DDS (Version 1.0) - NTFSx86 Run by [removed] at 13:25:26.99 on Tue 11/25/2008 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.2046.1654 [GMT -5:00] ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch SVCHOST.EXE C:\WINDOWS\System32\svchost.exe -k netsvcs SVCHOST.EXE SVCHOST.EXE C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe C:\Program Files\Creative\Shared Files\CAMTRAY.EXE C:\PROGRA~1\PESTPA~1\PPMemCheck.exe C:\PROGRA~1\PESTPA~1\CookiePatrol.exe C:\Program Files\ZoneAlarm\zlclient.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\SmartDisk\FlashPath\sdstat.exe C:\Program Files\palmOne\HOTSYNC.EXE C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\WINDOWS\system32\wuauclt.exe H:\dds.scr ============== Psuedo HJT Report =============== uStart Page = hxxp://www.google.com uSearch Page = hxxp://www.google.com uSearch Bar = hxxp://www.google.com/ie mDefault_Search_URL = hxxp://www.google.com/ie mSearch Page = hxxp://www.google.com mStart Page = hxxp://www.google.com uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com uSearchURL,(Default) = hxxp://www.google.com/keyword/%s mSearchAssistant = hxxp://www.google.com uURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll TB: {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - c:\program files\xi\netxfer\NXToolBar.dll TB: {ABA69CF4-20FB-42CE-BB6D-B6171D64B8EC} - c:\windows\vwsrfton.dll uRun: [mount.exe] F:\mount.exe /z uRun: [hlpsrvgen] c:\windows\system32\bwvkhwjq.exe uRun: [brastk] c:\windows\system32\brastk.exe mRun: [IntelMeM] c:\program files\intel\modem event monitor\IntelMEM.exe mRun: [Creative WebCam Tray] c:\program files\creative\shared files\CAMTRAY.EXE mRun: [SunJavaUpdateSched] c:\program files\java\j2re1.4.2_03\bin\jusched.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [PPMemCheck] c:\progra~1\pestpa~1\PPMemCheck.exe mRun: [CookiePatrol] c:\progra~1\pestpa~1\CookiePatrol.exe mRun: [ZoneAlarm Client] "c:\program files\zonealarm\zlclient.exe" mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot mRun: [brastk] brastk.exe StartupFolder: c:\docume~1\jeffrey\startm~1\programs\startup\hotsyn~1.lnk - c:\program files\palmone\HOTSYNC.EXE StartupFolder: c:\docume~1\jeffrey\startm~1\programs\startup\introd~1.lnk - c:\program files\common files\microsoft shared\media manager\SPLASHA.EXE StartupFolder: c:\docume~1\jeffrey\startm~1\programs\startup\pictur~1.lnk - c:\program files\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\flashp~1.lnk - c:\program files\smartdisk\flashpath\sdstat.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE uPolicies-explorer: New Value #1 = 0 (0x0) uPolicies-system: DisableTaskMgr = 0 (0x0) IE: Download all by NetXfer - c:\program files\xi\netxfer\NXAddList.html IE: Download by NetXfer - c:\program files\xi\netxfer\NXAddLink.html IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office10\EXCEL.EXE/3000 IE: Yahoo! &SMS - file:///c:\program files\yahoo!\Common/ycsms.htm Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL Handler: ebk - {1E411CE8-FE8B-4973-B8E0-6EA2CC3C6B06} - Notify: igfxcui - igfxsrvc.dll AppInit_DLLs: karna.dat SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - c:\progra~1\window~4\MpShHook.dll SecurityProviders: msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, ============= SERVICES / DRIVERS =============== R2 FlashNT;FlashNT;c:\windows\system32\drivers\FlashNT.sys [2005-2-27 72784] R2 ScFBPNT;CanoScan FBP Port Driver;\??\c:\windows\system32\drivers\ScFBPNT.SYS [2005-6-23 16288] R2 Sdselect;Sdselect;c:\windows\system32\drivers\Sdselect.sys [2005-2-27 73296] ============== File Associations =============== regfile=regedit.exe "%1" %* scrfile="%1" %* =============== Created Last 30 ================ 2008-11-20 12:09 81,442 a------- c:\windows\system32\wini10895.exe 2008-11-20 12:08 9,728 a------- c:\windows\brastk.exe 2008-11-20 12:08 6,144 a------- c:\windows\system32\karna.dat 2008-11-20 12:08 6,144 a------- c:\windows\karna.dat 2008-11-20 12:07 27,648 a------- c:\windows\system32\dllcache\beep.sys 2008-11-20 12:07 9,728 a------- c:\windows\system32\brastk.exe 2008-11-20 12:06 35,840 a------- c:\windows\system32\a.exe 2008-11-14 14:16 38 a------- c:\windows\avisplitter.INI 2008-11-06 11:50 98,304 a----r-- c:\windows\system32\drivers\vnet558x.sys 2008-11-02 14:39 --d----- c:\docume~1\alluse~1\applic~1\2Wire 2008-11-02 14:34 --d----- c:\docume~1\jeffrey\applic~1\2Wire 2008-11-02 14:28 17,151 a------- c:\windows\system32\ZDPNDIS5.SYS 2008-11-02 14:28 81,920 a------- c:\windows\system32\ZDPN50.DLL 2008-11-02 14:28 24,576 a------- c:\windows\system32\ZyDelReg.exe 2008-11-02 14:28 28,672 a------- c:\windows\system32\InsDrvZD.dll 2008-11-02 14:28 15,872 a------- c:\windows\system32\InsDrvZD64.DLL ==================== Find3M ==================== 2008-11-25 12:52 --d----- c:\program files\PestPatrol 2008-09-17 10:31 --d----- c:\docume~1\jeffrey\applic~1\Jasc Software Inc 2008-08-20 06:59 --d----- c:\docume~1\jeffrey\applic~1\ErrorSmart 2008-08-16 08:52 --d----- c:\docume~1\jeffrey\applic~1\Malwarebytes 2008-08-16 08:51 --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes 2008-08-14 08:39 --d----- c:\docume~1\alluse~1\applic~1\xmnkhaxu 2008-06-03 09:55 --d----- c:\docume~1\jeffrey\applic~1\Move Networks 2008-02-25 22:05 --d----- c:\docume~1\jeffrey\applic~1\Sony Corporation 2008-02-25 21:55 --d----- c:\docume~1\alluse~1\applic~1\Sony Corporation 2008-02-22 19:22 --d----- c:\docume~1\alluse~1\applic~1\Newsoft 2007-12-19 11:53 --d----- c:\docume~1\jeffrey\applic~1\WholeSecurity 2007-09-30 16:45 --d----- c:\docume~1\jeffrey\applic~1\Viewpoint 2007-09-30 16:45 --d----- c:\docume~1\alluse~1\applic~1\Viewpoint 2007-08-25 11:41 --d----- c:\docume~1\jeffrey\applic~1\DeepBurner 2007-07-29 22:15 --d----- c:\docume~1\alluse~1\applic~1\Elaborate Bytes 2007-05-18 14:41 --d----- c:\docume~1\alluse~1\applic~1\Kazaa 2007-05-01 18:23 --d----- c:\docume~1\jeffrey\applic~1\Snapfish 2007-02-25 22:12 --d----- c:\docume~1\alluse~1\applic~1\Kazaa Lite 2007-02-14 00:02 --d----- c:\docume~1\jeffrey\applic~1\STOIK 2006-08-05 11:53 --d----- c:\docume~1\jeffrey\applic~1\Seven Zip 2006-03-16 22:39 --d----- c:\docume~1\alluse~1\applic~1\Avg7 2005-10-06 20:29 --d----- c:\docume~1\jeffrey\applic~1\EbkReader 2005-02-23 22:00 --d----- c:\docume~1\jeffrey\applic~1\Kazaa Lite 2005-02-23 19:36 --d----- c:\docume~1\jeffrey\applic~1\EarthLink Toolbar 2005-02-23 19:31 --d----- c:\docume~1\jeffrey\applic~1\Earthlink 2005-02-21 20:06 --d----- c:\docume~1\alluse~1\applic~1\SBSI ============= FINISH: 13:26:32.32 ===============