Jump to content

kwan313

Honorary Members
 View Profile  See their activity

  • Posts

    27

  • Joined

  • Last visited

 Content Type 

Posts posted by kwan313

    IE problem

    in Resolved Malware Removal Logs

    Posted

    Gringo,thanks for your help!

    Here is the report.

    Check Up.txt

    Results of screen317's Security Check version 0.99.61

    Windows 7 Service Pack 1 x64 (UAC is enabled)

    Internet Explorer 9

    ``````````````Antivirus/Firewall Check:``````````````

    Symantec Endpoint Protection

    WMI entry may not exist for antivirus; attempting automatic update.

    `````````Anti-malware/Other Utilities Check:`````````

    Java 6 Update 33

    Java version out of Date!

    Mozilla Firefox (18.0)

    ````````Process Check: objlist.exe by Laurent````````

    Norton ccSvcHst.exe

    `````````````````System Health check`````````````````

    Total Fragmentation on Drive C:

    ````````````````````End of Log``````````````````````

    ---------------------------------------------------------------------------------

    DDS attach

    .

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

    IF REQUESTED, ZIP IT UP & ATTACH IT

    .

    DDS (Ver_2012-11-20.01)

    .

    Microsoft Windows 7 專業版

    Boot Device: \Device\HarddiskVolume1

    Install Date: 16/6/2011 14:45:59

    System Uptime: 13/3/2013 13:27:33 (3 hours ago)

    .

    Motherboard: LENOVO | | 4286RY6

    Processor: Intel® Core i5-2410M CPU @ 2.30GHz | CPU | 782/100mhz

    .

    ==== Disk Partitions =========================

    .

    C: is FIXED (NTFS) - 285 GiB total, 82.639 GiB free.

    Q: is FIXED (NTFS) - 12 GiB total, 2.389 GiB free.

    .

    ==== Disabled Device Manager Items =============

    .

    ==== System Restore Points ===================

    .

    RP117: 28/2/2013 3:00:23 - Windows Update

    RP118: 13/3/2013 13:02:02 - Windows Update

    RP119: 13/3/2013 13:07:52 - Windows Update

    RP120: 13/3/2013 13:14:17 - Windows Update

    .

    ==== Installed Programs ======================

    .

    64 Bit HP CIO Components Installer

    7-Zip 4.65

    Adobe Flash Player 11 ActiveX

    Adobe Reader X (10.1.6) - Chinese Traditional

    Apple Mobile Device Support

    Apple Software Update

    Apple 應用程式支援

    Bing Bar

    BitComet(比特彗星) 1.35 64-bit

    Bonjour

    Broadcom InConcert Maestro

    Conexant 20672 SmartAudio HD

    Create Recovery Media

    CutePDF Writer 2.8

    Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

    Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7

    Garena 英雄聯盟台灣

    Garena 競時通

    HP LaserJet Professional M1530 MFP Series

    HP LJ M1530 MFP Series HP Scan

    Integrated Camera Driver Installer Package Ver.1.1.0.1141

    Integrated Camera TWAIN

    Intel PROSet Wireless

    Intel® Control Center

    Intel® Identity Protection Technology 1.0.74.0

    Intel® Management Engine Components

    Intel® Network Connections Drivers

    Intel® Processor Graphics

    Intel® PROSet/無線 WiFi 軟體

    IrfanView (remove only)

    iTools

    iTunes

    Japanese Fonts Support For Adobe Reader X

    Java Auto Updater

    Java 6 Update 33

    League of Legends

    Lenovo Auto Scroll Utility

    Lenovo Patch Utility

    Lenovo Patch Utility 64 bit

    Lenovo Screen Reading Optimizer

    Lenovo System Interface Driver

    Lenovo ThinkVantage Toolbox

    Lenovo User Guide

    Lenovo Warranty Information

    Lenovo Welcome

    LiveUpdate 3.3 (Symantec Corporation)

    Message Center Plus

    Microsoft .NET Framework 4 Client Profile

    Microsoft .NET Framework 4 Extended

    Microsoft Office 2010 Service Pack 1 (SP1)

    Microsoft Office Access MUI (Chinese (Traditional)) 2010

    Microsoft Office Excel MUI (Chinese (Traditional)) 2010

    Microsoft Office Home and Business 2010

    Microsoft Office IME (Chinese (Traditional)) 2010

    Microsoft Office Office 64-bit Components 2010

    Microsoft Office OneNote MUI (Chinese (Traditional)) 2010

    Microsoft Office Outlook Connector

    Microsoft Office Outlook MUI (Chinese (Traditional)) 2010

    Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2010

    Microsoft Office Proof (Chinese (Traditional)) 2010

    Microsoft Office Proof (English) 2010

    Microsoft Office Proofing (Chinese (Traditional)) 2010

    Microsoft Office Publisher MUI (Chinese (Traditional)) 2010

    Microsoft Office Shared 64-bit MUI (Chinese (Traditional)) 2010

    Microsoft Office Shared MUI (Chinese (Traditional)) 2010

    Microsoft Office Single Image 2010

    Microsoft Office Word MUI (Chinese (Traditional)) 2010

    Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit

    Microsoft Silverlight

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2005 Redistributable (x64)

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319

    Mozilla Firefox 18.0 (x86 zh-TW)

    Mozilla Maintenance Service

    On Screen Display

    Pando Media Booster

    RapidBoot

    Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7

    RICOH_Media_Driver_v2.14.18.01

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

    Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

    Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

    Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition

    Security Update for Microsoft Filter Pack 2.0 (KB2553501) 32-Bit Edition

    Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553091)

    Security Update for Microsoft Office 2010 (KB2553096)

    Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition

    Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition

    Security Update for Microsoft OneNote 2010 (KB2760600) 32-Bit Edition

    Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition

    Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition

    Solid Converter PDF

    Symantec Endpoint Protection

    System Update

    ThinkPad Bluetooth with Enhanced Data Rate Software

    ThinkPad FullScreen Magnifier

    ThinkPad Power Management Driver

    ThinkPad Power Manager

    ThinkPad UltraNav Driver

    ThinkPad UltraNav Utility

    ThinkVantage Access Connections

    ThinkVantage Active Protection System

    ThinkVantage AutoLock

    ThinkVantage Communications Utility

    ThinkVantage 指紋軟體

    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

    Update for Microsoft .NET Framework 4 Extended (KB2468871)

    Update for Microsoft .NET Framework 4 Extended (KB2533523)

    Update for Microsoft .NET Framework 4 Extended (KB2600217)

    Update for Microsoft Office 2010 (KB2494150)

    Update for Microsoft Office 2010 (KB2553065)

    Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2566458)

    Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2598241) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition

    Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition

    Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition

    Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition

    Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition

    Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition

    Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition

    Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition

    Windows Driver Package - Intel (e1cexpress) Net (12/21/2010 11.8.84.0)

    Windows Driver Package - Intel (MEIx64) System (10/19/2010 7.0.0.1144)

    Windows Driver Package - Intel System (09/10/2010 9.2.0.1011)

    Windows Driver Package - Intel System (10/04/2010 9.2.0.1015)

    Windows Driver Package - Intel USB (09/16/2010 9.2.0.1013)

    Windows Driver Package - Lenovo 1.62.00.00 (01/19/2011 1.62.00.00)

    Windows Driver Package - Synaptics (SynTP) Mouse (03/24/2011 15.2.19.0)

    Windows Live Mesh ActiveX Control for Remote Connections

    WinRAR 4.00 (32 位元)

    用于?程?接的 Windows Live Mesh ActiveX 控件(?体中文)

    快播 5.7.128

    適用遠端連線的 Windows Live Mesh ActiveX 控制項

    .

    ==== End Of File ===========================

    DDS

    DDS (Ver_2012-11-20.01) - NTFS_AMD64

    Internet Explorer: 9.0.8112.16470

    Run by user at 16:14:41 on 2013-03-13

    Microsoft Windows 7 專業版 6.1.7601.1.950.852.3076.18.3979.1931 [GMT 8:00]

    .

    AV: Symantec Endpoint Protection *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}

    SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    SP: Symantec Endpoint Protection *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

    FW: Symantec Endpoint Protection *Enabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}

    .

    ============== Running Processes ===============

    .

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\ibmpmsvc.exe

    C:\Windows\system32\svchost.exe -k RPCSS

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\System32\WUDFHost.exe

    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe

    C:\Program Files (x86)\360\360Safe\deepscan\zhudongfangyu.exe

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\system32\WLANExt.exe

    C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe

    C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

    C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe

    C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe

    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe

    C:\Windows\system32\CxAudMsg64.exe

    C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe

    C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe

    C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe

    C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe

    C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe

    C:\Windows\System32\svchost.exe -k HPZ12

    C:\Windows\System32\svchost.exe -k HPZ12

    C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

    C:\Windows\SysWOW64\SAsrv.exe

    C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe

    C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe

    C:\Windows\system32\taskhost.exe

    C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe

    C:\Windows\system32\taskeng.exe

    C:\Windows\system32\rundll32.exe

    C:\Windows\system32\Dwm.exe

    C:\PROGRA~1\Lenovo\Zoom\TPSCREX.EXE

    C:\Windows\SysWOW64\rundll32.exe

    C:\Windows\Explorer.EXE

    C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE

    C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe

    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SmcGui.exe

    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Program Files\CONEXANT\ForteConfig\fmapp.exe

    C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe

    C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe

    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

    C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

    C:\Windows\system32\taskeng.exe

    C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe

    C:\Windows\SysWOW64\rundll32.exe

    C:\Windows\system32\rundll32.exe

    C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe

    C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SRORest.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\QvodPlayer\QvodTerminal.exe

    C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe

    C:\Windows\system32\SearchIndexer.exe

    C:\Windows\SysWOW64\RunDll32.exe

    C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe

    C:\Windows\system32\wbem\unsecapp.exe

    C:\Program Files (x86)\Lenovo\System Update\SUService.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe

    C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_6_602_180_ActiveX.exe

    C:\QvodPlayer\QvodPlayer.exe

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Windows\system32\svchost.exe -k defragsvc

    C:\Windows\SysWOW64\notepad.exe

    C:\Windows\system32\SearchProtocolHost.exe

    C:\Windows\system32\SearchFilterHost.exe

    C:\Windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\cscript.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = about:blank

    uSearch Bar = Preserve

    mWinlogon: Userinit = userinit.exe

    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

    BHO: QvodExtend: {A8502600-B272-4F68-A67B-A0305D46D297} - C:\QvodPlayer\QvodExtend\5.0.83.0\QvodExtend.dll

    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

    BHO: SafeMon Class: {B69F34DD-F0F9-42DC-9EDD-957187DA688D} - C:\Program Files (x86)\360\360Safe\safemon\safemon.dll

    BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    BHO: BHOImpl Class: {E1499FE7-129D-4B6E-B681-DDF21E14172C} - C:\Users\user\Documents\iTools\Plugin\iToolsBHO.dll

    uRun: [GarenaPlus] "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch

    mRun: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor

    mRun: [ccApp] "C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe"

    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

    mRun: [360Safetray] "C:\Program Files (x86)\360\360Safe\safemon\360Tray.exe" /start

    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

    uPolicies-Explorer: NoDriveTypeAutoRun = dword:221

    mPolicies-Explorer: NoActiveDesktop = dword:1

    mPolicies-Explorer: NoActiveDesktopChanges = dword:1

    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

    mPolicies-System: ConsentPromptBehaviorUser = dword:3

    mPolicies-System: EnableUIADesktopToggle = dword:0

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    TCP: NameServer = 192.168.0.1

    TCP: Interfaces\{6AE36D71-4DBC-41B9-AA1B-CA156B2B0288} : DHCPNameServer = 61.130.254.34 61.130.254.35

    TCP: Interfaces\{6F04BDE2-2C2D-4FA5-9EC5-EE83887243B9} : DHCPNameServer = 192.168.0.1

    TCP: Interfaces\{A09A1672-17B8-44F7-91B0-BDED56960A5E} : DHCPNameServer = 27.109.112.20 203.118.242.92

    TCP: Interfaces\{B987ED02-8566-4B17-A786-41D9EB92A84D}\662716E6B697D274D2755405 : DHCPNameServer = 192.168.11.1

    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    SSODL: WebCheck - <orphaned>

    LSA: Notification Packages = scecli ACGina C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

    x64-BHO: QvodExtend: {A8502600-B272-4F68-A67B-A0305D46D298} - C:\QvodPlayer\QvodExtend\5.0.83.0\QvodExtend_x64.dll

    x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

    x64-BHO: BHOImpl Class: {E1499FE7-129D-4B6E-B681-DDF21E14172C} - C:\Users\user\Documents\iTools\Plugin\iToolsBHO64.dll

    x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

    x64-Run: [TpShocks] TpShocks.exe

    x64-Run: [ForteConfig] C:\Program Files\Conexant\ForteConfig\fmapp.exe

    x64-Run: [LENOVO.TPKNRRES] C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe

    x64-Run: [ALCKRESI.EXE] C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE

    x64-Run: [smartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t

    x64-Run: [AcWin7Hlpr] C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe

    x64-Run: [PSQLLauncher] "C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" /startup

    x64-Run: [igfxTray] C:\Windows\System32\igfxtray.exe

    x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe

    x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe

    x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm

    x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    x64-Notify: igfxcui - igfxdev.dll

    x64-Notify: psfus - C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll

    x64-SSODL: WebCheck - <orphaned>

    .

    ================= FIREFOX ===================

    .

    FF - ProfilePath - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mckmus9n.default\

    FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL

    FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL

    FF - plugin: C:\Program Files (x86)\360\360Safe\MobileMgr\np360MMPlugIn.dll

    FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

    FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll

    FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

    FF - plugin: C:\QvodPlayer\npQvodInsert.dll

    FF - plugin: C:\QvodPlayer\npShareModule.dll

    FF - plugin: C:\Users\user\Documents\iTools\Plugin\npiTools.dll

    FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll

    FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

    FF - ExtSQL: 2013-03-13 13:21; {635abd67-4fe9-1b23-4f01-e679fa7484c1}; C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\mckmus9n.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 DzHDD64;DzHDD64;C:\Windows\System32\drivers\DZHDD64.SYS [2011-5-20 31344]

    R0 TPDIGIMN;TPDIGIMN;C:\Windows\System32\drivers\ApsHM64.sys [2011-3-29 23664]

    R1 360AntiHacker;360Safe Anti Hacker Service;C:\Windows\System32\drivers\360AntiHacker64.sys [2013-3-13 62432]

    R1 360Box64;360Box mini-filter driver;C:\Windows\System32\drivers\360Box64.sys [2013-3-13 297336]

    R1 360Camera;360Safe Camera Filter Service;C:\Windows\System32\drivers\360Camera64.sys [2013-3-13 40688]

    R1 360FsFlt;360FsFlt mini-filter driver;C:\Windows\System32\drivers\360FsFlt.sys [2013-3-13 211336]

    R1 360netmon;360netmon;C:\Windows\System32\drivers\360netmon.sys [2013-3-13 57984]

    R1 BAPIDRV;BAPIDRV;C:\Windows\System32\drivers\BAPIDRV64.SYS [2013-3-13 188808]

    R1 lenovo.smi;Lenovo System Interface Driver;C:\Windows\System32\drivers\smiifx64.sys [2011-1-21 15472]

    R1 PHCORE;PHCORE;C:\Program Files\Lenovo\RapidBoot\PHCORE64.sys [2011-7-8 32104]

    R2 CxAudMsg;Conexant Audio Message Service;C:\Windows\System32\CxAudMsg64.exe [2011-5-20 198784]

    R2 jhi_service;Intel® Identity Protection Technology Host Interface Service;C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe [2011-2-7 210896]

    R2 LENOVO.CAMMUTE;Lenovo Camera Mute;C:\Program Files\Lenovo\Communications Utility\CamMute.exe [2011-11-3 41832]

    R2 LENOVO.MICMUTE;Lenovo Microphone Mute;C:\Program Files\Lenovo\HOTKEY\micmute.exe [2011-11-10 101736]

    R2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction;C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [2011-11-3 60264]

    R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll;C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe [2011-11-10 133992]

    R2 risdxc;risdxc;C:\Windows\System32\drivers\risdxc64.sys [2011-5-20 101888]

    R2 SAService;Conexant SmartAudio service;C:\Windows\System32\SAsrv.exe --> C:\Windows\System32\SAsrv.exe [?]

    R2 SCPDFReadSpool;SolidConverterPDFReadSpool;C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe [2012-3-16 193352]

    R2 smihlp2;SMI Helper Driver (smihlp2);C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [2011-5-30 13128]

    R2 SROSVC;Screen Reading Optimizer Service Program;C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [2011-5-20 443240]

    R2 Symantec AntiVirus;Symantec Endpoint Protection;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe [2009-9-17 2477304]

    R2 TPHKLOAD;Lenovo Hotkey Client Loader;C:\Program Files\Lenovo\HOTKEY\tphkload.exe [2011-11-10 145256]

    R2 TPHKSVC;On Screen Display;C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe [2011-11-10 142696]

    R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-10-4 2656280]

    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-10-28 138912]

    S2 AMPPALR3;IntelR CentrinoR Wireless BluetoothR 3.0 + High Speed Service;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-8-8 1166848]

    S2 BTHSSecurityMgr;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Security Service;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-6-3 134928]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-19 130384]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-19 138576]

    S2 HyperW7Svc;HyperW7 Service;C:\Program Files\Lenovo\RapidBoot\HyperW7Svc64.exe [2011-7-8 144232]

    S3 5U877;USB Video Device;C:\Windows\System32\drivers\5U877.sys [2011-5-20 166528]

    S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-3-2 183560]

    S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service;C:\Program Files\BitComet\tools\BitCometService.exe -service --> C:\Program Files\BitComet\tools\BitCometService.exe -service [?]

    S3 BTWAMPFL;BTWAMPFL;C:\Windows\System32\drivers\btwampfl.sys [2011-5-20 437288]

    S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2011-5-20 39976]

    S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2010-11-21 71168]

    S3 DozeSvc;Lenovo Doze Mode Service;C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [2011-5-20 478056]

    S3 ImeDictUpdateService;Microsoft IME Dictionary Update;C:\Program Files\Common Files\Microsoft Shared\IME14\SHARED\IMEDICTUPDATE.EXE [2010-10-20 83312]

    S3 Netaapl;Apple Mobile Device Ethernet Service;C:\Windows\System32\drivers\netaapl64.sys [2011-8-2 22528]

    S3 PCDSRVC{127174DC-C366ED8B-06020000}_0;PCDSRVC{127174DC-C366ED8B-06020000}_0 - PCDR Kernel Mode Service Helper Driver;C:\Program Files\PC-Doctor\pcdsrvc_x64.pkms [2010-8-12 24560]

    S3 pmxdrv;pmxdrv;C:\Windows\System32\drivers\pmxdrv.sys [2011-5-20 31152]

    S3 Power Manager DBC Service;Power Manager DBC Service;C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe [2011-5-20 89152]

    S3 PwmEWSvc;Cisco EnergyWise Enabler;C:\Program Files (x86)\ThinkPad\Utilities\PWMEWSVC.exe [2011-10-4 175168]

    S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]

    S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-21 59392]

    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-21 31232]

    S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]

    S3 WatAdminSvc;Windows 啟用技術服務;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-7-5 1255736]

    .

    =============== Created Last 30 ================

    .

    2013-03-13 05:29:45 -------- d-sh--r- C:\360SANDBOX

    2013-03-13 05:21:04 -------- d-----w- C:\Users\user\AppData\Local\Mozilla

    2013-03-13 05:14:36 19968 ----a-w- C:\Windows\System32\drivers\usb8023.sys

    2013-03-13 05:02:59 887808 ----a-w- C:\Program Files\Internet Explorer\iedvtool.dll

    2013-03-13 05:02:59 678912 ----a-w- C:\Program Files (x86)\Internet Explorer\iedvtool.dll

    2013-03-13 05:00:30 -------- d-----w- C:\Users\user\AppData\Roaming\360mobilemgr

    2013-03-13 04:51:23 62432 ----a-w- C:\Windows\System32\drivers\360AntiHacker64.sys

    2013-03-13 04:47:18 40688 ----a-w- C:\Windows\System32\drivers\360Camera64.sys

    2013-03-13 04:42:07 -------- d-----w- C:\ProgramData\360safe

    2013-03-13 04:41:52 297336 ----a-w- C:\Windows\System32\drivers\360Box64.sys

    2013-03-13 04:41:15 -------- d-----w- C:\Users\user\AppData\Roaming\360Login

    2013-03-13 04:41:11 39680 ----a-w- C:\Windows\System32\drivers\360LanProtect.sys

    2013-03-13 04:41:10 211336 ----a-w- C:\Windows\System32\drivers\360FsFlt.sys

    2013-03-13 04:41:10 19800 ----a-w- C:\Windows\System32\drivers\efimon.sys

    2013-03-13 04:41:09 188808 ----a-w- C:\Windows\System32\drivers\BAPIDRV64.SYS

    2013-03-13 04:41:07 146776 ----a-w- C:\Windows\SysWow64\360SoftMgr.cpl

    2013-03-13 04:41:05 57984 ----a-w- C:\Windows\System32\drivers\360netmon.sys

    2013-03-13 04:40:13 -------- d-----w- C:\Program Files (x86)\360

    2013-03-13 04:40:07 -------- d-----w- C:\Users\user\AppData\Roaming\360Safe

    2013-03-10 12:02:51 -------- d-----w- C:\Downloads

    2013-03-10 12:02:35 -------- d-----w- C:\Users\user\AppData\Roaming\BitComet

    2013-03-10 12:02:32 -------- d-----w- C:\Program Files\BitComet

    2013-02-27 10:23:24 5553512 ----a-w- C:\Windows\System32\ntoskrnl.exe

    2013-02-27 10:23:23 3967848 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe

    2013-02-27 10:23:22 3913064 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe

    2013-02-27 07:35:04 7680 ----a-w- C:\Windows\SysWow64\instnm.exe

    2013-02-27 07:35:04 5120 ----a-w- C:\Windows\SysWow64\wow32.dll

    2013-02-27 07:35:04 25600 ----a-w- C:\Windows\SysWow64\setup16.exe

    2013-02-27 07:35:04 2048 ----a-w- C:\Windows\SysWow64\user.exe

    2013-02-27 07:35:04 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll

    2013-02-27 07:35:02 215040 ----a-w- C:\Windows\System32\winsrv.dll

    2013-02-26 07:47:49 3153408 ----a-w- C:\Windows\System32\win32k.sys

    2013-02-26 07:19:21 288088 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS

    2013-02-26 07:19:21 1913192 ----a-w- C:\Windows\System32\drivers\tcpip.sys

    2013-02-26 06:57:06 996352 ----a-w- C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll

    2013-02-26 06:57:06 768000 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll

    .

    ==================== Find3M ====================

    .

    2013-03-13 02:08:35 73432 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

    2013-03-13 02:08:35 693976 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

    2013-02-12 05:45:24 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

    2013-02-12 05:45:22 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

    2013-02-12 05:45:22 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll

    2013-02-12 05:45:22 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll

    2013-02-12 04:48:31 474112 ----a-w- C:\Windows\apppatch\AcSpecfc.dll

    2013-02-12 04:48:26 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll

    2013-02-02 06:57:02 2312704 ----a-w- C:\Windows\System32\jscript9.dll

    2013-02-02 06:47:24 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

    2013-02-02 06:47:19 1392128 ----a-w- C:\Windows\System32\wininet.dll

    2013-02-02 06:42:18 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

    2013-02-02 06:41:51 599040 ----a-w- C:\Windows\System32\vbscript.dll

    2013-02-02 06:38:01 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

    2013-02-02 03:38:35 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

    2013-02-02 03:30:32 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

    2013-02-02 03:30:21 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

    2013-02-02 03:26:47 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

    2013-02-02 03:26:21 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

    2013-02-02 03:23:28 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

    2013-01-16 02:07:14 770384 ----a-w- C:\Windows\SysWow64\msvcr100.dll

    2013-01-16 02:07:14 421200 ----a-w- C:\Windows\SysWow64\msvcp100.dll

    2013-01-13 21:17:03 9728 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

    2013-01-13 21:17:02 2560 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

    2013-01-13 21:16:42 10752 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

    2013-01-13 21:12:46 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll

    2013-01-13 21:11:21 4096 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll

    2013-01-13 21:11:08 5632 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll

    2013-01-13 21:11:07 5632 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

    2013-01-13 21:11:07 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll

    2013-01-13 21:11:07 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll

    2013-01-13 20:35:31 9728 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

    2013-01-13 20:35:31 2560 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll

    2013-01-13 20:35:18 10752 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll

    2013-01-13 20:32:07 3584 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll

    2013-01-13 20:31:48 4096 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll

    2013-01-13 20:31:41 5632 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll

    2013-01-13 20:31:40 5632 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

    2013-01-13 20:31:40 3072 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll

    2013-01-13 20:31:40 3072 ---ha-w- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll

    2013-01-13 20:31:00 1247744 ----a-w- C:\Windows\SysWow64\DWrite.dll

    2013-01-13 20:22:22 1988096 ----a-w- C:\Windows\SysWow64\d3d10warp.dll

    2013-01-13 20:20:31 293376 ----a-w- C:\Windows\SysWow64\dxgi.dll

    2013-01-13 20:09:00 249856 ----a-w- C:\Windows\SysWow64\d3d10_1core.dll

    2013-01-13 20:08:43 220160 ----a-w- C:\Windows\SysWow64\d3d10core.dll

    2013-01-13 20:08:35 1504768 ----a-w- C:\Windows\SysWow64\d3d11.dll

    2013-01-13 19:59:04 1643520 ----a-w- C:\Windows\System32\DWrite.dll

    2013-01-13 19:58:28 1175552 ----a-w- C:\Windows\System32\FntCache.dll

    2013-01-13 19:54:01 604160 ----a-w- C:\Windows\SysWow64\d3d10level9.dll

    2013-01-13 19:53:58 207872 ----a-w- C:\Windows\SysWow64\WindowsCodecsExt.dll

    2013-01-13 19:53:14 187392 ----a-w- C:\Windows\SysWow64\UIAnimation.dll

    2013-01-13 19:51:30 2565120 ----a-w- C:\Windows\System32\d3d10warp.dll

    2013-01-13 19:49:17 363008 ----a-w- C:\Windows\System32\dxgi.dll

    2013-01-13 19:48:47 161792 ----a-w- C:\Windows\SysWow64\d3d10_1.dll

    2013-01-13 19:46:25 1080832 ----a-w- C:\Windows\SysWow64\d3d10.dll

    2013-01-13 19:43:21 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll

    2013-01-13 19:38:39 333312 ----a-w- C:\Windows\System32\d3d10_1core.dll

    2013-01-13 19:38:32 1887232 ----a-w- C:\Windows\System32\d3d11.dll

    2013-01-13 19:38:21 296960 ----a-w- C:\Windows\System32\d3d10core.dll

    2013-01-13 19:37:57 3419136 ----a-w- C:\Windows\SysWow64\d2d1.dll

    2013-01-13 19:25:04 245248 ----a-w- C:\Windows\System32\WindowsCodecsExt.dll

    2013-01-13 19:24:33 648192 ----a-w- C:\Windows\System32\d3d10level9.dll

    2013-01-13 19:24:30 221184 ----a-w- C:\Windows\System32\UIAnimation.dll

    2013-01-13 19:20:42 194560 ----a-w- C:\Windows\System32\d3d10_1.dll

    2013-01-13 19:20:04 1238528 ----a-w- C:\Windows\System32\d3d10.dll

    2013-01-13 19:15:40 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll

    2013-01-13 19:10:36 3928064 ----a-w- C:\Windows\System32\d2d1.dll

    2013-01-13 19:02:06 417792 ----a-w- C:\Windows\SysWow64\WMPhoto.dll

    2013-01-13 18:34:58 364544 ----a-w- C:\Windows\SysWow64\XpsGdiConverter.dll

    2013-01-13 18:32:43 465920 ----a-w- C:\Windows\System32\WMPhoto.dll

    2013-01-13 18:09:52 522752 ----a-w- C:\Windows\System32\XpsGdiConverter.dll

    2013-01-13 17:26:42 1158144 ----a-w- C:\Windows\SysWow64\XpsPrint.dll

    2013-01-13 17:05:09 1682432 ----a-w- C:\Windows\System32\XpsPrint.dll

    2013-01-04 06:11:21 2284544 ----a-w- C:\Windows\SysWow64\msmpeg2vdec.dll

    2013-01-04 06:11:13 2776576 ----a-w- C:\Windows\System32\msmpeg2vdec.dll

    2013-01-04 04:43:21 44032 ----a-w- C:\Windows\apppatch\acwow64.dll

    2012-12-16 17:11:22 46080 ----a-w- C:\Windows\System32\atmlib.dll

    2012-12-16 14:45:03 367616 ----a-w- C:\Windows\System32\atmfd.dll

    2012-12-16 14:13:28 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll

    2012-12-16 14:13:20 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll

    .

    ============= FINISH: 16:15:47.79 ===============

    defogger_disable

    defogger_disable by jpshortstuff (23.02.10.1)

    Log created at 16:06 on 13/03/2013 (user)

    Checking for autostart values...

    HKCU\~\Run values retrieved.

    HKLM\~\Run values retrieved.

    Checking for services/drivers...

    -=E.O.F=-

    Thanks

    IE problem

    in Resolved Malware Removal Logs

    Posted

    Hello all,

    This is my first post as you can see, but having an issue that I cannot seem to resolve and would really appreciate any help.

    Really I have no idea how this occurred but I seem to be getting redirected to this url when trying to access other websites: "http://5a4bccdc.linkbucks.com/url/http://www.whicheverwebsiteimgoingto.com"

    Also, I regularly get pop-up going to what seems to mostly be torrent websites and what appear to be fake game websites.

    The course of action I have taken before posting and asking for additional help.

    http://forums.malwarebytes.org/index.php?showtopic=117686

    same as this case......can anyone help me to fix this problem?

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.