ZanderB
2011-04-03, 23:58
Hey guys, the past few days I have encountered some odd goings on, with internet explorer popping up with random pages. On the 28th I was given a warning on AVG of 'Win32/Adware.OneStep.Y' said to be malware.
Here is my DDS file:
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Zander at 20:51:04.41 on 03/04/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.3005.1728 [GMT 1:00]
.
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Program Files\Trusteer\Rapport\bin\RapportService.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\BT Broadband Desktop Help\btbb\BTHelpNotifier.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HBLite\bin\11.0.363.0\HBLiteSA.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\OEM\LIVE! OSD 1.20(AD)\osd.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10o_ActiveX.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Zander\Downloads\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.co.uk/
uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=DSGK&bmod=DSGK;
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: ShoppingReport2: {258c9770-1713-4021-8d7e-1f184a2bd754} - c:\program files\shoppingreport2\bin\2.7.34\ShoppingReport.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\programdata\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.5.0_07\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.6209.1142\swg.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn\YTSingleInstance.dll
TB: BT Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
EB: ShopperReports: {bdea95cf-f0e6-41e0-bd3d-b00f39a4e939} - c:\program files\shoppingreport2\bin\2.7.34\ShoppingReport.dll
uRun: [Reminder] c:\program files\ttg\reminder\Reminder.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [Steam] "c:\program files\steam\Steam.exe" -silent
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s
mRun: [btbb_McciTrayApp] "c:\program files\bt broadband desktop help\btbb\BTHelpNotifier.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [HBLiteSA] "c:\program files\hblite\bin\11.0.363.0\HBLiteSA.exe"
StartupFolder: c:\users\zander\appdata\roaming\micros~1\windows\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\users\zander\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\launch.lnk - c:\windows\installer\{4a65dad2-e914-4923-9c2a-81b968a68ce2}\_A685CC3126A7CC37D335DE.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\micros~1.lnk - c:\office\office\OSA9.EXE
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\osd.lnk - c:\windows\installer\{73289228-1853-4623-982a-eb17ff0270ca}\_EC2AB9428ACB5A25E06B91.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_07\bin\npjpi150_07.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~4\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
IE: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - {3E2DFD6A-4E20-4d4c-AA8B-E1F9DBEF3C80} - c:\program files\shoppingreport2\bin\2.7.34\ShoppingReport.dll
IE: {EB620C54-E229-4942-87CE-E717109FC8C6} - {714E0876-FCEE-49ce-A429-B9AD8AEFCB56} - c:\program files\shoppingreport2\bin\2.7.34\ShoppingReport.dll
Trusted Zone: line6.net
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: igfxcui - igfxdev.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\zander\applic~1\mozilla\firefox\profiles\ds4fnvl1.default\
FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll
FF - component: c:\programdata\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\common files\motive\npMotive.dll
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\emusic download manager\plugin\npemusic.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre1.5.0_07\bin\NPJPI150_07.dll
FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\programdata\real\realplayer\browserrecordplugin\firefox\Ext
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 25680]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 26064]
R0 RapportKELL;RapportKELL;c:\windows\system32\drivers\RapportKELL.sys [2011-2-17 53816]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-12-8 251728]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34384]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-11-12 299984]
R1 RapportCerberus_23945;RapportCerberus_23945;c:\programdata\trusteer\rapport\store\exts\rapportcerberus\baseline\RapportCerberus_23945.sys [2011-2-17 55224]
R1 RapportEI;RapportEI;c:\program files\trusteer\rapport\bin\RapportEI.sys [2011-2-17 66360]
R1 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2011-2-17 157752]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-1-6 6128720]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2010-10-22 265400]
R2 LiveGpdKBFilter;LiveGpdKBFilter;c:\windows\system32\drivers\LiveGpdKBFilter.sys [2010-2-24 4096]
R2 LiveIO;LiveIO;c:\windows\system32\drivers\LiveIO.sys [2010-2-24 15312]
R2 RapportMgmtService;Rapport Management Service;c:\program files\trusteer\rapport\bin\RapportMgmtService.exe [2011-2-17 821048]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-19 123472]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-19 30288]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-19 21072]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2010-2-11 122368]
R3 Livekbc;Livekbc;c:\windows\system32\drivers\Livekbc.sys [2010-2-24 4096]
R3 Livemouclass;Livemouclass;c:\windows\system32\drivers\Livemouclass.sys [2010-2-24 3968]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2010-2-11 167936]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-23 135664]
S2 ScanQuery Service;ScanQuery Service;"c:\programdata\scanquery\scanquery113.exe" "c:\program files\scanquery\scanquery.dll" yuputevasu terikitozo --> c:\programdata\scanquery\scanquery113.exe [?]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2010-12-4 517448]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 L6PODLV;PODxt Live Service;c:\windows\system32\drivers\L6PODLV.sys [2010-9-7 579456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [2010-2-11 174592]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-9-7 1343400]
.
=============== Created Last 30 ================
.
2011-03-27 21:32:31 -------- d-----w- c:\users\zander\Tracing
2011-03-27 21:23:57 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2011-03-27 21:23:35 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-03-27 21:22:46 -------- d-----w- c:\program files\Microsoft
2011-03-27 21:22:30 -------- d-----w- c:\program files\Windows Live SkyDrive
2011-03-27 21:20:34 74520 ----a-w- c:\program files\common files\windows live\.cache\cf19687f1cbecc4\DSETUP.dll
2011-03-27 21:20:34 484632 ----a-w- c:\program files\common files\windows live\.cache\cf19687f1cbecc4\DXSETUP.exe
2011-03-27 21:20:34 1670936 ----a-w- c:\program files\common files\windows live\.cache\cf19687f1cbecc4\dsetup32.dll
2011-03-27 21:15:42 -------- d-----w- c:\program files\common files\Windows Live
2011-03-27 21:14:54 83248 ----a-w- c:\program files\mozilla firefox\plugins\npclntax_HBLiteSA.dll
2011-03-27 21:14:53 -------- d-----w- c:\program files\HBLite
2011-03-27 21:14:53 -------- d-----w- c:\progra~2\HBLiteSA
2011-03-27 21:14:53 -------- d-----w- c:\progra~2\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
2011-03-27 21:14:46 -------- d-----w- c:\program files\ScanQuery
2011-03-27 21:14:46 -------- d-----w- c:\progra~2\ScanQuery
2011-03-27 21:14:37 -------- d-----w- c:\program files\ShoppingReport2
2011-03-10 14:04:38 -------- d-----w- c:\program files\iPod
2011-03-10 14:04:37 -------- d-----w- c:\program files\iTunes
2011-03-08 21:14:28 802304 ----a-w- c:\windows\system32\FntCache.dll
2011-03-08 21:14:28 1074176 ----a-w- c:\windows\system32\DWrite.dll
2011-03-08 21:14:27 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-03-08 21:14:24 642048 ----a-w- c:\windows\system32\CPFilters.dll
2011-03-08 21:14:24 534528 ----a-w- c:\windows\system32\EncDec.dll
2011-03-08 21:14:23 850432 ----a-w- c:\windows\system32\sbe.dll
2011-03-08 21:14:23 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2011-03-08 21:14:19 2690560 ----a-w- c:\windows\system32\mstscax.dll
2011-03-08 21:14:19 1034240 ----a-w- c:\windows\system32\mstsc.exe
.
==================== Find3M ====================
.
2011-02-18 16:36:58 4184352 ----a-w- c:\windows\system32\usbaaplrc.dll
2011-01-07 07:31:10 442880 ----a-w- c:\windows\system32\XpsPrint.dll
2011-01-07 07:31:10 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-01-07 07:27:11 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-01-07 05:33:11 294400 ----a-w- c:\windows\system32\atmfd.dll
2011-01-05 05:37:33 428032 ----a-w- c:\windows\system32\vbscript.dll
2011-01-05 03:37:38 2329088 ----a-w- c:\windows\system32\win32k.sys
.
============= FINISH: 20:52:03.69 ===============
And here are the results from the Spybot scan:
SmartShopper: [SBI $4D6A6ACA] Explorer toolbar (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1329000684-3731018787-2344505858-1000\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}
SmartShopper: [SBI $4D6A6ACA] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}
Zango: [SBI $9DB49993] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D}
Zango: [SBI $689E03A0] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{618AAD04-921F-44C2-BE38-C0818AF69861}
Zango: [SBI $411F0828] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{B5D2ED96-62F9-4C2C-956D-E425B1F67337}
Zango: [SBI $9432A0E4] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{D3A412E8-1E4B-47D2-9B12-F88291F5AFBB}
PBHotbar.SearchAssistant: [SBI $AE9557F7] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HBLiteAX.Info
PBHotbar.SearchAssistant: [SBI $AE9557F7] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HBLiteAX.Info.1
PBHotbar.SearchAssistant: [SBI $AE9557F7] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1EC4CA-4B92-4324-B8F8-C9A6ED06A8AE}
PBHotbar.SearchAssistant: [SBI $54365FD3] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{6F098504-CDB1-420F-A2E6-DDC0B835FEDF}
PBHotbar.SearchAssistant: [SBI $EA35BE06] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HBLiteAX.UserProfiles
PBHotbar.SearchAssistant: [SBI $EA35BE06] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HBLiteAX.UserProfiles.1
PBHotbar.SearchAssistant: [SBI $EA35BE06] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E674574-3F0B-491d-8AE3-F90B43A34FD6}
PBHotbar.SearchAssistant: [SBI $13E85868] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
PBHotbar.SearchAssistant: [SBI $73E9AAAF] User settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1329000684-3731018787-2344505858-1000\Software\hblitesa
PBHotbar.SearchAssistant: [SBI $CC14A1DB] Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\hblite
PBHotbar.SearchAssistant: [SBI $1624EB2A] Settings (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\hblite@hblite.com
PBHotbar.SearchAssistant: [SBI $EF847491] Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HBLiteSA
PBHotbar.SearchAssistant: [SBI $2873F856] Autorun settings (HBLiteSA) (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HBLiteSA
PBHotbar.SearchAssistant: [SBI $2873F856] Program file (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\HBLiteSA.exe
Properties.size=771888
Properties.md5=DF8ED4F27622DBBB8F25617658AE1A7F
Properties.filedate=1300834050
Properties.filedatetext=2011-03-22 23:47:30
PBHotbar.SearchAssistant: [SBI $5AD489E9] Library (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\HBLiteSAAX.dll
Properties.size=283952
Properties.md5=61202C14BA8FF342FB689E3CACD407CE
Properties.filedate=1300834210
Properties.filedatetext=2011-03-22 23:50:10
PBHotbar.SearchAssistant: [SBI $67975F8F] Program directory (Directory, nothing done)
C:\ProgramData\HBLiteSA\
PBHotbar.SearchAssistant: [SBI $37C0F64B] Data (File, nothing done)
C:\ProgramData\HBLiteSA\HBLiteSA_kyf.dat
Properties.size=3776064
Properties.md5=8C96EED46B7EA68E36E4B3FE9E51CD04
Properties.filedate=1301848782
Properties.filedatetext=2011-04-03 17:39:42
PBHotbar.SearchAssistant: [SBI $096663DA] Data (File, nothing done)
C:\ProgramData\HBLiteSA\HBLiteSAAbout.mht
Properties.size=11823
Properties.md5=509CB6350FA5AED38BB22C697A9D9EF0
Properties.filedate=1300832684
Properties.filedatetext=2011-03-22 23:24:44
PBHotbar.SearchAssistant: [SBI $207472FE] Data (File, nothing done)
C:\ProgramData\HBLiteSA\HBLiteSAau.dat
Properties.size=80942
Properties.md5=805AC06BA6116CEB7DFBE064F6EE3C69
Properties.filedate=1301260497
Properties.filedatetext=2011-03-27 22:14:56
PBHotbar.SearchAssistant: [SBI $09A12922] Data (File, nothing done)
C:\ProgramData\HBLiteSA\HBLiteSAEULA.mht
Properties.size=41344
Properties.md5=EBD74D15F57D68724E3A5F48379242A3
Properties.filedate=1300832686
Properties.filedatetext=2011-03-22 23:24:46
PBHotbar.SearchAssistant: [SBI $90D518BC] Program directory (Directory, nothing done)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\
PBHotbar.SearchAssistant: [SBI $6FB5B34D] Link (File, nothing done)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\About Hotbar.lnk
Properties.size=2125
Properties.md5=758B409A7BD20835417E028DF7D3B63A
Properties.filedate=1301260494
Properties.filedatetext=2011-03-27 22:14:53
PBHotbar.SearchAssistant: [SBI $552DA8A9] Link (File, nothing done)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\Hotbar Customer Support Center.lnk
Properties.size=2197
Properties.md5=1A1D046BB3C6F6F23245570D3359C24E
Properties.filedate=1301260494
Properties.filedatetext=2011-03-27 22:14:53
PBHotbar.SearchAssistant: [SBI $6715DB4D] Link (File, nothing done)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\Hotbar Uninstall Instructions.lnk
Properties.size=2187
Properties.md5=A9C3F4C68610C6A760629F03FB652AC9
Properties.filedate=1301260494
Properties.filedatetext=2011-03-27 22:14:53
PBHotbar.SearchAssistant: [SBI $36E1BCC3] Program directory (Directory, nothing done)
C:\Program Files\hblite\
PBHotbar.SearchAssistant: [SBI $BFF258F0] Program directory (Directory, nothing done)
C:\Program Files\hblite\bin\
PBHotbar.SearchAssistant: [SBI $D4B15DE0] Program directory (Directory, nothing done)
C:\Program Files\hblite\bin\11.0.363.0
PBHotbar.SearchAssistant: [SBI $68DC1768] Library (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\HBLiteSAHook.dll
Properties.size=165168
Properties.md5=E13EBD8835CD5DBC9513B62182D69D8C
Properties.filedate=1300834278
Properties.filedatetext=2011-03-22 23:51:18
PBHotbar.SearchAssistant: [SBI $BE9B1E00] Data (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\firefox\extensions\install.rdf
Properties.size=738
Properties.md5=8FB31B234309D36B7C71A9FFAF497355
Properties.filedate=1300834488
Properties.filedatetext=2011-03-22 23:54:48
PBHotbar.SearchAssistant: [SBI $B7BB9D7E] Library (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\firefox\extensions\plugins\npclntax_HBLiteSA.dll
Properties.size=83248
Properties.md5=BF3A4DD2204C0AC24657A43A255E0C7B
Properties.filedate=1300834384
Properties.filedatetext=2011-03-22 23:53:04
PBHotbar.SearchAssistant: [SBI $52169AC6] Library (File, nothing done)
C:\Program Files\Mozilla Firefox\plugins\npclntax_HBLiteSA.dll
Properties.size=83248
Properties.md5=BF3A4DD2204C0AC24657A43A255E0C7B
Properties.filedate=1300834384
Properties.filedatetext=2011-03-22 23:53:04
PBHotbar.ShoppingReport: [SBI $2CD460C4] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.HbAx
PBHotbar.ShoppingReport: [SBI $2CD460C4] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.HbAx.1
PBHotbar.ShoppingReport: [SBI $2CD460C4] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD15BCC0-5FE9-4690-A957-99FA60ED9D26}
PBHotbar.ShoppingReport: [SBI $4513FF75] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
PBHotbar.ShoppingReport: [SBI $4513FF75] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
PBHotbar.ShoppingReport: [SBI $8A2F0BE0] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8}
PBHotbar.ShoppingReport: [SBI $A55B30DF] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
PBHotbar.ShoppingReport: [SBI $A55B30DF] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
PBHotbar.ShoppingReport: [SBI $A55B30DF] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{258C9770-1713-4021-8D7E-1F184A2BD754}
PBHotbar.ShoppingReport: [SBI $A55B30DF] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{258C9770-1713-4021-8D7E-1F184A2BD754}
PBHotbar.ShoppingReport: [SBI $0D3E4863] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{F244A744-534D-4A46-855F-C0C7E9F27DAA}
PBHotbar.ShoppingReport: [SBI $2C6F06E7] User settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1329000684-3731018787-2344505858-1000\Software\ShoppingReport2
PBHotbar.ShoppingReport: [SBI $A1B3B5BA] Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport2
PBHotbar.ShoppingReport: [SBI $DCF85947] Library (File, nothing done)
C:\Program Files\ShoppingReport2\Bin\2.7.34\ShoppingReport.dll
Properties.size=1142064
Properties.md5=1F2E70F57A02AED1CCA4BC8023CD19EB
Properties.filedate=1297378400
Properties.filedatetext=2011-02-10 23:53:20
PBHotbar.ShoppingReport: [SBI $A5979C19] Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2
PBHotbar.ShoppingReport: [SBI $D35A5E28] Program directory (Directory, nothing done)
C:\Program Files\ShoppingReport2\
PBHotbar.ShoppingReport: [SBI $638954BD] Program directory (Directory, nothing done)
C:\Program Files\ShoppingReport2\Bin\
PBHotbar.ShoppingReport: [SBI $98D0FCF8] Program directory (Directory, nothing done)
C:\Program Files\ShoppingReport2\Bin\2.7.34
SmartShopper: [SBI $A3C9DE70] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{258C9770-1713-4021-8D7E-1F184A2BD754}
SmartShopper: [SBI $A38B8EAA] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{3E2DFD6A-4E20-4D4C-AA8B-E1F9DBEF3C80}
SmartShopper: [SBI $E1150A7C] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{714E0876-FCEE-49CE-A429-B9AD8AEFCB56}
SmartShopper: [SBI $43DBB2D8] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{DD15BCC0-5FE9-4690-A957-99FA60ED9D26}
SmartShopper: [SBI $20646759] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.HbAx
SmartShopper: [SBI $E3519F4F] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.HbAx.1
SmartShopper: [SBI $42A39106] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand
SmartShopper: [SBI $8AACEB3A] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand.1
SmartShopper: [SBI $B7033CC5] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.IEButton
SmartShopper: [SBI $C21C4542] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.IEButton.1
SmartShopper: [SBI $A20BA30E] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA
SmartShopper: [SBI $8AA2D01A] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA.1
SmartShopper: [SBI $024DFDB0] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl
SmartShopper: [SBI $7C378F99] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl.1
SmartShopper: [SBI $344477A7] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
SmartShopper: [SBI $F6D86C06] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DB38E21A-0133-419d-92AD-ECDFD5244D6D}
SmartShopper: [SBI $8ACC85BF] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6}
Zango: [SBI $EB96EE65] Common application data folder (Directory, nothing done)
C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65\
DoubleClick: Tracking cookie (Internet Explorer: Zander) (Cookie, nothing done)
MediaPlex: Tracking cookie (Internet Explorer: Zander) (Cookie, nothing done)
Adviva: Tracking cookie (Internet Explorer: Zander) (Cookie, nothing done)
MediaPlex: Tracking cookie (Internet Explorer: Zander) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Adviva: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Statcounter: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Clickbank: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitsLink: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
BurstMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Adviva: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
WebTrends live: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
BurstMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
BurstMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Adviva: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Statcounter: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---
2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-01-26 TeaTimer.exe (1.6.4.26)
2011-04-03 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2011-03-18 Includes\Adware.sbi (*)
2011-03-22 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2010-12-14 Includes\Dialer.sbi (*)
2011-03-08 Includes\DialerC.sbi (*)
2011-02-24 Includes\HeavyDuty.sbi (*)
2011-03-29 Includes\Hijackers.sbi (*)
2011-03-29 Includes\HijackersC.sbi (*)
2010-09-15 Includes\iPhone.sbi (*)
2010-12-14 Includes\Keyloggers.sbi (*)
2011-03-08 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2011-03-29 Includes\Malware.sbi (*)
2011-03-29 Includes\MalwareC.sbi (*)
2011-02-24 Includes\PUPS.sbi (*)
2011-03-15 Includes\PUPSC.sbi (*)
2010-01-25 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2011-03-08 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2011-02-24 Includes\Spyware.sbi (*)
2011-03-15 Includes\SpywareC.sbi (*)
2010-03-08 Includes\Tracks.uti
2010-12-28 Includes\Trojans.sbi (*)
2011-03-25 Includes\TrojansC-02.sbi (*)
2011-03-29 Includes\TrojansC-03.sbi (*)
2011-03-08 Includes\TrojansC-04.sbi (*)
2011-03-29 Includes\TrojansC-05.sbi (*)
2011-03-08 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
Thank you in advance for your help - I used this forum quite a while back and you sorted me out!
Cheers
Zander
Here is my DDS file:
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Zander at 20:51:04.41 on 03/04/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.44.1033.18.3005.1728 [GMT 1:00]
.
AV: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Program Files\Trusteer\Rapport\bin\RapportService.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\BT Broadband Desktop Help\btbb\BTHelpNotifier.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HBLite\bin\11.0.363.0\HBLiteSA.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\OEM\LIVE! OSD 1.20(AD)\osd.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10o_ActiveX.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Zander\Downloads\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.co.uk/
uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=DSGK&bmod=DSGK;
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: ShoppingReport2: {258c9770-1713-4021-8d7e-1f184a2bd754} - c:\program files\shoppingreport2\bin\2.7.34\ShoppingReport.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\programdata\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.5.0_07\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.6209.1142\swg.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn\YTSingleInstance.dll
TB: BT Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
EB: ShopperReports: {bdea95cf-f0e6-41e0-bd3d-b00f39a4e939} - c:\program files\shoppingreport2\bin\2.7.34\ShoppingReport.dll
uRun: [Reminder] c:\program files\ttg\reminder\Reminder.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [Steam] "c:\program files\steam\Steam.exe" -silent
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s
mRun: [btbb_McciTrayApp] "c:\program files\bt broadband desktop help\btbb\BTHelpNotifier.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [HBLiteSA] "c:\program files\hblite\bin\11.0.363.0\HBLiteSA.exe"
StartupFolder: c:\users\zander\appdata\roaming\micros~1\windows\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\users\zander\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\launch.lnk - c:\windows\installer\{4a65dad2-e914-4923-9c2a-81b968a68ce2}\_A685CC3126A7CC37D335DE.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\micros~1.lnk - c:\office\office\OSA9.EXE
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\osd.lnk - c:\windows\installer\{73289228-1853-4623-982a-eb17ff0270ca}\_EC2AB9428ACB5A25E06B91.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_07\bin\npjpi150_07.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~4\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
IE: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - {3E2DFD6A-4E20-4d4c-AA8B-E1F9DBEF3C80} - c:\program files\shoppingreport2\bin\2.7.34\ShoppingReport.dll
IE: {EB620C54-E229-4942-87CE-E717109FC8C6} - {714E0876-FCEE-49ce-A429-B9AD8AEFCB56} - c:\program files\shoppingreport2\bin\2.7.34\ShoppingReport.dll
Trusted Zone: line6.net
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_07-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg10\toolbar\IEToolbar.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: igfxcui - igfxdev.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\zander\applic~1\mozilla\firefox\profiles\ds4fnvl1.default\
FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll
FF - component: c:\programdata\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\common files\motive\npMotive.dll
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\emusic download manager\plugin\npemusic.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre1.5.0_07\bin\NPJPI150_07.dll
FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\programdata\real\realplayer\browserrecordplugin\firefox\Ext
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 25680]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 26064]
R0 RapportKELL;RapportKELL;c:\windows\system32\drivers\RapportKELL.sys [2011-2-17 53816]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-12-8 251728]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34384]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-11-12 299984]
R1 RapportCerberus_23945;RapportCerberus_23945;c:\programdata\trusteer\rapport\store\exts\rapportcerberus\baseline\RapportCerberus_23945.sys [2011-2-17 55224]
R1 RapportEI;RapportEI;c:\program files\trusteer\rapport\bin\RapportEI.sys [2011-2-17 66360]
R1 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2011-2-17 157752]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-1-6 6128720]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2010-10-22 265400]
R2 LiveGpdKBFilter;LiveGpdKBFilter;c:\windows\system32\drivers\LiveGpdKBFilter.sys [2010-2-24 4096]
R2 LiveIO;LiveIO;c:\windows\system32\drivers\LiveIO.sys [2010-2-24 15312]
R2 RapportMgmtService;Rapport Management Service;c:\program files\trusteer\rapport\bin\RapportMgmtService.exe [2011-2-17 821048]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-19 123472]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-19 30288]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-19 21072]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2010-2-11 122368]
R3 Livekbc;Livekbc;c:\windows\system32\drivers\Livekbc.sys [2010-2-24 4096]
R3 Livemouclass;Livemouclass;c:\windows\system32\drivers\Livemouclass.sys [2010-2-24 3968]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2010-2-11 167936]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-23 135664]
S2 ScanQuery Service;ScanQuery Service;"c:\programdata\scanquery\scanquery113.exe" "c:\program files\scanquery\scanquery.dll" yuputevasu terikitozo --> c:\programdata\scanquery\scanquery113.exe [?]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2010-12-4 517448]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 L6PODLV;PODxt Live Service;c:\windows\system32\drivers\L6PODLV.sys [2010-9-7 579456]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [2010-2-11 174592]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-9-7 1343400]
.
=============== Created Last 30 ================
.
2011-03-27 21:32:31 -------- d-----w- c:\users\zander\Tracing
2011-03-27 21:23:57 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2011-03-27 21:23:35 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-03-27 21:22:46 -------- d-----w- c:\program files\Microsoft
2011-03-27 21:22:30 -------- d-----w- c:\program files\Windows Live SkyDrive
2011-03-27 21:20:34 74520 ----a-w- c:\program files\common files\windows live\.cache\cf19687f1cbecc4\DSETUP.dll
2011-03-27 21:20:34 484632 ----a-w- c:\program files\common files\windows live\.cache\cf19687f1cbecc4\DXSETUP.exe
2011-03-27 21:20:34 1670936 ----a-w- c:\program files\common files\windows live\.cache\cf19687f1cbecc4\dsetup32.dll
2011-03-27 21:15:42 -------- d-----w- c:\program files\common files\Windows Live
2011-03-27 21:14:54 83248 ----a-w- c:\program files\mozilla firefox\plugins\npclntax_HBLiteSA.dll
2011-03-27 21:14:53 -------- d-----w- c:\program files\HBLite
2011-03-27 21:14:53 -------- d-----w- c:\progra~2\HBLiteSA
2011-03-27 21:14:53 -------- d-----w- c:\progra~2\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
2011-03-27 21:14:46 -------- d-----w- c:\program files\ScanQuery
2011-03-27 21:14:46 -------- d-----w- c:\progra~2\ScanQuery
2011-03-27 21:14:37 -------- d-----w- c:\program files\ShoppingReport2
2011-03-10 14:04:38 -------- d-----w- c:\program files\iPod
2011-03-10 14:04:37 -------- d-----w- c:\program files\iTunes
2011-03-08 21:14:28 802304 ----a-w- c:\windows\system32\FntCache.dll
2011-03-08 21:14:28 1074176 ----a-w- c:\windows\system32\DWrite.dll
2011-03-08 21:14:27 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-03-08 21:14:24 642048 ----a-w- c:\windows\system32\CPFilters.dll
2011-03-08 21:14:24 534528 ----a-w- c:\windows\system32\EncDec.dll
2011-03-08 21:14:23 850432 ----a-w- c:\windows\system32\sbe.dll
2011-03-08 21:14:23 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2011-03-08 21:14:19 2690560 ----a-w- c:\windows\system32\mstscax.dll
2011-03-08 21:14:19 1034240 ----a-w- c:\windows\system32\mstsc.exe
.
==================== Find3M ====================
.
2011-02-18 16:36:58 4184352 ----a-w- c:\windows\system32\usbaaplrc.dll
2011-01-07 07:31:10 442880 ----a-w- c:\windows\system32\XpsPrint.dll
2011-01-07 07:31:10 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-01-07 07:27:11 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-01-07 05:33:11 294400 ----a-w- c:\windows\system32\atmfd.dll
2011-01-05 05:37:33 428032 ----a-w- c:\windows\system32\vbscript.dll
2011-01-05 03:37:38 2329088 ----a-w- c:\windows\system32\win32k.sys
.
============= FINISH: 20:52:03.69 ===============
And here are the results from the Spybot scan:
SmartShopper: [SBI $4D6A6ACA] Explorer toolbar (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1329000684-3731018787-2344505858-1000\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}
SmartShopper: [SBI $4D6A6ACA] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}
Zango: [SBI $9DB49993] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D}
Zango: [SBI $689E03A0] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{618AAD04-921F-44C2-BE38-C0818AF69861}
Zango: [SBI $411F0828] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{B5D2ED96-62F9-4C2C-956D-E425B1F67337}
Zango: [SBI $9432A0E4] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{D3A412E8-1E4B-47D2-9B12-F88291F5AFBB}
PBHotbar.SearchAssistant: [SBI $AE9557F7] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HBLiteAX.Info
PBHotbar.SearchAssistant: [SBI $AE9557F7] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HBLiteAX.Info.1
PBHotbar.SearchAssistant: [SBI $AE9557F7] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1EC4CA-4B92-4324-B8F8-C9A6ED06A8AE}
PBHotbar.SearchAssistant: [SBI $54365FD3] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{6F098504-CDB1-420F-A2E6-DDC0B835FEDF}
PBHotbar.SearchAssistant: [SBI $EA35BE06] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HBLiteAX.UserProfiles
PBHotbar.SearchAssistant: [SBI $EA35BE06] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HBLiteAX.UserProfiles.1
PBHotbar.SearchAssistant: [SBI $EA35BE06] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E674574-3F0B-491d-8AE3-F90B43A34FD6}
PBHotbar.SearchAssistant: [SBI $13E85868] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
PBHotbar.SearchAssistant: [SBI $73E9AAAF] User settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1329000684-3731018787-2344505858-1000\Software\hblitesa
PBHotbar.SearchAssistant: [SBI $CC14A1DB] Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\hblite
PBHotbar.SearchAssistant: [SBI $1624EB2A] Settings (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\hblite@hblite.com
PBHotbar.SearchAssistant: [SBI $EF847491] Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HBLiteSA
PBHotbar.SearchAssistant: [SBI $2873F856] Autorun settings (HBLiteSA) (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\HBLiteSA
PBHotbar.SearchAssistant: [SBI $2873F856] Program file (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\HBLiteSA.exe
Properties.size=771888
Properties.md5=DF8ED4F27622DBBB8F25617658AE1A7F
Properties.filedate=1300834050
Properties.filedatetext=2011-03-22 23:47:30
PBHotbar.SearchAssistant: [SBI $5AD489E9] Library (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\HBLiteSAAX.dll
Properties.size=283952
Properties.md5=61202C14BA8FF342FB689E3CACD407CE
Properties.filedate=1300834210
Properties.filedatetext=2011-03-22 23:50:10
PBHotbar.SearchAssistant: [SBI $67975F8F] Program directory (Directory, nothing done)
C:\ProgramData\HBLiteSA\
PBHotbar.SearchAssistant: [SBI $37C0F64B] Data (File, nothing done)
C:\ProgramData\HBLiteSA\HBLiteSA_kyf.dat
Properties.size=3776064
Properties.md5=8C96EED46B7EA68E36E4B3FE9E51CD04
Properties.filedate=1301848782
Properties.filedatetext=2011-04-03 17:39:42
PBHotbar.SearchAssistant: [SBI $096663DA] Data (File, nothing done)
C:\ProgramData\HBLiteSA\HBLiteSAAbout.mht
Properties.size=11823
Properties.md5=509CB6350FA5AED38BB22C697A9D9EF0
Properties.filedate=1300832684
Properties.filedatetext=2011-03-22 23:24:44
PBHotbar.SearchAssistant: [SBI $207472FE] Data (File, nothing done)
C:\ProgramData\HBLiteSA\HBLiteSAau.dat
Properties.size=80942
Properties.md5=805AC06BA6116CEB7DFBE064F6EE3C69
Properties.filedate=1301260497
Properties.filedatetext=2011-03-27 22:14:56
PBHotbar.SearchAssistant: [SBI $09A12922] Data (File, nothing done)
C:\ProgramData\HBLiteSA\HBLiteSAEULA.mht
Properties.size=41344
Properties.md5=EBD74D15F57D68724E3A5F48379242A3
Properties.filedate=1300832686
Properties.filedatetext=2011-03-22 23:24:46
PBHotbar.SearchAssistant: [SBI $90D518BC] Program directory (Directory, nothing done)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\
PBHotbar.SearchAssistant: [SBI $6FB5B34D] Link (File, nothing done)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\About Hotbar.lnk
Properties.size=2125
Properties.md5=758B409A7BD20835417E028DF7D3B63A
Properties.filedate=1301260494
Properties.filedatetext=2011-03-27 22:14:53
PBHotbar.SearchAssistant: [SBI $552DA8A9] Link (File, nothing done)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\Hotbar Customer Support Center.lnk
Properties.size=2197
Properties.md5=1A1D046BB3C6F6F23245570D3359C24E
Properties.filedate=1301260494
Properties.filedatetext=2011-03-27 22:14:53
PBHotbar.SearchAssistant: [SBI $6715DB4D] Link (File, nothing done)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\Hotbar Uninstall Instructions.lnk
Properties.size=2187
Properties.md5=A9C3F4C68610C6A760629F03FB652AC9
Properties.filedate=1301260494
Properties.filedatetext=2011-03-27 22:14:53
PBHotbar.SearchAssistant: [SBI $36E1BCC3] Program directory (Directory, nothing done)
C:\Program Files\hblite\
PBHotbar.SearchAssistant: [SBI $BFF258F0] Program directory (Directory, nothing done)
C:\Program Files\hblite\bin\
PBHotbar.SearchAssistant: [SBI $D4B15DE0] Program directory (Directory, nothing done)
C:\Program Files\hblite\bin\11.0.363.0
PBHotbar.SearchAssistant: [SBI $68DC1768] Library (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\HBLiteSAHook.dll
Properties.size=165168
Properties.md5=E13EBD8835CD5DBC9513B62182D69D8C
Properties.filedate=1300834278
Properties.filedatetext=2011-03-22 23:51:18
PBHotbar.SearchAssistant: [SBI $BE9B1E00] Data (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\firefox\extensions\install.rdf
Properties.size=738
Properties.md5=8FB31B234309D36B7C71A9FFAF497355
Properties.filedate=1300834488
Properties.filedatetext=2011-03-22 23:54:48
PBHotbar.SearchAssistant: [SBI $B7BB9D7E] Library (File, nothing done)
C:\Program Files\HBLite\bin\11.0.363.0\firefox\extensions\plugins\npclntax_HBLiteSA.dll
Properties.size=83248
Properties.md5=BF3A4DD2204C0AC24657A43A255E0C7B
Properties.filedate=1300834384
Properties.filedatetext=2011-03-22 23:53:04
PBHotbar.SearchAssistant: [SBI $52169AC6] Library (File, nothing done)
C:\Program Files\Mozilla Firefox\plugins\npclntax_HBLiteSA.dll
Properties.size=83248
Properties.md5=BF3A4DD2204C0AC24657A43A255E0C7B
Properties.filedate=1300834384
Properties.filedatetext=2011-03-22 23:53:04
PBHotbar.ShoppingReport: [SBI $2CD460C4] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.HbAx
PBHotbar.ShoppingReport: [SBI $2CD460C4] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.HbAx.1
PBHotbar.ShoppingReport: [SBI $2CD460C4] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD15BCC0-5FE9-4690-A957-99FA60ED9D26}
PBHotbar.ShoppingReport: [SBI $4513FF75] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
PBHotbar.ShoppingReport: [SBI $4513FF75] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
PBHotbar.ShoppingReport: [SBI $8A2F0BE0] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8}
PBHotbar.ShoppingReport: [SBI $A55B30DF] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
PBHotbar.ShoppingReport: [SBI $A55B30DF] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
PBHotbar.ShoppingReport: [SBI $A55B30DF] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{258C9770-1713-4021-8D7E-1F184A2BD754}
PBHotbar.ShoppingReport: [SBI $A55B30DF] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{258C9770-1713-4021-8D7E-1F184A2BD754}
PBHotbar.ShoppingReport: [SBI $0D3E4863] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{F244A744-534D-4A46-855F-C0C7E9F27DAA}
PBHotbar.ShoppingReport: [SBI $2C6F06E7] User settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1329000684-3731018787-2344505858-1000\Software\ShoppingReport2
PBHotbar.ShoppingReport: [SBI $A1B3B5BA] Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport2
PBHotbar.ShoppingReport: [SBI $DCF85947] Library (File, nothing done)
C:\Program Files\ShoppingReport2\Bin\2.7.34\ShoppingReport.dll
Properties.size=1142064
Properties.md5=1F2E70F57A02AED1CCA4BC8023CD19EB
Properties.filedate=1297378400
Properties.filedatetext=2011-02-10 23:53:20
PBHotbar.ShoppingReport: [SBI $A5979C19] Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2
PBHotbar.ShoppingReport: [SBI $D35A5E28] Program directory (Directory, nothing done)
C:\Program Files\ShoppingReport2\
PBHotbar.ShoppingReport: [SBI $638954BD] Program directory (Directory, nothing done)
C:\Program Files\ShoppingReport2\Bin\
PBHotbar.ShoppingReport: [SBI $98D0FCF8] Program directory (Directory, nothing done)
C:\Program Files\ShoppingReport2\Bin\2.7.34
SmartShopper: [SBI $A3C9DE70] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{258C9770-1713-4021-8D7E-1F184A2BD754}
SmartShopper: [SBI $A38B8EAA] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{3E2DFD6A-4E20-4D4C-AA8B-E1F9DBEF3C80}
SmartShopper: [SBI $E1150A7C] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{714E0876-FCEE-49CE-A429-B9AD8AEFCB56}
SmartShopper: [SBI $43DBB2D8] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{DD15BCC0-5FE9-4690-A957-99FA60ED9D26}
SmartShopper: [SBI $20646759] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.HbAx
SmartShopper: [SBI $E3519F4F] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.HbAx.1
SmartShopper: [SBI $42A39106] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand
SmartShopper: [SBI $8AACEB3A] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand.1
SmartShopper: [SBI $B7033CC5] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.IEButton
SmartShopper: [SBI $C21C4542] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.IEButton.1
SmartShopper: [SBI $A20BA30E] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA
SmartShopper: [SBI $8AA2D01A] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA.1
SmartShopper: [SBI $024DFDB0] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl
SmartShopper: [SBI $7C378F99] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl.1
SmartShopper: [SBI $344477A7] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
SmartShopper: [SBI $F6D86C06] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DB38E21A-0133-419d-92AD-ECDFD5244D6D}
SmartShopper: [SBI $8ACC85BF] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6}
Zango: [SBI $EB96EE65] Common application data folder (Directory, nothing done)
C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65\
DoubleClick: Tracking cookie (Internet Explorer: Zander) (Cookie, nothing done)
MediaPlex: Tracking cookie (Internet Explorer: Zander) (Cookie, nothing done)
Adviva: Tracking cookie (Internet Explorer: Zander) (Cookie, nothing done)
MediaPlex: Tracking cookie (Internet Explorer: Zander) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Adviva: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Statcounter: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Clickbank: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitsLink: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
BurstMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Adviva: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
HitBox: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
WebTrends live: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
BurstMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
FastClick: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
BurstMedia: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Adviva: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Zedo: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
Statcounter: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, nothing done)
--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---
2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-01-26 TeaTimer.exe (1.6.4.26)
2011-04-03 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2011-03-18 Includes\Adware.sbi (*)
2011-03-22 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2010-12-14 Includes\Dialer.sbi (*)
2011-03-08 Includes\DialerC.sbi (*)
2011-02-24 Includes\HeavyDuty.sbi (*)
2011-03-29 Includes\Hijackers.sbi (*)
2011-03-29 Includes\HijackersC.sbi (*)
2010-09-15 Includes\iPhone.sbi (*)
2010-12-14 Includes\Keyloggers.sbi (*)
2011-03-08 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2011-03-29 Includes\Malware.sbi (*)
2011-03-29 Includes\MalwareC.sbi (*)
2011-02-24 Includes\PUPS.sbi (*)
2011-03-15 Includes\PUPSC.sbi (*)
2010-01-25 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2011-03-08 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2011-02-24 Includes\Spyware.sbi (*)
2011-03-15 Includes\SpywareC.sbi (*)
2010-03-08 Includes\Tracks.uti
2010-12-28 Includes\Trojans.sbi (*)
2011-03-25 Includes\TrojansC-02.sbi (*)
2011-03-29 Includes\TrojansC-03.sbi (*)
2011-03-08 Includes\TrojansC-04.sbi (*)
2011-03-29 Includes\TrojansC-05.sbi (*)
2011-03-08 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
Thank you in advance for your help - I used this forum quite a while back and you sorted me out!
Cheers
Zander