TechSpot

Firefox search toolbar redirects

By bbmerc
Oct 27, 2010
  1. I tried to do a search this morning with firefox using the top right search toolbar and I have it default set to google. It goes to search.fast-find.net. It looks like it affected Internet Explorer also but I don't use IE. I use Windows 7 Ultimate x64.

    Malwarebytes' Anti-Malware 1.46
    www.malwarebytes.org

    Database version: 4964

    Windows 6.1.7600
    Internet Explorer 9.0.7930.16406

    10/27/2010 9:34:13 AM
    mbam-log-2010-10-27 (09-34-13).txt

    Scan type: Quick scan
    Objects scanned: 159903
    Time elapsed: 5 minute(s), 25 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 1
    Registry Values Infected: 4
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{o2mbp58k-v5sq-81b8-28b5-7r2bk054xpn7} (Generic.Bot.H) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\policies (Backdoor.Agent) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hkcu (Trojan.Backdoor) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\policies (Backdoor.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hklm (Trojan.Backdoor) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)

    GMER 1.0.15.15477 - http://www.gmer.net
    Rootkit scan 2010-10-27 10:00:17
    Windows 6.1.7600
    Running: ww75yi6z.exe


    ---- Registry - GMER 1.0.15 ----

    Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Upgrade\BTHPORT
    Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Upgrade\HidBth
    Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Upgrade\LocalRadioSettings
    Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Upgrade\BTHPORT (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Upgrade\HidBth (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Upgrade\LocalRadioSettings (not active ControlSet)

    ---- EOF - GMER 1.0.15 ----


    DDS (Ver_10-10-21.02) - NTFS_AMD64
    Run by Brian at 9:49:02.64 on Wed 10/27/2010
    Internet Explorer: 9.0.7930.16406 BrowserJavaVersion: 1.6.0_22
    Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.8191.5691 [GMT -5:00]

    SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
    SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}

    ============== Running Processes ===============

    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\atieclxx.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\taskhost.exe
    C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    C:\Windows\system32\Dwm.exe
    C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    C:\Program Files (x86)\Motorola Media Link\NServiceEntry.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    C:\Windows\System32\nvraidservice.exe
    C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
    C:\Program Files (x86)\Mobile Stream\EasyTether\easytthr.exe
    C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
    C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Windows\system32\hasplms.exe
    C:\Program Files (x86)\Orb Networks\Orb\bin\Orblauncher.exe
    C:\Program Files (x86)\Trillian\trillian.exe
    C:\Program Files (x86)\iTunes\iTunesHelper.exe
    C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Easy Backup\HPBtnSrv.exe
    C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
    C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
    C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
    C:\Program Files (x86)\Motorola\Moto Helper Service\MotoHelper.exe
    C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
    C:\Windows\System32\svchost.exe -k HPZ12
    C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
    C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Windows\System32\svchost.exe -k LocalServicePeerNet
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
    C:\Program Files (x86)\Orb Networks\Orb\bin\Orb.exe
    C:\Program Files (x86)\Orb Networks\Orb\bin\OrbjetManager.exe
    C:\Windows\system32\conhost.exe
    c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
    C:\Windows\System32\svchost.exe -k secsvcs
    C:\Windows\explorer.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
    C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Users\Brian\Desktop\ww75yi6z.exe
    C:\Windows\system32\taskeng.exe
    C:\Users\Brian\Desktop\dds.scr
    C:\Windows\system32\conhost.exe
    C:\Windows\system32\wbem\wmiprvse.exe

    ============== Pseudo HJT Report ===============

    uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=93&bd=Pavilion&pf=cndt
    uStart Page = hxxp://www.google.com/
    uSearch Bar =
    uInternet Settings,ProxyOverride = <local>
    BHO: PodcastBHO Class: {65134fdf-f8a5-4b3d-91d9-cdf273cfd578} - C:\Program Files (x86)\Common Files\doubleTwist\IEPodcastPlugin.dll
    BHO: TBSB05974 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - C:\Program Files (x86)\Search Toolbar\tbcore3.dll
    TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    TB: Search Toolbar: {0c8413c1-fad1-446c-8584-be50576f863e} - C:\Program Files (x86)\Search Toolbar\tbcore3.dll
    TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
    TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
    EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
    uRun: [EasyTether] "C:\Program Files (x86)\Mobile Stream\EasyTether\easytthr.exe"
    uRun: [doubleTwist] C:\Program Files (x86)\doubleTwist 2.0\DoubleTwist.DeviceHelper.exe
    uRun: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
    uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    mRun: [StartupDelayer] "C:\Program Files (x86)\r2 Studios\Startup Delayer\Startup Launcher.exe"
    mRun: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
    mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
    mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    StartupFolder: C:\Users\Brian\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Trillian.lnk - C:\Program Files (x86)\Trillian\trillian.exe
    StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\HPDIGI~1.LNK - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
    mPolicies-explorer: NoActiveDesktop = 1 (0x1)
    mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
    mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
    mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    IE: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    IE: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
    IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
    IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
    Trusted Zone: com.tw\asia.msi
    Trusted Zone: com.tw\global.msi
    Trusted Zone: com.tw\www.msi
    DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
    DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} - hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
    DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} - hxxp://liveupdate.msi.com.tw/autobios/LOnline/install.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
    DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} - hxxp://mobileapps.blackberry.com/devicesoftware/AxLoader.cab
    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
    AppInit_DLLs: acaptuser32.dll
    SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
    BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
    BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
    BHO-X64: URLRedirectionBHO - No File
    BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    TB-X64: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
    TB-X64: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
    TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
    EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File
    mRun-x64: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
    mRun-x64: [NVRaidService] C:\Windows\system32\nvraidservice.exe
    mRun-x64: [SmartMenu] %ProgramFiles%\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
    SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
    Hosts: 127.0.0.1 www.spywareinfo.com

    ================= FIREFOX ===================

    FF - ProfilePath - C:\Users\Brian\AppData\Roaming\Mozilla\Firefox\Profiles\yalojswm.default\
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - chrome://speeddial/content/speeddial.xul
    FF - prefs.js: keyword.URL - hxxp://www.google.com/search?q=%s
    FF - component: C:\Users\Brian\AppData\Roaming\Mozilla\Firefox\Profiles\yalojswm.default\extensions\glasser@sixxgate.com\components\dwmxpcom.dll
    FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL
    FF - plugin: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL
    FF - plugin: C:\Program Files (x86)\Common Files\doubleTwist\NPPodcast.dll
    FF - plugin: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
    FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
    FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
    FF - plugin: C:\Program Files (x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll
    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: C:\Program Files (x86)\Opera\program\plugins\np_gp.dll
    FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
    FF - plugin: C:\Program Files\Microsoft\Web Platform Installer\NPWPIDetector.dll
    FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
    FF - plugin: C:\Users\Brian\Program Files (x86)\DNA\plugins\npbtdna.dll
    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
    FF - HiddenExtension: XULRunner: {A4F8A970-13D9-4CF5-ABD3-78DD85E7BEBE} - C:\Users\Brian\AppData\Local\{A4F8A970-13D9-4CF5-ABD3-78DD85E7BEBE}\
    FF - HiddenExtension: Java Console: No Registry Reference - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
    FF - HiddenExtension: Java Console: No Registry Reference - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
    FF - HiddenExtension: Java Console: No Registry Reference - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

    ---- FIREFOX POLICIES ----
    FF - user.js: browser.search.selectedEngine - Google
    FF - user.js: browser.search.order.1 - Google
    FF - user.js: keyword.URL - hxxp://search.fast-find.net/?sid=10101067100&s=C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
    C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
    C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
    C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
    C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
    C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
    C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
    C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
    C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
    C:\Program Files (x86)\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified

    ============= SERVICES / DRIVERS ===============

    R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2010-2-17 14920]
    R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2010-2-17 12360]
    R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
    R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2010-6-29 128752]
    R2 {55662437-DA8C-40c0-AADA-2C816A897A49};Power Control [2009/04/22 05:14:48];C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl [2009-4-22 146928]
    R2 ABBYY.Licensing.FineReader.Corporate.10.0;ABBYY FineReader 10 CE Licensing Service;C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe [2009-12-18 814344]
    R2 aksdf;aksdf;C:\Windows\System32\drivers\aksdf.sys [2009-8-28 71040]
    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-8-25 203264]
    R2 DeviceMonitorService;DeviceMonitorService;C:\Program Files (x86)\Motorola Media Link\NServiceEntry.exe [2010-4-29 85088]
    R2 hasplms;Sentinel HASP License Manager;C:\Windows\system32\hasplms.exe -run --> C:\Windows\system32\hasplms.exe -run [?]
    R2 HPBtnSrv;HP Easy Backup Button Service;C:\Program Files (x86)\Hewlett-Packard\HP Easy Backup\HPBtnSrv.exe [2009-4-22 192512]
    R2 iPodDrv;iPodDrv;C:\Windows\System32\drivers\iPodDrv.sys [2010-3-9 14952]
    R2 MotoHelper.exe;Motorola Helper;C:\Program Files (x86)\Motorola\Moto Helper Service\MotoHelper.exe [2010-9-14 6656]
    R2 MotoHelper;MotoHelper Service;C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [2010-9-3 202048]
    R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2010-7-14 1153368]
    R2 StarWindServiceAE;StarWind AE Service;C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-5-28 275968]
    R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atikmdag.sys [2010-8-25 7767040]
    R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2010-8-25 279040]
    R3 easytether;easytether;C:\Windows\System32\drivers\easytthr.sys [2010-8-29 21072]
    R3 Lycosa;Lycosa Keyboard;C:\Windows\System32\drivers\Lycosa.sys [2010-4-18 18816]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
    S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-3-16 135664]
    S2 KMService;KMService;C:\Windows\system32\srvany.exe --> C:\Windows\system32\srvany.exe [?]
    S3 AmdLLD64;AMD Low Level Device Driver;C:\Windows\System32\drivers\AmdLLD64.sys [2010-4-24 47672]
    S3 androidusb;ADB Interface Driver;C:\Windows\System32\drivers\motoandroid.sys [2009-7-10 31744]
    S3 BTCFilterService;USB Networking Driver Filter Service;C:\Windows\System32\drivers\motfilt.sys [2009-1-29 6144]
    S3 btnetBUs;Bluetooth PAN Bus Service;C:\Windows\System32\drivers\btnetBus.sys [2008-12-7 35848]
    S3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;C:\Games\Dragon Age\bin_ship\daupdatersvc.service.exe [2010-3-24 25832]
    S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2009-6-26 1038088]
    S3 jgiert;{88617122-DF7E-44C8-87F4-94E73C0972A0};C:\Program Files (x86)\ophcrack\pwdump\servpw.exe --> C:\Program Files (x86)\ophcrack\pwdump\servpw.exe [?]
    S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-1-21 30963576]
    S3 motandroidusb;Mot ADB Interface Driver;C:\Windows\System32\drivers\motoandroid.sys [2009-7-10 31744]
    S3 motccgp;Motorola USB Composite Device Driver;C:\Windows\System32\drivers\motccgp.sys [2010-6-18 20992]
    S3 motccgpfl;MotCcgpFlService;C:\Windows\System32\drivers\motccgpfl.sys [2009-1-29 9216]
    S3 Motousbnet;Motorola USB Networking Driver Service;C:\Windows\System32\drivers\Motousbnet.sys [2010-4-1 26624]
    S3 motport;Motorola USB Diagnostic Port;C:\Windows\System32\drivers\motport.sys [2010-6-18 30208]
    S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
    S3 SureThing Labelflash service;SureThing Labelflash service;C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe [2009-8-2 74392]
    S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2010-4-19 50688]
    S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-13 17920]
    S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-4-21 1255736]

    =============== Created Last 30 ================

    2010-10-27 13:36:43 -------- d-----w- C:\Users\Brian\AppData\Roaming\SUPERAntiSpyware.com
    2010-10-27 13:36:43 -------- d-----w- C:\PROGRA~3\SUPERAntiSpyware.com
    2010-10-27 13:36:38 -------- d-----w- C:\PROGRA~3\!SASCORE
    2010-10-27 13:36:37 -------- d-----w- C:\Program Files\SUPERAntiSpyware
    2010-10-27 13:22:52 -------- d-----w- C:\Users\Brian\AppData\Roaming\Malwarebytes
    2010-10-27 13:21:52 38224 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
    2010-10-27 13:21:51 24664 ----a-w- C:\Windows\System32\drivers\mbam.sys
    2010-10-27 13:21:51 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
    2010-10-27 13:21:51 -------- d-----w- C:\PROGRA~3\Malwarebytes
    2010-10-27 12:49:43 0 ----a-w- C:\Users\Brian\AppData\Local\Xgosakiwi.bin
    2010-10-27 12:49:42 -------- d-----w- C:\Users\Brian\AppData\Local\{A4F8A970-13D9-4CF5-ABD3-78DD85E7BEBE}
    2010-10-27 12:49:34 0 ----a-w- C:\Windows\SysWow64\lsp986D.tmp
    2010-10-27 12:48:16 0 ----a-w- C:\Windows\SysWow64\lsp6952.tmp
    2010-10-27 12:48:10 -------- d-----w- C:\PROGRA~3\Update
    2010-10-26 21:27:06 8006480 ----a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{E18D149C-5258-42C0-933D-9480F4758666}\mpengine.dll
    2010-10-26 21:26:44 641536 ----a-w- C:\Windows\SysWow64\CPFilters.dll
    2010-10-26 21:26:44 552960 ----a-w- C:\Windows\System32\msdri.dll
    2010-10-26 21:26:43 961024 ----a-w- C:\Windows\System32\CPFilters.dll
    2010-10-26 21:26:43 288256 ----a-w- C:\Windows\System32\MSNP.ax
    2010-10-26 21:26:43 258560 ----a-w- C:\Windows\System32\mpg2splt.ax
    2010-10-26 21:26:43 204288 ----a-w- C:\Windows\SysWow64\MSNP.ax
    2010-10-26 21:26:43 199680 ----a-w- C:\Windows\SysWow64\mpg2splt.ax
    2010-10-26 21:26:33 27008 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
    2010-10-20 13:59:53 -------- d-----w- C:\extensions
    2010-10-19 06:05:03 521448 ----a-w- C:\Windows\System32\deployJava1.dll
    2010-10-18 02:18:16 -------- d-----w- C:\Program Files (x86)\Ultra Fractal 5
    2010-10-14 06:27:05 4582912 ----a-w- C:\Program Files\Windows NT\Accessories\wordpad.exe
    2010-10-14 06:27:05 148992 ----a-w- C:\Windows\System32\t2embed.dll
    2010-10-14 06:27:05 109056 ----a-w- C:\Windows\SysWow64\t2embed.dll
    2010-10-14 06:27:04 2085376 ----a-w- C:\Windows\System32\ole32.dll
    2010-10-14 06:27:03 4247040 ----a-w- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
    2010-10-14 06:27:03 1413632 ----a-w- C:\Windows\SysWow64\ole32.dll
    2010-10-12 13:36:28 -------- d-----w- C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6
    2010-10-11 14:44:27 -------- d-----w- C:\Program Files (x86)\Defense Grid - Gold
    2010-10-10 17:27:57 -------- d-----w- C:\Program Files (x86)\Defense Grid - The Awakening
    2010-10-10 04:03:22 -------- d-----w- C:\Program Files (x86)\Active Data Recovery Software
    2010-10-08 21:28:23 -------- d-----w- C:\Program Files\HHD Software
    2010-10-05 22:57:05 -------- d-----w- C:\Program Files\DivX
    2010-10-05 22:56:49 -------- d-----w- C:\Program Files (x86)\Common Files\DivX Shared
    2010-10-05 22:56:14 -------- d-----w- C:\Program Files (x86)\DivX
    2010-10-05 22:55:53 -------- d-----w- C:\PROGRA~3\DivX
    2010-09-30 12:15:53 -------- d-----w- C:\Users\Brian\AppData\Roaming\Skip-Bo
    2010-09-29 23:15:05 -------- d-----w- C:\Users\Brian\AppData\Roaming\svhost
    2010-09-29 11:44:37 -------- d-----w- C:\Windows\SysWow64\svhost
    2010-09-29 11:39:31 -------- d-----w- C:\Windows\skins
    2010-09-29 08:00:20 243712 ----a-w- C:\Windows\System32\drivers\ks.sys
    2010-09-29 08:00:20 184832 ----a-w- C:\Windows\System32\drivers\usbvideo.sys
    2010-09-29 00:46:43 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
    2010-09-29 00:46:43 2048 ----a-w- C:\Windows\System32\tzres.dll

    ==================== Find3M ====================

    2010-10-21 19:31:10 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
    2010-10-19 16:41:44 270720 ------w- C:\Windows\System32\MpSigStub.exe
    2010-09-25 20:32:54 163153 ----a-w- C:\Windows\Audio Converter Pro Uninstaller.exe
    2010-09-24 15:32:36 266240 ----a-w- C:\Windows\crack.exe
    2010-09-10 05:35:44 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
    2010-09-10 05:35:43 347648 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
    2010-09-01 05:46:36 1355264 ----a-w- C:\Windows\SysWow64\jscript9.dll
    2010-09-01 05:44:32 367104 ----a-w- C:\Windows\SysWow64\html.iec
    2010-09-01 05:44:30 1448448 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
    2010-09-01 05:44:24 1122304 ----a-w- C:\Windows\SysWow64\wininet.dll
    2010-09-01 05:44:06 424960 ----a-w- C:\Windows\SysWow64\vbscript.dll
    2010-09-01 05:43:22 23552 ----a-w- C:\Windows\SysWow64\licmgr10.dll
    2010-09-01 05:43:12 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
    2010-09-01 05:43:12 114176 ----a-w- C:\Windows\SysWow64\iesysprep.dll
    2010-09-01 05:43:10 76800 ----a-w- C:\Windows\SysWow64\SetIEInstalledDate.exe
    2010-09-01 05:43:10 74752 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
    2010-09-01 05:43:02 448512 ----a-w- C:\Windows\System32\html.iec
    2010-09-01 05:41:56 601088 ----a-w- C:\Windows\System32\vbscript.dll
    2010-09-01 05:40:56 76800 ----a-w- C:\Windows\System32\tdc.ocx
    2010-09-01 05:40:40 215552 ----a-w- C:\Windows\System32\msls31.dll
    2010-09-01 05:12:09 12625920 ----a-w- C:\Windows\System32\wmploc.DLL
    2010-09-01 04:23:49 12625408 ----a-w- C:\Windows\SysWow64\wmploc.DLL
    2010-09-01 02:58:34 3123712 ----a-w- C:\Windows\System32\win32k.sys
    2010-08-31 04:32:30 954752 ----a-w- C:\Windows\SysWow64\mfc40.dll
    2010-08-31 04:32:30 954288 ----a-w- C:\Windows\SysWow64\mfc40u.dll
    2010-08-29 23:11:08 21072 ----a-w- C:\Windows\System32\drivers\easytthr.sys
    2010-08-27 06:14:02 236032 ----a-w- C:\Windows\System32\srvsvc.dll
    2010-08-27 05:46:48 9728 ----a-w- C:\Windows\SysWow64\sscore.dll
    2010-08-27 03:38:04 463360 ----a-w- C:\Windows\System32\drivers\srv.sys
    2010-08-27 03:37:48 402944 ----a-w- C:\Windows\System32\drivers\srv2.sys
    2010-08-27 03:37:26 161792 ----a-w- C:\Windows\System32\drivers\srvnet.sys
    2010-08-26 03:37:26 7767040 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
    2010-08-26 02:14:12 20736000 ----a-w- C:\Windows\System32\atio6axx.dll
    2010-08-26 02:01:14 143360 ----a-w- C:\Windows\System32\atiapfxx.exe
    2010-08-26 02:01:04 528384 ----a-w- C:\Windows\SysWow64\aticfx32.dll
    2010-08-26 02:00:02 616960 ----a-w- C:\Windows\System32\aticfx64.dll
    2010-08-26 01:57:58 450560 ----a-w- C:\Windows\System32\ATIDEMGX.dll
    2010-08-26 01:57:50 462336 ----a-w- C:\Windows\System32\atieclxx.exe
    2010-08-26 01:57:14 203264 ----a-w- C:\Windows\System32\atiesrxx.exe
    2010-08-26 01:56:06 120320 ----a-w- C:\Windows\System32\atitmm64.dll
    2010-08-26 01:55:50 421376 ----a-w- C:\Windows\System32\atipdl64.dll
    2010-08-26 01:55:48 15830016 ----a-w- C:\Windows\SysWow64\atioglxx.dll
    2010-08-26 01:55:42 356352 ----a-w- C:\Windows\SysWow64\atipdlxx.dll
    2010-08-26 01:55:32 278528 ----a-w- C:\Windows\SysWow64\Oemdspif.dll
    2010-08-26 01:55:28 12288 ----a-w- C:\Windows\System32\atimuixx.dll
    2010-08-26 01:55:22 59392 ----a-w- C:\Windows\System32\atiedu64.dll
    2010-08-26 01:55:18 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
    2010-08-26 01:52:22 3914240 ----a-w- C:\Windows\SysWow64\atidxx32.dll
    2010-08-26 01:43:28 4602880 ----a-w- C:\Windows\System32\atidxx64.dll
    2010-08-26 01:34:38 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
    2010-08-26 01:34:36 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
    2010-08-26 01:34:28 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
    2010-08-26 01:34:26 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
    2010-08-26 01:34:16 5425664 ----a-w- C:\Windows\System32\aticaldd64.dll
    2010-08-26 01:33:52 4032512 ----a-w- C:\Windows\SysWow64\atiumdag.dll
    2010-08-26 01:33:08 4375552 ----a-w- C:\Windows\SysWow64\aticaldd.dll
    2010-08-26 01:33:02 3147264 ----a-w- C:\Windows\System32\atiumd6a.dll
    2010-08-26 01:27:58 57344 ----a-w- C:\Windows\System32\coinst.dll
    2010-08-26 01:27:54 5202944 ----a-w- C:\Windows\System32\atiumd64.dll
    2010-08-26 01:25:58 3392000 ----a-w- C:\Windows\SysWow64\atiumdva.dll
    2010-08-26 01:21:24 338432 ----a-w- C:\Windows\System32\atiadlxx.dll
    2010-08-26 01:21:18 241664 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
    2010-08-26 01:21:08 14848 ----a-w- C:\Windows\System32\atig6pxx.dll
    2010-08-26 01:21:06 12800 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
    2010-08-26 01:21:06 12800 ----a-w- C:\Windows\System32\atiglpxx.dll
    2010-08-26 01:21:02 21504 ----a-w- C:\Windows\System32\atig6txx.dll
    2010-08-26 01:21:00 19968 ----a-w- C:\Windows\SysWow64\atigktxx.dll
    2010-08-26 01:20:56 279040 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
    2010-08-26 01:20:14 39424 ----a-w- C:\Windows\System32\atiuxp64.dll
    2010-08-26 01:20:08 30208 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
    2010-08-26 01:20:04 37376 ----a-w- C:\Windows\System32\atiu9p64.dll
    2010-08-26 01:19:56 28160 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
    2010-08-26 01:19:28 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
    2010-08-26 01:13:22 53760 ----a-w- C:\Windows\System32\atimpc64.dll
    2010-08-26 01:13:22 53760 ----a-w- C:\Windows\System32\amdpcom64.dll
    2010-08-26 01:13:16 52736 ----a-w- C:\Windows\SysWow64\atimpc32.dll
    2010-08-26 01:13:16 52736 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
    2010-08-21 06:38:47 1024512 ----a-w- C:\Windows\System32\wmpmde.dll
    2010-08-21 06:36:49 340992 ----a-w- C:\Windows\System32\schannel.dll
    2010-08-21 06:31:06 633856 ----a-w- C:\Windows\System32\comctl32.dll
    2010-08-21 06:29:47 558592 ----a-w- C:\Windows\System32\spoolsv.exe
    2010-08-21 05:36:33 738816 ----a-w- C:\Windows\SysWow64\wmpmde.dll
    2010-08-21 05:36:24 224256 ----a-w- C:\Windows\SysWow64\schannel.dll
    2010-08-21 05:33:24 530432 ----a-w- C:\Windows\SysWow64\comctl32.dll
    2010-08-16 06:50:45 1137664 ----a-w- C:\Windows\System32\FntCache.dll
    2010-08-16 06:50:43 1543168 ----a-w- C:\Windows\System32\DWrite.dll
    2010-08-16 06:50:42 899072 ----a-w- C:\Windows\System32\d2d1.dll
    2010-08-16 06:50:42 320512 ----a-w- C:\Windows\System32\d3d10_1core.dll
    2010-08-16 06:50:42 1844224 ----a-w- C:\Windows\System32\d3d10warp.dll
    2010-08-16 06:14:36 1076224 ----a-w- C:\Windows\SysWow64\DWrite.dll
    2010-08-16 06:14:24 737280 ----a-w- C:\Windows\SysWow64\d2d1.dll
    2010-08-16 06:14:24 218624 ----a-w- C:\Windows\SysWow64\d3d10_1core.dll
    2010-08-16 06:14:24 1172480 ----a-w- C:\Windows\SysWow64\d3d10warp.dll
    2010-08-10 10:15:58 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx
    2010-08-10 10:15:58 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts
    2010-08-07 12:18:24 3265024 ----a-w- C:\Windows\es.scr
    2010-08-07 12:18:24 3265024 ----a-w- C:\Windows\es.exe

    ============= FINISH: 9:49:28.87 ===============


    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-10-21.02)

    Microsoft Windows 7 Ultimate
    Boot Device: \Device\HarddiskVolume1
    Install Date: 4/21/2010 8:01:44 PM
    System Uptime: 10/27/2010 9:05:03 AM (0 hours ago)

    Motherboard: PEGATRON CORPORATION | | VIOLET3
    Processor: AMD Phenom(tm) II X4 910 Processor | CPU 1 | 2600/200mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 895 GiB total, 346.758 GiB free.
    D: is FIXED (NTFS) - 14 GiB total, 1.976 GiB free.
    E: is CDROM ()
    F: is CDROM ()
    G: is FIXED (NTFS) - 22 GiB total, 22.387 GiB free.
    H: is Removable
    I: is Removable
    J: is Removable
    K: is Removable
    L: is Removable

    ==== Disabled Device Manager Items =============

    Class GUID: {6bdd1fc1-810f-11d0-bec7-08002be2092f}
    Description: LSI 1394 OHCI Compliant Host Controller
    Device ID: PCI\VEN_11C1&DEV_5811&SUBSYS_2A93103C&REV_70\4&FF6DA97&0&2840
    Manufacturer: LSI
    Name: LSI 1394 OHCI Compliant Host Controller
    PNP Device ID: PCI\VEN_11C1&DEV_5811&SUBSYS_2A93103C&REV_70\4&FF6DA97&0&2840
    Service: 1394ohci

    Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    Description: sptd
    Device ID: ROOT\LEGACY_SPTD\0000
    Manufacturer:
    Name: sptd
    PNP Device ID: ROOT\LEGACY_SPTD\0000
    Service: sptd

    Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
    Description: Atheros 802.11 a/b/g/n Dualband Wireless Network Module
    Device ID: PCI\VEN_168C&DEV_002A&SUBSYS_1000168C&REV_01\4&316BCBEC&0&0098
    Manufacturer: Atheros Communications Inc.
    Name: Atheros 802.11 a/b/g/n Dualband Wireless Network Module
    PNP Device ID: PCI\VEN_168C&DEV_002A&SUBSYS_1000168C&REV_01\4&316BCBEC&0&0098
    Service: athr

    ==== System Restore Points ===================

    RP203: 9/26/2010 3:00:10 AM - Windows Update
    RP204: 9/26/2010 9:42:49 AM - Installed DirectX
    RP205: 9/26/2010 9:43:30 AM - Installed DirectX
    RP206: 9/26/2010 10:12:02 AM - Installed DirectX
    RP207: 9/26/2010 12:38:09 PM - Installed DirectX
    RP208: 9/27/2010 3:01:29 AM - Windows Update
    RP209: 9/28/2010 1:50:10 AM - Windows Update
    RP210: 9/28/2010 3:00:10 AM - Windows Update
    RP211: 9/29/2010 3:00:11 AM - Windows Update
    RP212: 9/29/2010 6:38:10 AM - Windows Update
    RP213: 9/30/2010 3:00:27 AM - Windows Update
    RP214: 10/1/2010 6:07:14 AM - Windows Update
    RP215: 10/2/2010 12:33:36 AM - Windows Update
    RP216: 10/5/2010 3:31:38 AM - Windows Update
    RP217: 10/6/2010 3:00:11 AM - Windows Update
    RP218: 10/8/2010 8:03:07 AM - Windows Update
    RP219: 10/8/2010 4:28:13 PM - Installed HHD Software Free Hex Editor Neo 4.95
    RP220: 10/11/2010 2:30:31 PM - Windows Update
    RP221: 10/14/2010 1:23:17 AM - Windows Update
    RP222: 10/14/2010 3:00:11 AM - Windows Update
    RP223: 10/15/2010 2:32:47 AM - Windows Update
    RP224: 10/19/2010 1:04:12 AM - Installed Java(TM) 6 Update 22 (64-bit)
    RP225: 10/19/2010 4:26:10 AM - Windows Update
    RP226: 10/19/2010 8:04:10 AM - Removed Java(TM) 6 Update 21
    RP227: 10/19/2010 8:05:02 AM - Removed Java(TM) 6 Update 22 (64-bit)
    RP228: 10/19/2010 8:18:57 AM - Installed Opera 10.63.
    RP229: 10/19/2010 8:23:14 AM - Installed Moto Helper Service
    RP230: 10/21/2010 2:30:35 PM - Installed Java(TM) 6 Update 22
    RP231: 10/22/2010 10:56:14 AM - Windows Update
    RP232: 10/26/2010 4:26:34 PM - Windows Update
    RP233: 10/27/2010 3:00:11 AM - Windows Update
    RP234: 10/27/2010 5:24:21 AM - Windows Update

    ==== Installed Programs ======================

    2007 Microsoft Office Suite Service Pack 2 (SP2)
    ABBYY FineReader 10 Corporate Edition
    Active@ Password Changer
    ActiveCheck component for HP Active Support Library
    Adobe Acrobat 9 Pro Extended - English, Français, Deutsch
    Adobe AIR
    Adobe Anchor Service CS4
    Adobe Bridge CS4
    Adobe CMaps CS4
    Adobe Color - Photoshop Specific CS4
    Adobe Color EU Extra Settings CS4
    Adobe Color JA Extra Settings CS4
    Adobe Color NA Recommended Settings CS4
    Adobe Color Video Profiles CS CS4
    Adobe CSI CS4
    Adobe Default Language CS4
    Adobe Device Central CS4
    Adobe Drive CS4
    Adobe ExtendScript Toolkit CS4
    Adobe Extension Manager CS4
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Fonts All
    Adobe Linguistics CS4
    Adobe Media Player
    Adobe Output Module
    Adobe PDF Library Files CS4
    Adobe Photoshop CS4
    Adobe Photoshop CS4 Support
    Adobe Search for Help
    Adobe Service Manager Extension
    Adobe Setup
    Adobe Type Support CS4
    Adobe Update Manager CS4
    Adobe WinSoft Linguistics Plugin
    Adobe XMP Panels CS4
    AdobeColorCommonSetCMYK
    AdobeColorCommonSetRGB
    Apple Application Support
    Apple Software Update
    Aquarium Desktop
    ArcSoft Print Creations
    ArcSoft Print Creations - Album Page
    ArcSoft Print Creations - Funhouse
    ArcSoft Print Creations - Greeting Card
    ArcSoft Print Creations - Photo Book
    ArcSoft Print Creations - Photo Calendar
    ArcSoft Print Creations - Scrapbook
    ArcSoft Print Creations - Slimline Card
    ArcSoft VideoImpression 2
    ArcSoft WebCam Companion 2
    Battle of the Immortals client
    Bejeweled Blitz
    BitTorrent
    BlackBerry Device Software Updater
    BufferChm
    Catalyst Control Center - Branding
    Catalyst Control Center Graphics Previews Common
    Catalyst Control Center Graphics Previews Vista
    Catalyst Control Center InstallProxy
    ccc-core-static
    CCC Help English
    CCScore
    Class_50_Content_Update
    Connect
    Copy
    CopyTrans Suite Remove Only
    CyberLink DVD Suite Deluxe
    DAEMON Tools Toolbar
    Daniusoft Media Converter Pro(Build 2.4.1.1)
    DeepSoftware HID Plugin for Winamp Player v1.5.3.4
    Definition update for Microsoft Office 2010 (KB982726)
    Destination Component
    Destinations
    DeviceDiscovery
    DeviceManagementQFolder
    DirectX for Managed Code Update (Summer 2004)
    DiskAid 4.1
    DivX Setup
    DJ_AIO_03_F4200_Software
    DJ_AIO_03_F4200_Software_Min
    DNA
    DocProc
    DocProcQFolder
    doubleTwist
    Dragon Age: Origins
    Dream Aquarium 1.234
    Electric Sheep 2.7b28
    Electricsheep Screensaver 2.7b23
    erLT
    ESSBrwr
    ESSCDBK
    ESScore
    ESSgui
    ESSini
    ESSPCD
    ESSPDock
    ESSTOOLS
    essvatgt
    eSupportQFolder
    F4200
    F4200_Help
    Fallout 3
    Feedback Tool
    ffdshow [rev 2527] [2008-12-19]
    fflink
    Garmin Communicator Plugin
    Garmin USB Drivers
    Garmin VoiceStudio v2.10
    Garmin WebUpdater
    Google Earth
    Google Update Helper
    GPBaseService
    GPBaseService2
    HP Active Support Library
    HP Button Manager
    HP Customer Experience Enhancements
    HP Easy Backup
    HP Games
    HP MediaSmart Demo
    HP MediaSmart DVD
    HP MediaSmart Music/Photo/Video
    HP Odometer
    HP Photosmart Essential 2.5
    HP Picasso Media Center Add-In
    HP Product Detection
    HP Recovery Manager RSS
    HP Support Information
    HP Total Care Setup
    HP Update
    HP Webcam User's Guide
    HPAsset component for HP Active Support Library
    HPPhotoGadget
    HPPhotoSmartDiscLabelContent1
    HPPhotosmartEssential
    HPProductAssistant
    HPSSupply
    iPhoneBrowser
    IrfanView (remove only)
    Java Auto Updater
    Java(TM) 6 Update 18
    Java(TM) 6 Update 22
    Karen's Window Watcher
    Kodak EasyShare software
    kuler
    LabelPrint
    LightScribe System Software
    LimeWire 5.5.8
    Logitech SetPoint
    Louisiana Topo Map
    Mad Caps
    Malwarebytes' Anti-Malware
    MarketResearch
    Microsoft .NET Framework 1.1
    Microsoft Games for Windows - LIVE
    Microsoft Games for Windows - LIVE Redistributable
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access MUI (English) 2010
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2010
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Excel MUI (English) 2010
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove MUI (English) 2010
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2010
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office OneNote MUI (English) 2010
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2010
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2010
    Microsoft Office Professional Plus 2010
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (English) 2010
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (French) 2010
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proof (Spanish) 2010
    Microsoft Office Proofing (English) 2007
    Microsoft Office Proofing (English) 2010
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Publisher MUI (English) 2010
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared MUI (English) 2010
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2010
    Microsoft Office Word MUI (English) 2007
    Microsoft Office Word MUI (English) 2010
    Microsoft Silverlight
    Microsoft Train Simulator
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Works
    MicrosoftTinker
    MMOUI Minion Installer
    Monkey Island 2 LeChucks Revenge Special Edition
    Morphyre
    Moto Helper Service
    MotoHelper 2.0.23 Driver 4.7.1
    MotoHelper MergeModules
    MOTOROLA MEDIA LINK
    Mototools Software Update
    Mozilla Firefox (3.6.11)
    MSTS Patch 1.8.0521 EN
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    netbrdg
    Nokia Connectivity Cable Driver
    NVIDIA ForceWare Network Access Manager
    NVIDIA PhysX
    ObjectDock Plus
    OfotoXMI
    OJOsoft Audio Converter
    OpenPandora 0.7.0.6
    Opera 10.10
    Opera 10.63
    Orb
    Orb Runtime libraries
    Pando Media Booster
    Paragon Partition Manager 9.0 Professional
    PDF Settings CS4
    Peggle Deluxe 1.0
    Peggle Extreme
    Peggle Nights Deluxe 1.0
    Photoshop Camera Raw
    PictureMover
    Plants vs. Zombies
    Power2Go
    PowerDirector
    PowerISO
    PSSWCORE
    Python 2.6 pywin32-212
    Python 2.6.1
    QuickTime
    RealPlayer
    Realtek High Definition Audio Driver
    RealUpgrade 1.0
    RM to MP3 Converter 1.32
    RSDLite
    Scan
    SD40-2_Content_Update
    Security Update for 2007 Microsoft Office System (KB969559)
    Security Update for 2007 Microsoft Office System (KB978380)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
    Security Update for Microsoft Office Excel 2007 (KB978382)
    Security Update for Microsoft Office Outlook 2007 (KB972363)
    Security Update for Microsoft Office PowerPoint 2007 (KB957789)
    Security Update for Microsoft Office Publisher 2007 (KB980470)
    Security Update for Microsoft Office system 2007 (972581)
    Security Update for Microsoft Office system 2007 (KB969613)
    Security Update for Microsoft Office system 2007 (KB974234)
    Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
    SFR
    SHASTA
    Sid Mieir's Railroads
    skin0001
    SKINXSDK
    SKIP-BO Castaway Caper(TM)
    Skype™ 4.2
    SmartWebPrinting
    SmartWebPrintingOC
    SolutionCenter
    Spybot - Search & Destroy
    Startup Delayer v2.5 (build 138)
    staticcr
    Status
    Steinberg Cubase 5
    Steinberg Drum Loop Expansion 01
    Steinberg Groove Agent ONE Content
    Steinberg HALionOne
    Steinberg HALionOne Additional Content Set 01
    Steinberg HALionOne Expression Set
    Steinberg HALionOne GM Drum Set
    Steinberg HALionOne GM Set
    Steinberg HALionOne Pro Set
    Steinberg HALionOne Studio Drum Set
    Steinberg HALionOne Studio Set
    Steinberg LoopMash Content
    Steinberg REVerence Content 01
    Suite Shared Configuration CS4
    Super Collapse! 3
    SureThing CD Labeler Deluxe 5
    System Requirements Lab
    The Lord of the Rings Online™ v03.02.03.8013
    TightVNC 1.3.10
    Toolbox
    Toy Story 3
    TrayApp
    Trillian
    Ultra Fractal 5.02 Animation Edition
    Uninstall Expert 3.0.1.2121
    UnloadSupport
    Update for 2007 Microsoft Office System (KB967642)
    Update for 2007 Microsoft Office System (KB981715)
    Update for Microsoft Office 2007 Help for Common Features (KB963673)
    Update for Microsoft Office Access 2007 Help (KB963663)
    Update for Microsoft Office Excel 2007 Help (KB963678)
    Update for Microsoft Office InfoPath 2007 (KB976416)
    Update for Microsoft Office Infopath 2007 Help (KB963662)
    Update for Microsoft Office OneNote 2007 (KB980729)
    Update for Microsoft Office OneNote 2007 Help (KB963670)
    Update for Microsoft Office Outlook 2007 Help (KB963677)
    Update for Microsoft Office Powerpoint 2007 Help (KB963669)
    Update for Microsoft Office Publisher 2007 Help (KB963667)
    Update for Microsoft Office Script Editor Help (KB963671)
    Update for Microsoft Office Word 2007 (KB974561)
    Update for Microsoft Office Word 2007 Help (KB963665)
    Update for Outlook 2007 Junk Email Filter (kb981433)
    VAIO Gate
    VC80CRTRedist - 8.0.50727.4053
    VideoToolkit01
    VLC media player 1.1.4
    VPRINTOL
    Vuze
    WebReg
    Win7 Taskbar v1.13
    Winamp
    Windows 7 Upgrade Advisor
    WinZip 12.1
    WIRELESS
    Wise Registry Cleaner Professional V5.61
    World of Warcraft
    World of Warcraft Beta
    XQDC X-Setup Pro 9.2.100
    Xvid 1.2.2 final uninstall
    Zuma Deluxe

    ==== End Of File ===========================
     
  2. bbmerc

    bbmerc TS Rookie Topic Starter

    is there no hope for me?
     
  3. Broni

    Broni Malware Annihilator Posts: 52,884   +344

    Welcome aboard [​IMG]

    I don't see any AV program installed.
    Please, download and run ONE of these:
    - Avast! free antivirus: http://www.avast.com/eng/download-avast-home.html
    - Avira free antivirus: http://www.free-av.com/en/download/1/avira_antivir_personal__free_antivirus.html
    After installation, run full scan.
    Report on any findings.

    ====================================================================

    Download SUPERAntiSpyware Free for Home Users:
    http://www.superantispyware.com/


    • Double-click SUPERAntiSpyware.exe and use the default settings for installation.
    • An icon will be created on your desktop. Double-click that icon to launch the program.
    • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here: http://www.superantispyware.com/definitions.html.)
    • Close SUPERAntiSpyware.
    Restart computer in Safe Mode.
    To enter Safe Mode, restart computer, and keep tapping F8 key, until menu appears; pick Safe Mode; you'll see "Safe Mode" in all four corners of your screen

    • Open SUPERAntiSpyware.
    • Under "Configuration and Preferences", click the Preferences button.
    • Click the Scanning Control tab.
    • Under Scanner Options make sure the following are checked (leave all others unchecked):
      • Close browsers before scanning.
      • Terminate memory threats before quarantining.
    • Click the "Close" button to leave the control center screen.
    • Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
    • On the left, make sure you check C:\Fixed Drive.
    • On the right, under "Complete Scan", choose Perform Complete Scan.
    • Click "Next" to start the scan. Please be patient while it scans your computer.
    • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
    • Make sure everything has a checkmark next to it and click "Next".
    • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
    • If asked if you want to reboot, click "Yes".
    • To retrieve the removal information after reboot, launch SUPERAntispyware again.
      • Click Preferences, then click the Statistics/Logs tab.
      • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
      • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
      • Copy and paste the Scan Log results in your next reply with a new HijackThis log.
    • Click Close to exit the program.

    Post SUPERAntiSpyware log.

    ====================================================================

    Download MBRCheck to your desktop

    Double click MBRCheck.exe to run (Vista and Windows 7 users, right click and select Run as Administrator).
    It will show a black screen with some data on it.
    Enter N to exit.
    A report called MBRcheckxxxx.txt will be on your desktop
    Open this report and post its content in your next reply.
     
  4. bbmerc

    bbmerc TS Rookie Topic Starter

    Virus scan is going to take awhile so I posted this right now.


    MBRCheck, version 1.2.3
    (c) 2010, AD

    Command-line:
    Windows Version: Windows 7 Ultimate Edition
    Windows Information: (build 7600), 64-bit
    Base Board Manufacturer: PEGATRON CORPORATION
    BIOS Manufacturer: American Megatrends Inc.
    System Manufacturer: HP-Pavilion
    System Product Name: NP194AA-ABA e9120f
    Logical Drives Mask: 0x00000ffc

    Kernel Drivers (total 212):
    0x0345F000 \SystemRoot\system32\ntoskrnl.exe
    0x03416000 \SystemRoot\system32\hal.dll
    0x00BA5000 \SystemRoot\system32\kdcom.dll
    0x00C4A000 \SystemRoot\system32\mcupdate_AuthenticAMD.dll
    0x00C57000 \SystemRoot\system32\PSHED.dll
    0x00C6B000 \SystemRoot\system32\CLFS.SYS
    0x00CC9000 \SystemRoot\system32\CI.dll
    0x00E41000 \SystemRoot\system32\drivers\Wdf01000.sys
    0x00EE5000 \SystemRoot\system32\drivers\WDFLDR.SYS
    0x00EF4000 \SystemRoot\system32\DRIVERS\ACPI.sys
    0x00F4B000 \SystemRoot\system32\DRIVERS\WMILIB.SYS
    0x00F54000 \SystemRoot\system32\DRIVERS\msisadrv.sys
    0x00F5E000 \SystemRoot\system32\DRIVERS\vdrvroot.sys
    0x00F6B000 \SystemRoot\system32\DRIVERS\pci.sys
    0x00F9E000 \SystemRoot\System32\drivers\partmgr.sys
    0x0114D000 \SystemRoot\System32\Drivers\SCSIPORT.SYS
    0x0117C000 \SystemRoot\system32\DRIVERS\volmgr.sys
    0x01191000 \SystemRoot\System32\drivers\volmgrx.sys
    0x01272000 \SystemRoot\system32\DRIVERS\nvrd64.sys
    0x012EA000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS
    0x0131A000 \SystemRoot\SysWOW64\drivers\hotcore3.sys
    0x01326000 \SystemRoot\System32\drivers\mountmgr.sys
    0x01340000 \SystemRoot\system32\DRIVERS\nvraid.sys
    0x01369000 \SystemRoot\system32\DRIVERS\nvstor64.sys
    0x01200000 \SystemRoot\system32\DRIVERS\storport.sys
    0x01262000 \SystemRoot\system32\DRIVERS\amdxata.sys
    0x013A7000 \SystemRoot\system32\drivers\fltmgr.sys
    0x01000000 \SystemRoot\system32\drivers\fileinfo.sys
    0x01448000 \SystemRoot\System32\Drivers\Ntfs.sys
    0x00D89000 \SystemRoot\System32\Drivers\msrpc.sys
    0x01400000 \SystemRoot\System32\Drivers\ksecdd.sys
    0x01691000 \SystemRoot\System32\Drivers\cng.sys
    0x01704000 \SystemRoot\System32\drivers\pcw.sys
    0x01715000 \SystemRoot\System32\Drivers\Fs_Rec.sys
    0x01818000 \SystemRoot\system32\drivers\ndis.sys
    0x0190A000 \SystemRoot\system32\drivers\NETIO.SYS
    0x0196A000 \SystemRoot\System32\Drivers\ksecpkg.sys
    0x01A02000 \SystemRoot\System32\drivers\tcpip.sys
    0x01995000 \SystemRoot\System32\drivers\fwpkclnt.sys
    0x019DF000 \SystemRoot\system32\DRIVERS\vmstorfl.sys
    0x0171F000 \SystemRoot\system32\DRIVERS\volsnap.sys
    0x019EF000 \SystemRoot\System32\Drivers\spldr.sys
    0x0176B000 \SystemRoot\System32\drivers\rdyboost.sys
    0x01800000 \SystemRoot\System32\Drivers\mup.sys
    0x019F7000 \SystemRoot\System32\drivers\hwpolicy.sys
    0x017A5000 \SystemRoot\System32\DRIVERS\fvevol.sys
    0x017DF000 \SystemRoot\system32\DRIVERS\disk.sys
    0x0141A000 \SystemRoot\system32\DRIVERS\cdrom.sys
    0x01669000 \SystemRoot\System32\Drivers\Null.SYS
    0x01672000 \SystemRoot\System32\Drivers\Beep.SYS
    0x01679000 \SystemRoot\System32\drivers\vga.sys
    0x01014000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
    0x015EB000 \SystemRoot\System32\drivers\watchdog.sys
    0x01687000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
    0x017F5000 \SystemRoot\system32\drivers\rdpencdd.sys
    0x013F3000 \SystemRoot\system32\drivers\rdprefmp.sys
    0x01039000 \SystemRoot\System32\Drivers\Msfs.SYS
    0x01044000 \SystemRoot\System32\Drivers\Npfs.SYS
    0x01055000 \SystemRoot\system32\DRIVERS\tdx.sys
    0x01073000 \SystemRoot\system32\DRIVERS\TDI.SYS
    0x01080000 \SystemRoot\system32\drivers\afd.sys
    0x00FB3000 \SystemRoot\System32\DRIVERS\netbt.sys
    0x0110A000 \SystemRoot\system32\drivers\ws2ifsl.sys
    0x01115000 \SystemRoot\system32\DRIVERS\wfplwf.sys
    0x0111E000 \SystemRoot\system32\DRIVERS\pacer.sys
    0x00E00000 \SystemRoot\system32\DRIVERS\vwififlt.sys
    0x011ED000 \SystemRoot\system32\DRIVERS\netbios.sys
    0x00E16000 \SystemRoot\system32\DRIVERS\wanarp.sys
    0x00DE7000 \SystemRoot\system32\DRIVERS\termdd.sys
    0x00C00000 \SystemRoot\System32\Drivers\SCDEmu.SYS
    0x00E31000 \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS
    0x00C1A000 \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS
    0x02E32000 \SystemRoot\system32\DRIVERS\rdbss.sys
    0x02E83000 \SystemRoot\system32\drivers\nsiproxy.sys
    0x02E8F000 \SystemRoot\system32\DRIVERS\mssmbios.sys
    0x02E9A000 \SystemRoot\System32\drivers\discache.sys
    0x02EA9000 \SystemRoot\system32\drivers\csc.sys
    0x02F2C000 \SystemRoot\System32\Drivers\dfsc.sys
    0x02F4A000 \SystemRoot\system32\DRIVERS\blbdrive.sys
    0x02F5B000 \SystemRoot\system32\DRIVERS\easytthr.sys
    0x02F64000 \SystemRoot\system32\DRIVERS\tunnel.sys
    0x02F8A000 \SystemRoot\system32\DRIVERS\amdppm.sys
    0x02F9F000 \SystemRoot\system32\DRIVERS\nvsmu.sys
    0x02FAA000 \SystemRoot\system32\DRIVERS\usbohci.sys
    0x04002000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
    0x04058000 \SystemRoot\system32\DRIVERS\usbehci.sys
    0x04069000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
    0x0408D000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
    0x0409A000 \SystemRoot\system32\DRIVERS\nvmf6264.sys
    0x040EC000 \SystemRoot\system32\DRIVERS\atikmpag.sys
    0x04A43000 \SystemRoot\system32\DRIVERS\atikmdag.sys
    0x0428C000 \SystemRoot\System32\drivers\dxgkrnl.sys
    0x04380000 \SystemRoot\System32\drivers\dxgmms1.sys
    0x043C6000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
    0x043CF000 \SystemRoot\system32\DRIVERS\CompositeBus.sys
    0x04200000 \SystemRoot\system32\DRIVERS\msiscsi.sys
    0x0423B000 \SystemRoot\system32\DRIVERS\AgileVpn.sys
    0x04251000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
    0x04275000 \SystemRoot\system32\DRIVERS\ndistapi.sys
    0x04A00000 \SystemRoot\system32\DRIVERS\ndiswan.sys
    0x043DF000 \SystemRoot\system32\DRIVERS\raspppoe.sys
    0x04136000 \SystemRoot\system32\DRIVERS\raspptp.sys
    0x04157000 \SystemRoot\system32\DRIVERS\rassstp.sys
    0x04281000 \SystemRoot\system32\DRIVERS\rdpbus.sys
    0x04A2F000 \SystemRoot\system32\DRIVERS\kbdclass.sys
    0x04171000 \SystemRoot\system32\DRIVERS\mouclass.sys
    0x043FA000 \SystemRoot\system32\DRIVERS\swenum.sys
    0x04180000 \SystemRoot\system32\DRIVERS\ks.sys
    0x041C3000 \SystemRoot\system32\DRIVERS\umbus.sys
    0x0529E000 \SystemRoot\system32\DRIVERS\usbhub.sys
    0x052F8000 \SystemRoot\System32\Drivers\NDProxy.SYS
    0x05814000 \SystemRoot\system32\drivers\RTKVHD64.sys
    0x0530D000 \SystemRoot\system32\drivers\portcls.sys
    0x0534A000 \SystemRoot\system32\drivers\drmk.sys
    0x059F5000 \SystemRoot\system32\drivers\ksthunk.sys
    0x0536C000 \SystemRoot\system32\drivers\HdAudio.sys
    0x053C8000 \SystemRoot\system32\DRIVERS\usbccgp.sys
    0x059FB000 \SystemRoot\system32\DRIVERS\USBD.SYS
    0x05800000 \SystemRoot\system32\DRIVERS\hidusb.sys
    0x053E5000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
    0x05200000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
    0x05209000 \SystemRoot\system32\DRIVERS\LHidFilt.Sys
    0x0521C000 \SystemRoot\system32\DRIVERS\mouhid.sys
    0x05229000 \SystemRoot\system32\DRIVERS\LMouFilt.Sys
    0x0523D000 \SystemRoot\system32\DRIVERS\usbscan.sys
    0x0524E000 \SystemRoot\system32\DRIVERS\usbprint.sys
    0x0525A000 \SystemRoot\system32\DRIVERS\dot4usb.sys
    0x0526A000 \SystemRoot\system32\DRIVERS\Dot4.sys
    0x0580E000 \SystemRoot\system32\drivers\Lycosa.sys
    0x02FB5000 \SystemRoot\System32\Drivers\usbvideo.sys
    0x041D5000 \SystemRoot\system32\drivers\usbaudio.sys
    0x02FE3000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
    0x05292000 \SystemRoot\system32\DRIVERS\Dot4Prt.sys
    0x041F0000 \SystemRoot\system32\DRIVERS\kbdhid.sys
    0x02E00000 \SystemRoot\System32\Drivers\crashdmp.sys
    0x02E0E000 \SystemRoot\System32\Drivers\dump_diskdump.sys
    0x01600000 \SystemRoot\System32\Drivers\dump_nvstor64.sys
    0x02E18000 \SystemRoot\System32\Drivers\dump_dumpfve.sys
    0x000C0000 \SystemRoot\System32\win32k.sys
    0x0163E000 \SystemRoot\System32\drivers\Dxapi.sys
    0x0164A000 \SystemRoot\system32\DRIVERS\monitor.sys
    0x00400000 \SystemRoot\System32\TSDDD.dll
    0x00630000 \SystemRoot\System32\cdd.dll
    0x00860000 \SystemRoot\System32\ATMFD.DLL
    0x00C24000 \SystemRoot\system32\drivers\luafv.sys
    0x02C1B000 \SystemRoot\system32\drivers\WudfPf.sys
    0x02C3C000 \SystemRoot\system32\DRIVERS\lltdio.sys
    0x02C51000 \SystemRoot\system32\DRIVERS\nwifi.sys
    0x02CA4000 \SystemRoot\system32\DRIVERS\ndisuio.sys
    0x02CB7000 \SystemRoot\system32\DRIVERS\rspndr.sys
    0x02CCF000 \SystemRoot\system32\drivers\HTTP.sys
    0x02D97000 \SystemRoot\system32\DRIVERS\bowser.sys
    0x02DB5000 \SystemRoot\System32\drivers\mpsdrv.sys
    0x02DCD000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
    0x05C3D000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
    0x05C8B000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
    0x05CAE000 \SystemRoot\System32\Drivers\adfs.SYS
    0x05CC6000 \??\C:\Windows\system32\drivers\aksdf.sys
    0x05CD8000 \SystemRoot\System32\Drivers\fastfat.SYS
    0x05D0E000 \??\C:\Windows\system32\drivers\aksfridge.sys
    0x05D2E000 \??\C:\Windows\system32\drivers\hardlock.sys
    0x05D7C000 \??\C:\Windows\system32\drivers\iPodDrv.sys
    0x06ECD000 \SystemRoot\system32\drivers\peauth.sys
    0x06F73000 \SystemRoot\System32\Drivers\secdrv.SYS
    0x06F7E000 \SystemRoot\System32\DRIVERS\srvnet.sys
    0x06FAB000 \SystemRoot\System32\drivers\tcpipreg.sys
    0x06FBD000 \??\c:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl
    0x06E00000 \SystemRoot\System32\DRIVERS\srv2.sys
    0x0740F000 \SystemRoot\System32\DRIVERS\srv.sys
    0x07516000 \SystemRoot\system32\DRIVERS\asyncmac.sys
    0x07521000 \SystemRoot\system32\DRIVERS\cdfs.sys
    0x0753E000 \SystemRoot\system32\DRIVERS\udfs.sys
    0x77BF0000 \Windows\System32\ntdll.dll
    0x47820000 \Windows\System32\smss.exe
    0xFFF10000 \Windows\System32\apisetschema.dll
    0xFFAE0000 \Windows\System32\autochk.exe
    0xFFE90000 \Windows\System32\gdi32.dll
    0x77A90000 \Windows\System32\wininet.dll
    0xFFD80000 \Windows\System32\msctf.dll
    0xFFD70000 \Windows\System32\lpk.dll
    0xFFCD0000 \Windows\System32\msvcrt.dll
    0xFEF40000 \Windows\System32\shell32.dll
    0xFEE60000 \Windows\System32\oleaut32.dll
    0xFEDE0000 \Windows\System32\shlwapi.dll
    0x77950000 \Windows\System32\urlmon.dll
    0x77830000 \Windows\System32\kernel32.dll
    0xFED10000 \Windows\System32\usp10.dll
    0xFEC30000 \Windows\System32\advapi32.dll
    0xFEBB0000 \Windows\System32\difxapi.dll
    0xFEB90000 \Windows\System32\sechost.dll
    0xFEAF0000 \Windows\System32\comdlg32.dll
    0x77730000 \Windows\System32\user32.dll
    0xFEAC0000 \Windows\System32\imm32.dll
    0x77DC0000 \Windows\System32\normaliz.dll
    0x77DB0000 \Windows\System32\psapi.dll
    0xFE990000 \Windows\System32\rpcrt4.dll
    0x774D0000 \Windows\System32\iertutil.dll
    0xFE8F0000 \Windows\System32\clbcatq.dll
    0xFE6E0000 \Windows\System32\ole32.dll
    0xFE690000 \Windows\System32\Wldap32.dll
    0xFE670000 \Windows\System32\imagehlp.dll
    0xFE620000 \Windows\System32\ws2_32.dll
    0xFE610000 \Windows\System32\nsi.dll
    0xFE430000 \Windows\System32\setupapi.dll
    0xFE3F0000 \Windows\System32\wintrust.dll
    0xFE3B0000 \Windows\System32\xmllite.dll
    0xFE240000 \Windows\System32\crypt32.dll
    0xFE1A0000 \Windows\System32\comctl32.dll
    0xFE180000 \Windows\System32\devobj.dll
    0xFE110000 \Windows\System32\KernelBase.dll
    0xFE0D0000 \Windows\System32\cfgmgr32.dll
    0xFE0C0000 \Windows\System32\msasn1.dll

    Processes (total 87):
    0 System Idle Process
    4 System
    380 C:\Windows\System32\smss.exe
    528 csrss.exe
    588 csrss.exe
    596 C:\Windows\System32\wininit.exe
    632 C:\Windows\System32\winlogon.exe
    692 C:\Windows\System32\services.exe
    700 C:\Windows\System32\lsass.exe
    708 C:\Windows\System32\lsm.exe
    808 C:\Windows\System32\svchost.exe
    892 C:\Windows\System32\svchost.exe
    976 C:\Windows\System32\atiesrxx.exe
    124 C:\Windows\System32\svchost.exe
    420 C:\Windows\System32\svchost.exe
    424 C:\Windows\System32\svchost.exe
    1064 C:\Windows\System32\svchost.exe
    1172 C:\Windows\System32\svchost.exe
    1292 C:\Windows\System32\atieclxx.exe
    1440 C:\Windows\System32\spoolsv.exe
    1512 C:\Windows\System32\svchost.exe
    1608 C:\Windows\System32\taskhost.exe
    1684 C:\Windows\System32\dwm.exe
    1772 C:\Windows\explorer.exe
    1780 C:\Program Files\SUPERAntiSpyware\SASCore64.exe
    1812 C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe
    1348 C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
    1476 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    1924 C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    2008 C:\Program Files (x86)\Motorola Media Link\NServiceEntry.exe
    2052 C:\Windows\System32\svchost.exe
    2092 C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    2244 C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
    2344 C:\Windows\System32\nvraidservice.exe
    2356 C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
    2548 C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    2608 C:\Windows\System32\hasplms.exe
    2708 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
    2780 C:\Program Files (x86)\Trillian\trillian.exe
    2788 C:\Program Files (x86)\Hewlett-Packard\HP Easy Backup\HPBtnSrv.exe
    2812 C:\Windows\System32\taskeng.exe
    2860 C:\Program Files (x86)\Orb Networks\Orb\bin\OrbLauncher.exe
    2932 C:\Windows\SysWOW64\svchost.exe
    2996 C:\Program Files (x86)\iTunes\iTunesHelper.exe
    3004 C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
    3036 C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    3044 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    1268 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    2364 C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    2988 C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
    3080 C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
    3216 C:\Program Files (x86)\Motorola\Moto Helper Service\MotoHelper.exe
    3236 C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
    3320 C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
    3336 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    3392 C:\Windows\System32\svchost.exe
    3572 C:\Windows\System32\svchost.exe
    3612 C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    3660 C:\Windows\System32\svchost.exe
    3768 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
    3860 C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
    4164 WmiPrvSE.exe
    4316 C:\Windows\System32\wbem\unsecapp.exe
    4540 C:\Program Files\iPod\bin\iPodService.exe
    5104 C:\Program Files\Windows Media Player\wmpnetwk.exe
    4532 C:\Windows\System32\svchost.exe
    5064 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
    972 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
    3840 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
    3496 C:\Program Files (x86)\Orb Networks\Orb\bin\Orb.exe
    2328 C:\Program Files (x86)\Orb Networks\Orb\bin\OrbjetManager.exe
    3828 C:\Windows\System32\conhost.exe
    1524 C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
    936 C:\Windows\System32\svchost.exe
    2332 C:\Program Files\Logitech\SetPoint\SetPoint.exe
    5024 C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
    6036 C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
    5796 C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
    5196 C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
    1092 C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    4836 C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
    5960 C:\Program Files (x86)\BitTorrent\bittorrent.exe
    2292 C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
    5968 C:\Program Files (x86)\Opera\opera.exe
    5060 C:\Windows\System32\taskeng.exe
    1920 C:\Users\Brian\Desktop\MBRCheck.exe
    3592 C:\Windows\System32\conhost.exe

    \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)
    \\.\D: --> \\.\PhysicalDrive0 at offset 0x000000e5`62754200 (NTFS)
    \\.\G: --> \\.\PhysicalDrive0 at offset 0x000000df`c4055600 (NTFS)

    PhysicalDrive0 Model Number: WDC WD10EADS-65L5B1, Rev: 01.0

    Size Device Name MBR Status
    --------------------------------------------
    931 GB \\.\PhysicalDrive0 RE: Windows 7 MBR code detected
    SHA1: 4379A3D43019B46FA357F7DD6A53B45A3CA8FB79


    Done!
     
  5. Broni

    Broni Malware Annihilator Posts: 52,884   +344

    That looks good :)
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...