malewarebytes problems

[dlcoker]

When I upload malwarebytes it wont run please help

DDS (Ver_09-12-01.01) - NTFSx86

Run by Admin at 20:37:48.67 on Tue 01/05/2010

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.522 [GMT -5:00]

AV: AVG Anti-Virus *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

svchost.exe

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\PROGRA~1\AVG\AVG8\avgam.exe

C:\PROGRA~1\AVG\AVG8\avgrsx.exe

C:\PROGRA~1\AVG\AVG8\avgnsx.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\AVG\AVG8\avgtray.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\SafeConnect\scManager.sys

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\PROGRA~1\AVG\AVG8\avgemc.exe

C:\Program Files\AVG\AVG8\avgcsrvx.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\5PHYT6J2\Defogger[1].exe

C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\48HJ2A71\dds[1].scr

============== Pseudo HJT Report ===============

uInternet Settings,ProxyOverride = *.local

mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg8\toolbar\IEToolbar.dll

mWinlogon: SfcDisable=-99 (0xffffff9d)

BHO: ShoppingReport: {100eb1fd-d03e-47fd-81f3-ee91287f9465} - c:\program files\shoppingreport\bin\2.5.0\ShoppingReport.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll

BHO: {474597C5-AB09-49d6-A4D5-2E8D7341384E} - No File

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg8\toolbar\IEToolbar.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg8\toolbar\IEToolbar.dll

TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File

TB: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - No File

EB: Groove Folder Synchronization: {2a541ae1-5bf6-4665-a8a3-cfa9672e4291} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

EB: ShopperReports: {a7cddcdc-beeb-4685-a062-978f5e07ceee} - c:\program files\shoppingreport\bin\2.5.0\ShoppingReport.dll

uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

mRun: [<NO NAME>]

mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe

dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

dRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun

dRunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\shortc~2.lnk - d:\autorun.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\shortc~1.lnk - c:\program files\rocketdock\RocketDock.exe

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL

IE: {C5428486-50A0-4a02-9D20-520B59A9F9B2} - {C9CCBB35-D123-4a31-AFFC-9B2933132116} - c:\program files\shoppingreport\bin\2.5.0\ShoppingReport.dll

IE: {C5428486-50A0-4a02-9D20-520B59A9F9B3} - {A16AD1E9-F69A-45af-9462-B1C286708842} - c:\program files\shoppingreport\bin\2.5.0\ShoppingReport.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

TCP: NameServer = 85.255.112.153,85.255.112.92

TCP: {02F55D47-5835-47C2-90DB-07055324E81B} = 64.42.88.21

TCP: {905C0C60-A593-450C-A3B9-6D00EEFB7306} = 192.168.1.1

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll

Notify: avgrsstarter - avgrsstx.dll

Notify: igfxcui - igfxdev.dll

AppInit_DLLs:

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

LSA: Authentication Packages = msv1_0 nwprovau

mASetup: {34A19196-274E-4D75-9D30-D7A45A0A4178} - "%ProgramFiles%\Windows Sidebar\.\regsvr32.exe" /s wlsrvc.dll

mASetup: {6B9228DA-9C15-419e-856C-19E768A13BDC} - "%ProgramFiles%\Windows Sidebar\.\regsvr32.exe" /s sbdrop.dll

mASetup: {D58F39FF-953E-4F45-898F-59F243B9A523} - HIDEC /W "%VAIOTOOLS%\regtlib.exe" "%ProgramFiles%\Windows Sidebar\sidebar.exe"

============= SERVICES / DRIVERS ===============

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2009-3-10 12552]

R0 iastor76;iastor76;c:\windows\system32\drivers\iastor76.sys [2007-10-13 305176]

R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-3-10 335240]

R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-3-10 27784]

R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-3-10 108552]

R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\avg\avg8\avgemc.exe [2009-6-17 908056]

R2 avg8wd;AVG8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2009-3-11 297752]

R2 SCManager;SafeConnect Manager;c:\program files\safeconnect\scmanager.sys servicestart --> c:\program files\safeconnect\scManager.sys servicestart [?]

S2 gupdate1c9b6efc3bba1a4;Google Update Service (gupdate1c9b6efc3bba1a4);c:\program files\google\update\GoogleUpdate.exe [2009-4-6 133104]

=============== Created Last 30 ================

2010-01-06 01:35:36 0 ----a-w- c:\documents and settings\admin\defogger_reenable

2010-01-06 00:36:39 0 d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-01-05 23:45:34 0 d-----w- c:\program files\Spybot - Search & Destroy

2010-01-05 23:45:34 0 d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy

2010-01-05 23:35:42 0 d-----w- c:\windows\system32\appmgmt

2010-01-05 23:32:10 36 ---h--r- c:\windows\sued.dat

2010-01-05 23:22:59 0 d-----w- c:\program files\CCleaner

2010-01-04 05:14:41 0 d-----w- c:\windows\pss

2010-01-04 03:12:22 0 d-----w- c:\docume~1\alluse~1\applic~1\RegCure

2010-01-03 17:55:23 0 d-----w- c:\docume~1\alluse~1\applic~1\174E

2009-12-28 05:15:45 0 d-----w- c:\docume~1\alluse~1\applic~1\2DF

2009-12-25 03:07:47 0 d-----w- c:\docume~1\alluse~1\applic~1\Research In Motion

2009-12-22 02:12:05 0 d-sh--w- c:\documents and settings\admin\PrivacIE

2009-12-22 02:12:01 0 d-sh--w- c:\documents and settings\admin\IECompatCache

2009-12-22 02:08:52 0 d-sh--w- c:\documents and settings\admin\IETldCache

2009-12-21 06:10:22 12800 ------w- c:\windows\system32\dllcache\xpshims.dll

2009-12-21 06:10:21 246272 ------w- c:\windows\system32\dllcache\ieproxy.dll

2009-12-21 06:10:18 0 d-----w- c:\windows\ie8updates

2009-12-21 06:10:04 92160 ------w- c:\windows\system32\dllcache\iecompat.dll

2009-12-21 06:09:20 0 dc-h--w- c:\windows\ie8

2009-12-17 01:38:34 0 d-----w- C:\Downloads

2009-12-17 01:38:08 0 d-----w- c:\program files\BitComet

2009-12-12 18:31:40 0 d-----w- c:\program files\Virtual Earth 3D

2009-12-10 01:29:29 75776 ------w- c:\windows\system32\dllcache\strmfilt.dll

2009-12-10 01:29:29 265728 ------w- c:\windows\system32\dllcache\http.sys

2009-12-10 01:29:29 25088 ------w- c:\windows\system32\dllcache\httpapi.dll

2009-12-10 01:29:26 79872 ------w- c:\windows\system32\dllcache\raschap.dll

2009-12-10 01:29:26 149504 ------w- c:\windows\system32\dllcache\rastls.dll

2009-12-10 01:28:30 270336 ------w- c:\windows\system32\dllcache\oakley.dll

==================== Find3M ====================

2009-12-01 03:14:35 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys

2009-12-01 03:14:35 11952 ----a-w- c:\windows\system32\avgrsstx.dll

2009-10-28 14:40:47 173056 ------w- c:\windows\system32\dllcache\ie4uinit.exe

2009-10-28 14:05:39 13824 ------w- c:\windows\system32\dllcache\ieudinit.exe

2009-10-21 05:38:36 75776 ----a-w- c:\windows\system32\strmfilt.dll

2009-10-21 05:38:36 25088 ----a-w- c:\windows\system32\httpapi.dll

2009-10-13 10:30:16 270336 ----a-w- c:\windows\system32\oakley.dll

2009-10-12 13:38:19 149504 ----a-w- c:\windows\system32\rastls.dll

2009-10-12 13:38:18 79872 ----a-w- c:\windows\system32\raschap.dll

2009-04-11 01:15:16 16384 --sha-w- c:\windows\system32\config\systemprofile\cookies\index.dat

2009-04-11 01:15:16 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\index.dat

2009-04-11 01:15:12 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009041020090411\index.dat

2009-04-11 01:15:16 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\temporary internet files\content.ie5\index.dat

============= FINISH: 20:38:17.60 ===============

ark.zip

[Blade81]

Hi,

Vuze

Above listed ones are P2P file sharing programs. P2P downloads are nowadays one of those things that most likely bring infection into the system. My recommendation is to uninstall these (and other if present) P2P file sharing programs.

Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure you read this guide carefully first.

Please continue as follows:

1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
   Remember to re-enable them afterwards.
   
2. Click Yes to allow ComboFix to continue scanning for malware.
   

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt

New dds log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.