Jump to content

MissMintyGreen

Members
  • Posts

    3
  • Joined

  • Last visited

Posts posted by MissMintyGreen

  1. Sorry about that. I should have read into the forum's policies more thoroughly.

    Malwarebytes Anti-Malware 1.70.0.1100

    www.malwarebytes.org

    Database version: v2013.01.17.01

    Windows 7 Service Pack 1 x64 NTFS

    Internet Explorer 8.0.7601.17514

    The Kellers_2 :: THEKELLERS-PC [administrator]

    1/16/2013 11:02:54 PM

    mbam-log-2013-01-16 (23-02-54).txt

    Scan type: Quick scan

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

    Scan options disabled: P2P

    Objects scanned: 266897

    Time elapsed: 2 minute(s), 59 second(s)

    Memory Processes Detected: 0

    (No malicious items detected)

    Memory Modules Detected: 0

    (No malicious items detected)

    Registry Keys Detected: 1

    HKCU\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> Quarantined and deleted successfully.

    Registry Values Detected: 0

    (No malicious items detected)

    Registry Data Items Detected: 0

    (No malicious items detected)

    Folders Detected: 0

    (No malicious items detected)

    Files Detected: 1

    C:\Users\The Kellers_2\AppData\Roaming\QHTZ73U5NE.exe (Backdoor.Messa) -> Quarantined and deleted successfully.

    (end)

  2. DDS (Ver_2012-11-20.01) - NTFS_AMD64

    Internet Explorer: 8.0.7601.17514

    Run by The Kellers_2 at 19:23:48 on 2013-01-16

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3071.961 [GMT -5:00]

    .

    AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}

    SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    ============== Running Processes ===============

    .

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\svchost.exe -k RPCSS

    c:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\Windows\system32\atiesrxx.exe

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

    C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Program Files\Dell\DellDock\DockLogin.exe

    C:\Program Files\Tablet\Pen\Pen_TouchService.exe

    C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe

    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    C:\Windows\SysWOW64\svchost.exe -k Akamai

    C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe

    C:\Windows\SysWOW64\PSIService.exe

    C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

    C:\Program Files\Tablet\Pen\Pen_Tablet.exe

    C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    c:\Program Files\Microsoft Security Client\NisSrv.exe

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Program Files (x86)\Browny02\BrYNSvc.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Windows\system32\atieclxx.exe

    C:\Windows\system32\taskhost.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe

    C:\Program Files\Tablet\Pen\Pen_TabletUser.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

    C:\Program Files\Tablet\Pen\Pen_TouchUser.exe

    C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe

    C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

    C:\Program Files\Tablet\Pen\Pen_Tablet.exe

    C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe

    C:\Program Files (x86)\Malwarebytes\mbam.exe

    C:\Users\The Kellers_2\AppData\Roaming\Spotify\spotify.exe

    C:\Users\The Kellers_2\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

    C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

    C:\Users\The Kellers_2\Local Settings\Apps\F.lux\flux.exe

    C:\Program Files\Dell\DellDock\DellDock.exe

    C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe

    C:\Windows\SysWOW64\rundll32.exe

    C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe

    C:\Program Files (x86)\Bamboo Dock\BambooCore.exe

    C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe

    C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe

    C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe

    C:\Program Files (x86)\iTunes\iTunesHelper.exe

    C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe

    C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe

    C:\Users\The Kellers_2\AppData\Roaming\SoundMAX\Smapp\nsCfg.exe

    C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe

    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe

    C:\Windows\servicing\TrustedInstaller.exe

    c:\Program Files\Microsoft Security Client\MpCmdRun.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    mStart Page = hxxp://www.yahoo.com

    mDefault_Page_URL = hxxp://www.yahoo.com

    mWinlogon: Userinit = userinit.exe,

    BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - <orphaned>

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: PlusIEEventHelper Class: {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Viewer Plus\bin\PlusIEContextMenu.dll

    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Skype Plug-In: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    uRun: [spybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

    uRun: [AdobeBridge] <no file>

    mRun: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r

    mRun: [sPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry

    mRun: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m

    mRun: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter

    mRun: [bambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe

    mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

    mRun: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

    mRun: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide

    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

    mRun: [indexSearch] "C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe"

    mRun: [PaperPort PTD] "C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe"

    mRun: [PPort12reminder] "C:\Program Files (x86)\Nuance\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\12\Config\Ereg\Ereg.ini"

    mRun: [PDFHook] C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe

    mRun: [PDF5 Registry Controller] C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe

    mRun: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun

    mRun: [brStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN

    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

    StartupFolder: C:\Users\THEKEL~2\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\DELLDO~1.LNK - C:\Program Files\Dell\DellDock\DellDock.exe

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll

    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

    .

    INFO: HKCU has more than 50 listed domains.

    If you wish to scan all of them, select the 'Force scan all domains' option.

    .

    .

    INFO: HKLM has more than 50 listed domains.

    If you wish to scan all of them, select the 'Force scan all domains' option.

    .

    TCP: NameServer = 192.168.0.1 71.2.28.14

    TCP: Interfaces\{E638F1F5-DBEE-462F-A94D-FAE6D11279E0} : DHCPNameServer = 192.168.0.1 71.2.28.14

    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    SSODL: WebCheck - <orphaned>

    x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    x64-Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    x64-Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre7\bin\jusched.exe"

    .

    INFO: x64-HKLM has more than 50 listed domains.

    If you wish to scan all of them, select the 'Force scan all domains' option.

    .

    x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab

    x64-DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab

    x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab

    x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - <orphaned>

    x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

    x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

    x64-Notify: GoToAssist - C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll

    x64-SSODL: WebCheck - <orphaned>

    Hosts: 127.0.0.1 www.spywareinfo.com

    .

    ================= FIREFOX ===================

    .

    FF - ProfilePath - C:\Users\The Kellers_2\AppData\Roaming\Mozilla\Firefox\Profiles\t22somzo.default\

    FF - prefs.js: browser.search.selectedEngine - Wikipedia (en)

    FF - prefs.js: browser.startup.homepage - yahoo.com

    FF - prefs.js: keyword.URL - hxxps://www.google.com/search?q=

    FF - component: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll

    FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

    FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll

    FF - plugin: C:\Program Files (x86)\TabletPlugins\npwacom.dll

    FF - plugin: C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll

    FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

    FF - plugin: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll

    FF - plugin: C:\Users\The Kellers_2\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

    FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll

    FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll

    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll

    FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll

    FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2012-8-30 228768]

    R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2009-12-12 55856]

    R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe -k Akamai [2009-7-13 27136]

    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2011-4-19 203776]

    R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-8-6 361984]

    R2 AODDriver4.1;AODDriver4.1;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2012-3-5 53888]

    R2 DockLoginService;Dock Login Service;C:\Program Files\Dell\DellDock\DockLogin.exe [2009-6-9 155648]

    R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2012-3-20 128456]

    R2 PDFProFiltSrvPP;PDFProFiltSrvPP;C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [2010-3-9 144672]

    R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2010-5-12 1153368]

    R2 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe [2009-12-12 689472]

    R2 TabletServicePen;TabletServicePen;C:\Program Files\Tablet\Pen\Pen_Tablet.exe [2010-12-31 6583160]

    R2 TabletServiceWacom;TabletServiceWacom;C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe [2012-9-22 8786848]

    R2 TouchServicePen;Wacom Consumer Touch Service;C:\Program Files\Tablet\Pen\Pen_TouchService.exe [2010-12-31 528760]

    R2 TouchServiceWacom;Wacom Professional Touch Service;C:\Program Files\Tablet\Wacom\Wacom_TouchService.exe [2012-9-22 565152]

    R2 UMVPFSrv;UMVPFSrv;C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-1-18 450848]

    R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2011-5-11 46136]

    R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2012-5-14 96896]

    R3 BrYNSvc;BrYNSvc;C:\Program Files (x86)\Browny02\BrYNSvc.exe [2012-12-9 245760]

    R3 CompFilter64;UVCCompositeFilter;C:\Windows\System32\drivers\lvbflt64.sys [2012-1-18 25632]

    R3 hidkmdf;KMDF Driver;C:\Windows\System32\drivers\hidkmdf.sys [2012-9-22 13728]

    R3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\System32\drivers\lvrs64.sys [2012-1-18 351136]

    R3 LVUVC64;Logitech HD Webcam C510(UVC);C:\Windows\System32\drivers\LVUVC64.sys [2010-11-10 4865568]

    R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-9-12 368896]

    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2011-6-10 539240]

    R3 t3;Sound Blaster X-Fi Xtreme Audio;C:\Windows\System32\drivers\t3.sys [2009-12-12 639512]

    R3 WacHidRouter;Wacom Hid Router;C:\Windows\System32\drivers\wachidrouter.sys [2012-9-22 68512]

    R3 wacomrouterfilter;Wacom Router Filter Driver;C:\Windows\System32\drivers\wacomrouterfilter.sys [2012-9-22 15736]

    R3 WUSB54GSCv2.NTamd64;Compact Wireless-G USB Network Adapter with SpeedBooster Service;C:\Windows\System32\drivers\WUSB54GSCV2_AMD64.sys [2009-12-19 253944]

    S2 0003921273721725mcinstcleanup;McAfee Application Installer Cleanup (0003921273721725);C:\Users\THEKEL~1\AppData\Local\Temp\000392~1.EXE C:\PROGRA~2\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service --> C:\Users\THEKEL~1\AppData\Local\Temp\000392~1.EXE C:\PROGRA~2\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service [?]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S2 SessionLauncher;SessionLauncher;c:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe --> c:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe [?]

    S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]

    S3 BrSerIb;Brother Serial Interface Driver(WDM);C:\Windows\System32\drivers\BrSerIb.sys [2012-2-23 87552]

    S3 BrUsbSIb;Brother Serial USB Driver(WDM);C:\Windows\System32\drivers\BrUsbSib.sys [2012-2-23 14592]

    S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2009-12-12 79360]

    S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-12-12 79360]

    S3 LVPr2M64;Logitech LVPr2M64 Driver;C:\Windows\System32\drivers\LVPr2M64.sys [2010-5-7 30304]

    S3 npggsvc;nProtect GameGuard Service;C:\Windows\System32\GameMon.des -service --> C:\Windows\System32\GameMon.des -service [?]

    S3 RoxMediaDB10;RoxMediaDB10;C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCom\RoxMediaDB10.exe [2009-6-26 1124848]

    S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]

    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-7-9 59392]

    S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-9-28 53760]

    S3 wacmoumonitor;Wacom Mode Helper;C:\Windows\System32\drivers\wacmoumonitor.sys [2010-12-31 13312]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-4-21 1255736]

    S3 WSDScan;WSD Scan Support via UMB;C:\Windows\System32\drivers\WSDScan.sys [2009-7-13 25088]

    .

    =============== Created Last 30 ================

    .

    2013-01-16 06:49:06 9161176 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{47F78488-267B-4902-98ED-9A26A4F0C53D}\mpengine.dll

    2013-01-16 05:21:39 -------- d-----w- C:\Users\The Kellers_2\AppData\Roaming\Malwarebytes

    2013-01-16 05:21:05 -------- d-----w- C:\ProgramData\Malwarebytes

    2013-01-16 05:21:03 24176 ----a-w- C:\Windows\System32\drivers\mbam.sys

    2013-01-16 05:21:03 -------- d-----w- C:\Program Files (x86)\Malwarebytes

    2013-01-16 05:20:25 -------- d-----w- C:\Users\The Kellers_2\AppData\Local\Programs

    2013-01-15 02:45:47 9125352 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

    2013-01-09 23:43:52 750592 ----a-w- C:\Windows\System32\win32spl.dll

    2013-01-09 23:43:52 492032 ----a-w- C:\Windows\SysWow64\win32spl.dll

    2013-01-09 23:43:09 2002432 ----a-w- C:\Windows\System32\msxml6.dll

    2013-01-09 23:43:08 1882624 ----a-w- C:\Windows\System32\msxml3.dll

    2013-01-09 23:43:08 1389568 ----a-w- C:\Windows\SysWow64\msxml6.dll

    2013-01-09 23:43:07 1236992 ----a-w- C:\Windows\SysWow64\msxml3.dll

    2013-01-09 23:43:06 307200 ----a-w- C:\Windows\System32\ncrypt.dll

    2013-01-09 23:43:06 220160 ----a-w- C:\Windows\SysWow64\ncrypt.dll

    2013-01-09 23:41:49 424448 ----a-w- C:\Windows\System32\KernelBase.dll

    2013-01-09 23:40:28 68608 ----a-w- C:\Windows\System32\taskhost.exe

    2013-01-09 23:40:19 3149824 ----a-w- C:\Windows\System32\win32k.sys

    2012-12-26 04:09:35 -------- d-----w- C:\Users\The Kellers_2\AppData\Local\Apps

    2012-12-22 19:23:19 -------- d-----w- C:\Users\The Kellers_2\AppData\Local\PowerDVD DX

    2012-12-21 08:00:46 46080 ----a-w- C:\Windows\System32\atmlib.dll

    2012-12-21 08:00:46 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll

    2012-12-21 08:00:44 367616 ----a-w- C:\Windows\System32\atmfd.dll

    2012-12-21 08:00:41 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll

    2012-12-18 14:28:14 186584 ----a-w- C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll

    2012-12-18 14:28:14 186584 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\nppdf32.dll

    .

    ==================== Find3M ====================

    .

    2013-01-09 06:42:24 74248 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

    2013-01-09 06:42:24 697864 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

    2012-12-07 13:20:16 441856 ----a-w- C:\Windows\System32\Wpc.dll

    2012-12-07 13:15:31 2746368 ----a-w- C:\Windows\System32\gameux.dll

    2012-12-07 12:26:17 308736 ----a-w- C:\Windows\SysWow64\Wpc.dll

    2012-12-07 12:20:43 2576384 ----a-w- C:\Windows\SysWow64\gameux.dll

    2012-12-07 11:20:04 30720 ----a-w- C:\Windows\System32\usk.rs

    2012-12-07 11:20:03 43520 ----a-w- C:\Windows\System32\csrr.rs

    2012-12-07 11:20:03 23552 ----a-w- C:\Windows\System32\oflc.rs

    2012-12-07 11:20:01 45568 ----a-w- C:\Windows\System32\oflc-nz.rs

    2012-12-07 11:20:01 44544 ----a-w- C:\Windows\System32\pegibbfc.rs

    2012-12-07 11:20:01 20480 ----a-w- C:\Windows\System32\pegi-fi.rs

    2012-12-07 11:20:00 20480 ----a-w- C:\Windows\System32\pegi-pt.rs

    2012-12-07 11:19:59 20480 ----a-w- C:\Windows\System32\pegi.rs

    2012-12-07 11:19:58 46592 ----a-w- C:\Windows\System32\fpb.rs

    2012-12-07 11:19:57 40960 ----a-w- C:\Windows\System32\cob-au.rs

    2012-12-07 11:19:57 21504 ----a-w- C:\Windows\System32\grb.rs

    2012-12-07 11:19:57 15360 ----a-w- C:\Windows\System32\djctq.rs

    2012-12-07 11:19:56 55296 ----a-w- C:\Windows\System32\cero.rs

    2012-12-07 11:19:55 51712 ----a-w- C:\Windows\System32\esrb.rs

    2012-11-30 05:45:35 362496 ----a-w- C:\Windows\System32\wow64win.dll

    2012-11-30 05:45:35 243200 ----a-w- C:\Windows\System32\wow64.dll

    2012-11-30 05:45:35 13312 ----a-w- C:\Windows\System32\wow64cpu.dll

    2012-11-30 05:45:14 215040 ----a-w- C:\Windows\System32\winsrv.dll

    2012-11-30 05:43:12 16384 ----a-w- C:\Windows\System32\ntvdm64.dll

    2012-11-30 04:54:00 5120 ----a-w- C:\Windows\SysWow64\wow32.dll

    2012-11-30 04:53:59 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll

    2012-11-30 03:23:48 338432 ----a-w- C:\Windows\System32\conhost.exe

    2012-11-30 02:44:06 25600 ----a-w- C:\Windows\SysWow64\setup16.exe

    2012-11-30 02:44:04 7680 ----a-w- C:\Windows\SysWow64\instnm.exe

    2012-11-30 02:44:04 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll

    2012-11-30 02:44:03 2048 ----a-w- C:\Windows\SysWow64\user.exe

    2012-11-30 02:38:59 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

    2012-11-30 02:38:59 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

    2012-11-30 02:38:59 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

    2012-11-30 02:38:59 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

    2012-11-22 05:44:23 800768 ----a-w- C:\Windows\System32\usp10.dll

    2012-11-22 04:45:03 626688 ----a-w- C:\Windows\SysWow64\usp10.dll

    2012-11-12 12:28:37 1638912 ----a-w- C:\Windows\System32\mshtml.tlb

    2012-11-12 11:52:18 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb

    2012-11-09 05:45:09 2048 ----a-w- C:\Windows\System32\tzres.dll

    2012-11-09 04:42:49 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

    2012-11-08 16:29:12 1402312 ----a-w- C:\Windows\SysWow64\msxml4.dll

    2012-11-04 00:15:38 821736 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll

    2012-11-04 00:15:38 746984 ----a-w- C:\Windows\SysWow64\deployJava1.dll

    2012-11-03 22:19:10 1034216 ----a-w- C:\Windows\System32\npDeployJava1.dll

    2012-11-03 22:19:09 916456 ----a-w- C:\Windows\System32\deployJava1.dll

    2012-11-02 05:59:11 478208 ----a-w- C:\Windows\System32\dpnet.dll

    2012-11-02 05:11:31 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll

    2012-10-27 06:26:55 981504 ----a-w- C:\Windows\SysWow64\wininet.dll

    2012-10-27 05:51:21 1188864 ----a-w- C:\Windows\System32\wininet.dll

    2012-10-25 08:12:26 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx

    2012-10-25 08:12:26 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts

    .

    ============= FINISH: 19:24:36.18 ===============

    .

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    .

    DDS (Ver_2012-11-20.01)

    .

    Microsoft Windows 7 Home Premium

    Boot Device: \Device\HarddiskVolume2

    Install Date: 12/18/2009 7:23:26 PM

    System Uptime: 1/16/2013 5:02:09 PM (2 hours ago)

    .

    Motherboard: Dell Inc. | | 0F896N

    Processor: AMD Athlon™ II X2 250 Processor | AM2 | 3000/200mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 451 GiB total, 336.961 GiB free.

    D: is CDROM ()

    .

    ==== Disabled Device Manager Items =============

    .

    ==== System Restore Points ===================

    .

    RP529: 1/5/2013 1:17:51 AM - Windows Update

    RP530: 1/9/2013 6:39:00 PM - Windows Update

    RP531: 1/10/2013 3:00:17 AM - Windows Update

    RP532: 1/13/2013 8:20:21 PM - Windows Update

    RP533: 1/15/2013 3:00:24 AM - Windows Update

    RP534: 1/16/2013 7:10:54 PM - Removed Java 7 Update 9

    RP535: 1/16/2013 7:12:07 PM - Removed Java 7 Update 9 (64-bit)

    .

    ==== Installed Programs ======================

    .

    Update for Microsoft Office 2007 (KB2508958)

    Adobe After Effects CS5.5

    Adobe AIR

    Adobe Creative Suite 5 Master Collection

    Adobe Download Assistant

    Adobe Flash Player 11 ActiveX

    Adobe Flash Player 11 Plugin

    Adobe Photoshop CS5

    Adobe Photoshop Elements 6.0

    Adobe Reader X (10.1.5)

    Adobe Shockwave Player 11.6

    Akamai NetSession Interface Service

    AMD APP SDK Runtime

    AMD Catalyst Install Manager

    AMD Drag and Drop Transcoding

    AMD Fuel

    AMD VISION Engine Control Center

    Apple Application Support

    Apple Mobile Device Support

    Apple Software Update

    ArcSoft Panorama Maker 4

    Bamboo

    Bamboo Dock

    Bamboo Dock 3.1

    Bandisoft MPEG-1 Decoder

    BitTorrent

    Bonjour

    Brother MFL-Pro Suite MFC-J825DW

    CameraHelperMsi

    Catalyst Control Center - Branding

    Catalyst Control Center Graphics Previews Common

    Catalyst Control Center InstallProxy

    Catalyst Control Center Localization All

    ccc-utility64

    CCC Help Chinese Standard

    CCC Help Chinese Traditional

    CCC Help Czech

    CCC Help Danish

    CCC Help Dutch

    CCC Help English

    CCC Help Finnish

    CCC Help French

    CCC Help German

    CCC Help Greek

    CCC Help Hungarian

    CCC Help Italian

    CCC Help Japanese

    CCC Help Korean

    CCC Help Norwegian

    CCC Help Polish

    CCC Help Portuguese

    CCC Help Russian

    CCC Help Spanish

    CCC Help Swedish

    CCC Help Thai

    CCC Help Turkish

    Compact Wireless-G USB Network Adapter with SpeedBooster Driver - WUSB54GSC

    Compatibility Pack for the 2007 Office system

    Consumer In-Home Service Agreement

    Corel Painter Essentials 4

    Creative Audio Control Panel

    Creative Software AutoUpdate

    Creative Sound Blaster Properties x64 Edition

    D3DX10

    Dell DataSafe Local Backup

    Dell DataSafe Local Backup - Support Software

    Dell DataSafe Online

    Dell Dock

    Dell Edoc Viewer

    Dell Getting Started Guide

    DirectXInstallService

    EA Download Manager

    EMC 10 Content

    EMCGadgets64

    erLT

    F.lux

    Facebook Plug-In

    Garmin Lifetime Updater

    Google SketchUp 8

    GoToAssist 8.0.0.514

    Host OpenAL

    iTunes

    Junk Mail filter update

    Livebrush Mini

    Livestream Procaster

    Logitech Vid HD

    Logitech Webcam Software

    LWS Facebook

    LWS Gallery

    LWS Help_main

    LWS Launcher

    LWS Motion Detection

    LWS Pictures And Video

    LWS Twitter

    LWS Video Mask Maker

    LWS VideoEffects

    LWS Webcam Software

    LWS WLM Plugin

    LWS YouTube Plugin

    Malwarebytes Anti-Malware version 1.70.0.1100

    Microsoft .NET Framework 4 Client Profile

    Microsoft Application Error Reporting

    Microsoft Office 2007 Service Pack 3 (SP3)

    Microsoft Office Excel MUI (English) 2007

    Microsoft Office File Validation Add-In

    Microsoft Office Home and Student 2007

    Microsoft Office Office 64-bit Components 2007

    Microsoft Office OneNote MUI (English) 2007

    Microsoft Office PowerPoint MUI (English) 2007

    Microsoft Office PowerPoint Viewer 2007 (English)

    Microsoft Office Proof (English) 2007

    Microsoft Office Proof (French) 2007

    Microsoft Office Proof (Spanish) 2007

    Microsoft Office Proofing (English) 2007

    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

    Microsoft Office Shared 64-bit MUI (English) 2007

    Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007

    Microsoft Office Shared MUI (English) 2007

    Microsoft Office Shared Setup Metadata MUI (English) 2007

    Microsoft Office Suite Activation Assistant

    Microsoft Office Word MUI (English) 2007

    Microsoft Security Client

    Microsoft Security Essentials

    Microsoft Silverlight

    Microsoft SQL Server 2005 Compact Edition [ENU]

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2005 Redistributable (x64)

    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319

    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

    Microsoft Works

    Microsoft WSE 3.0 Runtime

    Microsoft_VC80_ATL_x86

    Microsoft_VC80_ATL_x86_x64

    Microsoft_VC80_CRT_x86

    Microsoft_VC80_CRT_x86_x64

    Microsoft_VC80_MFC_x86

    Microsoft_VC80_MFC_x86_x64

    Microsoft_VC80_MFCLOC_x86

    Microsoft_VC80_MFCLOC_x86_x64

    Microsoft_VC90_ATL_x86

    Microsoft_VC90_ATL_x86_x64

    Microsoft_VC90_CRT_x86

    Microsoft_VC90_CRT_x86_x64

    Microsoft_VC90_MFC_x86

    Microsoft_VC90_MFC_x86_x64

    Microsoft_VC90_MFCLOC_x86

    MoodTuner

    Mozilla Firefox 18.0 (x86 en-US)

    Mozilla Maintenance Service

    MSVCRT

    MSVCRT_amd64

    MSXML 4.0 SP2 (KB954430)

    MSXML 4.0 SP2 (KB973688)

    MSXML 4.0 SP3 Parser

    MSXML 4.0 SP3 Parser (KB2721691)

    MSXML 4.0 SP3 Parser (KB2758694)

    MSXML 4.0 SP3 Parser (KB973685)

    Nikon Message Center

    Nuance PaperPort 12

    Nuance PDF Viewer Plus

    PaperPort Image Printer 64-bit

    PDF Settings CS5

    Portal 2

    PowerDVD DX

    QuickTime

    RAIDXpert

    RealUpgrade 1.0

    Roxio Activation Module

    Roxio BackOnTrack

    Roxio Burn

    Roxio Central Audio

    Roxio Central Copy

    Roxio Central Core

    Roxio Central Data

    Roxio Central Tools

    Roxio Easy CD and DVD Burning

    Roxio Express Labeler 3

    Roxio File Backup

    Roxio Update Manager

    Scansoft PDF Professional

    Security Update for CAPICOM (KB931906)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

    Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition

    Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition

    Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition

    Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition

    Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

    Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

    Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition

    Skype Toolbars

    Skype™ 5.10

    Sonic CinePlayer Decoder Pack

    Sound Blaster X-Fi

    Spotify

    Spybot - Search & Destroy

    SpywareBlaster 4.6

    Steam

    swMSM

    The Sims™ 3

    Unity Web Player

    Update for 2007 Microsoft Office System (KB967642)

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

    Update for Microsoft Office 2007 Help for Common Features (KB963673)

    Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

    Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

    Update for Microsoft Office Excel 2007 Help (KB963678)

    Update for Microsoft Office OneNote 2007 Help (KB963670)

    Update for Microsoft Office Powerpoint 2007 Help (KB963669)

    Update for Microsoft Office Script Editor Help (KB963671)

    Update for Microsoft Office Word 2007 Help (KB963665)

    VD64Inst

    Veoh Web Player

    Wacom Tablet

    WebTablet FB Plugin 32 bit

    WebTablet FB Plugin 64 bit

    WebTablet Netscape Plugin

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live ID Sign-in Assistant

    Windows Live Installer

    Windows Live Language Selector

    Windows Live Mail

    Windows Live Messenger

    Windows Live MIME IFilter

    Windows Live Movie Maker

    Windows Live Photo Common

    Windows Live Photo Gallery

    Windows Live PIMT Platform

    Windows Live SOXE

    Windows Live SOXE Definitions

    Windows Live Sync

    Windows Live UX Platform

    Windows Live UX Platform Language Pack

    Windows Live Writer

    Windows Live Writer Resources

    WinRAR 4.00 (64-bit)

    WMV9/VC-1 Video Playback

    Yahoo! Messenger

    .

    ==== Event Viewer Messages From Past Week ========

    .

    1/16/2013 8:47:58 AM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: RxFilter

    1/16/2013 8:47:52 AM, Error: Service Control Manager [7000] - The SessionLauncher service failed to start due to the following error: The system cannot find the file specified.

    1/16/2013 7:40:43 AM, Error: VDS Basic Provider [1] - Unexpected failure. Error code: D@01010004

    1/15/2013 7:44:32 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UMVPFSrv service.

    1/12/2013 4:06:50 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service.

    .

    ==== End Of File ===========================

    RogueKiller V8.4.3 [Jan 10 2013] by Tigzy

    mail : tigzyRK<at>gmail<dot>com

    Feedback : http://www.geekstogo...13-roguekiller/

    Website : http://tigzy.geeksto...roguekiller.php

    Blog : http://tigzyrk.blogspot.com/

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

    Started in : Normal mode

    User : The Kellers_2 [Admin rights]

    Mode : Scan -- Date : 01/16/2013 22:48:33

    ¤¤¤ Bad processes : 1 ¤¤¤

    [sUSP PATH] nsCfg.exe -- C:\Users\The Kellers_2\AppData\Roaming\SoundMAX\Smapp\nsCfg.exe -> KILLED [TermProc]

    ¤¤¤ Registry Entries : 8 ¤¤¤

    [RUN][sUSP PATH] HKCU\[...]\Run : Smtray (C:\Users\The Kellers_2\AppData\Roaming\SoundMAX\Smapp\Smtray.exe) -> FOUND

    [RUN][sUSP PATH] HKUS\S-1-5-21-927756697-496595060-231692287-1003[...]\Run : Smtray (C:\Users\The Kellers_2\AppData\Roaming\SoundMAX\Smapp\Smtray.exe) -> FOUND

    [HJ DESK] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

    [HJ DESK] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

    [HJ DESK] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND

    [HJ DESK] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND

    [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

    [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

    ¤¤¤ Particular Files / Folders: ¤¤¤

    ¤¤¤ Driver : [NOT LOADED] ¤¤¤

    ¤¤¤ HOSTS File: ¤¤¤

    --> C:\Windows\system32\drivers\etc\hosts

    127.0.0.1 www.007guard.com

    127.0.0.1 007guard.com

    127.0.0.1 008i.com

    127.0.0.1 www.008k.com

    127.0.0.1 008k.com

    127.0.0.1 www.00hq.com

    127.0.0.1 00hq.com

    127.0.0.1 010402.com

    127.0.0.1 www.032439.com

    127.0.0.1 032439.com

    127.0.0.1 www.0scan.com

    127.0.0.1 0scan.com

    127.0.0.1 1000gratisproben.com

    127.0.0.1 www.1000gratisproben.com

    127.0.0.1 1001namen.com

    127.0.0.1 www.1001namen.com

    127.0.0.1 100888290cs.com

    127.0.0.1 www.100888290cs.com

    127.0.0.1 www.100sexlinks.com

    127.0.0.1 100sexlinks.com

    [...]

    ¤¤¤ MBR Check: ¤¤¤

    +++++ PhysicalDrive0: WDC WD5000AAKS-75V0A0 ATA Device +++++

    --- User ---

    [MBR] 6f387379ea03e0adc6c7a40a65c33723

    [bSP] 3d73228d59239faa66e9eddb46a4a3d5 : Windows Vista MBR Code

    Partition table:

    0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 Mo

    1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 81920 | Size: 15000 Mo

    2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30801920 | Size: 461899 Mo

    User = LL1 ... OK!

    User = LL2 ... OK!

    Finished : << RKreport[1]_S_01162013_02d2248.txt >>

    RKreport[1]_S_01162013_02d2248.txt

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.