gallery

    Windows Live PIMT Platform

    Windows Live Remote Client

    Windows Live Remote Client Resources

    Windows Live Remote Service

    Windows Live Remote Service Resources

    Windows Live SOXE

    Windows Live SOXE Definitions

    Windows Live UX Platform

    Windows Live UX Platform Language Pack

    Windows Live Writer

    Windows Live Writer Resources

    .

    ==== Event Viewer Messages From Past Week ========

    .

    1/5/2013 12:59:00 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: BHDrvx64 ccSet_N360 SymIRON

    1/5/2013 1:00:28 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} and APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

    .

    ==== End Of File ===========================

    DDS (Ver_2012-11-20.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16457

    Run by Lisa at 14:16:10 on 2013-01-05

    Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.1639.223 [GMT -5:00]

    .

    AV: Norton 360 *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

    FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

    .

    ============== Running Processes ===============

    .

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\ibmpmsvc.exe

    C:\Windows\system32\svchost.exe -k RPCSS

    C:\Windows\system32\atiesrxx.exe

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe

    C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

    C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe

    C:\Windows\system32\CxAudMsg64.exe

    C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe

    C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe

    C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe

    C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe

    C:\Program Files (x86)\Norton 360\Norton 360\Engine\6.4.0.9\ccSvcHst.exe

    C:\Windows\SysWOW64\SAsrv.exe

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Windows\System32\rundll32.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Windows\SMIKsSTI.exe

    C:\Windows\System32\TpShocks.exe

    C:\Program Files\CONEXANT\ForteConfig\fmapp.exe

    C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe

    C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe

    C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

    C:\Windows\SysWOW64\rundll32.exe

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Windows\system32\atieclxx.exe

    C:\Windows\system32\taskhost.exe

    C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Windows\system32\rundll32.exe

    C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe

    C:\Windows\system32\rundll32.exe

    C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE

    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

    C:\Windows\system32\taskeng.exe

    C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SRORest.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Windows\system32\rundll32.exe

    C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Windows\SysWOW64\RunDll32.exe

    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

    C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Program Files (x86)\Lenovo\System Update\SUService.exe

    C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe

    C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Windows\sysWOW64\wbem\wmiprvse.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Users\Lisa\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Windows\system32\SearchProtocolHost.exe

    C:\Windows\system32\SearchFilterHost.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = about:blank

    uDefault_Search_URL = hxxp://www.google.com/ie

    mStart Page = hxxp://www.google.com

    uSearchAssistant = hxxp://www.google.com/ie

    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\6.4.0.9\coieplg.dll

    BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\6.4.0.9\ips\ipsbho.dll

    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\6.4.0.9\coieplg.dll

    mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    mRun: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor

    mRun: [Lenovo Registration] C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe /boot

    mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    mRunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

    uPolicies-Explorer: NoDrives = dword:0

    mPolicies-Explorer: NoDrives = dword:0

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    IE: Send image to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm

    IE: Send page to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204

    IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm

    TCP: NameServer = 75.75.75.75 75.75.76.76

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E} : DHCPNameServer = 75.75.75.75 75.75.76.76

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\039364851323030363439313 : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\47F6272796E67666F6274613 : DHCPNameServer = 192.168.0.1

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\7556C6C6370234F657E6472797023547F62756 : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\76F6C64656E607F6E646963656C616E646963637 : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\C4962627162797 : DHCPNameServer = 75.75.75.75 75.75.76.76 192.168.1.1

    TCP: Interfaces\{949CB1B1-1BFA-4FEB-8FCE-6A032AA08DAB} : DHCPNameServer = 192.168.1.1

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    SSODL: WebCheck - <orphaned>

    x64-mStart Page = hxxp://start.funmoods.com/?f=1&a=adknlg&chnl=adknlg&cd=2XzuyEtN2Y1L1QzuyCtD0DzztCzy0C0EtAyEyEyBtD0C0AyDtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1651456573

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

    x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

    x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

    x64-Run: [sMI_SSE_V5] C:\Windows\SMIKsSTI.EXE

    x64-Run: [TpShocks] TpShocks.exe

    x64-Run: [smartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t

    x64-Run: [ForteConfig] C:\Program Files\Conexant\ForteConfig\fmapp.exe

    x64-Run: [LENOVO.TPKNRRES] C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe

    x64-Run: [ALCKRESI.EXE] C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE

    x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

    x64-SSODL: WebCheck - <orphaned>

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 SymDS;Symantec Data Store;C:\Windows\System32\drivers\N360x64\0604000.009\symds64.sys [2012-10-19 451192]

    R0 SymEFA;Symantec Extended File Attributes;C:\Windows\System32\drivers\N360x64\0604000.009\symefa64.sys [2012-10-19 1129120]

    R0 TPDIGIMN;TPDIGIMN;C:\Windows\System32\drivers\ApsHM64.sys [2011-1-13 23664]

    R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\IPSDefs\20121130.001\IDSviA64.sys [2012-11-30 513184]

    R1 lenovo.smi;Lenovo System Interface Driver;C:\Windows\System32\drivers\smiifx64.sys [2011-12-13 15472]

    R1 PHCORE;PHCORE;C:\Program Files\Lenovo\RapidBoot\PHCORE64.sys [2011-7-8 32104]

    R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\System32\drivers\N360x64\0604000.009\symnets.sys [2012-10-19 405624]

    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-2-18 204288]

    R2 CxAudMsg;Conexant Audio Message Service;C:\Windows\System32\CxAudMsg64.exe [2012-2-18 198784]

    R2 LENOVO.CAMMUTE;Lenovo Camera Mute;C:\Program Files\Lenovo\Communications Utility\CamMute.exe [2012-2-18 41320]

    R2 LENOVO.MICMUTE;Lenovo Microphone Mute;C:\Program Files\Lenovo\HOTKEY\micmute.exe [2011-12-13 101736]

    R2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction;C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [2012-2-18 59240]

    R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe [2011-12-13 133992]

    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-1-5 398184]

    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-1-5 682344]

    R2 N360;Norton 360;C:\Program Files (x86)\Norton 360\Norton 360\Engine\6.4.0.9\ccsvchst.exe [2012-10-19 138272]

    R2 SAService;Conexant SmartAudio service;C:\Windows\System32\SAsrv.exe --> C:\Windows\System32\SAsrv.exe [?]

    R2 SROSVC;Screen Reading Optimizer Service Program;C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [2012-2-18 446800]

    R2 TPHKLOAD;Lenovo Hotkey Client Loader;C:\Program Files\Lenovo\HOTKEY\tphkload.exe [2011-12-13 145256]

    R2 TPHKSVC;On Screen Display;C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe [2011-12-13 142696]

    R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2012-2-18 116752]

    R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\System32\drivers\L1C62x64.sys [2011-4-7 77936]

    R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-1-5 24176]

    R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;C:\Windows\System32\drivers\rtl8192ce.sys [2012-2-18 947816]

    R3 TVTI2C;Lenovo SM bus driver;C:\Windows\System32\drivers\tvti2c.sys [2010-9-28 41536]

    R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2012-2-18 44672]

    R3 usbsmi;Integrated Camera Service Display Name V1;C:\Windows\System32\drivers\SMIksdrv.sys [2012-2-18 210048]

    S1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.1.5\Definitions\BASHDefs\20121106.001\BHDrvx64.sys [2012-10-23 1384608]

    S1 ccSet_N360;Norton 360 Settings Manager;C:\Windows\System32\drivers\N360x64\0604000.009\ccsetx64.sys [2012-10-19 167072]

    S1 SymIRON;Symantec Iron Driver;C:\Windows\System32\drivers\N360x64\0604000.009\ironx64.sys [2012-10-19 190072]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S2 HyperW7Svc;HyperW7 Service;C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe [2011-7-8 144232]

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]

    S3 BTWAMPFL;BTWAMPFL;C:\Windows\System32\drivers\btwampfl.sys [2012-2-18 436776]

    S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2012-2-18 39976]

    S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2010-11-20 71168]

    S3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-10-26 138912]

    S3 Power Manager DBC Service;Power Manager DBC Service;C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe [2012-2-18 87400]

    S3 PwmEWSvc;Cisco EnergyWise Enabler;C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.exe [2012-2-18 173416]

    S3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\System32\drivers\RtsPStor.sys [2012-2-18 329832]

    S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136]

    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-5-5 1255736]

    S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

    .

    =============== Created Last 30 ================

    .

    2013-01-05 18:01:46 -------- d-----w- C:\Users\Lisa\AppData\Roaming\Malwarebytes

    2013-01-05 18:01:40 -------- d-----w- C:\ProgramData\Malwarebytes

    2013-01-05 18:01:39 24176 ----a-w- C:\Windows\System32\drivers\mbam.sys

    2013-01-05 18:01:39 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2013-01-05 17:27:03 -------- d-----w- C:\Windows\ERUNT

    2013-01-05 17:26:53 -------- d-----w- C:\JRT

    2013-01-05 17:02:24 -------- d-sh--w- C:\$RECYCLE.BIN

    2013-01-05 16:57:06 -------- d-----w- C:\autoruns

    2013-01-05 15:43:37 98816 ----a-w- C:\Windows\sed.exe

    2013-01-05 15:43:37 256000 ----a-w- C:\Windows\PEV.exe

    2013-01-05 15:43:37 208896 ----a-w- C:\Windows\MBR.exe

    2013-01-05 15:14:32 2048 ----a-w- C:\Windows\System32\tzres.dll

    2013-01-05 15:14:07 3149824 ----a-w- C:\Windows\System32\win32k.sys

    2013-01-05 15:10:07 478208 ----a-w- C:\Windows\System32\dpnet.dll

    2013-01-05 15:10:06 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll

    2013-01-04 20:25:51 -------- d-----w- C:\Program Files\Symantec

    2013-01-04 20:14:15 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

    2013-01-04 20:10:45 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

    2013-01-03 22:08:09 -------- d-----w- C:\Users\Lisa\AppData\Local\Programs

    2013-01-03 14:50:02 -------- d-----w- C:\Users\Lisa\AppData\Local\NPE

    2013-01-03 13:50:37 -------- d-----w- C:\Program Files (x86)\Norton Management

    2012-12-29 14:58:28 -------- d-----w- C:\Users\Lisa\AppData\Local\{873F773F-D802-4A30-9305-44718FD037ED}

    2012-12-21 21:42:54 -------- d-----w- C:\Users\Lisa\AppData\Local\{0CB4A9B9-52C6-4322-BFDC-5CE298568872}

    2012-12-21 21:42:53 -------- d-----w- C:\Users\Lisa\AppData\Local\{B7B43704-86C5-44BB-9D05-C48B8967A4E2}

    .

    ==================== Find3M ====================

    .

    2012-12-16 17:11:22 46080 ----a-w- C:\Windows\System32\atmlib.dll

    2012-12-16 14:45:03 367616 ----a-w- C:\Windows\System32\atmfd.dll

    2012-12-16 14:13:28 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll

    2012-12-16 14:13:20 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll

    2012-11-14 06:11:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll

    2012-11-14 06:04:11 1392128 ----a-w- C:\Windows\System32\wininet.dll

    2012-11-14 06:02:49 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

    2012-11-14 05:57:46 599040 ----a-w- C:\Windows\System32\vbscript.dll

    2012-11-14 05:57:35 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

    2012-11-14 05:52:40 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

    2012-11-14 02:09:22 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

    2012-11-14 01:58:15 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

    2012-11-14 01:57:37 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

    2012-11-14 01:49:25 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

    2012-11-14 01:48:27 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

    2012-10-18 22:51:36 175736 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS

    2012-10-16 08:38:37 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

    2012-10-16 08:38:34 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

    2012-10-16 07:39:52 561664 ----a-w- C:\Windows\apppatch\AcLayers.dll

    2012-10-09 18:17:13 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll

    2012-10-09 18:17:13 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll

    2012-10-09 17:40:31 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll

    2012-10-09 17:40:31 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll

    .

    ============= FINISH: 14:17:21.59 ===============

    Still infected

    in Resolved Malware Removal Logs

    Posted

    findgala was what I was being directed to whenever I searched. I ran the malware software and it said it cleaned up 7 issues. I'm still getting "blocked 93.170.104.62" all the time.

    It tells me that my updates are older than 20 days (though I just downloaded yesterday) but when I click to update, I get an error message: An error has occured. Please report this issue to our support team PROGRAM_ERROR_UPDATING (0,0, I/O error)

    DDS (Ver_2012-11-20.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16457

    Run by Lisa at 12:19:26 on 2013-01-04

    Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.1639.289 [GMT -5:00]

    .

    AV: Norton 360 *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

    FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

    .

    ============== Running Processes ===============

    .

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\ibmpmsvc.exe

    C:\Windows\system32\svchost.exe -k RPCSS

    C:\Windows\system32\atiesrxx.exe

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe

    C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

    C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe

    C:\Windows\system32\CxAudMsg64.exe

    C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe

    C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe

    C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe

    C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\ccSvcHst.exe

    C:\Windows\SysWOW64\SAsrv.exe

    C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\ccSvcHst.exe

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\atieclxx.exe

    C:\Windows\system32\taskhost.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe

    C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Windows\system32\rundll32.exe

    C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\ccSvcHst.exe

    C:\Windows\system32\rundll32.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Windows\SMIKsSTI.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Windows\System32\TpShocks.exe

    C:\Program Files\CONEXANT\ForteConfig\fmapp.exe

    C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe

    C:\Windows\system32\taskeng.exe

    C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe

    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SRORest.exe

    C:\Program Files\Windows Sidebar\sidebar.exe

    C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

    C:\Windows\SysWOW64\rundll32.exe

    C:\Windows\system32\rundll32.exe

    C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\Windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Windows\SysWOW64\RunDll32.exe

    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

    C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Program Files (x86)\Lenovo\System Update\SUService.exe

    C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Users\Lisa\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://start.funmoods.com/?f=1&a=adknlg&chnl=adknlg&cd=2XzuyEtN2Y1L1QzuyCtD0DzztCzy0C0EtAyEyEyBtD0C0AyDtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1651456573

    uSearch Bar = hxxp://www.google.com/ie

    uSearch Page = hxxp://www.google.com

    uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP

    uDefault_Search_URL = hxxp://www.google.com/ie

    mStart Page = hxxp://start.funmoods.com/?f=1&a=adknlg&chnl=adknlg&cd=2XzuyEtN2Y1L1QzuyCtD0DzztCzy0C0EtAyEyEyBtD0C0AyDtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1651456573

    uSearchAssistant = hxxp://www.google.com/ie

    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

    mWinlogon: Userinit = c:\windows\syswow64\userinit.exe,

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\CoIEPlg.dll

    BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\IPS\IPSBHO.dll

    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\CoIEPlg.dll

    uRun: [Google Update] "C:\Users\Lisa\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    uRun: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

    mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    mRun: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor

    mRun: [Lenovo Registration] C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe /boot

    mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    IE: Send image to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm

    IE: Send page to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204

    IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm

    TCP: NameServer = 75.75.75.75 75.75.76.76

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E} : DHCPNameServer = 75.75.75.75 75.75.76.76

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\039364851323030363439313 : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\132364850323032393736303 : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\47F6272796E67666F6274613 : DHCPNameServer = 192.168.0.1

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\7556C6C6370234F657E6472797023547F62756 : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\76F6C64656E607F6E646963656C616E646963637 : DHCPNameServer = 192.168.1.1

    TCP: Interfaces\{84139E55-B6AA-41BD-9A58-2C2F30CB437E}\C4962627162797 : DHCPNameServer = 75.75.75.75 75.75.76.76 192.168.1.1

    TCP: Interfaces\{949CB1B1-1BFA-4FEB-8FCE-6A032AA08DAB} : DHCPNameServer = 192.168.1.1

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    SSODL: WebCheck - <orphaned>

    x64-mStart Page = hxxp://start.funmoods.com/?f=1&a=adknlg&chnl=adknlg&cd=2XzuyEtN2Y1L1QzuyCtD0DzztCzy0C0EtAyEyEyBtD0C0AyDtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=1651456573

    x64-mSearchAssistant = hxxp://www.google.com/ie

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

    x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

    x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

    x64-Run: [sMI_SSE_V5] C:\Windows\SMIKsSTI.EXE

    x64-Run: [TpShocks] TpShocks.exe

    x64-Run: [smartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t

    x64-Run: [ForteConfig] C:\Program Files\Conexant\ForteConfig\fmapp.exe

    x64-Run: [LENOVO.TPKNRRES] C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe

    x64-Run: [ALCKRESI.EXE] C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE

    x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

    x64-SSODL: WebCheck - <orphaned>

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 SymDS;Symantec Data Store;C:\Windows\System32\drivers\N360x64\1402000.013\SymDS64.sys [2013-1-3 493216]

    R0 SymEFA;Symantec Extended File Attributes;C:\Windows\System32\drivers\N360x64\1402000.013\SymEFA64.sys [2013-1-3 1133216]

    R0 TPDIGIMN;TPDIGIMN;C:\Windows\System32\drivers\ApsHM64.sys [2011-1-13 23664]

    R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\BASHDefs\20121130.005\BHDrvx64.sys [2012-11-29 1384608]

    R1 ccSet_MCLIENT;Norton Management Settings Manager;C:\Windows\System32\drivers\MCLIENTx64\0302000.013\ccSetx64.sys [2013-1-3 168096]

    R1 ccSet_N360;Norton 360 Settings Manager;C:\Windows\System32\drivers\N360x64\1402000.013\ccSetx64.sys [2013-1-3 168096]

    R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\IPSDefs\20130102.001\IDSviA64.sys [2013-1-2 513184]

    R1 lenovo.smi;Lenovo System Interface Driver;C:\Windows\System32\drivers\smiifx64.sys [2011-12-13 15472]

    R1 PHCORE;PHCORE;C:\Program Files\Lenovo\RapidBoot\PHCORE64.sys [2011-7-8 32104]

    R1 SymIRON;Symantec Iron Driver;C:\Windows\System32\drivers\N360x64\1402000.013\Ironx64.sys [2013-1-3 224416]

    R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\System32\drivers\N360x64\1402000.013\symnets.sys [2013-1-3 432800]

    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-2-18 204288]

    R2 CxAudMsg;Conexant Audio Message Service;C:\Windows\System32\CxAudMsg64.exe [2012-2-18 198784]

    R2 LENOVO.CAMMUTE;Lenovo Camera Mute;C:\Program Files\Lenovo\Communications Utility\CamMute.exe [2012-2-18 41320]

    R2 LENOVO.MICMUTE;Lenovo Microphone Mute;C:\Program Files\Lenovo\HOTKEY\micmute.exe [2011-12-13 101736]

    R2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction;C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [2012-2-18 59240]

    R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe [2011-12-13 133992]

    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-1-3 398184]

    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-1-3 682344]

    R2 MCLIENT;Norton Management;C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\ccSvcHst.exe [2013-1-3 143928]

    R2 SAService;Conexant SmartAudio service;C:\Windows\System32\SAsrv.exe --> C:\Windows\System32\SAsrv.exe [?]

    R2 SROSVC;Screen Reading Optimizer Service Program;C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [2012-2-18 446800]

    R2 TPHKLOAD;Lenovo Hotkey Client Loader;C:\Program Files\Lenovo\HOTKEY\tphkload.exe [2011-12-13 145256]

    R2 TPHKSVC;On Screen Display;C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe [2011-12-13 142696]

    R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2012-2-18 116752]

    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-10-26 138912]

    R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\System32\drivers\L1C62x64.sys [2011-4-7 77936]

    R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-1-3 24176]

    R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;C:\Windows\System32\drivers\rtl8192ce.sys [2012-2-18 947816]

    R3 TVTI2C;Lenovo SM bus driver;C:\Windows\System32\drivers\tvti2c.sys [2010-9-28 41536]

    R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2012-2-18 44672]

    R3 usbsmi;Integrated Camera Service Display Name V1;C:\Windows\System32\drivers\SMIksdrv.sys [2012-2-18 210048]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S2 HyperW7Svc;HyperW7 Service;C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe [2011-7-8 144232]

    S2 N360;Norton 360;C:\Program Files (x86)\Norton 360\Norton 360\Engine\20.2.0.19\ccSvcHst.exe [2013-1-3 143928]

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]

    S3 BTWAMPFL;BTWAMPFL;C:\Windows\System32\drivers\btwampfl.sys [2012-2-18 436776]

    S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2012-2-18 39976]

    S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2010-11-20 71168]

    S3 Power Manager DBC Service;Power Manager DBC Service;C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe [2012-2-18 87400]

    S3 PwmEWSvc;Cisco EnergyWise Enabler;C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.exe [2012-2-18 173416]

    S3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\System32\drivers\RtsPStor.sys [2012-2-18 329832]

    S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136]

    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-5-5 1255736]

    S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

    .

    =============== Created Last 30 ================

    .

    2013-01-03 22:08:48 -------- d-----w- C:\Users\Lisa\AppData\Roaming\Malwarebytes

    2013-01-03 22:08:34 -------- d-----w- C:\ProgramData\Malwarebytes

    2013-01-03 22:08:32 24176 ----a-w- C:\Windows\System32\drivers\mbam.sys

    2013-01-03 22:08:32 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2013-01-03 22:08:09 -------- d-----w- C:\Users\Lisa\AppData\Local\Programs

    2013-01-03 14:50:02 -------- d-----w- C:\Users\Lisa\AppData\Local\NPE

    2013-01-03 13:50:44 168096 ----a-r- C:\Windows\System32\drivers\MCLIENTx64\0302000.013\ccSetx64.sys

    2013-01-03 13:50:38 -------- d-----w- C:\Windows\System32\drivers\MCLIENTx64\0302000.013

    2013-01-03 13:50:38 -------- d-----w- C:\Windows\System32\drivers\MCLIENTx64

    2013-01-03 13:50:37 -------- d-----w- C:\Program Files (x86)\Norton Management

    2013-01-03 13:36:46 776864 ----a-r- C:\Windows\System32\drivers\N360x64\1402000.013\srtsp64.sys

    2013-01-03 13:36:46 493216 ----a-r- C:\Windows\System32\drivers\N360x64\1402000.013\SymDS64.sys

    2013-01-03 13:36:46 432800 ----a-r- C:\Windows\System32\drivers\N360x64\1402000.013\symnets.sys

    2013-01-03 13:36:46 37496 ----a-r- C:\Windows\System32\drivers\N360x64\1402000.013\srtspx64.sys

    2013-01-03 13:36:46 23448 ----a-r- C:\Windows\System32\drivers\N360x64\1402000.013\SymELAM.sys

    2013-01-03 13:36:46 1133216 ----a-r- C:\Windows\System32\drivers\N360x64\1402000.013\SymEFA64.sys

    2013-01-03 13:36:45 224416 ----a-r- C:\Windows\System32\drivers\N360x64\1402000.013\Ironx64.sys

    2013-01-03 13:36:45 168096 ----a-r- C:\Windows\System32\drivers\N360x64\1402000.013\ccSetx64.sys

    2013-01-03 13:36:22 -------- d-----w- C:\Windows\System32\drivers\N360x64\1402000.013

    2012-12-29 14:58:28 -------- d-----w- C:\Users\Lisa\AppData\Local\{873F773F-D802-4A30-9305-44718FD037ED}

    2012-12-24 20:58:43 46080 ----a-w- C:\Windows\System32\atmlib.dll

    2012-12-24 20:58:43 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll

    2012-12-24 20:58:41 367616 ----a-w- C:\Windows\System32\atmfd.dll

    2012-12-24 20:58:41 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll

    2012-12-21 21:42:54 -------- d-----w- C:\Users\Lisa\AppData\Local\{0CB4A9B9-52C6-4322-BFDC-5CE298568872}

    2012-12-21 21:42:53 -------- d-----w- C:\Users\Lisa\AppData\Local\{B7B43704-86C5-44BB-9D05-C48B8967A4E2}

    2012-12-12 17:45:41 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

    2012-12-12 17:45:41 2048 ----a-w- C:\Windows\System32\tzres.dll

    2012-12-12 17:45:07 3149824 ----a-w- C:\Windows\System32\win32k.sys

    2012-12-12 17:43:45 478208 ----a-w- C:\Windows\System32\dpnet.dll

    2012-12-12 17:43:45 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll

    .

    ==================== Find3M ====================

    .

    2013-01-03 13:37:32 177312 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS

    2012-11-14 06:11:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll

    2012-11-14 06:04:11 1392128 ----a-w- C:\Windows\System32\wininet.dll

    2012-11-14 06:02:49 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

    2012-11-14 05:57:46 599040 ----a-w- C:\Windows\System32\vbscript.dll

    2012-11-14 05:57:35 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

    2012-11-14 05:52:40 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

    2012-11-14 02:09:22 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

    2012-11-14 01:58:15 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

    2012-11-14 01:57:37 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

    2012-11-14 01:49:25 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

    2012-11-14 01:48:27 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

    2012-11-14 01:44:42 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

    2012-10-16 08:38:37 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

    2012-10-16 08:38:34 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

    2012-10-16 07:39:52 561664 ----a-w- C:\Windows\apppatch\AcLayers.dll

    2012-10-09 18:17:13 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll

    2012-10-09 18:17:13 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll

    2012-10-09 17:40:31 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll

    2012-10-09 17:40:31 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll

    .

    ============= FINISH: 12:21:02.14 ===============

    .

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    .

    DDS (Ver_2012-11-20.01)

    .

    Microsoft Windows 7 Professional

    Boot Device: \Device\HarddiskVolume1

    Install Date: 5/3/2012 11:43:45 AM

    System Uptime: 1/4/2013 7:01:03 AM (5 hours ago)

    .

    Motherboard: LENOVO | | 06222FU

    Processor: AMD E-300 APU with Radeon HD Graphics | Socket FT1 | 1300/100mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 281 GiB total, 222.088 GiB free.

    Q: is FIXED (NTFS) - 16 GiB total, 6.543 GiB free.

    .

    ==== Disabled Device Manager Items =============

    .

    ==== System Restore Points ===================

    .

    RP33: 11/2/2012 8:24:25 PM - Scheduled Checkpoint

    RP34: 11/16/2012 8:12:36 AM - Windows Update

    RP35: 12/2/2012 10:27:26 AM - Scheduled Checkpoint

    RP36: 12/7/2012 6:33:53 AM - Windows Update

    RP37: 12/24/2012 3:57:16 PM - Windows Update

    RP38: 1/3/2013 8:55:21 AM - Installed STOPzilla. Available with Windows Installer version 1.2 and later.

    RP39: 1/3/2013 9:09:15 AM - StopZILLA! Restore Point.

    RP40: 1/3/2013 4:15:25 PM - Removed STOPzilla. Available with Windows Installer version 1.2 and later.

    .

    ==== Installed Programs ======================

    .

    Adobe AIR

    Adobe Flash Player 11 ActiveX

    Adobe Reader 9.5.2

    AMD APP SDK Runtime

    AMD Catalyst Install Manager

    AMD Media Foundation Decoders

    AMD VISION Engine Control Center

    Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver

    ATI Uninstaller

    Broadcom InConcert Maestro

    Catalyst Control Center - Branding

    Catalyst Control Center Graphics Previews Common

    Catalyst Control Center InstallProxy

    Catalyst Control Center Localization All

    ccc-utility64

    CCC Help Chinese Standard

    CCC Help Chinese Traditional

    CCC Help Czech

    CCC Help Danish

    CCC Help Dutch

    CCC Help English

    CCC Help Finnish

    CCC Help French

    CCC Help German

    CCC Help Greek

    CCC Help Hungarian

    CCC Help Italian

    CCC Help Japanese

    CCC Help Korean

    CCC Help Norwegian

    CCC Help Polish

    CCC Help Portuguese

    CCC Help Russian

    CCC Help Spanish

    CCC Help Swedish

    CCC Help Thai

    CCC Help Turkish

    Cisco EAP-FAST Module

    Cisco LEAP Module

    Cisco PEAP Module

    Conexant HD Audio

    Create Recovery Media

    D3DX10

    Evernote v. 4.2.3

    Flickr Uploadr 3.2.1

    Google Chrome

    Google Earth

    Google Talk Plugin

    Google Toolbar for Internet Explorer

    Google Update Helper

    Integrated Camera

    Junk Mail filter update

    Lenovo Auto Scroll Utility

    Lenovo Patch Utility

    Lenovo Patch Utility 64 bit

    Lenovo Registration

    Lenovo Screen Reading Optimizer

    Lenovo SimpleTap

    Lenovo Solution Center

    Lenovo System Interface Driver

    Lenovo User Guide

    Lenovo Warranty Information

    Lenovo Welcome

    Malwarebytes Anti-Malware version 1.70.0.1100

    Mesh Runtime

    Message Center Plus

    Microsoft .NET Framework 4 Client Profile

    Microsoft .NET Framework 4 Extended

    Microsoft Application Error Reporting

    Microsoft Office 2010

    Microsoft Silverlight

    Microsoft SQL Server 2005 Compact Edition [ENU]

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2005 Redistributable (x64)

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319

    MSVCRT

    MSVCRT_amd64

    Norton 360

    Norton Management

    On Screen Display

    RapidBoot

    Realtek PCIE Card Reader

    Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

    Skype™ 5.10

    System Update

    ThinkPad Bluetooth with Enhanced Data Rate Software

    ThinkPad Power Management Driver

    ThinkPad Power Manager

    ThinkPad UltraNav Driver

    ThinkPad Wireless LAN Adapter Software

    ThinkVantage Active Protection System

    ThinkVantage AutoLock

    ThinkVantage Communications Utility

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

    Update for Microsoft .NET Framework 4 Extended (KB2468871)

    Update for Microsoft .NET Framework 4 Extended (KB2533523)

    Update for Microsoft .NET Framework 4 Extended (KB2600217)

    Windows Driver Package - AMD (amdsata) HDC (04/07/2010 1.2.001.197)

    Windows Driver Package - AMD USB (03/30/2010 1.0.0.5)

    Windows Driver Package - Lenovo 1.64.00.00 (07/28/2011 1.64.00.00)

    Windows Driver Package - Synaptics (SynTP) Mouse (05/19/2011 15.3.8.0)

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live ID Sign-in Assistant

    Windows Live Installer

    Windows Live Language Selector

    Windows Live Mail

    Windows Live Mesh

    Windows Live Mesh ActiveX Control for Remote Connections

    Windows Live Messenger

    Windows Live MIME IFilter

    Windows Live Movie Maker

    Windows Live Photo Common

    Windows Live Photo Gallery

    Windows Live PIMT Platform

    Windows Live Remote Client

    Windows Live Remote Client Resources

    Windows Live Remote Service

    Windows Live Remote Service Resources

    Windows Live SOXE

    Windows Live SOXE Definitions

    Windows Live UX Platform

    Windows Live UX Platform Language Pack

    Windows Live Writer

    Windows Live Writer Resources

    .

    ==== Event Viewer Messages From Past Week ========

    .

    12/31/2012 2:35:34 PM, Error: NetBT [4321] - The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.0.0.4. The computer with the IP address 10.0.0.2 did not allow the name to be claimed by this computer.

    12/30/2012 4:22:40 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.

    12/29/2012 6:40:57 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

    12/28/2012 6:27:43 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service.

    1/3/2013 9:15:31 AM, Error: Service Control Manager [7022] - The Windows Update service hung on starting.

    1/3/2013 8:54:39 AM, Error: Service Control Manager [7034] - The Conexant SmartAudio service service terminated unexpectedly. It has done this 1 time(s).

    1/3/2013 8:46:29 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the eventlog service.

    1/3/2013 5:18:23 PM, Error: Microsoft-Windows-DistributedCOM [10016] - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} and APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

    1/3/2013 5:16:33 PM, Error: Service Control Manager [7000] - The sbapifs service failed to start due to the following error: The system cannot find the file specified.

    1/1/2013 7:19:21 AM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the IPBusEnum service.

    .

    ==== End Of File ===========================

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.