my computer is virus

[inam]

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 12/27/2011 6:30:10 PM

System Uptime: 4/7/2013 9:19:52 AM (1 hours ago)

.

Motherboard: Dell Computer Corp. | | 0C2057

Processor: Intel® Pentium® 4 CPU 2.80GHz | Microprocessor | 2793/800mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 8 GiB total, 0.899 GiB free.

D: is FIXED (NTFS) - 10 GiB total, 6.745 GiB free.

E: is FIXED (NTFS) - 10 GiB total, 2.656 GiB free.

F: is FIXED (NTFS) - 10 GiB total, 6.357 GiB free.

G: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP91: 4/5/2013 4:28:00 PM - System Checkpoint

.

==== Installed Programs ======================

.

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader X (10.1.6)

BitTorrent

BitTorrentBar Toolbar

Classic Menu 3.x for Word 2007

CorelDRAW Graphics Suite 12

Creative Live! Cam Center

Creative Live! Cam Vista IM Driver (1.01.03.1104)

Google Chrome

Google Earth

Google Update Helper

Hotfix for Windows XP (KB915865)

Inpage 2010 Professional Edition 3.07

Intel® Extreme Graphics 2 Driver

Intel® PRO Network Connections Drivers

Internet Explorer Toolbar 4.6 by SweetPacks

Microsoft Corporation

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office Word 2007

Microsoft Office Word MUI (English) 2007

Microsoft Office XP Professional with FrontPage

Microsoft Software Update for Web Folders (English) 12

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Mozilla Firefox 13.0.1 (x86 en-US)

Mozilla Maintenance Service

Multi Webcam Video Recorder 2.5

Opera 12.12

RealNetworks - Microsoft Visual C++ 2008 Runtime

RealPlayer

RealUpgrade 1.1

Search.com Toolbar v6.9

Update Manager for SweetPacks 1.0

VLC media player 1.1.11

WebFldrs XP

Windows Installer 3.1 (KB893803)

WinRAR 4.10 beta 5 (32-bit)

Yahoo! Messenger

Yahoo! Software Update

Yahoo! Toolbar

.

==== Event Viewer Messages From Past Week ========

.

4/3/2013 9:57:21 AM, error: Service Control Manager [7000] - The Haspnt service failed to start due to the following error: The system cannot find the file specified.

4/3/2013 7:09:02 AM, error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: This operation returned because the timeout period expired.

4/1/2013 8:57:00 PM, error: atapi [9] - The device, \Device\Ide\IdePort0, did not respond within the timeout period.

.

==== End Of File ===========================

DDS (Ver_2012-11-20.01) - NTFS_x86

Internet Explorer: 6.0.2900.2180

Run by Administrator at 10:54:38 on 2013-04-07

Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.510.185 [GMT -8:00]

.

.

============== Running Processes ================

.

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Setup\CacheMgr.exe

C:\Program Files\Application Updater\ApplicationUpdater.exe

C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

C:\Program Files\Analog Devices\Core\smax4pnp.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\Real\RealPlayer\update\realsched.exe

C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe

C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\BitTorrent\BitTorrent.exe

C:\WINDOWS\system32\ctfmon.exe

C:\PROGRA~1\Yahoo!\Messenger\ymsgr_tray.exe

C:\Program Files\Opera\opera.exe

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.bigseekpro.com/adlock8/{AF758F62-0409-495F-99AE-124EA956BDAB}

mStart Page = hxxp://www.bigseekpro.com/adlock8/{AF758F62-0409-495F-99AE-124EA956BDAB}

uInternet Connection Wizard,ShellNext = iexplore

uURLSearchHooks: Search.com Toolbar: {BFEAF3D0-307E-4F52-B64A-AF56BABE82B5} - c:\program files\search.com toolbar\ie\6.9\searchcomToolbarIE.dll

uURLSearchHooks: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBit0.dll

uURLSearchHooks: SweetIM ToolbarURLSearchHook Class: {EEE6C35D-6118-11DC-9C72-001320C79847} - c:\program files\sweetim\toolbars\internet explorer\mgHelper.dll

BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - c:\program files\yahoo!\companion\installs\cpn1\yt.dll

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll

BHO: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBit0.dll

BHO: Search.com Toolbar: {BFEAF3D0-307E-4F52-B64A-AF56BABE82B5} - c:\program files\search.com toolbar\ie\6.9\searchcomToolbarIE.dll

BHO: SweetPacks Browser Helper: {EEE6C35C-6118-11DC-9C72-001320C79847} - c:\program files\sweetim\toolbars\internet explorer\mgToolbarIE.dll

TB: BitTorrentBar Toolbar: {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - c:\program files\bittorrentbar\prxtbBit0.dll

TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn1\yt.dll

TB: SweetPacks Toolbar for Internet Explorer: {EEE6C35B-6118-11DC-9C72-001320C79847} - c:\program files\sweetim\toolbars\internet explorer\mgToolbarIE.dll

TB: BitTorrentBar Toolbar: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - c:\program files\bittorrentbar\prxtbBit0.dll

TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn1\yt.dll

TB: SweetPacks Toolbar for Internet Explorer: {EEE6C35B-6118-11DC-9C72-001320C79847} - c:\program files\sweetim\toolbars\internet explorer\mgToolbarIE.dll

TB: Search.com Toolbar: {BFEAF3D0-307E-4F52-B64A-AF56BABE82B5} - c:\program files\search.com toolbar\ie\6.9\searchcomToolbarIE.dll

uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background

uRun: [bitTorrent] "c:\program files\bittorrent\BitTorrent.exe" /MINIMIZED

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messenger\YahooMessenger.exe" -quiet

uRun: [Google Update] "c:\documents and settings\administrator\local settings\application data\google\update\GoogleUpdate.exe" /c

mRun: [soundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe

mRun: [igfxTray] c:\windows\system32\igfxtray.exe

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot

mRun: [sweetpacks Communicator] c:\program files\sweetim\communicator\SweetPacksUpdateManager.exe

mRun: [searchSettings] "c:\program files\common files\spigot\search settings\SearchSettings.exe"

mRun: [CorelDRAW Graphics Suite 11b] c:\program files\corel\corel graphics 12\languages\en\programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=041613 serial=DR12WEX-1504397-kty lang=EN

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-System: EnableLUA = dword:0

mPolicies-Explorer: NoDriveTypeAutoRun = dword:145

IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

TCP: NameServer = 192.168.15.1

TCP: Interfaces\{F8706223-008E-4433-801F-3661418A5CDB} : NameServer = 8.8.8.8,8.8.4.4

TCP: Interfaces\{F8706223-008E-4433-801F-3661418A5CDB} : DHCPNameServer = 192.168.15.1

Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL

Notify: igfxcui - igfxdev.dll

mASetup: 2CBE016A-8F28-4E0C-83A6-6079161294D7 - "c:\setup\CacheMgr.exe" -ax

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\administrator\application data\mozilla\firefox\profiles\extensions\

FF - prefs.js: browser.startup.homepage - hxxp://t3-1.search.com/

FF - prefs.js: browser.search.selectedEngine - Search.com

FF - prefs.js: keyword.URL - hxxp://t3-3.search.com/search?q=

.

============= SERVICES / DRIVERS ===============

.

R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2013-2-12 802536]

R3 amsint32;amsint32;\??\c:\windows\system32\drivers\phhfm.sys --> c:\windows\system32\drivers\phhfm.sys [?]

R3 V0260VID;Live! Cam Vista IM;c:\windows\system32\drivers\V0260Vid.sys [2013-2-4 178913]

S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [2012-1-4 89256]

S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\drivers\s0016mdfl.sys [2012-1-4 15016]

S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\drivers\s0016mdm.sys [2012-1-4 120744]

S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0016mgmt.sys [2012-1-4 114216]

S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\drivers\s0016nd5.sys [2012-1-4 25512]

S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\drivers\s0016obex.sys [2012-1-4 110632]

S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\drivers\s0016unic.sys [2012-1-4 115752]

S3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\system32\drivers\s0017bus.sys [2012-1-4 86824]

S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\system32\drivers\s0017mdfl.sys [2012-1-4 15016]

S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\system32\drivers\s0017mdm.sys [2012-1-4 114600]

S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0017mgmt.sys [2012-1-4 108328]

S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS);c:\windows\system32\drivers\s0017nd5.sys [2012-1-4 26024]

S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\system32\drivers\s0017obex.sys [2012-1-4 104616]

S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\system32\drivers\s0017unic.sys [2012-1-4 109736]

.

=============== Created Last 30 ================

.

2013-04-01 18:24:27 -------- d-----w- c:\program files\common files\Corel

2013-04-01 18:23:36 -------- d-----w- c:\program files\Corel

2013-03-30 01:53:40 103140 --sh--r- C:\owipc.pif

2013-03-21 00:32:09 -------- d-----w- c:\program files\Microsoft ActiveSync

2013-03-21 00:31:21 -------- d-----w- c:\windows\ShellNew

2013-03-13 21:23:34 -------- d-----w- c:\documents and settings\administrator\application data\Search Settings

2013-03-13 21:23:12 -------- d-----w- c:\program files\Search.com Toolbar

2013-03-13 21:23:12 -------- d-----w- c:\program files\common files\Spigot

2013-03-13 21:23:12 -------- d-----w- c:\program files\Application Updater

.

==================== Find3M ====================

.

2013-03-17 00:49:10 693976 -c--a-w- c:\windows\system32\FlashPlayerApp.exe

2013-03-17 00:49:09 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2013-02-09 22:28:45 48128 ----a-w- c:\windows\system32\wnaspi32.dll

.

============= FINISH: 10:55:40.75 ===============

dds.txt

attach.txt

[MrCharlie]

Welcome to the forum.

What are your concerns with the computer??

------------------------------

Please remove any usb or external drives from the computer before you run this scan!

Please download and run RogueKiller to your desktop.

RogueKiller<---use this one for 64 bit systems

Quit all running programs.

For Windows XP, double-click to start.

For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

(please don't put logs in code or quotes)

P2P Warning:

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

MrC

Note:

Removing malware can be unpredictable

...things can go very wrong!

Backup

any files that cannot be replaced. You can copy them to a CD/DVD, external drive or a pen drive

<+>

Please don't run any other scans, download, install or uninstall any programs while I'm working with you.

<+>The removal of malware isn't instantaneous, please be patient.

<+>

Please stick with me until I give you the "all clear".

------->Your topic will be closed if you haven't replied within 3 days!<--------

(If I don't respond within 24 hours, please send me a PM)

[LDTate]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!