Command Processor Virus?

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

AnthTS

Thread Starter
Joined
Dec 21, 2012
Messages
2
Hey there!

I would like some assistance if possible with a somewhat annoying issue im currently having which I can only presume is some form of malware or virus on my brothers laptop. When windows starts after entering his password, a user access request pops up for command processor, he is then unable to run a number of programs including internet browsers. The machine in question is also exceptionally slow.

Up until this point I have Booted the machine in safe mode and run Malware Bytes which found and removed 41 threats. This failed to resolve the issue so I would love it if you guys could help me out! Here are the logs from hijackthis and dds (the other wasnt done as its a 64bit operating system)

HijackThis Log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 04:00:22, on
22/12/2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet
Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal


Running processes:
C:\Program Files (x86)\Common
Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\SysWOW64\svchost.exe
C:\Windows\SysWOW64\svchost.exe
C:\Program
Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files
(x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files
(x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
C:\Program Files
(x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files
(x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\Spybot -
Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Windows
Live\Contacts\wlcomm.exe
C:\Users\Chris\Desktop\HijackThis.exe


R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPNOT/2
R1 -
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0
- HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com/
R1
- HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPNOT/2
R1
- HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1
- HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0
- HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=http://g.uk.msn.com/HPNOT/2
R0
- HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 -
HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 -
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
C:\Windows\SysWOW64\blank.htm
R1 -
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =
127.0.0.1:9421;<local>
R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName =
O2 - BHO: Shareaza Web Download Hook -
{0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files
(x86)\Shareaza\RazaWebHook32.dll (file missing)
O2 - BHO: AcroIEHelperStub -
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer
Download and Record Plugin for Internet Explorer -
{3049C3E9-B461-4BC5-8870-4C09146192CA} -
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2
- BHO: GetRight IE Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program
Files (x86)\GetRight\xx2gr.dll
O2 - BHO: Increase performance and video
formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} -
C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO:
Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} -
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO:
Use the DivX Plus Web Player to watch web videos with less interruptions and
smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -
C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO:
Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} -
C:\Program Files (x86)\Common Files\Microsoft Shared\Windows
Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper -
{9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows
Live\Companion\companioncore.dll
O2 - BHO: URLRedirectionBHO -
{B4F3A835-0E21-4959-BA22-42B3008E02FF} -
C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: GPotato Toolbar -
{c0326c12-9f06-4344-aa25-60267226bb7d} - C:\Program Files
(x86)\gpotatotoolbar\vmntemplateX.dll (file missing)
O2 - BHO: MediaBar -
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} -
C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll (file
missing)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} -
C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (file missing)
O2 - BHO:
Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} -
C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Ask Toolbar -
{D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files
(x86)\Ask.com\GenericAskToolbar.dll (file missing)
O3 - Toolbar: GPotato
Toolbar - {c0326c12-9f06-4344-aa25-60267226bb7d} - C:\Program Files
(x86)\gpotatotoolbar\vmntemplateX.dll (file missing)
O3 - Toolbar: MediaBar -
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} -
C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll (file
missing)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI
Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP
Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick
Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files
(x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe
Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader
9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Easybits Recovery] C:\Program
Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [Corel File
Shell Monitor] C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo
X2\CorelIOMonitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program
Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run:
[TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe"
-osboot
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft
Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [SDTray]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 -
HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common
Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run:
[DefBmoff] C:\Users\Chris\AppData\Local\uxnoylug\defbmoff.exe
O4 -
HKCU\..\Run: [Akamai NetSession Interface]
"C:\Users\Chris\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run:
[msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe"
/background
O4 - HKCU\..\Run: [Spybot-S&D Cleaning] "C:\Program Files
(x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
O4 -
HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin]
C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 -
HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe
/autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin]
C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup:
defbmoff.exe
O8 - Extra context menu item: Download with &Shareaza -
res://C:\Program Files (x86)\Shareaza\RazaWebHook32.dll/3000
O8 - Extra
context menu item: Download with GetRight - C:\Program Files
(x86)\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with
GetRight Browser - C:\Program Files (x86)\GetRight\GRbrowse.htm
O9 - Extra
button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 -
{0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows
Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files
(x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 -
{219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows
Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem:
@C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003
- {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows
Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) -
{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search
& Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search
&& Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O10 -
Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft
shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program
files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 -
Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol:
wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows
Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack:
text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files
(x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon
Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service:
@%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner -
C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events
Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23
- Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner -
C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services
for Windows (ezSharedSvc) - EasyBits Software AS -
C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service:
@%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner -
C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service:
GameConsoleService - Unknown owner - C:\Program Files (x86)\HP Games\HP Game
Console\GameConsoleService.exe (file missing)
O23 - Service: Google Update
Service (gupdate) (gupdate) - Google Inc. - C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service
(gupdatem) (gupdatem) - Google Inc. - C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service -
Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health
Check\hphc_service.exe
O23 - Service: HP Wireless Assistant Service -
Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless
Assistant\HPWA_Service.exe
O23 - Service: HP Quick Synchronization Service
(HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files
(x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software
Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files
(x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: @keyiso.dll,-100
(KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 -
Service: @comres.dll,-2797 (MSDTC) - Unknown owner -
C:\Windows\System32\msdtc.exe (file missing)
O23 - Service:
@%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner -
C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect
GameGuard Service (npggsvc) - Unknown owner -
C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service:
@%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner -
C:\Windows\system32\lsass.exe (file missing)
O23 - Service:
@%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner -
C:\Windows\system32\locator.exe (file missing)
O23 - Service: RtVOsdService
Installer (RtVOsdService) - Realtek Semiconductor Corp. - C:\Program
Files\Realtek\RtVOsd\RtVOsdService.exe
O23 - Service:
@%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner -
C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2
Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files
(x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service:
Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. -
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 -
Service: Spybot-S&D 2 Security Center Service (SDWSCService) -
Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy
2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3
(SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file
missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) -
Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service:
@%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner -
C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service:
@%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner -
C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service:
@%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner -
C:\Windows\system32\lsass.exe (file missing)
O23 - Service:
@%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner -
C:\Windows\System32\vds.exe (file missing)
O23 - Service:
@%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner -
C:\Windows\system32\vssvc.exe (file missing)
O23 - Service:
@%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner -
C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service:
@%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner -
C:\Windows\system32\wbengine.exe (file missing)
O23 - Service:
@%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner -
C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service:
@%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown
owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file
missing)


--
End of file - 13203 bytes
DDS Log
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 1.6.0_22
Run by Chris at 4:03:01 on 2012-12-22
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.7931.6344 [GMT 0:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Spybot - Search and Destroy *Enabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler.exe
C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler64.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.bearshare.com/
uProxyOverride = 127.0.0.1:9421;<local>
BHO: Shareaza Web Download Hook: {0EEDB912-C5FA-486F-8334-57288578C627} -
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
BHO: GetRight IE Helper: {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files (x86)\GetRight\xx2gr.dll
BHO: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
BHO: DivX HiQ: {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: GPotato Toolbar: {c0326c12-9f06-4344-aa25-60267226bb7d} -
BHO: MediaBar: {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} -
BHO: Ask Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} -
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Ask Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} -
TB: Ask Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} -
TB: GPotato Toolbar: {c0326c12-9f06-4344-aa25-60267226bb7d} -
TB: MediaBar: {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} -
uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
uRun: [DefBmoff] C:\Users\Chris\AppData\Local\uxnoylug\defbmoff.exe
uRun: [Akamai NetSession Interface] "C:\Users\Chris\AppData\Local\Akamai\netsession_win.exe"
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [Spybot-S&D Cleaning] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
mRun: [Corel File Shell Monitor] C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot
mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
StartupFolder: C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\defbmoff.exe
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-Explorer: EnableShellExecuteHooks = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: Download with &Shareaza - C:\Program Files (x86)\Shareaza\RazaWebHook32.dll/3000
IE: Download with GetRight - C:\Program Files (x86)\GetRight\GRdownload.htm
IE: Open with GetRight Browser - C:\Program Files (x86)\GetRight\GRbrowse.htm
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
TCP: NameServer = 192.168.1.254
TCP: Interfaces\{068DD17E-20EB-4414-B6BB-D41FB5D10BCE} : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{EF063C66-78F8-4C76-B027-3E55B6B58E2D} : DHCPNameServer = 192.168.1.254
TCP: Interfaces\{EF063C66-78F8-4C76-B027-3E55B6B58E2D}\2445F40756E6A7F6E656 : DHCPNameServer = 192.168.22.22 192.168.22.23
TCP: Interfaces\{EF063C66-78F8-4C76-B027-3E55B6B58E2D}\3375962756C6563737D2D4F64656D6D233362623 : DHCPNameServer = 192.168.1.1 192.168.1.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
Notify: SDWinLogon - SDWinLogon.dll
SSODL: WebCheck - <orphaned>
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
x64-BHO: Shareaza Web Download Hook: {0EEDB912-C5FA-486F-8334-57288578C627} -
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
x64-Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
x64-DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-10-7 203264]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2012-1-4 822624]
R2 ezSharedSvc;Easybits Services for Windows;C:\Windows\System32\ezSharedSvcHost.exe --> C:\Windows\System32\ezSharedSvcHost.exe [?]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service;C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-6-18 103992]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-1-25 92216]
R2 RtVOsdService;RtVOsdService Installer;C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [2010-6-24 315392]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-12-18 1103392]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-12-18 1369624]
R2 SDWSCService;Spybot-S&D 2 Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-12-18 168384]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-1 508776]
R3 huawei_enumerator;huawei_enumerator;C:\Windows\System32\drivers\ew_jubusenum.sys [2012-1-13 86016]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-10-7 347680]
R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2011-10-1 764264]
R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2011-10-1 268648]
R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2011-10-1 25960]
R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2011-10-1 22376]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-1 219496]
R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2010-10-7 38456]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;C:\Windows\System32\drivers\ew_hwusbdev.sys [2012-1-13 117248]
S3 ew_usbenumfilter;huawei_CompositeFilter;C:\Windows\System32\drivers\ew_usbenumfilter.sys [2012-1-13 13952]
S3 ewusbmbb;HUAWEI USB-WWAN miniport;C:\Windows\System32\drivers\ewusbwwan.sys [2012-1-13 421376]
S3 massfilter;ZTE Mass Storage Filter Driver;C:\Windows\System32\drivers\massfilter.sys [2011-3-2 11776]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]
S3 npggsvc;nProtect GameGuard Service;C:\Windows\System32\GameMon.des -service --> C:\Windows\System32\GameMon.des -service [?]
S3 skfiltv;skfiltv;C:\Windows\System32\drivers\skfiltv.sys [2008-8-14 24064]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-12-12 1255736]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]
S4 AERTFilters;Andrea RT Filters Service;C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2010-10-7 98208]
S4 BecHelperService;BecHelperService;C:\Program Files (x86)\3 Mobile Broadband\3Connect\BecHelperService.exe [2012-1-13 1740696]
S4 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-6-30 27192]
S4 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-6-1 2804568]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2012-12-22 01:09:04 -------- d-----w- C:\Users\Chris\AppData\Local\{67331B98-1BF9-497F-8DC8-CC9893B52FCB}
2012-12-22 00:58:34 -------- d-----w- C:\Users\Chris\AppData\Local\{538BDD51-F807-4C48-AB85-15C912128E1D}
2012-12-21 23:51:04 -------- d-----w- C:\Users\Chris\AppData\Local\Google
2012-12-21 23:50:41 -------- d-----w- C:\Users\Chris\AppData\Local\Deployment
2012-12-21 23:50:41 -------- d-----w- C:\Users\Chris\AppData\Local\Apps
2012-12-20 17:23:22 -------- d-----w- C:\Users\Chris\AppData\Local\{5481FE68-859A-42F6-AE81-62CA3ED74F8D}
2012-12-18 23:56:58 -------- d-----w- C:\HP_TOOLS_mountHPSF
2012-12-18 23:28:14 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
2012-12-18 23:27:56 17272 ----a-w- C:\Windows\System32\sdnclean64.exe
2012-12-18 23:27:51 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy 2
2012-12-18 23:27:29 -------- d-----w- C:\Users\Chris\AppData\Local\Programs
2012-12-18 23:22:22 9125352 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{653FFEEC-4843-4B5F-B2A5-3A80CAD1B798}\mpengine.dll
2012-12-18 23:18:22 -------- d-----w- C:\Users\Chris\AppData\Local\{83539DCC-2818-4D0F-88AE-3F6BE99D688A}
2012-12-15 17:54:53 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-12-15 17:54:53 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-12-15 11:11:48 -------- d-----w- C:\Users\Chris\AppData\Local\{F0BF866C-2138-4883-896D-51011829387A}
2012-12-15 00:44:00 -------- d-----w- C:\Users\Chris\AppData\Local\Aeria Games
2012-12-15 00:42:42 -------- d-----w- C:\ProgramData\Aeria Games
2012-12-15 00:34:03 425984 ----a-w- C:\Windows\System32\KernelBase.dll
2012-12-15 00:34:01 215040 ----a-w- C:\Windows\System32\winsrv.dll
2012-12-15 00:23:00 3147264 ----a-w- C:\Windows\System32\win32k.sys
2012-12-15 00:21:00 478208 ----a-w- C:\Windows\System32\dpnet.dll
2012-12-15 00:21:00 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll
2012-12-15 00:20:59 295792 ----a-w- C:\Windows\System32\drivers\volsnap.sys
2012-12-14 23:01:45 -------- d-----w- C:\Users\Chris\AppData\Local\{CD622117-3908-459E-BD79-4170809ACA1A}
2012-12-02 07:54:05 -------- d-----w- C:\Users\Chris\AppData\Local\{642C49CA-8E9A-42D3-BE2F-0C8DB2C6F2AD}
2012-12-01 01:48:38 -------- d-----w- C:\Users\Chris\AppData\Roaming\FMRTE13
2012-11-30 10:21:30 -------- d-----w- C:\Users\Chris\AppData\Local\Chromium
2012-11-30 09:50:31 -------- d-----w- C:\Users\Chris\AppData\Local\{819DE322-152B-4290-BFE6-AB7B04C13800}
2012-11-30 04:52:10 0 ----a-w- C:\Windows\SysWow64\shoC46F.tmp
2012-11-30 03:30:12 9728 ----a-w- C:\Windows\System32\Wdfres.dll
2012-11-30 03:30:12 785512 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys
2012-11-30 03:30:12 54376 ----a-w- C:\Windows\System32\drivers\WdfLdr.sys
2012-11-30 03:30:12 2560 ----a-w- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui
2012-11-30 03:11:29 87040 ----a-w- C:\Windows\System32\drivers\WUDFPf.sys
2012-11-30 03:11:29 198656 ----a-w- C:\Windows\System32\drivers\WUDFRd.sys
2012-11-30 03:11:28 84992 ----a-w- C:\Windows\System32\WUDFSvc.dll
2012-11-30 03:11:28 45056 ----a-w- C:\Windows\System32\WUDFCoinstaller.dll
2012-11-30 03:11:28 194048 ----a-w- C:\Windows\System32\WUDFPlatform.dll
2012-11-30 03:11:27 744448 ----a-w- C:\Windows\System32\WUDFx.dll
2012-11-30 03:11:27 229888 ----a-w- C:\Windows\System32\WUDFHost.exe
2012-11-29 23:51:33 95744 ----a-w- C:\Windows\System32\synceng.dll
2012-11-29 23:51:33 78336 ----a-w- C:\Windows\SysWow64\synceng.dll
2012-11-29 23:51:10 956416 ----a-w- C:\Windows\System32\localspl.dll
2012-11-29 23:49:53 714752 ----a-w- C:\Windows\System32\kerberos.dll
2012-11-29 23:49:52 541184 ----a-w- C:\Windows\SysWow64\kerberos.dll
2012-11-29 23:49:48 5505904 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-11-29 23:49:46 3958128 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-11-29 23:49:45 3902832 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-11-29 23:48:02 574464 ----a-w- C:\Windows\System32\d3d10level9.dll
2012-11-29 23:48:02 490496 ----a-w- C:\Windows\SysWow64\d3d10level9.dll
2012-11-29 23:42:13 58880 ----a-w- C:\Windows\System32\browcli.dll
2012-11-29 23:42:13 41472 ----a-w- C:\Windows\SysWow64\browcli.dll
2012-11-29 23:42:13 136704 ----a-w- C:\Windows\System32\browser.dll
2012-11-29 23:40:28 1425408 ----a-w- C:\Program Files\Common Files\System\ado\msado15.dll
2012-11-29 23:40:25 987136 ----a-w- C:\Program Files (x86)\Common Files\System\ado\msado15.dll
2012-11-29 23:40:16 208896 ----a-w- C:\Windows\System32\profsvc.dll
2012-11-29 23:40:10 204800 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-11-29 23:40:05 3213824 ----a-w- C:\Windows\System32\msi.dll
2012-11-29 23:40:04 2342400 ----a-w- C:\Windows\SysWow64\msi.dll
2012-11-29 23:38:48 1895280 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-11-29 23:29:39 80896 ----a-w- C:\Windows\System32\imagehlp.dll
2012-11-29 23:29:39 22896 ----a-w- C:\Windows\System32\drivers\fs_rec.sys
2012-11-29 23:29:39 158720 ----a-w- C:\Windows\SysWow64\imagehlp.dll
2012-11-29 23:29:38 5120 ----a-w- C:\Windows\SysWow64\wmi.dll
2012-11-29 23:29:38 5120 ----a-w- C:\Windows\System32\wmi.dll
2012-11-29 23:23:17 1367552 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
2012-11-29 23:23:16 936960 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-11-29 23:17:18 751104 ----a-w- C:\Windows\System32\win32spl.dll
2012-11-29 23:17:18 559104 ----a-w- C:\Windows\System32\spoolsv.exe
2012-11-29 23:17:17 67584 ----a-w- C:\Windows\splwow64.exe
2012-11-29 23:17:17 492032 ----a-w- C:\Windows\SysWow64\win32spl.dll
.
==================== Find3M ====================
.
2012-11-14 06:11:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll
2012-11-14 06:04:11 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-11-14 06:02:49 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-11-14 05:57:46 599040 ----a-w- C:\Windows\System32\vbscript.dll
2012-11-14 05:57:35 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-11-14 05:52:40 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-11-14 02:09:22 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-11-14 01:58:15 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-11-14 01:57:37 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-11-14 01:49:25 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-11-14 01:48:27 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll
2012-11-14 01:44:42 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-11-13 01:29:05 74752 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
2012-11-13 01:29:05 161792 ----a-w- C:\Windows\SysWow64\msls31.dll
2012-11-13 01:29:03 110592 ----a-w- C:\Windows\SysWow64\IEAdvpack.dll
2012-11-13 01:29:02 86528 ----a-w- C:\Windows\SysWow64\iesysprep.dll
2012-11-13 01:29:02 76800 ----a-w- C:\Windows\SysWow64\SetIEInstalledDate.exe
2012-11-13 01:29:02 48640 ----a-w- C:\Windows\SysWow64\mshtmler.dll
2012-11-13 01:29:00 74752 ----a-w- C:\Windows\SysWow64\iesetup.dll
2012-11-13 01:29:00 63488 ----a-w- C:\Windows\SysWow64\tdc.ocx
2012-11-13 01:29:00 367104 ----a-w- C:\Windows\SysWow64\html.iec
2012-10-16 21:20:49 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 21:20:46 347648 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 20:34:37 559104 ----a-w- C:\Windows\apppatch\AcLayers.dll
2012-10-04 17:38:56 362496 ----a-w- C:\Windows\System32\wow64win.dll
2012-10-04 17:38:56 243200 ----a-w- C:\Windows\System32\wow64.dll
2012-10-04 17:38:56 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2012-10-04 17:35:22 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2012-10-04 16:54:18 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2012-10-04 16:54:17 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll
2012-10-04 15:19:57 338432 ----a-w- C:\Windows\System32\conhost.exe
2012-10-04 14:49:27 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2012-10-04 14:49:24 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2012-10-04 14:49:22 2048 ----a-w- C:\Windows\SysWow64\user.exe
2012-10-04 14:49:22 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2012-10-04 14:44:29 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2012-10-04 14:44:29 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-04 14:44:29 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-04 14:44:29 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2012-09-29 19:54:26 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys
.
============= FINISH: 4:03:48.04 ===============
Attach File from DDS:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 10/12/2010 10:28:09
System Uptime: 22/12/2012 03:34:19 (1 hours ago)
.
Motherboard: Hewlett-Packard | | 1604
Processor: AMD Athlon(tm) II P320 Dual-Core Processor | Socket S1G4 | 2100/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 217 GiB total, 142.223 GiB free.
D: is FIXED (NTFS) - 15 GiB total, 2.217 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: TCP/IP Protocol Driver
Device ID: ROOT\LEGACY_TCPIP\0000
Manufacturer:
Name: TCP/IP Protocol Driver
PNP Device ID: ROOT\LEGACY_TCPIP\0000
Service: Tcpip
.
==== System Restore Points ===================
.
RP164: 18/12/2012 23:20:30 - Windows Update
RP165: 19/12/2012 01:29:47 - Removed Prius Online Setup
RP166: 19/12/2012 03:00:27 - Windows Update
RP167: 22/12/2012 00:14:49 - Removed Aeria Ignite
RP168: 22/12/2012 00:19:53 - Removed Loong.
RP169: 22/12/2012 00:20:25 - Removed LucentHeart
RP170: 22/12/2012 00:27:17 - Removed Webzen Game Starter
RP171: 22/12/2012 00:44:07 - Removed Luvinia
RP172: 22/12/2012 00:44:51 - Removed LucentHeart
RP173: 22/12/2012 00:51:25 - Removed Martial Empires
.
==== Installed Programs ======================
.
3Connect
Acrobat.com
ActiveCheck component for HP Active Support Library
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.3 MUI
Adobe Shockwave Player 11.5
Agatha Christie - Death on the Nile
AMD USB Filter Driver
Ask Toolbar
Atheros Driver Installation Program
ATI Catalyst Install Manager
Bejeweled 2 Deluxe
Blackhawk Striker 2
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Graphics Previews Vista
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-core-static
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Chuzzle Deluxe
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Corel Paint Shop Pro Photo X2
Corel PaintShop Photo Pro X3
CyberLink DVD Suite
CyberLink PowerDVD 9
CyberLink YouCam
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DivX Setup
Dora's Carnival Adventure
Energy Star Digital Logo
Escape Rosecliff Island
ESU for Microsoft Windows 7
FATE
Final Drive Nitro
FMRTE
FMRTE 13.1.3.24
Football Manager 2013
GetRight
Google Chrome
Google Update Helper
HP Advisor
HP Customer Experience Enhancements
HP Documentation
HP Game Console
HP Games
HP Photo Creations
HP Power Manager
HP Quick Launch
HP Setup
HP Software Framework
HP Support Assistant
HP Wireless Assistant
HPAsset component for HP Active Support Library
Huawei modem
HxD Hex Editor version 1.7.7.0
ICA
ImgBurn
IPM_PSP_CL
IPM_PSP_COM
Java Auto Updater
Java(TM) 6 Update 20 (64-bit)
Java(TM) 6 Update 22
Jewel Quest - Heritage
Junk Mail filter update
K-Lite Codec Pack 4.0.0 (Full)
LabelPrint
LightScribe System Software
Malwarebytes Anti-Malware version 1.65.1.1000
Mesh Runtime
Messenger Companion
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Office 2010
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Click-to-Run 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office PowerPoint 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Shared 64-bit MUI (English) 2010
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Starter 2010 - English
Microsoft PowerPoint 2010
Microsoft PowerPoint Viewer
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
MSVCRT
MSVCRT_amd64
Norton Online Backup
NVIDIA PhysX
OpenAL
OpenOffice.org 3.3
Penguins!
PhotoNow!
Plants vs. Zombies
Poker Superstars III
Polar Bowler
Polar Golfer
Power2Go
PowerDirector
PSPPContent
PSPPRO_DCRAW
QuickTime
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
Realtek Ethernet Controller Driver For Windows 7
Realtek High Definition Audio Driver
RealUpgrade 1.1
Recovery Manager
RF Uninstall
RtVOsd
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition
Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553096)
Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition
Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition
Setup
Spybot - Search & Destroy
Steam
Synaptics Pointing Device Driver
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2687277) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
VC80CRTRedist - 8.0.50727.4053
Ventrilo Client for Windows x64
Virtual Villagers - The Secret City
VLC media player 1.1.9
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Language Selector
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WinRAR 4.00 beta 2 (64-bit)
Xilisoft XviD Converter 6
Xvid Video Codec
ZTE_1.2059.0.8
Zuma Deluxe
.
==== Event Viewer Messages From Past Week ========
.
22/12/2012 03:36:58, Error: Application Popup [1060] - \??\C:\Users\Chris\AppData\Local\Temp\ksdimlbu.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
22/12/2012 03:34:44, Error: Service Control Manager [7000] - The Htsysm service failed to start due to the following error: The system cannot find the file specified.
22/12/2012 03:34:36, Error: Service Control Manager [7000] - The Mobile IP Route Manager service failed to start due to the following error: This driver has been blocked from loading
22/12/2012 03:34:36, Error: Application Popup [1060] - \??\C:\Windows\SysWow64\drivers\mdvrmng.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
22/12/2012 03:25:48, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
22/12/2012 03:23:49, Error: Service Control Manager [7001] - The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error: The dependency service or group failed to start.
22/12/2012 02:55:45, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {D3DCB472-7261-43CE-924B-0704BD730D5F}
22/12/2012 02:55:44, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service fdPHost with arguments "" in order to run the server: {145B4335-FE2A-4927-A040-7C35AD3180EF}
22/12/2012 02:55:21, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netprofm with arguments "" in order to run the server: {A47979D2-C419-11D9-A5B4-001185AD2B89}
22/12/2012 02:55:21, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1068" attempting to start the service netman with arguments "" in order to run the server: {BA126AD1-2166-11D1-B1D0-00805FC1270E}
22/12/2012 02:55:18, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
22/12/2012 02:55:18, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
22/12/2012 02:55:09, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
22/12/2012 02:55:01, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}
22/12/2012 02:54:50, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD DfsC discache NetBIOS NetBT nsiproxy Psched rdbss spldr tdx vwififlt Wanarpv6 WfpLwf
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The Workstation service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The SMB MiniRedirector Wrapper and Engine service depends on the Redirected Buffering Sub Sysytem service which failed to start because of the following error: A device attached to the system is not functioning.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The SMB 2.0 MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The SMB 1.x MiniRedirector service depends on the SMB MiniRedirector Wrapper and Engine service which failed to start because of the following error: The dependency service or group failed to start.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The Network Store Interface Service service depends on the NSI proxy service driver. service which failed to start because of the following error: A device attached to the system is not functioning.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The Network Location Awareness service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The IP Helper service depends on the Network Store Interface Service service which failed to start because of the following error: The dependency service or group failed to start.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The DNS Client service depends on the NetIO Legacy TDI Support Driver service which failed to start because of the following error: A device attached to the system is not functioning.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The DHCP Client service depends on the Ancillary Function Driver for Winsock service which failed to start because of the following error: A device attached to the system is not functioning.
22/12/2012 02:54:50, Error: Service Control Manager [7001] - The Client Virtualization Handler service depends on the Application Virtualization Client service which failed to start because of the following error: The dependency service or group failed to start.
18/12/2012 23:20:41, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Update for Windows 7 for x64-based Systems (KB2748349).
18/12/2012 23:20:41, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Windows 7 for x64-based Systems (KB2770660).
18/12/2012 23:20:41, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Cumulative Security Update for Internet Explorer 9 for Windows 7 for x64-based Systems (KB2761465).
18/12/2012 23:14:05, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.
18/12/2012 20:02:52, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.
18/12/2012 20:02:30, Error: Microsoft-Windows-WLAN-AutoConfig [10000] - WLAN Extensibility Module has failed to start. Module Path: C:\Windows\system32\athihvs.dll Error Code: 21
18/12/2012 20:02:11, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: discache spldr Wanarpv6
15/12/2012 11:16:30, Error: Service Control Manager [7031] - The Windows Modules Installer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
15/12/2012 11:11:20, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Wlansvc service.
15/12/2012 11:11:20, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the HPWMISVC service.
.
==== End Of File ===========================
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top