Malewarebytes fails to run

[designer4]

I ran the DDS scr. as directed and attached are the files requested.

Thank You in Advance for your help...

Ysidro

.

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 7.0.5730.13

Run by Ysidiro Martinez at 9:15:54 on 2011-10-31

.

============== Running Processes ===============

.

C:\WINDOWS\3168291934:2712872771.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Microsoft Security Client\msseces.exe

C:\PROGRA~1\AVG\AVG8\avgtray.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Documents and Settings\Ysidiro Martinez\Desktop\dds.scr

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Cadence\license_manager\lmgrd.exe

C:\PROGRA~1\AVG\AVG8\avgrsx.exe

C:\PROGRA~1\AVG\AVG8\avgnsx.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\Cadence\license_manager\cdslmd.exe

C:\WINDOWS\eHome\ehSched.exe

C:\WINDOWS\eHome\ehRec.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe

C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe

C:\WINDOWS\system32\wdfmgr.exe

C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe

C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Canon\CAL\CALMAIN.exe

C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\system32\svchost.exe -k imgsvc

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.facebook.com/

uSearch Page =

uSearch Bar =

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html

uInternet Connection Wizard,ShellNext = iexplore

uInternet Settings,ProxyOverride = *.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

mSearchAssistant =

BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File

BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll

BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll

BHO: Simppull Toolbar: {627af46b-2076-42ae-a2fd-8428734d3e74} - c:\program files\simppulltoolbar\simppulldx.dll

BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_05\bin\ssv.dll

BHO: AVG Security Toolbar: {a057a204-bacc-4d26-9990-79a187e2698e} - c:\progra~1\avg\avg8\AVGTOO~1.DLL

BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - No File

BHO: Updater For Simppull Toolbar: {c4b8bab4-1667-11df-a242-ba9455d89593} - c:\program files\simppulltoolbar\auxi\simppulltoolbAu.dll

BHO: {E4E6BF2A-1667-11DF-A01F-1F9655D89593} - No File

TB: Simppull Toolbar: {627af46b-2076-42ae-a2fd-8428734d3e74} - c:\program files\simppulltoolbar\simppulldx.dll

TB: AVG Security Toolbar: {a057a204-bacc-4d26-9990-79a187e2698e} - c:\progra~1\avg\avg8\AVGTOO~1.DLL

TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey

mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe

IE: &Search - http://tbedits.televisionfanatic.com/one-toolbaredits/menusearch.jhtml?s=100000415&p=XPxdm003YYUS&si=&a=5F4534F0-66A9-431C-880A-EA82CF73665B&n=2010100520

IE: &Yahoo! Search - file:///c:\program files\yahoo!\Common/ycsrch.htm

IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000

IE: Yahoo! &Dictionary - file:///c:\program files\yahoo!\Common/ycdict.htm

IE: Yahoo! &Maps - file:///c:\program files\yahoo!\Common/ycdict.htm

IE: {53F6FCCD-9E22-4d71-86EA-6E43136192AB}

IE: {925DAB62-F9AC-4221-806A-057BFB1014AA}

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_05\bin\ssv.dll

IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~4\INetRepl.dll

IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~4\INetRepl.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL

LSP: mswsock.dll

DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} - hxxp://www.musicnotes.com/download/mnviewer.cab

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll

DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} - hxxp://asp.mathxl.com/wizmodules/testgen/installers/TestGenXInstall.cab

DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1005.cab

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1268603133549

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

DPF: {95D88B35-A521-472B-A182-BB1A98356421} - hxxp://asp.mathxl.com/books/_Players/PearsonInstallAsst2.cab

DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - hxxp://www.sibelius.com/download/software/win/ActiveXPlugin.cab

DPF: {BCBC9371-595D-11D4-A96D-00105A1CEF6C} - hxxp://hgtv2.view22.com/view22/app/view22rte.cab

DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab

DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab

DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - hxxp://www.adobe.com/products/acrobat/nos/gp.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} - hxxp://asp.mathxl.com/books/_Players/MathPlayer.cab

TCP: Interfaces\{799214AD-9915-4805-A8B7-1D3C5754FDAC} : DhcpNameServer = 192.168.1.1

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll

Notify: avgrsstarter - avgrsstx.dll

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\ysidiro martinez\application data\mozilla\firefox\profiles\apkbxxg2.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2320606&SearchSource=3&q={searchTerms}

FF - prefs.js: browser.search.selectedEngine - Bing

FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/?pc=Z206&install_date=20111024

FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?pc=Z206&form=ZGAADF&install_date=20111024&q=

FF - plugin: c:\program files\mozilla firefox\plugins\npdnu.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npdnupdater2.dll

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: BetterLinks: smartlinks@getsmartlinks.com - %profile%\extensions\smartlinks@getsmartlinks.com

FF - Ext: ShopToWin22: {7cd0c597-24e0-45b0-8bde-2e79b3fc0499} - %profile%\extensions\{7cd0c597-24e0-45b0-8bde-2e79b3fc0499}

FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension

.

---- FIREFOX POLICIES ----

FF - user.js: network.cookie.cookieBehavior - 0

FF - user.js: privacy.clearOnShutdown.cookies - false

FF - user.js: security.warn_viewing_mixed - false

FF - user.js: security.warn_viewing_mixed.show_once - false

FF - user.js: security.warn_submit_insecure - false

FF - user.js: security.warn_submit_insecure.show_once - false

FF - user.js: network.protocol-handler.warn-external.dnupdate - false

============= SERVICES / DRIVERS ===============

.

R? !SASCORE;SAS Core Service

R? BRGSp50;BRGSp50 NDIS Protocol Driver

R? klmd24;klmd24

R? McComponentHostService;McAfee Security Scan Component Host Service

R? MpKsl19e27ce0;MpKsl19e27ce0

R? MpKsl1f6dbcef;MpKsl1f6dbcef

R? MpKsl20690002;MpKsl20690002

R? MpKsl25fc7c50;MpKsl25fc7c50

R? MpKsl279c334d;MpKsl279c334d

R? MpKsl294eba12;MpKsl294eba12

R? MpKsl2d9319a6;MpKsl2d9319a6

R? MpKsl3364c3ee;MpKsl3364c3ee

R? MpKsl3c3bd133;MpKsl3c3bd133

R? MpKsl3e0c8b8a;MpKsl3e0c8b8a

R? MpKsl4192d013;MpKsl4192d013

R? MpKsl471404d1;MpKsl471404d1

R? MpKsl7be72bb1;MpKsl7be72bb1

R? MpKsl7d263197;MpKsl7d263197

R? MpKsl82e63195;MpKsl82e63195

R? MpKsl84d8aa47;MpKsl84d8aa47

R? MpKsl90537678;MpKsl90537678

R? MpKsl9832c71e;MpKsl9832c71e

R? MpKsl9b6972a2;MpKsl9b6972a2

R? MpKsla058ce86;MpKsla058ce86

R? MpKsla70c4d6b;MpKsla70c4d6b

R? MpKsla84e80f2;MpKsla84e80f2

R? MpKslb51c9bd0;MpKslb51c9bd0

R? MpKsld1db88bf;MpKsld1db88bf

R? MpKslda147b82;MpKslda147b82

R? MpKsldb8b62d9;MpKsldb8b62d9

R? MpKslebce2cea;MpKslebce2cea

R? MpKslf0d11525;MpKslf0d11525

R? procdrv;procdrv

R? RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Vista Driver

R? TridVid;X10 VA12A Video Capture

R? U6000ALL;HDTV110 TV Box(ALL)

R? Updater Service for StartNow Toolbar;Updater Service for StartNow Toolbar

S? avg8wd;AVG Free8 WatchDog

S? AvgLdx86;AVG Free AVI Loader Driver x86

S? AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86

S? AvgTdiX;AVG Free8 Network Redirector

S? Cadence License Manager;Cadence License Manager

S? filesvc;filesvc

S? MpFilter;Microsoft Malware Protection Driver

S? regfil;regfil

.

=============== Created Last 30 ================

.

2011-10-28 03:11:29 11952 ----a-w- c:\windows\system32\avgrsstx.dll

2011-10-28 03:11:28 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys

2011-10-28 03:11:22 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys

2011-10-28 03:11:16 -------- d-----w- c:\windows\system32\drivers\Avg

2011-10-28 03:04:21 56200 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{eff1e0b4-c7ff-4f7a-8193-12b1cf033f1f}\offreg.dll

2011-10-28 03:04:18 6668624 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{eff1e0b4-c7ff-4f7a-8193-12b1cf033f1f}\mpengine.dll

2011-10-28 02:54:49 -------- d-----w- c:\program files\Microsoft Security Client

2011-10-28 02:48:20 -------- d--h--w- c:\windows\system32\GroupPolicy

2011-10-28 02:39:38 69456 ----a-w- c:\windows\system32\drivers\klmd.sys

2011-10-28 02:03:44 -------- d-----w- c:\documents and settings\all users\application data\avg8

2011-10-28 00:29:34 -------- d-----w- C:\53e304ad1b383e8dac553ab9

2011-10-25 21:13:54 23624 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys

2011-10-25 21:13:54 -------- d-----w- c:\program files\Hitman Pro 3.5

2011-10-25 21:11:49 -------- d-----w- c:\documents and settings\all users\application data\Hitman Pro

2011-10-24 23:25:03 -------- d-----w- c:\documents and settings\ysidiro martinez\application data\PC Cleaners

2011-10-24 23:24:59 5359888 ----a-w- c:\windows\uninst.exe

2011-10-24 23:24:57 -------- d-----w- c:\documents and settings\all users\application data\PC1Data

2011-10-24 17:21:32 -------- d-----w- c:\windows\system32\wbem\repository\FS

2011-10-24 17:21:32 -------- d-----w- c:\windows\system32\wbem\Repository

2011-10-24 01:09:48 -------- d-----w- c:\documents and settings\ysidiro martinez\application data\FCSB000063945

2011-10-24 01:09:45 -------- d-----w- c:\program files\Object

2011-10-24 01:09:41 -------- d-----w- c:\program files\Shop to Win 22

2011-10-24 01:09:40 -------- d-----w- c:\program files\Shop To Win

2011-10-24 01:09:36 -------- d-----w- c:\program files\StartNow Toolbar

2011-10-23 23:47:23 -------- d-----w- c:\documents and settings\all users\application data\!SASCORE

2011-10-22 22:10:07 -------- d-sh--w- c:\documents and settings\ysidiro martinez\local settings\application data\5e4cd8bc

2011-10-03 01:56:54 -------- d-----w- c:\windows\New Folder

.

==================== Find3M ====================

.

2011-10-15 18:16:10 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-09-26 16:41:20 611328 ----a-w- c:\windows\system32\uiautomationcore.dll

2011-09-26 16:41:20 220160 ----a-w- c:\windows\system32\oleacc.dll

2011-09-26 16:41:14 20480 ----a-w- c:\windows\system32\oleaccrc.dll

2011-09-09 09:12:13 599040 ----a-w- c:\windows\system32\crypt32.dll

2011-09-06 13:20:51 1858944 ----a-w- c:\windows\system32\win32k.sys

2011-08-17 21:32:17 832512 ----a-w- c:\windows\system32\wininet.dll

2011-08-17 21:32:16 78336 ----a-w- c:\windows\system32\ieencode.dll

2011-08-17 21:32:16 1830912 ------w- c:\windows\system32\inetcpl.cpl

2011-08-17 21:32:15 17408 ------w- c:\windows\system32\corpol.dll

2011-08-17 13:49:54 138496 ----a-w- c:\windows\system32\drivers\afd.sys

2011-08-17 12:22:23 389120 ----a-w- c:\windows\system32\html.iec

2011-08-12 18:51:26 26488 ----a-w- c:\windows\system32\spupdsvc.exe

.

============= FINISH: 9:30:28.41 ===============

dds.txt

attach.zip

[LDTate]

Whether you wish to continue with cleaning or not, you should be aware that you may have been infected by a backdoor trojan. This type of program has the ability to steal passwords and other information from your system. If you are using your computer for sensitive purposes such as internet banking then I recommend you take the following steps immediately:

• Use another, uninfected computer to change all your internet passwords, especially ones with financial implications such as banks, paypal, ebay, etc. You should also change the passwords for any other site you use.
  
• Call your bank(s), credit card company or any other institution which may be affected and advise them that your login/password or credit card information may have been stolen and ask what steps to take with regard to your account.
  
• Consider what other private information could possibly have been taken from your computer and take appropriate steps
  
• Removing this infection can also disable the ability to connect to the internet.

This infection can almost certainly be cleaned, but as the malware could be configured to run any program a remote attacker requires, it will be impossible to be 100% sure that the machine is clean, if this is unacceptable to you then you should consider reformatting the system partition and reinstalling Windows as this is the only 100% sure answer.

Please post back to let me know how you wish to proceed.

[LDTate]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!