.
DDS (Ver_2011-08-26.01) - NTFSx86 
Internet Explorer: 8.0.6001.18702  BrowserJavaVersion: 10.3.1
Run by [removed] at 23:29:20 on 2012-03-10
Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.3575.2892 [GMT 5.5:30]
.
AV: Spyware Doctor with AntiVirus *Enabled/Updated* {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\system32\FsUsbExService.Exe
D:\ad\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\alg.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Spyware Doctor\TFEngine\TFService.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
D:\IDM\Internet Download Manager\IEMonitor.exe
C:\WINDOWS\system32\wuauclt.exe
D:\mozilla\firefox.exe
D:\mozilla\plugin-container.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page = 
uStart Page = hxxp://home.speedbit.com/?aff=105
uSearch Bar = 
mStart Page = hxxp://search.ChatVibes.com
uInternet Settings,ProxyOverride = local
mSearchAssistant = 
BHO: IDMIEHlprObj Class: {0055c089-8582-441b-a0bf-17b458c2a3a8} - d:\idm\internet download manager\IDMIECC.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.6406.1642\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\oracle\javafx 2.0 runtime\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\progra~1\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
TB: SpeedBit Video Downloader: {0329e7d6-6f54-462d-93f6-f5c3118badf2} - c:\program files\speedbit video downloader\toolbar\tbcore3.dll
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\acrobat 7.0\acrobat\AcroIEFavClient.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Search Protection] c:\program files\yahoo!\search protection\SearchProtection.exe
uRun: [Voobly] "c:\program files\voobly\voobly.exe" --startup
uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler
uRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [IDMan] d:\idm\internet download manager\IDMan.exe /onboot
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Acrobat Assistant 7.0] "c:\program files\adobe\acrobat 7.0\distillr\Acrotray.exe"
mRun: [PWRISOVM.EXE] c:\program files\poweriso\PWRISOVM.EXE
mRun: [HDD Regenerator] "c:\program files\hdd regenerator\HDD Regenerator.exe"
mRun: [nwiz] nwiz.exe /installquiet
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [LogMeIn Hamachi Ui] "d:\ad\hamachi-2-ui.exe" --auto-start
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
StartupFolder: c:\docume~1\admin\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000002}\SC_Acrobat.exe
IE: Download all links with IDM - d:\idm\internet download manager\IEGetAll.htm
IE: Download FLV video content with IDM - d:\idm\internet download manager\IEGetVL.htm
IE: Download with IDM - d:\idm\internet download manager\IEExt.htm
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
LSP: c:\program files\common files\pc tools\lsp\PCTLsp.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1293969751171
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab
TCP: Interfaces\{94213505-09E9-4DEB-BB80-B7BCCFFAE77B} : NameServer = 123.108.225.6 123.108.224.6
TCP: Interfaces\{987891B1-E721-4A9D-A04A-ADBF54B7651B} : NameServer = 123.108.224.6,123.108.225.6
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\admin\application data\mozilla\firefox\profiles\6sycfqne.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\oracle\javafx 2.0 runtime\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\npdeployJava1.dll
FF - plugin: c:\windows\system32\Npindeo.dll
FF - plugin: c:\windows\system32\npptools.dll
FF - plugin: c:\windows\system32\npwmsdrm.dll
.
============= SERVICES / DRIVERS ===============
.
R0 IKFileSec;File Security Driver;c:\windows\system32\drivers\ikfilesec.sys [2012-2-15 40840]
R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [2012-2-15 51520]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [2012-2-15 38208]
R1 AppleCharger;AppleCharger;c:\windows\system32\drivers\AppleCharger.sys [2011-1-2 19496]
R1 IDMTDI;IDMTDI;c:\windows\system32\drivers\idmtdi.sys [2011-3-3 97112]
R1 IKSysFlt;System Filter Driver;c:\windows\system32\drivers\iksysflt.sys [2012-2-15 66952]
R1 IKSysSec;System Security Driver;c:\windows\system32\drivers\iksyssec.sys [2012-2-15 81288]
R1 pctfw2;pctfw2;c:\windows\system32\drivers\pctfw2.sys [2012-2-15 160792]
R2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2011-3-1 217088]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;d:\ad\hamachi-2.exe -s --> d:\ad\hamachi-2.exe -s [?]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-10-20 50704]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2012-2-15 356920]
R2 sdCoreService;PC Tools Security Service;c:\program files\spyware doctor\pctsSvc.exe [2012-2-15 1079176]
R2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files\intel\intel(r) management engine components\uns\UNS.exe [2011-1-2 2320920]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2011-3-1 36640]
R3 RMSPPPOE;WAN Miniport (PPP over Ethernet Protocol);c:\windows\system32\drivers\RMSPPPOE.SYS [2011-11-19 31424]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [2012-2-15 33088]
R3 ThreatFire;ThreatFire;c:\program files\spyware doctor\tfengine\tfservice.exe service --> c:\program files\spyware doctor\tfengine\TFService.exe service [?]
S1 mferkdk;VSCore mferkdk;\??\c:\program files\mcafee\virusscan enterprise\mferkdk.sys --> c:\program files\mcafee\virusscan enterprise\mferkdk.sys [?]
S2 Abel;Abel;e:\cain\abel.exe --> e:\cain\Abel.exe [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-1-9 136176]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2011-1-2 1691480]
S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys --> c:\windows\system32\drivers\dgderdrv.sys [?]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\garena\safedrv.sys --> c:\program files\garena\safedrv.sys [?]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-1-9 136176]
S3 SliceDisk5;SliceDisk5;\??\c:\program files\a-ff find and mount\slicedisk.sys --> c:\program files\a-ff find and mount\slicedisk.sys [?]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2011-1-2 11520]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2012-03-08 15:53:12	--------	d-----w-	c:\program files\Oracle
2012-03-08 15:52:06	637848	----a-w-	c:\windows\system32\npdeployJava1.dll
2012-03-08 15:49:47	--------	d-----w-	c:\documents and settings\admin\jdk1.7.0_03_combo
2012-03-08 15:44:35	--------	d-----w-	c:\documents and settings\admin\.nbi
2012-03-08 09:27:34	--------	d-----w-	c:\documents and settings\admin\local settings\application data\LogMeIn Hamachi
2012-03-06 14:53:49	--------	d-----w-	c:\documents and settings\admin\application data\Wireshark
2012-03-06 14:53:47	--------	d-----w-	c:\program files\WinPcap
2012-03-05 18:33:38	--------	d-----w-	c:\documents and settings\admin\local settings\application data\Opera
2012-03-01 23:59:38	--------	d-----w-	c:\documents and settings\admin\application data\Zes
2012-03-01 23:59:38	--------	d-----w-	c:\documents and settings\admin\application data\Niahqy
2012-02-29 12:59:39	--------	d-----w-	c:\documents and settings\admin\application data\IDM
2012-02-29 12:59:06	--------	d-----w-	c:\program files\Internet Download Manager
2012-02-15 18:58:50	--------	d-----w-	C:\Rbackup
2012-02-15 18:58:08	--------	d-----w-	c:\program files\Perfect Uninstaller
2012-02-15 17:35:57	--------	d-----w-	c:\documents and settings\all users\application data\PC Tools
2012-02-15 17:35:53	160792	----a-w-	c:\windows\system32\drivers\pctfw2.sys
2012-02-15 17:33:21	38208	----a-w-	c:\windows\system32\drivers\TfSysMon.sys
2012-02-15 17:33:11	33088	----a-w-	c:\windows\system32\drivers\TfNetMon.sys
2012-02-15 17:32:57	12608	----a-w-	c:\windows\system32\drivers\TfKbMon.sys
2012-02-15 17:32:56	51520	----a-w-	c:\windows\system32\drivers\TfFsMon.sys
2012-02-15 17:21:58	--------	d-----w-	c:\program files\common files\PC Tools
2012-02-15 17:09:33	81288	----a-w-	c:\windows\system32\drivers\iksyssec.sys
2012-02-15 17:09:33	66952	----a-w-	c:\windows\system32\drivers\iksysflt.sys
2012-02-15 17:09:33	40840	----a-w-	c:\windows\system32\drivers\ikfilesec.sys
2012-02-15 17:09:33	29576	----a-w-	c:\windows\system32\drivers\kcom.sys
2012-02-15 17:09:29	--------	d-----w-	c:\program files\Spyware Doctor
2012-02-15 17:09:29	--------	d-----w-	c:\documents and settings\admin\application data\PC Tools
2012-02-10 15:48:01	--------	d-----w-	c:\documents and settings\all users\application data\100
2012-02-10 15:47:59	--------	d-----w-	c:\documents and settings\all users\application data\InstallMate
2012-02-10 14:26:39	106496	----a-w-	c:\windows\system32\TwnLib20.dll
2012-02-10 14:26:34	471040	------w-	c:\windows\system32\ImagXRA7.dll
2012-02-10 14:26:34	262144	------w-	c:\windows\system32\ImagXR7.dll
2012-02-10 14:26:33	476320	------w-	c:\windows\system32\ImagXpr7.dll
2012-02-10 14:26:33	1568768	------w-	c:\windows\system32\ImagX7.dll
2012-02-10 14:26:31	155648	----a-w-	c:\windows\system32\NeroCheck.exe
.
==================== Find3M  ====================
.
2012-01-26 13:44:12	84480	----a-w-	c:\windows\system32\EasyHook32.dll
2012-01-26 13:44:12	109216	----a-w-	c:\windows\system32\EasyHook64.dll
2012-01-26 13:44:11	172032	----a-w-	c:\windows\system32\AniGIF.ocx
2012-01-12 16:53:24	1859968	----a-w-	c:\windows\system32\win32k.sys
2012-01-10 08:27:46	141312	----a-w-	c:\windows\system32\javacpl.cpl
2012-01-10 08:27:10	567696	----a-w-	c:\windows\system32\deployJava1.dll
2011-12-17 19:46:36	916992	----a-w-	c:\windows\system32\wininet.dll
2011-12-17 19:46:36	43520	----a-w-	c:\windows\system32\licmgr10.dll
2011-12-17 19:46:36	1469440	----a-w-	c:\windows\system32\inetcpl.cpl
2011-12-16 12:22:58	385024	----a-w-	c:\windows\system32\html.iec
.
============= FINISH: 23:29:58.73 ===============