Two Computers - Two problems!

Status
Not open for further replies.
DDS log

DDS (Ver_09-09-29.01) - NTFSx86
Run by Jason at 14:55:38.73 on Fri 10/29/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1277 [GMT -4:00]

AV: McAfee Anti-Virus and Anti-Spyware *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe
C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\KADxMain.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Fisher-Price\FP3 Player\sspnotifier.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MSN Toolbar\Platform\4.0.0360.0\mswinext.exe
C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\DellAutomatedPCTuneUp\PTAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Renesas\Hew\AutoUpdate\AutoUpdate.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Java\jre6\bin\java.exe
C:\Documents and Settings\Jason\Desktop\dds.com

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = hxxp://127.0.0.1:4664/first_usage&s=YXxcioNoCdosDbr__diG3IU_95c
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: McAfee Phishing Filter: {27b4851a-3207-45a2-b947-be8afe6163ab} - c:\progra~1\mcafee\msk\mskapbho.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20100920231344.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5805.1910\swg.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll
BHO: MSN Toolbar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn toolbar\platform\4.0.0360.0\npwinext.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: The Weather Channel Toolbar: {2e5e800e-6ac0-411e-940a-369530a35e43} - c:\windows\system32\TwcToolbarIe7.dll
TB: MSN Toolbar: {8dcb7100-df86-4384-8842-8fa844297b3f} - c:\program files\msn toolbar\platform\4.0.0360.0\npwinext.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [DellAutomatedPCTuneUp] "c:\program files\dellautomatedpctuneup\PTAgnt.exe" /startup
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [DW6] "c:\program files\the weather channel fw\desktop\DesktopWeather.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /installquiet
mRun: [NVHotkey] rundll32.exe nvHotkey.dll,Start
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [Dell QuickSet] c:\program files\dell\quickset\quickset.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [KADxMain] c:\windows\system32\KADxMain.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [ECenter] c:\dell\e-center\EULALauncher.exe
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [PCMService] "c:\program files\dell\mediadirect\PCMService.exe"
mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [SSP Notifier] c:\program files\fisher-price\fp3 player\sspnotifier.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [MSN Toolbar] "c:\program files\msn toolbar\platform\4.0.0360.0\mswinext.exe"
mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
mRun: [Monitor] "c:\program files\leapfrog\leapfrog connect\Monitor.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [mcui_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [SunJavaUpdateSched] c:\program files\java\jre6\bin\jusched.exe
StartupFolder: c:\docume~1\jason\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dellne~1.lnk - c:\windows\installer\{0240bdfb-2995-4a3f-8c96-18d41282b716}\Icon0240BDFB3.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\renesa~1.lnk - c:\renesas\hew\autoupdate\AutoUpdate.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXE
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\jp2iexp.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://www2.snapfish.com/SnapfishActivia.cab
DPF: {4ECE056F-E50F-4F9D-B069-EB342D21F26A} - hxxp://www2.snapfish.com/SnapfishActivia3.cab
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6662.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\jason\applic~1\mozilla\firefox\profiles\3d4pks4r.default\
FF - component: c:\program files\mozilla firefox\components\Scriptff.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\msn toolbar\platform\4.0.0360.0\npwinext.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");

============= SERVICES / DRIVERS ===============

R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2010-8-26 386712]
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [2010-8-26 84072]
R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2010-1-8 380928]
R2 datunidr;DellAutomatedPCTuneUp UniDriver;c:\windows\system32\drivers\datunidr.sys [2007-8-23 5376]
R2 LeapFrog Connect Device Service;LeapFrog Connect Device Service;c:\program files\leapfrog\leapfrog connect\CommandService.exe [2010-7-28 1156440]
R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-8-26 271480]
R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-8-26 271480]
R2 McProxy;McAfee Proxy Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-8-26 271480]
R2 McShield;McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2010-8-26 171168]
R2 mfefire;McAfee Firewall Core Service;c:\program files\common files\mcafee\systemcore\mfefire.exe [2010-8-26 188136]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\common files\mcafee\systemcore\mfevtps.exe [2010-8-26 141792]
R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2010-5-14 249136]
R2 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\common files\microsoft shared\windows live\WLIDSVC.EXE [2009-8-18 1529728]
R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-8-26 55840]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2010-8-26 152992]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2010-8-26 52104]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-8-26 312904]
R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [2010-8-26 88544]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2009-11-19 135664]
S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [2010-1-2 18560]
S3 FOUSB;Flash-Over-USB Device Driver;c:\windows\system32\drivers\fousb.sys [2002-6-24 162540]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [2010-8-26 88544]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-8-26 84264]
S3 Normandy;Normandy SR2; [x]
S3 USBMON;USB Monitor Device Driver;c:\windows\system32\drivers\usbmon.sys [2008-2-13 162540]

=============== Created Last 30 ================

2010-10-28 22:42 256,512 a------- c:\windows\PEV.exe
2010-10-28 22:42 161,792 a------- c:\windows\SWREG.exe
2010-10-28 22:42 98,816 a------- c:\windows\sed.exe
2010-10-28 22:42 77,312 a------- c:\windows\MBR.exe
2010-10-24 13:35 0 a------- C:\install.rdf
2010-10-15 14:42 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2010-10-15 14:42 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-10-15 10:30 974,848 -------- c:\windows\system32\dllcache\mfc42.dll
2010-10-15 10:30 954,368 -------- c:\windows\system32\dllcache\mfc40.dll
2010-10-15 10:30 953,856 -------- c:\windows\system32\dllcache\mfc40u.dll
2010-10-15 10:30 617,472 -------- c:\windows\system32\dllcache\comctl32.dll
2010-10-06 20:32 <DIR> --d----- c:\windows\Cache

==================== Find3M ====================

2010-09-18 12:23 974,848 a------- c:\windows\system32\mfc42u.dll
2010-09-18 12:23 974,848 -------- c:\windows\system32\dllcache\mfc42u.dll
2010-09-18 02:53 974,848 a------- c:\windows\system32\mfc42.dll
2010-09-18 02:53 954,368 a------- c:\windows\system32\mfc40.dll
2010-09-18 02:53 953,856 a------- c:\windows\system32\mfc40u.dll
2010-09-01 07:51 285,824 a------- c:\windows\system32\atmfd.dll
2010-09-01 07:51 285,824 -------- c:\windows\system32\dllcache\atmfd.dll
2010-08-31 09:42 1,852,800 a------- c:\windows\system32\win32k.sys
2010-08-31 09:42 1,852,800 -------- c:\windows\system32\dllcache\win32k.sys
2010-08-27 04:02 119,808 a------- c:\windows\system32\t2embed.dll
2010-08-27 04:02 119,808 -------- c:\windows\system32\dllcache\t2embed.dll
2010-08-27 01:57 99,840 a------- c:\windows\system32\srvsvc.dll
2010-08-27 01:57 99,840 -------- c:\windows\system32\dllcache\srvsvc.dll
2010-08-26 17:16 4,886,528 -------- c:\windows\system32\dllcache\wmp.dll
2010-08-26 09:39 357,248 -------- c:\windows\system32\dllcache\srv.sys
2010-08-26 08:52 5,120 a------- c:\windows\system32\xpsp4res.dll
2010-08-26 08:22 173,056 -------- c:\windows\system32\dllcache\ie4uinit.exe
2010-08-23 12:12 617,472 a------- c:\windows\system32\comctl32.dll
2010-08-17 09:17 58,880 a------- c:\windows\system32\spoolsv.exe
2010-08-17 09:17 58,880 -------- c:\windows\system32\dllcache\spoolsv.exe
2010-08-16 04:45 590,848 a------- c:\windows\system32\rpcrt4.dll
2010-08-16 04:45 590,848 -------- c:\windows\system32\dllcache\rpcrt4.dll
2009-02-10 22:22 65,680 a------- c:\documents and settings\jason\temp.dat
2009-02-10 22:22 3,284 a------- c:\documents and settings\jason\temp2.dat
2008-12-23 16:49 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008122320081224\index.dat

============= FINISH: 14:58:44.12 ===============
 
DDS Attach.txt

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-09-29.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume2
Install Date: 2/8/2008 9:58:28 PM
System Uptime: 10/29/2010 11:04:08 AM (3 hours ago)

Motherboard: Dell Inc. | | 0WY040
Processor: Intel(R) Core(TM)2 Duo CPU T5470 @ 1.60GHz | Microprocessor | 1181/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 146 GiB total, 99.491 GiB free.
D: is CDROM (CDFS)

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1: 10/7/2010 9:01:18 PM - System Checkpoint
RP2: 10/15/2010 4:26:07 PM - Software Distribution Service 3.0
RP3: 10/24/2010 1:33:08 PM - Removed Ad-Aware
RP4: 10/24/2010 1:34:30 PM - Removed J2SE Runtime Environment 5.0 Update 6
RP5: 10/28/2010 10:42:44 PM - ComboFix created restore point

==== Installed Programs ======================

Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9
ANSYS Workbench Products 10.0, Educational Version
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Bonjour
Broadcom Management Programs
Browser Address Error Redirector
Compatibility Pack for the 2007 Office system
Conexant HDA D330 MDC V.92 Modem
Dealio Toolbar v4.0.2
Dell Automated PC TuneUp
Dell Network Assistant
Dell Support Center
Dell Touchpad
Dell Wireless WLAN Card
Digital Line Detect
Digital Locker Assistant
ERUNT 1.1j
FP3 Player
Google Chrome
Google Desktop
Google Earth
Google Toolbar for Internet Explorer
Google Update Helper
GPL Ghostscript 8.64
GSview 4.9
High-performance Embedded Workshop
High Definition Audio Driver Package - KB835221
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
IntelliSonic Speech Enhancement
iTunes
Java(TM) 6 Update 15
LeapFrog Connect
LeapFrog My Pals Plugin
LeapFrog Tag Plugin
Logitech Harmony Remote Software 7
Malwarebytes' Anti-Malware
MATLAB Student 7.0
McAfee Security Scan Plus
McAfee SecurityCenter
MediaDirect
MetaFrame Presentation Server Web Client for Win32
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft Default Manager
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Money 2005
Microsoft National Language Support Downlevel APIs
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Standard Edition 2003
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Miracle C Shareware Package
MobileMe Control Panel
Modem Diagnostic Tool
Mozilla Firefox (3.5.15)
MSN Toolbar
MSN Toolbar Platform
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB954459)
My Free Mahjong v.2.0
NetWaiting
NVIDIA Drivers
OutlookAddinSetup
QuickSet
QuickTime
RealPlayer
Remote Control USB Driver
Safari
SearchAssist
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player (KB979402)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
The Weather Channel Desktop 6
The Weather Channel Toolbar
Update for Windows Internet Explorer 8 (KB972636)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Use the entry named LeapFrog Connect to uninstall (LeapFrog My Pals Plugin)
Use the entry named LeapFrog Connect to uninstall (LeapFrog Tag Plugin)
WebFldrs XP
Windows Driver Package - LeapFrog (FlyUsb) USB (11/05/2008 1.1.1.0)
Windows Driver Package - Leapfrog (Leapfrog-USBLAN) Net (09/10/2009 02.03.05.012)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Live ID Sign-in Assistant
Windows Live OneCare safety scanner
Windows XP Service Pack 3
WinZip 14.0

==== Event Viewer Messages From Past Week ========

10/29/2010 11:00:47 AM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
10/29/2010 11:00:47 AM, error: Service Control Manager [7031] - The Windows Live ID Sign-in Assistant service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.
10/29/2010 11:00:47 AM, error: Service Control Manager [7031] - The McAfee VirusScan Announcer service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/29/2010 11:00:47 AM, error: Service Control Manager [7031] - The McAfee Services service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/29/2010 11:00:47 AM, error: Service Control Manager [7031] - The McAfee Proxy Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/29/2010 11:00:47 AM, error: Service Control Manager [7031] - The McAfee Personal Firewall Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/29/2010 11:00:47 AM, error: Service Control Manager [7031] - The McAfee Network Agent service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/29/2010 11:00:47 AM, error: Service Control Manager [7031] - The McAfee Anti-Spam Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/29/2010 11:00:46 AM, error: Service Control Manager [7034] - The SupportSoft Sprocket Service (dellsupportcenter) service terminated unexpectedly. It has done this 1 time(s).
10/29/2010 11:00:46 AM, error: Service Control Manager [7034] - The SeaPort service terminated unexpectedly. It has done this 1 time(s).
10/29/2010 11:00:46 AM, error: Service Control Manager [7034] - The NVIDIA Display Driver Service service terminated unexpectedly. It has done this 1 time(s).
10/29/2010 11:00:46 AM, error: Service Control Manager [7034] - The LeapFrog Connect Device Service service terminated unexpectedly. It has done this 1 time(s).
10/29/2010 11:00:45 AM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
10/29/2010 11:00:45 AM, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).
10/29/2010 11:00:45 AM, error: Service Control Manager [7034] - The Application Updater service terminated unexpectedly. It has done this 1 time(s).
10/29/2010 11:00:45 AM, error: Service Control Manager [7034] - The Advanced Networking Service service terminated unexpectedly. It has done this 1 time(s).
10/29/2010 11:00:45 AM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
10/28/2010 10:47:13 PM, error: Service Control Manager [7034] - The Dell Wireless WLAN Tray Service service terminated unexpectedly. It has done this 1 time(s).
10/25/2010 11:24:06 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: iaStor
10/25/2010 11:24:06 PM, error: Service Control Manager [7022] - The Windows Time service hung on starting.
10/24/2010 1:35:07 PM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found.

==== End Of File ===========================
 
Hi

Re-scan with Malwarebytes' Anti-Malware

  • Start Malwarebytes' Anti Malware (MBAM).
  • Click the Update tab again and then click the Check for Updates button to perform the database update.
  • When the update is finished, click the Scanner tab, select Perform Quick Scan and then click the Scan button.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Check all items except items in the C:\System Volume Information folder... and click Remove Selected.
    Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.
  • When completed, a log will open in Notepad. please copy and paste the log into your next reply.
  • The log can also be found here:
    C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt


Disable McAfee

Disable McAfee again.


Combofix

ComboFix SHOULD NOT be used unless requested by a forum helper!

Open notepad and copy/paste the text in the codebox below into it (do not include the word code):

Code: 
Folder::
c:\program files\Application Updater
Driver::
Application Updater
RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
Save the file as "CFScript.txt", and as Type: All Files (*.*) on your desktop.

CFScriptB-4.gif


Refer to the picture above, then save all work and close all programs including any open browsers(!) and drag CFScript onto ComboFix.exe

If Combofix prompts you to upgrade, please allow it.

When finished, it shall produce a log for you at C:\ComboFix.txt.

Make sure McAfee is enabled after Combofix is finished.


Please post:
  • the MBAM log
  • the Combofix log
  • Did any problems occur while following the instructions?
  • How is the computer running now? Are you experiencing any problems that you think are related to malware?
 
Last edited:
Running ComboFix now. Get the following message:

Rebooting Windows . . . Please wait
Please allow ComboFix to reboot the machine.
Warning !! Do not manually reboot the machine yourself
2. was unexpected at this time.


It's been sitting like that for about 30 minutes. I'll let it go for a while. Is this normal?
 
Hi.

If the computer is still not rebooted, then go ahead and poweroff and restart the computer. If necessary hold down the powerbutten for more than 3 seconds until the computer reboots, then post the logs from the instructions in my previous post.
 
MBAM Log

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4999

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

10/30/2010 2:21:03 PM
mbam-log-2010-10-30 (14-21-03).txt

Scan type: Quick scan
Objects scanned: 151547
Time elapsed: 11 minute(s), 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
 
ComboFix.txt

ComboFix 10-10-30.01 - Jason 10/30/2010 21:37:02.4.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1383 [GMT -4:00]
Running from: C:\Documents and Settings\Jason\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Jason\Desktop\CFScript.txt
AV: McAfee Anti-Virus and Anti-Spyware *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
.
 
vict0r,

I don't seem to be having any more problems. Google searches go where they're supposed to. Speed of surfing seems back to normal.
 
Hi.

The last Combofix run created a incomplete log.

Right-click the Start button and left click Explore, navigate to the following folder:

C:\Qoobox

Please post ComboFix.txt from that folder if found.

Navigate to the following folder:

C:\QooBox\LastRun

If there are any log files in that folder, please post them in your next reply.


Please re-run DDS and post DDS.txt only.
 
There are no logs in C:\Qoobox. There are no ComboFix.txt files in LAstRun. The only files in LastRun are:

---- CregC.old (0 size) ----

---- drev_.dat ----
"c:\program files\Application Updater\ApplicationUpdater.exe"
"c:\program files\Application Updater\config.ini"
---------------------------------------------------------

---- drev_F.dat ----
"c:\program files\Application Updater\ApplicationUpdater.exe"
"c:\program files\Application Updater\config.ini"
----------------------------------------------------------

---- RenVDel.dat (0 size) ----

---- SvcTarget.dat ----
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
"-------\Legacy_APPLICATION_UPDATER"
-------\Service_Application Updater
-----------------------------------------------------------

---- zhsvc.old ----
azarazqa
MSWSAG
wsmsag
Protectedstoer1
mdhsh
IcePoint
SERVICEASPXPHELP
Nskyserver981
servehhgs
boorserverwinls2
wwwdrtghyuj
svices
2180
Realtek HD Audio Control Panel1
NI_security
KKCC
TreasClients
MSWEBURL
Secondary Logon (seclogon)
Server (lanmanserver)
NVMINI
NPCLSVC
AlerMang
hrwix
SafeMon0
seneka
e
d7b49fa
KSPOOLDAEMON
Remote Acess Connecion Manag
c39e8db
:: ISODRIVE
Windows Tribute Service
ADMIN
WINSGON
E4A12
TCPIPSVC
MCXSVC2
MCXSVCM
Wscsvic
Hardwrd
Powers
DNS Client (Dnscache)
l33t
sK9Ou0s
dbeaf7d
SVCHOTS
1
MyDog
NT LM Security Support(RPC)
NETSERVICEDDDOWNER
MSKMRXKU
ANTISG
PROTECTEDSTOER3
Mgcscrd
ati6agxx
QUADRASERV.SYS
QUADRASERV
wrapk
netwp
msvtch
6457aed
D812A079
Winxc36
Windows Firewall
ATI2TFXX
_wff
b160485
Windows_ServerDdos
d435fd4
de8296f
f35ee9e
WinSpoolSvc
NET Service
RPCHK
pciidexx
F28907D
NETABSTWORK
NsPsDk00
NsPsDk01
NsPsDk02
NsPsDk03
NsPsDk04
NsRk1
B71FE93
Logical Disk Manager (dmserver)
System Event Notification (SENS)
Windows Audio (AudioSrv)
Remote Procedure Call (RPC) (RpcSs)
Network Location Awareness (NLA) (Nla)
Distributed Link Tracking Client (TrkWks)
Security Accounts Manager (SamSs)
Telephony (TapiSrv)
Themes (Themes)
Task Scheduler (Schedule)
Application Layer Gateway Service (ALG)
dll32
disks01
OneStep Service
pvjahvfb
B1A18A3E
Windows Update Online
SHOST
netsvcs_0x0
b770ca2
Routing and aemote Rccess
wintm
F58A3080
331C5BDBF949FDDD96EE38D57CF9DB2A
UACd.sys
SQUELLABCD
System Service
.Net CLR
ati1fmxx.sys
DHCPSRV
3D Studio Max
sectolr
BaiduPath
ccosmSrv
ILVMONEYDRIVER53
WinHost32Svr
SYSDRV32
DEFAULTLIB
SERVERTIME
MSDDLL
ati2sexx
MYLOVERSYS
Network Service
DAC970NT
swapm
Java2
gorshk
ZumieSearch Service
9H9O9Y
surrd
BADUT
PWBVIO
NATIONALV4.0
Storm DDOS Service
bfgse244
ywbviooa
JQLK
DEFTAF
MDVMGR
WINSCM
BEVTSERVICE
Winfn26
RKHIT
Google Awards Online Partners
BEEPS
TXPLATFORM
Logical Disk Manager (NDIS)
NFR.SYS
sxtxxeu
TCIM
CPUinfo_Server
rehebt
ZG
SAFEMON1
acpu.sys
53472FC0
WIN32X
15964A80
IEXPLEROR
NLPSA
MSVQAQU
WINMGMTEX
mssuhf
ATI2XHXX
ATI0QAXX
RAAUTO
ati4irxx.sys
TAKXX
TAKFL
netmantow
SOFTYINFORWOW1
ENTSERVER2009
sopidkc
DHCP Clientde
GanDiao
WMISYS
ZX
botdrv
SVCWINSPOOL
WINHELP32
mtlrd
Server
tdctxte
AT1394
BS_SYS
MSTD
ytmas
DelphiService
SMVSS
LFDL
ProxyClientService
sfc
A03107C0
acpi32
fips32cup
WindowsEntServer2008
port135sik
ati64si
netsik
securentm
ksi32sk
i386si
ws2_32sik
systemntmi
nicsk32
MediaPlayer Serial
ati0rxxx.sys
ati4agxx.sys
ati8cixx.sys
.norton2009reset
ip_fw
ipfw
SName
ASHEVTSVC
pcm1394
SARG0S
KingDuuBa A
MYS Mutex Algorithm Service
SeekeenSrch
msncache
avast!antivirus
ntalme
feos Service
bfddos;
clddos0Nameeeee
bfddos
AVPsys
UPDATEDATA
IOFILTER
bqwdxh
ipfwrd
myname
lxfzge
nationalwgw
HISERVER
glaide32
WM1984
sndintd
kavsys
111111s1ro1s1a
11Fßä#·ºÄÖ`I
Windows Hosts Controller
isadisk
anftdird
Event Log (Eventlog)
WinErp
podmena
podmenadrv
klan
porting
ReWWW
PCChips
jmnhhgrtja35ujghuykj6r8io9iujg80
driverdrv
networkanalysisservice
jsr468ijdfghfjsw3rw3i6tjag80
facey
createpli
Medry
bdeiptui
nsrtpr
MsBdServer
dcfwssvc
msscpsvc
winspool
sys
sysdrv
{79007602-0CDB-4405-9DBF-1257BB3226ED}
{79007602-0CDB-4405-9DBF-1257BB3226EE}
ramdma
mmcta
ntpdxt
sphub
security sdns wsili
pcmstub
IO
helpps
ati64si.sys
ie_winservername
sfxdrv
sfx
ASP State Service
ufad-dns60
ASPX
dian
aticvvx
tagg
rbadza
TS45
usbewt
SWFDrv
usbwte
Windows_XP
mintroot
:: NWCWorkstation
netcard
protect
AIC32P
qq.exe
gbvesq
browserctl
browserctldrv
AntipPro2009_12
service
ALEROM
GUIZ
WmiSvc
DNT
Services32
qq2
NETIDE
ZJHBOERUWRN1
XTTP6J11X
dansl
windowete
bbvipctlx
pptp32.sys
pptp64.sys
Windowsds
wssdp
SAVESOLDIERSVC
vb
oios
sdfgos
tydos
bdihna
privtorador
HTTPDebugger
SaveDefenseSvc
AntipPro2009_100
MediaCenterSystem
AntiArps
netsdk
Windows MSI
Windows Time Acquisition
cek
SystemCopSvc
QuickHealCleanerSvc
ComServices1
Kwinzy Service
kernel64
mfc64
putaodrv
myprot
winsccom
SAVEKEEPERSVC
mndisk
DrvKiller
icq
tmxev
ffgfghjkk
tbo
KillProc
Laji
nslxvw
360 udpate file
Nationalhak
ddnsfilter
MD SERVICESB1
webserver
NUPS
Lgical Manager Administrative Services
MICROSOFTWORD
Microsoftbill
LOGICALDISK
fioo32
rgr
mdtdisk
securitysoldiersvc
VCMHS
securewarriorsvc
isasdk
Nup
kvxsa
wmitpfs
drvftl
ndisflt
ati0ekxx
ati0bixx.sys
ati0nuxx.sys
ati0ubxx.sys
ati0vexx.sys
ati3ucxx.sys
ati4wdxx.sys
ati5pwxx.sys
ati6gnxx.sys
ati6iqxx.sys
ati7lrxx.sys
AntiPol
ezdgjg
WINSECLOGON
deskadp32
ialdnwxf
NATIONALAHM
Ati2et
WmiSvc.sys
VMWARESERVICE
XX
SSHNAS
win
wnh
MONITORWMIDE
MSDMS
SLENUMHOOK2
MSTSE
GDOED58
Windows Driver Controler
%%%
FireFox2
BtwSrv
winhelp
OSEvent
Himed
.360MICROSOFT
fastnetsrv
ctflse
Server30
DARKCODERSC
PDEnum
bk
grsg
REFRVXX
CS1.3
CS1.4
cs1.5
BackGroumd switch
skyxpserver
smess
SVCHOSTS
SYSMON32
NetLogin
GS
UidSrv
MsiSrv
NetActivator
LmHostsSpooler
NATIONALUAP
MedaCente
DESCRIPTIONHERO
mstsecs
tdidis32.sys
The Bestate
msrvd
NATIONAL2.0
NpcS
WSSVC
STEC3
SVJVPN
stmsecs
MSOFT
AVAST!CACHEAGENT.EXE
AXAAHC
FE
{40263670-A9F5-4FDF-B6F57245EA67ACD6}
NTService
NetBot_Attacker
unpr
Net_Login
BRServerName
FixMon
FNDC323
Remote_Server_2008
NTEAGNLER
Sanser
PB
SOUNDMAN
compbatc
task manager
*00D1*00B8*00C0*00D7
ASYNCMACQ
360safe update
netra
HCPIDESK
Comias70
uniime32
Windows Recycled Services
WINSTS
VSSRDSessMgr
FileInterceptor
COMEVENTPS
DLTCSVX86
DTCAEL86
IMAPIDZSVR
MSSCAAMH
msbuvg
Service2009
FUCKJSS
niuxs
regul1r
becincontrol
WademotaSter
OUTLOCKCOM
TKKOBE
ACPI64
Mswam
Chinese mobile
CLIPBOOOK
MASDSSDFY
WSSDFSDFRV
Windows_rejoice2009
Drive
VSCHOST.EXE
ziucvugkdjiut7
zrqpwlydsdqdn9
NokcSys
Sansex
dfdsfdsfs
WINSRIR
360svc
HOSTSE
Remote Procedure Call (RPC) Loctaor
.I8042PRT
Winldr
Inetsrv
winmow
BROWSERS
{650CD884-7326-4D89-ADFC7CA2427865C3}
{F24AF462-E779-4606-9EB4E42EE51187DB}
xtpin
Media_Ser
jaond
HAOT
PSDRV
VSF
Comfavtwps
Seekdns Service
baidu
calbzr
PLAYSERVNET
WinRing0_1_0_1
Netprotocol
usbnat
rend32
SPService
Windows_rejoice2007_101
UserServices
WMII
lich
MgcRc
wihpg
msvqln
amsmpsge
360SVCS
GrayPigeonServer2.03
winlogin save server
Wyeke Service
MediaCenterfsf
IRAT
Win l4oahder
NetRunTime
CHOOOK
QIANM
SHENHU
MYWA66
NetConnections
VSSPWG
{B0A506BE-18D9-41A3-992238DB29BBC165}
SSSWXPLOSRE
WMIAQSRV
MSRESTORE
MSHDSS
a t
WmiConfig
NATIONALJVK
Nrtsc CLR
BrowserHeler
shadowsafe
WebSvc
riodrv32
Windows USD Service
Network Workstate
MSTART
klwbfse
ReSesMgr
KKDC
wocaonima
Wexplorer
Kuivccccs
DaVinciDr
AppropSren
BeckGround switch
nsvcs_32
MS Media Control Center
K10
Rav KSWebShields
beisn
DBS_Server
srvwinupd
KGootkit
NesSrv
warible
SLENUMHOOK2
qvrbuw
SkypePM
RSVPNetman
lgstar
WindowsHelpService
ofcAuth
netstart
winfdd
SADFSDAFA
DMSVER
net1.exe
p8SK88
Qycx Network Agent
dfffddd
UPSWTS
RaSx7tX
Manpndo32
SesEnv
NdisFileServices32
Zwunzi Service
bitscevc
FENSHA
SOFTIC
npfq
winkkd
Windows Service Update
BET
kpsp
lstis
ZwangiSearch Service
ZwangiSrch Service
Zwangi Service
mf2ehg02z
usbembed
Mseu
UnzipService
Sanseex
Workstion
WinSvc
BitDefender Internet
bren
Kel
svlostServices
Remote_Server_2008
Fingrwx
ACCOPT
NtLmSspEventlog
userinit
H8SRTd.sys
HHSERVERNAME
mspk
AdbUpd
zagn
fadsf
tkkobe
360SE
ComnCena
CDRALW
irptcp
Utility Mangserver
gtdkjf
service_name
vrdnap
nmcyiw
yITdOyJTf
snsxx
bnui
faef
winxps
AxPsHook11
seagate
OPE005
langwrbk32
svuhost
msobj
ConseRom
Cireamin
dibrosvc
psvra
Honrader
Belwochel
bnserv4
bnserv3
bnserv2
bnserv
miniwdm
remote system
Winet
_VOIDd.sys
c_iscii32
winlogin Acquisitionl
pxn
brtw
FNRC
FORTER
GateWinH
mnsrvc
winmmdriver
WMISMG
Wostswos
Nationalatl
Natjqmasat Instruments Domain
seace
CoralQQ
carnj
windowsremode
realplayer.exe
miser
MCIDRV_2600_6_0
peersvc
Atfa
fpxmbz
BtwSvc
suiao
duomi
vxkni
mysm
dticem
Thunker
Corpse10
Nationalerf
devkxrmsghookdrv
51RemoteServer2010
WINXPR
NvCplDaemon
K4hostEL
oko6
zhiirth
GoogleUpdateBeta
4DW4R3c
okosrv
lrutri
rqklrw
DNSHost
winservice4000
Mesosenger...
Dncnnovus
kb
sam_scm
IPS Service
ZXSDERFBUKJFYSHLHDFRSTDZHDFASHTG
sever tool
pptp32
pptp64
MIROSOFT3
NMlivetor
Magent
pspmhvc
888888888888
ZhuDongFangYu
srvoko6
msisam
111111
beanfun
Internet_Service
Serverk3
sysinside
ProcEvent
klpsrvc
Windows adoNetAtoCAD
Cuzinho
AgentMNormalService
seleCom
compbatcDrv
myTest
NsReSDev1
abp470n5
Remote Logicar Autol Manager
SheellHWD
neth32
Windows Repair
Microsoft Vista
Browse
113031ERRORCONTROL
DAEDriver54
byrtgdehb
The Wtools
Rising Scan Service
BrowserZinc Service
Kwanzy Service
crssss
AMBFILTR
AMBFILTQ
Tmp804
rwnh32
Application Management
Engine
Wnetwiss
10
Sans
d3dramp32
dnf
kcb6403
occqve
WindowsCad32
avm
MediaService
Windows_kav6.0.1.411en
SystemFilse
Windows AutoUpdate
MacroISer
cpqoko6
DltsSrv
Avsdx
Explarer
Windows Sound Man
apto6ko
captcha
veast
sfadz
GrayPigeonServer1.23
CLEANSRV
WINHELPER
Lenovo Process
SystemsMon
zz
carlhos
dwbf
MediaCcbexy
WinHelpzd3181
NetCreate1
Nationala
NetProte
gaw56ehdfskgluydfa
jucheck
SDPrimer
QL600OKO
SWOKO
kaspersky 7.0
Ms-zx_Srv
\L968P36
HYNGL*00A1*00A1CPU
Downloader
Ms-wow_Srv
DescriptionHero2
Seekeen Service
PCRatStact
Nartional
Rrus
monhotclipalert
SystemMonsinc
WinUpdate32
7apodlasd
Network System Provider
WinUpdSrvc
instal
ATAPIDRV
darkness
Win2Help32IE
dac6oko
i600oko
rpcmgr
MACROADSER
AFPAnsi
serviceJS
GFltDrv
dongtian
privtorador2
spytrky
usbf27
aaaaashowna2005
winszker
cpuxp
Windows Inets
WMSysPr9.sys
atualizada
Windows UxxSB21 Service
Microsoxft Corporatieo
npkDcomClient
PRAGMAd.sys
tpa3f21
dpti3o
afwoko
URLDrv
Java Service Launcher
Firefox
RdLst743
birokod
elantos
sdfsdf
svchost*
SVCHOST*00A0
Secdrvq
AfxWin_Sys
vfsd
AlYacDcomClient
AAA
dmoko
ipokoraid
Nationalfyy
www.skdos.com
BITSProManger
ssss
WINSER_0x0
SRVStarter_scvhost2
ftpserver
sff
VMX64O
w83c600
xplode
sjrphlrt
Ms-tl_Srv
alienigena
AA
BBB
FSE
GATEWADSVC
MEBUACENTER
MECLIENTTER
MEDIACENTERRS
MEDPALYNTER
MEEDIDCNTER
MESTOPTER
MSEES360
MUPPENTER
RCMDSVC
SUPPORTENTER
SWITCWAYS
SWITCWSVC
SWITCWYSVER
TES23
TEST2
TEST22
WEEREW360
Mriver360
AfxWin_Sys_360Safe
WSALG2
meteu
ND
G033
wademotasterr
MPRVSRV
vsrfr
F00118218K
DPhyDiskSys
BeRServerName
STvcSV
TVicComm
svcmsdebug
unikorn
SVCMSV32
SVRWSC
aladdins
haspntt
National Instruments Domain ServNationaltlb
Windows_2010
yeshack
netsvsc
peresvc
usbxbox
sproeval
deed
IcyHeart
safeg
noskrnl.sys
360data
DistribClient
MedisaCqghbz
WindowsAc
ghjghj
ZV2Z8H
Secdrvr
WmiApsrv32
NTFS-Drivers
evilfvck3rz
Zsvipbanykcx_Service
JJJ
Ati HotKey Po11er
WinMSS
Windows_rejoice2007_45
Windows_rejoice4.9
QQ Music updates
A3X
yoyoddos
iuinawot
rianbow
AVFMON
Kcmdsvc
OSS
flexsrv
hasplic
Google Manager
sadfsadf
MSIU-4c4ed5a0
TORO
DHCP Optimize Service
MSWU-4c4ed5a0
DHCP Service
MSWU-4c4ed5a0
rejoice
_sv_
Ntfscore
winlogin Acquisition
krml360svc
guardgwpie
PeachService
SpywareCleanerService
RadioSvr
MediaCjaoyy
Follower
GMPNSN
vvv
vcmdsvc
tcppid
gthkfdo
fioo64
dddd
hkayh
LCJ
PDRV
MediaCpfbgb
CMD
IEMaoSvc
System svchosy
soaap
Jxfhack Service Manager
cccc
KwinzySrch Service
MediaCoqmew
hhh
360syn
ssa
applicad
ISU
WIN132
MSWA-4C4ED5A0
Windows_servers
Wimentelp32
panp
WstinH32
Switcwaysv
Wins27y232
Wndoelp32
WiettHelp32
360
Wcumep32
WiAdmini32
Wientslp32
bb
WinH232
Machinemdsvc
WincumHelp32
WsteHelp32
333
Micros
Windows XP sp4
WIDESKLP32
wyssew360
REMPROR
mmandsvc
aaaaaa
zServic
cc
RRRR
Wmep32
SXX
Windows_webserver
DcomCopyNpk
jew.sys
kexserv
kxesrev
PfService
winnking64
Mdlea
kaxujku
111
SafePrecgjxs
ScdSvr
pmf84f8
theurlwd
NAPRSER5102
AEEU
lendot
Ftware Qhadw Bopy Provi Stoped
KtmSvc
SmbApSrv
Systemsonsw
nndrv
NDRV
BN
VKBUABRHHEJ
Service Support
SDNSSec
ccService
mstss
NPI
winxpsh
WinHelp3223
CyService
Windows System Updates
abcd.sys
BarQuery Service
fff
wz32
winmgmtThemes
viddev
Err Reporting
WademotaSterree
MRxCls
MRxNet
V2Z8H
mpr_freader
netsvcs_v0x0
ZSDFG
AVAYASUPER
Mecjshzocano
MeuoaCazbxu
mediacentercs
Remote Rss
.Net C2LR
Duzcenves
chsbrb system provider
ssx
UrlLogger
SysResume
WindowsEntServer2009
tomcat6g.dll
ZDADFCVBTLZXKG.DLL
sssss
Winupnet
hi
dasd
ssp32
bord_007
NetLog
Nlaseclogon
ej1ieiaed9
TCPIP Pass-through Filter
BOOT32
SDMAPI
IEProtector
sshi
SSH
Wib510684p32
Wib110684p32
Wib3684p32
amsint32
ipsock
ZinkSeek Service
dobi
OBI
Qvod play
dll_reg
Window Remote Service
RavTaskces
mis
Sistema
360anquan
Parameters
Abdellatif-181
GTEY
WWZS
eee
Window Service SYSTEMS
aclick
rcmdsvcb
werrtwt
tgi
ttgi
QueryExplorer Service
\hide_evr2
hhrm
hrm
DHCPCom
Distribueoo
JHYUIOPEWFJESWEDAD
sdxccx
mas
mmas
MediaSerial
WinDiy
Ati2s
FindXplorer Service
ddev
dev
PhyDMACC
Dz_V!rUs
R6102
RINMHRD
zgkn
Ipnet
usnjsvc
SMITH8521472
Internet Explorer sx
smmservice
360iaCqhjrn
hideproc
DisburseAdvisory
SpeleologyRue
ScoreScore
DNS Serial Number Service
Microsoft Device Manager
corevservice
tsk
ClausDisk
ClopSrv
CCTest
winmcss
RavMonDt.exe
RavMonDz.exe
sed
ssed
LDR7X
IE Agent
sswe
SWE
ll_reg
JDLQDJ.EXE
Winkrb
SysCache
NetHomeIDE
RPZO
TSXZ
Brteadame
HookPool
systeqwice
tcpv6srv
eq2soft
TabDiscover Service
system Tools
360afe
ZXSDERFBUKJFYSHLHDFRSTDZH
Distribuqvi
W32QProtectSys
banking
windump
Mirzoochi
Merziche
I00097921K
srv32
MMRZICHE
MediaCepbju
Mbzuchi
MIIRZUCHI
MediaCsakwx
a5
a6
a7
a8
dfhs
ccow
cow
Windows_
nvhlpsvc
ttt
AS
mck3031
pintinhogrande
system64y
skrghs
hmqxfp
TrkNetsSvcs
MEDIACALJHE
WMISBUS
SampleService
www
qao6e6afeupyza2
Logitec
vdr
vvdr
AltraWeb
wuauservcom
SYHDIGI
webclent
WindowsUtility
nvtbios
WZS
poi
ppoi
Winkbji
Winknb
Winknh
Winkon
Winkoo
Winkpd
Winkwn
Distribuahh
GSYY
T
fyddos_svcname
WinNTsystem operation
microtools
WBuffer
MiaoSha
JavaQuickazdd
Extensible
ipsecs
Network Location.
ALTHEMEHELPER
DcomLeunch
Windows_rejoice47
6to4
IAS
Application Updater
npf
NDISRD

----------------------------------------------------------
 
DDS log:


DDS (Ver_09-09-29.01) - NTFSx86
Run by Jason at 22:27:21.34 on Mon 11/01/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1334 [GMT -4:00]

AV: McAfee Anti-Virus and Anti-Spyware *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe
C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\KADxMain.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Fisher-Price\FP3 Player\sspnotifier.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MSN Toolbar\Platform\4.0.0360.0\mswinext.exe
C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\DellAutomatedPCTuneUp\PTAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Renesas\Hew\AutoUpdate\AutoUpdate.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\Jason\Desktop\dds.com

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = hxxp://127.0.0.1:4664/first_usage&s=YXxcioNoCdosDbr__diG3IU_95c
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: McAfee Phishing Filter: {27b4851a-3207-45a2-b947-be8afe6163ab} - c:\progra~1\mcafee\msk\mskapbho.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20100920231344.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5805.1910\swg.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\dell\bae\BAE.dll
BHO: MSN Toolbar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn toolbar\platform\4.0.0360.0\npwinext.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: The Weather Channel Toolbar: {2e5e800e-6ac0-411e-940a-369530a35e43} - c:\windows\system32\TwcToolbarIe7.dll
TB: MSN Toolbar: {8dcb7100-df86-4384-8842-8fa844297b3f} - c:\program files\msn toolbar\platform\4.0.0360.0\npwinext.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [DellAutomatedPCTuneUp] "c:\program files\dellautomatedpctuneup\PTAgnt.exe" /startup
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [DW6] "c:\program files\the weather channel fw\desktop\DesktopWeather.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /installquiet
mRun: [NVHotkey] rundll32.exe nvHotkey.dll,Start
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [Dell QuickSet] c:\program files\dell\quickset\quickset.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [KADxMain] c:\windows\system32\KADxMain.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [ECenter] c:\dell\e-center\EULALauncher.exe
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [PCMService] "c:\program files\dell\mediadirect\PCMService.exe"
mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [SSP Notifier] c:\program files\fisher-price\fp3 player\sspnotifier.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [MSN Toolbar] "c:\program files\msn toolbar\platform\4.0.0360.0\mswinext.exe"
mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume
mRun: [Monitor] "c:\program files\leapfrog\leapfrog connect\Monitor.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [mcui_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [SunJavaUpdateSched] c:\program files\java\jre6\bin\jusched.exe
mRun: [combofix] c:\combofix\cf21580.cfxxe /c c:\combofix\Combobatch.bat
StartupFolder: c:\docume~1\jason\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dellne~1.lnk - c:\windows\installer\{0240bdfb-2995-4a3f-8c96-18d41282b716}\Icon0240BDFB3.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\renesa~1.lnk - c:\renesas\hew\autoupdate\AutoUpdate.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXE
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\jp2iexp.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://www2.snapfish.com/SnapfishActivia.cab
DPF: {4ECE056F-E50F-4F9D-B069-EB342D21F26A} - hxxp://www2.snapfish.com/SnapfishActivia3.cab
DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - hxxp://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6662.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\jason\applic~1\mozilla\firefox\profiles\3d4pks4r.default\
FF - component: c:\program files\mozilla firefox\components\Scriptff.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\msn toolbar\platform\4.0.0360.0\npwinext.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\mozilla firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");

============= SERVICES / DRIVERS ===============

R0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2010-8-26 386712]
R1 mfetdi2k;McAfee Inc. mfetdi2k;c:\windows\system32\drivers\mfetdi2k.sys [2010-8-26 84072]
R2 datunidr;DellAutomatedPCTuneUp UniDriver;c:\windows\system32\drivers\datunidr.sys [2007-8-23 5376]
R2 LeapFrog Connect Device Service;LeapFrog Connect Device Service;c:\program files\leapfrog\leapfrog connect\CommandService.exe [2010-7-28 1156440]
R2 McMPFSvc;McAfee Personal Firewall Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-8-26 271480]
R2 McNaiAnn;McAfee VirusScan Announcer;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-8-26 271480]
R2 McProxy;McAfee Proxy Service;"c:\program files\common files\mcafee\mcsvchost\McSvHost.exe" /McCoreSvc [2010-8-26 271480]
R2 McShield;McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2010-8-26 171168]
R2 mfefire;McAfee Firewall Core Service;c:\program files\common files\mcafee\systemcore\mfefire.exe [2010-8-26 188136]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\common files\mcafee\systemcore\mfevtps.exe [2010-8-26 141792]
R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2010-5-14 249136]
R2 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\common files\microsoft shared\windows live\WLIDSVC.EXE [2009-8-18 1529728]
R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-8-26 55840]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2010-8-26 152992]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2010-8-26 52104]
R3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-8-26 312904]
R3 mfendiskmp;mfendiskmp;c:\windows\system32\drivers\mfendisk.sys [2010-8-26 88544]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2009-11-19 135664]
S3 FlyUsb;FLY Fusion;c:\windows\system32\drivers\FlyUsb.sys [2010-1-2 18560]
S3 FOUSB;Flash-Over-USB Device Driver;c:\windows\system32\drivers\fousb.sys [2002-6-24 162540]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 mfendisk;McAfee Core NDIS Intermediate Filter;c:\windows\system32\drivers\mfendisk.sys [2010-8-26 88544]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-8-26 84264]
S3 Normandy;Normandy SR2; [x]
S3 USBMON;USB Monitor Device Driver;c:\windows\system32\drivers\usbmon.sys [2008-2-13 162540]

=============== Created Last 30 ================

2010-10-30 21:32 <DIR> --ds---- C:\ComboFix
2010-10-28 22:42 256,512 a------- c:\windows\PEV.exe
2010-10-28 22:42 161,792 a------- c:\windows\SWREG.exe
2010-10-28 22:42 98,816 a------- c:\windows\sed.exe
2010-10-28 22:42 85,504 a------- c:\windows\MBR.exe
2010-10-24 13:35 0 a------- C:\install.rdf
2010-10-15 14:42 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2010-10-15 14:42 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-10-15 10:30 974,848 -------- c:\windows\system32\dllcache\mfc42.dll
2010-10-15 10:30 954,368 -------- c:\windows\system32\dllcache\mfc40.dll
2010-10-15 10:30 953,856 -------- c:\windows\system32\dllcache\mfc40u.dll
2010-10-15 10:30 617,472 -------- c:\windows\system32\dllcache\comctl32.dll
2010-10-06 20:32 <DIR> --d----- c:\windows\Cache

==================== Find3M ====================

2010-09-18 12:23 974,848 a------- c:\windows\system32\mfc42u.dll
2010-09-18 12:23 974,848 -------- c:\windows\system32\dllcache\mfc42u.dll
2010-09-18 02:53 974,848 a------- c:\windows\system32\mfc42.dll
2010-09-18 02:53 954,368 a------- c:\windows\system32\mfc40.dll
2010-09-18 02:53 953,856 a------- c:\windows\system32\mfc40u.dll
2010-09-01 07:51 285,824 a------- c:\windows\system32\atmfd.dll
2010-09-01 07:51 285,824 -------- c:\windows\system32\dllcache\atmfd.dll
2010-08-31 09:42 1,852,800 a------- c:\windows\system32\win32k.sys
2010-08-31 09:42 1,852,800 -------- c:\windows\system32\dllcache\win32k.sys
2010-08-27 04:02 119,808 a------- c:\windows\system32\t2embed.dll
2010-08-27 04:02 119,808 -------- c:\windows\system32\dllcache\t2embed.dll
2010-08-27 01:57 99,840 a------- c:\windows\system32\srvsvc.dll
2010-08-27 01:57 99,840 -------- c:\windows\system32\dllcache\srvsvc.dll
2010-08-26 17:16 4,886,528 -------- c:\windows\system32\dllcache\wmp.dll
2010-08-26 09:39 357,248 -------- c:\windows\system32\dllcache\srv.sys
2010-08-26 08:52 5,120 a------- c:\windows\system32\xpsp4res.dll
2010-08-26 08:22 173,056 -------- c:\windows\system32\dllcache\ie4uinit.exe
2010-08-23 12:12 617,472 a------- c:\windows\system32\comctl32.dll
2010-08-17 09:17 58,880 a------- c:\windows\system32\spoolsv.exe
2010-08-17 09:17 58,880 -------- c:\windows\system32\dllcache\spoolsv.exe
2010-08-16 04:45 590,848 a------- c:\windows\system32\rpcrt4.dll
2010-08-16 04:45 590,848 -------- c:\windows\system32\dllcache\rpcrt4.dll
2009-02-10 22:22 65,680 a------- c:\documents and settings\jason\temp.dat
2009-02-10 22:22 3,284 a------- c:\documents and settings\jason\temp2.dat
2008-12-23 16:49 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008122320081224\index.dat

============= FINISH: 22:28:26.03 ===============
 
Hi.

I'm sorry for the delay. I haven't forgotten you and will post the next set of instructions as soon as possible.
 
Hi

The Combofix script worked, we just didn't get a log. :)

Please post back one more time to confirm that you have read this post.


Uninstall ComboFix

Click on Start >> Run..., copy and paste the following line into the run box, then click OK:
ComboFix /Uninstall
Note: there's a space between "ComboFix" and "/Uninstall".


Fix HijackThis entries

Download and install HijackThis. It will create a HijackThis icon on the desktop, double click the icon to start HijackThis

This will remove the startup entry of the combfix batch file (leftover) and the automatic Erunt backup at every logon:

  • From the Main Menu, click Do a system scan only
  • When the scan finishes...Place a check mark next to the following entries (if present).
  • Note: Only check those items listed below.
    Code: 
    O4 - HKLM\..\Run: [combofix] c:\combofix\cf21580.cfxxe /c c:\combofix\Combobatch.bat
O4 - Startup: ERUNT AutoBackup.lnk = c:\program files\erunt\AUTOBACK.EXE
  • After checking these items... CLOSE ALL open windows except HijackThis.
  • Click the Fix Checked button to remove the entries you checked.
  • Choose YES when prompted to fix the selected items.
  • Once it has fixed them, close HijackThis.


Delete the following tools

TFC is a great tool for you to keep and use on a regular basis. Please delete the following tools:

TDSSKiller
DDS
RKUnHooker
MBRCheck


Update Windows and Internet Explorer

Update Windows and Internet Explorer to protect your computer from malware. Please go to the windows update site to get the critical updates. Repeat this update process until no further important updates are offered.


Upgrade the Adobe and Java installation

Out of date Adobe and Java installations pose a security risk. They can be used by malware as a means to infect a computer and or re-infect.

Uninstall Adobe Reader 9 and Java(TM) 6 Update 15 in Control panel -> Add/Remove programs.
Reboot your computer and delete this folder if still present:
C:\Program Files\Java

Download and install Java Runtime Environment (JRE) 6 Update 22 (15Mb)
Download and install Adobe Reader (>50Mb), make sure that you uncheck Free McAfee® Security Scan Plus before you download. Uncheck to install any toolbars during the install.

Note: Foxit Reader (~5Mb) is a smaller alternative to Adobe Reader, it uses a lot less resources. You can download the standalone version (no installation required) in the following link: http://cdn01.foxitsoftware.com/pub/foxit/reader/desktop/win/4.x/4.1/enu/FoxitReader411_enu.zip


Your computer now appears to be malware free. The logs are clean. Good job! :)

Please follow these simple steps in order to keep your computer clean and secure.


Keep your system updated:

Make sure automatic updates for Windows XP is enabled to get the latest patches from Microsoft to fix bugs and security holes:

  • Go to Start > Control Panel > Automatic Updates
    1. Select Automatic (recommended) radio button if you want the updates to be downloaded and installed without prompting you.
    2. Select Download updates for me, but let me choose when to install them radio button if you want the updates to be downloaded automatically but to be installed at another time.
    3. Select Notify me but don't automatically download or install them radio button if you want to be notified of the updates.


Keep your non-Microsoft applications updated as well:

Microsoft isn't the only company whose products can contain security vulnerabilities, to check for other vulnerable programs running on your PC that are in need of an update, you can use the Secunia Software Inspector - I suggest that you run it and install the suggested updates at least once a week.


Consider using the following programs to secure your computer further:


  • Malwarebytes' Anti-Malware
    Update Malwarebytes Anti-Malware and perform a quick scan 1-2 times a week.

  • Install and use Spybot Search & Destroy for the added protection
    Instructions are located here. Make sure you update, reimmunize & scan regularly.

  • Enable Teatimer option in Spybot Search & Destroy (if you forgot to enable it during the install)
    • Open Spybot S&D.
    • Click Mode, choose Advanced Mode.
    • Go To the bottom of the Vertical Panel on the Left, Click Tools.
    • then, also in left panel, click Resident (shows a red/white shield).
    • If your firewall raises a question, say OK.
    • In the Resident protection status frame, check the box labeled Resident "Tea-Timer"(Protection of over-all system settings) active.
    • OK any prompts.
    • Click Mode, choose Default Mode.
    • Use File -> Exit to terminate Spybot.
    • Reboot your machine for the changes to take effect.

  • Make use of the HOSTS file included with Spybot Search & Destroy
    Every version of windows includes a hosts file as part of them. A hosts file is a bit like a phone book, it points to the actual numeric address (i.e. the IP address) from the human friendly name of a website. This feature can be used to block malicious websites.

    Spybot Search & Destroy has a good HOSTS file built in, to enable the HOSTS file in Spybot Search & Destroy:
    • Run Spybot Search & Destroy.
    • Click on Mode, and then place a tick next to Advanced mode.
    • Click Yes.
    • In the left hand pane of Spybot Search & Destroy, click on Tools, and then on Hosts File.
    • Click on Add Spybot-S&D hosts list.


    Note: On some PCs, having a custom HOSTS file installed can cause a significant slowdown. Following these instructions should resolve the issue:
    • Click Start > Run
    • Type services.msc & click OK
    • In the list, find the service called DNS Client & double click on it.
    • On the dropdown box, change the setting from automatic to manual.
    • Click OK & then close the Services window.

    For a more detailed explanation of the HOSTS file, click here.

It is ABSOLUTELY ESSENTIAL to keep Windows, Java, Adobe and all of your security programs up to date.


Read these articles to learn more about how to protect yourself while on the internet:



Safe surfing! 8)
 
Hi.

Thanks for all your help.
Click to expand...
You're welcome. I'm glad I could help.

Please refer to this topic, then start a new topic with a description and DDS logs for the problem with the other computer.

As it seems the problem with this computer is solved, I will now ask for this topic to be closed.

Thanks
-vict0r
 
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

Note: If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh DDS log and a link to your previous thread.

If it has been less than three days since your last response and you need the thread re-opened, please send me a private message (pm). A valid, working link to the closed topic is required.

If you have been helped and wish to donate to help with the costs of this volunteer site, please read :
Your donation helps improving Spybot-S&D!
 
Status
Not open for further replies.
Back
Top