douglas78
2011-06-29, 05:22
Hi,
New here and i couldn't find anything on helping me know what updater.exe is. When i turn on my computer the dialog box appears telling me updater.exe wants access to my computer when i load up Aurora (firefox6). I apologize in advance if i'm going about this the wrong way. I just don't know if this is something harmful.
thank you
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_26
Run by doug at 22:13:24 on 2011-06-28
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3070.1613 [GMT -5:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\WUDFHost.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\System32\wsqmcons.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\lxcycoms.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Aurora\firefox.exe
C:\Program Files\Aurora\plugin-container.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
BHO: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" /MINIMIZED
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [RTHDVCPL] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [lxcymon.exe] "c:\program files\lexmark 3400 series\lxcymon.exe"
mRun: [EzPrint] "c:\program files\lexmark 3400 series\ezprint.exe"
mRun: [FaxCenterServer] "c:\program files\lexmark fax solutions\fm3032.exe" /s
mRun: [LXCYCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXCYtime.dll,_RunDLLEntry@16
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{4960B0AD-FA17-4302-AA8C-39F6B9458D8C} : DhcpNameServer = 192.168.0.1
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\doug\appdata\roaming\mozilla\firefox\profiles\q91enaum.default\
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 lxcy_device;lxcy_device;c:\windows\system32\lxcycoms.exe -service --> c:\windows\system32\lxcycoms.exe -service [?]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-6-19 366640]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-6-19 22712]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-6-19 136176]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2011-6-19 14216]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2011-6-19 8456]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2011-06-29 01:18:18 -------- d-----w- c:\program files\Lexmark Toolbar
2011-06-29 01:16:39 -------- d-----w- c:\program files\lx_cats
2011-06-29 01:16:03 45056 ----a-w- c:\windows\system32\LXPRMON.DLL
2011-06-29 01:16:03 32768 ----a-w- c:\windows\system32\LXPMONUI.DLL
2011-06-29 01:15:43 98345 ----a-w- c:\windows\system32\IMHOST32.DLL
2011-06-29 01:15:43 98304 ----a-w- c:\windows\system32\IM31XPNG.DEL
2011-06-29 01:15:43 69632 ----a-w- c:\windows\system32\IM31XTIF.DEL
2011-06-29 01:15:43 49152 ----a-w- c:\windows\system32\IM31IMG.DIL
2011-06-29 01:15:43 339968 ----a-w- c:\windows\system32\IMGMAN32.DLL
2011-06-29 01:15:43 12288 ----a-w- c:\windows\system32\LXPMONRC.DLL
2011-06-29 01:15:42 -------- d-----w- c:\programdata\FaxCtr
2011-06-29 01:15:27 -------- d-----w- c:\programdata\Ezprint
2011-06-29 01:15:10 -------- d-----w- c:\program files\Lexmark Fax Solutions
2011-06-29 01:15:00 -------- d-----w- c:\program files\Lexmark 3400 Series
2011-06-29 01:14:45 -------- d-----w- c:\program files\Abbyy FineReader 6.0 Sprint
2011-06-29 01:14:40 462848 ----a-w- c:\windows\system32\tmpE504.tmp
2011-06-29 01:14:40 323584 ----a-w- c:\windows\system32\lxcyhcp.dll
2011-06-29 01:14:40 274432 ----a-w- c:\windows\system32\lxcyinst.dll
2011-06-29 01:14:39 585728 ----a-w- c:\windows\system32\tmpE226.tmp
2011-06-29 01:14:39 147456 ----a-w- c:\windows\system32\tmpE1B8.tmp
2011-06-29 01:14:38 983107 ----a-w- c:\windows\system32\tmpDEAB.tmp
2011-06-29 00:50:56 117760 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\lxcypp5c.dll
2011-06-29 00:49:55 344064 ----a-w- c:\windows\system32\lxcycoin.dll
2011-06-29 00:49:43 7074640 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{97749e14-6464-47a6-8882-b56fcca69830}\mpengine.dll
2011-06-23 03:45:06 -------- d-sh--w- C:\$RECYCLE.BIN
2011-06-22 22:25:34 -------- d-----w- c:\users\doug\appdata\local\Adobe
2011-06-20 02:36:58 431672 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-06-20 02:36:50 -------- d-----w- c:\program files\DAEMON Tools Lite
2011-06-20 02:36:35 -------- d-----w- c:\users\doug\appdata\roaming\DAEMON Tools Lite
2011-06-20 02:36:35 -------- d-----w- c:\programdata\DAEMON Tools Lite
2011-06-20 02:34:28 -------- d-----w- c:\windows\Panther
2011-06-20 02:34:13 -------- d-sh--w- C:\Boot
2011-06-20 02:34:10 232448 ----a-w- c:\windows\system32\mp3fhg.acm
2011-06-20 02:34:10 175616 ----a-w- c:\windows\system32\unrar.dll
2011-06-20 02:34:10 151552 ----a-w- c:\windows\system32\ac3acm.acm
2011-06-20 02:34:09 73216 ----a-w- c:\windows\system32\ff_vfw.dll
2011-06-20 02:34:09 644608 ----a-w- c:\windows\system32\xvidcore.dll
2011-06-20 02:34:09 243200 ----a-w- c:\windows\system32\xvidvfw.dll
2011-06-20 02:34:09 237568 ----a-w- c:\windows\system32\yv12vfw.dll
2011-06-20 02:34:07 -------- d-----w- c:\program files\K-Lite Codec Pack
2011-06-20 02:28:37 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-06-20 02:17:09 86408 ----a-w- c:\windows\system32\setupempdrv03.exe
2011-06-20 02:17:09 8456 ----a-w- c:\windows\system32\EuGdiDrv.sys
2011-06-20 02:17:09 2340992 ----a-w- c:\windows\system32\BootMan.exe
2011-06-20 02:17:09 18048 ----a-w- c:\windows\system32\EuEpmGdi.dll
2011-06-20 02:17:09 14216 ----a-w- c:\windows\system32\epmntdrv.sys
2011-06-20 02:17:06 -------- d-----w- c:\program files\EASEUS
2011-06-20 01:55:43 -------- d-----w- c:\windows\system32\RTCOM
2011-06-20 01:50:50 354304 ----a-w- c:\windows\system32\idecoiins.dll
2011-06-20 01:50:50 354304 ----a-w- c:\windows\system32\idecoi.dll
2011-06-20 01:50:50 100648 ----a-w- c:\windows\system32\drivers\nvstor32.sys
2011-06-20 01:48:52 198656 ----a-w- c:\windows\system32\fdco1.dll
2011-06-20 01:48:27 356352 ----a-r- c:\windows\system32\nvusmb.exe
2011-06-20 01:37:22 -------- d-----w- c:\program files\CCleaner
2011-06-20 01:37:12 -------- d-----w- c:\program files\SIW
2011-06-20 01:35:59 -------- d-----w- c:\users\doug\appdata\local\Google
2011-06-19 23:00:57 17920 ----a-w- c:\windows\system32\netevent.dll
2011-06-19 23:00:57 125952 ----a-w- c:\windows\system32\srvsvc.dll
2011-06-19 23:00:48 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-06-19 23:00:48 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2011-06-19 23:00:46 377344 ----a-w- c:\windows\system32\winhttp.dll
2011-06-19 23:00:07 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2011-06-19 23:00:04 118784 ----a-w- c:\windows\system32\MSSTDFMT.DLL
2011-06-19 23:00:04 1071088 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2011-06-19 23:00:04 -------- d-----w- c:\program files\SpywareBlaster
2011-06-19 22:59:24 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-19 22:57:56 -------- d-----w- c:\program files\uTorrent
2011-06-19 22:57:36 -------- d-----w- c:\users\doug\appdata\roaming\uTorrent
2011-06-19 22:57:36 -------- d-----w- c:\users\doug\appdata\local\uTorrent
2011-06-19 22:52:28 -------- d-----w- c:\program files\Windows Portable Devices
2011-06-19 22:34:49 4984 ----a-w- c:\windows\system32\drivers\nvphy.bin
2011-06-19 22:34:49 453152 ----a-w- c:\windows\system32\nvuninst.exe
2011-06-19 22:31:56 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2011-06-19 22:31:56 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2011-06-19 22:31:56 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-06-19 22:31:19 369664 ----a-w- c:\windows\system32\WMPhoto.dll
2011-06-19 22:31:18 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll
2011-06-19 22:31:18 519680 ----a-w- c:\windows\system32\d3d11.dll
2011-06-19 22:31:18 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2011-06-19 22:31:18 252928 ----a-w- c:\windows\system32\dxdiag.exe
2011-06-19 22:31:18 195584 ----a-w- c:\windows\system32\dxdiagn.dll
2011-06-19 22:31:18 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2011-06-19 22:21:20 7074640 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2011-06-19 22:21:16 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-06-19 22:19:45 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-06-19 22:19:45 49472 ----a-w- c:\windows\system32\netfxperf.dll
2011-06-19 22:19:45 297808 ----a-w- c:\windows\system32\mscoree.dll
2011-06-19 22:19:45 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2011-06-19 22:19:45 1130824 ----a-w- c:\windows\system32\dfshim.dll
2011-06-19 22:18:09 7680 ----a-w- c:\program files\internet explorer\iecompat.dll
2011-06-19 22:17:44 355832 ----a-w- c:\program files\internet explorer\pdm.dll
2011-06-19 22:17:44 265720 ----a-w- c:\program files\internet explorer\msdbg2.dll
2011-06-19 22:05:36 411648 ----a-w- c:\windows\system32\drivers\http.sys
2011-06-19 22:05:36 30720 ----a-w- c:\windows\system32\httpapi.dll
2011-06-19 22:05:36 24064 ----a-w- c:\windows\system32\nshhttp.dll
2011-06-19 22:03:29 -------- d-sh--w- c:\windows\Installer
2011-06-19 22:03:13 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-06-19 22:03:12 -------- d-----w- c:\program files\NVIDIA Corporation
2011-06-19 22:00:53 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2011-06-19 21:59:49 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-19 21:58:59 72704 ----a-w- c:\windows\system32\fontsub.dll
2011-06-19 21:57:59 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2011-06-19 21:57:58 31744 ----a-w- c:\windows\system32\msvidc32.dll
2011-06-19 21:57:58 1314816 ----a-w- c:\windows\system32\quartz.dll
2011-06-19 21:57:57 91136 ----a-w- c:\windows\system32\avifil32.dll
2011-06-19 21:57:57 82944 ----a-w- c:\windows\system32\mciavi32.dll
2011-06-19 21:57:57 50176 ----a-w- c:\windows\system32\iyuv_32.dll
2011-06-19 21:57:57 22528 ----a-w- c:\windows\system32\msyuv.dll
2011-06-19 21:57:57 13312 ----a-w- c:\windows\system32\msrle32.dll
2011-06-19 21:57:57 123904 ----a-w- c:\windows\system32\msvfw32.dll
2011-06-19 21:57:57 12288 ----a-w- c:\windows\system32\tsbyuv.dll
2011-06-19 21:57:56 531968 ----a-w- c:\windows\system32\comctl32.dll
2011-06-19 21:57:55 355328 ----a-w- c:\windows\system32\WSDApi.dll
2011-06-19 21:52:24 -------- d-----w- c:\users\doug\appdata\roaming\Malwarebytes
2011-06-19 21:52:16 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-06-19 21:52:16 -------- d-----w- c:\programdata\Malwarebytes
2011-06-19 21:52:13 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-06-19 21:52:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-06-19 21:49:54 172032 ----a-w- c:\windows\system32\wintrust.dll
2011-06-19 21:48:37 98304 ----a-w- c:\windows\system32\cabview.dll
2011-06-19 21:43:57 2421760 ----a-w- c:\windows\system32\wucltux.dll
2011-06-19 21:43:37 87552 ----a-w- c:\windows\system32\wudriver.dll
2011-06-19 21:43:18 33792 ----a-w- c:\windows\system32\wuapp.exe
2011-06-19 21:43:18 171608 ----a-w- c:\windows\system32\wuwebv.dll
.
==================== Find3M ====================
.
2011-06-20 01:54:37 319456 ----a-w- c:\windows\DIFxAPI.dll
2011-05-03 21:33:46 3484712 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2011-05-02 23:03:30 73320 ----a-w- c:\windows\system32\RtkCoInst.dll
2011-05-02 20:28:12 1004544 ----a-w- c:\windows\system32\RCoRes.dat
2011-04-29 13:25:10 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-04-29 13:25:09 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-04-29 13:24:50 214016 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-29 13:24:42 79872 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-29 13:24:40 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-21 13:58:27 273408 ----a-w- c:\windows\system32\drivers\afd.sys
2011-04-20 19:34:30 4106344 ----a-w- c:\windows\system32\RtkAPO.dll
2011-04-20 19:34:30 2161768 ----a-w- c:\windows\system32\RtkPgExt.dll
2011-04-18 23:50:00 1803608 ----a-w- c:\windows\system32\MaxxAudioRealtek.dll
2011-04-18 23:50:00 1725784 ----a-w- c:\windows\system32\WavesGUILib.dll
2011-04-14 14:59:03 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys
.
============= FINISH: 22:13:39.17 ===============
New here and i couldn't find anything on helping me know what updater.exe is. When i turn on my computer the dialog box appears telling me updater.exe wants access to my computer when i load up Aurora (firefox6). I apologize in advance if i'm going about this the wrong way. I just don't know if this is something harmful.
thank you
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_26
Run by doug at 22:13:24 on 2011-06-28
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3070.1613 [GMT -5:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\WUDFHost.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\System32\wsqmcons.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\lxcycoms.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Aurora\firefox.exe
C:\Program Files\Aurora\plugin-container.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
BHO: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" /MINIMIZED
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [RTHDVCPL] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [lxcymon.exe] "c:\program files\lexmark 3400 series\lxcymon.exe"
mRun: [EzPrint] "c:\program files\lexmark 3400 series\ezprint.exe"
mRun: [FaxCenterServer] "c:\program files\lexmark fax solutions\fm3032.exe" /s
mRun: [LXCYCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXCYtime.dll,_RunDLLEntry@16
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{4960B0AD-FA17-4302-AA8C-39F6B9458D8C} : DhcpNameServer = 192.168.0.1
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\doug\appdata\roaming\mozilla\firefox\profiles\q91enaum.default\
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 lxcy_device;lxcy_device;c:\windows\system32\lxcycoms.exe -service --> c:\windows\system32\lxcycoms.exe -service [?]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-6-19 366640]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-6-19 22712]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-6-19 136176]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2011-6-19 14216]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2011-6-19 8456]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2011-06-29 01:18:18 -------- d-----w- c:\program files\Lexmark Toolbar
2011-06-29 01:16:39 -------- d-----w- c:\program files\lx_cats
2011-06-29 01:16:03 45056 ----a-w- c:\windows\system32\LXPRMON.DLL
2011-06-29 01:16:03 32768 ----a-w- c:\windows\system32\LXPMONUI.DLL
2011-06-29 01:15:43 98345 ----a-w- c:\windows\system32\IMHOST32.DLL
2011-06-29 01:15:43 98304 ----a-w- c:\windows\system32\IM31XPNG.DEL
2011-06-29 01:15:43 69632 ----a-w- c:\windows\system32\IM31XTIF.DEL
2011-06-29 01:15:43 49152 ----a-w- c:\windows\system32\IM31IMG.DIL
2011-06-29 01:15:43 339968 ----a-w- c:\windows\system32\IMGMAN32.DLL
2011-06-29 01:15:43 12288 ----a-w- c:\windows\system32\LXPMONRC.DLL
2011-06-29 01:15:42 -------- d-----w- c:\programdata\FaxCtr
2011-06-29 01:15:27 -------- d-----w- c:\programdata\Ezprint
2011-06-29 01:15:10 -------- d-----w- c:\program files\Lexmark Fax Solutions
2011-06-29 01:15:00 -------- d-----w- c:\program files\Lexmark 3400 Series
2011-06-29 01:14:45 -------- d-----w- c:\program files\Abbyy FineReader 6.0 Sprint
2011-06-29 01:14:40 462848 ----a-w- c:\windows\system32\tmpE504.tmp
2011-06-29 01:14:40 323584 ----a-w- c:\windows\system32\lxcyhcp.dll
2011-06-29 01:14:40 274432 ----a-w- c:\windows\system32\lxcyinst.dll
2011-06-29 01:14:39 585728 ----a-w- c:\windows\system32\tmpE226.tmp
2011-06-29 01:14:39 147456 ----a-w- c:\windows\system32\tmpE1B8.tmp
2011-06-29 01:14:38 983107 ----a-w- c:\windows\system32\tmpDEAB.tmp
2011-06-29 00:50:56 117760 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\lxcypp5c.dll
2011-06-29 00:49:55 344064 ----a-w- c:\windows\system32\lxcycoin.dll
2011-06-29 00:49:43 7074640 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{97749e14-6464-47a6-8882-b56fcca69830}\mpengine.dll
2011-06-23 03:45:06 -------- d-sh--w- C:\$RECYCLE.BIN
2011-06-22 22:25:34 -------- d-----w- c:\users\doug\appdata\local\Adobe
2011-06-20 02:36:58 431672 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-06-20 02:36:50 -------- d-----w- c:\program files\DAEMON Tools Lite
2011-06-20 02:36:35 -------- d-----w- c:\users\doug\appdata\roaming\DAEMON Tools Lite
2011-06-20 02:36:35 -------- d-----w- c:\programdata\DAEMON Tools Lite
2011-06-20 02:34:28 -------- d-----w- c:\windows\Panther
2011-06-20 02:34:13 -------- d-sh--w- C:\Boot
2011-06-20 02:34:10 232448 ----a-w- c:\windows\system32\mp3fhg.acm
2011-06-20 02:34:10 175616 ----a-w- c:\windows\system32\unrar.dll
2011-06-20 02:34:10 151552 ----a-w- c:\windows\system32\ac3acm.acm
2011-06-20 02:34:09 73216 ----a-w- c:\windows\system32\ff_vfw.dll
2011-06-20 02:34:09 644608 ----a-w- c:\windows\system32\xvidcore.dll
2011-06-20 02:34:09 243200 ----a-w- c:\windows\system32\xvidvfw.dll
2011-06-20 02:34:09 237568 ----a-w- c:\windows\system32\yv12vfw.dll
2011-06-20 02:34:07 -------- d-----w- c:\program files\K-Lite Codec Pack
2011-06-20 02:28:37 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-06-20 02:17:09 86408 ----a-w- c:\windows\system32\setupempdrv03.exe
2011-06-20 02:17:09 8456 ----a-w- c:\windows\system32\EuGdiDrv.sys
2011-06-20 02:17:09 2340992 ----a-w- c:\windows\system32\BootMan.exe
2011-06-20 02:17:09 18048 ----a-w- c:\windows\system32\EuEpmGdi.dll
2011-06-20 02:17:09 14216 ----a-w- c:\windows\system32\epmntdrv.sys
2011-06-20 02:17:06 -------- d-----w- c:\program files\EASEUS
2011-06-20 01:55:43 -------- d-----w- c:\windows\system32\RTCOM
2011-06-20 01:50:50 354304 ----a-w- c:\windows\system32\idecoiins.dll
2011-06-20 01:50:50 354304 ----a-w- c:\windows\system32\idecoi.dll
2011-06-20 01:50:50 100648 ----a-w- c:\windows\system32\drivers\nvstor32.sys
2011-06-20 01:48:52 198656 ----a-w- c:\windows\system32\fdco1.dll
2011-06-20 01:48:27 356352 ----a-r- c:\windows\system32\nvusmb.exe
2011-06-20 01:37:22 -------- d-----w- c:\program files\CCleaner
2011-06-20 01:37:12 -------- d-----w- c:\program files\SIW
2011-06-20 01:35:59 -------- d-----w- c:\users\doug\appdata\local\Google
2011-06-19 23:00:57 17920 ----a-w- c:\windows\system32\netevent.dll
2011-06-19 23:00:57 125952 ----a-w- c:\windows\system32\srvsvc.dll
2011-06-19 23:00:48 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-06-19 23:00:48 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2011-06-19 23:00:46 377344 ----a-w- c:\windows\system32\winhttp.dll
2011-06-19 23:00:07 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2011-06-19 23:00:04 118784 ----a-w- c:\windows\system32\MSSTDFMT.DLL
2011-06-19 23:00:04 1071088 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2011-06-19 23:00:04 -------- d-----w- c:\program files\SpywareBlaster
2011-06-19 22:59:24 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-19 22:57:56 -------- d-----w- c:\program files\uTorrent
2011-06-19 22:57:36 -------- d-----w- c:\users\doug\appdata\roaming\uTorrent
2011-06-19 22:57:36 -------- d-----w- c:\users\doug\appdata\local\uTorrent
2011-06-19 22:52:28 -------- d-----w- c:\program files\Windows Portable Devices
2011-06-19 22:34:49 4984 ----a-w- c:\windows\system32\drivers\nvphy.bin
2011-06-19 22:34:49 453152 ----a-w- c:\windows\system32\nvuninst.exe
2011-06-19 22:31:56 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2011-06-19 22:31:56 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2011-06-19 22:31:56 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-06-19 22:31:19 369664 ----a-w- c:\windows\system32\WMPhoto.dll
2011-06-19 22:31:18 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll
2011-06-19 22:31:18 519680 ----a-w- c:\windows\system32\d3d11.dll
2011-06-19 22:31:18 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2011-06-19 22:31:18 252928 ----a-w- c:\windows\system32\dxdiag.exe
2011-06-19 22:31:18 195584 ----a-w- c:\windows\system32\dxdiagn.dll
2011-06-19 22:31:18 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2011-06-19 22:21:20 7074640 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2011-06-19 22:21:16 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-06-19 22:19:45 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2011-06-19 22:19:45 49472 ----a-w- c:\windows\system32\netfxperf.dll
2011-06-19 22:19:45 297808 ----a-w- c:\windows\system32\mscoree.dll
2011-06-19 22:19:45 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2011-06-19 22:19:45 1130824 ----a-w- c:\windows\system32\dfshim.dll
2011-06-19 22:18:09 7680 ----a-w- c:\program files\internet explorer\iecompat.dll
2011-06-19 22:17:44 355832 ----a-w- c:\program files\internet explorer\pdm.dll
2011-06-19 22:17:44 265720 ----a-w- c:\program files\internet explorer\msdbg2.dll
2011-06-19 22:05:36 411648 ----a-w- c:\windows\system32\drivers\http.sys
2011-06-19 22:05:36 30720 ----a-w- c:\windows\system32\httpapi.dll
2011-06-19 22:05:36 24064 ----a-w- c:\windows\system32\nshhttp.dll
2011-06-19 22:03:29 -------- d-sh--w- c:\windows\Installer
2011-06-19 22:03:13 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-06-19 22:03:12 -------- d-----w- c:\program files\NVIDIA Corporation
2011-06-19 22:00:53 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2011-06-19 21:59:49 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-19 21:58:59 72704 ----a-w- c:\windows\system32\fontsub.dll
2011-06-19 21:57:59 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2011-06-19 21:57:58 31744 ----a-w- c:\windows\system32\msvidc32.dll
2011-06-19 21:57:58 1314816 ----a-w- c:\windows\system32\quartz.dll
2011-06-19 21:57:57 91136 ----a-w- c:\windows\system32\avifil32.dll
2011-06-19 21:57:57 82944 ----a-w- c:\windows\system32\mciavi32.dll
2011-06-19 21:57:57 50176 ----a-w- c:\windows\system32\iyuv_32.dll
2011-06-19 21:57:57 22528 ----a-w- c:\windows\system32\msyuv.dll
2011-06-19 21:57:57 13312 ----a-w- c:\windows\system32\msrle32.dll
2011-06-19 21:57:57 123904 ----a-w- c:\windows\system32\msvfw32.dll
2011-06-19 21:57:57 12288 ----a-w- c:\windows\system32\tsbyuv.dll
2011-06-19 21:57:56 531968 ----a-w- c:\windows\system32\comctl32.dll
2011-06-19 21:57:55 355328 ----a-w- c:\windows\system32\WSDApi.dll
2011-06-19 21:52:24 -------- d-----w- c:\users\doug\appdata\roaming\Malwarebytes
2011-06-19 21:52:16 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-06-19 21:52:16 -------- d-----w- c:\programdata\Malwarebytes
2011-06-19 21:52:13 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-06-19 21:52:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-06-19 21:49:54 172032 ----a-w- c:\windows\system32\wintrust.dll
2011-06-19 21:48:37 98304 ----a-w- c:\windows\system32\cabview.dll
2011-06-19 21:43:57 2421760 ----a-w- c:\windows\system32\wucltux.dll
2011-06-19 21:43:37 87552 ----a-w- c:\windows\system32\wudriver.dll
2011-06-19 21:43:18 33792 ----a-w- c:\windows\system32\wuapp.exe
2011-06-19 21:43:18 171608 ----a-w- c:\windows\system32\wuwebv.dll
.
==================== Find3M ====================
.
2011-06-20 01:54:37 319456 ----a-w- c:\windows\DIFxAPI.dll
2011-05-03 21:33:46 3484712 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2011-05-02 23:03:30 73320 ----a-w- c:\windows\system32\RtkCoInst.dll
2011-05-02 20:28:12 1004544 ----a-w- c:\windows\system32\RCoRes.dat
2011-04-29 13:25:10 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-04-29 13:25:09 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-04-29 13:24:50 214016 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-29 13:24:42 79872 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-29 13:24:40 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-21 13:58:27 273408 ----a-w- c:\windows\system32\drivers\afd.sys
2011-04-20 19:34:30 4106344 ----a-w- c:\windows\system32\RtkAPO.dll
2011-04-20 19:34:30 2161768 ----a-w- c:\windows\system32\RtkPgExt.dll
2011-04-18 23:50:00 1803608 ----a-w- c:\windows\system32\MaxxAudioRealtek.dll
2011-04-18 23:50:00 1725784 ----a-w- c:\windows\system32\WavesGUILib.dll
2011-04-14 14:59:03 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys
.
============= FINISH: 22:13:39.17 ===============