Jump to content

bd649

Members
 View Profile  See their activity

  • Posts

    15

  • Joined

  • Last visited

 Content Type 

Posts posted by bd649

    Ads and page re-direction

    in Resolved Malware Removal Logs

    Posted

    Results of screen317's Security Check version 0.99.57

    Windows 7 x64 (UAC is disabled!)

    Out of date service pack!!

    Internet Explorer 9

    ``````````````Antivirus/Firewall Check:``````````````

    Windows Firewall Disabled!

    AVG Internet Security 2013

    Antivirus up to date!

    `````````Anti-malware/Other Utilities Check:`````````

    Malwarebytes Anti-Malware version 1.70.0.1100

    AVG PC TuneUp

    AVG PC TuneUp Language Pack (en-US)

    Java 7 Update 11

    Adobe Flash Player 11.5.502.146

    Adobe Reader 10.1.5 Adobe Reader out of Date!

    Mozilla Firefox (18.0.2)

    ````````Process Check: objlist.exe by Laurent````````

    AVG avgwdsvc.exe

    `````````````````System Health check`````````````````

    Total Fragmentation on Drive C: 9%

    ````````````````````End of Log``````````````````````

    Ads and page re-direction

    in Resolved Malware Removal Logs

    Posted

    RogueKiller V8.4.4 _x64_ [Feb 5 2013] by Tigzy

    mail : tigzyRK<at>gmail<dot>com

    Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

    Website : http://tigzy.geekstogo.com/roguekiller.php

    Blog : http://tigzyrk.blogspot.com/

    Operating System : Windows 7 (6.1.7600 ) 64 bits version

    Started in : Normal mode

    User : Owner [Admin rights]

    Mode : Scan -- Date : 02/06/2013 18:44:10

    | ARK || MBR |

    ¤¤¤ Bad processes : 1 ¤¤¤

    [sUSP PATH] CurseClient.exe -- C:\Users\Owner\AppData\Local\Apps\2.0\H6RHC3DP.RCC\TO0WR5QP.Z6T\curs..tion_9e9e83ddf3ed3ead_0005.0001_34ad773d180ece2c\CurseClient.exe -> KILLED [TermProc]

    ¤¤¤ Registry Entries : 2 ¤¤¤

    [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

    [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

    ¤¤¤ Particular Files / Folders: ¤¤¤

    ¤¤¤ Driver : [NOT LOADED] ¤¤¤

    ¤¤¤ HOSTS File: ¤¤¤

    --> C:\Windows\system32\drivers\etc\hosts

    ¤¤¤ MBR Check: ¤¤¤

    +++++ PhysicalDrive0: ST3500418AS ATA Device +++++

    --- User ---

    [MBR] 973836b567a67c80b1b292257995f3ae

    [bSP] 7ad81edb22ef4cdbaca9520d8c79ba43 : Windows 7/8 MBR Code

    Partition table:

    0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo

    1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 476836 Mo

    User = LL1 ... OK!

    User = LL2 ... OK!

    Finished : << RKreport[1]_S_02062013_02d1844.txt >>

    RKreport[1]_S_02062013_02d1844.txt

    Ads and page re-direction

    in Resolved Malware Removal Logs

    Posted

    DDS (Ver_2012-11-20.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 10.11.2

    Run by Owner at 20:59:07 on 2013-02-02

    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.6142.3402 [GMT -6:00]

    .

    AV: Lavasoft Ad-Aware *Enabled/Updated* {445B48C3-0FA4-6B16-8F07-6506F305D800}

    AV: AVG Internet Security 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

    SP: Lavasoft Ad-Aware *Enabled/Updated* {FF3AA927-299E-6498-B5B7-5E74888292BD}

    SP: AVG Internet Security 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    FW: AVG Internet Security 2012 *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}

    FW: Lavasoft Ad-Aware *Disabled* {7C60C9E6-45CB-6A4E-A458-CC330DD69F7B}

    .

    ============== Running Processes ===============

    .

    C:\PROGRA~2\AVG\AVG2012\avgrsa.exe

    C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\svchost.exe -k RPCSS

    C:\Windows\system32\atiesrxx.exe

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\system32\atieclxx.exe

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

    C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe

    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    C:\Windows\system32\taskhost.exe

    C:\Program Files (x86)\AVG\AVG2012\avgfws.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Windows\SysWOW64\PnkBstrA.exe

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe

    C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe

    C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe

    C:\Program Files (x86)\Steam\Steam.exe

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

    C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe

    C:\Program Files (x86)\AVG\AVG2012\avgtray.exe

    C:\Program Files (x86)\AVG Secure Search\vprot.exe

    C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe

    C:\Program Files (x86)\Razer\Lycosa\razerhid.exe

    C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

    C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

    C:\Program Files (x86)\Razer\Lycosa\razertra.exe

    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

    C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe

    C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe

    C:\Program Files (x86)\AVG\AVG2012\avgemca.exe

    C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\Windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Program Files (x86)\Common Files\Steam\SteamService.exe

    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

    C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe

    C:\Windows\system32\wuauclt.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

    C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe

    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe

    C:\Windows\system32\SearchProtocolHost.exe

    C:\Windows\system32\SearchFilterHost.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://www.google.com

    mWinlogon: Userinit = userinit.exe,

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: Ad-Aware Security Add-on: {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll

    BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

    BHO: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.0.3.14\AVG Secure Search_toolbar.dll

    BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

    TB: <No Name>: {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - LocalServer32 - <no file>

    TB: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.0.3.14\AVG Secure Search_toolbar.dll

    TB: Ad-Aware Security Add-on: {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll

    uRun: [steam] "C:\Program Files (x86)\Steam\steam.exe" -silent

    uRun: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    uRun: [steelSeries Engine] C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe

    mRun: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"

    mRun: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"

    mRun: [DeathAdder] C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe

    mRun: [Lycosa] "C:\Program Files (x86)\Razer\Lycosa\razerhid.exe"

    mRun: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml

    mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

    mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    mRun: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe"

    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

    mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    StartupFolder: C:\Users\Owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    mPolicies-System: PromptOnSecureDesktop = dword:0

    TCP: NameServer = 68.113.206.10 24.217.0.5 71.92.29.130

    TCP: Interfaces\{29B9ECFC-6DB0-4AAB-B4BF-14EC2984AC58} : DHCPNameServer = 68.113.206.10 24.217.0.5 71.92.29.130

    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll

    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.0.1\ViProtocol.dll

    SSODL: WebCheck - <orphaned>

    x64-BHO: AVG Do Not Track: {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll

    x64-BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

    x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

    x64-IE: {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll

    x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll

    x64-Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - <orphaned>

    x64-SSODL: WebCheck - <orphaned>

    .

    ================= FIREFOX ===================

    .

    FF - ProfilePath - C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\57zsoogf.default\

    FF - prefs.js: browser.search.selectedEngine - AVG Secure Search

    FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/?ref=logo

    FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid={B03DDFEF-B84D-4A27-ADB6-F9A9C6C4082C}&mid=da8f92efd26947d0a7d1bdb90f04d962-402010902c92026d08355051e446c999f3b5046e〈=en&ds=AVG&pr=pr&d=2012-08-02 00:56:49&pid=avg&sg=&v=14.0.3.14&sap=ku&q=

    FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

    FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll

    FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll

    FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

    FF - plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\14.0.1\npsitesafety.dll

    FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll

    FF - plugin: C:\Windows\SysWOW64\npDeployJava1.dll

    FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

    .

    ---- FIREFOX POLICIES ----

    FF - user.js: network.http.max-persistent-connections-per-server - 4

    FF - user.js: nglayout.initialpaint.delay - 600

    FF - user.js: content.notify.interval - 600000

    FF - user.js: content.max.tokenizing.time - 1800000

    FF - user.js: content.switch.threshold - 600000

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2012-4-19 28480]

    R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2012-1-31 36944]

    R1 Avgfwfd;AVG network filter service;C:\Windows\System32\drivers\avgfwd6a.sys [2011-5-23 48992]

    R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2012-11-8 307040]

    R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2011-12-23 47696]

    R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2012-8-24 384352]

    R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2012-8-1 37720]

    R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]

    R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]

    R1 SBRE;SBRE;C:\Windows\System32\drivers\sbredrv.sys [2012-9-29 57976]

    R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2011-8-11 140672]

    R2 Ad-Aware Service;Ad-Aware Service;C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe [2012-9-20 1236368]

    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-7-27 239616]

    R2 avgfws;AVG Firewall;C:\Program Files (x86)\AVG\AVG2012\avgfws.exe [2012-12-5 2321560]

    R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe [2012-11-2 5174392]

    R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-2-14 193288]

    R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-9-11 398184]

    R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-9-11 682344]

    R2 SBAMSvc;Ad-Aware;C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [2011-12-19 3289032]

    R2 sbapifs;sbapifs;C:\Windows\System32\drivers\sbapifs.sys [2011-11-29 74872]

    R2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2012-8-23 2148216]

    R2 vToolbarUpdater14.0.1;vToolbarUpdater14.0.1;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe [2013-1-24 945328]

    R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2012-5-14 96896]

    R3 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2012-12-10 127328]

    R3 AVGIDSFilter;AVGIDSFilter;C:\Windows\System32\drivers\avgidsfiltera.sys [2011-12-23 29776]

    R3 busenum;SteelBusSvc;C:\Windows\System32\drivers\SteelBus64.sys [2012-11-11 131072]

    R3 Lycosa;Lycosa Keyboard;C:\Windows\System32\drivers\Lycosa.sys [2008-1-17 18816]

    R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2012-8-28 24176]

    R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2010-11-18 80384]

    R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2010-11-18 181248]

    R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-3-1 187392]

    R3 SAlphamHid;SteelHIDSvc;C:\Windows\System32\drivers\SAlpham64.sys [2012-10-15 38016]

    R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [2012-7-4 11880]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

    S3 DAdderFltr;DeathAdder Mouse;C:\Windows\System32\drivers\dadder.sys [2012-8-2 13824]

    S3 sbhips;sbhips;C:\Windows\System32\drivers\sbhips.sys [2012-9-29 60536]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-8-1 1255736]

    .

    =============== Created Last 30 ================

    .

    2013-02-01 04:50:11 -------- d-----w- C:\Users\Owner\AppData\Local\ESN

    2013-02-01 04:32:32 95648 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

    2013-02-01 04:31:17 108448 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll

    2013-02-01 04:27:31 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin7.dll

    2013-02-01 04:27:31 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin6.dll

    2013-02-01 04:27:31 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin5.dll

    2013-02-01 04:27:31 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin4.dll

    2013-02-01 04:27:31 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin3.dll

    2013-02-01 04:27:30 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin2.dll

    2013-02-01 04:27:30 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin.dll

    2013-02-01 04:26:31 -------- d-----w- C:\Users\Owner\AppData\Local\Apple

    2013-01-11 00:27:41 -------- d-----w- C:\Users\Owner\AppData\Local\Programs

    2013-01-08 23:25:38 424960 ----a-w- C:\Windows\System32\KernelBase.dll

    2013-01-08 23:24:57 3147264 ----a-w- C:\Windows\System32\win32k.sys

    2013-01-07 01:58:59 -------- d-----w- C:\Users\Owner\AppData\Local\SteelSeries_ApS

    2013-01-07 01:58:48 -------- d-----w- C:\Users\Owner\AppData\Roaming\SteelSeries

    2013-01-07 01:58:29 -------- d-----w- C:\ProgramData\SteelSeries

    2013-01-07 01:57:32 -------- d-----w- C:\Program Files\SteelSeries

    .

    ==================== Find3M ====================

    .

    2013-02-02 06:05:35 280904 ----a-w- C:\Windows\SysWow64\PnkBstrB.xtr

    2013-02-02 06:05:35 280904 ----a-w- C:\Windows\SysWow64\PnkBstrB.exe

    2013-02-02 06:04:29 280904 ----a-w- C:\Windows\SysWow64\PnkBstrB.ex0

    2013-02-01 04:32:27 859552 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll

    2013-02-01 04:32:27 780192 ----a-w- C:\Windows\SysWow64\deployJava1.dll

    2013-02-01 04:31:10 960416 ----a-w- C:\Windows\System32\deployJava1.dll

    2013-02-01 04:31:10 1081760 ----a-w- C:\Windows\System32\npDeployJava1.dll

    2013-01-25 01:30:17 37720 ----a-w- C:\Windows\System32\drivers\avgtpx64.sys

    2013-01-08 23:13:29 74248 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

    2013-01-08 23:13:29 697864 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

    2012-12-16 16:52:02 46080 ----a-w- C:\Windows\System32\atmlib.dll

    2012-12-16 14:40:45 367616 ----a-w- C:\Windows\System32\atmfd.dll

    2012-12-16 14:25:27 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll

    2012-12-16 14:25:19 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll

    2012-12-14 22:49:28 24176 ----a-w- C:\Windows\System32\drivers\mbam.sys

    2012-12-10 09:28:34 127328 ----a-w- C:\Windows\System32\drivers\avgidsdrivera.sys

    2012-12-07 05:41:16 441856 ----a-w- C:\Windows\System32\Wpc.dll

    2012-12-07 05:35:34 2745856 ----a-w- C:\Windows\System32\gameux.dll

    2012-12-07 05:04:20 308736 ----a-w- C:\Windows\SysWow64\Wpc.dll

    2012-12-07 04:57:38 2576384 ----a-w- C:\Windows\SysWow64\gameux.dll

    2012-12-07 03:21:08 45568 ----a-w- C:\Windows\SysWow64\oflc-nz.rs

    2012-11-30 05:50:00 362496 ----a-w- C:\Windows\System32\wow64win.dll

    2012-11-30 05:50:00 243200 ----a-w- C:\Windows\System32\wow64.dll

    2012-11-30 05:50:00 13312 ----a-w- C:\Windows\System32\wow64cpu.dll

    2012-11-30 05:49:28 215040 ----a-w- C:\Windows\System32\winsrv.dll

    2012-11-30 05:46:35 16384 ----a-w- C:\Windows\System32\ntvdm64.dll

    2012-11-30 05:06:50 5120 ----a-w- C:\Windows\SysWow64\wow32.dll

    2012-11-30 05:06:49 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll

    2012-11-30 03:33:03 338432 ----a-w- C:\Windows\System32\conhost.exe

    2012-11-30 02:56:36 25600 ----a-w- C:\Windows\SysWow64\setup16.exe

    2012-11-30 02:56:35 7680 ----a-w- C:\Windows\SysWow64\instnm.exe

    2012-11-30 02:56:34 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll

    2012-11-30 02:56:33 2048 ----a-w- C:\Windows\SysWow64\user.exe

    2012-11-30 02:51:41 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

    2012-11-30 02:51:41 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

    2012-11-30 02:51:41 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

    2012-11-30 02:51:41 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

    2012-11-22 10:32:45 801280 ----a-w- C:\Windows\System32\usp10.dll

    2012-11-22 09:33:26 627712 ----a-w- C:\Windows\SysWow64\usp10.dll

    2012-11-20 05:55:59 307200 ----a-w- C:\Windows\System32\ncrypt.dll

    2012-11-20 05:10:07 219136 ----a-w- C:\Windows\SysWow64\ncrypt.dll

    2012-11-14 06:11:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll

    2012-11-14 06:04:11 1392128 ----a-w- C:\Windows\System32\wininet.dll

    2012-11-14 06:02:49 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

    2012-11-14 05:57:46 599040 ----a-w- C:\Windows\System32\vbscript.dll

    2012-11-14 05:57:35 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

    2012-11-14 05:52:40 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

    2012-11-14 02:09:22 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

    2012-11-14 01:58:15 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

    2012-11-14 01:57:37 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

    2012-11-14 01:49:25 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

    2012-11-14 01:48:27 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

    2012-11-14 01:44:42 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

    2012-11-11 23:40:38 131072 ----a-w- C:\Windows\System32\drivers\SteelBus64.sys

    2012-11-09 05:34:53 751104 ----a-w- C:\Windows\System32\win32spl.dll

    2012-11-09 05:34:27 2048 ----a-w- C:\Windows\System32\tzres.dll

    2012-11-09 04:49:55 492032 ----a-w- C:\Windows\SysWow64\win32spl.dll

    2012-11-09 04:49:37 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

    2012-11-08 09:49:24 307040 ----a-w- C:\Windows\System32\drivers\avgldx64.sys

    .

    ============= FINISH: 20:59:36.12 ===============

    DDS (Ver_2012-11-20.01)

    .

    Microsoft Windows 7 Home Premium

    Boot Device: \Device\HarddiskVolume1

    Install Date: 8/1/2012 10:51:25 PM

    System Uptime: 2/2/2013 5:34:39 PM (3 hours ago)

    .

    Motherboard: Gigabyte Technology Co., Ltd. | | X58A-UD3R

    Processor: Intel® Core i7 CPU 930 @ 2.80GHz | Socket 1366 | 2794/133mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 466 GiB total, 304.107 GiB free.

    D: is CDROM ()

    .

    ==== Disabled Device Manager Items =============

    .

    Class GUID:

    Description: Marvell 91xx Config ATA Device

    Device ID: IDE\PROCESSORMARVELL_91XX_CONFIG_____________________1.01____\6&31F68D52&0&1.1.0

    Manufacturer:

    Name: Marvell 91xx Config ATA Device

    PNP Device ID: IDE\PROCESSORMARVELL_91XX_CONFIG_____________________1.01____\6&31F68D52&0&1.1.0

    Service:

    .

    ==== System Restore Points ===================

    .

    RP54: 1/19/2013 1:01:37 PM - Scheduled Checkpoint

    RP55: 1/27/2013 11:14:46 AM - Scheduled Checkpoint

    RP56: 1/31/2013 10:26:53 PM - Installed QuickTime

    RP57: 1/31/2013 10:30:42 PM - Installed Java 7 Update 11 (64-bit)

    RP58: 1/31/2013 10:31:57 PM - Installed Java 7 Update 11

    RP59: 2/1/2013 6:43:45 PM - Removed Microsoft Silverlight

    .

    ==== Installed Programs ======================

    .

    Ad-Aware Antivirus

    Ad-Aware Security Add-on

    Adobe Flash Player 11 Plugin

    Adobe Reader X (10.1.5)

    AMD Accelerated Video Transcoding

    AMD APP SDK Runtime

    AMD Catalyst Install Manager

    AMD Drag and Drop Transcoding

    AMD Media Foundation Decoders

    Apple Application Support

    Apple Software Update

    AVG 2012

    AVG PC TuneUp

    AVG PC TuneUp Language Pack (en-US)

    AVG Security Toolbar

    Battlefield 3™

    Battlelog Web Plugins

    Call of Duty: Black Ops

    Call of Duty: Black Ops - Multiplayer

    Call of Duty: Black Ops II

    Call of Duty: Black Ops II - Multiplayer

    Call of Duty: Black Ops II - Zombies

    Call of Duty: Modern Warfare 3

    Catalyst Control Center

    Catalyst Control Center - Branding

    Catalyst Control Center Graphics Previews Common

    Catalyst Control Center InstallProxy

    Catalyst Control Center Localization All

    ccc-utility64

    CCC Help Chinese Standard

    CCC Help Chinese Traditional

    CCC Help Czech

    CCC Help Danish

    CCC Help Dutch

    CCC Help English

    CCC Help Finnish

    CCC Help French

    CCC Help German

    CCC Help Greek

    CCC Help Hungarian

    CCC Help Italian

    CCC Help Japanese

    CCC Help Korean

    CCC Help Norwegian

    CCC Help Polish

    CCC Help Portuguese

    CCC Help Russian

    CCC Help Spanish

    CCC Help Swedish

    CCC Help Thai

    CCC Help Turkish

    Curse Client

    Diablo III

    ESN Sonar

    Java 7 Update 11

    Java 7 Update 11 (64-bit)

    Java Auto Updater

    Malwarebytes Anti-Malware version 1.70.0.1100

    Microsoft .NET Framework 1.1

    Microsoft .NET Framework 4 Client Profile

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

    Mozilla Firefox 18.0.1 (x86 en-US)

    Mozilla Maintenance Service

    MSXML 4.0 SP2 (KB954430)

    MSXML 4.0 SP2 (KB973688)

    Origin

    PunkBuster Services

    QuickTime

    Razer DeathAdder Mouse

    Razer Lycosa

    Renesas Electronics USB 3.0 Host Controller Driver

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

    Steam

    SteelSeries Engine

    SUPERAntiSpyware

    swMSM

    TeamSpeak 3 Client

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

    Visual Studio 2008 x64 Redistributables

    World of Warcraft

    .

    ==== Event Viewer Messages From Past Week ========

    .

    1/30/2013 6:10:32 PM, Error: Service Control Manager [7023] - The Function Discovery Resource Publication service terminated with the following error: %%-2147014847

    1/29/2013 5:58:58 PM, Error: Microsoft-Windows-WMPNSS-Service [14332] - Service 'WMPNetworkSvc' did not start correctly because CoCreateInstance(CLSID_UPnPDeviceFinder) encountered error '0x80004005'. Verify that the UPnPHost service is running and that the UPnPHost component of Windows is installed properly.

    .

    ==== End Of File ===========================

    Ads and page re-direction

    in Resolved Malware Removal Logs

    Posted

    I'm not sure if I am supposed to post here or elsewhere. I am having trouble with my computer. When I go to a page it constantly re-directs me to some other page that I have no desire to go to. When I click on just about any link my page reloads to a different page. I am constanly having some little window box appear like for a search engine. Also I randomly have ads playing audio in the background when any page is open. There is no visual for this ad just audio. I have AVG that I pay for, I also use MWAM, & Super antispyware. I run these and they all come back negative. A few days ago I ran the super antispyware and found a PUP.mywebsearch. I had it removed but I am still having issues. All these ads and page redirects are not normal. Any help would be greatly appreciated.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.