DDS (Ver_2012-11-20.01) - NTFS_x86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.60.2 Run by [removed] at 13:18:30 on 2014-06-10 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.729 [GMT -4:00] . AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D} . ============== Running Processes ================ . C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe C:\Program Files\SUPERAntiSpyware\SASCORE.EXE C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe C:\WINDOWS\system32\DVDRAMSV.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE C:\PROGRA~1\WinTV\TVServer\HAUPPA~1.EXE C:\Program Files\Java\jre7\bin\jqs.exe C:\Program Files\Nero\Update\NASvc.exe C:\Program Files\PDF Architect\HelperService.exe C:\Program Files\PDF Architect\ConversionService.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\SAgent4.exe c:\TOSHIBA\IVP\swupdate\swupdtmr.exe C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\WINDOWS\ehome\mcrdsvc.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe C:\Program Files\Synaptics\SynTP\Toshiba.exe C:\program files\real\realplayer\update\realsched.exe C:\Program Files\Smart PDF Converter Pro\SmartSoft PDF Printer Agent.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe C:\Program Files\Internet Download Manager\IDMan.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\Internet Download Manager\IEMonitor.exe C:\Documents and Settings\All Users\Application Data\Boxtools\Toolbox.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Akamai\netsession_win.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Akamai\netsession_win.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\WINDOWS\system32\RAMASST.exe C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe C:\Program Files\WinTV\WinTV7\WinTVTray.exe C:\Program Files\Alwil Software\Avast5\AvastSvc.exe C:\WINDOWS\system32\notepad.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Max Yurcov\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\system32\svchost.exe -k LocalService C:\WINDOWS\system32\svchost.exe -k imgsvc . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com/ uProxyOverride = BHO: IDMIEHlprObj Class: {0055C089-8582-441B-A0BF-17B458C2A3A8} - c:\program files\internet download manager\IDMIECC.dll BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll BHO: PDF Architect Helper: {3A2D5EBA-F86D-4BD3-A177-019765996711} - c:\program files\pdf architect\PDFIEHelper.dll BHO: DriveLetterAccess: {5CA3D70E-1895-11CF-8E15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL BHO: Wondershare Video Converter Ultimate: {65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} - c:\program files\wondershare\video converter ultimate\SVRIEPlugin.dll BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\alwil software\avast5\aswWebRepIE.dll BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll BHO: Freecorder extension: {B15BBE59-42F5-4206-B3F0-BE98F5DC4B93} - c:\program files\freecorder extension\ScriptHost.dll BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll TB: &Google: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll TB: ZoneAlarm Toolbar: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - TB: &Google: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll TB: PDF Architect Toolbar: {25A3A431-30BB-47C8-AD6A-E1063801134F} - c:\program files\pdf architect\PDFIEPlugin.dll uRun: [TOSCDSPD] c:\program files\toshiba\toscdspd\toscdspd.exe uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot uRun: [Google Update] "c:\documents and settings\max yurcov\local settings\application data\google\update\GoogleUpdate.exe" /c uRun: [Boxoft Tools] "c:\documents and settings\all users\application data\boxtools\Boxofttoolbox.exe" -autorun uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [Akamai NetSession Interface] "c:\documents and settings\max yurcov\local settings\application data\akamai\netsession_win.exe" uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe mRun: [THotkey] c:\program files\toshiba\toshiba applet\thotkey.exe mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [PadTouch] c:\program files\toshiba\touch and launch\PadExe.exe mRun: [SmoothView] c:\program files\toshiba\toshiba zooming utility\SmoothView.exe mRun: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run mRun: [ISW] "c:\program files\checkpoint\zaforcefield\ForceField.exe" /icon="hidden" mRun: [EEventManager] c:\progra~1\epsons~1\eventm~1\EEventManager.exe mRun: [FUFAXSTM] "c:\program files\epson software\fax utility\FUFAXSTM.exe" mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe" mRun: [NBAgent] "c:\program files\nero\nero 11\nero backitup\NBAgent.exe" /WinStart mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot mRun: [Nuance PDF Reader-reminder] "c:\program files\nuance\pdf reader\ereg\ereg.exe" -r "c:\documents and settings\all users\application data\nuance\pdf reader\ereg\Ereg.ini" mRun: [DivXMediaServer] c:\program files\divx\divx media server\DivXMediaServer.exe mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [SmartSoft PDF Printer Agent] "c:\program files\smart pdf converter pro\SmartSoft PDF Printer Agent.exe" mRun: [AvastUI.exe] "c:\program files\alwil software\avast5\AvastUI.exe" /nogui mRun: [Wondershare Helper Compact.exe] c:\program files\common files\wondershare\wondershare helper compact\WSHelper.exe mRun: [BrowserPlugInHelper] c:\program files\wondershare\video converter ultimate\BrowserPlugInHelper.exe mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRunOnce: [B Register c:\program files\divx\divx plus web player\ie\divxhtml5\divxhtml5.dll] "c:\windows\system32\rundll32.exe" "c:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll",DllRegisterServer StartupFolder: c:\docume~1\maxyur~1\startm~1\programs\startup\epsona~1.lnk - d:\common\epsonreg\EpsonReg.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\autost~1.lnk - c:\program files\wintv\Ir.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\interv~1.lnk - c:\program files\intervideo\common\bin\WinCinemaMgr.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\ramasst.lnk - c:\windows\system32\RAMASST.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\wddmst~1.lnk - c:\program files\western digital\wd smartware\wd drive manager\WDDMStatus.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\wintvr~1.lnk - c:\program files\wintv\wintv7\WinTVTray.exe uPolicies-Explorer: NoDriveTypeAutoRun = dword:145 mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1 mPolicies-Explorer: NoDriveTypeAutoRun = dword:145 IE: &Google Search - c:\program files\google\GoogleToolbar1.dll/cmsearch.html IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html IE: Backward Links - c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html IE: Cached Snapshot of Page - c:\program files\google\GoogleToolbar1.dll/cmcache.html IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm IE: Download FLV video content with IDM - c:\program files\internet download manager\IEGetVL.htm IE: Download with IDM - c:\program files\internet download manager\IEExt.htm IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: Similar Pages - c:\program files\google\GoogleToolbar1.dll/cmsimilar.html IE: Translate into English - c:\program files\google\GoogleToolbar1.dll/cmtrans.html IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe LSP: c:\windows\system32\idmmbc.dll DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} - hxxp://www.logitech.com/devicedetector/bin/LogitechDeviceDetection32.cab DPF: {12545791-AC9A-44B2-8964-0DA216C4A4E5} - hxxp://cadenas.partcommunity.com/PARTcommunity/static/all/cnsViewer3D/cnsweb3d.cab DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1372442705171 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab TCP: NameServer = 8.8.8.8 8.8.4.4 TCP: Interfaces\{F02D07DC-7767-4167-A3DB-70EB6BF2044D} : DHCPNameServer = 8.8.8.8 8.8.4.4 Notify: igfxcui - igfxdev.dll AppInit_DLLs= c:\windows\jaksta\ac\x86\jaudcap.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\max yurcov\application data\mozilla\firefox\profiles\hjtpayda.default\ FF - prefs.js: browser.search.defaulturl - hxxp://websearch.exitingsearch.info/?pid=1182&r=2014/03/24&hid=623325080624908325&lg=EN&cc=US&unqvl=50&l=1&q= FF - prefs.js: browser.search.selectedEngine - WebSearch FF - prefs.js: browser.startup.homepage - hxxp://start.findwide.com/v/2/?guid={A30657E3-68FC-46F9-9EBB-F95383FEDDFE}&serpv=6 FF - prefs.js: keyword.URL - hxxp://findwide.com/serp?guid={A30657E3-68FC-46F9-9EBB-F95383FEDDFE}&serpv=6&action=default_search&k= FF - prefs.js: network.proxy.type - 0 FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll FF - plugin: c:\documents and settings\max yurcov\application data\mozilla\plugins\npgoogletalk.dll FF - plugin: c:\documents and settings\max yurcov\application data\mozilla\plugins\npo1d.dll FF - plugin: c:\documents and settings\max yurcov\local settings\application data\google\update\1.3.24.7\npGoogleUpdate3.dll FF - plugin: c:\progra~1\common~1\nero\browse~1\npBrowserPlugin.dll FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll FF - plugin: c:\program files\google\update\1.3.24.7\npGoogleUpdate3.dll FF - plugin: c:\program files\java\jre7\bin\dtplugin\npdeployJava1.dll FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll FF - plugin: c:\program files\nuance\pdf reader\bin\nppdf.dll FF - plugin: c:\program files\nuance\pdf reader\bin\nppdf.dll FF - plugin: c:\program files\pdf architect\ffpdfarchitectext\plugins\NPPDFArchitectPreviewerPlugin.dll FF - plugin: c:\program files\real\realplayer\netscape6\nprpplugin.dll FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_13_0_0_214.dll . ---- FIREFOX POLICIES ---- FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=111305&tt=3412_3 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://www.google.com/search?babsrc=TB_ggl&q= FF - user.js: extensions.BabylonToolbar.id - 581a68d200000000000000a0d146b82f FF - user.js: extensions.BabylonToolbar.instlDay - 15576 FF - user.js: extensions.BabylonToolbar.vrsn - 1.6.4.6 FF - user.js: extensions.BabylonToolbar.vrsni - 1.6.4.6 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.6.4.617:24:37 FF - user.js: extensions.BabylonToolbar.prtnrId - babylon FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar.tlbrId - base FF - user.js: extensions.BabylonToolbar.instlRef - sst FF - user.js: extensions.BabylonToolbar.dfltLng - en FF - user.js: extensions.BabylonToolbar.excTlbr - false FF - user.js: extensions.BabylonToolbar.admin - false FF - user.js: keyword.URL - hxxp://findwide.com/serp?guid={A30657E3-68FC-46F9-9EBB-F95383FEDDFE}&serpv=6&action=default_search&k= FF - user.js: browser.search.defaultenginename - FindWide FF - user.js: browser.keywordURLPromptDeclined - 1 FF - user.js: browser.startup.homepage - hxxp://start.findwide.com/v/2/?guid={A30657E3-68FC-46F9-9EBB-F95383FEDDFE}&serpv=6 FF - user.js: browser.startup.page - 1 FF - user.js: browser.newtab.url - file:///c:\documents and settings\max yurcov\local settings\application data\tnt2\common\pinnedSearch.htm FF - user.js: browser.newtab.url - . ============= SERVICES / DRIVERS =============== . R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [2013-3-13 49944] R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [2013-3-13 180632] R0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\drivers\NBVol.sys [2012-6-3 56496] R0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\drivers\NBVolUp.sys [2012-6-3 12464] R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswsnx.sys [2011-2-26 777488] R1 aswSP;aswSP;c:\windows\system32\drivers\aswsp.sys [2010-10-11 411680] R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880] R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664] R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2013-10-10 120088] R2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2014-4-23 24184] R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswmonflt.sys [2013-3-13 67824] R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2010-10-11 50344] R2 HauppaugeTVServer;HauppaugeTVServer;c:\progra~1\wintv\tvserver\HAUPPA~1.EXE [2011-2-6 562176] R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [2012-8-13 12184] R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328] R2 NAUpdate;Nero Update;c:\program files\nero\update\NASvc.exe [2011-11-25 687400] R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2010-6-25 35088] R2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files\pdf architect\HelperService.exe [2013-4-8 1320496] R2 PDF Architect Service;PDF Architect Service;c:\program files\pdf architect\ConversionService.exe [2013-4-8 799280] R2 WDDMService;WD SmartWare Drive Manager;c:\program files\western digital\wd smartware\wd drive manager\WDDMService.exe [2010-7-29 110592] R2 WDFME;WD File Management Engine;c:\program files\western digital\wd smartware\front parlor\wdfme\WDFME.exe [2010-7-29 952832] R3 appliandMP;appliandMP;c:\windows\system32\drivers\appliand.sys [2012-6-23 28256] R3 JakNDisMP;JakNDisMP;c:\windows\system32\drivers\JakNDis.sys [2010-6-24 28256] S1 lsnfd;lsnfd;c:\windows\system32\drivers\lsnfd.sys --> c:\windows\system32\drivers\lsnfd.sys [?] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 DraftSight API Service;DraftSight API Service;"c:\program files\dassault systemes\draftsight\bin\dshttpapiservice.exe" c:\program files\dassault systemes\draftsight\bin\dshttpapiservice.exe --> c:\program files\dassault systemes\draftsight\bin\dsHttpApiService.exe [?] S3 appliand;Applian Network Service;c:\windows\system32\drivers\appliand.sys [2012-6-23 28256] S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2011-6-2 11336] S3 hcw73bda;Hauppauge HVR USB2 Video Capture;c:\windows\system32\drivers\Hcw73bda.sys [2011-2-6 599552] S3 JakNDis;Jaksta Service;c:\windows\system32\drivers\JakNDis.sys [2010-6-24 28256] S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-6-8 110296] S3 PctvVirtualNdis;Pinnacle Virtual Miniport;c:\windows\system32\drivers\PctvVirtualNdis.sys [2010-11-26 13696] S3 U6000ALL;HDTV110 TV Box(ALL);c:\windows\system32\drivers\dmdcap.sys [2010-5-4 230784] S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2010-12-1 11520] S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2006-2-15 14336] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] S4 WDSC;WD File Management Shadow Engine;"c:\program files\western digital\wd smartware\front parlor\wdsc.exe" --> c:\program files\western digital\wd smartware\front parlor\WDSC.exe [?] . =============== File Associations =============== . FileExt: .inf: inffile=c:\windows\system32\NOTEPAD.EXE %1 [UserChoice] ShellExec: ymp.exe: open="c:\program files\yahoo!\yahoo! music engine\YahooMusicEngine.exe" -play "%1" ShellExec: ymp.exe: play="c:\program files\yahoo!\yahoo! music engine\YahooMusicEngine.exe" -play "%1" . =============== Created Last 30 ================ . 2014-06-10 16:31:06 -------- d-----w- c:\documents and settings\max yurcov\application data\SUPERAntiSpyware.com 2014-06-10 16:30:12 -------- d-----w- c:\program files\SUPERAntiSpyware 2014-06-10 16:30:11 -------- d-----w- c:\documents and settings\all users\application data\SUPERAntiSpyware.com 2014-06-09 00:08:50 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys 2014-06-09 00:08:15 53208 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2014-06-09 00:08:15 23256 ----a-w- c:\windows\system32\drivers\mbam.sys 2014-06-09 00:08:14 -------- d-----w- c:\program files\Malwarebytes Anti-Malware 2014-06-09 00:08:14 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes 2014-06-06 18:34:19 145408 ----a-w- c:\windows\system32\javacpl.cpl 2014-06-06 18:34:02 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2014-05-28 15:15:18 10594416 ----a-w- c:\program files\mozilla firefox\icudt52.dll 2014-05-28 15:15:17 965232 ----a-w- c:\program files\mozilla firefox\icuuc52.dll 2014-05-28 15:15:17 1266800 ----a-w- c:\program files\mozilla firefox\icuin52.dll 2014-05-28 12:11:12 159744 ----a-w- c:\program files\mozilla firefox\plugins\npqtplugin2.dll 2014-05-28 12:11:12 159744 ----a-w- c:\program files\mozilla firefox\plugins\npqtplugin.dll 2014-05-28 12:11:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll 2014-05-28 12:11:12 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll . ==================== Find3M ==================== . 2014-05-27 15:05:56 70832 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2014-05-27 15:05:56 692400 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2014-05-16 17:50:05 777488 ----a-w- c:\windows\system32\drivers\aswsnx.sys 2014-04-23 17:50:48 776976 ----a-w- c:\windows\system32\drivers\aswsnx.sys.1400262604468 2014-04-23 17:50:48 180632 ----a-w- c:\windows\system32\drivers\aswVmm.sys 2014-04-23 17:50:47 67824 ----a-w- c:\windows\system32\drivers\aswmonflt.sys 2014-04-23 17:50:47 54832 ----a-w- c:\windows\system32\drivers\aswrdr.sys.1400262604468 2014-04-23 17:50:47 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys 2014-04-23 17:50:47 24184 ----a-w- c:\windows\system32\drivers\aswHwid.sys 2014-04-23 17:50:46 43152 ----a-w- c:\windows\avastSS.scr 2014-04-16 03:02:58 354656 ----a-w- c:\windows\system32\DivXControlPanelApplet.cpl . ============= FINISH: 13:19:51.18 ===============