Jump to content

omgkillmenow

Members
  • Posts

    5
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Here is the Attach.txt . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_11-03-05.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 1/3/2010 11:59:16 AM System Uptime: 4/6/2011 12:35:35 PM (1 hours ago) . Motherboard: Intel Corporation | | D865GSA Processor: Intel® Pentium® 4 CPU 3.00GHz | Socket 775 | 2995/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 78 GiB total, 39.109 GiB free. D: is FIXED (NTFS) - 71 GiB total, 68.051 GiB free. E: is CDROM () F: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: Description: Multimedia Audio Controller Device ID: PCI\VEN_8086&DEV_24D5&SUBSYS_0C4A8086&REV_02\3&267A616A&0&FD Manufacturer: Name: Multimedia Audio Controller PNP Device ID: PCI\VEN_8086&DEV_24D5&SUBSYS_0C4A8086&REV_02\3&267A616A&0&FD Service: . ==== System Restore Points =================== . RP143: 1/7/2011 11:47:27 PM - System Checkpoint RP144: 1/9/2011 3:17:39 PM - System Checkpoint RP145: 1/9/2011 1:16:08 PM - System Checkpoint RP146: 1/10/2011 5:04:25 PM - System Checkpoint RP147: 1/12/2011 8:21:45 PM - System Checkpoint RP148: 1/13/2011 8:46:56 PM - System Checkpoint RP149: 1/17/2011 4:26:42 PM - System Checkpoint RP150: 1/19/2011 2:46:42 PM - System Checkpoint RP151: 1/20/2011 5:44:50 PM - System Checkpoint RP152: 1/21/2011 6:42:07 PM - System Checkpoint RP153: 1/23/2011 2:12:18 PM - System Checkpoint RP154: 1/24/2011 6:45:19 PM - System Checkpoint RP155: 1/25/2011 7:01:30 PM - System Checkpoint RP156: 1/26/2011 7:56:21 PM - System Checkpoint RP157: 1/27/2011 10:44:28 AM - Removed Dealio Toolbar v4.1. RP158: 1/28/2011 11:39:58 AM - System Checkpoint RP159: 1/29/2011 12:39:58 PM - System Checkpoint RP160: 2/6/2011 3:49:59 PM - System Checkpoint RP161: 3/23/2011 2:32:16 AM - Removed Ask Toolbar. RP162: 3/23/2011 2:40:31 AM - Removed Google Earth. RP163: 3/23/2011 2:45:04 AM - Removed Realtek AC'97 Audio RP164: 3/23/2011 6:49:31 AM - Installed Envisioneer 6 - Express RP165: 3/24/2011 8:02:15 AM - System Checkpoint RP166: 3/25/2011 8:49:21 AM - System Checkpoint RP167: 3/26/2011 9:17:45 AM - System Checkpoint RP168: 3/27/2011 10:18:53 AM - System Checkpoint RP169: 3/27/2011 3:00:32 AM - System Checkpoint RP170: 3/28/2011 3:14:47 AM - System Checkpoint RP171: 3/29/2011 5:46:20 AM - System Checkpoint RP172: 3/30/2011 6:01:41 AM - System Checkpoint RP173: 3/31/2011 6:19:14 AM - System Checkpoint RP174: 4/1/2011 6:20:39 AM - System Checkpoint RP175: 4/2/2011 7:19:17 AM - System Checkpoint RP176: 4/3/2011 8:19:14 AM - System Checkpoint RP177: 4/4/2011 9:07:57 AM - System Checkpoint RP178: 4/5/2011 10:10:22 AM - System Checkpoint RP179: 4/6/2011 12:30:56 PM - System Checkpoint . ==== Installed Programs ====================== . %WS4_ARP_DISPLAY% 32 Bit HP CIO Components Installer Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 9.1 AIO_Scan Apple Application Support Apple Mobile Device Support Apple Software Update Ask Toolbar BitDefender Total Security 2009 Bonjour DJ_AIO_Software_min Envisioneer 6 - Express Facebook Plug-In FrostWire 4.21.1 Google Chrome Google Toolbar for Firefox Google Update Helper Google Updater Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) HP Deskjet All-In-One Software 9.0 HP Photosmart Essential iTunes Java 6 Update 13 Junk Mail filter update Logitech Desktop Messenger Logitech QuickCam Logitech
  2. OK here is the DDS.txt . DDS (Ver_11-03-05.01) - NTFSx86 Run by Administrator at 13:23:23.51 on Wed 04/06/2011 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.536 [GMT -7:00] . AV: BitDefender Antivirus *Enabled/Updated* {6C4BB89C-B0ED-4F41-A29C-4373888923BB} FW: BitDefender Firewall *Enabled* . ============== Running Processes =============== . C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\WINDOWS\Explorer.EXE C:\Documents and Settings\Administrator\Local Settings\Application Data\asq.exe svchost.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\WINDOWS\System32\svchost.exe -k HPZ12 C:\WINDOWS\System32\svchost.exe -k HPZ12 C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\Administrator\Desktop\dds.scr . ============== Pseudo HJT Report =============== . uStart Page = about:blank mStart Page = about:blank uInternet Settings,ProxyOverride = *.local BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~3\office12\GRA8E1~1.DLL BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll BHO: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: BitDefender Toolbar: {381ffde8-2394-4f90-b10d-fc6124a40f8c} - c:\program files\bitdefender\bitdefender 2009\IEToolbar.dll TB: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe" uRun: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe" uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [bDAgent] "c:\program files\bitdefender\bitdefender 2009\bdagent.exe" mRun: [bitDefender Antiphishing Helper] "c:\program files\bitdefender\bitdefender 2009\IEShow.exe" mRun: [Google Quick Search Box] "c:\program files\google\quick search box\GoogleQuickSearchBox.exe" /autorun mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\quickcam\Quickcam.exe" /hide mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe" StartupFolder: c:\docume~1\admini~1\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\desktop messenger\8876480\program\LogitechDesktopMessenger.exe IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\administrator\start menu\programs\imvu\Run IMVU.lnk IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\logitech\desktop messenger\8876480\program\GAPlugProtocol-8876480.dll Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~3\office12\GR99D3~1.DLL SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~3\office12\GRA8E1~1.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\docume~1\admini~1\applic~1\mozilla\firefox\profiles\mv9xnoz4.default\ FF - prefs.js: browser.startup.homepage - google.ca FF - plugin: c:\documents and settings\administrator\application data\facebook\npfbplugin_1_0_3.dll FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll FF - plugin: c:\program files\google\google updater\2.4.1851.5542\npCIDetect14.dll FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Ask Toolbar: toolbar@ask.com - %profile%\extensions\toolbar@ask.com FF - Ext: Google Toolbar for Firefox: {3112ca9c-de6d-4884-a869-9855de68056c} - %profile%\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff FF - Ext: Google Toolbar for Firefox: {3112ca9c-de6d-4884-a869-9855de68056c} - c:\documents and settings\all users\application data\google\toolbar for firefox\{3112ca9c-de6d-4884-a869-9855de68056c} FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\firefox\Ext . ============= SERVICES / DRIVERS =============== . R2 BDVEDISK;BDVEDISK;c:\program files\bitdefender\bitdefender 2009\BDVEDISK.sys [2008-10-6 82696] R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [2008-9-18 111112] R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [2009-2-12 104456] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-2 135664] S3 Arrakis3;BitDefender Arrakis Server;c:\program files\common files\bitdefender\bitdefender arrakis server\bin\Arrakis3.exe [2009-1-20 172032] . =============== Created Last 30 ================ . 2011-04-06 18:44:44 227965 --sha-w- c:\docume~1\admini~1\locals~1\applic~1\cgt.exe 2011-04-06 18:44:43 227965 --sha-w- c:\docume~1\admini~1\locals~1\applic~1\asq.exe 2011-03-23 13:54:18 -------- d-----w- c:\program files\Cadsoft 2011-03-23 13:54:18 -------- d-----w- c:\docume~1\alluse~1\applic~1\Cadsoft . ==================== Find3M ==================== . 2011-04-06 19:08:01 81984 ----a-w- c:\windows\system32\bdod.bin . ============= FINISH: 13:24:59.54 ===============
  3. Ok, so my computer is infected with XP Security 2011, and i've downloaded absolutely everything to get rid of it. I have download Malware Bytes and it shows up on my desktop, but when i click on it i press run, but then nothing happens NOTHING!!!! HELP
  4. Ok, so my computer is infected with XP Security 2011, annd i've downloaded absoulutley everything to get rid of it. I have download Malware Bytes and it shows up on my desktop, but when i click on it i press run, but then nothing happens NOTHING!!!! HELP
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.