Jump to content

mrkurtz

Members
 View Profile  See their activity

  • Posts

    5

  • Joined

  • Last visited

 Content Type 

Posts posted by mrkurtz

    search engine redirect virus

    in Resolved Malware Removal Logs

    Posted

    My computer redirects me to different pages(50% of the time its a yellowpages.com page) when i click on search results in google. Here are the logs as outlined in your stickys instructions. Thanks for your help!

    .

    DDS (Ver_2011-06-23.01) - NTFSAMD64

    Internet Explorer: 8.0.7600.16385

    Run by Zach Huber at 12:20:39 on 2011-07-31

    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3891.2417 [GMT -5:00]

    .

    AV: AntiVir Desktop *Enabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    SP: AntiVir Desktop *Enabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}

    .

    ============== Running Processes ===============

    .

    C:\windows\system32\wininit.exe

    C:\windows\system32\lsm.exe

    C:\windows\system32\svchost.exe -k DcomLaunch

    C:\windows\system32\svchost.exe -k RPCSS

    C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\windows\system32\svchost.exe -k netsvcs

    C:\windows\system32\svchost.exe -k LocalService

    C:\windows\system32\svchost.exe -k NetworkService

    C:\windows\system32\WLANExt.exe

    C:\windows\system32\conhost.exe

    C:\windows\System32\spoolsv.exe

    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

    C:\windows\system32\svchost.exe -k LocalServiceNoNetwork

    C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

    C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

    C:\windows\system32\conhost.exe

    C:\Program Files (x86)\Bonjour\mDNSResponder.exe

    C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Program Files\Common Files\Microsoft Shared\IME14\SHARED\IMEDICTUPDATE.EXE

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

    C:\windows\system32\svchost.exe -k imgsvc

    C:\windows\system32\ThpSrv.exe

    C:\Windows\system32\TODDSrv.exe

    C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

    C:\windows\SysWOW64\dssenh32.exe

    C:\ProgramData\api-ms-win-core-misc-l1-1-032.exe

    C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe

    C:\windows\system32\SearchIndexer.exe

    C:\windows\system32\taskhost.exe

    C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe

    C:\windows\system32\Dwm.exe

    C:\windows\Explorer.EXE

    C:\Program Files\Intel\WiFi\bin\EvtEng.exe

    C:\Program Files\TOSHIBA\TECO\TecoService.exe

    C:\windows\system32\wbem\unsecapp.exe

    C:\windows\system32\wbem\wmiprvse.exe

    C:\Windows\System32\igfxtray.exe

    C:\Windows\System32\hkcmd.exe

    C:\Windows\System32\igfxpers.exe

    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

    C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Windows\System32\ThpSrv.exe

    C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

    C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe

    C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

    C:\Program Files\TOSHIBA\TECO\Teco.exe

    C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

    C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe

    C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe

    C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

    C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

    C:\windows\system32\wbem\unsecapp.exe

    C:\Program Files\TOSHIBA\FlashCards\Hotkey\TcrdKBB.exe

    C:\windows\system32\igfxext.exe

    C:\windows\system32\igfxsrvc.exe

    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

    C:\Program Files\Windows Media Player\wmpnetwk.exe

    C:\windows\System32\svchost.exe -k LocalServicePeerNet

    C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

    C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe

    C:\Program Files (x86)\iTunes\iTunesHelper.exe

    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

    C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

    C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

    C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    C:\windows\System32\svchost.exe -k secsvcs

    C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

    C:\windows\system32\SearchProtocolHost.exe

    C:\windows\system32\SearchFilterHost.exe

    C:\Users\Zach Huber\Downloads\Defogger.exe

    C:\windows\system32\conhost.exe

    C:\windows\system32\DllHost.exe

    C:\windows\system32\DllHost.exe

    C:\windows\SysWOW64\cmd.exe

    C:\windows\system32\conhost.exe

    C:\windows\SysWOW64\cscript.exe

    C:\windows\system32\wbem\wmiprvse.exe

    .

    ============== Pseudo HJT Report ===============

    .

    uStart Page = hxxp://www.google.com/

    uDefault_Page_URL = hxxp://www.google.com/ig?brand=TSND&bmod=TSND

    mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSND&bmod=TSND

    mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSND&bmod=TSND

    uInternet Settings,ProxyOverride = <local>;*.local

    uInternet Settings,ProxyServer = http=127.0.0.1:53273

    uURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll

    mURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll

    mWinlogon: Userinit=userinit.exe,

    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File

    BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL

    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

    BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll

    BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    BHO: TOSHIBA Media Controller Plug-in: {f3c88694-effa-4d78-b409-54b7b2535b14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll

    TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll

    uRun: [best Buy pc app] C:\Users\Zach Huber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Best Buy\Best Buy pc app.appref-ms

    mRun: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

    mRun: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP

    mRun: [sVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL

    mRun: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60

    mRun: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun

    mRun: [TSleepSrv] %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe

    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

    mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

    mRun: [iME14 CHS Setup] C:\PROGRA~2\COMMON~1\MICROS~1\IME14\SHARED\IMEKLMG.EXE /SetPreload /CHS /Log

    mRun: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices

    StartupFolder: C:\Users\ZACHHU~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

    mPolicies-explorer: NoActiveDesktop = 1 (0x1)

    mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

    mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

    IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

    IE: ??? OneNote(&N) - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

    IE: ??? Microsoft Excel(&X) - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

    DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

    TCP: DhcpNameServer = 192.168.1.1 209.18.47.61 209.18.47.62

    TCP: Interfaces\{1463F93B-2F46-4890-AAFD-39D6DD4AFF15} : DhcpNameServer = 192.168.1.1 209.18.47.61 209.18.47.62

    TCP: Interfaces\{1463F93B-2F46-4890-AAFD-39D6DD4AFF15}\84F6D656143636563737 : DhcpNameServer = 192.168.1.1 209.18.47.61 209.18.47.62

    TCP: Interfaces\{1463F93B-2F46-4890-AAFD-39D6DD4AFF15}\D484340284F4D454 : DhcpNameServer = 192.168.1.1 209.18.47.61 209.18.47.62

    TCP: Interfaces\{1463F93B-2F46-4890-AAFD-39D6DD4AFF15}\D4F64756C60263 : DhcpNameServer = 10.128.128.128

    TCP: Interfaces\{3A6B6BCE-F4FA-463E-97D3-B246B41CCB87} : NameServer = 0.0.0.0

    TCP: Interfaces\{9865EEFE-13FB-4348-865F-A53624F3BF54} : DhcpNameServer = 192.168.1.1 209.18.47.61 209.18.47.62

    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL

    SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL

    BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    BHO-X64: AcroIEHelperStub - No File

    BHO-X64: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File

    BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL

    BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

    BHO-X64: URLRedirectionBHO - No File

    BHO-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll

    BHO-X64: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    BHO-X64: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll

    TB-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\tbVuze.dll

    mRun-x64: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

    mRun-x64: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP

    mRun-x64: [sVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL

    mRun-x64: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60

    mRun-x64: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun

    mRun-x64: [TSleepSrv] %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe

    mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

    mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

    mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

    mRun-x64: [iME14 CHS Setup] C:\PROGRA~2\COMMON~1\MICROS~1\IME14\SHARED\IMEKLMG.EXE /SetPreload /CHS /Log

    mRun-x64: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices

    SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL

    .

    ================= FIREFOX ===================

    .

    FF - ProfilePath - C:\Users\Zach Huber\AppData\Roaming\Mozilla\Firefox\Profiles\2gfwlvbx.default\

    FF - prefs.js: browser.startup.homepage - www.slate.com

    FF - prefs.js: network.proxy.http - 127.0.0.1

    FF - prefs.js: network.proxy.http_port - 53273

    FF - prefs.js: network.proxy.type - 4

    FF - component: C:\Users\Zach Huber\AppData\Roaming\Mozilla\Firefox\Profiles\2gfwlvbx.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\FFExternalAlert.dll

    FF - component: C:\Users\Zach Huber\AppData\Roaming\Mozilla\Firefox\Profiles\2gfwlvbx.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCore.dll

    FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

    FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

    FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

    FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll

    FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

    FF - Ext: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - %profile%\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}

    FF - Ext: XUL Cache: {2c511cd0-24a2-4ed0-bb27-5de62e1cce27} - %profile%\extensions\{2c511cd0-24a2-4ed0-bb27-5de62e1cce27}

    .

    ============= SERVICES / DRIVERS ===============

    .

    R0 Thpdrv;TOSHIBA HDD Protection Driver;C:\windows\system32\DRIVERS\thpdrv.sys --> C:\windows\system32\DRIVERS\thpdrv.sys [?]

    R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;C:\windows\system32\DRIVERS\Thpevm.SYS --> C:\windows\system32\DRIVERS\Thpevm.SYS [?]

    R0 tos_sps64;TOSHIBA tos_sps64 Service;C:\windows\system32\DRIVERS\tos_sps64.sys --> C:\windows\system32\DRIVERS\tos_sps64.sys [?]

    R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2010-2-17 14920]

    R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2010-2-17 12360]

    R1 vwififlt;Virtual WiFi Filter Driver;C:\windows\system32\DRIVERS\vwififlt.sys --> C:\windows\system32\DRIVERS\vwififlt.sys [?]

    R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2010-6-29 128752]

    R2 AntiVirSchedulerService;Avira AntiVir Scheduler;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-3-20 136360]

    R2 AntiVirService;Avira AntiVir Guard;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-3-20 269480]

    R2 avgntflt;avgntflt;C:\windows\system32\DRIVERS\avgntflt.sys --> C:\windows\system32\DRIVERS\avgntflt.sys [?]

    R2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [2010-6-7 408576]

    R2 ImeDictUpdateService;Microsoft IME Dictionary Update;C:\Program Files\Common Files\Microsoft Shared\IME14\SHARED\IMEDICTUPDATE.EXE [2010-1-21 83312]

    R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;C:\Program Files\TOSHIBA\TECO\TecoService.exe [2010-7-28 267192]

    R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\windows\system32\DRIVERS\TVALZFL.sys --> C:\windows\system32\DRIVERS\TVALZFL.sys [?]

    R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-10-13 2320920]

    R2 WebClient32;WebClient ;C:\Windows\System32\dssenh32.exe [2011-7-28 542720]

    R2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [2010-6-7 911872]

    R3 bpenum;bpenum;C:\windows\system32\DRIVERS\bpenum.sys --> C:\windows\system32\DRIVERS\bpenum.sys [?]

    R3 bpmp;Intel® Centrino® WiMAX 6050 Series;C:\windows\system32\DRIVERS\bpmp.sys --> C:\windows\system32\DRIVERS\bpmp.sys [?]

    R3 bpusb;bpusb;C:\windows\system32\Drivers\bpusb.sys --> C:\windows\system32\Drivers\bpusb.sys [?]

    R3 HECIx64;Intel® Management Engine Interface;C:\windows\system32\DRIVERS\HECIx64.sys --> C:\windows\system32\DRIVERS\HECIx64.sys [?]

    R3 Impcd;Impcd;C:\windows\system32\DRIVERS\Impcd.sys --> C:\windows\system32\DRIVERS\Impcd.sys [?]

    R3 IntcDAud;Intel® Display Audio;C:\windows\system32\DRIVERS\IntcDAud.sys --> C:\windows\system32\DRIVERS\IntcDAud.sys [?]

    R3 NETw5s64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\windows\system32\DRIVERS\NETw5s64.sys --> C:\windows\system32\DRIVERS\NETw5s64.sys [?]

    R3 PGEffect;Pangu effect driver;C:\windows\system32\DRIVERS\pgeffect.sys --> C:\windows\system32\DRIVERS\pgeffect.sys [?]

    R3 RTL8167;Realtek 8167 NT Driver;C:\windows\system32\DRIVERS\Rt64win7.sys --> C:\windows\system32\DRIVERS\Rt64win7.sys [?]

    R3 TMachInfo;TMachInfo;C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2010-10-13 51512]

    R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-2-5 137560]

    R3 TPCHSrv;TPCH Service;C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2010-7-22 822192]

    R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\windows\system32\DRIVERS\vwifimp.sys --> C:\windows\system32\DRIVERS\vwifimp.sys [?]

    R3 wdkmd;Intel WiDi KMD;C:\windows\system32\DRIVERS\WDKMD.sys --> C:\windows\system32\DRIVERS\WDKMD.sys [?]

    S3 acpials;ALS Sensor Filter;C:\windows\system32\DRIVERS\acpials.sys --> C:\windows\system32\DRIVERS\acpials.sys [?]

    S3 JMCR;JMCR;C:\windows\system32\DRIVERS\jmcr.sys --> C:\windows\system32\DRIVERS\jmcr.sys [?]

    S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-3-25 30969208]

    S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2010-3-5 340240]

    S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]

    S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\system32\Drivers\usbaapl64.sys --> C:\windows\system32\Drivers\usbaapl64.sys [?]

    S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\system32\Wat\WatAdminSvc.exe --> C:\windows\system32\Wat\WatAdminSvc.exe [?]

    .

    =============== Created Last 30 ================

    .

    2011-07-29 09:43:11 8578896 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{57BC5284-5A97-4C14-B704-93694E30EC68}\mpengine.dll

    2011-07-29 02:24:28 542720 ----a-w- C:\windows\SysWow64\dssenh32.exe

    2011-07-29 02:24:28 542720 ----a-w- C:\ProgramData\api-ms-win-core-misc-l1-1-032.exe

    2011-07-21 22:05:37 -------- d-----w- C:\Program Files (x86)\Tropico

    2011-07-21 22:05:05 77824 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll

    2011-07-21 22:05:05 32768 ------w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll

    2011-07-21 22:05:05 225280 ------w- C:\Program Files (x86)\Common Files\InstallShield\IScript\iscript.dll

    2011-07-21 22:05:05 176128 ------w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll

    2011-07-05 16:20:12 -------- d-----w- C:\ProgramData\Media Center Programs

    2011-07-05 16:20:11 -------- d-----w- C:\Program Files (x86)\Guild Wars

    .

    ==================== Find3M ====================

    .

    2011-07-07 00:52:42 41272 ----a-w- C:\windows\SysWow64\drivers\mbamswissarmy.sys

    2011-07-07 00:52:42 25912 ----a-w- C:\windows\System32\drivers\mbam.sys

    2011-06-11 02:56:44 3134464 ----a-w- C:\windows\System32\win32k.sys

    2011-06-02 06:39:54 422400 ----a-w- C:\windows\System32\KernelBase.dll

    2011-06-02 05:54:50 272384 ----a-w- C:\windows\SysWow64\KernelBase.dll

    2011-06-02 03:45:49 6144 ---ha-w- C:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

    2011-06-02 03:45:49 4608 ---ha-w- C:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

    2011-06-02 03:45:49 3584 ---ha-w- C:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

    2011-06-02 03:45:49 3072 ---ha-w- C:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

    2011-05-28 03:25:16 1638912 ----a-w- C:\windows\System32\mshtml.tlb

    2011-05-28 03:00:02 1638912 ----a-w- C:\windows\SysWow64\mshtml.tlb

    2011-05-25 00:14:10 270720 ------w- C:\windows\System32\MpSigStub.exe

    2011-05-24 11:21:59 404992 ----a-w- C:\windows\System32\umpnpmgr.dll

    2011-05-24 10:34:20 64512 ----a-w- C:\windows\SysWow64\devobj.dll

    2011-05-24 10:34:20 44544 ----a-w- C:\windows\SysWow64\devrtl.dll

    2011-05-24 10:34:00 145920 ----a-w- C:\windows\SysWow64\cfgmgr32.dll

    2011-05-24 10:32:46 252928 ----a-w- C:\windows\SysWow64\drvinst.exe

    2011-05-14 07:41:52 362496 ----a-w- C:\windows\System32\wow64win.dll

    2011-05-14 07:41:52 243200 ----a-w- C:\windows\System32\wow64.dll

    2011-05-14 07:41:52 13312 ----a-w- C:\windows\System32\wow64cpu.dll

    2011-05-14 07:41:26 214528 ----a-w- C:\windows\System32\winsrv.dll

    2011-05-14 07:39:03 16384 ----a-w- C:\windows\System32\ntvdm64.dll

    2011-05-14 07:32:18 338944 ----a-w- C:\windows\System32\conhost.exe

    2011-05-14 06:35:45 14336 ----a-w- C:\windows\SysWow64\ntvdm64.dll

    2011-05-14 06:34:06 44032 ----a-w- C:\windows\apppatch\acwow64.dll

    2011-05-14 06:33:45 25600 ----a-w- C:\windows\SysWow64\setup16.exe

    2011-05-14 06:32:34 5120 ----a-w- C:\windows\SysWow64\wow32.dll

    2011-05-14 04:29:25 7680 ----a-w- C:\windows\SysWow64\instnm.exe

    2011-05-14 04:29:25 2048 ----a-w- C:\windows\SysWow64\user.exe

    2011-05-04 02:51:08 287744 ----a-w- C:\windows\System32\drivers\mrxsmb10.sys

    2011-05-04 02:51:08 157696 ----a-w- C:\windows\System32\drivers\mrxsmb.sys

    2011-05-04 02:51:05 126464 ----a-w- C:\windows\System32\drivers\mrxsmb20.sys

    2011-05-03 05:21:22 976896 ----a-w- C:\windows\System32\inetcomm.dll

    2011-05-03 04:50:29 740864 ----a-w- C:\windows\SysWow64\inetcomm.dll

    .

    ============= FINISH: 12:21:09.18 ===============

    ark.zip

    Attach.zip

    mbam-log-2011-07-31 (12-39-20).txt

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.