DDS (Ver_09-09-29.01) - NTFSx86 Run by [removed] at 10:17:03.39 on Sun 10/04/2009 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1398 [GMT -5:00] AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7} ============== Running Processes =============== F:\WINDOWS\system32\Ati2evxx.exe F:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe F:\WINDOWS\System32\svchost.exe -k netsvcs F:\WINDOWS\system32\svchost.exe -k WudfServiceGroup F:\WINDOWS\system32\Ati2evxx.exe svchost.exe svchost.exe F:\WINDOWS\system32\spoolsv.exe F:\Program Files\Avira\AntiVir Desktop\sched.exe svchost.exe F:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe F:\Program Files\Common Files\AOL\1201579038\ee\AOLSoftware.exe F:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE F:\Program Files\HP\HP Software Update\HPWuSchd2.exe F:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe F:\Program Files\Avira\AntiVir Desktop\avgnt.exe F:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe F:\Program Files\QuickTime\QTTask.exe F:\Program Files\Java\jre6\bin\jusched.exe F:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe F:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe F:\WINDOWS\system32\ctfmon.exe F:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe F:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe F:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe F:\Program Files\Avira\AntiVir Desktop\avguard.exe F:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe F:\PROGRA~1\Webshots\Webshots.scr F:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe F:\WINDOWS\System32\svchost.exe -k HTTPFilter F:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe F:\Program Files\Java\jre6\bin\jqs.exe F:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe F:\WINDOWS\system32\HPZipm12.exe F:\Program Files\CyberLink\Shared Files\RichVideo.exe F:\WINDOWS\system32\java.exe F:\WINDOWS\system32\svchost.exe -k imgsvc F:\WINDOWS\system32\MsPMSPSv.exe F:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe F:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe F:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe F:\Program Files\ATI Technologies\ATI.ACE\cli.exe F:\Program Files\ATI Technologies\ATI.ACE\cli.exe F:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe F:\WINDOWS\system32\dllhost.exe F:\WINDOWS\explorer.exe F:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe F:\Program Files\AOL 9.1a\waol.exe F:\Program Files\AOL 9.1a\shellmon.exe F:\Program Files\Internet Explorer\iexplore.exe F:\Program Files\Internet Explorer\iexplore.exe F:\Documents and Settings\Home\Desktop\dds.scr ============== Pseudo HJT Report =============== uSearch Page = hxxp://www.google.com uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uDefault_Page_URL = hxxp://www.msn.com uInternet Connection Wizard,ShellNext = iexplore mWinlogon: Userinit=f:\windows\system32\userinit.exe BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - f:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: {30d76d11-5e0b-4ea9-91f2-18a84bf68061} - No File BHO: Torrents-Search-Engine Toolbar: {3b419ee1-1fa8-47b9-9aec-6b60ac2e3fca} - f:\program files\torrents-search-engine\tbTor1.dll BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No File BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - f:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - f:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: Torrents-Search-Engine Toolbar: {3b419ee1-1fa8-47b9-9aec-6b60ac2e3fca} - f:\program files\torrents-search-engine\tbTor1.dll TB: {A057A204-BACC-4D26-B6F3-4BF8CCAB3ED4} - No File TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "f:\program files\common files\ahead\lib\NMBgMonitor.exe" uRun: [ctfmon.exe] f:\windows\system32\ctfmon.exe uRun: [CTSyncU.exe] "f:\program files\creative\sync manager unicode\CTSyncU.exe" uRun: [AOL Fast Start] "f:\program files\aol 9.1a\AOL.EXE" -b mRun: [ATICCC] "f:\program files\ati technologies\ati.ace\CLIStart.exe" mRun: [CTSysVol] f:\program files\creative\sb live! 24-bit\surround mixer\CTSysVol.exe /r mRun: [UpdReg] f:\windows\UpdReg.EXE mRun: [HostManager] f:\program files\common files\aol\1201579038\ee\AOLSoftware.exe mRun: [HP Software Update] f:\program files\hp\hp software update\HPWuSchd2.exe mRun: [NVMixerTray] "f:\program files\nvidia corporation\nvmixer\NVMixerTray.exe" mRun: [Adobe Reader Speed Launcher] "f:\program files\adobe\reader 8.0\reader\Reader_sl.exe" mRun: [TrayServer] f:\program files\magix\movie_edit_pro_14\TrayServer.exe mRun: [MaxMenuMgr] "f:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe" mRun: [avgnt] "f:\program files\avira\antivir desktop\avgnt.exe" /min mRun: [nmctxth] "f:\program files\common files\pure networks shared\platform\nmctxth.exe" mRun: [QuickTime Task] "f:\program files\quicktime\QTTask.exe" -atboottime mRun: [SunJavaUpdateSched] "f:\program files\java\jre6\bin\jusched.exe" mRun: [ContentTransferWMDetector.exe] f:\program files\sony\content transfer\ContentTransferWMDetector.exe mRun: [Malwarebytes Anti-Malware (reboot)] "f:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript StartupFolder: f:\docume~1\home\startm~1\programs\startup\webshots.lnk - f:\program files\webshots\Launcher.exe StartupFolder: f:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - f:\program files\hp\digital imaging\bin\hpqtra08.exe StartupFolder: f:\docume~1\alluse~1\startm~1\programs\startup\hpphot~1.lnk - f:\program files\hp\digital imaging\bin\hpqthb08.exe StartupFolder: f:\docume~1\alluse~1\startm~1\programs\startup\kodake~1.lnk - f:\program files\kodak\kodak easyshare software\bin\EasyShare.exe uPolicies-system: EnableProfileQuota = 1 (0x1) IE: E&xport to Microsoft Excel - f:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - f:\program files\messenger\msmsgs.exe IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - f:\progra~1\micros~2\office11\REFIEBAR.DLL Trusted Zone: aol.com\free Trusted Zone: microsoft.com Trusted Zone: microsoft.com\*.update Trusted Zone: microsoft.com\*.windowsupdate Trusted Zone: windowsupdate.com DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/7/3/e7345c16-80aa-4488-ae10-9ac6be844f99/OGAControl.cab DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} - hxxp://www.creative.com/softwareupdate/su/ocx/15031/CTSUEng.cab DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab DPF: {233c1507-6a77-46a4-9443-f871f945d258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} - hxxp://disney.go.com/pirates/online/testActiveX/built/signed/DisneyOnlineGames.cab DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} - hxxp://www.acclaim.com/cabs/acclaim_v5.cab DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1201580660796 DPF: {6F750202-1362-4815-A476-88533DE61D0C} - hxxp://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_2/axofupld.cab DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} - hxxp://lads.myspace.com/upload/MySpaceUploader2.cab DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} - hxxp://www.linksysfix.com/netcheck/67/install/gtdownls.cab DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab DPF: {cafeefac-0016-0000-0003-abcdeffedcba} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} DPF: {e06e2e99-0aa1-11d4-aba6-0060082aa75c} - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://www.creative.com/softwareupdate/su/ocx/15034/CTPID.cab Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - f:\program files\common files\pure networks shared\platform\puresp4.dll Notify: AtiExtEvent - Ati2evxx.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - f:\windows\system32\WPDShServiceObj.dll ============= SERVICES / DRIVERS =============== R0 nvcchflt;NVIDIA Disk Cache Filter Driver;f:\windows\system32\drivers\nvcchflt.sys [2005-2-11 16640] R1 avgio;avgio;f:\program files\avira\antivir desktop\avgio.sys [2009-6-9 11608] R1 DLADiagN;DLADiagN;f:\windows\system32\drivers\DLADiagN.SYS [2008-4-24 10908] R1 DLAPMonN;DLAPMonN;f:\windows\system32\drivers\DLAPMonN.SYS [2008-4-24 22812] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;f:\program files\avira\antivir desktop\sched.exe [2009-6-9 108289] R2 AntiVirService;Avira AntiVir Guard;f:\program files\avira\antivir desktop\avguard.exe [2009-6-9 185089] R2 avgntflt;avgntflt;f:\windows\system32\drivers\avgntflt.sys [2009-6-9 55656] R2 FreeAgentGoNext Service;Seagate Service;f:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2008-10-28 156968] R2 linksysupdater;Linksys Updater;f:\program files\linksys\linksys updater\bin\LinksysUpdater.exe [2008-11-13 204800] S1 a1e39e88;a1e39e88;f:\windows\system32\drivers\a1e39e88.sys --> f:\windows\system32\drivers\a1e39e88.sys [?] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;f:\program files\magix\common\database\bin\fbserver.exe [2008-10-4 1527900] S3 UPnPService;UPnPService;f:\program files\common files\magix shared\upnpservice\UPnPService.exe [2008-10-4 544768] =============== Created Last 30 ================ 2009-09-28 15:23 --d----- f:\program files\Trend Micro 2009-09-28 09:45 0 a------- f:\documents and settings\home\reset.cmd 2009-09-28 09:43 --d----- f:\program files\Windows Resource Kits 2009-09-08 17:23 --d----- f:\program files\common files\Software Update Utility 2009-09-08 17:22 --d----- f:\program files\AOL 9.1a 2009-09-08 17:12 --d----- F:\Internet Downloads 2009-09-04 18:07 --d----- f:\docume~1\alluse~1\applic~1\Sony Corporation 2009-09-04 12:32 90,112 a------- f:\windows\unvise32.exe ==================== Find3M ==================== 2009-09-10 14:54 38,224 a------- f:\windows\system32\drivers\mbamswissarmy.sys 2009-09-10 14:53 19,160 a------- f:\windows\system32\drivers\mbam.sys 2009-08-05 19:10 55,656 a------- f:\windows\system32\drivers\avgntflt.sys 2009-07-25 05:23 411,368 a------- f:\windows\system32\deploytk.dll 2009-07-11 13:01 117,120 a------- f:\windows\hpoins11.dat 2008-12-22 17:10 31 a------- f:\documents and settings\home\jagex_runescape_preferences.dat 2008-03-18 21:39 32 a----r-- f:\documents and settings\home\hash.dat 2009-05-15 22:07 16,384 a--sh--- f:\windows\system32\config\systemprofile\ietldcache\index.dat 2008-08-27 19:26 32,768 a--sh--- f:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008082720080828\index.dat ============= FINISH: 10:17:29.53 ===============