Jump to content

Malwarbytes' Anti-Malware has stopped working :(


Recommended Posts

DDS (Ver_10-10-10.03) - NTFSx86

Run by An Li Tao at 15:14:10.04 on 18/10/2010 Mon

Internet Explorer: 8.0.7600.16385

Microsoft Windows 7 Enterprise 6.1.7600.0.936.86.2052.18.1014.40 [GMT 13:00]

============== Running Processes ===============

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskhost.exe

C:\Windows\Explorer.EXE

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\Windows\system32\svchost.exe -k bthsvcs

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\PPStream\PPSAP.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\easyMule\emule.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

C:\Windows\System32\svchost.exe -k secsvcs

C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\svchost.exe -k SDRSVC

C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\An Li Tao\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe

C:\Windows\system32\igfxsrvc.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\An Li Tao\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0X075PX\dds[1].scr

C:\Windows\system32\conhost.exe

C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.gmail.com/

uSearch Bar = Preserve

BHO: IE2EMBHO Class: {0a0ddbd3-6641-40b9-873f-bbdd26d6c14e} - c:\program files\easymule\modules\IE2EM.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll

BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll

uRun: [PPS Accelerator] c:\program files\ppstream\ppsap.exe

uRun: [Google Update] "c:\users\an li tao\appdata\local\google\update\GoogleUpdate.exe" /c

uRun: [eMuleAutoStart] c:\program files\easymule\eMule.exe -AutoStart

uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"

uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"

uPolicies-explorer: NoInternetIcon = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableLUA = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

mPolicies-system: PromptOnSecureDesktop = 0 (0x0)

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Download by easyMule - c:\program files\easymule\IE2EM.htm

IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

IE: {95B3F550-91C4-4627-BCC4-521288C52977} - c:\program files\pplive\pptv\PPLive.exe

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~1\office12\ONBttnIE.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~1\office12\REFIEBAR.DLL

Trusted Zone: 111222.cn\list1

Trusted Zone: alipay.com

Trusted Zone: alisoft.com

Trusted Zone: dukascopy.com\www

Trusted Zone: forex.com\www

Trusted Zone: kuaiche.com\software

Trusted Zone: pps.tv\kan

Trusted Zone: pps.tv\list1

Trusted Zone: pps.tv\tvguide

Trusted Zone: pps.tv\vodguide

Trusted Zone: ppstream.com\list1

Trusted Zone: ppstream.com\notice

Trusted Zone: ppstream.com\www

Trusted Zone: ppstream.com\xml1

Trusted Zone: ppstream.com\xml2

Trusted Zone: ppstream.com\xml3

Trusted Zone: ppstream.net\list1

Trusted Zone: ppstv.com\list1

Trusted Zone: ppstv.net\list1

Trusted Zone: security_PPStream.exe

Trusted Zone: taobao.com

Trusted Zone: yahoo.com\messenger

Trusted Zone: alipay.com

Trusted Zone: alisoft.com

Trusted Zone: taobao.com

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {A3CD7F74-93C9-4BC4-B892-CCDF1514F714} - hxxps://pbank.95559.com.cn/personbank/ocx/safe_bankcomm.cab

DPF: {CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {E78928A6-3D2A-4BF7-A100-F3FBAA351B49} - hxxps://www.vpay.co.kr/kvpfiles_vista/KVPISPCTLD_VISTA.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL

Notify: igfxcui - igfxdev.dll

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

============= SERVICES / DRIVERS ===============

R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]

R2 SSPORT;SSPORT;c:\windows\system32\drivers\SSPORT.SYS [2010-8-14 5120]

S3 Alidevice;Alidevice;c:\windows\system32\drivers\alidevice.sys [2008-7-13 6656]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2010-8-29 38224]

S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2010-1-20 34248]

S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2010-1-20 40552]

============== File Associations ===============

txtfile=c:\windows\notepad.exe %1

=============== Created Last 30 ================

2010-10-17 12:36:11 190976 ----a-w- c:\windows\system32\drivers\ks.sys

2010-10-17 08:12:12 2048 ----a-w- c:\windows\system32\tzres.dll

2010-10-17 08:11:43 109056 ----a-w- c:\windows\system32\t2embed.dll

2010-10-17 08:08:59 4247040 ----a-w- c:\program files\windows nt\accessories\wordpad.exe

2010-10-17 08:08:58 1413632 ----a-w- c:\windows\system32\ole32.dll

2010-10-17 08:03:44 6084944 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{f01c14c4-4020-4a38-a9ad-5172714abc4b}\mpengine.dll

2010-10-17 08:02:16 224256 ----a-w- c:\windows\system32\schannel.dll

2010-10-17 08:01:55 363520 ----a-w- c:\windows\system32\StructuredQuery.dll

2010-10-17 07:56:29 530432 ----a-w- c:\windows\system32\comctl32.dll

2010-10-17 07:56:28 954752 ----a-w- c:\windows\system32\mfc40.dll

2010-10-17 07:56:28 954288 ----a-w- c:\windows\system32\mfc40u.dll

2010-10-17 07:55:58 164864 ----a-w- c:\program files\windows media player\wmplayer.exe

2010-10-17 07:55:55 12625408 ----a-w- c:\windows\system32\wmploc.DLL

2010-10-17 07:51:13 2327552 ----a-w- c:\windows\system32\win32k.sys

2010-10-17 07:50:30 310784 ----a-w- c:\windows\system32\drivers\srv.sys

2010-10-17 07:50:30 308736 ----a-w- c:\windows\system32\drivers\srv2.sys

2010-10-17 07:50:30 168448 ----a-w- c:\windows\system32\srvsvc.dll

2010-10-17 07:50:30 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys

2010-10-17 07:50:29 738816 ----a-w- c:\windows\system32\wmpmde.dll

2010-10-17 07:45:41 13312 ----a-w- c:\program files\internet explorer\iecompat.dll

==================== Find3M ====================

2010-09-14 15:50:37 472808 ----a-w- c:\windows\system32\deployJava1.dll

2010-09-08 04:30:04 978432 ----a-w- c:\windows\system32\wininet.dll

2010-09-08 04:28:15 44544 ----a-w- c:\windows\system32\licmgr10.dll

2010-09-08 03:22:31 386048 ----a-w- c:\windows\system32\html.iec

2010-09-08 02:48:16 1638912 ----a-w- c:\windows\system32\mshtml.tlb

2010-08-21 05:32:37 316928 ----a-w- c:\windows\system32\spoolsv.exe

2010-07-29 21:05:31 2560 ----a-w- c:\windows\_MSRSTRT.EXE

2010-07-29 06:30:49 197632 ----a-w- c:\windows\system32\ir32_32.dll

2010-07-29 06:30:34 82944 ----a-w- c:\windows\system32\iccvid.dll

2009-09-21 07:14:28 777320 ----a-w- c:\program files\Setup.exe

2009-09-21 07:14:26 154728 ----a-w- c:\program files\SetAlti.exe

2009-06-08 08:08:18 184320 ----a-w- c:\program files\SecSNMP.dll

2007-03-05 14:11:06 3207168 ----a-w- c:\program files\Ssres.dll

============= FINISH: 15:16:25.08 ===============

Attach.zip

Link to post
Share on other sites

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.