Jump to content

tstross

Members
 View Profile  See their activity

  • Posts

    1

  • Joined

  • Last visited

 Content Type 

Posts posted by tstross

    feed.helperbar.com

    in Resolved Malware Removal Logs

    Posted

    Here's the DDS file:

    DDS (Ver_2012-11-20.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16457

    Run by XX at 22:35:50 on 2013-01-12

    .

    ============== Running Processes ================

    .

    c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    C:\Program Files (x86)\Launch Manager\dsiwmis.exe

    C:\Program Files (x86)\Launch Manager\LMutilps32.exe

    C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

    C:\Windows\SysWOW64\irstrtsv.exe

    C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe

    C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

    C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe

    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\Program Files (x86)\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe

    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

    C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe

    C:\Users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe

    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

    C:\Program Files (x86)\Launch Manager\LManager.exe

    C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe

    C:\Program Files (x86)\Launch Manager\LMworker.exe

    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

    C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe

    C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    C:\Windows\SysWOW64\rundll32.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    c:\PROGRA~2\mcafee\SITEAD~1\saui.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\XX\AppData\Local\Google\Chrome\Application\chrome.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://www.google.com

    uSearch Page = hxxp://www.google.com

    uDefault_Page_URL = hxxp://www.google.com

    uDefault_Search_URL = hxxp://www.google.com

    mStart Page = hxxp://www.google.com

    mSearch Page = hxxp://www.google.com

    mDefault_Page_URL = hxxp://www.google.com

    mDefault_Search_URL = hxxp://www.google.com

    uSearchAssistant = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=IL&userid=423fc330-ae85-4feb-b9b6-8cea3a6640a6&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}

    uSearchURL,(Default) = hxxp://www.google.com

    uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    mWinlogon: Userinit = userinit.exe

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll

    BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

    BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -

    BHO: CIESpeechBHO Class: {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

    TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    uRun: [Google Update] "C:\Users\XX\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe

    uRun: [spybot-S&D Cleaning] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean

    mRun: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    mRun: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k

    mRun: [OOTag] C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe

    mRun: [Dolby Home Theater v4] "C:\Dolby PCEE4\pcee4.exe" -autostart

    mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

    mRun: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe"

    mRun: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

    mRun: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices

    mRun: [sDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"

    mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey

    mRunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

    dRunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid}

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000

    IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    IE: {7815BE26-237D-41A8-A98F-F7BD75F71086} - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204

    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll

    TCP: NameServer = 192.168.2.1

    TCP: Interfaces\{1F05C4BB-26D6-42B1-B3FE-30259B2590E5} : DHCPNameServer = 192.168.2.1

    TCP: Interfaces\{1F05C4BB-26D6-42B1-B3FE-30259B2590E5}\14963786755626 : DHCPNameServer = 192.168.1.13 192.168.1.14

    TCP: Interfaces\{1F05C4BB-26D6-42B1-B3FE-30259B2590E5}\2576275656E6 : DHCPNameServer = 192.168.0.1

    TCP: Interfaces\{1F05C4BB-26D6-42B1-B3FE-30259B2590E5}\4656661657C647 : DHCPNameServer = 192.168.2.1

    TCP: Interfaces\{1F05C4BB-26D6-42B1-B3FE-30259B2590E5}\E456D6563786 : DHCPNameServer = 208.91.112.53 208.91.112.52

    TCP: Interfaces\{1F05C4BB-26D6-42B1-B3FE-30259B2590E5}\E456D6563786D213 : DHCPNameServer = 192.168.5.2

    Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll

    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    Notify: SDWinLogon - SDWinLogon.dll

    SSODL: WebCheck - <orphaned>

    SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

    x64-BHO: Linkury SmartbarEngine: {31ad400d-1b06-4e33-a59a-90c2c140cba0} -

    x64-BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

    x64-BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} -

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-BHO: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

    x64-TB: Linkury Smartbar: {ae07101b-46d4-4a98-af68-0333ea26e113} -

    x64-TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-Run: [igfxTray] C:\Windows\System32\igfxtray.exe

    x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe

    x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe

    x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

    x64-Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4

    x64-Run: [AtherosBtStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

    x64-Run: [AthBtTray] "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"

    x64-Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe

    x64-Run: [Power Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe

    x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll

    x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    x64-Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

    x64-Notify: igfxcui - igfxdev.dll

    x64-SSODL: WebCheck - <orphaned>

    x64-SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

    .

    ============= SERVICES / DRIVERS ===============

    .

    R? 0029171358021163mcinstcleanup;McAfee Application Installer Cleanup (0029171358021163)

    R? AthBTPort;Atheros Virtual Bluetooth Class

    R? BTATH_A2DP;Bluetooth A2DP Audio Driver

    R? btath_avdt;Atheros Bluetooth AVDT Service

    R? BTATH_HCRP;Bluetooth HCRP Server driver

    R? BTATH_LWFLT;Bluetooth LWFLT Device

    R? BTATH_RCP;Bluetooth AVRCP Device

    R? BtFilter;BtFilter

    R? clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86

    R? clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64

    R? EgisTec Ticket Service;EgisTec Ticket Service

    R? Freemake Improver;Freemake Improver

    R? GamesAppService;GamesAppService

    R? HipShieldK;McAfee Inc. HipShieldK

    R? mferkdet;McAfee Inc. mferkdet

    R? SkypeUpdate;Skype Updater

    R? TsUsbFlt;TsUsbFlt

    R? TsUsbGD;Remote Desktop Generic USB Device

    R? WatAdminSvc;Windows Activation Technologies Service

    R? wlcrasvc;Windows Live Mesh remote connections service

    S? AtherosSvc;AtherosSvc

    S? BTATH_BUS;Atheros Bluetooth Bus

    S? cfwids;McAfee Inc. cfwids

    S? DsiWMIService;Dritek WMI Service

    S? ePowerSvc;ePower Service

    S? ETD;ELAN PS/2 Port Input Device

    S? FFSOpzSvc;Sleep memory optimizer

    S? GREGService;GREGService

    S? IntcDAud;Intel® Display Audio

    S? irstrtdv;Intel® Rapid Start Technology Driver

    S? irstrtsv;Intel® Rapid Start Technology Service

    S? jhi_service;Intel® Identity Protection Technology Host Interface Service

    S? Live Updater Service;Live Updater Service

    S? MBAMProtector;MBAMProtector

    S? MBAMScheduler;MBAMScheduler

    S? MBAMService;MBAMService

    S? McAfee SiteAdvisor Service;McAfee SiteAdvisor Service

    S? McMPFSvc;McAfee Personal Firewall Service

    S? McNaiAnn;McAfee VirusScan Announcer

    S? McProxy;McAfee Proxy Service

    S? McShield;McAfee McShield

    S? mfeavfk;McAfee Inc. mfeavfk

    S? mfefire;McAfee Firewall Core Service

    S? mfefirek;McAfee Inc. mfefirek

    S? mfehidk;McAfee Inc. mfehidk

    S? mfevtp;McAfee Validation Trust Protection Service

    S? mfewfpk;McAfee Inc. mfewfpk

    S? mwlPSDFilter;mwlPSDFilter

    S? mwlPSDNServ;mwlPSDNServ

    S? mwlPSDVDisk;mwlPSDVDisk

    S? NOBU;Norton Online Backup

    S? NTI IScheduleSvc;NTI IScheduleSvc

    S? RS_Service;Raw Socket Service

    S? RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader

    S? SDScannerService;Spybot-S&D 2 Scanner Service

    S? SDUpdateService;Spybot-S&D 2 Updating Service

    S? SDWSCService;Spybot-S&D 2 Security Center Service

    S? Skype C2C Service;Skype C2C Service

    S? UNS;Intel® Management and Security Application User Notification Service

    S? ZAtheros Wlan Agent;ZAtheros Wlan Agent

    .

    =============== Created Last 30 ================

    .

    2013-01-12 20:12:51 -------- d-----w- C:\Users\XX\AppData\Roaming\Malwarebytes

    2013-01-12 20:12:41 -------- d-----w- C:\ProgramData\Malwarebytes

    2013-01-12 20:12:39 24176 ----a-w- C:\Windows\System32\drivers\mbam.sys

    2013-01-12 20:12:39 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

    2013-01-12 20:06:09 196440 ----a-w- C:\Windows\System32\drivers\HipShieldK.sys

    2013-01-12 20:05:58 -------- d-----w- C:\Program Files (x86)\McAfee.com

    2013-01-12 20:05:40 -------- d-----w- C:\Program Files\McAfee.com

    2013-01-12 20:05:40 -------- d-----w- C:\Program Files\McAfee

    2013-01-12 20:05:38 -------- d-----w- C:\Program Files (x86)\McAfee

    2013-01-12 20:01:07 -------- d-----w- C:\Users\XX\AppData\Roaming\GlarySoft

    2013-01-12 20:01:07 -------- d-----w- C:\Program Files (x86)\Glary Utilities

    2013-01-12 19:51:10 177680 ----a-w- C:\Windows\System32\mfevtps.exe

    2013-01-12 19:33:48 10288 ----a-w- C:\Windows\System32\drivers\mfeclnk.sys

    2013-01-12 19:33:45 69672 ----a-w- C:\Windows\System32\drivers\cfwids.sys

    2013-01-12 19:33:45 515528 ----a-w- C:\Windows\System32\drivers\mfefirek.sys

    2013-01-12 19:33:45 309400 ----a-w- C:\Windows\System32\drivers\mfeavfk.sys

    2013-01-12 19:33:45 106112 ----a-w- C:\Windows\System32\drivers\mferkdet.sys

    2013-01-12 18:43:00 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy

    2013-01-12 18:42:53 17272 ----a-w- C:\Windows\System32\sdnclean64.exe

    2013-01-12 18:42:49 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy 2

    2013-01-12 18:42:31 -------- d-----w- C:\Users\XX\AppData\Local\Programs

    2013-01-09 19:44:28 424448 ----a-w- C:\Windows\System32\KernelBase.dll

    2013-01-09 19:43:51 68608 ----a-w- C:\Windows\System32\taskhost.exe

    2013-01-02 20:47:15 737072 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll

    2013-01-02 20:46:55 2876528 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll

    2013-01-02 20:46:37 42776 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll

    2013-01-02 20:46:27 539984 ----a-w- C:\ProgramData\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

    2012-12-30 09:51:11 -------- d-----w- C:\Users\XX\AppData\Local\{9C54DB89-3740-4863-BB6D-93AF8BF999A8}

    2012-12-30 09:51:11 -------- d-----w- C:\Users\XX\AppData\Local\{23F703DD-7A59-4B46-80C9-0EC4B2C369A4}

    2012-12-22 18:20:39 46080 ----a-w- C:\Windows\System32\atmlib.dll

    2012-12-22 18:20:39 367616 ----a-w- C:\Windows\System32\atmfd.dll

    2012-12-22 18:20:39 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll

    2012-12-22 18:20:38 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll

    2012-12-19 18:40:48 -------- d-----w- C:\Users\XX\AppData\Local\Cyberlink

    2012-12-19 18:40:40 -------- d-----w- C:\Users\XX\AppData\Roaming\PowerCinema

    .

    ==================== Find3M ====================

    .

    2012-12-07 13:20:16 441856 ----a-w- C:\Windows\System32\Wpc.dll

    2012-12-07 13:15:31 2746368 ----a-w- C:\Windows\System32\gameux.dll

    2012-12-07 12:26:17 308736 ----a-w- C:\Windows\SysWow64\Wpc.dll

    2012-12-07 12:20:43 2576384 ----a-w- C:\Windows\SysWow64\gameux.dll

    2012-12-07 11:20:04 30720 ----a-w- C:\Windows\System32\usk.rs

    2012-12-07 11:20:03 43520 ----a-w- C:\Windows\System32\csrr.rs

    2012-12-07 11:20:03 23552 ----a-w- C:\Windows\System32\oflc.rs

    2012-12-07 11:20:01 45568 ----a-w- C:\Windows\System32\oflc-nz.rs

    2012-12-07 11:20:01 44544 ----a-w- C:\Windows\System32\pegibbfc.rs

    2012-12-07 11:20:01 20480 ----a-w- C:\Windows\System32\pegi-fi.rs

    2012-12-07 11:20:00 20480 ----a-w- C:\Windows\System32\pegi-pt.rs

    2012-12-07 11:19:59 20480 ----a-w- C:\Windows\System32\pegi.rs

    2012-12-07 11:19:58 46592 ----a-w- C:\Windows\System32\fpb.rs

    2012-12-07 11:19:57 40960 ----a-w- C:\Windows\System32\cob-au.rs

    2012-12-07 11:19:57 21504 ----a-w- C:\Windows\System32\grb.rs

    2012-12-07 11:19:57 15360 ----a-w- C:\Windows\System32\djctq.rs

    2012-12-07 11:19:56 55296 ----a-w- C:\Windows\System32\cero.rs

    2012-12-07 11:19:55 51712 ----a-w- C:\Windows\System32\esrb.rs

    2012-11-30 05:45:35 362496 ----a-w- C:\Windows\System32\wow64win.dll

    2012-11-30 05:45:35 243200 ----a-w- C:\Windows\System32\wow64.dll

    2012-11-30 05:45:35 13312 ----a-w- C:\Windows\System32\wow64cpu.dll

    2012-11-30 05:45:14 215040 ----a-w- C:\Windows\System32\winsrv.dll

    2012-11-30 05:43:12 16384 ----a-w- C:\Windows\System32\ntvdm64.dll

    2012-11-30 04:54:00 5120 ----a-w- C:\Windows\SysWow64\wow32.dll

    2012-11-30 04:53:59 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll

    2012-11-30 03:23:48 338432 ----a-w- C:\Windows\System32\conhost.exe

    2012-11-30 02:44:06 25600 ----a-w- C:\Windows\SysWow64\setup16.exe

    2012-11-30 02:44:04 7680 ----a-w- C:\Windows\SysWow64\instnm.exe

    2012-11-30 02:44:04 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll

    2012-11-30 02:44:03 2048 ----a-w- C:\Windows\SysWow64\user.exe

    2012-11-30 02:38:59 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

    2012-11-30 02:38:59 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

    2012-11-30 02:38:59 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

    2012-11-30 02:38:59 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

    2012-11-23 03:26:31 3149824 ----a-w- C:\Windows\System32\win32k.sys

    2012-11-22 05:44:23 800768 ----a-w- C:\Windows\System32\usp10.dll

    2012-11-22 04:45:03 626688 ----a-w- C:\Windows\SysWow64\usp10.dll

    2012-11-20 05:48:49 307200 ----a-w- C:\Windows\System32\ncrypt.dll

    2012-11-20 04:51:09 220160 ----a-w- C:\Windows\SysWow64\ncrypt.dll

    2012-11-14 06:11:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll

    2012-11-14 06:04:11 1392128 ----a-w- C:\Windows\System32\wininet.dll

    2012-11-14 06:02:49 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

    2012-11-14 05:57:46 599040 ----a-w- C:\Windows\System32\vbscript.dll

    2012-11-14 05:57:35 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

    2012-11-14 05:52:40 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

    2012-11-14 02:09:22 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

    2012-11-14 01:58:15 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

    2012-11-14 01:57:37 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

    2012-11-14 01:49:25 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

    2012-11-14 01:48:27 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

    2012-11-14 01:44:42 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

    2012-11-09 05:45:32 750592 ----a-w- C:\Windows\System32\win32spl.dll

    2012-11-09 05:45:09 2048 ----a-w- C:\Windows\System32\tzres.dll

    2012-11-09 04:43:04 492032 ----a-w- C:\Windows\SysWow64\win32spl.dll

    2012-11-09 04:42:49 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

    2012-11-09 04:37:42 339776 ----a-w- C:\Windows\System32\drivers\mfewfpk.sys

    2012-11-09 04:37:30 177680 ----a-w- C:\Windows\System32\mfevtps.exe.dec7.deleteme

    2012-11-09 04:35:50 771096 ----a-w- C:\Windows\System32\drivers\mfehidk.sys

    2012-11-09 04:33:58 178840 ----a-w- C:\Windows\System32\drivers\mfeapfk.sys

    2012-11-02 05:59:11 478208 ----a-w- C:\Windows\System32\dpnet.dll

    2012-11-02 05:11:31 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll

    2012-11-01 05:43:42 2002432 ----a-w- C:\Windows\System32\msxml6.dll

    2012-11-01 05:43:42 1882624 ----a-w- C:\Windows\System32\msxml3.dll

    2012-11-01 04:47:54 1389568 ----a-w- C:\Windows\SysWow64\msxml6.dll

    2012-11-01 04:47:54 1236992 ----a-w- C:\Windows\SysWow64\msxml3.dll

    2012-10-16 08:38:37 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

    2012-10-16 08:38:34 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

    2012-10-16 07:39:52 561664 ----a-w- C:\Windows\apppatch\AcLayers.dll

    .

    ============= FINISH: 22:36:14.88 ===============

    attach.txt

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.