Here are the logs as per your request.
###################################################################
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org
Database version: 7793
Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421
25/09/2011 12:25:33 PM
mbam-log-2011-09-25 (12-25-33).txt
Scan type: Quick scan
Objects scanned: 176574
Time elapsed: 3 minute(s), 34 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 2
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CLASSES_ROOT\.exe\shell\open\command\(default) (Hijack.ExeFile) -> Value: (default) -> Quarantined and deleted successfully.
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Users\Nigel\AppData\Local\fld.exe" -a "C:\Program Files (x86)\Internet Explorer\iexplore.exe") Good: (iexplore.exe) -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
c:\Users\Nigel\AppData\Local\Temp\smg.dll (Rootkit.0Access) -> Quarantined and deleted successfully.
c:\Users\Nigel\AppData\Local\Temp\ungyrkdvoh (Rootkit.0Access) -> Quarantined and deleted successfully.
#################################################################
GMER 1.0.15.15641 -
http://www.gmer.net
Rootkit scan 2011-09-26 11:52:31
Windows 6.1.7601 Service Pack 1
Running: owlf9o98.exe
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\889ffab1824c
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\889ffab1824c@001ea450e707 0xFA 0x3E 0x95 0x04 ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\889ffab1824c (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\889ffab1824c@001ea450e707 0xFA 0x3E 0x95 0x04 ...
---- EOF - GMER 1.0.15 ----
#################################################################
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Nigel at 12:15:41 on 2011-09-26
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.61.1033.18.3957.1035 [GMT 10:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Windows\system32\mfevtps.exe
C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\rundll32.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files (x86)\Synaptics\Scrybe\scrybe.exe
C:\Windows\system32\SearchIndexer.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\mcafee.com\agent\mcagent.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayAlert.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Users\Nigel\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nigel\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nigel\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nigel\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nigel\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nigel\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nigel\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Nigel\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
C:\Users\Nigel\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\SysWOW64\ping.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\notepad.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://ninemsn.com.au/?pc=WLEM
uSearch Bar = Preserve
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: McAfee Phishing Filter: {27b4851a-3207-45a2-b947-be8afe6163ab} - c:\progra~1\mcafee\msk\mskapbho.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110920111214.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
BHO: SSOIEAddonBHO Class: {da5bce70-d057-4d63-943d-5f3927ec59f1} - C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
uRun: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
uRun: [Google Update] "C:\Users\Nigel\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
mRun: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
mRun: [FATrayAlert] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
mRun: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
mRun: [FAStartup]
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\Scrybe.lnk - C:\Windows\Installer\{147DFAD8-34C3-4DE1-9FCA-ACEFDE9EF810}\NewShortcut11_8ACB210B42E44145A8C31F8E3DD765A3.exe
uPolicies-explorer: HideSCAHealth = 1 (0x1)
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
LSP: mswsock.dll
DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} - hxxp://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
TCP: DhcpNameServer = 149.171.96.2 149.171.192.2
TCP: Interfaces\{3E06626D-955F-47FB-BE0F-F7692E3AE0C6} : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{94FC66AF-6DA9-4597-B734-FA569FEAB103} : DhcpNameServer = 149.171.96.2 149.171.192.2
TCP: Interfaces\{94FC66AF-6DA9-4597-B734-FA569FEAB103}\355454D2145535 : DhcpNameServer = 192.168.0.1
TCP: Interfaces\{94FC66AF-6DA9-4597-B734-FA569FEAB103}\4556E64616 : DhcpNameServer = 211.29.152.116 198.142.0.51
TCP: Interfaces\{94FC66AF-6DA9-4597-B734-FA569FEAB103}\96F527F636B6A392 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{94FC66AF-6DA9-4597-B734-FA569FEAB103}\C4545484F4553554 : DhcpNameServer = 192.168.1.254
TCP: Interfaces\{94FC66AF-6DA9-4597-B734-FA569FEAB103}\E4544574541425 : DhcpNameServer = 192.168.0.1
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\McAfee\msc\McSnIePl.dll
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
Notify: FastAccess - C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
LSA: Notification Packages = scecli FAPassSync
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: McAfee Phishing Filter: {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll
BHO-X64: McAfee Phishing Filter - No File
BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
BHO-X64: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110920111214.dll
BHO-X64: scriptproxy - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Windows Live Messenger Companion Helper: {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO-X64: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
BHO-X64: SSOIEAddonBHO Class: {DA5BCE70-D057-4D63-943D-5F3927EC59F1} - C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll
BHO-X64: SSOIEAddonBHO - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB-X64: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
mRun-x64: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun-x64: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
mRun-x64: [FATrayAlert] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
mRun-x64: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
mRun-x64: [FAStartup]
mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun-x64: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
.
============= SERVICES / DRIVERS ===============
.
R0 mfehidk;McAfee Inc. mfehidk;C:\Windows\system32\drivers\mfehidk.sys --> C:\Windows\system32\drivers\mfehidk.sys [?]
R0 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\system32\drivers\mfewfpk.sys --> C:\Windows\system32\drivers\mfewfpk.sys [?]
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys --> C:\Windows\system32\DRIVERS\dtsoftbus01.sys [?]
R1 mfenlfk;McAfee NDIS Light Filter;C:\Windows\system32\DRIVERS\mfenlfk.sys --> C:\Windows\system32\DRIVERS\mfenlfk.sys [?]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2010-2-18 14920]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2010-2-18 12360]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2010-6-30 128752]
R2 AERTFilters;Andrea RT Filters Service;C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2011-1-21 98208]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 FAService;FAService;C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe [2010-11-2 2428552]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-9-25 366152]
R2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2011-8-11 249936]
R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2011-8-11 249936]
R2 McShield;McAfee McShield;C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe [2011-1-21 199008]
R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe [2011-1-21 208272]
R2 mfevtp;McAfee Validation Trust Protection Service;"C:\Windows\system32\mfevtps.exe" --> C:\Windows\system32\mfevtps.exe [?]
R2 NOBU;Dell DataSafe Online;C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe [2010-8-26 2823000]
R2 ScrybeUpdater;Scrybe Updater;C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe [2011-5-27 1300264]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-9-14 508264]
R2 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe [2011-1-21 689472]
R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys --> C:\Windows\system32\DRIVERS\TurboB.sys [?]
R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-1-21 2533400]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atipmdag.sys --> C:\Windows\system32\DRIVERS\atipmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 btusbflt;Bluetooth USB Filter;C:\Windows\system32\drivers\btusbflt.sys --> C:\Windows\system32\drivers\btusbflt.sys [?]
R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys --> C:\Windows\system32\DRIVERS\btwl2cap.sys [?]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\system32\DRIVERS\CtClsFlt.sys --> C:\Windows\system32\DRIVERS\CtClsFlt.sys [?]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys --> C:\Windows\system32\DRIVERS\Impcd.sys [?]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;C:\Windows\system32\DRIVERS\L1C62x64.sys --> C:\Windows\system32\DRIVERS\L1C62x64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\system32\drivers\mfeavfk.sys --> C:\Windows\system32\drivers\mfeavfk.sys [?]
R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\system32\drivers\mfefirek.sys --> C:\Windows\system32\drivers\mfefirek.sys [?]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\system32\DRIVERS\NETw5s64.sys --> C:\Windows\system32\DRIVERS\NETw5s64.sys [?]
R3 Sftfs;Sftfs;C:\Windows\system32\DRIVERS\Sftfslh.sys --> C:\Windows\system32\DRIVERS\Sftfslh.sys [?]
R3 Sftplay;Sftplay;C:\Windows\system32\DRIVERS\Sftplaylh.sys --> C:\Windows\system32\DRIVERS\Sftplaylh.sys [?]
R3 Sftredir;Sftredir;C:\Windows\system32\DRIVERS\Sftredirlh.sys --> C:\Windows\system32\DRIVERS\Sftredirlh.sys [?]
R3 Sftvol;Sftvol;C:\Windows\system32\DRIVERS\Sftvollh.sys --> C:\Windows\system32\DRIVERS\Sftvollh.sys [?]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-9-14 219496]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2011-8-11 249936]
S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-4-1 183560]
S3 cfwids;McAfee Inc. cfwids;C:\Windows\system32\drivers\cfwids.sys --> C:\Windows\system32\drivers\cfwids.sys [?]
S3 FACAP;facap, FastAccess Video Capture;C:\Windows\system32\DRIVERS\facap.sys --> C:\Windows\system32\DRIVERS\facap.sys [?]
S3 fssfltr;fssfltr;C:\Windows\system32\DRIVERS\fssfltr.sys --> C:\Windows\system32\DRIVERS\fssfltr.sys [?]
S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840]
S3 McAWFwk;McAfee Activation Service;C:\PROGRA~1\mcafee\msc\mcawfwk.exe [2011-1-21 220528]
S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\system32\drivers\mferkdet.sys --> C:\Windows\system32\drivers\mferkdet.sys [?]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-3-25 30969208]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2010-3-6 340240]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0;PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - PCDR Kernel Mode Service Helper Driver;C:\Program Files\Dell Support Center\pcdsrvc_x64.pkms [2010-7-31 25072]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys --> C:\Windows\system32\Drivers\RtsUStor.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TurboBoost;TurboBoost;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-3 126352]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S4 McOobeSv;McAfee OOBE Service;C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe [2011-8-11 249936]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2011-09-26 02:09:06 -------- d-----w- C:\Users\Nigel\AppData\Local\{3EFFF8B4-283C-4D59-93B8-5B05B4421AD6}
2011-09-26 02:08:53 -------- d-----w- C:\Users\Nigel\AppData\Local\{B5585D3D-24DB-49DB-A447-633C045B597A}
2011-09-25 15:20:28 321584 ----a-w- C:\Windows\System32\drivers\SynTP.sys
2011-09-25 15:20:28 214824 ----a-w- C:\Windows\System32\SynTPAPI.dll
2011-09-25 15:20:28 147752 ----a-w- C:\Windows\System32\SynTPCo4.dll
2011-09-25 15:20:28 107816 ----a-w- C:\Windows\SysWow64\SynTPCOM.dll
2011-09-25 15:20:26 400168 ----a-w- C:\Windows\System32\SynCOM.dll
2011-09-25 15:20:26 270632 ----a-w- C:\Windows\System32\SynCtrl.dll
2011-09-25 15:20:26 214312 ----a-w- C:\Windows\SysWow64\SynCtrl.dll
2011-09-25 15:20:26 173352 ----a-w- C:\Windows\SysWow64\SynCOM.dll
2011-09-25 14:44:47 -------- d-----w- C:\Program Files\DellTPad
2011-09-25 14:44:34 1721576 ----a-w- C:\Windows\System32\WdfCoInstaller01009.dll
2011-09-25 14:44:34 100352 ----a-w- C:\Windows\System32\Vxdif.dll
2011-09-25 14:44:33 301688 ----a-w- C:\Windows\System32\drivers\Apfiltr.sys
2011-09-25 14:32:33 -------- d-----w- C:\Program Files\Synaptics
2011-09-25 14:32:03 -------- d-----w- C:\Program Files (x86)\Synaptics
2011-09-25 14:30:11 212992 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\engine\6\Intel 32\ILog.dll
2011-09-25 14:08:24 -------- d-----w- C:\Users\Nigel\AppData\Local\{4ADCA9D0-BCFE-4514-9F92-BEA7F41DB339}
2011-09-25 14:08:00 -------- d-----w- C:\Users\Nigel\AppData\Local\{19333648-7C7C-476C-AEEB-FD1E69909FBE}
2011-09-25 13:55:01 -------- d-----w- C:\Users\Nigel\AppData\Roaming\Synaptics
2011-09-25 13:49:10 -------- d-----w- C:\ProgramData\Synaptics
2011-09-25 13:48:33 66856 ----a-w- C:\Windows\SysWow64\SynTPEnhPS.dll
2011-09-25 09:26:16 -------- d-----w- C:\Program Files (x86)\Microsoft Synchronization Services
2011-09-25 09:23:40 -------- d-----w- C:\Program Files (x86)\Microsoft Visual Studio 8
2011-09-25 09:22:28 -------- d-----w- C:\Program Files (x86)\Microsoft Analysis Services
2011-09-25 09:17:48 271424 ----a-w- C:\Windows\System32\drivers\dtsoftbus01.sys
2011-09-25 09:17:17 -------- d-----w- C:\Program Files (x86)\DAEMON Tools Pro
2011-09-25 09:16:50 -------- d-----w- C:\Users\Nigel\AppData\Roaming\DAEMON Tools Pro
2011-09-25 09:16:50 -------- d-----w- C:\ProgramData\DAEMON Tools Pro
2011-09-25 04:32:42 -------- d-----w- C:\Users\Nigel\AppData\Local\Google
2011-09-25 02:19:53 -------- d-----w- C:\Users\Nigel\AppData\Roaming\Malwarebytes
2011-09-25 02:19:47 -------- d-----w- C:\ProgramData\Malwarebytes
2011-09-25 02:19:44 25416 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-09-25 02:19:42 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-09-25 02:07:32 -------- d-----w- C:\Users\Nigel\AppData\Local\{63F75444-1E14-4676-A8F3-12C4A0BC7317}
2011-09-25 02:07:19 -------- d-----w- C:\Users\Nigel\AppData\Local\{7D48FD06-F609-4F7B-A958-9C0483F6C995}
2011-09-24 17:03:58 -------- d-sh--w- C:\found.000
2011-09-24 12:57:17 -------- d-----w- C:\Users\Nigel\AppData\Local\{6E45FC36-4812-4ABB-88CE-E890E44E4AC1}
2011-09-24 12:56:53 -------- d-----w- C:\Users\Nigel\AppData\Local\{7108260B-1AF6-4EAF-A1CD-44373E77C554}
2011-09-24 10:21:45 -------- d-----we C:\Windows\system64
2011-09-24 09:46:16 -------- d-----w- C:\ProgramData\Frontline Systems
2011-09-23 19:38:03 -------- d-----w- C:\Users\Nigel\AppData\Local\{B4E032EF-2283-4667-A775-A9030148A43E}
2011-09-23 05:46:22 -------- d-----w- C:\Users\Nigel\AppData\Local\{62E9812D-0916-48D6-B1BD-73A68A0A5AFC}
2011-09-23 05:46:01 -------- d-----w- C:\Users\Nigel\AppData\Local\{8FB98D2D-0285-4736-BD85-AC3861292F38}
2011-09-22 04:06:08 -------- d-----w- C:\Users\Nigel\AppData\Local\{77F1247A-177C-4DA1-9223-85A275A6EDC0}
2011-09-21 02:29:59 -------- d-----w- C:\Users\Nigel\AppData\Local\{86F364FC-B4E6-44BE-8377-75218F55FBD6}
2011-09-21 02:29:44 -------- d-----w- C:\Users\Nigel\AppData\Local\{0B08B264-0840-4C12-8046-9576BBA030A5}
2011-09-20 13:15:34 -------- d-----w- C:\Users\Nigel\AppData\Local\{ACE5052B-9256-4F59-9E71-3C5299107340}
2011-09-20 13:15:12 -------- d-----w- C:\Users\Nigel\AppData\Local\{F2183EA1-0F48-460D-ABC9-B79132CA6FAE}
2011-09-20 01:14:49 -------- d-----w- C:\Users\Nigel\AppData\Local\{A8032418-F739-4FA6-A87F-C640DE7061C2}
2011-09-20 01:14:36 -------- d-----w- C:\Users\Nigel\AppData\Local\{39D50DBF-C97D-4424-86E9-94BEEF7F839D}
2011-09-19 14:42:15 -------- d-----w- C:\Windows\System32\SPReview
2011-09-19 14:41:34 -------- d-----w- C:\Windows\System32\EventProviders
2011-09-19 14:35:55 -------- d-----w- C:\Users\Nigel\AppData\Local\{D55323D9-CBAB-401E-AFF6-C84E6EB5B277}
2011-09-19 02:35:21 -------- d-----w- C:\Users\Nigel\AppData\Local\{6FBA4FC5-96B1-414D-AC48-D3A48A1B5D74}
2011-09-19 02:34:59 -------- d-----w- C:\Users\Nigel\AppData\Local\{9094B7A3-1309-4745-9189-6589AFF73FB3}
2011-09-18 14:34:31 -------- d-----w- C:\Users\Nigel\AppData\Local\{206A5B91-DD62-4F99-B476-7CCD18DFB09B}
2011-09-18 14:34:08 -------- d-----w- C:\Users\Nigel\AppData\Local\{415D45B9-86EB-45D6-84B4-22429366E536}
2011-09-18 02:33:54 -------- d-----w- C:\Users\Nigel\AppData\Local\{918329D7-3466-4E70-88B1-B480D95A2DA5}
2011-09-18 02:32:40 -------- d-----w- C:\Users\Nigel\AppData\Local\{2D4B6529-C133-4A8E-B82B-7B4073D0F18D}
2011-09-17 14:23:30 -------- d-----w- C:\Users\Nigel\AppData\Local\{842D97BC-3BEF-4C95-88FE-7EEA4B96F864}
2011-09-17 14:23:08 -------- d-----w- C:\Users\Nigel\AppData\Local\{8E87D073-C92B-4570-A14A-2858F2931A8F}
2011-09-17 02:22:55 -------- d-----w- C:\Users\Nigel\AppData\Local\{6498FA4C-E139-4200-B6F4-C5C451358827}
2011-09-17 02:21:43 -------- d-----w- C:\Users\Nigel\AppData\Local\{8397F1A5-5248-4539-BA0E-F1D96FCCD08C}
2011-09-16 14:06:27 -------- d-----w- C:\Users\Nigel\AppData\Local\{3767168F-8108-4795-BE1C-2846BE495DE5}
2011-09-16 14:06:16 -------- d-----w- C:\Users\Nigel\AppData\Local\{057EB05B-FEAC-479A-B086-D209C9ED1C23}
2011-09-16 09:33:56 -------- d-----w- C:\Users\Nigel\AppData\Local\{5D6E8ED9-3415-412C-B532-BB615C966F42}
2011-09-15 22:53:53 -------- d-----w- C:\Users\Nigel\AppData\Local\{A9A05A5D-BCC8-4671-B433-D3CA3CB41BB7}
2011-09-15 09:11:07 -------- d-----w- C:\Users\Nigel\AppData\Local\{7B533F7A-1490-46B3-8401-7E2AE9F8F722}
2011-09-15 09:10:57 -------- d-----w- C:\Users\Nigel\AppData\Local\{E331B05E-F35C-4ED5-9FF0-F1B420588F61}
2011-09-14 21:11:01 -------- d-----w- C:\Users\Nigel\AppData\Local\{BF417225-72BD-40A3-8D00-DB405683EC95}
2011-09-14 08:45:42 -------- d-----w- C:\Users\Nigel\AppData\Local\{9A919F17-0691-491C-910A-53B55BD5061B}
2011-09-14 08:44:34 -------- d-----w- C:\Users\Nigel\AppData\Local\{2CD8EAB3-C9F1-4F50-84BC-DB87DCBFF76A}
2011-09-13 15:20:45 -------- d-----w- C:\Users\Nigel\AppData\Local\{C17E8B88-35DB-4666-92C6-9ED0503F2C5A}
2011-09-13 15:20:22 -------- d-----w- C:\Users\Nigel\AppData\Local\{24114410-8FAD-40AB-9BD4-B67CD43AB22C}
2011-09-13 03:20:08 -------- d-----w- C:\Users\Nigel\AppData\Local\{FA5E0941-B701-49AF-85DD-F8CA65CF552C}
2011-09-13 03:19:46 -------- d-----w- C:\Users\Nigel\AppData\Local\{AC18C63A-2319-4B3E-9729-63E1EEB12125}
2011-09-12 15:19:20 -------- d-----w- C:\Users\Nigel\AppData\Local\{FFFC142C-CCD7-43E2-9508-64C624EFC6BF}
2011-09-12 15:18:58 -------- d-----w- C:\Users\Nigel\AppData\Local\{CEB208A1-6C93-4BE8-9A24-257688A9961C}
2011-09-12 03:18:29 -------- d-----w- C:\Users\Nigel\AppData\Local\{386E46C1-B056-4460-85A6-82FB406DC81A}
2011-09-12 03:18:12 -------- d-----w- C:\Users\Nigel\AppData\Local\{9B1F25C6-61C9-41ED-ABE9-B264F02881E6}
2011-09-11 15:17:57 -------- d-----w- C:\Users\Nigel\AppData\Local\{78B2FEE4-2368-4B5F-9AD4-D73678D266AA}
2011-09-11 15:17:35 -------- d-----w- C:\Users\Nigel\AppData\Local\{CDEBC2EA-6628-4921-B276-C543C7B975A3}
2011-09-11 03:17:35 -------- d-----w- C:\Users\Nigel\AppData\Local\{6770553F-4067-43A9-B14B-FC3FE53FC94C}
2011-09-10 14:51:39 -------- d-----w- C:\Users\Nigel\AppData\Local\{F7C69A3C-A4CF-4026-840F-BEDC2003796A}
2011-09-10 14:51:28 -------- d-----w- C:\Users\Nigel\AppData\Local\{9525F3BE-4BB1-4333-8BD5-2F0EEBB82980}
2011-09-10 02:30:16 -------- d-----w- C:\Users\Nigel\AppData\Local\{9B733A97-37C8-486F-98DF-5EF86490F6EC}
2011-09-10 02:29:54 -------- d-----w- C:\Users\Nigel\AppData\Local\{BC0D4117-0109-4566-8197-748C0C008027}
2011-09-09 14:29:59 -------- d-----w- C:\Users\Nigel\AppData\Local\{0F0D4522-B09E-4EA0-841F-B5CF3DD68430}
2011-09-09 01:49:12 -------- d-----w- C:\Users\Nigel\AppData\Local\{E9889F03-11A4-46C1-94FA-89E8A3FB586C}
2011-09-09 01:48:07 -------- d-----w- C:\Users\Nigel\AppData\Local\{982E7127-070F-49CC-9AEC-892444169569}
2011-09-08 13:02:43 -------- d-----w- C:\Users\Nigel\AppData\Local\{A9F1B7AA-45AD-41F6-97FC-78E1D555CCF2}
2011-09-08 13:02:22 -------- d-----w- C:\Users\Nigel\AppData\Local\{CA1FC9EE-C089-49F3-B895-6DEEF9057316}
2011-09-08 01:01:52 -------- d-----w- C:\Users\Nigel\AppData\Local\{3588C236-52BE-47A5-B8B9-D951E42D8445}
2011-09-08 01:01:04 -------- d-----w- C:\Users\Nigel\AppData\Local\{DB3AFEEC-F3A0-4BC2-9466-F0D7BC587263}
2011-09-07 05:11:00 -------- d-----w- C:\Users\Nigel\AppData\Local\{C7239970-4FD4-42FE-BB49-66384FB15816}
2011-09-07 05:10:50 -------- d-----w- C:\Users\Nigel\AppData\Local\{D4C9951C-6A83-4E2F-A420-262E5673C5A1}
2011-09-06 15:07:13 -------- d-----w- C:\Users\Nigel\AppData\Local\{436A44E7-CAF8-45D5-A470-F8ADBEC6B06E}
2011-09-06 15:07:02 -------- d-----w- C:\Users\Nigel\AppData\Local\{3CC8E0B0-0CB9-480A-8699-4F3C239B8CF0}
2011-09-06 03:06:33 -------- d-----w- C:\Users\Nigel\AppData\Local\{99D4F231-3D27-4A4C-9C85-F56CC829E310}
2011-09-06 03:06:10 -------- d-----w- C:\Users\Nigel\AppData\Local\{C33FDEFF-9659-43B4-BA78-9182EF0FCC2E}
2011-09-05 15:06:24 -------- d-----w- C:\Users\Nigel\AppData\Local\{3A86CA7C-ECD5-49A4-B8EF-0DE8AECFB619}
2011-09-05 15:06:14 -------- d-----w- C:\Users\Nigel\AppData\Local\{28099EBA-748B-4766-B677-37D5B8527779}
2011-09-05 01:37:03 -------- d-----w- C:\Users\Nigel\AppData\Local\{4CFF2ECB-306E-4378-85A8-6FCD002C4710}
2011-09-05 01:36:40 -------- d-----w- C:\Users\Nigel\AppData\Local\{32725D47-4866-4298-85FA-A6471001F3E5}
2011-09-04 13:36:25 -------- d-----w- C:\Users\Nigel\AppData\Local\{0DAF2B1E-A15B-4D6E-9A27-4FB9D9573F54}
2011-09-04 13:36:03 -------- d-----w- C:\Users\Nigel\AppData\Local\{78570A92-6686-4C2C-BBF0-A2191398AF01}
2011-09-04 01:35:49 -------- d-----w- C:\Users\Nigel\AppData\Local\{361B0635-10E4-4AB8-AA2D-807724734E02}
2011-09-04 01:35:27 -------- d-----w- C:\Users\Nigel\AppData\Local\{703253B5-BD94-4AEF-9210-6AF75FB0D527}
2011-09-03 13:34:58 -------- d-----w- C:\Users\Nigel\AppData\Local\{52183A8D-C483-473B-AFF3-224D14378201}
2011-09-03 13:34:36 -------- d-----w- C:\Users\Nigel\AppData\Local\{282D67BE-B045-4504-B999-8CA0E8EAAE63}
2011-09-03 01:34:42 -------- d-----w- C:\Users\Nigel\AppData\Local\{B3766B08-A837-4421-AE7E-FB4EA3DA3FBA}
2011-09-02 13:10:08 -------- d-----w- C:\Users\Nigel\AppData\Local\{20DC9633-8B97-40B7-B27B-97C671BFE63D}
2011-09-02 00:48:12 -------- d-----w- C:\Users\Nigel\AppData\Local\{246FC19E-2430-4BA8-8917-707864749F1A}
2011-09-02 00:47:37 -------- d-----w- C:\Users\Nigel\AppData\Local\{C58E9F30-281F-49D4-9C4D-215AA1BA60A0}
2011-09-01 12:47:22 -------- d-----w- C:\Users\Nigel\AppData\Local\{9910146E-15D7-411D-BEC2-FEEC4D97906B}
2011-09-01 12:47:00 -------- d-----w- C:\Users\Nigel\AppData\Local\{FBC6133B-240D-4702-A6C8-F3B9CE5DFCD2}
2011-09-01 00:46:30 -------- d-----w- C:\Users\Nigel\AppData\Local\{3D1D8F50-7F8C-410D-A862-68AEBD4507C9}
2011-09-01 00:46:10 -------- d-----w- C:\Users\Nigel\AppData\Local\{82FA067B-E8F7-4E5E-8D44-12DFF573F2EF}
2011-08-31 02:08:01 -------- d-----w- C:\Users\Nigel\AppData\Local\{83056EDB-3A6D-4286-9ACB-F2AD6B58B026}
2011-08-31 02:07:26 -------- d-----w- C:\Users\Nigel\AppData\Local\{0A3E5AEE-7C21-4F9A-B254-6635D5B220F3}
2011-08-30 14:07:12 -------- d-----w- C:\Users\Nigel\AppData\Local\{5D0DB80D-D9CB-4814-83CC-5BBAA764B46C}
2011-08-30 14:06:50 -------- d-----w- C:\Users\Nigel\AppData\Local\{90F8226A-6577-4215-8696-1DA6B2FECC2C}
2011-08-30 02:06:20 -------- d-----w- C:\Users\Nigel\AppData\Local\{71015F5F-3346-43C4-8C42-875F9D20F20F}
2011-08-30 02:06:03 -------- d-----w- C:\Users\Nigel\AppData\Local\{7E4EDAE8-B999-4661-8A8A-DE1803824C08}
2011-08-29 14:02:41 -------- d-----w- C:\Users\Nigel\AppData\Local\{B1CD7681-60F6-46CC-9575-F4D28F490622}
2011-08-29 14:02:19 -------- d-----w- C:\Users\Nigel\AppData\Local\{44D7E5A8-388F-4CBB-85DB-59473C206C26}
2011-08-29 02:01:31 -------- d-----w- C:\Users\Nigel\AppData\Local\{8BA8D69B-EB97-4DA6-AF51-CF3B2A9ECF6A}
2011-08-29 02:01:10 -------- d-----w- C:\Users\Nigel\AppData\Local\{C308D589-BC89-4453-B2A7-BD4E369BB04B}
2011-08-28 11:14:16 -------- d-----w- C:\Users\Nigel\AppData\Local\{1831F01F-6623-43A6-9C98-1DAE0150A91E}
2011-08-27 22:11:50 -------- d-----w- C:\Users\Nigel\AppData\Local\{DA01F104-8175-4AD7-95D8-A4410AC170A3}
2011-08-27 22:11:37 -------- d-----w- C:\Users\Nigel\AppData\Local\{07ADE5EF-F667-4513-9F3C-88449CD14C4A}
.
==================== Find3M ====================
.
2011-09-25 15:19:48 468480 ----a-w- C:\Windows\System32\deployJava1.dll
2011-09-19 14:51:06 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll
2011-09-19 14:51:05 175616 ----a-w- C:\Windows\System32\msclmd.dll
2011-08-19 05:59:28 158832 ----a-w- C:\Windows\System32\mfevtps.exe
2011-08-15 00:00:06 9984 ----a-w- C:\Windows\System32\drivers\mfeclnk.sys
2011-08-15 00:00:06 75672 ----a-w- C:\Windows\System32\drivers\mfenlfk.sys
2011-08-15 00:00:06 65128 ----a-w- C:\Windows\System32\drivers\cfwids.sys
2011-08-15 00:00:06 642824 ----a-w- C:\Windows\System32\drivers\mfehidk.sys
2011-08-15 00:00:06 481504 ----a-w- C:\Windows\System32\drivers\mfefirek.sys
2011-08-15 00:00:06 283744 ----a-w- C:\Windows\System32\drivers\mfewfpk.sys
2011-08-15 00:00:06 228752 ----a-w- C:\Windows\System32\drivers\mfeavfk.sys
2011-08-15 00:00:06 158584 ----a-w- C:\Windows\System32\drivers\mfeapfk.sys
2011-08-15 00:00:06 100904 ----a-w- C:\Windows\System32\drivers\mferkdet.sys
2011-07-16 05:41:50 362496 ----a-w- C:\Windows\System32\wow64win.dll
2011-07-16 05:41:49 243200 ----a-w- C:\Windows\System32\wow64.dll
2011-07-16 05:41:49 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2011-07-16 05:39:10 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2011-07-16 05:37:12 421888 ----a-w- C:\Windows\System32\KernelBase.dll
2011-07-16 04:29:19 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2011-07-16 04:26:00 44032 ----a-w- C:\Windows\apppatch\acwow64.dll
2011-07-16 04:25:37 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2011-07-16 04:24:23 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2011-07-16 04:24:22 272384 ----a-w- C:\Windows\SysWow64\KernelBase.dll
2011-07-16 02:21:44 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2011-07-16 02:21:41 2048 ----a-w- C:\Windows\SysWow64\user.exe
2011-07-16 02:17:19 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2011-07-16 02:17:19 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 02:17:19 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 02:17:19 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2011-07-09 05:26:20 2048 ----a-w- C:\Windows\System32\tzres.dll
2011-07-09 04:29:46 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2011-07-09 02:46:28 288768 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys
.
============= FINISH: 12:27:13.60 ===============
#################################################################
Thank you for your help. The Attach.txt log will be posted as a separate reply