My DDS log
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_26
Run by Sean Rucker at 22:46:30 on 2011-12-19
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4061.1713 [GMT -6:00]
.
AV: ESET NOD32 Antivirus 5.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\FBAgent.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Windows\AsScrPro.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\SysWOW64\svchost.exe -k Akamai
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\Sean Rucker\Desktop\45fircep.exe
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://google.atcomet.com/b/
uDefault_Page_URL = hxxp://asus.msn.com
mDefault_Page_URL = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: H - No File
uURLSearchHooks: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTo1.dll
mURLSearchHooks: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTo1.dll
mWinlogon: Userinit=userinit.exe,
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - C:\Program Files (x86)\ConduitEngine\ConduitEngin1.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTo1.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: SMTTB2009 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll
TB: HyperCam Toolbar: {338b4dfe-2e2c-4338-9e41-e176d497299e} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTo1.dll
TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - C:\Program Files (x86)\ConduitEngine\ConduitEngin1.dll
TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [DW6] "C:\Program Files (x86)\The Weather Channel FW\Desktop\DesktopWeather.exe"
uRun: [Facebook Update] "C:\Users\Sean Rucker\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
mRun: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
mRun: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
mRun: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
mRun: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
mRun: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
StartupFolder: C:\Users\SEANRU~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
StartupFolder: C:\Users\SEANRU~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\FANCYS~1.LNK - C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SRSPRE~1.LNK - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe
uPolicies-explorer: HideSCAHealth = 1 (0x1)
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: &D&ownload &with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
IE: &D&ownload all with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Sean Rucker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{121B94E1-412A-438C-BE98-AFEB64B2F39B} : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{121B94E1-412A-438C-BE98-AFEB64B2F39B}\05 : DhcpNameServer = 68.87.72.134 68.87.77.134
TCP: Interfaces\{121B94E1-412A-438C-BE98-AFEB64B2F39B}\36C6F677E696E636166797 : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{121B94E1-412A-438C-BE98-AFEB64B2F39B}\7416D656341666562343 : DhcpNameServer = 10.0.0.1
TCP: Interfaces\{121B94E1-412A-438C-BE98-AFEB64B2F39B}\D43434D27457563747 : DhcpNameServer = 165.173.124.10 165.173.124.11 165.173.252.191 165.173.252.192
TCP: Interfaces\{121B94E1-412A-438C-BE98-AFEB64B2F39B}\D43434D275962756C6563737D28456C607 : DhcpNameServer = 165.173.124.10 165.173.124.11 165.173.252.191 165.173.252.192
TCP: Interfaces\{121B94E1-412A-438C-BE98-AFEB64B2F39B}\D43434D2F40756E6 : DhcpNameServer = 165.173.124.10 165.173.124.11 165.173.252.191 165.173.252.192
TCP: Interfaces\{925EE5A0-56C4-4BF8-ACB7-B07956CF0007} : DhcpNameServer = 192.168.1.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
BHO-X64: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO-X64: 0x1 - No File
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Conduit Engine: {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngin1.dll
BHO-X64: Search Helper: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
BHO-X64: Search Helper - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTo1.dll
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: SMTTB2009 Class: {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll
BHO-X64: SMTTB2009 - No File
TB-X64: HyperCam Toolbar: {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\HyperCam Toolbar\tbcore3.dll
TB-X64: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB-X64: uTorrentBar Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTo1.dll
TB-X64: Conduit Engine: {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngin1.dll
TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB-X64: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
mRun-x64: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
mRun-x64: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
mRun-x64: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
mRun-x64: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
mRun-x64: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
IE-X64: {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Sean Rucker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Sean Rucker\AppData\Roaming\Mozilla\Firefox\Profiles\j4ydswwf.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/SeanRucker|
http://tinychat.com/vegisgawdmang
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=4cbf2f9b&v=6.010.006.004&i=26&tp=ab&iy=&ychte=us&lng=en-US&q=
FF - prefs.js: network.proxy.http - 63.174.60.11
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.type - 4
FF - component: C:\Program Files (x86)\AVG\AVG10\Firefox\components\avgssff.dll
FF - component: C:\Program Files (x86)\AVG\AVG10\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: C:\Program Files (x86)\AVG\AVG10\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: C:\Program Files (x86)\AVG\AVG10\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: C:\Program Files (x86)\AVG\AVG10\Toolbar\Firefox\avg@igeared\components\xpavgtbapi.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
FF - plugin: C:\Users\Sean Rucker\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
FF - plugin: C:\Users\Sean Rucker\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
---- FIREFOX POLICIES ----
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
============= SERVICES / DRIVERS ===============
.
R0 lullaby;lullaby;C:\Windows\system32\DRIVERS\lullaby.sys --> C:\Windows\system32\DRIVERS\lullaby.sys [?]
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AFBAgent;AFBAgent;"C:\Windows\system32\FBAgent.exe" --> C:\Windows\system32\FBAgent.exe [?]
R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe -k Akamai [2009-7-13 20992]
R2 ASMMAP64;ASMMAP64;C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-7-2 15416]
R2 eamonm;eamonm;C:\Windows\system32\DRIVERS\eamonm.sys --> C:\Windows\system32\DRIVERS\eamonm.sys [?]
R2 ekrn;ESET Service;C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-9-22 974944]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\system32\DRIVERS\ETD.sys --> C:\Windows\system32\DRIVERS\ETD.sys [?]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;C:\Windows\system32\drivers\viahduaa.sys --> C:\Windows\system32\drivers\viahduaa.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 epfwwfpr;epfwwfpr;C:\Windows\system32\DRIVERS\epfwwfpr.sys --> C:\Windows\system32\DRIVERS\epfwwfpr.sys [?]
S2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-10 366152]
S3 AmUStor;AM USB Stroage Driver;C:\Windows\system32\drivers\AmUStor.SYS --> C:\Windows\system32\drivers\AmUStor.SYS [?]
S3 fssfltr;fssfltr;C:\Windows\system32\DRIVERS\fssfltr.sys --> C:\Windows\system32\DRIVERS\fssfltr.sys [?]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840]
S3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;C:\Windows\system32\DRIVERS\ManyCam_x64.sys --> C:\Windows\system32\DRIVERS\ManyCam_x64.sys [?]
S3 npggsvc;nProtect GameGuard Service;C:\Windows\system32\GameMon.des -service --> C:\Windows\system32\GameMon.des -service [?]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;C:\Windows\system32\DRIVERS\SiSG664.sys --> C:\Windows\system32\DRIVERS\SiSG664.sys [?]
S3 SUSTUCAM;Susteen USB Cable Modem Driver;C:\Windows\system32\DRIVERS\sustucam.sys --> C:\Windows\system32\DRIVERS\sustucam.sys [?]
S3 SUSTUCAP;Susteen USB Cable Port Driver;C:\Windows\system32\DRIVERS\sustucap.sys --> C:\Windows\system32\DRIVERS\sustucap.sys [?]
S3 SUSTUCAU;Susteen USB Cable USB Driver;C:\Windows\system32\DRIVERS\sustucau.sys --> C:\Windows\system32\DRIVERS\sustucau.sys [?]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2011-12-19 21:24:15 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{5D4D91F7-552F-488E-9421-8DACCA688786}
2011-12-19 09:23:56 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{70B8AF23-4D71-4D2D-B77A-5425E178AAD0}
2011-12-19 09:23:42 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{F7A8209E-5CA4-40A5-9B6B-DACDCB3444FB}
2011-12-19 08:02:30 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{1CC42E53-D57A-478F-AE39-E17958415305}
2011-12-19 08:02:16 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{6F9026B3-D951-46DB-B04E-0BF3E791B34D}
2011-12-19 05:37:03 -------- d-----w- C:\ProgramData\AVAST Software
2011-12-19 05:08:29 -------- d-s---w- C:\commy
2011-12-18 18:57:51 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{DD1C99CB-165E-43BA-B3FA-3117ED54E77D}
2011-12-18 18:57:36 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{5202659E-4351-4496-8ABC-B8F3AFEA0F00}
2011-12-18 04:37:49 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{060CEE95-D3C0-465E-8737-5EE582703656}
2011-12-18 04:37:36 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{B726D890-83D6-475D-B142-7C6705063D43}
2011-12-17 09:57:09 -------- d-----w- C:\Windows\System32\SPReview
2011-12-17 09:32:29 387072 ----a-w- C:\Users\Sean Rucker\AppData\Roaming\IXekY.exe
2011-12-17 09:32:29 387072 ----a-w- C:\Users\Sean Rucker\AppData\Roaming\1kL7Gn.exe
2011-12-17 05:59:23 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{17988848-C462-4BAB-B0AD-E2605EC337E4}
2011-12-17 05:59:06 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{531770B4-80B6-49F7-8EB2-2B74A3866046}
2011-12-16 18:08:41 8822856 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B5D10CC8-EF8F-4C47-B1AD-74CF674E6F7C}\mpengine.dll
2011-12-15 23:57:23 3141632 ----a-w- C:\Windows\System32\win32k.sys
2011-12-15 21:32:59 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{CE1293C1-AFE0-49BB-B617-D1BD991E8E65}
2011-12-15 21:32:47 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{0EC3A1B7-511F-4A9B-A915-A4EA7A5A6B7F}
2011-12-15 10:05:57 -------- d-----w- C:\Program Files\ESET
2011-12-15 09:32:18 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{900E6517-AF20-4304-A6EE-EB6A77023061}
2011-12-15 09:32:04 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{B3688976-1B10-4F72-9B3E-DF0B6C31A48B}
2011-12-15 04:15:55 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2011-12-15 04:15:55 2048 ----a-w- C:\Windows\System32\tzres.dll
2011-12-15 04:09:21 723456 ----a-w- C:\Windows\System32\EncDec.dll
2011-12-15 04:09:21 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
2011-12-15 04:04:38 43520 ----a-w- C:\Windows\System32\csrsrv.dll
2011-12-14 21:23:32 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{E7FE6F1F-4873-4150-A427-20629FC58EC2}
2011-12-14 21:23:20 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{A309C2CA-57A6-4218-A5DA-9675CD88675D}
2011-12-14 09:23:03 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{DA80DBE8-7FCE-4DEC-82F1-87E26DF07382}
2011-12-14 09:22:49 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{F33B5C4A-8D51-47FF-A86A-85AD540F9B7F}
2011-12-14 09:12:06 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{6F9D1C84-988D-406D-B647-2F335FB2AAF5}
2011-12-13 22:06:52 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{1705F4BD-4917-408B-B095-F0280DB54CF8}
2011-12-13 22:06:40 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{7BA13F30-0232-4D14-97F4-F61EDF1E807F}
2011-12-13 10:06:13 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{110BE35D-AA73-4C78-AC5D-EF547779855F}
2011-12-13 10:06:01 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{597E23B2-9F27-4C3F-B855-98C831CF99AE}
2011-12-12 22:05:48 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{B2FD9D61-ABBB-4967-AA3C-E0A72DBDD7AB}
2011-12-12 22:05:36 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{1C620861-B8C8-437E-936B-A1A7EDEF671C}
2011-12-12 10:05:20 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{D7AA87CE-27EA-48E2-A6C0-52B1FEB6AC38}
2011-12-12 10:05:08 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{297F9EF2-8C8C-447B-9131-F0C1CF02C161}
2011-12-12 06:50:46 -------- d-----w- C:\Down
2011-12-12 06:45:04 -------- d-----w- C:\Windyzone
2011-12-12 06:43:02 77656 ----a-w- C:\Windows\System32\XAPOFX1_5.dll
2011-12-12 06:43:02 74072 ----a-w- C:\Windows\SysWow64\XAPOFX1_5.dll
2011-12-12 06:43:02 527192 ----a-w- C:\Windows\SysWow64\XAudio2_7.dll
2011-12-12 06:43:02 518488 ----a-w- C:\Windows\System32\XAudio2_7.dll
2011-12-12 06:43:00 239960 ----a-w- C:\Windows\SysWow64\xactengine3_7.dll
2011-12-12 06:43:00 176984 ----a-w- C:\Windows\System32\xactengine3_7.dll
2011-12-12 06:32:06 -------- d-----w- C:\Perfect World Entertainment
2011-12-11 22:04:32 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{652CFF33-0F88-4AD2-992D-28AE8F57F248}
2011-12-11 22:04:18 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{8594E4E0-70D3-42DD-9640-BFAADFB2187B}
2011-12-10 11:03:12 -------- d-----w- C:\Windows\en
2011-12-10 10:57:26 18328 ----a-w- C:\ProgramData\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-12-10 10:49:14 -------- d-----w- C:\Windows\System32\EventProviders
2011-12-10 10:45:40 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{436C0D55-2964-467B-861A-E446E3DE937D}
2011-12-10 10:45:21 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{60E7B212-36EC-44A1-92AB-12022DCDD50B}
2011-12-10 10:33:22 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{839DCA19-CD58-4E19-9CBB-5E6ABA8EE74D}
2011-12-10 10:33:07 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{80AD8F6F-FD49-4FB6-B38D-DAB43B5CFEB0}
2011-12-10 10:32:53 -------- d-----w- C:\Users\Sean Rucker\AppData\Roaming\Malwarebytes
2011-12-10 10:32:38 -------- d-----w- C:\ProgramData\Malwarebytes
2011-12-10 10:32:29 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-12-10 10:07:44 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{58E10789-814B-4258-AF0F-3A62C2598910}
2011-12-10 10:07:28 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{B5B4DA74-EB22-4317-A45D-A22FF62BEDB1}
2011-12-10 09:46:00 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{FAF85C9E-F83F-4273-8A37-801B5E71E4C0}
2011-12-10 09:45:46 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{B6A8D5E6-1413-4F2A-B68A-957A122BEF75}
2011-12-10 09:33:04 -------- d-----we C:\Windows\system64
2011-12-02 03:18:26 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{CCF5AC4B-533A-4E54-AC84-55B986DE30A8}
2011-12-02 03:18:11 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{6CD371CA-D674-4385-A3B4-82044AA948DC}
2011-12-02 03:05:38 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{21191F51-BEB3-490F-872B-BE582ADA8962}
2011-12-02 03:05:24 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{7C951A71-3908-46F5-88F6-77125C499A7F}
2011-11-29 19:48:47 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{C61D78C3-09AE-4BD2-AF0D-D7B2393A81BB}
2011-11-29 19:48:35 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{CD2FF965-783E-464A-81C5-0673B1C1DA64}
2011-11-25 23:46:28 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{6BAFC90C-98EE-40E3-963F-6C7128CA9AA0}
2011-11-25 23:46:16 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{005027C6-2ABE-4D18-B232-3D20DED6D404}
2011-11-24 19:54:24 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{0C01CB50-23B9-444E-8A7A-64583046ED15}
2011-11-24 19:54:11 -------- d-----w- C:\Users\Sean Rucker\AppData\Local\{94388513-BA66-4BCB-8EBF-C243B2E5B36C}
.
==================== Find3M ====================
.
2011-12-11 21:39:07 152064 ----a-w- C:\Windows\SysWow64\msclmd.dll
2011-12-11 21:39:05 175104 ----a-w- C:\Windows\System32\msclmd.dll
2011-10-04 20:52:46 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-09-29 16:24:44 1897328 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2009-04-08 17:31:56 106496 ----a-w- C:\Program Files (x86)\Common Files\CPInstallAction.dll
2008-08-12 04:45:20 155648 ----a-w- C:\Program Files (x86)\Common Files\MSIactionall.dll
.
============= FINISH: 22:56:05.90 ===============