.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_33
Run by Mellissa at 20:56:42 on 2012-07-11
Microsoft Windows 7 Home Premium 6.1.7601.1.932.81.1033.18.4079.2218 [GMT 10:00]
.
AV: Quick Heal Total Security 12.00 *Enabled/Outdated* {D8418B0E-EE80-1320-B172-3D5DEB3CE14F}
SP: Quick Heal Total Security 12.00 *Enabled/Updated* {63206AEA-C8BA-1CAE-8BC2-062F90BBABF2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Quick Heal Firewall *Enabled* {E07A0A2B-A4EF-1278-9A2D-946815EFA634}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\SysWOW64\svchost.exe -k Akamai
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Quick Heal\Quick Heal Total Security\EMLPROXY.EXE
C:\Program Files\Quick Heal\Quick Heal Total Security\SAPISSVC.EXE
C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Quick Heal\Quick Heal Total Security\opssvc.exe
C:\Windows\SysWOW64\IoctlSvc.exe
C:\Program Files\Quick Heal\Quick Heal Total Security\quhlpsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Quick Heal\Quick Heal Total Security\onlinent.exe
C:\Program Files\Quick Heal\Quick Heal Total Security\SCANMSG.EXE
C:\Users\Mellissa\AppData\Local\Akamai\netsession_win.exe
C:\Users\Mellissa\AppData\Local\Akamai\netsession_win.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Mellissa\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\MagicDisc\MagicDisc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
\\.\globalroot\systemroot\Installer\{19ce4312-6f21-b5e0-9d3b-df277db0ba8d}\U
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local;127.0.0.1:9421;<local>
mSearchAssistant = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=444f7f950000000000001c6f65d1b360&tlver=1.4.19.19&affID=17159
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
{ae07101b-46d4-4a98-af68-0333ea26e113}
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [Google Update] "C:\Users\Mellissa\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [Akamai NetSession Interface] "C:\Users\Mellissa\AppData\Local\Akamai\netsession_win.exe"
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
mRun: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
StartupFolder: C:\Users\Mellissa\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Mellissa\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\Users\Mellissa\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\MAGICD~1.LNK - C:\Program Files (x86)\MagicDisc\MagicDisc.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\ADOBEG~1.LNK - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{7761EC03-88FB-46B2-B353-785B79F6EB0C} : DhcpNameServer = 192.168.0.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
BHO-X64: Increase performance and video formats for your HTML5 <video> - No File
BHO-X64: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
{ae07101b-46d4-4a98-af68-0333ea26e113}
mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun-x64: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun-x64: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
mRun-x64: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Mellissa\AppData\Roaming\Mozilla\Firefox\Profiles\uz0ds4z0.default\
FF - prefs.js: browser.startup.homepage - hxxp://
www.google.com/
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=444f7f950000000000001c6f65d1b360&tlver=1.4.19.19&instlRef=sst&affID=17159&q=
FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
FF - plugin: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
FF - plugin: C:\Users\Mellissa\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll
FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll
FF - plugin: C:\Windows\SysWOW64\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R1 AppleCharger;AppleCharger;C:\Windows\system32\DRIVERS\AppleCharger.sys --> C:\Windows\system32\DRIVERS\AppleCharger.sys [?]
R1 ggc;ggc;C:\Windows\system32\DRIVERS\ggc.sys --> C:\Windows\system32\DRIVERS\ggc.sys [?]
R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe -k Akamai [2009-7-14 20992]
R2 catflt;catflt;C:\Windows\system32\DRIVERS\catflt.sys --> C:\Windows\system32\DRIVERS\catflt.sys [?]
R2 Core Mail Protection;Core Mail Protection;C:\Program Files\Quick Heal\Quick Heal Total Security\EMLPROXY.EXE [2010-10-22 35784]
R2 Core Scanning Server;Core Scanning Server;C:\Program Files\Quick Heal\Quick Heal Total Security\SAPISSVC.EXE [2010-10-22 253384]
R2 EMLSS;EMLSS;C:\Windows\system32\drivers\emltdi.sys --> C:\Windows\system32\drivers\emltdi.sys [?]
R2 Online Protection System;Online Protection System;C:\Program Files\Quick Heal\Quick Heal Total Security\OPSSVC.EXE [2010-10-22 27592]
R2 Quick Update Service;Quick Update Service;C:\Program Files\Quick Heal\Quick Heal Total Security\QUHLPSVC.EXE [2010-10-22 110024]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-8-8 235624]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-3-5 2655768]
R3 MEIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 wsnfmp;Network Filter Miniport;C:\Windows\system32\DRIVERS\wsnf.sys --> C:\Windows\system32\DRIVERS\wsnf.sys [?]
S0 mscank;mscank;C:\Windows\system32\DRIVERS\mscank64.sys --> C:\Windows\system32\DRIVERS\mscank64.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 Core Scanning ServerEx;Core Scanning ServerEx;C:\Program Files\Quick Heal\Quick Heal Total Security\SAPISSVC.EXE [2010-10-22 253384]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-6-7 160944]
S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-5-5 113120]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S3 wsnf;Network Filter Service;C:\Windows\system32\DRIVERS\wsnf.sys --> C:\Windows\system32\DRIVERS\wsnf.sys [?]
.
=============== Created Last 30 ================
.
2012-07-11 10:24:17 -------- d-----w- C:\Users\Mellissa\AppData\Roaming\Malwarebytes
2012-07-11 10:24:12 -------- d-----w- C:\ProgramData\Malwarebytes
2012-07-11 10:24:10 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-07-11 10:24:10 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-07-11 07:50:36 -------- d-----w- C:\Users\Mellissa\AppData\Local\{AF8809CB-34D0-4350-A6C8-E2D8A8AD2FCC}
2012-07-11 07:50:22 -------- d-----w- C:\Users\Mellissa\AppData\Local\{1897D372-3F21-40D5-80E5-1883516E6A59}
2012-07-10 17:20:14 -------- d-----w- C:\Users\Mellissa\AppData\Local\{EDCD1058-EDEF-45C6-AD00-26B7C66F5120}
2012-07-10 17:20:02 -------- d-----w- C:\Users\Mellissa\AppData\Local\{F3DF253F-0B78-4C66-B212-3B9C1282D49F}
2012-07-10 16:07:12 -------- d-sh--w- C:\Windows\System32\%APPDATA%
2012-07-10 05:19:49 -------- d-----w- C:\Users\Mellissa\AppData\Local\{C127D0DD-5AB5-4577-9ACA-B0D4B9913942}
2012-07-10 05:19:36 -------- d-----w- C:\Users\Mellissa\AppData\Local\{2354E5D9-DEB2-4471-B15C-96C6288E1FF4}
2012-07-09 06:48:32 -------- d-----w- C:\Users\Mellissa\AppData\Local\{58ADE20F-6761-438B-932C-F4C579049A19}
2012-07-09 06:48:20 -------- d-----w- C:\Users\Mellissa\AppData\Local\{4986691C-E9FF-4BAF-891E-AC4AE488A76F}
2012-07-08 18:47:54 -------- d-----w- C:\Users\Mellissa\AppData\Local\{8F17E4AC-CBD5-4A19-887F-756326A190D9}
2012-07-08 06:48:30 -------- d-----w- C:\Users\Mellissa\AppData\Local\Macromedia
2012-07-08 06:47:38 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-07-08 06:47:22 -------- d-----w- C:\Users\Mellissa\AppData\Local\{F3A32A61-A69B-4F7E-9571-476032DA2D5C}
2012-07-08 06:47:05 -------- d-----w- C:\Users\Mellissa\AppData\Local\{48F4E9D8-EB2E-4E1E-B901-B22157F00A79}
2012-07-07 18:00:02 -------- d-----w- C:\Users\Mellissa\AppData\Local\{8A2973C3-9738-41D5-803D-B25ED449845F}
2012-07-07 17:59:51 -------- d-----w- C:\Users\Mellissa\AppData\Local\{DC8DF86C-C53C-4278-8151-E9AE82CB6AAE}
2012-07-07 05:59:37 -------- d-----w- C:\Users\Mellissa\AppData\Local\{7159FB81-720B-4DD4-B3C8-B92A9EAB04A5}
2012-07-07 05:59:25 -------- d-----w- C:\Users\Mellissa\AppData\Local\{D2A134DB-05E7-4B17-9295-AB84E1F8BD01}
2012-07-06 16:07:13 -------- d-----w- C:\Users\Mellissa\AppData\Local\{DE55261E-C441-4F1A-8CB3-3C5C1BA5C805}
2012-07-06 16:07:02 -------- d-----w- C:\Users\Mellissa\AppData\Local\{C45CF64D-F541-4AC2-8640-205168A7880B}
2012-07-06 09:44:49 9013136 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{0E528DC5-52F1-4DCD-B43E-99ED5184B7AC}\mpengine.dll
2012-07-06 04:06:36 -------- d-----w- C:\Users\Mellissa\AppData\Local\{15A10BB2-EEF2-43F8-8B06-0B141F932C26}
2012-07-06 04:06:24 -------- d-----w- C:\Users\Mellissa\AppData\Local\{A1407A34-AA40-4D1B-B881-13F593498E52}
2012-07-05 10:45:57 -------- d-----w- C:\Users\Mellissa\AppData\Local\{3855F818-DA74-4247-AE35-A9FD407B8178}
2012-07-05 10:45:44 -------- d-----w- C:\Users\Mellissa\AppData\Local\{E8F054F7-B755-469E-BC88-9BA353809A02}
2012-07-04 07:45:59 -------- d-----w- C:\Users\Mellissa\AppData\Local\{990DC3C6-1B5D-4202-9057-89B213E30D8D}
2012-07-04 07:45:41 -------- d-----w- C:\Users\Mellissa\AppData\Local\{D9D5547C-5CC0-4AB3-B6F2-6FA1E5BE4753}
2012-07-03 12:02:46 -------- d-----w- C:\Users\Mellissa\AppData\Local\{B0E7B7A8-6CC9-45E2-B2D4-2FF603DFE36C}
2012-07-03 12:02:35 -------- d-----w- C:\Users\Mellissa\AppData\Local\{C17396E8-4A52-4150-99E2-1E3748C50532}
2012-07-03 00:02:22 -------- d-----w- C:\Users\Mellissa\AppData\Local\{A0C56F8B-9FEE-41AF-BC7C-38228556B1E1}
2012-07-03 00:02:09 -------- d-----w- C:\Users\Mellissa\AppData\Local\{796C4AAF-7FF4-49E7-A468-DC55D9421D74}
2012-07-02 07:43:15 -------- d-----w- C:\Users\Mellissa\AppData\Local\{F2653708-102E-4675-A3C0-2189CA1FD7C1}
2012-07-02 07:43:03 -------- d-----w- C:\Users\Mellissa\AppData\Local\{838926B0-831D-4FE9-AD70-0A4222B96198}
2012-07-01 19:42:36 -------- d-----w- C:\Users\Mellissa\AppData\Local\{39955BEC-5A9A-4C53-A1EF-A6EB0E6E9C29}
2012-07-01 19:42:25 -------- d-----w- C:\Users\Mellissa\AppData\Local\{1EC1D327-71AF-439A-8254-85120C13FB7F}
2012-07-01 07:42:10 -------- d-----w- C:\Users\Mellissa\AppData\Local\{E5581CED-9702-4790-BD9D-10DA77A92387}
2012-07-01 07:41:58 -------- d-----w- C:\Users\Mellissa\AppData\Local\{CF4854A4-9270-4DFD-858A-4F886AB446A8}
2012-06-30 11:45:29 -------- d-----w- C:\Users\Mellissa\AppData\Local\{0B89609F-7958-489D-80F3-7274FCC501D9}
2012-06-30 11:45:18 -------- d-----w- C:\Users\Mellissa\AppData\Local\{1E7BCDC3-39BC-4E90-97B1-8267C0D2FB1C}
2012-06-29 23:45:05 -------- d-----w- C:\Users\Mellissa\AppData\Local\{D1B229A9-F417-4C01-A24E-CE5BBDA28DB0}
2012-06-29 23:44:53 -------- d-----w- C:\Users\Mellissa\AppData\Local\{778999AE-C577-4731-8453-58C5C86F871E}
2012-06-29 11:44:27 -------- d-----w- C:\Users\Mellissa\AppData\Local\{87829C87-EA0A-4663-98E0-59EE286589FC}
2012-06-29 11:44:14 -------- d-----w- C:\Users\Mellissa\AppData\Local\{B0AE1941-24D9-47CF-B4ED-2C57A25F6F1C}
2012-06-28 12:57:24 -------- d-----w- C:\Users\Mellissa\AppData\Local\{D4CE1644-8FE0-4CBA-A2A3-790F03C94895}
2012-06-28 12:57:13 -------- d-----w- C:\Users\Mellissa\AppData\Local\{44F30F3B-742E-4DBF-A9A2-D647F7E4DE41}
2012-06-28 00:56:47 -------- d-----w- C:\Users\Mellissa\AppData\Local\{9F55989E-22DA-44D8-B44B-957EB51C3052}
2012-06-28 00:56:32 -------- d-----w- C:\Users\Mellissa\AppData\Local\{0BB99D41-720D-43A2-8CAB-C579B48ECB19}
2012-06-26 23:53:11 -------- d-----w- C:\Users\Mellissa\AppData\Local\{55000214-59C7-47CE-B4B9-E8AD80E55935}
2012-06-26 23:53:00 -------- d-----w- C:\Users\Mellissa\AppData\Local\{23353F6D-12EA-4254-977F-9F67EF8EFB5D}
2012-06-26 11:52:45 -------- d-----w- C:\Users\Mellissa\AppData\Local\{F473459B-B9CA-44D2-BFA8-2B4EE0BAFF6B}
2012-06-26 11:52:29 -------- d-----w- C:\Users\Mellissa\AppData\Local\{DCF19AE6-2E86-4B4D-8F1D-9DD37E80C91B}
2012-06-25 20:26:45 -------- d-----w- C:\Users\Mellissa\AppData\Local\{45E21077-2581-44CB-ADCD-567ADADC4EE3}
2012-06-25 20:26:34 -------- d-----w- C:\Users\Mellissa\AppData\Local\{7F5FAB8D-39AF-42DA-865F-8FA7D66835B6}
2012-06-25 08:26:19 -------- d-----w- C:\Users\Mellissa\AppData\Local\{9EC642FD-B34F-42C5-9B38-6E3B5FEA765B}
2012-06-25 08:26:05 -------- d-----w- C:\Users\Mellissa\AppData\Local\{84CA7A9D-413A-4D69-BB4C-D883D9648163}
2012-06-24 20:09:58 -------- d-----w- C:\Users\Mellissa\AppData\Local\{2F701836-9556-410F-99C1-EEE7D6CA10E1}
2012-06-24 20:09:47 -------- d-----w- C:\Users\Mellissa\AppData\Local\{4B8B2FC4-B22F-4955-A4C6-0A9DA7142F39}
2012-06-24 08:09:25 -------- d-----w- C:\Users\Mellissa\AppData\Local\{F1504446-E982-4DF9-9705-18D283BBF884}
2012-06-24 08:09:08 -------- d-----w- C:\Users\Mellissa\AppData\Local\{8FAF9F44-2A51-4D9A-83CC-2234EF979255}
2012-06-23 14:53:19 -------- d-----w- C:\Users\Mellissa\AppData\Local\{8CA3FF56-155D-4BDE-AFD2-9CF63C1322CF}
2012-06-23 14:53:07 -------- d-----w- C:\Users\Mellissa\AppData\Local\{F844DFCE-CF65-4CEF-9B21-FD399AABA104}
2012-06-23 14:38:32 -------- d-----r- C:\Program Files (x86)\Skype
2012-06-23 14:33:05 770384 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcr100.dll
2012-06-23 14:33:05 421200 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcp100.dll
2012-06-23 14:32:45 -------- d-----w- C:\Users\Mellissa\AppData\Local\{F6FC10C6-A631-4584-856B-B5C9B485A3EB}
2012-06-23 14:32:33 -------- d-----w- C:\Users\Mellissa\AppData\Local\{234B2BE5-C6FC-42CA-BF48-35C95749BB5A}
2012-06-22 14:33:24 -------- d-----w- C:\Users\Mellissa\AppData\Roaming\Cinders
2012-06-22 13:34:18 2622464 ----a-w- C:\Windows\System32\wucltux.dll
2012-06-22 13:34:05 99840 ----a-w- C:\Windows\System32\wudriver.dll
2012-06-22 13:33:47 36864 ----a-w- C:\Windows\System32\wuapp.exe
2012-06-22 13:33:47 186752 ----a-w- C:\Windows\System32\wuwebv.dll
2012-06-22 13:31:13 -------- d-----w- C:\Users\Mellissa\AppData\Local\{C8BF5A03-E857-4007-9CA2-647D6BE92D1B}
2012-06-22 13:30:53 -------- d-----w- C:\Users\Mellissa\AppData\Local\{A9219D0E-86D9-4B38-B7CA-290CAC73C449}
2012-06-16 07:45:16 -------- d-----w- C:\Users\Mellissa\AppData\Local\{E985B93C-744E-4E83-AD96-6F1A7471C491}
2012-06-15 09:53:04 -------- d-----w- C:\Users\Mellissa\AppData\Local\{80A1D408-590C-419F-948B-C579C3957982}
2012-06-14 12:37:48 -------- d-----w- C:\Users\Mellissa\AppData\Local\{54C0313E-8092-4522-9DB5-73DD2946EEB3}
2012-06-14 12:37:35 -------- d-----w- C:\Users\Mellissa\AppData\Local\{591BDD7E-41F9-4077-900D-85E9455A96A0}
2012-06-14 07:01:23 -------- d-----w- C:\Users\Mellissa\AppData\Local\{840951C7-6F81-44BF-ADFF-40971ACF4A89}
2012-06-14 07:01:08 -------- d-----w- C:\Users\Mellissa\AppData\Local\{6CD2F134-6B3D-4AE7-9421-D86B4A08E12F}
2012-06-13 09:39:57 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
2012-06-13 09:39:57 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-06-13 09:39:57 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-06-13 09:34:20 209920 ----a-w- C:\Windows\System32\profsvc.dll
2012-06-13 09:34:00 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-06-13 09:33:59 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-06-13 09:33:59 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-06-13 09:31:18 3146752 ----a-w- C:\Windows\System32\win32k.sys
2012-06-13 09:31:02 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-06-13 09:30:55 3216384 ----a-w- C:\Windows\System32\msi.dll
2012-06-13 09:30:55 2342400 ----a-w- C:\Windows\SysWow64\msi.dll
2012-06-13 09:30:06 1462272 ----a-w- C:\Windows\System32\crypt32.dll
2012-06-13 09:30:06 1158656 ----a-w- C:\Windows\SysWow64\crypt32.dll
2012-06-13 09:30:05 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
2012-06-13 09:30:05 140288 ----a-w- C:\Windows\System32\cryptnet.dll
2012-06-13 09:30:04 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2012-06-13 09:30:04 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
2012-06-13 08:41:30 -------- d-----w- C:\Users\Mellissa\AppData\Local\{4BBFC717-0450-47E6-9A2B-012B24B7DCE4}
2012-06-13 08:41:17 -------- d-----w- C:\Users\Mellissa\AppData\Local\{6D99F37E-21A0-42EA-8EF2-DE913E43F14D}
.
==================== Find3M ====================
.
2012-07-10 16:03:54 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-18 02:06:48 2311680 ----a-w- C:\Windows\System32\jscript9.dll
2012-05-18 01:59:14 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-05-18 01:58:39 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-05-18 01:55:22 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-05-18 01:51:30 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-05-17 22:45:37 1800192 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-05-17 22:35:47 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-05-17 22:35:39 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-05-17 22:29:45 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-05-17 22:24:45 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-05-09 02:21:41 476936 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll
2012-05-09 02:21:36 472840 ----a-w- C:\Windows\SysWow64\deployJava1.dll
.
============= FINISH: 20:58:24.59 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 5/03/2011 3:47:05 PM
System Uptime: 11/07/2012 8:33:42 PM (0 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | H67MA-D2H-B3
Processor: Intel(R) Core(TM) i5-2400 CPU @ 3.10GHz | Socket 1155 | 3301/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 931 GiB total, 850.207 GiB free.
D: is CDROM ()
E: is CDROM (UDF)
F: is CDROM (CDFS)
.
==== Disabled Device Manager Items =============
.
Class GUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Description: mscank
Device ID: ROOT\LEGACY_MSCANK\0000
Manufacturer:
Name: mscank
PNP Device ID: ROOT\LEGACY_MSCANK\0000
Service: mscank
.
==== System Restore Points ===================
.
RP134: 22/06/2012 11:33:28 PM - Windows Update
RP135: 22/06/2012 11:37:17 PM - Windows Update
RP136: 24/06/2012 12:33:49 AM - Windows Live Essentials
RP137: 24/06/2012 12:34:44 AM - WLSetup
RP138: 26/06/2012 9:55:20 PM - Windows Update
RP139: 4/07/2012 7:26:58 AM - Windows Update
RP140: 7/07/2012 4:04:41 PM - Installed Java(TM) 6 Update 33
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Photoshop CS
Adobe Reader 9.3
Akamai NetSession Interface
Apple Application Support
Apple Software Update
calibre
Cinders - Demo version 1.0.5.0
D3DX10
DivX Setup
Dropbox
GIMP 2.6.11
Google Chrome
Intel(R) Control Center
Intel(R) Management Engine Components
Java Auto Updater
Java(TM) 6 Update 33
MagicDisc 2.7.106
Malwarebytes Anti-Malware version 1.61.0.1400
MapleStory
Messenger Plus! 5
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Mozilla Firefox 13.0.1 (x86 en-GB)
Mozilla Maintenance Service
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 8 Essentials
neroxml
Nexon Game Manager
NVIDIA PhysX
NVIDIA Stereoscopic 3D Driver
ON_OFF Charge B11.0110.1
Pando Media Booster
QuickTime
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
Renesas Electronics USB 3.0 Host Controller Driver
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2598041) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition
Skype? 5.10
Starry☆Sky~in Spring~
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
VC80CRTRedist - 8.0.50727.6195
VCRedistSetup
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Messenger
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Yo-Jin-Bo
.
==== Event Viewer Messages From Past Week ========
.
11/07/2012 8:34:27 PM, Error: Service Control Manager [7023] - The Function Discovery Resource Publication service terminated with the following error: %%-2147024891
11/07/2012 8:34:27 PM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Resource Publication service which failed to start because of the following error: %%-2147024891
11/07/2012 8:34:01 PM, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: The specified service does not exist as an installed service.
11/07/2012 8:34:00 PM, Error: Service Control Manager [7003] - The IPsec Policy Agent service depends the following service: BFE. This service might not be installed.
11/07/2012 8:33:59 PM, Error: Service Control Manager [7003] - The IKE and AuthIP IPsec Keying Modules service depends the following service: BFE. This service might not be installed.
11/07/2012 8:14:37 AM, Error: Schannel [36888] - The following fatal alert was generated: 40. The internal error state is 107.
11/07/2012 8:14:37 AM, Error: Schannel [36874] - An SSL 3.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.
.
==== End Of File ===========================