.
DDS (Ver_2011-06-03.01) - NTFSx86 
Internet Explorer: 8.0.6001.18702
Run by [removed] at 15:51:03 on 2011-06-08
Microsoft Windows XP Home Edition  5.1.2600.3.1252.1.1033.18.510.175 [GMT -4:00]
.
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
AV: Sunbelt VIPRE *Disabled/Outdated* {964FCE60-0B18-4D30-ADD6-EB178909041C}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - c:\program files\myashampoo\tbMyA1.dll
TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [MSConfig] c:\windows\pchealth\helpctr\binaries\MSCONFIG.EXE /auto
mPolicies-explorer: NoResolveTrack = 0 (0x0)
mPolicies-explorer: NoFileAssociate = 0 (0x0)
mPolicies-system: HideShutdownScripts = 0 (0x0)
mPolicies-system: NoDispSettingsPage = 0 (0x0)
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
Trusted Zone: magicjack.com\my
Trusted Zone: talk4free.com\reg
DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} - hxxp://www.superadblocker.com/activex/sabspx.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{F1AACA3A-E5BE-452E-9F2E-0E4D30CBE236} : NameServer = 67.90.152.122,67.107.71.186
TCP: Interfaces\{F1AACA3A-E5BE-452E-9F2E-0E4D30CBE236} : DhcpNameServer = 192.168.0.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
============= SERVICES / DRIVERS ===============
.
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2009-9-15 11608]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]
R1 sbaphd;sbaphd;c:\windows\system32\drivers\sbaphd.sys [2011-3-22 21464]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2010-5-13 98392]
R1 SbTis;SbTis;c:\windows\system32\drivers\sbtis.sys [2011-3-22 212568]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2009-9-15 135336]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2009-9-15 269480]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-9-15 61960]
R2 sbapifs;sbapifs;c:\windows\system32\drivers\sbapifs.sys [2011-3-22 69976]
R3 CAM1690;USB PC Camera;c:\windows\system32\drivers\cam1690.sys [2007-9-20 181888]
R3 PbsAuDrv;PolderbitS Audio Driver;c:\windows\system32\drivers\pbsaudrv.sys [2009-8-1 110752]
R3 RRNetCapMP;RRNetCapMP;c:\windows\system32\drivers\rrnetcap.sys [2010-1-6 27168]
S2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2009-9-4 366640]
S3 ADM8511;ADMtek ADM8511/AN986 USB To Fast Ethernet Converter;c:\windows\system32\drivers\ADM8511.SYS [2005-7-26 20160]
S3 cpuz130;cpuz130;\??\c:\docume~1\admin\locals~1\temp\cpuz130\cpuz_x32.sys --> c:\docume~1\admin\locals~1\temp\cpuz130\cpuz_x32.sys [?]
S3 ionwpvvc;Watchport/V2 USB Camera;c:\windows\system32\drivers\ionwpvvc.sys [2008-2-20 38656]
S3 MBAMProtector;MBAMProtector;\??\c:\windows\system32\drivers\mbam.sys --> c:\windows\system32\drivers\mbam.sys [?]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2009-9-4 39984]
S3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\system32\svchost.exe -k nosGetPlusHelper [2009-8-15 14336]
S3 RRNetCap;RRNetCap Service;c:\windows\system32\drivers\rrnetcap.sys [2010-1-6 27168]
S4 Compass Server;Compass Server; [x]
S4 DfSdkS;Defragmentation-Service;c:\program files\ashampoo\ashampoo winoptimizer 7\DfSdkS.exe [2011-4-13 406016]
S4 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-10-19 136176]
S4 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-10-19 136176]
S4 magicJack;magicJack;c:\mjusbsp\srvany.exe [2011-2-27 8192]
S4 nlsX86cc;NLS Service;c:\windows\system32\nlssrv32.exe --> c:\windows\system32\NLSSRV32.EXE [?]
S4 SBAMSvc;VIPRE Antivirus;c:\program files\sunbelt software\vipre\SBAMSvc.exe [2010-8-20 2763080]
S4 SBPIMSvc;SB Recovery Service;c:\program files\sunbelt software\vipre\SBPIMSvc.exe [2010-8-20 181584]
.
=============== Created Last 30 ================
.
2011-06-07 11:47:57	--------	d-----w-	c:\documents and settings\admin\application data\AVG10
2011-06-07 11:36:56	--------	d--h--w-	c:\documents and settings\all users\application data\Common Files
2011-06-07 11:32:39	--------	d-----w-	c:\windows\system32\drivers\AVG
2011-06-07 11:32:39	--------	d-----w-	c:\documents and settings\all users\application data\AVG10
2011-06-07 11:31:21	--------	d-----w-	c:\program files\AVG
2011-06-07 11:24:58	--------	d-----w-	c:\documents and settings\all users\application data\MFAData
2011-06-06 17:09:06	--------	d-----w-	c:\program files\AVAST Software
2011-06-06 17:09:06	--------	d-----w-	c:\documents and settings\all users\application data\AVAST Software
2011-06-06 16:57:10	--------	d-----w-	c:\program files\SpywareBlaster
2011-06-05 13:16:05	--------	d-----w-	c:\documents and settings\all users\application data\SUPERAntiSpyware.com
2011-06-05 13:16:05	--------	d-----w-	c:\documents and settings\admin\application data\SUPERAntiSpyware.com
2011-06-05 13:15:07	--------	d-----w-	c:\program files\SUPERAntiSpyware
2011-06-05 07:45:48	--------	d-----w-	c:\program files\Spybot - Search & Destroy
2011-06-04 20:00:33	--------	d-----w-	c:\documents and settings\admin\local settings\application data\Threat Expert
2011-06-04 16:32:48	--------	d-----w-	c:\program files\Watchtower
2011-06-04 15:19:59	--------	d-----w-	c:\windows\system32\wbem\repository\FS
2011-06-04 15:19:59	--------	d-----w-	c:\windows\system32\wbem\Repository
2011-06-04 14:15:34	--------	d-----w-	C:\- PDF docs
2011-06-04 14:15:20	--------	d-----w-	C:\- maps
2011-06-04 13:55:41	--------	d-----w-	C:\- JW info
2011-06-04 13:55:39	--------	d-----w-	C:\- money
2011-06-04 13:55:39	--------	d-----w-	C:\- bank
2011-06-04 13:55:38	--------	d-----w-	C:\- XL docs
2011-06-04 13:55:34	--------	d-----w-	C:\- word docs
2011-06-04 13:54:03	--------	d-----w-	C:\- sounds
2011-06-04 13:53:51	--------	d-----w-	C:\- powerpoint
2011-06-04 00:37:44	331805736	----a-w-	c:\temp\windowsxp-kb936929-sp3-x86-enu_c81472f7eeea2eca421e116cd4c03e2300ebfde4.exe
2011-06-04 00:30:49	4608744	----a-w-	c:\temp\WindowsXP_KB310994_SP2_Pro_BootDisk_ENU.exe
2011-05-16 13:45:30	7040	----a-w-	c:\windows\system32\sabprocenum.sys
.
==================== Find3M  ====================
.
2011-06-04 16:09:13	107	----a-w-	c:\documents and settings\admin\application data\netstat.bat
2011-05-29 13:11:30	39984	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
.
============= FINISH: 15:52:15.32 ===============