Jump to content

Successfully blocked access to a potentially malicious website

Liztza

By Liztza
in Resolved Malware Removal Logs

 Share

Recommended Posts

Liztza

Liztza

Posted
Posted

Hi, I've never really had to do anything like this before so please bare with me. Recently had a bout of issues and thought I had everything cleared up but apparently not. The only thing I'm experiencing are these flashes of 'successfully blocked access to a potentially malicious website and a string  of numbers like 222.186.19.10

 

I saw on another thread to do this DDS thing so I did... hope you guys can help:

 

 

Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 10.0.9200.16537
Run by Liz at 20:30:27 on 2014-01-18
Microsoft Windows 8  6.2.9200.0.1252.1.1033.18.10031.6201 [GMT -8:00]
.
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\system32\dwm.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files\IDT\WDM\STacSV64.exe
C:\windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpert.exe
C:\windows\system32\svchost.exe -k apphost
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\windows\system32\dashost.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\atieclxx.exe
C:\windows\system32\taskhostex.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\windows\Explorer.EXE
C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
C:\windows\system32\SearchIndexer.exe
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\RuntimeBroker.exe
C:\windows\syswow64\wwahost.exe
c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files\IDT\WDM\Beats64.exe
C:\Program Files\IDT\WDM\sttray64.exe
C:\Users\Liz\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
C:\Program Files (x86)\iTunes\iTunes.exe
c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\windows\SysWOW64\WinMsgBalloonServer.exe
C:\windows\SysWOW64\WinMsgBalloonClient.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\windows\system32\taskeng.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\windows\system32\SearchProtocolHost.exe
C:\windows\system32\SearchFilterHost.exe
C:\windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit = userinit.exe,
BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll
BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ips\ipsbho.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Ask.com Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll
TB: Ask.com Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
TB: Ask.com Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
TB: Shopop Widget: {ae07101b-46d4-4a98-af68-0333ea26e113} - 
TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coieplg.dll
uRun: [uTorrent] "C:\Users\Liz\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [btTray] "c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
mRun: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
mRun: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\StartUp\MCAFEE~1.LNK - C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe
IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
TCP: NameServer = 75.75.76.76 75.75.75.75
TCP: Interfaces\{1705EF9F-02F1-4DAA-9ED1-89F119D83905} : DHCPNameServer = 75.75.76.76 75.75.75.75
TCP: Interfaces\{A964A391-18B2-4534-A28A-7A551A08EC2F} : DHCPNameServer = 75.75.76.76 75.75.75.75
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: Shopop WidgetEngine: {31ad400d-1b06-4e33-a59a-90c2c140cba0} - 
x64-BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-TB: Shopop Widget: {ae07101b-46d4-4a98-af68-0333ea26e113} - 
x64-TB: avast! Online Security: {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
x64-Run: [beatsOSDApp] C:\Program Files\IDT\WDM\beats64.exe
x64-Run: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Liz\AppData\Roaming\Mozilla\Firefox\Profiles\vajfi97c.default\
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll
.
============= SERVICES / DRIVERS ===============
.
R0 ahcix64s;ahcix64s;C:\windows\System32\Drivers\ahcix64s.sys [2012-10-5 298304]
R0 aswRvrt;avast! Revert;C:\windows\System32\Drivers\aswRvrt.sys [2014-1-15 65776]
R0 aswVmm;avast! VM Monitor;C:\windows\System32\Drivers\aswVmm.sys [2014-1-15 207904]
R1 aswSnx;aswSnx;C:\windows\System32\Drivers\aswSnx.sys [2014-1-15 1034464]
R1 aswSP;aswSP;C:\windows\System32\Drivers\aswSP.sys [2014-1-15 422216]
R1 CLVirtualDrive;CLVirtualDrive;C:\windows\System32\Drivers\CLVirtualDrive.sys [2013-1-16 92536]
R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2013-1-16 89600]
R2 AMD External Events Utility;AMD External Events Utility;C:\windows\System32\atiesrxx.exe [2012-11-14 239616]
R2 AMD_RAIDXpert;AMD RAIDXpert;C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe [2012-9-6 61440]
R2 aswMonFlt;aswMonFlt;C:\windows\System32\Drivers\aswMonFlt.sys [2014-1-15 78648]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-1-15 50344]
R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2012-9-27 86528]
R2 HPConnectedRemote;HP Connected Remote Service;C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [2012-10-12 35744]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2014-1-15 418376]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2014-1-15 701512]
R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccsvchst.exe [2014-1-15 144368]
R3 aswStm;aswStm;C:\windows\System32\Drivers\aswstm.sys [2014-1-15 79672]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\windows\System32\Drivers\AtihdW86.sys [2012-7-17 98472]
R3 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20140110.001\BHDrvx64.sys [2014-1-10 1526488]
R3 BtAudioBusSrv;Ralink Bluetooth Audio Bus Service;C:\windows\System32\Drivers\BtAudioBus.sys [2012-6-15 23136]
R3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service;C:\windows\System32\Drivers\BtL2caScoIf.sys [2012-7-19 56904]
R3 BthLEEnum;Bluetooth Low Energy Driver;C:\windows\System32\Drivers\BthLEEnum.sys [2012-7-25 202752]
R3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service;C:\windows\System32\Drivers\IvtUrbBtFlt.sys [2012-10-2 48608]
R3 ccSet_NIS;Norton Internet Security Settings Manager;C:\windows\System32\Drivers\NISx64\1404000.028\ccsetx64.sys [2014-1-15 169048]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2014-1-15 137648]
R3 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20140117.001\IDSviA64.sys [2014-1-18 521944]
R3 MBAMProtector;MBAMProtector;C:\windows\System32\Drivers\mbam.sys [2014-1-15 25928]
R3 netr28x;Ralink 802.11n Extensible Wireless Driver;C:\windows\System32\Drivers\netr28x.sys [2013-4-15 2482960]
R3 rtbth;RTBTH Bluetooth Device Driver;C:\windows\System32\Drivers\rtbth.sys [2012-10-2 692832]
R3 RTL8168;Realtek 8168 NT Driver;C:\windows\System32\Drivers\Rt630x64.sys [2012-9-28 683664]
R3 SymDS;Symantec Data Store;C:\windows\System32\Drivers\NISx64\1404000.028\symds64.sys [2014-1-15 493656]
R3 SymEFA;Symantec Extended File Attributes;C:\windows\System32\Drivers\NISx64\1404000.028\symefa64.sys [2014-1-15 1139800]
R3 SymIRON;Symantec Iron Driver;C:\windows\System32\Drivers\NISx64\1404000.028\ironx64.sys [2014-1-15 224416]
R3 SymNetS;Symantec Network Security WFP Driver;C:\windows\System32\Drivers\NISx64\1404000.028\symnets.sys [2014-1-15 433752]
R3 tilfilter;TI xHCI Lower Filter Driver Service;C:\windows\System32\Drivers\TIxHCIlfilter.sys [2012-11-20 17528]
R3 tiufilter;TI xHCI Upper Filter Driver Service;C:\windows\System32\Drivers\TIxHCIufilter.sys [2012-11-20 23184]
R3 usbfilter;AMD USB Filter Driver;C:\windows\System32\Drivers\usbfilter.sys [2012-7-16 57000]
S0 SymELAM;Symantec ELAM Driver;C:\windows\System32\Drivers\NISx64\1404000.028\symelam.sys [2014-1-15 23448]
S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [2012-9-5 234776]
S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 WUDFWpdMtp;WUDFWpdMtp;C:\windows\System32\Drivers\WUDFRd.sys [2012-7-25 198656]
.
=============== Created Last 30 ================
.
2014-01-19 03:31:44 -------- d-----w- C:\Users\Liz\AppData\Local\Macromedia
2014-01-18 18:35:38 236208 ----a-w- C:\ProgramData\Microsoft\Windows\Sqm\Manifest\Sqm10230.bin
2014-01-18 18:09:31 109568 ----a-w- C:\windows\System32\dskquota.dll
2014-01-18 18:09:30 82944 ----a-w- C:\windows\SysWow64\dskquota.dll
2014-01-18 18:09:21 929792 ----a-w- C:\windows\SysWow64\mfnetsrc.dll
2014-01-18 18:09:21 1172992 ----a-w- C:\windows\System32\mfnetsrc.dll
2014-01-18 18:09:20 677888 ----a-w- C:\windows\System32\mfnetcore.dll
2014-01-18 18:09:20 673280 ----a-w- C:\windows\System32\mfmpeg2srcsnk.dll
2014-01-18 18:09:20 568832 ----a-w- C:\windows\SysWow64\mfnetcore.dll
2014-01-18 18:09:20 513024 ----a-w- C:\windows\SysWow64\mfmpeg2srcsnk.dll
2014-01-18 18:07:39 11459584 ----a-w- C:\windows\System32\glcndFilter.dll
2014-01-18 17:50:50 23350272 ----a-w- C:\Program Files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2014-01-18 17:50:50 22615040 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2014-01-17 03:04:54 -------- d-----w- C:\Users\Liz\AppData\Local\gtk-2.0
2014-01-17 03:04:46 -------- d-----w- C:\Users\Liz\.thumbnails
2014-01-17 02:58:29 -------- d-----w- C:\Users\Liz\AppData\Local\fontconfig
2014-01-17 02:58:25 -------- d-----w- C:\Users\Liz\AppData\Local\gegl-0.2
2014-01-17 02:58:25 -------- d-----w- C:\Users\Liz\.gimp-2.8
2014-01-16 16:42:53 -------- d-----w- C:\windows\System32\MRT
2014-01-16 16:31:22 50784 ----a-w- C:\ProgramData\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin
2014-01-16 16:31:16 17536 ----a-w- C:\ProgramData\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2014-01-16 02:57:38 796760 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\srtsp64.sys
2014-01-16 02:57:38 493656 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\symds64.sys
2014-01-16 02:57:38 433752 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\symnets.sys
2014-01-16 02:57:38 36952 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\srtspx64.sys
2014-01-16 02:57:38 23448 ----a-r- C:\windows\System32\drivers\NISx64\1404000.028\symelam.sys
2014-01-16 02:57:38 224416 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\ironx64.sys
2014-01-16 02:57:38 169048 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\ccsetx64.sys
2014-01-16 02:57:38 1139800 ----a-w- C:\windows\System32\drivers\NISx64\1404000.028\symefa64.sys
2014-01-16 02:57:32 -------- d-----w- C:\windows\System32\drivers\NISx64\1404000.028
2014-01-15 21:02:24 -------- d-----w- C:\Program Files\GIMP 2
2014-01-15 18:11:54 -------- d-----w- C:\Program Files (x86)\VideoLAN
2014-01-15 17:18:44 785624 ----a-w- C:\windows\System32\drivers\Wdf01000.sys
2014-01-15 17:13:25 17888 ----a-w- C:\windows\System32\msvcr100_clr0400.dll
2014-01-15 17:13:23 17888 ----a-w- C:\windows\SysWow64\msvcr100_clr0400.dll
2014-01-15 17:09:23 -------- d-----w- C:\Users\Liz\AppData\Roaming\OpenOffice
2014-01-15 17:01:00 -------- d-----w- C:\Users\Liz\AppData\Local\Apple Computer
2014-01-15 17:00:43 33240 ----a-w- C:\windows\System32\drivers\GEARAspiWDM.sys
2014-01-15 17:00:29 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-15 17:00:29 -------- d-----w- C:\Program Files\iTunes
2014-01-15 17:00:29 -------- d-----w- C:\Program Files\iPod
2014-01-15 17:00:29 -------- d-----w- C:\Program Files (x86)\iTunes
2014-01-15 17:00:17 -------- d-----w- C:\Users\Liz\AppData\Local\Apple
2014-01-15 16:28:39 -------- d-----w- C:\ProgramData\McAfee Security Scan
2014-01-15 16:28:36 -------- d-----w- C:\Program Files (x86)\McAfee Security Scan
2014-01-15 16:28:03 -------- d-----w- C:\Users\Liz\AppData\Local\Adobe
2014-01-15 16:25:08 -------- d-----w- C:\Program Files (x86)\OpenOffice 4
2014-01-15 16:12:50 -------- d-----w- C:\Program Files (x86)\Common Files\Symantec Shared
2014-01-15 16:07:13 1890816 ----a-w- C:\windows\System32\crypt32.dll
2014-01-15 16:07:13 1569280 ----a-w- C:\windows\SysWow64\crypt32.dll
2014-01-15 16:06:58 694272 ----a-w- C:\windows\SysWow64\rpcrt4.dll
2014-01-15 16:06:58 1314816 ----a-w- C:\windows\System32\rpcrt4.dll
2014-01-15 16:06:11 141312 ----a-w- C:\windows\System32\cryptnet.dll
2014-01-15 16:06:11 1255936 ----a-w- C:\windows\System32\certutil.exe
2014-01-15 16:06:11 109056 ----a-w- C:\windows\SysWow64\cryptnet.dll
2014-01-15 16:06:11 1013248 ----a-w- C:\windows\SysWow64\certutil.exe
2014-01-15 16:05:34 411880 ----a-w- C:\windows\System32\drivers\FWPKCLNT.SYS
2014-01-15 16:04:00 2893824 ----a-w- C:\windows\System32\msmpeg2vdec.dll
2014-01-15 16:04:00 2400256 ----a-w- C:\windows\SysWow64\msmpeg2vdec.dll
2014-01-15 16:03:41 419328 ----a-w- C:\windows\System32\schannel.dll
2014-01-15 16:03:41 323072 ----a-w- C:\windows\SysWow64\schannel.dll
2014-01-15 16:02:49 595968 ----a-w- C:\windows\System32\qedit.dll
2014-01-15 16:02:49 496640 ----a-w- C:\windows\SysWow64\qedit.dll
2014-01-15 16:02:11 26624 ----a-w- C:\windows\System32\ReAgentc.exe
2014-01-15 16:02:11 24064 ----a-w- C:\windows\SysWow64\ReAgentc.exe
2014-01-15 16:02:10 945152 ----a-w- C:\windows\System32\resetengmig.dll
2014-01-15 16:02:10 443392 ----a-w- C:\windows\System32\ReAgent.dll
2014-01-15 16:02:10 375808 ----a-w- C:\windows\SysWow64\ReAgent.dll
2014-01-15 16:02:10 132096 ----a-w- C:\windows\System32\sysreset.exe
2014-01-15 16:02:10 1011200 ----a-w- C:\windows\System32\reseteng.dll
2014-01-15 16:00:23 1838080 ----a-w- C:\windows\System32\DWrite.dll
2014-01-15 16:00:23 1421312 ----a-w- C:\windows\SysWow64\DWrite.dll
2014-01-15 16:00:14 79192 ----a-w- C:\windows\System32\drivers\usbehci.sys
2014-01-15 16:00:14 623448 ----a-w- C:\windows\System32\drivers\usbhub.sys
2014-01-15 16:00:14 498008 ----a-w- C:\windows\System32\drivers\usbport.sys
2014-01-15 16:00:14 32256 ----a-w- C:\windows\System32\drivers\usbuhci.sys
2014-01-15 16:00:14 27136 ----a-w- C:\windows\System32\drivers\usbohci.sys
2014-01-15 16:00:14 21848 ----a-w- C:\windows\System32\drivers\usbd.sys
2014-01-15 16:00:14 120832 ----a-w- C:\windows\System32\drivers\usbccgp.sys
2014-01-15 16:00:05 20992 ----a-w- C:\windows\System32\drivers\usb8023.sys
2014-01-15 15:59:22 70144 ----a-w- C:\windows\System32\appinfo.dll
2014-01-15 15:59:22 112872 ----a-w- C:\windows\System32\consent.exe
2014-01-15 15:55:17 733184 ----a-w- C:\windows\System32\win32spl.dll
2014-01-15 15:55:17 2842112 ----a-w- C:\windows\System32\WMVDECOD.DLL
2014-01-15 15:55:16 2620928 ----a-w- C:\windows\SysWow64\WMVDECOD.DLL
2014-01-15 15:53:37 861184 ----a-w- C:\windows\System32\drivers\http.sys
2014-01-15 15:53:37 2062848 ----a-w- C:\windows\System32\d3d11.dll
2014-01-15 15:53:36 1711616 ----a-w- C:\windows\SysWow64\d3d11.dll
2014-01-15 15:53:24 2851840 ----a-w- C:\windows\System32\esent.dll
2014-01-15 15:53:24 2382336 ----a-w- C:\windows\SysWow64\esent.dll
2014-01-15 15:53:17 420864 ----a-w- C:\windows\System32\WMPhoto.dll
2014-01-15 15:53:17 368640 ----a-w- C:\windows\SysWow64\WMPhoto.dll
2014-01-15 15:51:59 816128 ----a-w- C:\windows\System32\SearchIndexer.exe
2014-01-15 15:50:51 288768 ----a-w- C:\windows\System32\drivers\portcls.sys
2014-01-15 15:50:51 1636672 ----a-w- C:\windows\System32\WMALFXGFXDSP.dll
2014-01-15 15:50:50 5632 ----a-w- C:\windows\System32\drivers\drmkaud.sys
2014-01-15 15:50:50 370176 ----a-w- C:\windows\System32\SysFxUI.dll
2014-01-15 15:50:50 111616 ----a-w- C:\windows\System32\drivers\drmk.sys
2014-01-15 15:48:53 1558912 ----a-w- C:\Program Files\Windows Defender\DbgHelp.dll
2014-01-15 15:48:53 149264 ----a-w- C:\Program Files\Windows Defender\SymSrv.dll
2014-01-15 15:48:01 144896 ----a-w- C:\windows\System32\tssdisai.dll
2014-01-15 15:46:59 10116608 ----a-w- C:\windows\System32\twinui.dll
2014-01-15 15:46:58 8858112 ----a-w- C:\windows\SysWow64\twinui.dll
2014-01-15 15:46:57 2146304 ----a-w- C:\windows\System32\actxprxy.dll
2014-01-15 15:46:56 754176 ----a-w- C:\windows\SysWow64\actxprxy.dll
2014-01-15 15:46:56 2304512 ----a-w- C:\windows\System32\authui.dll
2014-01-15 15:46:56 2035712 ----a-w- C:\windows\SysWow64\authui.dll
2014-01-15 15:46:55 69864 ----a-w- C:\windows\System32\drivers\pdc.sys
2014-01-15 15:46:17 312320 ----a-w- C:\windows\System32\msieftp.dll
2014-01-15 15:46:16 273408 ----a-w- C:\windows\SysWow64\msieftp.dll
2014-01-15 15:46:12 2048 ----a-w- C:\windows\SysWow64\tzres.dll
2014-01-15 15:46:12 2048 ----a-w- C:\windows\System32\tzres.dll
2014-01-15 15:42:23 -------- d-----w- C:\Users\Liz\AppData\Roaming\Malwarebytes
2014-01-15 15:42:07 -------- d-----w- C:\ProgramData\Malwarebytes
2014-01-15 15:42:05 25928 ----a-w- C:\windows\System32\drivers\mbam.sys
2014-01-15 15:42:05 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-15 15:23:09 -------- d-----w- C:\Users\Liz\AppData\Roaming\Search Protection
2014-01-15 15:22:11 -------- d-----w- C:\Users\Liz\AppData\Roaming\uTorrent
2014-01-15 15:19:13 -------- d-----w- C:\Users\Liz\AppData\Roaming\AVAST Software
2014-01-15 15:18:19 -------- d-----w- C:\Users\Liz\AppData\Local\Google
2014-01-15 15:18:11 79672 ----a-w- C:\windows\System32\drivers\aswstm.sys
2014-01-15 15:18:11 65776 ----a-w- C:\windows\System32\drivers\aswRvrt.sys
2014-01-15 15:18:11 207904 ----a-w- C:\windows\System32\drivers\aswVmm.sys
2014-01-15 15:18:10 78648 ----a-w- C:\windows\System32\drivers\aswMonFlt.sys
2014-01-15 15:18:10 1034464 ----a-w- C:\windows\System32\drivers\aswSnx.sys
2014-01-15 15:18:09 92544 ----a-w- C:\windows\System32\drivers\aswRdr2.sys
2014-01-15 15:18:06 43152 ----a-w- C:\windows\avastSS.scr
2014-01-15 15:17:53 -------- d-----w- C:\Program Files\AVAST Software
2014-01-15 15:17:32 -------- d-----w- C:\ProgramData\AVAST Software
2014-01-15 15:16:13 -------- d-----w- C:\Users\Liz\AppData\Local\Mozilla
2014-01-15 15:06:12 -------- d-----w- C:\ProgramData\WRData
2014-01-15 14:59:55 -------- d-----w- C:\Users\Liz\AppData\Local\Hewlett-Packard
2014-01-15 14:52:09 -------- d-----w- C:\Program Files (x86)\Ask.com
2014-01-15 14:51:54 -------- d-----w- C:\Program Files (x86)\MSSOAP
2014-01-15 14:51:54 -------- d-----w- C:\Program Files (x86)\Common Files\MSSoap
2014-01-15 14:51:49 -------- d-----w- C:\Program Files (x86)\Webroot
2014-01-15 14:48:22 -------- d-----w- C:\Program Files (x86)\MyPC Backup
2014-01-15 14:48:11 16896 ----a-w- C:\windows\System32\sasnative64.exe
2014-01-15 14:48:11 -------- d-----w- C:\ProgramData\Systweak
2014-01-15 14:47:54 -------- d-----w- C:\Users\Liz\AppData\Roaming\Systweak
2014-01-15 14:47:52 20312 ----a-w- C:\windows\System32\roboot64.exe
2014-01-15 14:47:51 -------- d-----w- C:\Users\Liz\.android
2014-01-15 14:47:49 -------- d-----w- C:\Users\Liz\AppData\Local\Programs
2014-01-15 14:47:49 -------- d-----w- C:\Users\Liz\AppData\Local\cache
2014-01-15 14:47:48 -------- d-----w- C:\Users\Liz\AppData\Local\genienext
2014-01-15 14:47:47 -------- d-----w- C:\Users\Liz\AppData\Local\Mobogenie
2014-01-15 14:47:42 -------- d-----w- C:\Program Files (x86)\Mobogenie
2014-01-15 14:47:10 -------- d-----w- C:\Users\Liz\AppData\Local\SearchProtect
2014-01-15 14:40:42 -------- d-----w- C:\Users\Liz\AppData\Local\ATI
2014-01-15 14:39:44 -------- d-----w- C:\Users\Liz\AppData\Local\bluesoleil
2014-01-15 14:39:04 -------- d-----r- C:\Users\Liz\Searches
2014-01-15 14:39:04 -------- d-----r- C:\Users\Liz\Contacts
2014-01-15 14:38:13 -------- d-----w- C:\Users\Liz\AppData\Local\assembly
2014-01-15 14:37:58 -------- d-----w- C:\Users\Liz\AppData\Local\Power2Go8
2014-01-15 14:37:24 -------- d-----w- C:\Users\Liz\AppData\Local\VirtualStore
2014-01-15 14:37:11 -------- d-----w- C:\Users\Liz\AppData\Local\Packages
.
==================== Find3M  ====================
.
2014-01-16 02:57:42 177312 ----a-w- C:\windows\System32\drivers\SYMEVENT64x86.SYS
2014-01-09 08:02:07 78296 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-09 08:02:07 694240 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe
2013-12-07 06:37:24 688640 ----a-w- C:\windows\System32\WSShared.dll
2013-12-07 06:37:24 163840 ----a-w- C:\windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-07 05:15:46 562688 ----a-w- C:\windows\SysWow64\WSShared.dll
2013-12-07 05:15:46 124928 ----a-w- C:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-06 23:18:57 4036608 ----a-w- C:\windows\System32\win32k.sys
2013-10-31 05:56:24 915968 ----a-w- C:\windows\System32\MPSSVC.dll
2013-10-31 05:56:02 758784 ----a-w- C:\windows\System32\FirewallAPI.dll
2013-10-31 04:01:46 550400 ----a-w- C:\windows\SysWow64\FirewallAPI.dll
2013-10-31 03:42:19 74752 ----a-w- C:\windows\System32\drivers\mpsdrv.sys
2013-10-28 05:50:42 588288 ----a-w- C:\windows\System32\SHCore.dll
2013-10-28 04:05:52 452608 ----a-w- C:\windows\SysWow64\SHCore.dll
2013-10-25 06:19:22 2241536 ----a-w- C:\windows\System32\wininet.dll
2013-10-25 06:19:12 915968 ----a-w- C:\windows\System32\uxtheme.dll
2013-10-25 06:17:57 3959808 ----a-w- C:\windows\System32\jscript9.dll
2013-10-25 04:45:11 1767936 ----a-w- C:\windows\SysWow64\wininet.dll
2013-10-25 04:43:42 2877952 ----a-w- C:\windows\SysWow64\jscript9.dll
.
============= FINISH: 20:31:30.57 ===============
 

 

 

Link to post
Share on other sites
MrCharlie

MrCharlie

Posted
Posted

Welcome to the forum, do you have the Attach.txt???

-----------------------

Please download and run RogueKiller 32 Bit to your desktop.

RogueKiller 64 Bit <---use this one for 64 bit systems

Which system am I using?

Quit all running programs.

For Windows XP, double-click to start.

For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

(please don't put logs in code or quotes and use the default font)

General P2P/Piracy Warning:

1. If you're using Peer 2 Peer software such uTorrent, BitTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

2. If you have illegal/cracked software, cracks, keygens, custom (Adobe) host file, etc. on the system, please remove or uninstall them now and read the policy on Piracy.

Failure to remove such software will result in your topic being closed and no further assistance being provided.

MrC

Note:

Please read all of my instructions completely including these.

Make sure system restore is turned on and running, please create a new restore point

Make sure you're subscribed to this topic: Click on the Follow This Topic Button (at the top right of this page), make sure that the Receive notification box is checked and that it is set to Instantly

Removing malware can be unpredictable...unlikely but things can go very wrong! Backup any files that cannot be replaced. You can copy them to a CD/DVD, external drive or a pen drive

<+>Please don't run any other scans, download, install or uninstall any programs while I'm working with you.

<+>The removal of malware isn't instantaneous, please be patient.

<+>When we are done, I'll give to instructions on how to cleanup all the tools and logs

<+>Please stick with me until I give you the "all clear" and Please don't waste my time by leaving before that.

------->Your topic will be closed if you haven't replied within 3 days!<--------

(If I don't respond within 24 hours, please send me a PM)

Link to post
Share on other sites
  • Staff
gringo_pr

gringo_pr

Posted
  • Staff
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.