Advertisement
29-Nov-2011, 01:32 PM
#1 | |||||||
| Laptop and Desktop Still infected with malware, virus etc after complete restore. Hi all, first i would like to let you know I'm not a native English speaker so I'm sorry about the grammars and spelling errors. First I'm a former paramedic in the army and due to an injury i started a new career in the IT as a coder in .net last year. So I'm not a expert but i pass the last week doing research and trying to understand the problem. Since I'm a student i was able to got legal Microsoft Development Software such as Visual Studio, Expression, SQL Server etc.. Desktop 630i Specs
Everything started when i found my browser Internet Explorer 9 hanging almost all the time and a adobe flash player update each time i reboot my Desktop. So i check my Windows Update and i was surprise to see any update installed within the last month. Auto-update is on) Windows Firewall ON Microsoft Security Essential ON I was thinking is an network issue because my girlfriend laptop's (Asus Spec in signature) tell me their browser was slow too. I ran a full scan (MSE) and the found nothing but during my research i discover some strange issue with my desktop like, shutdown, restarting, no more password prompt when screensaver and a lot of running process and almost all the time a 99% CPU. And i decide to give a try to MSE real time protection using EICAR virus test and MSE did not found treat and same when i scan the file. I took a look to my event tracker and i found a lot of error including with MSE, Security issues. So i decide to restore my computer with the image and i update everything , i give a try to Avast Internet Security and Secunia Software Inspector. The same day my computer show me a lot of errors issues in the event manager. So i turn off the desktop, unplug the power cord and the network cable. When i took a look to the Asus Laptop i saw similar issue, so i backup the documents to an external Hard disk and i restore the computer with the Hidden Partition Recovery. I format the hard disk with two partition C and D and the have 430 gig unallocated. I bought a new Cisco Router, new Ethernet cable and Norton Internet Security and update Windows on the Asus. I change all my password on a friend computer. I run a full Norton scan and he found threat on the fresh restored laptop. So now what should i do to make sure the Asus Laptop is clean and my Desktop. I want to clean the Asus laptop before i do the job on the desktop You will find all the requested info. Thank you for your helps/advices  ================= Hijackthis Log ===================== Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 09:56:20, on 2011-11-29 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Windows\AsScrPro.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\Marie-Christine\Desktop\HijackThis.exe C:\Windows\SysWOW64\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\IPS\IPSBHO.DLL O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\coIEPlg.dll O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/select/asusTek_sys_ctrl3.cab O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\ccSvcHst.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: Protection logicielle (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Windows\SysWOW64\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe -- End of file - 18186 bytes ====================== DDS LOG ===================== . DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 9.0.8112.16421 Run by Marie-Christine at 9:59:34 on 2011-11-29 Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.2.1036.18.4095.2445 [GMT -5:00] . AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\FBAgent.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\ccSvcHst.exe C:\Windows\SysWOW64\nvSCPAPISvr.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\rundll32.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\ccSvcHst.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\AsScrPro.exe C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Windows\system32\conhost.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe C:\Windows\system32\mmc.exe C:\Windows\system32\svchost.exe -k SDRSVC C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\conhost.exe C:\Windows\SysWOW64\cscript.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.ca/ uDefault_Page_URL = hxxp://asus.msn.com mWinlogon: Userinit=userinit.exe, BHO: Norton Identity Protection: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\coIEPlg.dll BHO: Norton Vulnerability Protection: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\IPS\IPSBHO.DLL TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\coIEPlg.dll TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} - hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab TCP: DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 TCP: Interfaces\{8392A8D1-DC58-4B00-88BA-EC3D5EE74549} : DhcpNameServer = 24.200.243.189 24.200.210.241 24.200.228.113 TCP: Interfaces\{8392A8D1-DC58-4B00-88BA-EC3D5EE74549}\34963736F65393136393 : DhcpNameServer = 24.200.243.189 24.200.241.37 24.201.245.77 TCP: Interfaces\{8392A8D1-DC58-4B00-88BA-EC3D5EE74549}\3556270756E6472427F6E6A756 : DhcpNameServer = 24.200.243.189 24.200.241.37 24.201.245.77 TCP: Interfaces\{8392A8D1-DC58-4B00-88BA-EC3D5EE74549}\3556270756E6472427F6E6A756D26796379647565727 : DhcpNameServer = 24.200.243.189 24.200.241.37 24.201.245.77 TCP: Interfaces\{A0C0823C-1584-4C70-A621-D0D4AED32249} : DhcpNameServer = 24.200.243.189 24.200.241.37 24.201.245.77 {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} {6D53EC84-6AAE-4787-AEEE-F4628F01010C} {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\Marie-Christine\AppData\Roaming\Mozilla\Firefox\Profiles\5kwfh7qf.default\ FF - prefs.js: browser.startup.homepage - www.google.ca FF - prefs.js: network.proxy.type - 0 FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrlui.dll . ============= SERVICES / DRIVERS =============== . R0 SymDS;Symantec Data Store;C:\Windows\system32\drivers\NISx64\1302000.00A\SYMDS64.SYS --> C:\Windows\system32\drivers\NISx64\1302000.00A\SYMDS64.SYS [?] R0 SymEFA;Symantec Extended File Attributes;C:\Windows\system32\drivers\NISx64\1302000.00A\SYMEFA64.SYS --> C:\Windows\system32\drivers\NISx64\1302000.00A\SYMEFA64.SYS [?] R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20111114.002\BHDrvx64.sys [2011-11-14 1156216] R1 ccSet_NIS;Norton Internet Security Settings Manager;C:\Windows\system32\drivers\NISx64\1302000.00A\ccSetx64.sys --> C:\Windows\system32\drivers\NISx64\1302000.00A\ccSetx64.sys [?] R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20111128.030\IDSviA64.sys [2011-11-28 488568] R1 SymIRON;Symantec Iron Driver;C:\Windows\system32\drivers\NISx64\1302000.00A\Ironx64.SYS --> C:\Windows\system32\drivers\NISx64\1302000.00A\Ironx64.SYS [?] R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\system32\Drivers\NISx64\1302000.00A\SYMNETS.SYS --> C:\Windows\system32\Drivers\NISx64\1302000.00A\SYMNETS.SYS [?] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?] R2 AFBAgent;AFBAgent;"C:\Windows\system32\FBAgent.exe" --> C:\Windows\system32\FBAgent.exe [?] R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-11-25 366152] R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\19.2.0.10\ccsvchst.exe [2011-11-25 138760] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Windows\SysWOW64\nvSCPAPISvr.exe [2009-12-11 239208] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-11-26 138360] R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\system32\DRIVERS\ETD.sys --> C:\Windows\system32\DRIVERS\ETD.sys [?] R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?] R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?] S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;C:\Windows\system32\DRIVERS\SiSG664.sys --> C:\Windows\system32\DRIVERS\SiSG664.sys [?] S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?] S3 WatAdminSvc;Service Windows Activation Technologies;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?] . =============== Created Last 30 ================ . 2011-11-29 01:35:46 -------- d-----w- C:\Users\Marie-Christine\AppData\Roaming\PeerNetworking 2011-11-28 20:07:16 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\Mozilla 2011-11-28 18:40:55 -------- d-----w- C:\Windows\SysWow64\XPSViewer 2011-11-28 18:27:36 -------- d-----w- C:\inetpub 2011-11-28 15:30:35 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\Deployment 2011-11-28 13:52:08 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\Diagnostics 2011-11-27 01:54:05 -------- d-----w- C:\Program Files\Speccy 2011-11-27 00:27:14 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\CrashDumps 2011-11-27 00:06:31 -------- d-----w- C:\Program Files (x86)\My Company Name 2011-11-27 00:01:56 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\Seven Zip 2011-11-26 21:57:25 -------- d-----w- C:\Windows\System32\SPReview 2011-11-26 21:11:50 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\ElevatedDiagnostics 2011-11-26 21:06:44 -------- d-----w- C:\Windows\pss 2011-11-26 18:09:46 -------- d-----w- C:\XPCD 2011-11-26 17:25:54 -------- d-----w- C:\UBCD4Win 2011-11-26 06:32:15 -------- d-----w- C:\Windows\System32\EventProviders 2011-11-26 06:01:09 3584 ----a-w- C:\Windows\System32\drivers\pt-PT\tsusbflt.sys.mui 2011-11-26 06:01:08 3072 ----a-w- C:\Windows\System32\drivers\pt-PT\rdpwd.sys.mui 2011-11-26 05:59:59 4583424 ----a-w- C:\Program Files\Windows NT\Accessories\wordpad.exe 2011-11-26 05:58:59 780008 ----a-w- C:\Windows\System32\ci.dll 2011-11-26 05:57:59 98304 ----a-w- C:\Windows\SysWow64\nslookup.exe 2011-11-26 05:56:54 3072 ----a-w- C:\Windows\System32\drivers\en-US\tsusbflt.sys.mui 2011-11-26 05:56:54 2560 ----a-w- C:\Windows\System32\drivers\en-US\rdpwd.sys.mui 2011-11-26 05:56:51 6144 ----a-w- C:\Windows\System32\drivers\en-US\IPMIDrv.sys.mui 2011-11-26 05:56:51 4608 ----a-w- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui 2011-11-26 05:56:47 3584 ----a-w- C:\Windows\System32\drivers\fr-FR\tsusbflt.sys.mui 2011-11-26 05:56:41 2560 ----a-w- C:\Windows\System32\drivers\fr-FR\rdpwd.sys.mui 2011-11-26 05:56:35 3072 ----a-w- C:\Windows\System32\drivers\fr-FR\serscan.sys.mui 2011-11-26 05:56:33 3584 ----a-w- C:\Windows\System32\drivers\es-ES\tsusbflt.sys.mui 2011-11-26 05:56:33 2560 ----a-w- C:\Windows\System32\drivers\es-ES\rdpwd.sys.mui 2011-11-26 05:56:16 25600 ----a-w- C:\Windows\System32\drivers\es-ES\usbport.sys.mui 2011-11-26 05:56:15 3072 ----a-w- C:\Windows\System32\drivers\es-ES\Dot4usb.sys.mui 2011-11-26 05:56:01 3072 ----a-w- C:\Windows\System32\drivers\zh-CN\tsusbflt.sys.mui 2011-11-26 05:55:55 2560 ----a-w- C:\Windows\System32\drivers\zh-CN\rdpwd.sys.mui 2011-11-26 05:55:50 3584 ----a-w- C:\Windows\System32\drivers\zh-CN\sermouse.sys.mui 2011-11-26 05:55:50 24064 ----a-w- C:\Windows\System32\drivers\zh-CN\ndis.sys.mui 2011-11-26 05:55:39 3072 ----a-w- C:\Windows\System32\drivers\zh-TW\tsusbflt.sys.mui 2011-11-26 05:55:39 2560 ----a-w- C:\Windows\System32\drivers\zh-TW\rdpwd.sys.mui 2011-11-26 05:55:35 23552 ----a-w- C:\Windows\System32\drivers\zh-TW\usbport.sys.mui 2011-11-26 05:55:23 399872 ----a-w- C:\Windows\System32\dpx.dll 2011-11-26 05:55:23 189952 ----a-w- C:\Windows\SysWow64\wdscore.dll 2011-11-26 05:55:12 189952 ----a-w- C:\Windows\SysWow64\sqmapi.dll 2011-11-26 05:54:42 606208 ----a-w- C:\Windows\SysWow64\wbem\fastprox.dll 2011-11-26 05:54:42 363008 ----a-w- C:\Windows\SysWow64\wbemcomn.dll 2011-11-26 05:54:42 189952 ----a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll 2011-11-26 05:50:01 529408 ----a-w- C:\Windows\System32\wbemcomn.dll 2011-11-26 05:50:01 244736 ----a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll 2011-11-26 05:49:35 244736 ----a-w- C:\Windows\System32\sqmapi.dll 2011-11-26 04:03:01 98816 ----a-w- C:\Windows\System32\drivers\usbccgp.sys 2011-11-26 04:03:01 7936 ----a-w- C:\Windows\System32\drivers\usbd.sys 2011-11-26 04:03:01 52736 ----a-w- C:\Windows\System32\drivers\usbehci.sys 2011-11-26 04:03:01 343040 ----a-w- C:\Windows\System32\drivers\usbhub.sys 2011-11-26 04:03:01 325120 ----a-w- C:\Windows\System32\drivers\usbport.sys 2011-11-26 04:03:01 30720 ----a-w- C:\Windows\System32\drivers\usbuhci.sys 2011-11-26 04:03:01 25600 ----a-w- C:\Windows\System32\drivers\usbohci.sys 2011-11-26 04:02:44 2565632 ----a-w- C:\Windows\System32\esent.dll 2011-11-26 04:02:44 1659776 ----a-w- C:\Windows\System32\drivers\ntfs.sys 2011-11-26 04:02:43 1699328 ----a-w- C:\Windows\SysWow64\esent.dll 2011-11-26 04:02:42 189824 ----a-w- C:\Windows\System32\drivers\storport.sys 2011-11-26 04:02:42 166272 ----a-w- C:\Windows\System32\drivers\nvstor.sys 2011-11-26 04:02:42 148352 ----a-w- C:\Windows\System32\drivers\nvraid.sys 2011-11-26 04:02:42 107904 ----a-w- C:\Windows\System32\drivers\amdsata.sys 2011-11-26 04:02:41 96768 ----a-w- C:\Windows\System32\fsutil.exe 2011-11-26 04:02:41 74240 ----a-w- C:\Windows\SysWow64\fsutil.exe 2011-11-26 04:02:41 410496 ----a-w- C:\Windows\System32\drivers\iaStorV.sys 2011-11-26 04:02:41 27008 ----a-w- C:\Windows\System32\drivers\amdxata.sys 2011-11-26 02:58:52 -------- d-----w- C:\ProgramData\ASUS WebStorage 2011-11-26 02:58:14 -------- d-----w- C:\Users\Marie-Christine\AppData\Roaming\EeeStorageUploader 2011-11-26 01:47:56 -------- d-----w- C:\Windows\SysWow64\Wat 2011-11-26 01:47:55 -------- d-----w- C:\Windows\System32\Wat 2011-11-26 00:15:01 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\Apps 2011-11-26 00:00:31 142336 ----a-w- C:\Windows\System32\poqexec.exe 2011-11-26 00:00:31 123904 ----a-w- C:\Windows\SysWow64\poqexec.exe 2011-11-25 23:58:43 2048 ----a-w- C:\Windows\SysWow64\tzres.dll 2011-11-25 23:57:49 886784 ----a-w- C:\Program Files\Common Files\System\wab32.dll 2011-11-25 23:56:52 1395712 ----a-w- C:\Windows\System32\mfc42.dll 2011-11-25 23:56:52 1359872 ----a-w- C:\Windows\System32\mfc42u.dll 2011-11-25 23:56:51 1164288 ----a-w- C:\Windows\SysWow64\mfc42u.dll 2011-11-25 23:56:51 1137664 ----a-w- C:\Windows\SysWow64\mfc42.dll 2011-11-25 23:56:48 30208 ----a-w- C:\Windows\System32\dnscacheugc.exe 2011-11-25 23:56:48 28672 ----a-w- C:\Windows\SysWow64\dnscacheugc.exe 2011-11-25 23:56:48 183296 ----a-w- C:\Windows\System32\dnsrslvr.dll 2011-11-25 23:46:15 642944 ----a-w- C:\Windows\System32\winload.efi 2011-11-25 23:46:15 605552 ----a-w- C:\Windows\System32\winload.exe 2011-11-25 23:46:15 566208 ----a-w- C:\Windows\System32\winresume.efi 2011-11-25 23:46:15 518672 ----a-w- C:\Windows\System32\winresume.exe 2011-11-25 23:46:14 63488 ----a-w- C:\Windows\System32\setbcdlocale.dll 2011-11-25 23:46:14 20352 ----a-w- C:\Windows\System32\kdusb.dll 2011-11-25 23:46:14 19328 ----a-w- C:\Windows\System32\kd1394.dll 2011-11-25 23:46:14 17792 ----a-w- C:\Windows\System32\kdcom.dll 2011-11-25 23:43:36 321024 ----a-w- C:\Windows\System32\d3d10_1core.dll 2011-11-25 23:42:58 404480 ----a-w- C:\Windows\System32\umpnpmgr.dll 2011-11-25 23:42:58 207872 ----a-w- C:\Windows\System32\cfgmgr32.dll 2011-11-25 23:42:58 145920 ----a-w- C:\Windows\SysWow64\cfgmgr32.dll 2011-11-25 23:42:57 64512 ----a-w- C:\Windows\SysWow64\devobj.dll 2011-11-25 23:42:57 44544 ----a-w- C:\Windows\SysWow64\devrtl.dll 2011-11-25 23:42:57 252928 ----a-w- C:\Windows\SysWow64\drvinst.exe 2011-11-25 23:34:18 5561216 ----a-w- C:\Windows\System32\ntoskrnl.exe 2011-11-25 23:34:16 3967872 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe 2011-11-25 23:34:16 3912576 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe 2011-11-25 23:32:19 861696 ----a-w- C:\Windows\System32\oleaut32.dll 2011-11-25 23:32:19 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll 2011-11-25 23:32:19 331776 ----a-w- C:\Windows\System32\oleacc.dll 2011-11-25 23:32:19 233472 ----a-w- C:\Windows\SysWow64\oleacc.dll 2011-11-25 23:32:16 976896 ----a-w- C:\Windows\System32\inetcomm.dll 2011-11-25 23:32:15 741376 ----a-w- C:\Windows\SysWow64\inetcomm.dll 2011-11-25 23:32:13 90624 ----a-w- C:\Windows\System32\drivers\bowser.sys 2011-11-25 23:32:11 31232 ----a-w- C:\Windows\SysWow64\prevhost.exe 2011-11-25 23:32:11 31232 ----a-w- C:\Windows\System32\prevhost.exe 2011-11-25 22:08:27 -------- d-----w- C:\Users\Marie-Christine\AppData\Roaming\Malwarebytes 2011-11-25 22:08:20 -------- d-----w- C:\ProgramData\Malwarebytes 2011-11-25 22:08:16 25416 ----a-w- C:\Windows\System32\drivers\mbam.sys 2011-11-25 22:08:15 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2011-11-25 21:26:06 -------- d-----w- C:\Program Files (x86)\Cisco Systems 2011-11-25 21:02:10 -------- d-----w- C:\ProgramData\Cisco Systems 2011-11-25 21:00:15 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\NPE 2011-11-25 20:11:34 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\Adobe 2011-11-25 19:26:11 729720 ----a-w- C:\Windows\System32\drivers\NISx64\1302000.00A\srtsp64.sys 2011-11-25 19:26:11 451192 ----a-r- C:\Windows\System32\drivers\NISx64\1302000.00A\symds64.sys 2011-11-25 19:26:11 401016 ----a-w- C:\Windows\System32\drivers\NISx64\1302000.00A\symnets.sys 2011-11-25 19:26:11 37496 ----a-w- C:\Windows\System32\drivers\NISx64\1302000.00A\srtspx64.sys 2011-11-25 19:26:11 1084024 ----a-w- C:\Windows\System32\drivers\NISx64\1302000.00A\symefa64.sys 2011-11-25 19:26:10 189560 ----a-w- C:\Windows\System32\drivers\NISx64\1302000.00A\ironx64.sys 2011-11-25 19:26:10 167048 ----a-w- C:\Windows\System32\drivers\NISx64\1302000.00A\ccsetx64.sys 2011-11-25 19:26:05 -------- d-----w- C:\Windows\System32\drivers\NISx64\1302000.00A 2011-11-25 19:14:05 -------- d-----w- C:\Program Files (x86)\Common Files\Symantec Shared 2011-11-25 19:13:15 43640 ----a-r- C:\Windows\System32\drivers\SymIMV.sys 2011-11-25 19:09:48 174200 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS 2011-11-25 19:09:48 -------- d-----w- C:\Program Files\Symantec 2011-11-25 19:09:48 -------- d-----w- C:\Program Files\Common Files\Symantec Shared 2011-11-25 19:09:08 -------- d-----w- C:\Windows\System32\drivers\NISx64 2011-11-25 19:09:05 -------- d-----w- C:\ProgramData\Norton 2011-11-25 19:09:05 -------- d-----w- C:\Program Files (x86)\Norton Internet Security 2011-11-25 19:08:02 -------- d-----w- C:\ProgramData\NortonInstaller 2011-11-25 19:08:02 -------- d-----w- C:\Program Files (x86)\NortonInstaller 2011-11-25 18:50:50 -------- d-----w- C:\Users\Marie-Christine\AppData\Roaming\Asus WebStorage 2011-11-25 18:34:02 -------- d-----w- C:\Windows\System32\log 2011-11-25 18:33:36 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\SRS Labs 2011-11-25 18:29:24 4398360 ----a-w- C:\Windows\System32\d3dx9_32.dll 2011-11-25 18:29:24 3426072 ----a-w- C:\Windows\SysWow64\d3dx9_32.dll 2011-11-25 18:28:20 -------- d-----w- C:\Program Files (x86)\Microsoft 2011-11-25 18:27:12 4865408 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\d948f2401ccab9f\Silverlight.2.0.exe 2011-11-25 18:26:56 74520 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\cfe4c5801ccab9f\DSETUP.dll 2011-11-25 18:26:56 484632 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\cfe4c5801ccab9f\DXSETUP.exe 2011-11-25 18:26:56 1670936 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\cfe4c5801ccab9f\dsetup32.dll 2011-11-25 18:26:53 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\Power2Go 2011-11-25 18:26:50 -------- d-----w- C:\Users\Marie-Christine\AppData\Local\VirtualStore 2011-11-25 18:26:22 -------- d-----w- C:\Program Files (x86)\Common Files\Windows Live . ==================== Find3M ==================== . 2011-11-26 22:11:41 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll 2011-11-26 22:11:36 175616 ----a-w- C:\Windows\System32\msclmd.dll 2011-09-29 16:29:28 1923952 ----a-w- C:\Windows\System32\drivers\tcpip.sys 2011-09-29 04:03:32 3144704 ----a-w- C:\Windows\System32\win32k.sys . ============= FINISH: 10:00:21,18 =============== |
Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.
If you're not already familiar with forums, watch our Welcome Guide to get started.
| Tags |
| asus k50i, dell xps 630 |
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
