. DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 Run by [removed] at 20:51:01 on 2012-07-10 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1918.753 [GMT 3:00] . AV: Sunbelt VIPRE *Enabled/Updated* {964FCE60-0B18-4D30-ADD6-EB178909041C} FW: Sunbelt VIPRE *Enabled* FW: AVG Firewall *Disabled* . ============== Running Processes =============== . D:\WINDOWS\system32\nvsvc32.exe D:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe D:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\system32\svchost.exe -k hpdevmgmt D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe D:\Program Files\Nero\Update\NASvc.exe D:\WINDOWS\System32\svchost.exe -k HPZ12 D:\WINDOWS\System32\svchost.exe -k HPZ12 D:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe D:\Program Files\Sunbelt Software\VIPRE\SBPIMSvc.exe D:\Program Files\Spyware Terminator\st_rsser.exe D:\WINDOWS\system32\svchost.exe -k imgsvc D:\WINDOWS\Explorer.EXE D:\WINDOWS\RTHDCPL.EXE svchost.exe D:\Program Files\Unlocker\UnlockerAssistant.exe D:\Program Files\LClock\LClock.exe D:\WINDOWS\Philips\SPC230NC\Monitor.exe D:\Program Files\HP\HP Software Update\HPWuSchd2.exe D:\WINDOWS\system32\RUNDLL32.EXE D:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe D:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe D:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe D:\Program Files\Sunbelt Software\VIPRE\SBAMTray.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe D:\Program Files\Philips\Philips SPC230NC Webcam\TrayMin230.exe D:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe D:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe D:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe D:\Program Files\uTorrent\uTorrent.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Program Files\Mozilla Firefox\plugin-container.exe D:\Program Files\Skype\Phone\Skype.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.gr/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uInternet Connection Wizard,ShellNext = hxxp://www.yahoo.gr/ uSearchURL,(Default) = hxxp://www.google.com/keyword/%s mWinlogon: SfcDisable=-99 (0xffffff9d) BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - d:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - d:\program files\adobe\acrobat 6.0\reader\activex\AcroIEHelper.dll BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - d:\program files\avg\avg2012\avgssie.dll BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No File BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - d:\program files\avast software\avast\aswWebRepIE.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - d:\program files\java\jre6\bin\jp2ssv.dll BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - d:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - d:\program files\avast software\avast\aswWebRepIE.dll TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File uRun: [CTFMON.EXE] d:\windows\system32\ctfmon.exe mRun: [RTHDCPL] RTHDCPL.EXE mRun: [SkyTel] SkyTel.EXE mRun: [Alcmtr] ALCMTR.EXE mRun: [UnlockerAssistant] d:\program files\unlocker\UnlockerAssistant.exe -H mRun: [LClock] d:\program files\lclock\LClock.exe mRun: [NeroFilterCheck] d:\program files\common files\ahead\lib\NeroCheck.exe mRun: [SPC230NC_Monitor] d:\windows\philips\spc230nc\Monitor.exe mRun: [SPC_Monitor] d:\windows\philips\spc230nc\Monitor.exe mRun: [HP Software Update] d:\program files\hp\hp software update\HPWuSchd2.exe mRun: [hpqSRMon] d:\program files\hp\digital imaging\bin\hpqSRMon.exe mRun: [nwiz] d:\program files\nvidia corporation\nview\nwiz.exe /installquiet mRun: [NvMediaCenter] RUNDLL32.EXE d:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [NvCplDaemon] RUNDLL32.EXE d:\windows\system32\NvCpl.dll,NvStartup mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k mRun: [NWEReboot] mRun: [SpywareTerminatorShield] d:\program files\spyware terminator\SpywareTerminatorShield.exe mRun: [SpywareTerminatorUpdater] d:\program files\spyware terminator\SpywareTerminatorUpdate.exe mRun: [Malwarebytes' Anti-Malware] "d:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray mRun: [SBAMTray] "d:\program files\sunbelt software\vipre\SBAMTray.exe" dRunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N StartupFolder: d:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - d:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe StartupFolder: d:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - d:\program files\hp\digital imaging\bin\hpqtra08.exe StartupFolder: d:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - d:\program files\microsoft office\office10\OSA.EXE StartupFolder: d:\docume~1\alluse~1\startm~1\programs\startup\traymi~1.lnk - d:\program files\philips\philips spc230nc webcam\TrayMin230.exe uPolicies-explorer: NoSMConfigurePrograms = 1 (0x1) mPolicies-system: SynchronousMachineGroupPolicy = 0 (0x0) mPolicies-system: SynchronousUserGroupPolicy = 0 (0x0) dPolicies-explorer: NoSMConfigurePrograms = 1 (0x1) IE: E&xport to Microsoft Excel - d:\progra~1\micros~2\office10\EXCEL.EXE/3000 IE: Free YouTube Download - d:\documents and settings\christina\application data\dvdvideosoftiehelpers\freeytvdownloader.htm IE: Free YouTube to MP3 Converter - d:\documents and settings\christina\application data\dvdvideosoftiehelpers\freeyoutubetomp3converter.htm IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - d:\program files\messenger\msmsgs.exe IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - d:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: DhcpNameServer = 192.168.1.254 TCP: Interfaces\{319C15C9-78B0-487D-8762-553F2C169502} : NameServer = 8.26.56.26,156.154.70.22 TCP: Interfaces\{319C15C9-78B0-487D-8762-553F2C169502} : DhcpNameServer = 192.168.1.254 TCP: Interfaces\{8293E5F7-044F-4CBD-A052-72523E411B3E} : NameServer = 8.26.56.26,156.154.70.22 Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - d:\progra~1\common~1\skype\SKYPE4~1.DLL SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - d:\windows\system32\wpdshserviceobj.dll . ================= FIREFOX =================== . FF - ProfilePath - d:\documents and settings\christina\application data\mozilla\firefox\profiles\drli55my.default\ FF - plugin: d:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll FF - plugin: d:\windows\system32\macromed\flash\NPSWF32_11_2_202_235.dll . ============= SERVICES / DRIVERS =============== . R1 sbaphd;sbaphd;d:\windows\system32\drivers\sbaphd.sys [2012-7-9 21592] R1 SbFw;SbFw;d:\windows\system32\drivers\SbFw.sys [2012-7-9 332248] R1 SBRE;SBRE;d:\windows\system32\drivers\SBREDrv.sys [2011-8-29 101720] R1 SbTis;SbTis;d:\windows\system32\drivers\sbtis.sys [2012-7-9 212568] R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver;d:\windows\system32\drivers\sp_rsdrv2.sys [2011-12-9 32768] R2 MBAMService;MBAMService;d:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-7-8 654408] R2 NAUpdate;@d:\program files\nero\update\nasvc.exe,-200;d:\program files\nero\update\NASvc.exe [2010-5-4 503080] R2 SBAMSvc;VIPRE Antivirus Premium;d:\program files\sunbelt software\vipre\SBAMSvc.exe [2011-9-6 2804280] R2 sbapifs;sbapifs;d:\windows\system32\drivers\sbapifs.sys [2012-7-9 74456] R2 SBPIMSvc;SB Recovery Service;d:\program files\sunbelt software\vipre\SBPIMSvc.exe [2011-9-6 181584] R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;d:\program files\spyware terminator\st_rsser.exe [2011-12-9 482992] R3 MBAMProtector;MBAMProtector;d:\windows\system32\drivers\mbam.sys [2012-7-8 22344] R3 PAEAFLT.sys;USB Composite Device;d:\windows\system32\drivers\PAEAFLT.sys [2011-5-29 8576] R3 SBFWIMCLMP;Sunbelt Software Firewall NDIS IM Filter Miniport;d:\windows\system32\drivers\SbFwIm.sys [2012-7-9 69208] R3 SPC230NC;Philips SPC230NC Webcam;d:\windows\system32\drivers\SPC230NC.SYS [2011-5-29 461056] S2 SkypeUpdate;Skype Updater;d:\program files\skype\updater\Updater.exe [2012-2-29 158856] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;d:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-10 257696] S3 MozillaMaintenance;Mozilla Maintenance Service;d:\program files\mozilla maintenance service\maintenanceservice.exe [2012-7-10 113120] S3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service;d:\windows\system32\drivers\SbFwIm.sys [2012-7-9 69208] S3 SbHips;sbhips;d:\windows\system32\drivers\sbhips.sys [2012-7-9 94040] . =============== Created Last 30 ================ . 2012-07-30 10:17:30 192512 ----a-w- d:\program files\common files\installshield\professional\runtime\09\01\intel32\iuser.dll 2012-07-30 10:17:29 729088 ----a-w- d:\program files\common files\installshield\professional\runtime\09\01\intel32\iKernel.dll 2012-07-30 10:17:29 69715 ----a-w- d:\program files\common files\installshield\professional\runtime\09\01\intel32\ctor.dll 2012-07-30 10:17:29 5632 ----a-w- d:\program files\common files\installshield\professional\runtime\09\01\intel32\DotNetInstaller.exe 2012-07-30 10:17:29 266240 ----a-w- d:\program files\common files\installshield\professional\runtime\09\01\intel32\iscript.dll 2012-07-30 10:17:19 188548 ----a-w- d:\program files\common files\installshield\professional\runtime\09\01\intel32\iGdi.dll 2012-07-30 10:17:18 311428 ----a-w- d:\program files\common files\installshield\professional\runtime\09\01\intel32\setup.dll 2012-07-09 02:48:40 111 ----a-w- d:\documents and settings\christina\application data\netstat.bat 2012-07-09 01:32:39 74456 ----a-w- d:\windows\system32\drivers\sbapifs.sys 2012-07-09 01:32:39 21592 ----a-w- d:\windows\system32\drivers\sbaphd.sys 2012-07-09 01:11:11 -------- d-----w- d:\documents and settings\christina\application data\Sunbelt 2012-07-09 01:11:11 -------- d-----w- d:\documents and settings\all users\application data\Sunbelt 2012-07-09 01:07:52 94040 ----a-w- d:\windows\system32\drivers\sbhips.sys 2012-07-09 01:07:51 212568 ----a-w- d:\windows\system32\drivers\sbtis.sys 2012-07-09 01:07:36 69208 ----a-w- d:\windows\system32\drivers\SbFwIm.sys 2012-07-09 01:07:36 332248 ----a-w- d:\windows\system32\drivers\SbFw.sys 2012-07-09 01:07:25 -------- d-----w- d:\program files\Sunbelt Software 2012-07-08 12:47:02 -------- d-----w- d:\documents and settings\christina\application data\Malwarebytes 2012-07-08 12:45:04 -------- d-----w- d:\documents and settings\all users\application data\Malwarebytes 2012-07-08 12:45:03 22344 ----a-w- d:\windows\system32\drivers\mbam.sys 2012-07-08 12:45:02 -------- d-----w- d:\program files\Malwarebytes' Anti-Malware 2012-06-30 05:42:48 -------- d-----w- d:\documents and settings\christina\application data\OpenCandy 2012-06-30 05:40:49 -------- d-----w- d:\documents and settings\christina\application data\DVDVideoSoftIEHelpers 2012-06-30 05:35:26 405144 ----a-w- d:\windows\system32\Newtonsoft.Json.Net20.dll 2012-06-30 05:35:13 -------- d-----w- d:\program files\DVDVideoSoft 2012-06-30 05:35:13 -------- d-----w- d:\program files\common files\DVDVideoSoft 2012-06-29 18:37:39 57344 ----a-w- d:\windows\system32\C2aspi.dll 2012-06-29 18:37:39 18944 ----a-w- d:\windows\system32\asapi.dll 2012-06-29 18:37:39 1048576 ----a-w- d:\windows\system32\CDDBControl.dll 2012-06-29 18:37:38 8768 ----a-w- d:\windows\system32\drivers\Asapi.sys 2012-06-29 18:37:37 -------- d-----w- d:\windows\system32\Iosubsys 2012-06-29 18:37:37 -------- d-----w- d:\program files\Steinberg 2012-06-29 05:44:07 521728 ------w- d:\windows\system32\dllcache\jsdbgui.dll 2012-06-29 05:29:44 -------- d-----w- d:\windows\system32\wbem\repository\FS 2012-06-29 05:29:44 -------- d-----w- d:\windows\system32\wbem\Repository 2012-06-14 22:00:30 -------- d-----w- D:\Myst4_1 2012-06-13 06:58:26 -------- d-----w- d:\program files\MagicISO . ==================== Find3M ==================== . 2012-06-02 12:19:44 22040 ----a-w- d:\windows\system32\wucltui.dll.mui 2012-06-02 12:19:38 219160 ----a-w- d:\windows\system32\wuaucpl.cpl 2012-06-02 12:19:38 15384 ----a-w- d:\windows\system32\wuaucpl.cpl.mui 2012-06-02 12:19:34 15384 ----a-w- d:\windows\system32\wuapi.dll.mui 2012-06-02 12:19:30 17944 ----a-w- d:\windows\system32\wuaueng.dll.mui 2012-06-02 12:18:58 275696 ----a-w- d:\windows\system32\mucltui.dll 2012-06-02 12:18:58 214256 ----a-w- d:\windows\system32\muweb.dll 2012-06-02 12:18:58 17136 ----a-w- d:\windows\system32\mucltui.dll.mui 2012-05-31 13:22:09 599040 ----a-w- d:\windows\system32\crypt32.dll 2012-05-29 22:57:04 127712 ----a-w- d:\windows\system\CardView.dll 2012-05-16 15:08:26 916992 ----a-w- d:\windows\system32\wininet.dll 2012-05-16 15:08:26 916992 ----a-w- d:\windows\system32\wininet(2)(2).dll 2012-05-15 13:20:33 1863168 ----a-w- d:\windows\system32\win32k.sys 2012-05-15 13:20:33 1863168 ----a-w- d:\windows\system32\win32k(2)(2).sys 2012-05-11 17:12:34 11111424 ----a-w- d:\windows\system32\ieframe(2)(2).dll 2012-05-11 14:42:33 43520 ------w- d:\windows\system32\licmgr10.dll 2012-05-11 14:42:33 2000384 ----a-w- d:\windows\system32\iertutil(2)(2).dll 2012-05-11 14:42:33 1469440 ------w- d:\windows\system32\inetcpl.cpl 2012-05-11 14:42:33 1212416 ----a-w- d:\windows\system32\urlmon(2)(2).dll 2012-05-11 14:42:33 105984 ----a-w- d:\windows\system32\url(2)(2).dll 2012-05-11 11:38:02 385024 ------w- d:\windows\system32\html.iec 2012-05-07 16:06:31 70304 ----a-w- d:\windows\system32\FlashPlayerCPLApp.cpl 2012-05-07 16:06:31 419488 ----a-w- d:\windows\system32\FlashPlayerApp.exe 2012-05-04 13:16:13 2148352 ----a-w- d:\windows\system32\ntoskrnl.exe 2012-05-04 12:32:19 2026496 ----a-w- d:\windows\system32\ntkrnlpa.exe 2012-05-02 13:46:36 139656 ----a-w- d:\windows\system32\drivers\rdpwd.sys . ============= FINISH: 20:53:11,25 ===============