Please help with this. Malwarebytes is not helping at this time: DDS (Ver_10-03-17.01) - NTFSx86 Run by Michael at 10:42:03.32 on Sun 10/03/2010 Internet Explorer: 8.0.7600.16385 Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.2039.1230 [GMT -5:00] ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\Alwil Software\Avast5\AvastSvc.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\sppsvc.exe C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\igfxpers.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\ProgramData\5ad4cd\SM5ad_2039.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe C:\Windows\system32\SearchProtocolHost.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Users\Michael\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\51TUHJ9F\dds[1].scr C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== uStart Page = about:blank uRun: [smart Security] "c:\programdata\5ad4cd\SM5ad_2039.exe" /s /d mRun: [avast5] "c:\program files\alwil software\avast5\avastUI.exe" /nogui mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript mRun: [igfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Notify: igfxcui - igfxdev.dll ============= SERVICES / DRIVERS =============== R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2010-10-2 165584] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2010-10-2 17744] R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-10-2 50768] R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2010-10-2 40384] R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2010-10-2 40384] R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2010-10-2 40384] R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888] R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-10-2 38224] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-10-2 136176] S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992] =============== Created Last 30 ================ 2010-10-03 15:24:42 1002008 ----a-w- c:\windows\system32\igxpun.exe 2010-10-03 15:24:42 0 d-----w- c:\windows\system32\x64 2010-10-03 15:23:48 172032 ----a-w- c:\windows\system32\wintrust.dll 2010-10-03 15:23:47 132608 ----a-w- c:\windows\system32\cabview.dll 2010-10-03 15:21:47 0 d-sh--w- c:\users\michael\appdata\roaming\Smart Security 2010-10-02 23:10:45 0 d-----w- c:\windows\Panther 2010-10-02 23:10:33 8192 --sha-r- C:\BOOTSECT.BAK 2010-10-02 23:10:31 383562 --sha-r- C:\bootmgr 2010-10-02 23:10:31 0 d-sh--w- C:\Boot 2010-10-02 23:01:35 0 d-----w- C:\Windows.old 2010-10-02 22:22:25 3360 ------w- C:\bootsqm.dat 2010-10-02 20:30:12 713888 ----a-w- c:\windows\system32\PerfStringBackup.INI 2010-10-02 20:29:56 0 d-----w- c:\windows\system32\wbem\Performance 2010-10-02 19:24:06 50768 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2010-10-02 19:23:17 0 d-sh--w- c:\windows\Installer 2010-10-02 19:23:10 38848 ----a-w- c:\windows\avastSS.scr 2010-10-02 19:23:07 0 d-----w- c:\programdata\Alwil Software 2010-10-02 19:22:42 0 d-----w- c:\users\michael\appdata\roaming\Malwarebytes 2010-10-02 19:22:34 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-10-02 19:22:33 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-10-02 19:22:33 0 d-----w- c:\programdata\Malwarebytes 2010-10-02 19:22:33 0 d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-10-02 19:22:03 221568 ------w- c:\windows\system32\MpSigStub.exe 2010-10-02 19:18:46 0 d-sh--w- c:\programdata\SMRCS 2010-10-02 19:18:23 0 d-sh--w- c:\programdata\5ad4cd ==================== Find3M ==================== 2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat 2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat 2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat 2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat 2009-07-14 04:41:57 174 --sha-w- c:\program files\desktop.ini 2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat 2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat 2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat 2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat 2009-06-10 21:26:35 9633792 --sha-r- c:\windows\fonts\StaticCache.dat 2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe ============= FINISH: 10:42:16.23 ===============
