Jump to content

Lin C

Members
  • Posts

    1
  • Joined

  • Last visited

Reputation

0 Neutral
  1. I am not very computer literate, but do my best, yesterday my computer crashed, and i had the blue screen.. ARGH, when trying to restart, it will now show the "windows" screen and then flash a blue screen and go back to the enter in safe mode, last know good config menu. I was not able to get back in the computer using any of those, so i pressed F8 and am in my system, but only by using the "debugging mode" I checked my windows update, and i did not have the XP Service Pack 3 installed, so i tried to install that, but it states that it can not install due to the file, ATAPI.SYS being in use, i tried closing every program, and still received the same error, I do have Daemon tools but it is not on my add/remove programs, and when i go to its file and try to unistall it will go about halfway through the process then stop. I am not sure if this is an issue with the other issues or not, it appears i have some pretty nasty stuff, i did run the Malwarebytes, and will attach the log, i see quite a few things on it, i did clear all infections, and am now running the scan for a 2nd time to see if it has removed the problems, anyway, here is the Original Malwarebytes log and the hijackthis log ran after cleaning the 1st time with Malwarebytes Malwarebytes' Anti-Malware 1.41 Database version: 3120 Windows 5.1.2600 Service Pack 2 11/8/2009 5:16:54 PM mbam-log-2009-11-08 (17-16-44)2 Scan type: Full Scan (C:\|D:\|) Objects scanned: 228727 Time elapsed: 1 hour(s), 10 minute(s), 30 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 11 Registry Values Infected: 2 Registry Data Items Infected: 0 Folders Infected: 12 Files Infected: 100 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CURRENT_USER\SOFTWARE\AvScan (Trojan.FakeAlert) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\gvtl (Malware.Trace) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Gamevance (Adware.Gamevance) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> No action taken. Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> No action taken. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Documents and Settings\Owner.family\Application Data\FunWebProducts (Adware.MyWebSearch) -> No action taken. C:\Documents and Settings\Owner.family\Application Data\FunWebProducts\Data (Adware.MyWebSearch) -> No action taken. C:\Documents and Settings\Owner.family\Application Data\FunWebProducts\Data\Owner (Adware.MyWebSearch) -> No action taken. C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> No action taken. C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> No action taken. C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> No action taken. C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> No action taken. C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> No action taken. C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> No action taken. C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> No action taken. C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> No action taken. C:\WINDOWS\system32\twain32 (Backdoor.Bot) -> No action taken. Files Infected: C:\Documents and Settings\Owner.family\Local Settings\Temp\trt.exe (Rootkit.TDSS) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016616.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016634.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016617.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016620.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016624.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016626.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016630.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016631.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016633.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016635.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016636.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016637.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016638.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016640.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016641.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016642.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016643.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016644.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016645.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016646.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP128\A0016647.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP148\A0018583.dll (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019037.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019012.dll (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019013.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019020.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019022.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019026.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019027.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019029.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019030.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019031.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019032.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019033.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019034.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019036.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019038.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019039.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019040.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019041.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019042.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019043.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019044.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP158\A0019045.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP161\A0019105.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP161\A0019106.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP161\A0019108.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP167\A0019382.dll (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP204\A0023649.dll (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP204\A0023650.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP206\A0023739.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP206\A0023740.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP206\A0023741.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP206\A0023742.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP206\A0023743.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP206\A0023744.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP206\A0023747.DLL (Adware.FunWeb) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026540.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026516.scr (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026518.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026523.SCR (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026524.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026526.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026531.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026532.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026533.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026534.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026535.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026536.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026538.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026539.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026541.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026542.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026543.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP222\A0026544.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026587.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026580.dll (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026581.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026583.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026584.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026585.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026586.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026588.EXE (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026589.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP223\A0026590.DLL (Adware.MyWebSearch) -> No action taken. C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP227\A0026636.dll (Adware.MyWebSearch) -> No action taken. C:\WINDOWS\system32\spool\prtprocs\w32x86\1AC6.tmp (Rootkit.TDSS) -> No action taken. C:\WINDOWS\Temp\1AC7.tmp (Rootkit.TDSS) -> No action taken. C:\Documents and Settings\Owner.family\Application Data\FunWebProducts\Data\Owner\avatar.dat (Adware.MyWebSearch) -> No action taken. C:\Documents and Settings\Owner.family\Application Data\FunWebProducts\Data\Owner\outfit.dat (Adware.MyWebSearch) -> No action taken. C:\Documents and Settings\Owner.family\Application Data\FunWebProducts\Data\Owner\register.dat (Adware.MyWebSearch) -> No action taken. C:\Documents and Settings\Owner.family\Application Data\FunWebProducts\Data\Owner\zbucks.dat (Adware.MyWebSearch) -> No action taken. C:\Documents and Settings\Owner.family\Application Data\FunWebProducts\Data\Owner\zevents.dat (Adware.MyWebSearch) -> No action taken. C:\Program Files\MyWebSearch\bar\History\search3 (Adware.MyWebSearch) -> No action taken. C:\Program Files\MyWebSearch\bar\Settings\setting2.htm (Adware.MyWebSearch) -> No action taken. C:\Program Files\MyWebSearch\bar\Settings\settings.dat (Adware.MyWebSearch) -> No action taken. C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> No action taken. C:\WINDOWS\system32\twain32\local.ds (Backdoor.Bot) -> No action taken. C:\WINDOWS\system32\twain32\user.ds (Backdoor.Bot) -> No action taken. hijack this Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 5:44:10 PM, on 11/8/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Digital Media Reader\readericon45G.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe C:\WINDOWS\RTHDCPL.EXE C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Lexmark 1200 Series\lxczbmon.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\WINDOWS\arservice.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS C:\WINDOWS\system32\svchost.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = Empty R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: McAfee Anti-Phishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\program files\mcafee\spamkiller\mcapfbho.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll O2 - BHO: Gamevance Text - {BEAC7DC8-E106-4C6A-931E-5A42E7362883} - C:\Program Files\Gamevance\gvtl.dll (file missing) O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE O4 - HKLM\..\Run: [readericon] C:\Program Files\Digital Media Reader\readericon45G.exe O4 - HKLM\..\Run: [Reminder] %WINDIR%\Creator\Remind_XP.exe O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MSKDetct.exe /startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [VirusScan Online] \mcvsshld.exe O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [ErrorWiz] C:\Program Files\ErrorWiz\ErrorWiz.exe /scan O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKCU\..\Run: [Power2GoExpress] NA O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun O4 - HKCU\..\Run: [software Informer] "C:\Program Files\Software Informer\softinfo.exe" -autorun O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\Run: [AVScan] C:\Documents and Settings\Owner.family\Application Data\winav.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\RunOnce: [DAEMON Tools Pro 4.35.0306.0088 Setup] "C:\Documents and Settings\Owner.family\My Documents\Downloads\DAEMONToolsPro4350306.exe" O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Startup: PowerReg Scheduler.exe O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll O9 - Extra 'Tools' menuitem: McAfee Anti-Phishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {61A54BB0-F380-446F-8727-9AEA23711471} (CPlayFirstWeddingDashControl Object) - http://p.playfirst.com/play/game/weddingda...sh.1.0.0.55.cab O16 - DPF: {BAE1D8DF-0B35-47E3-A1E7-EEB3FF2ECD19} (CPlayFirstddfotgControl Object) - http://ak.imgfarm.com/images/iwon/games/pl...tg.1.0.0.33.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Google Update Service (gupdate1c9c9fbfe9dd2a0) (gupdate1c9c9fbfe9dd2a0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS -- End of file - 10867 bytes
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.