PDA

View Full Version : worm/autoit.anve



vbdarsh
2011-05-07, 05:33
I cannot access my pictures on my SD card or my San Disk pen drive. The files have been changed to .exe files and do not open when double clicked. I ran AVG Anti-Virus Free on both and it found that both contained the worm "worm/autoit.anve" I had the files moved to the virus vault, but how do I recover my pictures and how do I ensure that the rest of the computer is not infected? below is the requested information!


thanks,
darsh

=============
DDS
=============
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by sbcp11 at 23:11:40.27 on Thu 05/05/2011
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_17
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.1.1033.18.1525.406 [GMT 5.5:30]
.
AV: AVG Anti-Virus Free *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\BRINGM~2\bar\1.bin\1cbarsvc.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\mobsync.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Windows\System32\wpcumi.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\BringMeSports_1c\bar\1.bin\1cbrmon.exe
C:\Program Files\BSNL 3G Data Card\Resource\MCtlSuc.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Users\sbcp11\AppData\Local\Google\Update\1.3.21.53\GoogleCrashHandler.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Users\sbcp11\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sbcp11\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sbcp11\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Users\sbcp11\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sbcp11\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sbcp11\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Users\sbcp11\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\sbcp11\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sbcp11\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\sbcp11\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\sbcp11\Desktop\Hardik - Virus Removal\dds.scr
.
============== Pseudo HJT Report ===============
.
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.bing.com/
uSearch Bar = hxxp://www.google.com/ie
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=PRESARIO&pf=laptop
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=PRESARIO&pf=laptop
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
uURLSearchHooks: FCToolbarURLSearchHook Class: {3a750e59-9048-456b-a7f9-4d22dcb583f3} - c:\program files\myplaycity toolbar\Helper.dll
uURLSearchHooks: H - No File
uURLSearchHooks: N/A: {06b5b051-1d05-443d-822f-39ab0d05f018} - c:\program files\bringmesports_1c\bar\1.bin\1cSrcAs.dll
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Search Assistant BHO: {002d1ba6-4766-4d7d-82b8-f49439c66f97} - c:\program files\bringmesports_1c\bar\1.bin\1cSrcAs.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - No File
BHO: CescrtHlpr Object: {2eecd738-5844-4a99-b4b6-146bf802613b} - c:\program files\babylontoolbar\babylontoolbar\1.4.15.10\bh\BabylonToolbar.dll
BHO: FGCatchUrl: {2f364306-aa45-47b5-9f9d-39a8b94e7ef7} - c:\program files\flashget\jccatch.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - c:\program files\windows live\companion\companioncore.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll
BHO: {BBBE1C1A-89F7-4AF6-ABD1-F8FBCFA47408} - No File
BHO: MyPlayCity Toolbar BHO: {d496b221-52bb-4da7-b5e7-4442022f207d} - c:\program files\myplaycity toolbar\Toolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: FlashGet GetFlash Class: {f156768e-81ef-470c-9057-481ba8380dba} - c:\program files\flashget\getflash.dll
BHO: Toolbar BHO: {f653d037-97fa-4755-98c1-7f382eeb59a7} - c:\progra~1\bringm~2\bar\1.bin\1cbar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
TB: MyPlayCity Toolbar: {648adde1-369b-4868-a419-0b67ebfd8f73} - c:\program files\myplaycity toolbar\Toolbar.dll
TB: Babylon Toolbar: {98889811-442d-49dd-99d7-dc866be87dbc} - c:\program files\babylontoolbar\babylontoolbar\1.4.15.10\BabylonToolbarTlbr.dll
TB: BringMeSports: {cc53bd19-7b23-43b0-ab7c-0e06c708cced} - c:\program files\bringmesports_1c\bar\1.bin\1cbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [Google Update] "c:\users\sbcp11\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe"
mRun: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
mRun: [<NO NAME>]
mRun: [WPCUMI] c:\windows\system32\WpcUmi.exe
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
mRun: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
mRun: [MotiveReportAgent] "c:\program files\common files\motive\mccibootstrapper.exe" /url="-appkey=motive -windowcontext=reportagent -url=file://c:\program files\common files\motive\reportagent.html" /browsertype=custommsie /browserpath="c:\program files\common files\motive\MotiveBrowser.exe" /hidden
mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
mRun: [hpWirelessAssistant] c:\program files\hewlett-packard\hp wireless assistant\HPWAMain.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [BabylonToolbar] "c:\program files\babylontoolbar\babylontoolbar\1.4.15.10\BabylonToolbarsrv.exe" /md I
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [BringMeSports_1c Browser Plugin Loader] c:\progra~1\bringm~2\bar\1.bin\1cbrmon.exe
mRun: [MCtlSuc] c:\program files\bsnl 3g data card\resource\MCtlSuc.exe
StartupFolder: c:\users\sbcp11\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: &Download All with FlashGet - c:\program files\flashget\jc_all.htm
IE: &Download with FlashGet - c:\program files\flashget\jc_link.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - c:\program files\flashget\FlashGet.exe
IE: {fb6dbae6-f47b-4af3-bfeb-b5ab4ff2b1b4} - c:\program files\youtube clip extractor\ClipExtractor.exe
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - c:\program files\windows live\companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\windows\windowsmobile\INetRepl.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
LSP: c:\windows\system32\wpclsp.dll
Trusted Zone: bsnl.in\data
Trusted Zone: bsnl.in\p3hosting
Trusted Zone: cbsetutor.com\www
Trusted Zone: mcgraw-hill.com\highered
DPF: Microsoft XML Parser for Java - file:///C:/Windows/Java/classes/xmldso.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} - file:///C:/Program%20Files/Monopoly/Images/armhelper.ocx
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: {7EB02A15-56DD-435C-87B6-87575E95DC4A} = 218.248.255.212,218.248.255.139
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Notify: igfxcui - igfxdev.dll
AppInit_DLLs: avgrsstx.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\sbcp11\appdata\roaming\mozilla\firefox\profiles\b5hcnwju.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=15627
FF - prefs.js: browser.search.selectedEngine - AVG Secure Search
FF - prefs.js: browser.startup.homepage - hxxp://search.babylon.com/home?AF=15627
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4c88f8c2&v=6.010.006.004&i=23&tp=ab&iy=&ychte=in&lng=en-US&q=
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll
FF - component: c:\users\sbcp11\appdata\roaming\mozilla\firefox\profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\components\FFHst.dll
FF - plugin: c:\progra~1\palmone\packag~1\NPInstal.dll
FF - plugin: c:\program files\bringmesports_1c\bar\1.bin\NP1cStub.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\sbcp11\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\users\sbcp11\appdata\roaming\mozilla\firefox\profiles\b5hcnwju.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\users\sbcp11\appdata\roaming\mozilla\firefox\profiles\b5hcnwju.default\extensions\moveplayer@movenetworks.com\platform\winnt_x86-msvc\plugins\npmnqmp07074039.dll
FF - plugin: c:\users\sbcp11\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\sbcp11\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\windows\system32\tvuax\npTVUAx.dll
FF - Ext: Clip Extractor: button@youtubeclipextractor.com - c:\program files\mozilla firefox\extensions\button@youtubeclipextractor.com
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Babylon: ffxtlbr@babylon.com - %profile%\extensions\ffxtlbr@babylon.com
FF - Ext: TVU Web Player: firefox@tvunetworks.com - %profile%\extensions\firefox@tvunetworks.com
FF - Ext: Move Media Player: moveplayer@movenetworks.com - %profile%\extensions\moveplayer@movenetworks.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: AVG Safe Search: {3f963a5b-e555-4543-90e2-c3908898db71} - c:\program files\avg\avg9\Firefox
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: AVG Security Toolbar em:version=6.103.018.001 em:displayname=AVG Security Toolbar em:iconURL=chrome://tavgp/skin/logo.ico em:creator=AVG Technologies em:description=AVG Security Toolbar em:homepageURL=http://www.avg.com >: avg@igeared - c:\program files\avg\avg9\toolbar\firefox\avg@igeared
FF - Ext: BringMeSports: 1cffxtbr@BringMeSports_1c.com - c:\program files\bringmesports_1c\bar\1.bin
.
============= SERVICES / DRIVERS ===============
.
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-7-21 216400]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2008-7-21 29584]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-5-30 243024]
R2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-7-20 308136]
R2 BringMeSports_1cService;BringMeSports Service;c:\progra~1\bringm~2\bar\1.bin\1cbarsvc.exe [2011-4-12 36864]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-7-13 21504]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\logmein\x86\rainfo.sys [2008-2-28 12856]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2008-6-19 45848]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2011-5-5 600912]
R2 TeamViewer4;TeamViewer 4;c:\program files\teamviewer\version4\TeamViewer_Service.exe [2009-5-6 185640]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe --> c:\progra~1\avg\avg8\avgwdsvc.exe [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-11-4 136176]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg9\toolbar\ToolbarBroker.exe [2010-10-27 517448]
S3 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2011-4-25 39272]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2010-9-23 1493352]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-11-4 136176]
S3 qcusbmdm4;Qualcomm Proprietary USB Driver (PID 3199);c:\windows\system32\drivers\qcusbmdm4.sys [2007-12-9 59632]
S3 u302bus;HSPADataCard WMC Bus Driver (WDM);c:\windows\system32\drivers\u302bus.sys [2010-7-30 119112]
S3 u302mdfl;HSPADataCard Modem Filter;c:\windows\system32\drivers\u302mdfl.sys [2010-7-30 14920]
S3 u302mdm;HSPADataCard Modem Driver;c:\windows\system32\drivers\u302mdm.sys [2010-7-30 135880]
S3 u302mgmt;HSPADataCard USB Device Management Drivers (WDM);c:\windows\system32\drivers\u302mgmt.sys [2010-7-30 129992]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\windows live\mesh\wlcrasvc.exe [2010-9-22 51040]
.
=============== File Associations ===============
.
inifile=%SystemRoot%\System32\NOTEPAD.EXE %1"
piffile="%1" %*"
.
=============== Created Last 30 ================
.
2011-05-05 13:08:00 -------- d-----w- c:\program files\Spybot - Search & Destroy
2011-05-05 13:08:00 -------- d-----w- c:\progra~2\Spybot - Search & Destroy
2011-04-29 13:42:45 -------- d-----w- c:\program files\HSPADataCard
2011-04-29 13:41:06 -------- d-----w- c:\program files\BSNL 3G Data Card
2011-04-27 15:10:32 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2011-04-27 15:10:31 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-04-27 14:06:43 14744 ----a-w- c:\users\sbcp11\appdata\roaming\microsoft\identitycrl\production\ppcrlconfig.dll
2011-04-27 13:15:15 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2011-04-24 19:46:04 -------- d-----w- c:\windows\en
2011-04-24 19:44:26 39272 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2011-04-24 19:33:51 18328 ----a-w- c:\progra~2\microsoft\identitycrl\production\ppcrlconfig600.dll
2011-04-22 17:51:11 15712 ----a-w- c:\program files\common files\windows live\.cache\ddcb29d01cc011503\MeshBetaRemover.exe
2011-04-22 17:51:05 94040 ----a-w- c:\program files\common files\windows live\.cache\da3188501cc011502\DSETUP.dll
2011-04-22 17:51:05 525656 ----a-w- c:\program files\common files\windows live\.cache\da3188501cc011502\DXSETUP.exe
2011-04-22 17:51:05 1691480 ----a-w- c:\program files\common files\windows live\.cache\da3188501cc011502\dsetup32.dll
2011-04-22 17:50:58 94040 ----a-w- c:\program files\common files\windows live\.cache\d5dc37f01cc011501\DSETUP.dll
2011-04-22 17:50:58 525656 ----a-w- c:\program files\common files\windows live\.cache\d5dc37f01cc011501\DXSETUP.exe
2011-04-22 17:50:58 1691480 ----a-w- c:\program files\common files\windows live\.cache\d5dc37f01cc011501\dsetup32.dll
2011-04-14 14:53:29 2409784 ----a-w- c:\program files\windows mail\OESpamFilter.dat
2011-04-14 14:42:44 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-04-14 14:42:44 292864 ----a-w- c:\windows\system32\atmfd.dll
2011-04-14 14:42:40 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-14 14:42:40 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2011-04-14 14:42:40 213504 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-14 14:42:40 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-14 14:42:35 1162240 ----a-w- c:\windows\system32\mfc42u.dll
2011-04-14 14:42:34 1136640 ----a-w- c:\windows\system32\mfc42.dll
2011-04-14 14:39:51 305152 ----a-w- c:\windows\system32\drivers\srv.sys
2011-04-14 14:39:51 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-04-14 14:39:51 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-04-14 14:39:03 86528 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-04-14 14:39:02 25088 ----a-w- c:\windows\system32\dnscacheugc.exe
2011-04-14 14:38:57 2041856 ----a-w- c:\windows\system32\win32k.sys
2011-04-14 14:38:52 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-13 22:09:02 103864 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
2011-04-13 22:09:02 103864 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
2011-04-12 06:51:22 -------- d-----w- c:\program files\BringMeSports_1c
2011-04-12 06:50:35 -------- d-----w- c:\program files\BringMeSports_1cEI
2011-04-12 05:34:22 -------- d-----w- C:\wordshr
.
==================== Find3M ====================
.
2011-03-03 15:40:07 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2011-03-03 15:40:05 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
2011-03-03 15:40:05 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2011-03-03 15:40:04 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2011-02-22 14:13:01 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-22 13:33:12 1068544 ----a-w- c:\windows\system32\DWrite.dll
2011-02-22 13:33:09 797696 ----a-w- c:\windows\system32\FntCache.dll
.
============= FINISH: 23:12:30.06 ===============


=============
Spybot Report
=============

Babylon.Toolbar: [SBI $4F6D874C] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\chrome.manifest
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $A7584477] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\install.rdf
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $68A01A6F] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\vssver.scc
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $BBC8AD71] Library (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\components\FFHst.dll
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $D861C247] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\components\FFHst.xpt
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $6362D76D] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\babylon.css
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $2DAD75DF] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\babylon.xul
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $DF457E24] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\mtrprt.js
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $4A5AFCB8] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\PPCB.js
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $C3399353] Web page (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\rd.htm
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $71E86D4B] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\tmplt.js
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $29D4CE88] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\vssver.scc
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $C53C6D80] Picture (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\arwDwn.gif
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $C53C6D80] Picture (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\help_16.gif
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $C53C6D80] Picture (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\home.gif
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $C53C6D80] Picture (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\privecy_16_hot.gif
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $C53C6D80] Picture (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\tellafriend.gif
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $3756C165] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\bbyln.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $3756C165] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\icons.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $3756C165] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\logo.PNG
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $3756C165] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\pbggl.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $3756C165] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\radio.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $3756C165] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\search.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $3756C165] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\toolbarIcons_casino.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $3756C165] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\toolbar_icons_games.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $3756C165] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\translate.PNG
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $44E1AB05] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\vssver.scc
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\ae.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\bg.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\ch.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\cn.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\cz.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\de.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\eg.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\en.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\es.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\fr.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\gr.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\he.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\il.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\it.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\ja.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\jp.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\nl.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\no.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\pl.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\pt.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\ro.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\ru.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\sa.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\se.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\sv.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\tr.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\ua.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $26593B10] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\us.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $0431BEB5] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\Thumbs.db
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $F4BC4DC4] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\bg.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $F4BC4DC4] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\chooseStation.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $F4BC4DC4] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\pauseBtn.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $F4BC4DC4] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\playBtn.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $F4BC4DC4] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\rd_strp.png
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $4BFFC2F6] Picture (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\lines.gif
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $B6AF30C8] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\Thumbs.db
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $140F37E8] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\defaults\preferences\instlPref.js
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Babylon.Toolbar: [SBI $14C1A25A] Data (File, fixed)
C:\Users\sbcp11\AppData\Roaming\Mozilla\Firefox\Profiles\b5hcnwju.default\extensions\ffxtlbr@babylon.com\defaults\preferences\vssver.scc
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Microsoft.Windows.InfectedHostfile: [SBI $50865E77] Data (File, fixed)
C:\Windows\System32\drivers\etc\hosts_infected
Properties.size=0
Properties.md5=D41D8CD98F00B204E9800998ECF8427E

Zedo: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


Zedo: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


DoubleClick: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


WebTrends live: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


MediaPlex: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


MediaPlex: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


MediaPlex: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


Statcounter: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


FastClick: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


FastClick: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


HitBox: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


BurstMedia: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


CasaleMedia: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


Right Media: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


Right Media: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


Right Media: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


Right Media: Tracking cookie (Firefox: sbcp11 (default)) (Cookie, fixed)


DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


Zedo: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


Zedo: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


Zedo: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


Zedo: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


HitBox: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


HitBox: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


HitBox: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


WebTrends live: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


Statcounter: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


Zedo: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


Zedo: Tracking cookie (Chrome: Chrome) (Cookie, fixed)


Zedo: Tracking cookie (Chrome: Chrome) (Cookie, fixed)



--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---

2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SDWinSec.exe (1.0.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2011-05-07 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-11-04 advcheck.dll (1.6.5.20)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2011-03-18 Includes\Adware.sbi (*)
2011-03-22 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2010-12-14 Includes\Dialer.sbi (*)
2011-03-08 Includes\DialerC.sbi (*)
2011-02-24 Includes\HeavyDuty.sbi (*)
2011-03-29 Includes\Hijackers.sbi (*)
2011-03-29 Includes\HijackersC.sbi (*)
2010-09-15 Includes\iPhone.sbi (*)
2010-12-14 Includes\Keyloggers.sbi (*)
2011-03-08 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2011-04-05 Includes\Malware.sbi (*)
2011-05-03 Includes\MalwareC.sbi (*)
2011-02-24 Includes\PUPS.sbi (*)
2011-03-15 Includes\PUPSC.sbi (*)
2010-01-25 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2011-05-03 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2011-02-24 Includes\Spyware.sbi (*)
2011-05-03 Includes\SpywareC.sbi (*)
2010-03-08 Includes\Tracks.uti
2010-12-28 Includes\Trojans.sbi (*)
2011-05-02 Includes\TrojansC-02.sbi (*)
2011-05-03 Includes\TrojansC-03.sbi (*)
2011-05-03 Includes\TrojansC-04.sbi (*)
2011-05-04 Includes\TrojansC-05.sbi (*)
2011-03-08 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2008-12-24 Plugins\TCPIPAddress.dll

Blade81
2011-05-14, 18:33
Hi,

If help still needed post fresh dds logs, please. I can't quarantee that we can rescue your pictures. First you have to restore those from AVG vault.

Blade81
2011-05-20, 17:05
Due to inactivity, this thread will now be closed.

Note:If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh DDS log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than three days since your last response and you need the thread re-opened, please send me or other MOD a private message (pm). A valid, working link to the closed topic is required.