Hello,
Could someone please help out? I'm not sure how to explain this problem, but for several months now I have been experiencing weird problems, sometimes when I reboot the Computer's date/clock goes back to 2002 and just a few weeks ago, the whole Windows system reverted back to it's old style, I have to associate files, folders are protected and my D drive vanished, it's just like how I first bought it, the first time it happened I manged to get back my current settings when I rebooted it once, but yesterday I had to unplug cables and reboot it twice till I got my current settings, both my computer and Internet seem to be slow as well, I already posted about that in
here, but didn't get any replies, I thought maybe my HJT log was clean.
This time I scanned with "Malwarebytes' Anti-Malware" and "SUPERAntiSpyware" then scanned with "HiJackThis" I'm going to paste these 3 logs results, so hopefully someone might be able to define the problem this time. Thanks a lot!
-------------------------------------------------------------------------------
Malwarebytes' Anti-Malware 1.38
Database version: 2297
Windows 5.1.2600 Service Pack 2
6/26/2009 8:04:45 AM
mbam-log-2009-06-26 (08-04-23).txt
Scan type: Full Scan (C:\|D:\|)
Objects scanned: 200256
Time elapsed: 1 hour(s), 12 minute(s), 23 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 7
Registry Values Infected: 1
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{20d5 7a66-f7df-467d-907b-9b7f4a118ab7} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{00000162-9980-0010-8000-00aa00389b71} (Rogue.WinAntiVirus) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{20d57a66-f7df-467d-907b-9b7f4a118ab7} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITO R (Trojan.DNSChanger) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE (Trojan.Downloader) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SERVICE32 (Backdoor.Sdbot) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Sc32Inch (Backdoor.Sdbot) -> No action taken.
Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell ExecuteHooks\{20d57a66-f7df-467d-907b-9b7f4a118ab7} (Trojan.Vundo) -> No action taken.
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Folders Infected:
(No malicious items detected)
Files Infected:
c:\winsysban12.exe (Trojan.Agent) -> No action taken.
-------------------------------------------------------------------------------
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 06/27/2009 at 08:07 AM
Application Version : 4.26.1006
Core Rules Database Version : 3959
Trace Rules Database Version: 1901
Scan type : Complete Scan
Total Scan Time : 02:56:49
Memory items scanned : 426
Memory threats detected : 0
Registry items scanned : 6927
Registry threats detected : 6
File items scanned : 125700
File threats detected : 71
Adware.Tracking Cookie
C:\Documents and Settings\Administrator\Cookies\administrator@media6degrees[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@microsoftwga.112.2o7[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@xiti[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@avgtechnologies.112.2o7[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@content.yieldmanager.edgesuite[2].txt
C:\Documents and Settings\Administrator\Cookies\administrator@content.yieldmanager[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@s03.flagcounter[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@sixapart.adbureau[2].txt
C:\Documents and Settings\Administrator\Cookies\administrator@statcounter[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@ad.dragonstar.dmoglobal[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@mediafire[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@smartadserver[1].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@click-power[1].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@www.click-power[2].txt
.mediafire.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.mediafire.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.mediafire.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
stat.onestat.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
stat.onestat.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
stat.onestat.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.xiti.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
www7.addfreestats.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
usawarez.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
usawarez.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.2o7.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.paypal.112.2o7.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.112.2o7.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.indextools.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
server.iad.liveperson.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
server.iad.liveperson.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
server.iad.liveperson.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.indigio.122.2o7.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.quill.112.2o7.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
find.franklin.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.franklinelectronicpublishers.112.2o7.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.buycom.122.2o7.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
traffic.buyservices.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
www.clickxchange.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.collective-media.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.ice.112.2o7.net [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.supermediastore.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.supermediastore.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.supermediastore.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.supermediastore.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.supermediastore.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.supermediastore.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.supermediastore.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.supermediastore.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.supermediastore.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
.stats.paypal.com [ C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\52vrqifp.default\cookies.txt ]
Adware.Elite Media
HKLM\Software\elite
HKLM\Software\elite#check
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/elite.ocx
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/elite.ocx#.Owner
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/elite.ocx#{9AC54695-69A4-46F1-BE10-10C74F9520D5}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs#C:\WINDOWS\Downlo aded Program Files\elite.ocx [ ]
C:\WINDOWS\elitemediagroup.ini
Trojan.Unknown Origin
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\OAQC5ECM\TELLER2[1].HTM
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\KDABW923\TELLER2[1].HTM
Adware.Vundo/Variant-MSFake
C:\WINDOWS\SYSTEM32\T5RDV.DLL
C:\WINDOWS\SYSTEM32\ECESQ.DLL
Adware.DollarRevenue
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OAQC5ECM\smartload_stats[1].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WD6RC1IV\smartload_stats[1].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KDABW923\smartload_stats[1].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\GL6NK1Y7\smartload[2].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\GL6NK1Y7\smartload[1].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KDABW923\smartload_d[1].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WD6RC1IV\smartload_stats[2].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KDABW923\smartload_stats[3].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\GL6NK1Y7\smartload[3].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KDABW923\smartload_stats[2].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\GL6NK1Y7\smartload_stats[1].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OAQC5ECM\smartload_stats[2].htm
Trace.Known Threat Sources
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KDABW923\a272a970[1].js
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\GL6NK1Y7\checkin[2].htm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OAQC5ECM\init[1].js
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WD6RC1IV\prompt_ie_win[1].js
-------------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:28:15 AM, on 6/27/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\GetRight\getright.exe
C:\Program Files\iRotate\iRotate.exe
C:\Program Files\GetRight\getright.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - (no file)
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] "C:\PROGRA~1\AVG\AVG8\avgtray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\RunServices: [Win Services] Srv32.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-18\..\Run: [svnlito32] svnlito32.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Microsoft messenger] imsnger.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Miscrosoft Windows Explorer] IEEXPLORER.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows Media Loader] wmloader.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Microsoft Task Manager] tasks.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Microsoft Windows Schedule] sched.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [services32] C:\Program Files\Common Files\Windows\mc-110-12-0000141.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunServices: [svnlito32] svnlito32.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [svnlito32] svnlito32.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunServices: [svnlito32] svnlito32.exe (User 'Default user')
O4 - Startup: Power-Antivirus-2009.lnk = C:\Program Files\Power-Antivirus-2009\Power-Antivirus-2009.exe
O4 - Startup: iRotate.lnk = C:\Program Files\iRotate\iRotate.exe
O4 - Global Startup: Start GetRight.lnk = C:\Program Files\GetRight\getright.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O15 - ESC Trusted Zone:
http://*.update.microsoft.com
O16 - DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} (Java Plug-in 1.6.0_10) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{3944273C-F6BA-48AC-843D-7A05E7C6B71D}: NameServer = 195.226.228.72 195.226.228.74
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\Program,Files\PremierOpinion\pmai.dll,C:\Program,Files\PremierOpinion\pm ai.dll,C:\Program,Files\PremierOpinion\pmai.dll,C:\Program,Files\PremierOpi nion\pmai.dll,C:\Program,Files\PremierOpinion\pmai.dll,C:\Program,Files\Pre mierOpinion\pmai.dll,C:\Program Files\PremierOpinion\pmai.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Machine Debug Manager (MDM) - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
--
End of file - 6950 bytes
Welcome to Tech Support Guy! Read our Welcome Guide or take a minute to watch the video below!
Malware Removal & HijackThis Logs 
Search 
