Jump to content

chops090

Members
 View Profile  See their activity

  • Posts

    1

  • Joined

  • Last visited

 Content Type 

Posts posted by chops090

    Infected can't write

    in Resolved Malware Removal Logs

    Posted

    cant write please heLP paste only

    DDS (Ver_2011-06-23.01) - NTFSx86

    Internet Explorer: 8.0.6001.18702

    Run by Mark at 16:24:58 on 2011-07-10

    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2814.1762 [GMT -4:00]

    .

    AV: Microsoft Security Essentials *Enabed/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

    .

    ============== Running Processes ===============

    .

    C:\WINDOWS\system32\svchost -k DcomLaunch

    svchost.exe

    c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

    C:\WINDOWS\System32\svchost.exe -k netsvcs

    svchost.exe

    svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\ehome\ehtray.exe

    C:\WINDOWS\system32\RUNDLL32.EXE

    C:\WINDOWS\stsystra.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

    svchost.exe

    C:\WINDOWS\eHome\ehRecvr.exe

    C:\WINDOWS\eHome\ehSched.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\WINDOWS\system32\nvsvc32.exe

    svchost.exe

    C:\WINDOWS\system32\dllhost.exe

    C:\WINDOWS\eHome\ehmsas.exe

    C:\WINDOWS\system32\utilman.exe

    C:\WINDOWS\system32\svchost.exe -k imgsvc

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\WINDOWS\explorer.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

    C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe

    C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://www.yahoo.com/

    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

    BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll

    BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

    uRun: [spybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe

    mRun: [ehTray] c:\windows\ehome\ehtray.exe

    mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

    mRun: [nwiz] nwiz.exe /install

    mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit

    mRun: [sigmatelSysTrayApp] stsystra.exe

    mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey

    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

    dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t

    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll

    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    TCP: DhcpNameServer = 24.247.24.53 66.189.0.100 24.178.162.3

    TCP: Interfaces\{2B6CBC0E-0EFB-4535-BFF1-2AD32381D88C} : DhcpNameServer = 24.247.24.53 66.189.0.100 24.178.162.3

    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

    Hosts: 127.0.0.1 www.spywareinfo.com

    .

    ============= SERVICES / DRIVERS ===============

    .

    R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-10-24 165264]

    R1 MpKsl6eab9b38;MpKsl6eab9b38;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0243f38b-e0be-4705-983d-75877cbe4d8b}\MpKsl6eab9b38.sys [2011-7-10 28752]

    R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]

    R4 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-4-5 39984]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]

    .

    =============== Created Last 30 ================

    .

    2011-07-10 19:09:55 -------- d--h--w- c:\windows\system32\GroupPolicy

    2011-07-10 16:17:59 28752 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0243f38b-e0be-4705-983d-75877cbe4d8b}\MpKsl6eab9b38.sys

    2011-07-10 03:17:51 -------- d-----w- c:\documents and settings\mark\local settings\application data\NPE

    2011-07-10 03:17:51 -------- d-----w- c:\documents and settings\all users\application data\Norton

    2011-07-10 00:51:03 7074640 ------w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{0243f38b-e0be-4705-983d-75877cbe4d8b}\mpengine.dll

    2011-07-06 15:13:12 -------- d-----w- c:\windows\system32\wbem\repository\FS

    2011-07-06 15:13:12 -------- d-----w- c:\windows\system32\wbem\Repository

    2011-06-16 23:11:46 105472 -c----w- c:\windows\system32\dllcache\mup.sys

    .

    ==================== Find3M ====================

    .

    2011-05-29 13:11:30 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

    2011-05-29 13:11:20 22712 ----a-w- c:\windows\system32\drivers\mbam.sys

    2011-05-24 23:14:10 222080 ------w- c:\windows\system32\MpSigStub.exe

    2011-05-02 15:31:52 692736 ----a-w- c:\windows\system32\inetcomm.dll

    2011-04-29 17:25:27 151552 ----a-w- c:\windows\system32\schannel.dll

    2011-04-29 17:25:27 151552 ----a-w- c:\windows\system32\schannel(2)(2).dll

    2011-04-29 16:19:43 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

    2011-04-26 14:11:12 11081728 ----a-w- c:\windows\system32\ieframe(2)(2).dll

    2011-04-25 16:11:12 916480 ----a-w- c:\windows\system32\wininet.dll

    2011-04-25 16:11:12 916480 ----a-w- c:\windows\system32\wininet(2)(2).dll

    2011-04-25 16:11:12 1211904 ----a-w- c:\windows\system32\urlmon(2)(2).dll

    2011-04-25 16:11:11 43520 ------w- c:\windows\system32\licmgr10.dll

    2011-04-25 16:11:11 1991680 ----a-w- c:\windows\system32\iertutil(2)(2).dll

    2011-04-25 16:11:11 1469440 ------w- c:\windows\system32\inetcpl.cpl

    2011-04-25 12:01:22 385024 ------w- c:\windows\system32\html.iec

    2011-04-21 13:37:43 105472 ----a-w- c:\windows\system32\drivers\mup.sys

    .

    ============= FINISH: 16:26:19.07 ===============

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.