. DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.5.1 Run by [removed] at 17:16:30 on 2012-09-03 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.794 [GMT -5:00] . AV: AVG Internet Security Business Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF} AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D} . ============== Running Processes =============== . C:\Program Files\Zentimo\ZentimoService.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe svchost.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe svchost.exe C:\Program Files\SUPERAntiSpyware\SASCORE.EXE C:\Program Files\LogMeIn Hamachi\hamachi-2.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe C:\Program Files\Common Files\Motive\McciCMService.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Macrium\Reflect\ReflectService.exe C:\Program Files\Soluto\SolutoService.exe C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\TightVNC\tvnserver.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Soluto\soluto.exe C:\Program Files\MySoftware\MyInvoices\tracker.exe C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe C:\WINDOWS\system32\RunDLL32.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\program files\real\realplayer\update\realsched.exe C:\Program Files\EASEUS\Todo Backup\bin\EuWatch.exe C:\Program Files\EASEUS\Todo Backup\bin\TrayNotify.exe C:\Program Files\Ashampoo\Ashampoo HDD Control\HDDControlGuard.exe C:\Program Files\Software602\Print2PDF\Print2PDF.exe C:\Program Files\TightVNC\tvnserver.exe C:\Program Files\AVAST Software\Avast\avastUI.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\j2 Messenger 4.4\J2GDllCmd.exe C:\Program Files\SensiGuard\SensiGuard.exe C:\Program Files\CraveWorldClock\CWClock.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\IObit\IObit Malware Fighter\IMF.exe C:\Program Files\j2 Messenger 4.4\J2GTray.exe C:\Program Files\RealVNC\VNC4\WinVNC4.exe C:\WINDOWS\system32\svchost.exe -k hpdevmgmt C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ntvdm.exe C:\Documents and Settings\David P. Clauss\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\David P. Clauss\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\David P. Clauss\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\David P. Clauss\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Program Files\Outlook Express\msimn.exe C:\Program Files\Messenger\msmsgs.exe C:\Documents and Settings\David P. Clauss\Local Settings\Application Data\Google\Chrome\Application\chrome.exe . ============== Pseudo HJT Report =============== . uStart Page = about:blank uSearch Page = hxxp://www.google.com uInternet Settings,ProxyOverride = 127.0.0.1 mWinlogon: UIHost=c:\windows\system32\logonuiX.exe mWinlogon: Userinit=c:\windows\system32\userinit.exe,c:\program files\soluto\soluto.exe /userinit BHO: AC-Pro: {0fb6a909-6086-458f-bd92-1f8ee10042a0} - c:\program files\autocompletepro\AutocompletePro.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\oracle\javafx 2.1 runtime\bin\ssv.dll BHO: FlashCatchBHO Class: {88618a96-6d8a-42e7-b932-9073d5b2080f} - c:\program files\flashcatch\flashcatch.dll BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: GOM Player + Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\oracle\javafx 2.1 runtime\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: Veoh Web Player Video Finder: {0fbb9689-d3d7-4f7a-a2e2-585b10099bfc} - TB: FireShot: {6e6e744e-4d20-4ce3-9a7a-26dfffe22f68} - TB: FlashCatch: {10cecf4f-a96e-4803-8ac2-f565fb29ff47} - c:\program files\flashcatch\flashcatch.dll TB: GOM Player + Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [j2 4.4] "c:\program files\j2 messenger 4.4\J2GDllCmd.exe" /R uRun: [SensiGuard] "c:\program files\sensiguard\SensiGuard.exe" /m uRun: [Crave World Clock] c:\program files\craveworldclock\CWClock.exe uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe mRun: [Tracker] c:\program files\mysoftware\myinvoices\tracker.exe mRun: [Samsung PanelMgr] c:\windows\samsung\panelmgr\SSMMgr.exe /autorun mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet mRun: [EPSON Stylus Photo R300 Series on Paladin-3000 (from HWA-15)] c:\windows\system32\spool\drivers\w32x86\3\E_S4I2F1.EXE /P60 "EPSON Stylus Photo R300 Series on Paladin-3000 (from HWA-15)" /O5 "TS003" /M "Stylus Photo R300" mRun: [LogMeIn Hamachi Ui] "c:\program files\logmein hamachi\hamachi-2-ui.exe" --auto-start mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [ROC_roc_ssl_v12] "c:\program files\avg secure search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [EaseUs Watch] "c:\program files\easeus\todo backup\bin\EuWatch.exe" mRun: [EaseUs Tray] "c:\program files\easeus\todo backup\bin\TrayNotify.exe" mRun: [Ashampoo HDD Control Guard] "c:\program files\ashampoo\ashampoo hdd control\HDDControlGuard.exe" mRun: [Print2PDF Print Monitor] "c:\program files\software602\print2pdf\Print2PDF.exe" /server mRun: [tvncontrol] "c:\program files\tightvnc\tvnserver.exe" -controlservice -slave mRun: [IObit Malware Fighter] "c:\program files\iobit\iobit malware fighter\IMF.exe" /autostart mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui StartupFolder: c:\docume~1\davidp~1.cla\startm~1\programs\startup\jconne~1.lnk - c:\program files\j2 messenger 4.4\J2GTray.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mailwa~1.lnk - c:\program files\firetrust\mailwasher\MailWasherPro.exe uPolicies-explorer: NoThumbnailCache = 1 (0x1) mPolicies-system: SoftwareSASGeneration = 1 (0x1) IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {3437D640-C91A-458f-89F5-B9095EA4C28B} - {04F93351-81D2-4484-9982-0D55DEFFFAE6} - c:\program files\piclensie\cooliris.dll Trusted Zone: txu.com Trusted Zone: txu.com\www Trusted Zone: yahoo.com\att.my DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} - hxxp://pcpitstop.com/pcpitstop/PCPitStop.CAB DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} - file:///C:/Program%20Files/Mahjong%20Escape%20-%20Ancient%20Japan/Images/stg_drm.ocx DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper20073151.dll DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1221750772531 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} - file:///C:/Program%20Files/Mahjong%20Escape%20-%20Ancient%20Japan/Images/armhelper.ocx DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} - hxxp://www.cooliris.com/shared/plinstll.cab TCP: DhcpNameServer = [removed] [removed] TCP: Interfaces\{B35070AD-E2FD-4E7B-8580-CADDF64F0645} : DhcpNameServer = [removed] [removed] Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\david p. clauss\application data\mozilla\firefox\profiles\ynwp7op1.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=DCF1DF&PC=DCF1&q= FF - prefs.js: browser.search.selectedEngine - AVG Secure Search FF - prefs.js: browser.startup.homepage - hxxp://att.my.yahoo.com/?_bc=1 FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?affID=113959&tt=280612_6_&babsrc=KW_ss&mntrId=24c4b6ea000000000000001e9076bf3f&q= FF - component: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordext.dll FF - component: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordlegacyext.dll FF - component: c:\documents and settings\david p. clauss\application data\mozilla\firefox\profiles\ynwp7op1.default\extensions\{0b457caa-602d-484a-8fe7-c1d894a011ba}\platform\winnt_x86-msvc\components\SSSLauncher.dll FF - component: c:\documents and settings\david p. clauss\application data\mozilla\firefox\profiles\ynwp7op1.default\extensions\{463f6ca5-ee3c-4be1-b7e6-7fee11953374}\platform\winnt\components\FoxyTunes.dll FF - component: c:\documents and settings\david p. clauss\application data\mozilla\firefox\profiles\ynwp7op1.default\extensions\[removed]\components\coolirisstub.dll FF - component: c:\program files\avg\avg10\firefox4\components\avgssff4.dll FF - component: c:\program files\common files\spigot\wtxpcom\components\WidgiToolbarFF.dll FF - component: c:\program files\flashcatch\firefox\components\FlashCatch.dll FF - component: c:\program files\flashcatch\firefox\components\FlashCatch191.dll FF - component: c:\program files\flashcatch\firefox\components\FlashCatch192.dll FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll FF - plugin: c:\documents and settings\david p. clauss\application data\mozilla\firefox\profiles\ynwp7op1.default\extensions\[removed]\plugins\npcoolirisplugin.dll FF - plugin: c:\documents and settings\david p. clauss\local settings\application data\google\update\1.3.21.115\npGoogleUpdate3.dll FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll FF - plugin: c:\program files\amazon\mp3 downloader\npAmazonMP3DownloaderPlugin101710.dll FF - plugin: c:\program files\common files\avg secure search\sitesafetyinstaller\12.2.0\npsitesafety.dll FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll FF - plugin: c:\program files\java\jre6\bin\plugin2\npdeployJava1.dll FF - plugin: c:\program files\microsoft\web platform installer\NPWPIDetector.dll FF - plugin: c:\program files\mozilla firefox\plugins\nprpplugin.dll FF - plugin: c:\program files\mozilla firefox\plugins\NPTURNMED.dll FF - plugin: c:\program files\oracle\javafx 2.1 runtime\bin\plugin2\npjp2.dll FF - plugin: c:\program files\real\realplayer\netscape6\nprpplugin.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_265.dll FF - plugin: c:\windows\system32\npDeployJava1.dll FF - plugin: c:\windows\system32\npmirage.dll FF - plugin: c:\windows\system32\npptools.dll FF - plugin: c:\windows\system32\npwmsdrm.dll . ---- FIREFOX POLICIES ---- FF - user.js: browser.blink_allowed - true FF - user.js: network.prefetch-next - true FF - user.js: nglayout.initialpaint.delay - 50 FF - user.js: layout.spellcheckDefault - 1 FF - user.js: browser.search.openintab - false FF - user.js: browser.tabs.closeButtons - 1 FF - user.js: browser.tabs.opentabfor.middleclick - true FF - user.js: browser.tabs.tabMinWidth - 100 FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=113959&tt=280612_6_ FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.id - 24c4b6ea000000000000001e9076bf3f FF - user.js: extensions.BabylonToolbar_i.hardId - 24c4b6ea000000000000001e9076bf3f FF - user.js: extensions.BabylonToolbar_i.instlDay - 15519 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1711:41:53 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - base FF - user.js: extensions.BabylonToolbar_i.instlRef - sst . ============= SERVICES / DRIVERS =============== . R0 EUBAKUP;EUBAKUP;c:\windows\system32\drivers\eubakup.sys [2009-8-16 30600] R0 EUBKMON;EUBKMON;c:\windows\system32\drivers\EUBKMON.sys [2011-5-5 35720] R0 EUFS;EUFS;c:\windows\system32\drivers\eufs.sys [2009-8-16 20744] R0 pssnap;Paramount Software Snapshot Filter;c:\windows\system32\drivers\pssnap.sys [2012-6-12 16064] R0 Soluto;Soluto;c:\windows\system32\drivers\Soluto.sys [2011-5-27 51144] R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-9-2 729752] R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-9-2 355632] R1 EUDSKACS;EUDSKACS;c:\windows\system32\drivers\eudskacs.sys [2009-8-16 14216] R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880] R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664] R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2011-8-11 116608] R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-9-2 21256] R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-9-2 44808] R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\logmein hamachi\hamachi-2.exe [2012-2-28 1373576] R2 IMFservice;IMF Service;c:\program files\iobit\iobit malware fighter\IMFsrv.exe [2012-9-2 821592] R2 ReflectService.exe;Macrium Reflect Image Mounting Service;c:\program files\macrium\reflect\ReflectService.exe [2012-6-12 224960] R2 SCRCAMHRDRV;ScreenCamera HR;c:\windows\system32\drivers\SCRCAMHRDRV.SYS [2011-2-11 74832] R2 SolutoService;Soluto PCGenome Core Service;c:\program files\soluto\SolutoService.exe [2012-8-26 599568] R2 tvnserver;TightVNC Server;c:\program files\tightvnc\tvnserver.exe [2012-6-26 1184312] R2 ZentimoService;Zentimo Assistant;c:\program files\zentimo\ZentimoService.exe [2011-12-13 259072] R3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys [2012-4-26 16640] R3 cpuz135;cpuz135;\??\c:\windows\temp\cpuz135\cpuz135_x32.sys --> c:\windows\temp\cpuz135\cpuz135_x32.sys [?] R3 EuDisk;EASEUS Disk Enumerator;c:\windows\system32\drivers\eudisk.sys [2009-8-16 187528] R3 FileMonitor;FileMonitor;c:\program files\iobit\iobit malware fighter\drivers\wxp_x86\FileMonitor.sys [2012-9-2 246816] R3 RegFilter;RegFilter;c:\program files\iobit\iobit malware fighter\drivers\wxp_x86\RegFilter.sys [2012-9-2 30408] R3 RRNetCapMP;RRNetCapMP;c:\windows\system32\drivers\rrnetcap.sys [2012-7-19 31848] R3 UrlFilter;UrlFilter;c:\program files\iobit\iobit malware fighter\drivers\wxp_x86\UrlFilter.sys [2012-9-2 16248] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] R3 WsAudio_DeviceS(1);WsAudio_DeviceS(1);c:\windows\system32\drivers\WsAudio_DeviceS(1).sys [2012-4-7 25704] R3 WsAudio_DeviceS(2);WsAudio_DeviceS(2);c:\windows\system32\drivers\WsAudio_DeviceS(2).sys [2012-4-7 25704] R3 WsAudio_DeviceS(3);WsAudio_DeviceS(3);c:\windows\system32\drivers\WsAudio_DeviceS(3).sys [2012-4-7 25704] R3 WsAudio_DeviceS(4);WsAudio_DeviceS(4);c:\windows\system32\drivers\WsAudio_DeviceS(4).sys [2012-4-7 25704] R3 WsAudio_DeviceS(5);WsAudio_DeviceS(5);c:\windows\system32\drivers\WsAudio_DeviceS(5).sys [2012-4-7 25704] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 SSPORT;SSPORT; [x] S3 602XML Updater;602Updater;c:\program files\common files\soft602\602updsvc\602updsvc.exe [2011-11-8 73728] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-6 250568] S3 APL531;35mm Film Scanner;c:\windows\system32\drivers\FILMSCAN.SYS [2006-7-31 74832] S3 CrossLoopService;CrossLoop Service;c:\documents and settings\david p. clauss\local settings\application data\crossloop\CrossLoopService.exe [2011-9-19 563216] S3 DfSdkS;Defragmentation-Service;c:\program files\ashampoo\ashampoo winoptimizer 6\DfSdkS.exe [2011-2-19 406016] S3 DigiartyVirtualCDBus;Digiarty Virtual Driver;c:\windows\system32\drivers\DigiartyVirtualCDBus.sys [2011-10-28 163008] S3 EASEUS Agent;EASEUS Agent;c:\program files\easeus\todo backup\bin\Agent.exe [2011-5-5 56200] S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2011-2-2 13192] S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2011-2-2 8456] S3 gbridge;Gbridge Virtual Miniport;c:\windows\system32\drivers\GBRIDGE.SYS [2009-1-27 74832] S3 hipeer20;Remobo Instant Private Network;c:\windows\system32\drivers\REMOBO32.SYS [2009-4-22 74832] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-5-27 113120] S3 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\microsoft sql server\100\shared\sqladhlp.exe [2009-3-31 47128] S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-6 34064] S3 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2011-4-23 2214504] S3 PSMounter;Macrium Reflect Image Explorer Service;c:\windows\system32\drivers\psmounter.sys [2012-6-12 53952] S3 PsSdk31;PsSdk31;c:\windows\system32\drivers\pssdk31.drv [2009-3-2 30272] S3 PsSdkLBF;PsSdkLBF;c:\windows\system32\drivers\pssdklbf.drv [2009-3-2 37440] S3 RRNetCap;RRNetCap Service;c:\windows\system32\drivers\rrnetcap.sys [2012-7-19 31848] S3 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\microsoft sql server\mssql10.sqlexpress\mssql\binn\SQLAGENT.EXE [2009-3-30 366936] S3 VICAMUSB;3Com HomeConnect USB Camera; [x] S3 wimmount;wimmount;c:\windows\system32\drivers\wimmount.sys [2009-7-13 19024] S3 ZD1211U(WLAN);IEEE 802.11g USB Wireless LAN Driver(WLAN);c:\windows\system32\drivers\ZD1211U.SYS [2007-4-20 74832] S4 RsFx0103;RsFx0103 Driver;c:\windows\system32\drivers\RsFx0103.sys [2009-3-30 239336] . =============== File Associations =============== . .txt=NoteProTXT . =============== Created Last 30 ================ . 2012-09-02 13:48:14 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2012-09-02 13:46:04 41224 ----a-w- c:\windows\avastSS.scr 2012-09-02 13:45:27 -------- d-----w- c:\program files\AVAST Software 2012-09-02 13:45:27 -------- d-----w- c:\documents and settings\all users\application data\AVAST Software 2012-09-02 06:06:22 -------- d-----w- c:\documents and settings\david p. clauss\application data\QuickScan 2012-09-02 05:24:13 -------- d-----w- c:\documents and settings\david p. clauss\application data\IObit 2012-09-02 05:24:07 -------- d-----w- c:\program files\IObit 2012-09-01 13:20:29 -------- d-----w- c:\documents and settings\david p. clauss\application data\SUPERAntiSpyware.com 2012-09-01 13:20:18 -------- d-----w- c:\program files\SUPERAntiSpyware 2012-09-01 13:20:18 -------- d-----w- c:\documents and settings\all users\application data\SUPERAntiSpyware.com 2012-09-01 02:07:23 -------- d-----w- c:\documents and settings\david p. clauss\application data\ElevatedDiagnostics 2012-08-29 05:06:44 -------- d-----w- c:\program files\TightVNC 2012-08-29 05:06:44 -------- d-----w- c:\documents and settings\all users\application data\TightVNC 2012-08-28 05:40:11 -------- d-----w- c:\documents and settings\david p. clauss\application data\M8 Software 2012-08-28 05:37:57 -------- d-----w- c:\program files\Spartan 2012-08-27 21:52:42 -------- d-----w- c:\program files\Soluto 2012-08-26 06:02:35 -------- d-----w- c:\program files\CCleaner 2012-08-26 03:36:36 -------- d-----w- c:\documents and settings\david p. clauss\application data\JAM Software 2012-08-26 03:36:24 -------- d-----w- c:\program files\JAM Software 2012-08-26 03:15:33 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-08-22 12:59:42 129176 ----a-w- c:\program files\mozilla firefox\plugins\nprpplugin.dll 2012-08-14 16:36:27 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll 2012-08-14 16:36:27 21504 ----a-w- c:\windows\system32\hidserv.dll 2012-08-14 16:36:25 10368 -c--a-w- c:\windows\system32\dllcache\hidusb.sys 2012-08-14 16:36:25 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys 2012-08-14 16:36:15 60032 -c--a-w- c:\windows\system32\dllcache\usbaudio.sys 2012-08-14 16:36:15 60032 ----a-w- c:\windows\system32\drivers\USBAUDIO.sys 2012-08-13 13:08:13 -------- d-----w- c:\program files\SecCopy . ==================== Find3M ==================== . 2012-08-26 22:29:08 51144 ----a-w- c:\windows\system32\drivers\Soluto.sys 2012-08-23 23:05:22 73416 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-08-23 23:05:22 696520 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-08-22 12:59:28 499712 ----a-w- c:\windows\system32\msvcp71.dll 2012-08-22 12:59:28 348160 ----a-w- c:\windows\system32\msvcr71.dll 2012-07-20 04:21:19 39016 ----a-w- c:\windows\system32\drivers\tbhsd.sys 2012-07-20 04:21:13 31848 ----a-w- c:\windows\system32\drivers\rrnetcap.sys 2012-07-06 13:58:51 78336 ----a-w- c:\windows\system32\browser.dll 2012-07-04 14:05:18 139784 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2012-07-03 13:40:15 1866112 ----a-w- c:\windows\system32\win32k.sys 2012-07-02 17:49:33 916992 ----a-w- c:\windows\system32\wininet.dll 2012-07-02 17:49:32 43520 ----a-w- c:\windows\system32\licmgr10.dll 2012-07-02 17:49:32 1469440 ----a-w- c:\windows\system32\inetcpl.cpl 2012-07-02 12:05:43 385024 ----a-w- c:\windows\system32\html.iec 2012-06-25 21:04:24 1394248 ----a-w- c:\windows\system32\msxml4.dll 2012-06-12 16:19:20 12992 ----a-w- c:\windows\system32\drivers\PSVolAcc.sys 2012-06-12 16:19:08 16064 ----a-w- c:\windows\system32\drivers\pssnap.sys 2012-06-12 16:19:02 53952 ----a-w- c:\windows\system32\drivers\psmounter.sys . ============= FINISH: 17:18:28.57 ===============