Jump to content

<User>-wchelper.dll

hrast

By hrast
in Resolved Malware Removal Logs

 Share

Recommended Posts

hrast

hrast

Posted
Posted

I've tried to clean this myself, but obviously I missed something, as it keeps coming back.

 

 

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.16428  BrowserJavaVersion: 10.51.2
Run by Michael at 21:52:11 on 2014-01-29
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.8190.5883 [GMT -6:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.05\AsSysCtrlService.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\ShrewSoft\VPN Client\iked.exe
C:\Windows\system32\IProsetMonitor.exe
C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files (x86)\NTP\bin\ntpd.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\WUDFHost.exe
C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe
C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\EVGA Precision X\EVGAPrecision.exe
D:\Program Files (x86)\ASUS\TurboV EVO\TurboVHELP.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
D:\Program Files (x86)\ASUS\EPU-6 Engine\SixEngine.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Windows\SysWOW64\UMonit.exe
D:\Program Files (x86)\Steam\Steam.exe
C:\Users\Michael\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\DVDFab Passkey\DVDFabPasskey.exe
C:\Program Files (x86)\Launchy\Launchy.exe
C:\Users\Michael\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
D:\Program Files (x86)\PuTTY\pageant.exe
D:\Program Files (x86)\ASUS\TurboV EVO\TurboV_EVO.exe
D:\Program Files (x86)\ASUS\AI Suite\QFan3\QFanHelp.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Windows\SysWOW64\explorer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe
D:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
uRun: [steam] "D:\Program Files (x86)\Steam\steam.exe" -silent
uRun: [MusicManager] "C:\Users\Michael\AppData\Local\Programs\Google\MusicManager\MusicManager.exe"
uRun: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
uRun: [DAEMON Tools Lite] "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
uRun: [DVDFab Passkey] "C:\Program Files (x86)\DVDFab Passkey\DVDFabPasskey.exe"
mRun: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [TurboV EVO] "D:\Program Files (x86)\ASUS\TurboV EVO\TurboV_EVO.exe" -b
mRun: [QFan Help] "D:\Program Files (x86)\ASUS\AI Suite\QFan3\QFanHelp.exe"
mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
mRun: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
StartupFolder: C:\Users\Michael\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Michael\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\Users\Michael\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\LUTLOA~1.LNK - C:\Program Files (x86)\ColorEyes Display Pro Trial\LUTLoader.exe
StartupFolder: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NVIDIA HD-Audio Driver.url
StartupFolder: C:\Users\Michael\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\pageant.lnk - D:\Program Files (x86)\PuTTY\pageant.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\Launchy.lnk - C:\Program Files (x86)\Launchy\Launchy.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
IE: E&xport to Microsoft Excel - D:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - D:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll


TCP: NameServer = 10.100.1.1
TCP: Interfaces\{0E085DC5-B3C7-4F7E-ACF9-45C4B8EE0926} : DHCPNameServer = 10.100.1.1
TCP: Interfaces\{C04AEC86-8C69-4BA3-A700-7CAC97C1662D} : NameServer = 10.53.55.20
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
AppInit_DLLs= `WA
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
x64-Run: [uMonit] C:\Windows\SysWOW64\UMonit.exe
x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\yo6b96kz.default\
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\Logitech\Harmony Remote Driver\NprtHarmonyPlugin.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Users\Michael\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\yo6b96kz.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}\plugins\npGarmin.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll
FF - plugin: D:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: D:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: D:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
FF - ExtSQL: 2013-12-01 12:37; BitTorrent_WebUI_2@firefox.alexisbrunet.com; C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\yo6b96kz.default\extensions\BitTorrent_WebUI_2@firefox.alexisbrunet.com.xpi
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2013-9-27 248240]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2013-7-11 283064]
R1 vflt;Shrew Soft Lightweight Filter;C:\Windows\System32\drivers\vfilter.sys [2013-6-30 24064]
R2 AsSysCtrlService;ASUS System Control Service;C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.05\AsSysCtrlService.exe [2013-6-15 109056]
R2 iked;ShrewSoft IKE Daemon;C:\Program Files\ShrewSoft\VPN Client\iked.exe -service --> C:\Program Files\ShrewSoft\VPN Client\iked.exe -service [?]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;C:\Windows\System32\IPROSetMonitor.exe [2013-7-30 204552]
R2 IntuitUpdateServiceV4;Intuit Update Service v4;C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe [2013-6-28 14624]
R2 ipsecd;ShrewSoft IPSEC Daemon;C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe -service --> C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe -service [?]
R2 NTP;Network Time Protocol Daemon;C:\Program Files (x86)\NTP\bin\ntpd.exe -U 3 -M -g -c "C:\Program Files (x86)\NTP\etc\ntp.conf" --> C:\Program Files (x86)\NTP\bin\ntpd.exe -U 3 -M -g -c C:\Program Files (x86)\NTP\etc\ntp.conf [?]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-12-19 411936]
R3 AVerBDA6x_x64;AVerMedia SAA716x BDA Service;C:\Windows\System32\drivers\AVerBDA716x_x64.sys [2009-4-30 1353600]
R3 dvdfab;dvdfab;C:\Windows\System32\drivers\dvdfab.sys [2013-9-29 79232]
R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2010-1-22 77824]
R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2010-1-22 180224]
R3 RTCore64;RTCore64;C:\Program Files (x86)\EVGA Precision X\RTCore64.sys [2013-7-17 15176]
R3 USTOR2K;Genesys USB Mass Storage Windows Driver;C:\Windows\System32\drivers\ustor2k.sys [2013-7-9 33664]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;C:\Windows\System32\drivers\viahduaa.sys [2013-6-13 1342064]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-11 124088]
S3 cpudrv64;cpudrv64;C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [2011-6-2 17864]
S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2011-4-12 71168]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2013-12-11 111616]
S3 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2013-1-20 134944]
S3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-6-13 19456]
S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2011-6-10 539240]
S3 Spyder3;Datacolor Spyder3;C:\Windows\System32\drivers\Spyder3.sys [2013-6-21 15360]
S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136]
S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-11-13 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2013-6-13 30208]
S3 vnet;Shrew Soft Virtual Adapter;C:\Windows\System32\drivers\virtualnet.sys [2013-6-30 17408]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2013-6-13 1255736]
.
=============== Created Last 30 ================
.
2014-01-30 02:25:25    154283    ---h--w-    C:\Users\Michael\AppData\Roaming\Michael-wchelper.dll
2014-01-30 01:27:51    10315576    ----a-w-    C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D2380569-026F-4462-ADAD-A3EE68784C06}\mpengine.dll
2014-01-29 14:43:17    10315576    ------w-    C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-01-29 14:40:32    --------    d-sh--w-    C:\$RECYCLE.BIN
2014-01-29 14:31:08    98816    ----a-w-    C:\Windows\sed.exe
2014-01-29 14:31:08    256000    ----a-w-    C:\Windows\PEV.exe
2014-01-29 14:31:08    208896    ----a-w-    C:\Windows\MBR.exe
2014-01-29 14:24:42    --------    d-----w-    C:\Windows\ERUNT
2014-01-29 14:18:49    --------    d-----w-    C:\AdwCleaner
2014-01-29 13:59:56    119000    ----a-w-    C:\Windows\System32\drivers\MBAMSwissArmy.sys
2014-01-29 13:59:56    --------    d-----w-    C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-29 13:59:37    91352    ----a-w-    C:\Windows\System32\drivers\mbamchameleon.sys
2014-01-28 03:57:38    --------    d-----w-    C:\Users\Michael\.thumb
2014-01-24 14:26:31    965000    ------w-    C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{697CFDFD-C606-49CC-BF1C-DA1194800D2A}\gapaengine.dll
2014-01-22 02:26:10    --------    d-----w-    C:\Users\Michael\AppData\Local\IsolatedStorage
2014-01-22 02:26:02    --------    d-----w-    C:\Users\Michael\AppData\Roaming\Intuit
2014-01-22 02:24:57    --------    d-----w-    C:\Program Files (x86)\Common Files\Intuit
2014-01-22 02:23:42    --------    d-----w-    C:\Program Files (x86)\TurboTax
2014-01-22 02:23:03    --------    d-----w-    C:\ProgramData\Intuit
2014-01-21 22:39:58    --------    d-----w-    C:\Program Files\Wireshark
2014-01-16 04:47:31    --------    d-----w-    C:\Windows\Migration
2014-01-15 14:29:07    99840    ----a-w-    C:\Windows\System32\drivers\usbccgp.sys
2014-01-15 14:29:07    7808    ----a-w-    C:\Windows\System32\drivers\usbd.sys
2014-01-15 14:29:07    53248    ----a-w-    C:\Windows\System32\drivers\usbehci.sys
2014-01-15 14:29:07    343040    ----a-w-    C:\Windows\System32\drivers\usbhub.sys
2014-01-15 14:29:07    325120    ----a-w-    C:\Windows\System32\drivers\usbport.sys
2014-01-15 14:29:07    30720    ----a-w-    C:\Windows\System32\drivers\usbuhci.sys
2014-01-15 14:29:07    25600    ----a-w-    C:\Windows\System32\drivers\usbohci.sys
2014-01-15 14:29:06    376768    ----a-w-    C:\Windows\System32\drivers\netio.sys
2014-01-15 14:29:06    3156480    ----a-w-    C:\Windows\System32\win32k.sys
2014-01-12 18:48:43    --------    d-----w-    C:\Users\Michael\AppData\Roaming\NVIDIA
2014-01-12 06:42:51    --------    d-----w-    C:\ProgramData\Oracle
2014-01-12 06:42:30    96168    ----a-w-    C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-04 14:57:47    --------    d-----w-    C:\Users\Michael\AppData\Local\NVIDIA Corporation
2014-01-04 14:51:47    922912    ----a-w-    C:\Windows\System32\nvvsvc.exe
2014-01-04 14:51:47    6671648    ----a-w-    C:\Windows\System32\nvcpl.dll
2014-01-04 14:51:47    63776    ----a-w-    C:\Windows\System32\nvshext.dll
2014-01-04 14:51:47    386336    ----a-w-    C:\Windows\System32\nvmctray.dll
2014-01-04 14:51:47    3490080    ----a-w-    C:\Windows\System32\nvsvc64.dll
2014-01-04 14:51:39    61216    ----a-w-    C:\Windows\System32\OpenCL.dll
2014-01-04 14:51:39    53024    ----a-w-    C:\Windows\SysWow64\OpenCL.dll
2014-01-04 14:51:36    --------    d-----w-    C:\ProgramData\NVIDIA Corporation
2014-01-04 14:51:32    --------    d-----w-    C:\Program Files (x86)\NVIDIA Corporation
2014-01-04 14:50:58    3071656    ----a-w-    C:\Windows\System32\nvapi64.dll
2014-01-04 14:50:58    2698272    ----a-w-    C:\Windows\SysWow64\nvapi.dll
2014-01-04 14:50:58    1884448    ----a-w-    C:\Windows\System32\nvdispco6433193.dll
2014-01-04 14:50:58    18310112    ----a-w-    C:\Windows\System32\nvwgf2umx.dll
2014-01-04 14:50:58    15230352    ----a-w-    C:\Windows\SysWow64\nvd3dum.dll
2014-01-04 14:50:58    1511712    ----a-w-    C:\Windows\System32\nvdispgenco6433193.dll
2014-01-04 14:50:58    1510176    ----a-w-    C:\Windows\System32\nvhdagenco64.dll
2014-01-04 14:50:58    1436528    ----a-w-    C:\Windows\System32\nvumdshimx.dll
2014-01-04 14:50:25    --------    d-----w-    C:\Program Files\NVIDIA Corporation
2014-01-04 14:35:03    --------    d-----w-    C:\Users\Michael\AppData\Local\WindowsApplication1
.
==================== Find3M  ====================
.
2014-01-19 07:33:29    270496    ------w-    C:\Windows\System32\MpSigStub.exe
2014-01-17 14:46:40    71048    ----a-w-    C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-17 14:46:40    692616    ----a-w-    C:\Windows\SysWow64\FlashPlayerApp.exe
2013-12-19 18:20:22    590112    ----a-w-    C:\Windows\SysWow64\nvStreaming.exe
2013-12-19 05:01:48    3539040    ----a-w-    C:\Windows\System32\nvcoproc.bin
2013-12-18 23:19:54    252688    ----a-w-    C:\Windows\System32\drivers\VBoxDrv.sys
2013-12-18 23:16:44    154896    ----a-w-    C:\Windows\System32\drivers\VBoxNetFlt.sys
2013-12-18 23:16:44    126736    ----a-w-    C:\Windows\System32\drivers\VBoxUSBMon.sys
2013-12-18 23:13:30    204048    ----a-w-    C:\Windows\System32\VBoxNetFltNobj.dll
2013-12-02 20:22:52    1795952    ----a-w-    C:\Windows\System32\WdfCoInstaller01011.dll
2013-12-02 20:22:52    1002728    ----a-w-    C:\Windows\System32\WinUSBCoInstaller2.dll
2013-12-02 17:49:13    0    ----a-w-    C:\Program Files (x86)\izWrTe3457765001304314241.tmp
2013-11-28 13:38:22    31520    ----a-w-    C:\Windows\System32\nvhdap64.dll
2013-11-28 13:38:18    197408    ----a-w-    C:\Windows\System32\drivers\nvhda64v.sys
2013-11-26 10:19:07    2724864    ----a-w-    C:\Windows\System32\mshtml.tlb
2013-11-26 10:18:23    4096    ----a-w-    C:\Windows\System32\ieetwcollectorres.dll
2013-11-26 09:48:07    66048    ----a-w-    C:\Windows\System32\iesetup.dll
2013-11-26 09:46:25    48640    ----a-w-    C:\Windows\System32\ieetwproxystub.dll
2013-11-26 09:23:02    2724864    ----a-w-    C:\Windows\SysWow64\mshtml.tlb
2013-11-26 09:18:39    139264    ----a-w-    C:\Windows\System32\ieUnatt.exe
2013-11-26 09:18:09    111616    ----a-w-    C:\Windows\System32\ieetwcollector.exe
2013-11-26 09:16:57    708608    ----a-w-    C:\Windows\System32\jscript9diag.dll
2013-11-26 08:35:02    5769216    ----a-w-    C:\Windows\System32\jscript9.dll
2013-11-26 08:28:16    553472    ----a-w-    C:\Windows\SysWow64\jscript9diag.dll
2013-11-26 08:16:12    4243968    ----a-w-    C:\Windows\SysWow64\jscript9.dll
2013-11-26 08:02:16    1995264    ----a-w-    C:\Windows\System32\inetcpl.cpl
2013-11-26 07:32:06    1928192    ----a-w-    C:\Windows\SysWow64\inetcpl.cpl
2013-11-26 07:07:57    2334208    ----a-w-    C:\Windows\System32\wininet.dll
2013-11-26 06:33:33    1820160    ----a-w-    C:\Windows\SysWow64\wininet.dll
2013-11-23 18:26:20    417792    ----a-w-    C:\Windows\SysWow64\WMPhoto.dll
2013-11-23 17:47:34    465920    ----a-w-    C:\Windows\System32\WMPhoto.dll
2013-11-22 08:36:08    1515296    ----a-w-    C:\Windows\System32\nvhdagenco6420103.dll
2013-11-13 20:10:00    940032    ----a-w-    C:\Windows\System32\MsSpellCheckingFacility.exe
2013-11-13 20:10:00    194048    ----a-w-    C:\Windows\SysWow64\elshyph.dll
2013-11-12 02:23:09    2048    ----a-w-    C:\Windows\System32\tzres.dll
2013-11-12 02:07:29    2048    ----a-w-    C:\Windows\SysWow64\tzres.dll
.
============= FINISH: 21:52:19.40 ===============
 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 6/13/2013 5:35:13 PM
System Uptime: 1/29/2014 7:16:22 PM (2 hours ago)
.
Motherboard: ASUSTeK Computer INC. |  | P7P55D-E PRO
Processor: Intel® Core i5 CPU         760  @ 2.80GHz | LGA1156 | 2801/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 168 GiB total, 106.96 GiB free.
D: is FIXED (NTFS) - 1863 GiB total, 1162.645 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is CDROM (UDF)
M: is FIXED (NTFS) - 1863 GiB total, 550.306 GiB free.
R: is Removable
Z: is NetworkDisk (NTFS) - 5587 GiB total, 1972.048 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Shrew Soft Virtual Adapter
Device ID: ROOT\VNET\0000
Manufacturer: Shrew Soft
Name: Shrew Soft Virtual Adapter
PNP Device ID: ROOT\VNET\0000
Service: vnet
.
==== System Restore Points ===================
.
RP173: 1/17/2014 8:50:10 AM - Installed Java 7 Update 51
RP174: 1/19/2014 1:46:02 AM - Windows Update
RP175: 1/21/2014 8:24:58 PM - Installed TurboTax 2013 wrapper
RP176: 1/22/2014 8:26:00 AM - Windows Update
RP177: 1/25/2014 9:18:50 AM - Windows Update
RP178: 1/29/2014 8:31:09 AM - ComboFix created restore point
RP179: 1/29/2014 7:27:43 PM - Windows Update
.
==== Installed Programs ======================
.
64 Bit HP CIO Components Installer
Adobe AIR
Adobe Community Help
Adobe Creative Suite 5 Master Collection
Adobe Flash Player 11 ActiveX
Adobe Flash Player 12 Plugin
Adobe Photoshop Lightroom 5 64-bit
Adobe Reader XI (11.0.06)
AI Suite
Avidemux 2.6 - 64bits
Bulk Rename Utility 2.7.1.2
calibre 64bit
CCleaner
ChromecastApp
ColorEyes Display Pro Trial
DAEMON Tools Lite
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Deluge 1.3.6
Dropbox
DVDFab 8.2.1.5 (10/10/2012) Qt
DVDFab Passkey 8.2.0.8 (14/01/2014)
DVDStyler v2.6.1
EditPad Lite 7.3.0
EpNamer
EPU-6 Engine
EVGA Precision X 4.2.1
Eye-Fi Center 3.4
FileBot
Flirc
Garmin City Navigator North America NT 2014.30 Update
GOG.com Downloader version 3.5.2
Google Chrome
Google Drive
Google Update Helper
HandBrake 0.9.9.1
Harmony Browser Plug-in
ImgBurn
Intel® Network Connections 18.7.28.0
Intel® Update Manager
Intel® SSD Toolbox
Java 7 Update 51
Java Auto Updater
Launchy 2.5
Left 4 Dead 2
LG United Mobile Driver
MakeMKV v1.8.7
Malwarebytes Anti-Malware version 1.75.0.1300
MediaMonkey 4.0
Microsoft .NET Framework 4.5.1
Microsoft Application Error Reporting
Microsoft IntelliPoint 8.2
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Home and Student 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared 64-bit MUI (English) 2010
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Single Image 2010
Microsoft Office Word MUI (English) 2010
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft Sync Framework 2.0 Core Components (x64) ENU
Microsoft Sync Framework 2.0 Provider Services (x64) ENU
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Microsoft_VC80_ATL_x86
Microsoft_VC80_ATL_x86_x64
Microsoft_VC80_CRT_x86
Microsoft_VC80_CRT_x86_x64
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFC_x86_x64
Microsoft_VC80_MFCLOC_x86
Microsoft_VC80_MFCLOC_x86_x64
Microsoft_VC90_ATL_x86
Microsoft_VC90_ATL_x86_x64
Microsoft_VC90_CRT_x86
Microsoft_VC90_CRT_x86_x64
Microsoft_VC90_MFC_x86
Microsoft_VC90_MFC_x86_x64
Mimo
Mozilla Firefox 26.0 (x86 en-US)
Mozilla Maintenance Service
MPC-HC 1.7.0
Music Manager
NEC Electronics USB 3.0 Host Controller Driver
Network Time Protocol
Nexus Mod Manager
Notepad++
NVIDIA 3D Vision Controller Driver 332.21
NVIDIA 3D Vision Driver 332.21
NVIDIA Control Panel 332.21
NVIDIA Graphics Driver 332.21
NVIDIA HD Audio Driver 1.3.30.1
NVIDIA Install Application
NVIDIA PhysX
NVIDIA PhysX System Software 9.13.0725
NVIDIA Stereoscopic 3D Driver
OpenAL
Oracle VM VirtualBox 4.3.6
PDF Settings CS5
PerfectDisk 11 Professional
Platform
Plex
Portal 2
PuTTY version 0.62
Python 2.7.5 (64-bit)
RivaTuner Statistics Server 5.2.0
RollerCoaster Tycoon 2 Triple Thrill Pack
RollerCoaster Tycoon 3: Platinum!
SanDisk ImageMate
Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition
Security Update for Microsoft Outlook 2010 (KB2837597) 32-Bit Edition
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
Shockwave
Shrew Soft VPN Client
SleepyHead version 0.9.3
Sonos Controller
Steam
StokerLog
SyncToy 2.1 (x64)
System Requirements Lab for Intel
System Shock 2
Team Fortress 2
The Elder Scrolls V: Skyrim
Tiger Woods PGA TOUR 07
TrueCrypt
TurboTax 2013
TurboTax 2013 WinPerFedFormset
TurboTax 2013 WinPerReleaseEngine
TurboTax 2013 WinPerTaxSupport
TurboTax 2013 wrapper
TurboV EVO
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition
VC_CRT_x64
VIA Platform Device Manager
VLC media player 2.1.2
WinPcap 4.1.3
WinRAR 5.00 beta 5 (64-bit)
WinSCP 5.1.7
Wireshark 1.10.5 (64-bit)
.
==== Event Viewer Messages From Past Week ========
.
1/29/2014 8:35:16 AM, Error: Service Control Manager [7030]  - The PEVSystemStart service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.
1/29/2014 8:34:54 AM, Error: Application Popup [1060]  - \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
1/29/2014 8:32:00 AM, Error: Service Control Manager [7034]  - The ASUS System Control Service service terminated unexpectedly.  It has done this 1 time(s).
.
==== End Of File ===========================
 

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.