Jump to content

Malwarebytes locks up Computer

maddog567

By maddog567
in Resolved Malware Removal Logs

 Share

Recommended Posts

maddog567

maddog567

Posted
Posted

When I install the registered version of MB, the laptop locks up, non-responsive.

When I uninstall MB, everything works fine.

Laptop specs: Sony Vaio VPCEH3KFX/B, 8GB DDR3, Seagate 500GB 7200rpm Hybrid SATA3 HDD, Win7 HP 64-bit, ZoneAlarm ISS 2012

Attached are DDS output files.

Thank you for your assistance.

.

DDS (Ver_2011-08-26.01) - NTFSAMD64

Internet Explorer: 9.0.8112.16421

Run by jljpnp at 14:40:37 on 2012-10-12

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8174.5956 [GMT -5:00]

.

AV: ZoneAlarm Internet Security Suite Antivirus *Enabled/Updated* {DE038A5B-9EDD-18A9-2361-FF7D98D43730}

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: ZoneAlarm Internet Security Suite Anti-Spyware *Enabled/Updated* {65626BBF-B8E7-1727-19D1-C40FE3537D8D}

FW: ZoneAlarm Internet Security Suite Firewall *Enabled* {E6380B7E-D4B2-19F1-083E-56486607704B}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe

C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe

C:\Windows\system32\nvvsvc.exe

C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe

C:\Program Files\Apoint\Apoint.exe

C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

C:\Program Files\Apoint\ApMsgFwd.exe

C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe

C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\PROGRA~2\CHECKP~1\ZONEAL~1\MAILFR~1\mantispm.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Apoint\Apvfb.exe

C:\Program Files\Apoint\Apntex.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe

C:\Windows\system32\DllHost.exe

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe

C:\Program Files\Sony\VAIO Care\VCPerfService.exe

C:\Program Files\Sony\VAIO Care\listener.exe

C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

C:\Windows\System32\svchost.exe -k secsvcs

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe

C:\Program Files (x86)\DDNi\Oasis\VAIO Messenger.exe

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\Program Files\Sony\VAIO Care\VCsystray.exe

C:\Program Files\Sony\VAIO Care\VCService.exe

C:\Program Files\Sony\VAIO Care\VCAgent.exe

C:\Windows\System32\vds.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Sony\VAIO Update 5\VUAgent.exe

C:\Program Files\Sony\VAIO Care\Admload.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\conhost.exe

C:\Windows\SysWOW64\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://sony.msn.com

uDefault_Page_URL = hxxp://sony.msn.com

uInternet Settings,ProxyOverride = *.local

mWinlogon: Userinit=userinit.exe

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Zonealarm Helper Object: {2a841f7a-a014-4da5-b6d9-8b913dfb7a8c} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\bh\zonealarm.dll

BHO: ZoneAlarm Security Engine Registrar: {8a4a36c2-0535-4d2c-bd3d-496cb7eed6e3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB: ZoneAlarm Security Toolbar: {438fae3e-bdef-44d3-ab8b-0c7c8350df59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\zonealarmTlbr.dll

TB: ZoneAlarm Security Engine: {ee2ac4e5-b0b0-4ec6-88a9-bca1a32ab107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll

mRun: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

mRun: [iSBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"

mRun: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

mRun: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [DiscWizardMonitor.exe] "C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe"

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

TCP: DhcpNameServer = 192.168.1.254

TCP: Interfaces\{EFC6E1FF-D01F-47F5-9C65-FF41E3EF88A3} : DhcpNameServer = 192.168.1.254

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO-X64: AcroIEHelperStub - No File

BHO-X64: Zonealarm Helper Object: {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\bh\zonealarm.dll

BHO-X64: Zonealarm Helper Object - No File

BHO-X64: ZoneAlarm Security Engine Registrar: {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll

BHO-X64: ZoneAlarm Security Engine Registrar - No File

BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO-X64: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB-X64: ZoneAlarm Security Toolbar: {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.6.7.4\zonealarmTlbr.dll

TB-X64: ZoneAlarm Security Engine: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll

mRun-x64: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

mRun-x64: [iSBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"

mRun-x64: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

mRun-x64: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"

mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun-x64: [DiscWizardMonitor.exe] "C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe"

mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\jljpnp\AppData\Roaming\Mozilla\Firefox\Profiles\z52gigzu.default\

FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll

FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

FF - plugin: C:\Program Files (x86)\PDFlite\npPdfViewer.dll

FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

FF - plugin: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll

.

============= SERVICES / DRIVERS ===============

.

R0 vididr;Acronis Virtual Disk;C:\Windows\system32\DRIVERS\vididr.sys --> C:\Windows\system32\DRIVERS\vididr.sys [?]

R0 vidsflt53;Acronis Disk Storage Filter (53);C:\Windows\system32\DRIVERS\vsflt53.sys --> C:\Windows\system32\DRIVERS\vsflt53.sys [?]

R1 kl2;kl2;C:\Windows\system32\DRIVERS\kl2.sys --> C:\Windows\system32\DRIVERS\kl2.sys [?]

R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]

R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-7-27 63960]

R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-10-5 13336]

R2 IconMan_R;IconMan_R;C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-10-5 2361344]

R2 ISWKL;ZoneAlarm LTD Toolbar ISWKL;C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [2012-8-30 33712]

R2 IswSvc;ZoneAlarm LTD Toolbar IswSvc;C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe [2012-8-30 827560]

R2 Oasis2Service;Oasis2Service;C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe [2012-2-9 53248]

R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-11-27 398176]

R2 SampleCollector;VAIO Care Performance Service;C:\Program Files\Sony\VAIO Care\VCPerfService.exe [2012-10-5 259192]

R2 SgtSch2Svc;Seagate Scheduler2 Service;C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe [2011-6-30 1191408]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-2-18 378472]

R2 uCamMonitor;CamMonitor;C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2012-10-5 105024]

R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-10-5 2656280]

R2 VSNService;VSNService;C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2012-10-5 852160]

R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys --> C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [?]

R3 MEIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]

R3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\system32\DRIVERS\RtsPStor.sys --> C:\Windows\system32\DRIVERS\RtsPStor.sys [?]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]

R3 SFEP;Sony Firmware Extension Parser;C:\Windows\system32\DRIVERS\SFEP.sys --> C:\Windows\system32\DRIVERS\SFEP.sys [?]

R3 VCService;VCService;C:\Program Files\Sony\VAIO Care\VCService.exe [2012-10-5 44736]

R3 VUAgent;VUAgent;C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [2012-10-5 1021112]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-5 250808]

S3 e1yexpress;Intel® Gigabit Network Connections Driver;C:\Windows\system32\DRIVERS\e1y60x64.sys --> C:\Windows\system32\DRIVERS\e1y60x64.sys [?]

S3 epmntdrv;epmntdrv;C:\Windows\System32\epmntdrv.sys [2012-10-5 14216]

S3 EuGdiDrv;EuGdiDrv;C:\Windows\System32\EuGdiDrv.sys [2012-10-5 8456]

S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-5 114144]

S3 SOHCImp;VAIO Content Importer;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2011-2-21 113824]

S3 SOHDs;VAIO Device Searcher;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2011-2-21 67232]

S3 SpfService;VAIO Entertainment Common Service;C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2011-1-20 286936]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]

S3 VCFw;VAIO Content Folder Watcher;C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2011-1-20 887000]

S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2011-5-19 549616]

S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2011-2-19 385336]

S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2011-2-19 99104]

S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

.

=============== Created Last 30 ================

.

2012-10-12 13:26:33 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll

2012-10-12 13:26:33 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys

2012-10-12 13:26:33 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys

2012-10-12 13:26:33 1031680 ----a-w- C:\Windows\System32\rdpcore.dll

2012-10-12 13:22:49 2622464 ----a-w- C:\Windows\System32\wucltux.dll

2012-10-12 13:22:43 99840 ----a-w- C:\Windows\System32\wudriver.dll

2012-10-12 13:22:39 36864 ----a-w- C:\Windows\System32\wuapp.exe

2012-10-12 13:22:39 186752 ----a-w- C:\Windows\System32\wuwebv.dll

2012-10-12 01:05:43 -------- d-----w- C:\Program Files\CCleaner

2012-10-11 21:12:36 -------- d-----w- C:\Program Files (x86)\Double Driver

2012-10-09 12:33:53 -------- d-----w- C:\Program Files (x86)\Foxit Software

2012-10-09 01:13:06 -------- d-----w- C:\Users\jljpnp\AppData\Local\Apple Computer

2012-10-09 01:12:48 33240 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys

2012-10-09 01:12:19 -------- d-----w- C:\Program Files\iPod

2012-10-09 01:12:18 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2012-10-09 01:12:18 -------- d-----w- C:\Program Files\iTunes

2012-10-09 01:12:18 -------- d-----w- C:\Program Files (x86)\iTunes

2012-10-09 01:11:49 -------- d-----w- C:\Users\jljpnp\AppData\Local\Apple

2012-10-09 01:11:21 -------- d-----w- C:\Program Files\Bonjour

2012-10-09 01:11:21 -------- d-----w- C:\Program Files (x86)\Bonjour

2012-10-09 01:04:06 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\PDFlite

2012-10-09 01:04:01 87040 ----a-w- C:\Windows\System32\redmonnt.dll

2012-10-09 01:04:01 46080 ----a-w- C:\Windows\System32\unredmon.exe

2012-10-09 01:03:59 -------- d-----w- C:\Program Files (x86)\PDFlite

2012-10-09 01:01:19 991232 ----a-w- C:\Windows\SysWow64\imageviewer2.ocx

2012-10-09 01:01:19 224016 ----a-w- C:\Windows\SysWow64\tabctl32.ocx

2012-10-09 01:01:19 200704 ----a-w- C:\Windows\SysWow64\threed32.ocx

2012-10-09 01:01:19 1703936 ----a-w- C:\Windows\SysWow64\gdiplus.dll

2012-10-09 01:01:19 110592 ----a-w- C:\Windows\SysWow64\ccrpbds6.dll

2012-10-09 01:01:19 106496 ----a-w- C:\Windows\SysWow64\mbprgbar.ocx

2012-10-09 01:01:18 151552 ----a-w- C:\Windows\SysWow64\ccrpfd6.ocx

2012-10-09 01:01:18 -------- d-----w- C:\Program Files (x86)\PIXresizer

2012-10-09 01:00:40 -------- d-----w- C:\Program Files (x86)\FastStone Image Viewer

2012-10-09 00:58:28 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\WindSolutions

2012-10-09 00:58:20 -------- d-----w- C:\ProgramData\WindSolutions

2012-10-09 00:57:48 8836440 ----a-w- C:\Program Files (x86)\CopyTransManager.exe

2012-10-09 00:52:46 -------- d-----w- C:\Program Files (x86)\Tansee iPhone Transfer SMS

2012-10-08 23:10:03 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\Seagate

2012-10-08 23:08:42 -------- d-----w- C:\ProgramData\Seagate

2012-10-08 23:08:24 971360 ----a-w- C:\Windows\System32\drivers\timntr.sys

2012-10-08 23:08:17 210016 ----a-w- C:\Windows\System32\drivers\vididr.sys

2012-10-08 23:08:17 141920 ----a-w- C:\Windows\System32\drivers\vsflt53.sys

2012-10-08 23:08:09 275552 ----a-w- C:\Windows\System32\drivers\snapman.sys

2012-10-08 23:08:06 -------- d-----w- C:\Program Files (x86)\Seagate

2012-10-08 23:08:06 -------- d-----w- C:\Program Files (x86)\Common Files\Seagate

2012-10-07 14:10:19 -------- d-----w- C:\JLJGNUcash

2012-10-07 12:36:44 -------- d-----w- C:\Users\jljpnp\.thumbnails

2012-10-07 01:19:12 -------- d-----w- C:\Program Files (x86)\DVDVideoSoft

2012-10-07 01:19:12 -------- d-----w- C:\Program Files (x86)\Common Files\DVDVideoSoft

2012-10-07 01:17:58 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\DVDVideoSoft

2012-10-07 00:20:23 -------- d-----w- C:\Users\jljpnp\.gconfd

2012-10-07 00:20:22 -------- d-----w- C:\Users\jljpnp\.gconf

2012-10-07 00:20:21 -------- d-----w- C:\Users\jljpnp\.gnome2_private

2012-10-07 00:20:21 -------- d-----w- C:\Users\jljpnp\.gnome2

2012-10-07 00:20:20 -------- d-----w- C:\Users\jljpnp\.gnucash

2012-10-07 00:17:37 -------- d-----w- C:\Program Files (x86)\gnucash

2012-10-06 11:10:17 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\WinZip

2012-10-06 11:08:30 18768 ----a-w- C:\Windows\System32\roboot64.exe

2012-10-06 01:47:04 -------- d-----w- C:\Program Files (x86)\Ffmpeg For Audacity

2012-10-06 01:46:46 -------- d-----w- C:\Program Files (x86)\Lame For Audacity

2012-10-06 01:46:10 -------- d-----w- C:\Program Files (x86)\Audacity

2012-10-06 01:41:57 -------- d-----w- C:\Users\jljpnp\AppData\Local\fontconfig

2012-10-06 01:41:54 -------- d-----w- C:\Users\jljpnp\AppData\Local\gegl-0.2

2012-10-06 01:41:54 -------- d-----w- C:\Users\jljpnp\.gimp-2.8

2012-10-06 01:38:56 -------- d-----w- C:\Program Files\GIMP 2

2012-10-06 01:16:33 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\LibreOffice

2012-10-06 01:13:52 -------- d-----w- C:\Program Files (x86)\LibreOffice 3.6

2012-10-05 23:23:42 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\DVD Flick

2012-10-05 23:23:23 609824 ----a-w- C:\Windows\SysWow64\comctl32.ocx

2012-10-05 23:23:23 40960 ----a-w- C:\Windows\SysWow64\ssubtmr6.dll

2012-10-05 23:23:23 36864 ----a-w- C:\Windows\SysWow64\trayicon_handler.ocx

2012-10-05 23:23:23 28672 ----a-w- C:\Windows\SysWow64\mousewheel.ocx

2012-10-05 23:23:23 164144 ----a-w- C:\Windows\SysWow64\comct232.ocx

2012-10-05 23:23:22 662288 ----a-w- C:\Windows\SysWow64\mscomct2.ocx

2012-10-05 23:23:22 212240 ----a-w- C:\Windows\SysWow64\richtx32.ocx

2012-10-05 23:23:22 1081616 ----a-w- C:\Windows\SysWow64\mscomctl.ocx

2012-10-05 23:23:22 -------- d-----w- C:\Program Files (x86)\DVD Flick

2012-10-05 18:04:32 16256 ----a-w- C:\Windows\System32\EuEpmGdi.dll

2012-10-05 18:04:31 9096 ----a-w- C:\Windows\System32\EuGdiDrv.sys

2012-10-05 18:04:31 86408 ----a-w- C:\Windows\SysWow64\setupempdrv03.exe

2012-10-05 18:04:31 8456 ----a-w- C:\Windows\SysWow64\EuGdiDrv.sys

2012-10-05 18:04:31 3316736 ----a-w- C:\Windows\System32\BootMan.exe

2012-10-05 18:04:31 2468520 ----a-w- C:\Windows\SysWow64\BootMan.exe

2012-10-05 18:04:31 19840 ----a-w- C:\Windows\SysWow64\EuEpmGdi.dll

2012-10-05 18:04:31 16776 ----a-w- C:\Windows\System32\epmntdrv.sys

2012-10-05 18:04:31 14216 ----a-w- C:\Windows\SysWow64\epmntdrv.sys

2012-10-05 18:04:31 100232 ----a-w- C:\Windows\System32\setupempdrvx64.exe

2012-10-05 18:04:22 -------- d-----w- C:\Program Files (x86)\EaseUS

2012-10-05 18:01:39 40960 ----a-r- C:\Users\jljpnp\AppData\Roaming\Microsoft\Installer\{12B4E2C0-8D67-408D-86DF-119BEAAD5308}\NewShortcut1_12B4E2C08D67408D86DF119BEAAD5308.exe

2012-10-05 18:01:39 -------- d-----w- C:\Program Files (x86)\Blowfish Advanced CS

2012-10-05 17:37:40 -------- d-----w- C:\Users\jljpnp\AppData\Local\Thunderbird

2012-10-05 17:36:59 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\Canneverbe Limited

2012-10-05 17:36:59 -------- d-----w- C:\ProgramData\Canneverbe Limited

2012-10-05 17:27:40 -------- dc-h--w- C:\ProgramData\{F974CC36-BF25-4374-A035-B0A9DA79E735}

2012-10-05 16:29:30 -------- d-----w- C:\Users\jljpnp\AppData\Local\Macromedia

2012-10-05 16:19:39 1034216 ----a-w- C:\Windows\System32\npDeployJava1.dll

2012-10-05 16:19:27 108008 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll

2012-10-05 15:47:29 -------- d-----w- C:\Windows\en

2012-10-05 15:47:13 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2012-10-05 15:39:37 73656 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2012-10-05 15:39:37 696760 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2012-10-05 15:37:46 -------- d-----w- C:\ProgramData\Norton

2012-10-05 15:37:35 -------- d-----w- C:\ProgramData\NortonInstaller

2012-10-05 15:35:34 -------- d-----w- C:\Program Files (x86)\Microsoft

2012-10-05 15:32:21 -------- d-----w- C:\VAIO Sample Contents

2012-10-05 15:26:45 523088 ----a-w- C:\Windows\System32\d3dx10_42.dll

2012-10-05 15:26:45 453456 ----a-w- C:\Windows\SysWow64\d3dx10_42.dll

2012-10-05 15:26:45 2475352 ----a-w- C:\Windows\System32\D3DX9_42.dll

2012-10-05 15:26:45 1892184 ----a-w- C:\Windows\SysWow64\D3DX9_42.dll

2012-10-05 15:24:42 -------- d--h--w- C:\SPLASH.000

2012-10-05 15:24:24 -------- d--h--w- C:\SPLASH.SYS

2012-10-05 15:24:18 -------- d-----w- C:\Program Files (x86)\Downloaded Installations

2012-10-05 15:20:26 -------- d-----w- C:\Users\jljpnp\dwhelper

2012-10-05 15:14:52 -------- d-----w- C:\Program Files (x86)\VideoLAN

2012-10-05 15:13:27 -------- d-----w- C:\Program Files (x86)\MSXML 4.0

2012-10-05 15:13:26 5073256 ----a-w- C:\Windows\System32\d3dx9_35.dll

2012-10-05 15:11:12 -------- d-----w- C:\Program Files\Sony

2012-10-05 15:11:07 437272 ----a-r- C:\Windows\System32\drivers\iaStor.sys

2012-10-05 15:09:39 -------- d-----w- C:\Windows\SysWow64\winrm

2012-10-05 15:07:56 499712 ----a-r- C:\Windows\SysWow64\msvcp71.dll

2012-10-05 15:07:56 348160 ----a-w- C:\Windows\SysWow64\msvcr71.dll

2012-10-05 15:07:56 212480 ----a-w- C:\Windows\SysWow64\PCDLIB32.DLL

2012-10-05 15:07:54 55808 ----a-w- C:\Windows\system\ArcSoftKsUFilter.dll

2012-10-05 15:07:54 19968 ----a-w- C:\Windows\System32\drivers\ArcSoftKsUFilter.sys

2012-10-05 15:07:52 245408 ----a-w- C:\Windows\SysWow64\unicows.dll

2012-10-05 15:06:07 -------- d-----w- C:\ProgramData\ArcSoft

2012-10-05 15:05:57 77824 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll

2012-10-05 15:05:57 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll

2012-10-05 15:05:57 225280 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\IScript\iscript.dll

2012-10-05 15:05:57 176128 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll

2012-10-05 15:05:56 614532 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe

2012-10-05 15:01:01 -------- d-----w- C:\Documentation

2012-10-05 15:01:01 -------- d-----w- C:\_FS_SWRINFO

2012-10-05 15:00:00 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\MailFrontier

2012-10-05 14:57:00 114688 ----a-w- C:\Program Files (x86)\Windows Sidebar\Gadgets\eBayGadget.Gadget\eBayGadget.Gadget\Bin\eBayGadget.dll

2012-10-05 14:56:58 114688 ----a-w- C:\Program Files\Windows Sidebar\Gadgets\eBayGadget.Gadget\eBayGadget.Gadget\Bin\eBayGadget.dll

2012-10-05 14:54:52 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\CheckPoint

2012-10-05 14:54:44 -------- d-----w- C:\Windows\Downloaded Installations

2012-10-05 14:54:41 -------- d-----w- C:\Program Files\CheckPoint

2012-10-05 14:54:38 11864 ----a-w- C:\Windows\System32\drivers\kl2.sys

2012-10-05 14:54:37 460888 ----a-w- C:\Windows\System32\drivers\kl1.sys

2012-10-05 14:53:10 -------- d-----w- C:\Program Files\PlayReady

2012-10-05 14:52:10 -------- d-----w- C:\Program Files (x86)\Check Point Software Technologies LTD

2012-10-05 14:52:01 -------- d-----w- C:\Program Files (x86)\CheckPoint

2012-10-05 14:52:00 -------- d-----w- C:\ProgramData\CheckPoint

2012-10-05 14:51:23 -------- d-----w- C:\Program Files (x86)\Microsoft Synchronization Services

2012-10-05 14:51:18 -------- d-----w- C:\ProgramData\{869D8A73-BD74-4AF4-B35D-FA3A4ACE3875}

2012-10-05 14:51:10 -------- d---a-w- C:\Nobu_Icon

2012-10-05 14:48:00 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\Malwarebytes

2012-10-05 14:47:55 -------- d-----w- C:\ProgramData\Malwarebytes

2012-10-05 14:38:51 749568 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll

2012-10-05 14:38:51 69715 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll

2012-10-05 14:38:51 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe

2012-10-05 14:38:51 32768 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\Objectps.dll

2012-10-05 14:38:51 323716 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll

2012-10-05 14:38:51 274432 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll

2012-10-05 14:38:51 192644 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll

2012-10-05 14:38:51 180224 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll

2012-10-05 14:38:30 -------- d-----w- C:\Windows\Sonysys

2012-10-05 14:37:17 -------- d-----w- C:\Users\jljpnp\AppData\Roaming\Intel Corporation

2012-10-05 14:36:37 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll

2012-10-05 14:36:29 916456 ----a-w- C:\Windows\System32\deployJava1.dll

2012-10-05 14:36:17 -------- d-----w- C:\Program Files\Common Files\Sony Shared

2012-10-05 14:36:17 -------- d-----w- C:\Program Files (x86)\Common Files\Sony Shared

2012-10-05 14:35:21 -------- d-----w- C:\Users\jljpnp\AppData\Local\VirtualStore

2012-10-05 14:34:32 -------- d-----w- C:\Program Files (x86)\Sony

2012-10-05 14:32:54 -------- d-----w- C:\Program Files\Apoint

2012-10-05 14:31:10 -------- d-----w- C:\Windows\SysWow64\sda

2012-10-05 14:31:06 9888360 ----a-w- C:\Windows\SysWow64\RtsPStorIcon.dll

2012-10-05 14:31:06 335464 ----a-w- C:\Windows\System32\drivers\RtsPStor.sys

2012-10-05 14:31:06 -------- d-----w- C:\Program Files (x86)\Realtek

2012-10-05 14:29:24 8192 ----a-w- C:\Windows\System32\drivers\IntelMEFWVer.dll

2012-10-05 14:29:21 -------- d-----w- C:\Program Files (x86)\Common Files\postureAgent

2012-10-05 14:29:19 56344 ----a-w- C:\Windows\System32\drivers\HECIx64.sys

2012-10-05 14:27:06 -------- d-----w- C:\Program Files (x86)\NVIDIA Corporation

2012-10-05 14:23:55 -------- d-----w- C:\Program Files\CONEXANT

2012-10-05 14:21:03 53248 ----a-w- C:\Windows\SysWow64\CSVer.dll

2012-10-05 14:21:01 -------- d-----w- C:\Intel

2012-10-05 14:20:29 96768 ----a-w- C:\Windows\System32\fsutil.exe

2012-10-05 14:20:29 74240 ----a-w- C:\Windows\SysWow64\fsutil.exe

2012-10-05 14:20:29 27008 ----a-w- C:\Windows\System32\drivers\amdxata.sys

2012-10-05 14:20:29 189824 ----a-w- C:\Windows\System32\drivers\storport.sys

2012-10-05 14:20:29 107904 ----a-w- C:\Windows\System32\drivers\amdsata.sys

2012-10-05 14:20:28 410496 ----a-w- C:\Windows\System32\drivers\iaStorV.sys

2012-10-05 14:20:28 2565632 ----a-w- C:\Windows\System32\esent.dll

2012-10-05 14:20:28 1699328 ----a-w- C:\Windows\SysWow64\esent.dll

2012-10-05 14:20:28 166272 ----a-w- C:\Windows\System32\drivers\nvstor.sys

2012-10-05 14:20:28 1659776 ----a-w- C:\Windows\System32\drivers\ntfs.sys

2012-10-05 14:20:28 148352 ----a-w- C:\Windows\System32\drivers\nvraid.sys

2012-10-05 14:16:17 -------- d-----w- C:\ProgramData\DDNi

2012-10-05 14:16:17 -------- d-----w- C:\Program Files (x86)\DDNi

2012-10-05 14:15:40 -------- d-----w- C:\ProgramData\Sony Corporation

.

==================== Find3M ====================

.

2012-08-21 18:01:20 125872 ----a-w- C:\Windows\System32\GEARAspi64.dll

2012-08-21 18:01:20 106928 ----a-w- C:\Windows\SysWow64\GEARAspi.dll

1996-10-31 06:11:00 432128 ----a-r- C:\Program Files\NOTEPAD+.EXE

1996-10-31 06:11:00 432128 ----a-r- C:\Program Files (x86)\NOTEPAD+.EXE

.

============= FINISH: 14:42:13.14 ===============

Attach.txt

DDS.txt

Link to post
Share on other sites
  • Staff
screen317

screen317

Posted
  • Staff
Posted

Hi and welcome to Malwarebytes.

For troubleshooting purposes, keep MBAM installed, but instead of uninstalling it, right-click the MBAM icon in the tray and uncheck "Filesystem Protection" to disable the protection module. Try that and see if the lockups continue. We will troubleshoot from there. :)

Link to post
Share on other sites
  • 4 weeks later...
  • 3 weeks later...
  • 2 weeks later...
Maurice Naggar

Maurice Naggar

Posted
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.