google search redirecting

[crape42]

Here' the MBAM log and DDS log and Attach file.



Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5485

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

1/8/2011 3:07:07 PM
mbam-log-2011-01-08 (15-07-07).txt

Scan type: Quick scan
Objects scanned: 169229
Time elapsed: 4 minute(s), 15 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)








DDS (Ver_10-12-12.02) - NTFSx86
Run by Craig at 15:12:11.32 on Sat 01/08/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2528 [GMT -8:00]

AV: Symantec AntiVirus Corporate Edition *Disabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
FW: Symantec Client Firewall *Disabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe
C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lkcitdl.exe
C:\WINDOWS\system32\lkads.exe
C:\WINDOWS\system32\lktsrv.exe
C:\Program Files\National Instruments\MAX\nimxs.exe
C:\WINDOWS\system32\nipalsm.exe
C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
C:\WINDOWS\system32\nisvcloc.exe
C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe
C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe
C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
C:\WINDOWS\system32\nipalsm.exe
C:\WINDOWS\system32\wuauclt.exe
C:\VXIPNP\WinNT\NIvisa\niLxiDiscovery.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\SYMANT~2\VPTray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\Program Files\National Instruments\NI-DAQ\HWConfig\nidevmon.exe
C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Clarus\Samsung Auto Backup\ISFGuage.exe
C:\Program Files\Clarus\Samsung Auto Backup\ISFRealTimeD.exe
C:\Program Files\Clarus\Samsung Auto Backup\ISFTimerD.exe
C:\Documents and Settings\Craig\Desktop\Downloads\dds.scr

============== Pseudo HJT Report ===============

uStart Page = http://www.google.com/ig/dell?hl=en&...us&ibd=6080821
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=6080821
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: EndNote Web: {82d2e569-25a7-4e4d-9fa3-c5025b4b7912} - c:\program files\endnote web\ENWIEPlug.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\adobe acrobat 6.0\acrobat\AcroIEFavClient.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5805.1910\swg.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\adobe acrobat 6.0\acrobat\AcroIEFavClient.dll
TB: EndNote Web: {945c8270-a848-11d5-a805-00b0d092f45b} - c:\program files\endnote web\ENWIEPlug.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\adobe acrobat 6.0\acrobat\AcroIEFavClient.dll
uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler
uRun: [Google Update] "c:\documents and settings\craig\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe"
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [ECenter] c:\dell\e-center\EULALauncher.exe
mRun: [PDVDDXSrv] "c:\program files\cyberlink\powerdvd dx\PDVDDXSrv.exe"
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [vptray] c:\progra~1\symant~1\symant~2\VPTray.exe
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [AdobeVersionCue] c:\program files\adobe\adobe version cue\controlpanel\VersionCueTray.exe
mRun: [SSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot
mRun: [niDevMon] c:\program files\national instruments\ni-daq\hwconfig\nidevmon.exe
mRun: [MaxMenuMgr] "c:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
StartupFolder: c:\docume~1\craig\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\docume~1\craig\startm~1\programs\startup\samsun~3.lnk - c:\program files\clarus\samsung auto backup\ISFGuage.exe
StartupFolder: c:\docume~1\craig\startm~1\programs\startup\samsun~2.lnk - c:\program files\clarus\samsung auto backup\ISFRealTimeD.exe
StartupFolder: c:\docume~1\craig\startm~1\programs\startup\samsun~1.lnk - c:\program files\clarus\samsung auto backup\ISFTimerD.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\acroba~1.lnk - c:\program files\adobe\adobe acrobat 6.0\distillr\acrotray.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} - hxxps://access.hhmi.org/dana-cached/setup/JuniperSetupSP1.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: NavLogon - c:\windows\system32\NavLogon.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
mASetup: {439113CE-2797-47E8-BA3D-03F300777207} - "c:\program files\hummingbird\connectivity\13.00\accessories\HumSettings.exe" INSTALL=ALL NoFreeWhenWOW64=1 LOGGINGLEVEL=5
mASetup: {72B7C0F0-6036-48D7-A0C9-4FF886785E15} - "c:\program files\hummingbird\connectivity\13.00\accessories\HumSettings.exe" INSTALL=ALL NoFreeWhenWOW64=1 LOGGINGLEVEL=5

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\craig\applic~1\mozilla\firefox\profiles\zwijfs5v.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}

============= SERVICES / DRIVERS ===============

R0 nipbcfk;National Instruments Class Upper Filter Driver;c:\windows\system32\drivers\nipbcfk.sys [2008-8-21 15448]
R1 SAVRT;SAVRT;c:\program files\symantec client security\symantec antivirus\savrt.sys [2006-9-6 337592]
R1 SAVRTPEL;SAVRTPEL;c:\program files\symantec client security\symantec antivirus\Savrtpel.sys [2006-9-6 54968]
R2 ASFIPmon;Broadcom ASF IP and SMBIOS Mailbox Monitor;c:\program files\broadcom\asfipmon\AsfIpMon.exe [2007-6-20 79168]
R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccEvtMgr.exe [2007-5-29 192104]
R2 ccProxy;Symantec Network Proxy;c:\program files\common files\symantec shared\ccProxy.exe [2007-5-29 202344]
R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSetMgr.exe [2007-5-29 169576]
R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2009-9-25 189736]
R2 ni488enumsvc;NI-488.2 Enumeration Service;c:\windows\system32\nipalsm.exe [2008-8-21 12696]
R2 niarbk;niarbk;c:\windows\system32\drivers\niarbk.dll [2007-4-16 37376]
R2 nibffrk;nibffrk;c:\windows\system32\drivers\nibffrk.dll [2007-4-16 21504]
R2 Nidaq32k;Nidaq32k;c:\windows\system32\drivers\nidaq32k.sys [2007-4-16 674304]
R2 nidevldu;NI Device Loader;c:\windows\system32\nipalsm.exe [2008-8-21 12696]
R2 nidmmk;NI DMM and Data Logger Kernel Driver;c:\windows\system32\drivers\nidmmk.dll [2007-4-16 50688]
R2 niLXIDiscovery;National Instruments LXI Discovery Service;c:\vxipnp\winnt\nivisa\niLxiDiscovery.exe [2008-6-20 129144]
R2 nimDNSResponder;National Instruments mDNS Responder Service;c:\program files\national instruments\shared\mdns responder\nimdnsResponder.exe [2008-6-18 192112]
R2 nimdsk;nimdsk;c:\windows\system32\drivers\nimdsk.dll [2007-4-16 30208]
R2 nipxirmk;nipxirmk;c:\windows\system32\drivers\nipxirmkl.sys [2008-6-25 11344]
R2 nistck;nistck;c:\windows\system32\drivers\niSTCk.dll [2007-4-16 111616]
R2 NiViPxiK;NI-VISA PXI Driver;c:\windows\system32\drivers\NiViPxiKl.sys [2008-6-20 11360]
R2 SavRoam;SAVRoam;c:\program files\symantec client security\symantec antivirus\SavRoam.exe [2007-10-7 116664]
R2 Symantec AntiVirus;Symantec AntiVirus;c:\program files\symantec client security\symantec antivirus\Rtvscan.exe [2007-10-7 1822648]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-6-10 102448]
R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20110105.003\naveng.sys [2011-1-6 86008]
R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20110105.003\navex15.sys [2011-1-6 1360760]
R3 nidimk;nidimk;c:\windows\system32\drivers\nidimkl.sys [2008-6-13 11360]
R3 nimru2k;nimru2k;c:\windows\system32\drivers\nimru2kl.sys [2008-6-13 11360]
R3 nimstsk;nimstsk;c:\windows\system32\drivers\nimstskl.sys [2008-7-23 11360]
R3 VDNG;Video to 1394, WDM Video Capture;c:\windows\system32\drivers\vid21394_4012.sys [2008-9-12 59520]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-3-5 135664]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2008-8-20 30192]
S3 imaq1394k;imaq1394k;c:\windows\system32\drivers\imaq1394kl.sys [2008-6-18 11480]
S3 lvalarmk;lvalarmk;c:\windows\system32\drivers\lvalarmk.sys [2008-6-23 20104]
S3 ni1006k;NI PXI-1006 Chassis Pilot;c:\windows\system32\drivers\ni1006k.sys [2008-11-11 26192]
S3 ni1045k;NI PXI-1045 Chassis Pilot;c:\windows\system32\drivers\ni1045kl.sys [2008-11-11 11344]
S3 ni1065k;NI PXIe-1065 Chassis Pilot;c:\windows\system32\drivers\ni1065k.sys [2008-11-11 22608]
S3 ni488lock;NI-488.2 Locking Service;c:\windows\system32\drivers\ni488lock.sys [2008-9-4 16456]
S3 nicdrk;nicdrk;c:\windows\system32\drivers\nicdrkl.sys [2008-7-24 11352]
S3 nicsrk;nicsrk;c:\windows\system32\drivers\nicsrkl.sys [2008-7-31 11336]
S3 nidmxfk;nidmxfk;c:\windows\system32\drivers\nidmxfkl.sys [2008-8-1 11336]
S3 nidsark;nidsark;c:\windows\system32\drivers\nidsarkl.sys [2008-7-25 11344]
S3 nidwgk;nidwgk;c:\windows\system32\drivers\nidwgkl.sys [2008-8-26 11360]
S3 niemrk;niemrk;c:\windows\system32\drivers\niemrkl.sys [2008-7-31 11336]
S3 niesrk;niesrk;c:\windows\system32\drivers\niesrkl.sys [2008-7-31 11336]
S3 nifslk;nifslk;c:\windows\system32\drivers\nifslkl.sys [2008-7-29 11352]
S3 nigplk;nigplk;c:\windows\system32\drivers\nigplkl.sys [2008-6-16 11640]
S3 nihsdrk;nihsdrk;c:\windows\system32\drivers\nihsdrkl.sys [2008-7-16 11352]
S3 niimaqdxk;niimaqdxk;c:\windows\system32\drivers\niimaqdxkl.sys [2008-6-23 11320]
S3 niimaqk;NI-IMAQ Driver;c:\windows\system32\drivers\niimaqk.sys --> c:\windows\system32\drivers\niimaqk.sys [?]
S3 nimsdrk;nimsdrk;c:\windows\system32\drivers\nimsdrkl.sys [2008-7-23 11392]
S3 nimslk;nimslk;c:\windows\system32\drivers\nimslk.dll [2007-4-4 14464]
S3 nimsrlk;nimsrlk;c:\windows\system32\drivers\nimsrlk.dll [2007-4-4 151683]
S3 nimxpk;nimxpk;c:\windows\system32\drivers\nimxpkl.sys [2008-7-23 11368]
S3 ninshsdk;ninshsdk;c:\windows\system32\drivers\ninshsdkl.sys [2008-7-30 11360]
S3 nipalfwedl;nipalfwedl;c:\windows\system32\drivers\nipalfwedl.sys [2008-12-16 11904]
S3 nipalusbedl;nipalusbedl;c:\windows\system32\drivers\nipalusbedl.sys [2008-12-16 11896]
S3 nipsdk;nipsdk;c:\windows\system32\drivers\nipsdkl.sys [2008-6-2 11392]
S3 nipxigpk;NI PXI Generic Chassis Pilot;c:\windows\system32\drivers\nipxigpk.sys [2008-6-25 20568]
S3 nirfsa2k;nirfsa2k;c:\windows\system32\drivers\niRFSA2kl.sys [2008-7-16 11328]
S3 niRFSGk;niRFSGk;c:\windows\system32\drivers\niRFSGkl.sys [2008-7-18 11328]
S3 NiRioRpc;National Instruments RIO Server;c:\windows\system32\NiRioRpc.exe [2008-12-23 27720]
S3 niscdk;niscdk;c:\windows\system32\drivers\niscdkl.sys [2008-7-30 11376]
S3 nisdigk;nisdigk;c:\windows\system32\drivers\nisdigkl.sys [2008-8-7 11352]
S3 nisftk;nisftk;c:\windows\system32\drivers\nisftkl.sys [2008-7-30 11344]
S3 nisldk;nisldk;c:\windows\system32\drivers\nisldkl.sys [2008-6-2 11344]
S3 nispdk;nispdk;c:\windows\system32\drivers\nispdkl.sys [2008-7-30 11376]
S3 nisrcdk;nisrcdk;c:\windows\system32\drivers\nisrcdkl.sys [2008-7-11 11352]
S3 nissrk;nissrk;c:\windows\system32\drivers\nissrkl.sys [2008-7-31 11336]
S3 nistc2k;nistc2k;c:\windows\system32\drivers\nistc2kl.sys [2008-7-25 11312]
S3 nistcrk;nistcrk;c:\windows\system32\drivers\nistcrkl.sys [2008-7-25 11360]
S3 niswdk;niswdk;c:\windows\system32\drivers\niswdkl.sys [2008-7-28 11336]
S3 nitiork;nitiork;c:\windows\system32\drivers\nitiorkl.sys [2008-7-24 11360]
S3 nitnr2k;nitnr2k;c:\windows\system32\drivers\nitnr2kl.sys [2008-7-16 11328]
S3 niufurk;niufurk;c:\windows\system32\drivers\niufurkl.sys [2008-7-31 11368]
S3 NiViFWK;NI-VISA FireWire Driver;c:\windows\system32\drivers\NiViFWKl.sys [2008-6-20 11384]
S3 NiViPciK;NI-VISA PCI Driver;c:\windows\system32\drivers\NiViPciKl.sys [2008-6-20 11360]
S3 niwdk;niwdk;c:\windows\system32\drivers\niwdk.sys [2008-12-15 27744]
S3 niwfrk;niwfrk;c:\windows\system32\drivers\niwfrkl.sys [2008-7-31 11336]
S3 nixsrk;nixsrk;c:\windows\system32\drivers\nixsrkl.sys [2008-7-31 11336]
S3 uc480;uc480 kernel driver;c:\windows\system32\drivers\uc480.sys [2011-1-4 1306176]
S3 uc480_boot;uc480 boot driver;c:\windows\system32\drivers\uc480_boot.sys [2011-1-4 1303616]
S3 usb6xxxk;usb6xxxk;\??\c:\windows\system32\drivers\usb6xxxkl.sys --> c:\windows\system32\drivers\usb6xxxkl.sys [?]
S4 Agp88lr70-cn;Agp88lr70-cn; [x]

=============== Created Last 30 ================

2011-01-08 22:55:55 -------- d-----w- c:\docume~1\craig\applic~1\Malwarebytes
2011-01-08 22:55:45 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-08 22:55:44 -------- d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2011-01-08 22:55:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-08 22:55:42 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-06 23:26:34 -------- d-sha-r- C:\cmdcons
2011-01-06 23:24:00 98816 ----a-w- c:\windows\sed.exe
2011-01-06 23:24:00 89088 ----a-w- c:\windows\MBR.exe
2011-01-06 23:24:00 256512 ----a-w- c:\windows\PEV.exe
2011-01-06 23:24:00 161792 ----a-w- c:\windows\SWREG.exe
2011-01-05 23:38:28 -------- d-----w- c:\windows\system32\appmgmt
2011-01-04 22:43:26 1306176 ----a-w- c:\windows\system32\drivers\uc480.sys
2011-01-04 22:43:26 1303616 ----a-w- c:\windows\system32\drivers\uc480_boot.sys
2011-01-03 22:59:18 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-01-03 22:59:18 472808 ----a-w- c:\program files\mozilla firefox\plugins\npdeployJava1.dll
2011-01-03 22:28:24 16856 ----a-w- c:\program files\mozilla firefox\plugin-container.exe
2011-01-03 22:28:23 719832 ----a-w- c:\program files\mozilla firefox\mozcpp19.dll
2011-01-01 01:45:07 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-01-01 01:45:07 -------- d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-12-18 01:45:10 40960 ------w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-18 01:44:50 45568 ------w- c:\windows\system32\dllcache\wab.exe

==================== Find3M ====================

2010-11-30 01:38:30 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-30 01:38:30 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-11-18 18:12:44 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-13 00:34:10 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-11-06 00:26:58 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26:58 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26:58 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25:54 385024 ----a-w- c:\windows\system32\html.iec
2010-10-28 13:13:22 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:25:00 1853312 ----a-w- c:\windows\system32\win32k.sys

============= FINISH: 15:12:54.70 ===============








UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 9/2/2008 4:37:20 PM
System Uptime: 1/8/2011 3:08:23 PM (0 hours ago)

Motherboard: Dell Inc. | | 0TP412
Processor: Intel(R) Core(TM)2 Duo CPU E4600 @ 2.40GHz | CPU | 2394/800mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 233 GiB total, 118.011 GiB free.
D: is FIXED (NTFS) - 74 GiB total, 18.225 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable

==== Disabled Device Manager Items =============

Class GUID:
Description: Multimedia Video Controller
Device ID: PCI\VEN_10E8&DEV_81E6&SUBSYS_00000000&REV_00\4&210641D0&0&00F0
Manufacturer:
Name: Multimedia Video Controller
PNP Device ID: PCI\VEN_10E8&DEV_81E6&SUBSYS_00000000&REV_00\4&210641D0&0&00F0
Service:

Class GUID: {7C797140-F6D8-11CF-9FD6-00A024178A17}
Description: PCI Device
Device ID: PCI\VEN_1093&DEV_18B0&SUBSYS_00000000&REV_00\4&210641D0&0&20F0
Manufacturer:
Name: PCI Device
PNP Device ID: PCI\VEN_1093&DEV_18B0&SUBSYS_00000000&REV_00\4&210641D0&0&20F0
Service:

==== System Restore Points ===================

RP592: 11/10/2010 6:39:20 PM - System Checkpoint
RP593: 11/11/2010 10:31:51 PM - System Checkpoint
RP594: 11/13/2010 1:51:34 AM - System Checkpoint
RP595: 11/14/2010 5:38:04 AM - System Checkpoint
RP596: 11/15/2010 5:52:34 AM - System Checkpoint
RP597: 11/16/2010 9:29:04 AM - System Checkpoint
RP598: 11/17/2010 9:30:04 AM - System Checkpoint
RP599: 11/18/2010 9:38:00 AM - System Checkpoint
RP600: 11/19/2010 1:26:00 PM - System Checkpoint
RP601: 11/20/2010 1:38:00 PM - System Checkpoint
RP602: 11/21/2010 5:26:00 PM - System Checkpoint
RP603: 11/22/2010 5:59:52 PM - System Checkpoint
RP604: 11/27/2010 1:49:33 PM - System Checkpoint
RP605: 11/28/2010 5:15:41 PM - System Checkpoint
RP606: 11/30/2010 12:38:26 PM - System Checkpoint
RP607: 12/1/2010 6:36:01 PM - System Checkpoint
RP608: 12/2/2010 8:08:09 PM - System Checkpoint
RP609: 12/4/2010 12:07:04 AM - System Checkpoint
RP610: 12/5/2010 4:07:04 AM - System Checkpoint
RP611: 12/6/2010 8:07:06 AM - System Checkpoint
RP612: 12/7/2010 11:55:05 AM - System Checkpoint
RP613: 12/8/2010 3:14:52 PM - System Checkpoint
RP614: 12/9/2010 7:14:50 PM - System Checkpoint
RP615: 12/17/2010 6:37:47 PM - System Checkpoint
RP616: 12/18/2010 5:00:18 AM - Software Distribution Service 3.0
RP617: 12/19/2010 5:26:51 AM - System Checkpoint
RP618: 12/20/2010 9:26:50 AM - System Checkpoint
RP619: 1/2/2011 1:57:26 PM - System Checkpoint
RP620: 1/3/2011 2:15:09 PM - System Checkpoint
RP621: 1/3/2011 2:26:12 PM - Installed QuickTime
RP622: 1/3/2011 2:59:00 PM - Installed Java(TM) 6 Update 23
RP623: 1/4/2011 2:42:37 PM - Installed Thorlabs DCx camera
RP624: 1/5/2011 5:00:14 AM - Software Distribution Service 3.0
RP625: 1/5/2011 3:36:03 PM - Removed Thorlabs DCx camera
RP626: 1/6/2011 4:45:10 PM - System Checkpoint
RP627: 1/8/2011 2:45:53 PM - Removed Java(TM) 6 Update 5

==== Installed Programs ======================


Acrobat.com
Adobe AIR
Adobe Creative Suite
Adobe Flash Player 10 Plugin
Adobe Flash Player 9 ActiveX
Adobe Flash Player ActiveX
Adobe Reader 9.4.1
Adobe SVG Viewer 3.0
Apple Application Support
Apple Software Update
Broadcom ASF Management Applications
Broadcom Management Programs
Browser Address Error Redirector
Citrix Presentation Server Client - Web Only
Connectivity Secure Shell 2008
Cortona® VRML Client
Critical Update for Windows Media Player 11 (KB959772)
Dell Driver Download Manager
Dell ETS Factory Installation
Dragon NaturallySpeaking 9
EndNote Web
ERUNT 1.1j
Google Chrome
Google Desktop
Google Toolbar for Internet Explorer
Google Update Helper
High Definition Audio Driver Package - KB835221
HostExplorer 2008
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
IC Capture 1.1 Trial
IC LabVIEW Extension 2.0
ImageJ 1.42q
Intel(R) Matrix Storage Manager
IQ Solutions
IVI Shared Component
IVI Shared Components
IVI VISA COM Standard Components
Java Auto Updater
Java(TM) 6 Update 23
Juniper Networks Cache Cleaner 6.0.0
Juniper Networks Host Checker
LabVIEW Web Services
LiveUpdate 3.2 (Symantec Corporation)
Malwarebytes' Anti-Malware
MATLAB R2006b
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 ??? Language Pack
Microsoft .NET Framework 2.0 Language Pack - DEU
Microsoft .NET Framework 2.0 Language Pack - FRA
Microsoft .NET Framework 2.0 Language Pack - JPN
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
Mozilla Firefox (3.6.13)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6.0 Parser (KB933579)
National Instruments Software
NI-488.2 2.6
NI-488.2 Provider for MAX version 2.6
NI-653x Installer 1.9.0
NI-APAL Error Files 1.4.0f0
NI-CAN: Shared LV code
NI-DAQ C and VB6 API
NI-DAQ Document Set
NI-DAQ INF Files
NI-DAQ Provider for MAX
NI-DAQmx - LabVIEW shared documentation
NI-DAQmx 8.8.0
NI-DAQmx Documentation
NI-DAQmx MAX Support 1.11.0
NI-DAQmx OPC Support
NI-DAQmx support for LabVIEW
NI-DAQmx Switch Core 1.15.0
NI-DAQmxEF 2.1.0
NI-DCPower 1.2.2
NI-DIM 1.5.0f0 for Phar Lap ETS
NI-DIM 1.9.0f0
NI-DIM 1.9.0f0 for Phar Lap ETS
NI-DIO Driver 152f1
NI-DMM 2.9
NI-FGEN 2.6
NI-FGEN Driver 160f3
NI-HSD Driver 1.10.0f4
NI-HSDIO 1.5.4
NI-IMAQ .NET Support
NI-IMAQ 32-bit Driver Support
NI-IMAQ 4.1
NI-IMAQ Camera Files
NI-IMAQ Configuration 2.6
NI-IMAQ IO .NET Support
NI-IMAQ IO 2.2
NI-IMAQ Provider for MAX
NI-IMAQdx .NET Support
NI-IMAQdx 3.2
NI-IMAQdx 32-bit Driver Support
NI-Intel8254x for LabVIEW Real-Time
NI-Intel8255x for LabVIEW Real-Time
NI-MDBG 1.9.0f0
NI-MDBG 1.9.0f0 for Phar Lap ETS
NI-MRU 2.10.0f0
NI-MXDF 1.10.0f0
NI-MXDF 1.10.0f0 for Phar Lap ETS
NI-MXLC 1.2.0f0
NI-ORB 1.5.0f0 for Phar Lap ETS
NI-ORB 1.9.0f0
NI-ORB 1.9.0f0 for Phar Lap ETS
NI-PAL 1.11.1f0 for Phar Lap ETS
NI-PAL 1.8.2f0 for Phar Lap ETS
NI-PAL 2.3.0f0 for Phar Lap ETS
NI-PAL 2.4.0f0
NI-PAL 2.4.0f0 for Phar Lap ETS
NI-RFSA 2.1
NI-RFSG 1.4
NI-RIO 3.1.0
NI-RIO 3.1.0 driver for Real-Time Embedded Targets
NI-RIO Common Files for LabVIEW 8.6
NI-RIO FCF 2.2.0 for Real-Time Embedded Targets
NI-RIO for 32-bit Windows
NI-RIO I/O Control for LabVIEW 8.5
NI-RIO I/O Control for LabVIEW 8.6
NI-RIO Scan Interface for Real-Time Embedded Targets
NI-RPC 3.1.1f0 for PharLap
NI-RPC 3.3.0f0 for Phar Lap ETS
NI-RPC 3.3.1f0 for Phar Lap ETS
NI-RPC 4.0.0f0
NI-RPC 4.0.0f0 for Phar Lap ETS
NI-SCOPE 3.5
NI-Serial 3.3 for LabVIEW Real-Time
NI-Serial 3.3.2 for LabVIEW Real-Time
NI-Serial 3.3.3 for LabVIEW Real-Time
NI-Serial 3.4
NI-Serial 3.4 Help
NI-Serial 3.4 MAX Provider
NI-STE10/100A for Phar Lap ETS
NI-SWITCH 3.8
NI-TClk 1.7
NI-TNF 1.4.0f0 for Phar Lap ETS
NI-TNF 1.4.2f0 for Phar Lap ETS
NI-TNR Driver
NI-Tuner 1.6.8
NI-VISA 4.0 for LabVIEW Real-Time
NI-VISA 4.3 for LabVIEW Real-Time
NI-VISA 4.4
NI-VISA 4.4 for LabVIEW Real-Time
NI-VISA 4.4 MAX Provider
NI-VISA Runtime 4.4.1
NI-VISA Server 4.4
NI-WatchDog for LabVIEW Real-Time 3.0.1
NI-WatchDog Host 3.0.1
NI 985x Software 1.3.3
NI AFW Channel Configuration Tool
NI AFW Custom UI
NI Assistant Framework
NI Assistant Framework LabVIEW 8.2
NI Assistant Framework LabVIEW 8.6 Support
NI Assistant Framework LabVIEW Code Generator 6.1
NI Assistant Framework LabVIEW Code Generator 7.0
NI Assistant Framework LabVIEW Code Generator 7.1
NI Assistant Framework LabVIEW Code Generator 8.0
NI Assistant Framework LabVIEW Code Generator 8.2
NI Assistant Framework LabVIEW Code Generator 8.5
NI Assistant Framework LabVIEW Code Generator 8.6
NI Calibration Provider for MAX
NI Certificates Deployment Support
NI Common Digital 1.8.0
NI Common RIO Plug-In Files
NI CompactRIO 3.1.0
NI CompactRIO Controller BIOS Update 10.5
NI CompactRIO LabVIEW 8.6 Module Support
NI CompactRIO LV 8.2 Common Module Support
NI CompactRIO MAX Provider
NI CompactRIO Module Software 3.1.0
NI CompactRIO Module Support
NI CompactRIO Recommended Software Sets
NI CompactRIO Reconfigurable Target Support for LabVIEW 8.6
NI CompactRIO Reconfigurable Targets Core
NI cRIO-910x LabVIEW Support
NI cRIO Motion for LabVIEW 8.2
NI CVS-1450 Series Remote Provider
NI DAQ Assistant 1.9.0
NI DataSocket 4.6.0
NI DHV DCMP Installer 1.1.2f0
NI DHV GPL 108f3
NI Distributed System Manager
NI DN 2.0 installer
NI DN 2.0 Language Pack installer
NI Dynamic Signal Acquisition Installer 1.12.0
NI EULA Depot
NI Example Finder 8.6
NI FlexRIO support for Real-Time Embedded Targets
NI FSL Installer 1.7.0
NI Help Assistant
NI Hierarchical Waveform Storage 1.4.6
NI IMAQ Vision for Measurement Studio Upgrade Manager
NI Instrument I/O Assistant
NI Instrument IO Assistant for LabVIEW 8.2
NI Instrument IO Assistant for LabVIEW 8.6
NI IVI Class Driver LabVIEW 8.2 Support
NI IVI Class Driver LabVIEW 8.6 Support
NI IVI Class Drivers
NI IVI Class Simulation Drivers
NI IVI Compliance Package 3.3
NI IVI Engine
NI IVI Online Help
NI IVI Provider for MAX
NI LabVIEW 7.1.1 Real-Time Update
NI LabVIEW 8.2 Device Detection and Deployment Support
NI LabVIEW 8.2 FPGA Realtime Support
NI LabVIEW 8.2 Help
NI LabVIEW 8.2 Help File
NI LabVIEW 8.2 Manuals
NI LabVIEW 8.2 MeasAppChm File
NI LabVIEW 8.2.1
NI LabVIEW 8.2.1 Activity
NI LabVIEW 8.2.1 Applibs
NI LabVIEW 8.2.1 CINtools
NI LabVIEW 8.2.1 Examples
NI LabVIEW 8.2.1 gMath
NI LabVIEW 8.2.1 iMath
NI LabVIEW 8.2.1 Instr.lib
NI LabVIEW 8.2.1 License
NI LabVIEW 8.2.1 Menus
NI LabVIEW 8.2.1 Project
NI LabVIEW 8.2.1 Resource
NI LabVIEW 8.2.1 Simulation
NI LabVIEW 8.2.1 Templates
NI LabVIEW 8.2.1 User.lib
NI LabVIEW 8.2.1 VI.lib
NI LabVIEW 8.2.1 WWW
NI LabVIEW 8.5.1 Real-Time cRIO 9014 Upgrade
NI LabVIEW 8.6 Deployment Framework
NI LabVIEW 8.6 FPGA Elemental I_O Common
NI LabVIEW 8.6 Help
NI LabVIEW 8.6 Help File
NI LabVIEW 8.6 License
NI LabVIEW 8.6 Manuals
NI LabVIEW 8.6 MeasAppChm File
NI LabVIEW 8.6 Real-Time LabVIEW
NI LabVIEW 8.6 Real-Time MSVS71 Support
NI LabVIEW 8.6 Real-Time Pharlap Base
NI LabVIEW 8.6 Real-Time Pharlap LabVIEW
NI LabVIEW 8.6 Real-Time Support for cRIO
NI LabVIEW 8.6 Real-Time VxWorks Base Support
NI LabVIEW 8.6 Real-Time VxWorks LabVIEW
NI LabVIEW 8.6 Simulation
NI LabVIEW 8.6.1
NI LabVIEW 8.6.1 Applibs
NI LabVIEW 8.6.1 CINtools
NI LabVIEW 8.6.1 Examples
NI LabVIEW 8.6.1 FPGA Realtime Support
NI LabVIEW 8.6.1 FPGA Support for Host Communication
NI LabVIEW 8.6.1 gMath
NI LabVIEW 8.6.1 iMath
NI LabVIEW 8.6.1 Instr.lib
NI LabVIEW 8.6.1 Integer Math and Analysis
NI LabVIEW 8.6.1 Menus
NI LabVIEW 8.6.1 Project
NI LabVIEW 8.6.1 Resource
NI LabVIEW 8.6.1 Templates
NI LabVIEW 8.6.1 User.lib
NI LabVIEW 8.6.1 VI.lib
NI LabVIEW 8.6.1 WWW
NI LabVIEW Broker
NI LabVIEW C Interface
NI LabVIEW Deployable License 8.2
NI LabVIEW Deployable License 8.6.1
NI LabVIEW EWB DeviceHandler 300
NI LabVIEW FPGA Elemental I_O Common
NI LabVIEW FPGA Support for Host Communication
NI LabVIEW Integer Math and Analysis
NI LabVIEW MAX XML
NI LabVIEW Merge Utility 8.6.0
NI LabVIEW Real-Time Error Dialog
NI LabVIEW Real-Time FIFO for Runtime
NI LabVIEW Real-Time NBFifo
NI LabVIEW Run-Time Engine 6.1
NI LabVIEW Run-Time Engine 7.0
NI LabVIEW Run-Time Engine 7.1.1
NI LabVIEW Run-Time Engine 8.0.1
NI LabVIEW Run-Time Engine 8.2.1
NI LabVIEW Run-Time Engine 8.5.1
NI LabVIEW Run-Time Engine 8.6.1
NI LabVIEW SignalExpress 3.0
NI LabVIEW SignalExpress 3.0 Core
NI LabVIEW SignalExpress 3.0 Core LabVIEW Support
NI LabVIEW SignalExpress 3.0 Core LabVIEW82 Support
NI LabVIEW SignalExpress 3.0 Core LabVIEW86 Support
NI LabVIEW SignalExpress 3.0 Datatypes
NI LabVIEW SignalExpress 3.0 Datatypes LabVIEW 8.2 Support
NI LabVIEW SignalExpress 3.0 Datatypes LabVIEW 8.6 Support
NI LabVIEW SignalExpress 3.0 LabVIEW 8.2 Support
NI LabVIEW SignalExpress 3.0 LabVIEW 8.6 Support
NI LabVIEW SignalExpress 3.0 LabVIEW Support
NI LabVIEW SignalExpress 3.0 Licenses
NI LabVIEW SignalExpress 3.0 Steps
NI LabVIEW SignalExpress 3.0 Tools
NI LabVIEW TEDS Installer
NI LabVIEW Web Server
NI LabVIEW Web Server for Run-Time Engine
NI LabVIEW Web Services Runtime
NI LabWindows/CVI 8.5.1 Run-Time Engine
NI LabWindows/CVI Code Generator
NI Legacy DAQmxRF
NI License Manager
NI Light Weight PSP Control Environment
NI Logos 5.0
NI Logos LabVIEW 8.2 Support
NI Logos LabVIEW 8.6 Support
NI Logos XT Support
NI LVBrokerAux 8.2.1
NI LVBrokerAux 8.5.0
NI LVBrokerAux 8.6.0
NI LVBrokerAux1071
NI LVBrokerAux61
NI LVBrokerAux70
NI LVBrokerAux71
NI LVBrokerAux8.0
NI Math Kernel Libraries
NI MAX LabVIEW Support
NI MDF Support
NI mDNS Responder 1.0.0
NI Measurement & Automation Explorer 4.5
NI Measurement Studio 8.1 Enterprise RunTime for VS2005
NI Measurement Studio Common .NET Language Assemblies for the .NET Framework 1.1
NI Measurement Studio Common .NET Language Assemblies for the .NET Framework 2.0
NI Measurement Studio Recipe Processor
NI MIO Device Drivers 1.15.0
NI ModInst 1.4.3
NI MXS
NI MXS 4.5.0f0 for LabVIEW Real-Time
NI OCR Upgrade Manager
NI OPC Support
NI Portable Configuration
NI PXI-5660 Support
NI PXI Platform Framework 1.0.1
NI PXI Platform Framework 1.0.1 for Phar Lap ETS
NI PXI Platform Services 2.4.2
NI PXI Platform Services 2.4.2 Configuration Support
NI PXI Platform Services 2.4.2 Expert
NI PXI Platform Services 2.4.2 Expert for LabVIEW Real-Time
NI PXI Platform Services 2.4.2 for LabVIEW Real-Time
NI PXI Platform Services for LabVIEW Real-Time 2.1.0
NI R Series 3.1.0
NI R Series LabVIEW 8.6 Support
NI R Series LabVIEW Support
NI Registration Wizard
NI Remote Provider for MAX
NI Remote PXI Provider for MAX
NI Script Editor 1.3.1
NI SCXI 1.9.1
NI Service Locator
NI Software Provider for MAX
NI Sound and Vibration Frequency Analysis 7.0
NI Sound and Vibration Frequency Analysis LabVIEW 8.2 Support
NI Sound and Vibration Frequency Analysis LabVIEW 8.6 Support
NI Spy 2.6.0
NI STC 1.2.0
NI TDMS
NI TDMS RT
NI Timing Installer 1.12.0
NI Trace Engine
NI Uninstaller
NI USI 1.5.1
NI Variable Engine
NI Variable Engine LabVIEW 8.2.1 Support
NI Variable Engine LabVIEW 8.6 Support
NI Variable Manager
NI VC2005MSMs x86
NI Vision 8.6 Run-Time Engine
NI Vision 8.6.0
NI Vision Acquisition Express VI
NI Vision Assistant 7.1.1
NI Vision Assistant 8.6
NI Web Pipeline
NI Xerces Delay Load 2.7
NVIDIA Drivers
OGA Notifier 2.0.0048.0
Origin7
PowerDVD
QuickTime
ResearchSoft Direct Export Helper
Rhapsody
Rhapsody Player Engine
Roxio Activation Module
Roxio Creator Audio
Roxio Creator BDAV Plugin
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Drag-to-Disc
Roxio Express Labeler 3
Roxio Update Manager
Samsung Auto Backup
Seagate Manager Installer
SearchAssist
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2288931)
Security Update for 2007 Microsoft Office System (KB2289158)
Security Update for 2007 Microsoft Office System (KB2344875)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2345035)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office Outlook 2007 (KB2288953)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office PowerPoint Viewer (KB2413381)
Security Update for Microsoft Office Publisher 2007 (KB2284697)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Skype™ 4.2
Sonic CinePlayer Decoder Pack
Spelling Dictionaries Support For Adobe Reader 9
Spybot - Search & Destroy
Symantec Client Security
TBS WMP Plug-in
Traditional NI-DAQ 7.4.4 (Legacy)
Traditional NI-DAQ Documentation
UCSF Chimera production version 1.4.1 (build 30365)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Outlook 2007 Junk Email Filter (KB2466076)
Update for Windows Internet Explorer 8 (KB971930)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player Firefox Plugin
Windows XP Service Pack 3
WinRAR archiver
WinSCP 4.1.7
Xvid 1.1.3 final uninstall

==== Event Viewer Messages From Past Week ========

1/5/2011 3:28:50 PM, error: System Error [1003] - Error code 1000000a, parameter1 00461000, parameter2 0000001c, parameter3 00000000, parameter4 80615ab5.
1/4/2011 2:57:38 PM, error: Service Control Manager [7000] - The MCSTRM service failed to start due to the following error: The system cannot find the file specified.

==== End Of File ===========================

[km2357]

Step # 1 Update Adobe Acrobat Reader

There is a newer version of Adobe Acrobat Reader available. (See Note below)

• First, go to Add/Remove Programs and uninstall Adobe Reader 9.4.1.
• Please go to this link Adobe Acrobat Reader Download Link
• On the right Untick McAfee® Security Scan Plus if you do not wish to include this in the installation.
• Click the Continue button
• Click Run, and click Run again
• Next click the Install Now button and follow the on screen prompts

Note: Adobe Reader X is a large program and if you prefer a smaller program you can get Foxit 4.3.0 instead from http://www.foxitsoftware.com/downloads/index.php

If you decide to install Foxit 4.3.0 instead of Adobe, do the following during Foxit's Setup/Installation process:

Uncheck the following boxes:

I accept the License Terms and want to install Foxit Toolbar

Make Ask.com my default search

Create desktop, quick launch and start menu icon to eBay


Step # 2 Run ESET

I'd like us to scan your machine with ESET OnlineScan

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   1. Click on to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the icon on your desktop.
4. Check
5. Click the button.
6. Accept any security warnings from your browser.
7. Check
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
11. Make sure that Remove found threats is unchecked
12. Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
13. Push the button.
14. Push

In your next post/reply, I need to see the following:

1. ESET Log
2. How is your computer doing, any problems?

[crape42]

ESET scan is still running... will post as soon as it finishes (estimated 10 more hours).

[crape42]

Hi,

Here is the ESET log. my computer seems fine -- no redirect problems, all programs seem to be running fine.




C:\Program Files\MATLAB\R2006b\toolbox\rtw\targets\xpc\target\build\xpcblocks\fiforeadbinhdr.mexw32 probably a variant of Win32/Agent.KJUEQCG trojan

[km2357]

It looks like what ESET found was a false positive.

Since you report no more problems, you're good to go.


You can delete the following off of your computer:

DDS.scr
The two DDS Logs
GMER.zip
GMER.exe
RKUnhookerLE.EXE
The RKUnhooker Log


To remove ComboFix, do the following:

Go to Start > Run - type in ComboFix /Uninstall & click OK


Empty your Recycle Bin.

You can re-enable Teatimer as well.


Please take the time to read my All Clean Post.

Please follow these simple steps in order to keep your computer clean and secure:

This is a good time to clear your existing system restore points and establish a new clean restore point

• Go to Start > All Programs > Accessories > System Tools > System Restore
• Select Create a restore point, and Ok it.
• Next, go to Start > Run and type in cleanmgr
• Make sure the C:\ drive is selected and click OK. If your computer's Hard Drive is not located on C:, change it to the correct drive letter then click OK.
• Select the More options tab
• Choose the option to clean up system restore and OK it.
• This will remove all restore points except the new one you just created.

.

Clearing your restore points is not something you should do on a regular basis. Normally, this process only needs to be done after clearing out an infestation of malware.


Make your Internet Explorer more secure This can be done by following these simple instructions:

1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.
   
   • Change the Download signed ActiveX controls to Prompt
   • Change the Download unsigned ActiveX controls to Disable
   • Change the Initialize and script ActiveX controls not marked as safe to Disable
   • Change the Installation of desktop items to Prompt
   • Change the Launching programs and files in an IFRAME to Prompt
   • Change the Navigate sub frames across different domains to Prompt
5. When all these settings have been made, click on the OK button.
6. If it asks you if you want to save the settings, press the Yes button.
7. Next press the Apply button and then the OK to exit the Internet Properties page.

Set correct settings for files that should be hidden in Windows XP

• Click Start > My Computer > Tools menu (at top of page) > Folder Options > View tab.
• Under "Hidden files and folders" if necessary select Do not show hidden files and folders.
• If unchecked please checkHide protected operating system files (Recommended)
• If necessary check "Display content of system folders"
• If necessary Uncheck Hide file extensions for known file types.
• Click OK

• Use An Antivirus Software and Keep It Updated - It is very important that your computer has an antivirus software running on your machine. This alone can save you a lot of trouble with malware in the future. It is imperative that you update your antivirus software at least once a day. If you do not update your antivirus software, then it will not be able to catch any of the new variants that may come out.
• Visit Microsoft's Update Site Frequently It is important that you visit Microsoft Updates regularly. This will ensure your computer has the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
• Install SpywareBlaster SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs. You can find SpywareBlaster here:
  SpywareBlaster
• Use the hosts file: Every version of windows has a hosts file as part of them. In a very basic sense, they are used to locate web pages. We can customize a hosts file so that it blocks certain web pages. However, it can slow down certain computers. This is why using a hosts file is optional. Download mvps hosts file Make sure you read the instructions on how to install the hosts file. There is a good tutorial HERE If you decide to download the hosts file, the slowdown problems can usually be avoided by following these steps:
  
  1. Click the start button on the task bar at the bottom of your screen
  2. Click run
  3. In the dialog box, type services.msc
  4. hit enter, then locate dns client
  5. Highlight it, then doubleclick it.
  6. On the dropdown box, change the setting from automatic to manual.
  7. Click ok..
• Use an alternative instant messenger program.Trillian and Miranda IM These are Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN)
• Please read Tony Klein's excellent article: How I got Infected in the First Place
• Please read Understanding Spyware, Browser Hijackers, and Dialers
• Please read Simple and easy ways to keep your computer safe and secure on the Internet
• If you are using Internet Explorer, please consider using an alternate browser: Mozilla's Firefox or
  Opera.
  If you decide to use either FireFox or Opera, it is very important that you keep them up to date and check frequently for updates of the browser of your choice.
• Update all these programs regularly Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Here's a good website to read about Malware prevention:

http://users.telenet.be/bluepatchy/m...revention.html

If your computer is running slow, click here for instructions on how to help speed up your computer.

Good luck!

Please reply one last time so that I know you have read my post and this thread can be closed.

[crape42]

I have read your post. One quick question: Is it redundant to have both Spybot S&D _and_ SpywareBlaster?

Thanks so much for everything. This forum has really exceeded expectations! Feel free to close this thread now.

--craig

[km2357]

One quick question: Is it redundant to have both Spybot S&D _and_ SpywareBlaster?

It's ok to have both. SpywareBlaster just blocks bad websites and Active X from loading on your computer, it doesn't scan for and remove malware like Spybot and MalwareBytes' Anti-Malware do.


You're welcome. I'm glad I was able to help you out.

Good luck and safe surfing!

Since this issue appears to be resolved ... this Topic has been closed. Glad we could
help.

Note: If it has been three days or more since your last post, and the helper assisting
you posted a response to that post to which you did not reply, your topic will not be
reopened. At that point, if you still require help, please start a new topic and include
a fresh DDS log and a link to your previous thread.

If it has been less than three days since your last response and you need the thread
re-opened, please send me or your helper a private message (pm). A valid, working link to
the closed topic is required.