My daughter installed a p2p program smud and now the problems have started. Tried to unistall and it wouldn't, i tried revo unistaller it says its gone but im not so sure.
Here's the log:
DDS (Ver_2011-06-23.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_26
Run by [removed] at 14:53:09 on 2011-06-29
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.3935.2045
[GMT -7:00]
.
AV: Norton Internet Security *Disabled/Updated*
{88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Disabled/Updated*
{33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files (x86)\Common Files\Apple\Mobile Device
Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
C:\Program Files (x86)\Microsoft Small Business\Business Contact
Manager\BcmSqlStartupSvc.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\Cobian Backup 10\cbVSCService.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Cobian Backup 10\cbService.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe
C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
C:\ProgramData\Rpcnet\Bin\rpcld.exe
C:\Windows\SysWOW64\rpcnet.exe
c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzCdbSvc.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Sony\VAIO Care\VCsystray.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder
Watcher\VCFw.exe
C:\Program Files (x86)\W3i\InstallIQUpdater\InstallIQUpdater.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\CCP.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Program Files\Apoint\Apntex.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Apoint\Apvfb.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWi.exe
C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment
Platform\VCSW\VCSW.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\taskmgr.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\ThirdPartyAppMgr.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\PowerManager.exe
C:\Program Files\Sony\VAIO Power Management\SPMService.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Program Files\Sony\VAIO Care\VCsystray.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\wbengine.exe
C:\Windows\System32\vds.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\explorer.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.bing.com/?pc=Z045&form=ZGAPHP
uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain ... &bmod=SNNT
mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain ... &bmod=SNNT
mStart Page = hxxp://www.google.com/ig/redirectdomain ... &bmod=SNNT
uInternet Settings,ProxyOverride = *.local
mURLSearchHooks: Vuze Remote Toolbar:
{ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files
(x86)\Vuze_Remote\prxtbVuze.dll
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} -
C:\Program Files (x86)\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer:
{3049c3e9-b461-4bc5-8870-4c09146192ca} -
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
BHO: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} -
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} -
C:\Program Files (x86)\Norton Internet
Security\Engine\16.8.0.41\coIEPlg.dll
BHO: Symantec Intrusion Prevention:
{6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton
Internet Security\Engine\16.8.0.41\IPSBHO.DLL
BHO: Windows Live Sign-in Helper:
{9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common
Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} -
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} -
C:\Program Files (x86)\Skype\Toolbars\Internet
Explorer\skypeieplugin.dll
BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} -
C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
BHO: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
BHO: Java(tm) Plug-In 2 SSV Helper:
{dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files
(x86)\Java\jre6\bin\jp2ssv.dll
BHO: YouTube Downloader Toolbar:
{f3fee66e-e034-436a-86e4-9690573bee8a} - C:\Program Files
(x86)\YouTube Downloader Toolbar\IE\4.4\youtubedownloaderToolbarIE.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} -
C:\Program Files (x86)\Norton Internet
Security\Engine\16.8.0.41\coIEPlg.dll
TB: YouTube Downloader Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a}
- C:\Program Files (x86)\YouTube Downloader
Toolbar\IE\4.4\youtubedownloaderToolbarIE.dll
TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} -
C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} -
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
TB: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} -
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
uRun: [swg] "C:\Program Files
(x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
uRun: [Google Update]
"C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [InstallIQUpdater] "C:\Program Files
(x86)\W3i\InstallIQUpdater\InstallIQUpdater.exe" /silent /autorun
uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
mRun: [SmartWiHelper] "C:\Program Files (x86)\Sony\SmartWi Connection
Utility\SmartWiHelper.exe" /WindowsStartup
mRun: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun: [Cobian Backup 10 Interface] "C:\Program Files (x86)\Cobian
Backup 10\cbInterface.exe" -service
mRun: [Adobe Reader Speed Launcher] "C:\Program Files
(x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common
Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [<NO NAME>]
mRun: [SearchSettings] "C:\Program Files (x86)\Common
Files\Spigot\Search Settings\SearchSettings.exe"
mRun: [TkBellExe] "c:\program files
(x86)\real\realplayer\Update\realsched.exe" -osboot
mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common
Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common
Files\Java\Java Update\jusched.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Download Web &Images with SoMud - C:\Program Files
(x86)\SoMud\scripts\ie\images-url.html
IE: Download with SoMud - C:\Program Files (x86)\SoMud\scripts\ie\link-url.html
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google
Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} -
{898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files
(x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} -
C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
Trusted Zone: apple.com\www
Trusted Zone: google.com\www
Trusted Zone: microsoft.com
Trusted Zone: microsoft.com\www
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
TCP: DhcpNameServer = 192.168.1.254
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C} :
DhcpNameServer = 192.168.1.254
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C}\3514E444E45425F5E45445
: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C}\6496A6960295F676572747
: DhcpNameServer = 10.0.0.1
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C}\77962756C6563737
: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C}\E4544574541425
: DhcpNameServer = 192.168.1.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8}
- C:\Program Files (x86)\Skype\Toolbars\Internet
Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -
C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program
Files (x86)\Norton Internet Security\Engine\16.8.0.41\CoIEPlg.dll
Notify: VESWinlogon - VESWinlogon.dll
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
- C:\Program Files (x86)\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: RealPlayer Download and Record Plugin for Internet Explorer:
{3049C3E9-B461-4BC5-8870-4C09146192CA} -
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
BHO-X64: Conduit Engine: {30F9B915-B755-4826-820B-08FBA6BD249D} -
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
BHO-X64: Conduit Engine - No File
BHO-X64: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -
C:\Program Files (x86)\Norton Internet
Security\Engine\16.8.0.41\coIEPlg.dll
BHO-X64: Symantec NCO BHO - No File
BHO-X64: Symantec Intrusion Prevention:
{6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton
Internet Security\Engine\16.8.0.41\IPSBHO.DLL
BHO-X64: Symantec Intrusion Prevention - No File
BHO-X64: Windows Live Sign-in Helper:
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common
Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7}
- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO-X64: Skype Plug-In: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -
C:\Program Files (x86)\Skype\Toolbars\Internet
Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} -
C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
BHO-X64: Vuze Remote - No File
BHO-X64: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
BHO-X64: Somoto Toolbar - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper:
{DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files
(x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: YouTube Downloader Toolbar:
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files
(x86)\YouTube Downloader Toolbar\IE\4.4\youtubedownloaderToolbarIE.dll
TB-X64: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -
C:\Program Files (x86)\Norton Internet
Security\Engine\16.8.0.41\coIEPlg.dll
TB-X64: YouTube Downloader Toolbar:
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files
(x86)\YouTube Downloader Toolbar\IE\4.4\youtubedownloaderToolbarIE.dll
TB-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} -
C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
TB-X64: Conduit Engine: {30F9B915-B755-4826-820B-08FBA6BD249D} -
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
TB-X64: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} -
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
mRun-x64: [SmartWiHelper] "C:\Program Files (x86)\Sony\SmartWi
Connection Utility\SmartWiHelper.exe" /WindowsStartup
mRun-x64: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun-x64: [Cobian Backup 10 Interface] "C:\Program Files (x86)\Cobian
Backup 10\cbInterface.exe" -service
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files
(x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common
Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [(Default)]
mRun-x64: [SearchSettings] "C:\Program Files (x86)\Common
Files\Spigot\Search Settings\SearchSettings.exe"
mRun-x64: [TkBellExe] "c:\program files
(x86)\real\realplayer\Update\realsched.exe" -osboot
mRun-x64: [AppleSyncNotifier] C:\Program Files (x86)\Common
Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common
Files\Java\Java Update\jusched.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath -
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage -
hxxp://www.bing.com/?pc=Z045&form=ZGAPHP
FF - prefs.js: keyword.URL -
hxxp://search.yahoo.com/search?fr=green ... =937811&p=
FF - prefs.js: network.proxy.type - 0
FF - component:
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\components\coFFPlgn.dll
FF - component:
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component:
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordlegacyext.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCore.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko19.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency3.5.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency3.6.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files
(x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: C:\Users\David\AppData\Local\Google\Update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program
Files (x86)\Mozilla
Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} -
C:\Program Files (x86)\Mozilla
Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: RealPlayer Browser Record Plugin:
{ABDE892B-13A8-4d1b-88E6-365A6E755758} -
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - Ext: Norton Toolbar: {7BA52691-1876-45ce-9EE6-54BCB3B04BBC} -
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn
FF - Ext: Vuze Remote Community Toolbar:
{ba14329e-9550-4989-b3f2-9732e92d17cc} -
%profile%\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
FF - Ext: SomotoToolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
%profile%\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}
.
============= SERVICES / DRIVERS ===============
.
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys -->
C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R0 SymEFA;Symantec Extended File
Attributes;C:\Windows\system32\drivers\NISx64\1008000.029\SYMEFA64.SYS
--> C:\Windows\system32\drivers\NISx64\1008000.029\SYMEFA64.SYS [?]
R1 BHDrvx64;Symantec Heuristics
Driver;C:\Windows\system32\Drivers\NISx64\1008000.029\BHDrvx64.sys -->
C:\Windows\system32\Drivers\NISx64\1008000.029\BHDrvx64.sys [?]
R1 ccHP;Symantec Hash
Provider;C:\Windows\system32\Drivers\NISx64\1008000.029\ccHPx64.sys
--> C:\Windows\system32\Drivers\NISx64\1008000.029\ccHPx64.sys [?]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20110628.031\IDSviA64.sys
[2011-6-28 488056]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys
[2010-2-17 14920]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys
[2010-2-17 12360]
R1 vwififlt;Virtual WiFi Filter
Driver;C:\Windows\system32\DRIVERS\vwififlt.sys -->
C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 !SASCORE;SAS Core Service;C:\Program
Files\SUPERAntiSpyware\SASCore64.exe [2011-5-4 128384]
R2 Application Updater;Application Updater;C:\Program Files
(x86)\Application Updater\ApplicationUpdater.exe [2011-5-6 393112]
R2 cbVSCService;Cobian Backup 10 Volume Shadow Copy service;C:\Program
Files (x86)\Cobian Backup 10\cbVSCService.exe [2010-12-4 67584]
R2 CobianBackup10;Cobian Backup 10;C:\Program Files (x86)\Cobian
Backup 10\cbService.exe [2010-12-4 1125376]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual
Effect;C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys -->
C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [?]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files
(x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
[2011-6-10 136824]
R3 IntcHdmiAddService;Intel(R) High Definition Audio
HDMI;C:\Windows\system32\drivers\IntcHdmi.sys -->
C:\Windows\system32\drivers\IntcHdmi.sys [?]
R3 SFEP;Sony Firmware Extension
Parser;C:\Windows\system32\DRIVERS\SFEP.sys -->
C:\Windows\system32\DRIVERS\SFEP.sys [?]
R3 SYMNDISV;Symantec Network Filter
Driver;C:\Windows\system32\Drivers\NISx64\1008000.029\SYMNDISV.SYS -->
C:\Windows\system32\Drivers\NISx64\1008000.029\SYMNDISV.SYS [?]
R3 vwifimp;Microsoft Virtual WiFi Miniport
Service;C:\Windows\system32\DRIVERS\vwifimp.sys -->
C:\Windows\system32\DRIVERS\vwifimp.sys [?]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet
Controller;C:\Windows\system32\DRIVERS\yk62x64.sys -->
C:\Windows\system32\DRIVERS\yk62x64.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN
v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
[2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN
v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
[2010-3-18 138576]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for
Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys -->
C:\Windows\system32\DRIVERS\netw5v64.sys [?]
S3 Revoflt;Revoflt;C:\Windows\system32\DRIVERS\revoflt.sys -->
C:\Windows\system32\DRIVERS\revoflt.sys [?]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS -->
C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS -->
C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
--> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?]
S3 USBAAPL64;Apple Mobile USB
Driver;C:\Windows\system32\Drivers\usbaapl64.sys -->
C:\Windows\system32\Drivers\usbaapl64.sys [?]
.
=============== Created Last 30 ================
.
2011-06-29 21:14:58 -------- d-----w- C:\Users\David\AppData\Local\VS Revo Group
2011-06-29 21:14:51 31800 ----a-w- C:\Windows\System32\drivers\revoflt.sys
2011-06-29 21:14:49 -------- d-----w- C:\Program Files\VS Revo Group
2011-06-29 19:24:35 -------- d-----w- C:\Users\David\AppData\Roaming\SUPERAntiSpyware.com
2011-06-29 19:24:35 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
2011-06-29 19:24:30 -------- d-----w- C:\ProgramData\!SASCORE
2011-06-29 19:24:28 -------- d-----w- C:\Program Files\SUPERAntiSpyware
2011-06-29 12:15:01 10165440 ----a-w- C:\Users\David\AppData\Roaming\Microsoft\Windows\Network
Shortcuts\mseinstall.exe
2011-06-29 07:05:09 -------- d-----w- C:\Users\David\AppData\Local\Thunderbird
2011-06-29 06:59:26 -------- d-----w- C:\Users\David\AppData\Roaming\Aura
YouTube Downloader
2011-06-29 06:16:01 -------- d-----w- C:\Program Files (x86)\File Scavenger 3.2
2011-06-29 05:20:03 165376 ----a-w- C:\Windows\SysWow64\unrar.dll
2011-06-29 05:19:56 839680 ----a-w- C:\Windows\SysWow64\lameACM.acm
2011-06-29 05:19:55 237568 ----a-w- C:\Windows\SysWow64\yv12vfw.dll
2011-06-29 05:19:55 151552 ----a-w- C:\Windows\SysWow64\ac3acm.acm
2011-06-29 05:19:54 80896 ----a-w- C:\Windows\SysWow64\ff_vfw.dll
2011-06-29 05:19:49 -------- d-----w- C:\Program Files (x86)\K-Lite Codec Pack
2011-06-29 05:09:36 810496 ----a-w- C:\Windows\SysWow64\xvidcore.dll
2011-06-29 05:09:36 77824 ----a-w- C:\Windows\SysWow64\xvid.ax
2011-06-29 05:09:36 183808 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
2011-06-29 05:09:35 -------- d-----w- C:\Program Files (x86)\Xvid
2011-06-29 03:19:14 55384 ----a-w- C:\Windows\System32\drivers\SBREDrv.sys
2011-06-28 17:31:25 -------- d-----w- C:\Users\David\AppData\Roaming\Sammsoft
2011-06-28 07:12:11 -------- d-----w- C:\Program Files (x86)\somototoolbar
2011-06-28 07:11:43 -------- d-----w- C:\Users\David\AppData\Roaming\SoMud
2011-06-28 06:44:40 -------- d-----w- C:\Users\David\FrostWire
2011-06-28 06:43:40 -------- d-----w- C:\Users\David\AppData\Local\OpenCandy
2011-06-28 06:43:38 -------- d-----w- C:\Users\David\AppData\Roaming\OpenCandy
2011-06-26 07:38:03 -------- d-----w- C:\Program Files (x86)\TuneUpMedia
2011-06-26 06:41:45 -------- d-----w- C:\Users\David\AppData\Roaming\TuneUpMedia
2011-06-26 06:41:40 -------- d-----w- C:\ProgramData\TuneUpMedia
2011-06-26 06:37:48 -------- d-----w- C:\Users\David\AppData\Roaming\Azureus
2011-06-26 06:36:14 -------- d-----w- C:\Program Files (x86)\Conduit
2011-06-26 06:36:01 -------- d-----w- C:\Program Files (x86)\ConduitEngine
2011-06-26 06:35:57 -------- d-----w- C:\Users\David\AppData\Local\Conduit
2011-06-26 06:35:57 -------- d-----w- C:\Program Files (x86)\Vuze_Remote
2011-06-24 10:06:36 102400 ----a-w- C:\Windows\System32\drivers\dfsc.sys
2011-06-24 10:05:33 1896832 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2011-06-24 10:05:32 499712 ----a-w- C:\Windows\System32\drivers\afd.sys
2011-06-24 10:05:14 287744 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys
2011-06-24 10:05:14 157696 ----a-w- C:\Windows\System32\drivers\mrxsmb.sys
2011-06-24 10:05:14 126464 ----a-w- C:\Windows\System32\drivers\mrxsmb20.sys
2011-06-24 10:03:38 3133952 ----a-w- C:\Windows\System32\win32k.sys
2011-06-24 10:02:52 197120 ----a-w- C:\Windows\System32\d3d10_1.dll
2011-06-24 10:02:52 161792 ----a-w- C:\Windows\SysWow64\d3d10_1.dll
2011-06-24 10:02:42 461312 ----a-w- C:\Windows\System32\drivers\srv.sys
2011-06-24 10:02:42 399872 ----a-w- C:\Windows\System32\drivers\srv2.sys
2011-06-24 10:02:42 161792 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2011-06-24 10:02:19 861184 ----a-w- C:\Windows\System32\oleaut32.dll
2011-06-24 10:02:19 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2011-06-24 10:02:02 976896 ----a-w- C:\Windows\System32\inetcomm.dll
2011-06-24 10:02:02 740864 ----a-w- C:\Windows\SysWow64\inetcomm.dll
2011-06-12 00:51:32 476904 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\npdeployJava1.dll
2011-06-12 00:51:31 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2011-06-12 00:46:17 -------- d-----w- C:\Program Files\iTunes
2011-06-12 00:46:17 -------- d-----w- C:\Program Files\iPod
2011-06-12 00:42:01 -------- d-----w- C:\Program Files\Bonjour
2011-06-12 00:42:01 -------- d-----w- C:\Program Files (x86)\Bonjour
2011-06-11 18:02:09 11776 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\nprjplug.dll
2011-06-11 18:01:38 -------- d-----w- C:\Program Files (x86)\Common
Files\xing shared
2011-06-11 18:01:21 150712 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\nppl3260.dll
2011-06-11 18:00:29 105472 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\nprpjplug.dll
2011-06-11 01:38:48 404640 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-06-10 18:11:30 -------- d-----w- C:\Program Files (x86)\YouTube
Downloader Toolbar
2011-06-10 18:11:30 -------- d-----w- C:\Program Files (x86)\Application Updater
2011-06-10 15:31:34 367104 ----a-w- C:\Windows\System32\wcncsvc.dll
2011-06-10 15:31:34 276992 ----a-w- C:\Windows\SysWow64\wcncsvc.dll
2011-06-09 23:47:54 476160 ----a-w- C:\Windows\System32\XpsGdiConverter.dll
2011-06-09 23:46:45 367104 ----a-w- C:\Windows\System32\atmfd.dll
2011-06-09 23:46:45 294912 ----a-w- C:\Windows\SysWow64\atmfd.dll
2011-06-09 23:46:44 46080 ----a-w- C:\Windows\System32\atmlib.dll
2011-06-09 23:46:44 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2011-06-09 23:44:58 3138048 ----a-w- C:\Windows\System32\mstscax.dll
2011-06-07 19:35:34 103864 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\nppdf32.dll
2011-06-07 19:35:34 103864 ----a-w- C:\Program Files (x86)\Internet
Explorer\Plugins\nppdf32.dll
.
==================== Find3M ====================
.
2011-06-29 20:42:11 17920 ----a-w- C:\Windows\System32\rpcnetp.exe
2011-06-29 19:39:28 17920 ----a-w- C:\Windows\SysWow64\rpcnetp.dll
2011-06-29 19:39:27 52224 ----a-w- C:\Windows\SysWow64\rpcnet.dll
2011-06-29 19:38:24 17920 ----a-w- C:\Windows\SysWow64\rpcnetp.exe
2011-06-11 18:00:14 499712 ----a-w- C:\Windows\SysWow64\msvcp71.dll
2011-06-11 18:00:14 348160 ----a-w- C:\Windows\SysWow64\msvcr71.dll
2011-05-29 16:11:20 25912 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-05-25 02:14:10 270720 ------w- C:\Windows\System32\MpSigStub.exe
2011-05-24 11:21:59 404992 ----a-w- C:\Windows\System32\umpnpmgr.dll
2011-05-24 10:34:20 64512 ----a-w- C:\Windows\SysWow64\devobj.dll
2011-05-24 10:34:20 44544 ----a-w- C:\Windows\SysWow64\devrtl.dll
2011-05-24 10:34:00 145920 ----a-w- C:\Windows\SysWow64\cfgmgr32.dll
2011-05-24 10:32:46 252928 ----a-w- C:\Windows\SysWow64\drvinst.exe
2011-05-10 15:06:08 51712 ----a-w- C:\Windows\System32\drivers\usbaapl64.sys
2011-05-10 15:06:08 4517664 ----a-w- C:\Windows\System32\usbaaplrc.dll
2011-05-04 05:30:38 2326016 ----a-w- C:\Windows\System32\tquery.dll
2011-05-04 05:28:07 779264 ----a-w- C:\Windows\System32\mssvp.dll
2011-05-04 05:28:07 2228224 ----a-w- C:\Windows\System32\mssrch.dll
2011-05-04 05:28:06 75264 ----a-w- C:\Windows\System32\msscntrs.dll
2011-05-04 05:28:06 491520 ----a-w- C:\Windows\System32\mssph.dll
2011-05-04 05:28:06 288256 ----a-w- C:\Windows\System32\mssphtb.dll
2011-05-04 05:24:09 593408 ----a-w- C:\Windows\System32\SearchIndexer.exe
2011-05-04 05:24:09 249856 ----a-w- C:\Windows\System32\SearchProtocolHost.exe
2011-05-04 05:24:09 113664 ----a-w- C:\Windows\System32\SearchFilterHost.exe
2011-05-04 04:53:10 1553920 ----a-w- C:\Windows\SysWow64\tquery.dll
2011-05-04 04:52:59 666624 ----a-w- C:\Windows\SysWow64\mssvp.dll
2011-05-04 04:52:59 59392 ----a-w- C:\Windows\SysWow64\msscntrs.dll
2011-05-04 04:52:59 337408 ----a-w- C:\Windows\SysWow64\mssph.dll
2011-05-04 04:52:59 197120 ----a-w- C:\Windows\SysWow64\mssphtb.dll
2011-05-04 04:52:59 1401856 ----a-w- C:\Windows\SysWow64\mssrch.dll
2011-05-04 04:52:12 86528 ----a-w- C:\Windows\SysWow64\SearchFilterHost.exe
2011-05-04 04:52:12 428032 ----a-w- C:\Windows\SysWow64\SearchIndexer.exe
2011-05-04 04:52:12 164352 ----a-w- C:\Windows\SysWow64\SearchProtocolHost.exe
2011-04-23 01:29:25 2303488 ----a-w- C:\Windows\System32\jscript9.dll
2011-04-23 01:19:19 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2011-04-22 23:35:56 1797632 ----a-w- C:\Windows\SysWow64\jscript9.dll
2011-04-22 23:25:54 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2011-04-22 20:18:47 27008 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2011-04-09 06:58:56 142336 ----a-w- C:\Windows\System32\poqexec.exe
2011-04-09 06:45:48 5509504 ----a-w- C:\Windows\System32\ntoskrnl.exe
2011-04-09 06:13:06 3957632 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2011-04-09 06:13:06 3901824 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2011-04-09 05:56:38 123904 ----a-w- C:\Windows\SysWow64\poqexec.exe
2011-04-06 23:26:58 96544 ----a-w- C:\Windows\System32\dnssd.dll
2011-04-06 23:26:58 69408 ----a-w- C:\Windows\System32\jdns_sd.dll
2011-04-06 23:26:58 237856 ----a-w- C:\Windows\System32\dnssdX.dll
2011-04-06 23:26:58 119584 ----a-w- C:\Windows\System32\dns-sd.exe
2011-04-06 23:20:16 91424 ----a-w- C:\Windows\SysWow64\dnssd.dll
2011-04-06 23:20:16 75040 ----a-w- C:\Windows\SysWow64\jdns_sd.dll
2011-04-06 23:20:16 197920 ----a-w- C:\Windows\SysWow64\dnssdX.dll
2011-04-06 23:20:16 107808 ----a-w- C:\Windows\SysWow64\dns-sd.exe
.
============= FINISH: 14:54:25.49 ===============
Here's the log:
DDS (Ver_2011-06-23.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_26
Run by [removed] at 14:53:09 on 2011-06-29
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.3935.2045
[GMT -7:00]
.
AV: Norton Internet Security *Disabled/Updated*
{88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Disabled/Updated*
{33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files (x86)\Common Files\Apple\Mobile Device
Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
C:\Program Files (x86)\Microsoft Small Business\Business Contact
Manager\BcmSqlStartupSvc.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\Cobian Backup 10\cbVSCService.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Cobian Backup 10\cbService.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe
C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
C:\ProgramData\Rpcnet\Bin\rpcld.exe
C:\Windows\SysWOW64\rpcnet.exe
c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment
Platform\VzCdb\VzCdbSvc.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Sony\VAIO Care\VCsystray.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder
Watcher\VCFw.exe
C:\Program Files (x86)\W3i\InstallIQUpdater\InstallIQUpdater.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\CCP.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Program Files\Apoint\Apntex.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Apoint\Apvfb.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\SmartWi.exe
C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment
Platform\VCSW\VCSW.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\taskmgr.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\ThirdPartyAppMgr.exe
C:\Program Files (x86)\Sony\SmartWi Connection Utility\PowerManager.exe
C:\Program Files\Sony\VAIO Power Management\SPMService.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Program Files\Sony\VAIO Care\VCsystray.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\wbengine.exe
C:\Windows\System32\vds.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\explorer.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.bing.com/?pc=Z045&form=ZGAPHP
uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain ... &bmod=SNNT
mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain ... &bmod=SNNT
mStart Page = hxxp://www.google.com/ig/redirectdomain ... &bmod=SNNT
uInternet Settings,ProxyOverride = *.local
mURLSearchHooks: Vuze Remote Toolbar:
{ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files
(x86)\Vuze_Remote\prxtbVuze.dll
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} -
C:\Program Files (x86)\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer:
{3049c3e9-b461-4bc5-8870-4c09146192ca} -
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
BHO: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} -
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} -
C:\Program Files (x86)\Norton Internet
Security\Engine\16.8.0.41\coIEPlg.dll
BHO: Symantec Intrusion Prevention:
{6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton
Internet Security\Engine\16.8.0.41\IPSBHO.DLL
BHO: Windows Live Sign-in Helper:
{9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common
Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} -
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} -
C:\Program Files (x86)\Skype\Toolbars\Internet
Explorer\skypeieplugin.dll
BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} -
C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
BHO: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
BHO: Java(tm) Plug-In 2 SSV Helper:
{dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files
(x86)\Java\jre6\bin\jp2ssv.dll
BHO: YouTube Downloader Toolbar:
{f3fee66e-e034-436a-86e4-9690573bee8a} - C:\Program Files
(x86)\YouTube Downloader Toolbar\IE\4.4\youtubedownloaderToolbarIE.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} -
C:\Program Files (x86)\Norton Internet
Security\Engine\16.8.0.41\coIEPlg.dll
TB: YouTube Downloader Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a}
- C:\Program Files (x86)\YouTube Downloader
Toolbar\IE\4.4\youtubedownloaderToolbarIE.dll
TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} -
C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} -
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
TB: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} -
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
uRun: [swg] "C:\Program Files
(x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
uRun: [Google Update]
"C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [InstallIQUpdater] "C:\Program Files
(x86)\W3i\InstallIQUpdater\InstallIQUpdater.exe" /silent /autorun
uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
mRun: [SmartWiHelper] "C:\Program Files (x86)\Sony\SmartWi Connection
Utility\SmartWiHelper.exe" /WindowsStartup
mRun: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun: [Cobian Backup 10 Interface] "C:\Program Files (x86)\Cobian
Backup 10\cbInterface.exe" -service
mRun: [Adobe Reader Speed Launcher] "C:\Program Files
(x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common
Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [<NO NAME>]
mRun: [SearchSettings] "C:\Program Files (x86)\Common
Files\Spigot\Search Settings\SearchSettings.exe"
mRun: [TkBellExe] "c:\program files
(x86)\real\realplayer\Update\realsched.exe" -osboot
mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common
Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common
Files\Java\Java Update\jusched.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Download Web &Images with SoMud - C:\Program Files
(x86)\SoMud\scripts\ie\images-url.html
IE: Download with SoMud - C:\Program Files (x86)\SoMud\scripts\ie\link-url.html
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google
Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} -
{898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files
(x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} -
C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
Trusted Zone: apple.com\www
Trusted Zone: google.com\www
Trusted Zone: microsoft.com
Trusted Zone: microsoft.com\www
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
TCP: DhcpNameServer = 192.168.1.254
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C} :
DhcpNameServer = 192.168.1.254
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C}\3514E444E45425F5E45445
: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C}\6496A6960295F676572747
: DhcpNameServer = 10.0.0.1
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C}\77962756C6563737
: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{2AD33C77-0E28-48C2-9DA7-9FBEE614795C}\E4544574541425
: DhcpNameServer = 192.168.1.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8}
- C:\Program Files (x86)\Skype\Toolbars\Internet
Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -
C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program
Files (x86)\Norton Internet Security\Engine\16.8.0.41\CoIEPlg.dll
Notify: VESWinlogon - VESWinlogon.dll
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
- C:\Program Files (x86)\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: RealPlayer Download and Record Plugin for Internet Explorer:
{3049C3E9-B461-4BC5-8870-4C09146192CA} -
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
BHO-X64: Conduit Engine: {30F9B915-B755-4826-820B-08FBA6BD249D} -
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
BHO-X64: Conduit Engine - No File
BHO-X64: Symantec NCO BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -
C:\Program Files (x86)\Norton Internet
Security\Engine\16.8.0.41\coIEPlg.dll
BHO-X64: Symantec NCO BHO - No File
BHO-X64: Symantec Intrusion Prevention:
{6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton
Internet Security\Engine\16.8.0.41\IPSBHO.DLL
BHO-X64: Symantec Intrusion Prevention - No File
BHO-X64: Windows Live Sign-in Helper:
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common
Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7}
- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
BHO-X64: Skype Plug-In: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -
C:\Program Files (x86)\Skype\Toolbars\Internet
Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} -
C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
BHO-X64: Vuze Remote - No File
BHO-X64: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
BHO-X64: Somoto Toolbar - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper:
{DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files
(x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: YouTube Downloader Toolbar:
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files
(x86)\YouTube Downloader Toolbar\IE\4.4\youtubedownloaderToolbarIE.dll
TB-X64: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -
C:\Program Files (x86)\Norton Internet
Security\Engine\16.8.0.41\coIEPlg.dll
TB-X64: YouTube Downloader Toolbar:
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files
(x86)\YouTube Downloader Toolbar\IE\4.4\youtubedownloaderToolbarIE.dll
TB-X64: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} -
C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll
TB-X64: Conduit Engine: {30F9B915-B755-4826-820B-08FBA6BD249D} -
C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
TB-X64: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
C:\Program Files (x86)\somototoolbar\vmntemplateX.dll
TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} -
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
mRun-x64: [SmartWiHelper] "C:\Program Files (x86)\Sony\SmartWi
Connection Utility\SmartWiHelper.exe" /WindowsStartup
mRun-x64: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun-x64: [Cobian Backup 10 Interface] "C:\Program Files (x86)\Cobian
Backup 10\cbInterface.exe" -service
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files
(x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common
Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [(Default)]
mRun-x64: [SearchSettings] "C:\Program Files (x86)\Common
Files\Spigot\Search Settings\SearchSettings.exe"
mRun-x64: [TkBellExe] "c:\program files
(x86)\real\realplayer\Update\realsched.exe" -osboot
mRun-x64: [AppleSyncNotifier] C:\Program Files (x86)\Common
Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common
Files\Java\Java Update\jusched.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath -
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage -
hxxp://www.bing.com/?pc=Z045&form=ZGAPHP
FF - prefs.js: keyword.URL -
hxxp://search.yahoo.com/search?fr=green ... =937811&p=
FF - prefs.js: network.proxy.type - 0
FF - component:
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\components\coFFPlgn.dll
FF - component:
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component:
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordlegacyext.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCore.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko19.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency3.5.dll
FF - component:
C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\zzv8t5cx.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency3.6.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files
(x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: C:\Users\David\AppData\Local\Google\Update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program
Files (x86)\Mozilla
Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} -
C:\Program Files (x86)\Mozilla
Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: RealPlayer Browser Record Plugin:
{ABDE892B-13A8-4d1b-88E6-365A6E755758} -
C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - Ext: Norton Toolbar: {7BA52691-1876-45ce-9EE6-54BCB3B04BBC} -
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn
FF - Ext: Vuze Remote Community Toolbar:
{ba14329e-9550-4989-b3f2-9732e92d17cc} -
%profile%\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
FF - Ext: SomotoToolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} -
%profile%\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}
.
============= SERVICES / DRIVERS ===============
.
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys -->
C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R0 SymEFA;Symantec Extended File
Attributes;C:\Windows\system32\drivers\NISx64\1008000.029\SYMEFA64.SYS
--> C:\Windows\system32\drivers\NISx64\1008000.029\SYMEFA64.SYS [?]
R1 BHDrvx64;Symantec Heuristics
Driver;C:\Windows\system32\Drivers\NISx64\1008000.029\BHDrvx64.sys -->
C:\Windows\system32\Drivers\NISx64\1008000.029\BHDrvx64.sys [?]
R1 ccHP;Symantec Hash
Provider;C:\Windows\system32\Drivers\NISx64\1008000.029\ccHPx64.sys
--> C:\Windows\system32\Drivers\NISx64\1008000.029\ccHPx64.sys [?]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20110628.031\IDSviA64.sys
[2011-6-28 488056]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys
[2010-2-17 14920]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys
[2010-2-17 12360]
R1 vwififlt;Virtual WiFi Filter
Driver;C:\Windows\system32\DRIVERS\vwififlt.sys -->
C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 !SASCORE;SAS Core Service;C:\Program
Files\SUPERAntiSpyware\SASCore64.exe [2011-5-4 128384]
R2 Application Updater;Application Updater;C:\Program Files
(x86)\Application Updater\ApplicationUpdater.exe [2011-5-6 393112]
R2 cbVSCService;Cobian Backup 10 Volume Shadow Copy service;C:\Program
Files (x86)\Cobian Backup 10\cbVSCService.exe [2010-12-4 67584]
R2 CobianBackup10;Cobian Backup 10;C:\Program Files (x86)\Cobian
Backup 10\cbService.exe [2010-12-4 1125376]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual
Effect;C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys -->
C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [?]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files
(x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
[2011-6-10 136824]
R3 IntcHdmiAddService;Intel(R) High Definition Audio
HDMI;C:\Windows\system32\drivers\IntcHdmi.sys -->
C:\Windows\system32\drivers\IntcHdmi.sys [?]
R3 SFEP;Sony Firmware Extension
Parser;C:\Windows\system32\DRIVERS\SFEP.sys -->
C:\Windows\system32\DRIVERS\SFEP.sys [?]
R3 SYMNDISV;Symantec Network Filter
Driver;C:\Windows\system32\Drivers\NISx64\1008000.029\SYMNDISV.SYS -->
C:\Windows\system32\Drivers\NISx64\1008000.029\SYMNDISV.SYS [?]
R3 vwifimp;Microsoft Virtual WiFi Miniport
Service;C:\Windows\system32\DRIVERS\vwifimp.sys -->
C:\Windows\system32\DRIVERS\vwifimp.sys [?]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet
Controller;C:\Windows\system32\DRIVERS\yk62x64.sys -->
C:\Windows\system32\DRIVERS\yk62x64.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN
v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
[2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN
v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
[2010-3-18 138576]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for
Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys -->
C:\Windows\system32\DRIVERS\netw5v64.sys [?]
S3 Revoflt;Revoflt;C:\Windows\system32\DRIVERS\revoflt.sys -->
C:\Windows\system32\DRIVERS\revoflt.sys [?]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS -->
C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS -->
C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
--> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?]
S3 USBAAPL64;Apple Mobile USB
Driver;C:\Windows\system32\Drivers\usbaapl64.sys -->
C:\Windows\system32\Drivers\usbaapl64.sys [?]
.
=============== Created Last 30 ================
.
2011-06-29 21:14:58 -------- d-----w- C:\Users\David\AppData\Local\VS Revo Group
2011-06-29 21:14:51 31800 ----a-w- C:\Windows\System32\drivers\revoflt.sys
2011-06-29 21:14:49 -------- d-----w- C:\Program Files\VS Revo Group
2011-06-29 19:24:35 -------- d-----w- C:\Users\David\AppData\Roaming\SUPERAntiSpyware.com
2011-06-29 19:24:35 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com
2011-06-29 19:24:30 -------- d-----w- C:\ProgramData\!SASCORE
2011-06-29 19:24:28 -------- d-----w- C:\Program Files\SUPERAntiSpyware
2011-06-29 12:15:01 10165440 ----a-w- C:\Users\David\AppData\Roaming\Microsoft\Windows\Network
Shortcuts\mseinstall.exe
2011-06-29 07:05:09 -------- d-----w- C:\Users\David\AppData\Local\Thunderbird
2011-06-29 06:59:26 -------- d-----w- C:\Users\David\AppData\Roaming\Aura
YouTube Downloader
2011-06-29 06:16:01 -------- d-----w- C:\Program Files (x86)\File Scavenger 3.2
2011-06-29 05:20:03 165376 ----a-w- C:\Windows\SysWow64\unrar.dll
2011-06-29 05:19:56 839680 ----a-w- C:\Windows\SysWow64\lameACM.acm
2011-06-29 05:19:55 237568 ----a-w- C:\Windows\SysWow64\yv12vfw.dll
2011-06-29 05:19:55 151552 ----a-w- C:\Windows\SysWow64\ac3acm.acm
2011-06-29 05:19:54 80896 ----a-w- C:\Windows\SysWow64\ff_vfw.dll
2011-06-29 05:19:49 -------- d-----w- C:\Program Files (x86)\K-Lite Codec Pack
2011-06-29 05:09:36 810496 ----a-w- C:\Windows\SysWow64\xvidcore.dll
2011-06-29 05:09:36 77824 ----a-w- C:\Windows\SysWow64\xvid.ax
2011-06-29 05:09:36 183808 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
2011-06-29 05:09:35 -------- d-----w- C:\Program Files (x86)\Xvid
2011-06-29 03:19:14 55384 ----a-w- C:\Windows\System32\drivers\SBREDrv.sys
2011-06-28 17:31:25 -------- d-----w- C:\Users\David\AppData\Roaming\Sammsoft
2011-06-28 07:12:11 -------- d-----w- C:\Program Files (x86)\somototoolbar
2011-06-28 07:11:43 -------- d-----w- C:\Users\David\AppData\Roaming\SoMud
2011-06-28 06:44:40 -------- d-----w- C:\Users\David\FrostWire
2011-06-28 06:43:40 -------- d-----w- C:\Users\David\AppData\Local\OpenCandy
2011-06-28 06:43:38 -------- d-----w- C:\Users\David\AppData\Roaming\OpenCandy
2011-06-26 07:38:03 -------- d-----w- C:\Program Files (x86)\TuneUpMedia
2011-06-26 06:41:45 -------- d-----w- C:\Users\David\AppData\Roaming\TuneUpMedia
2011-06-26 06:41:40 -------- d-----w- C:\ProgramData\TuneUpMedia
2011-06-26 06:37:48 -------- d-----w- C:\Users\David\AppData\Roaming\Azureus
2011-06-26 06:36:14 -------- d-----w- C:\Program Files (x86)\Conduit
2011-06-26 06:36:01 -------- d-----w- C:\Program Files (x86)\ConduitEngine
2011-06-26 06:35:57 -------- d-----w- C:\Users\David\AppData\Local\Conduit
2011-06-26 06:35:57 -------- d-----w- C:\Program Files (x86)\Vuze_Remote
2011-06-24 10:06:36 102400 ----a-w- C:\Windows\System32\drivers\dfsc.sys
2011-06-24 10:05:33 1896832 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2011-06-24 10:05:32 499712 ----a-w- C:\Windows\System32\drivers\afd.sys
2011-06-24 10:05:14 287744 ----a-w- C:\Windows\System32\drivers\mrxsmb10.sys
2011-06-24 10:05:14 157696 ----a-w- C:\Windows\System32\drivers\mrxsmb.sys
2011-06-24 10:05:14 126464 ----a-w- C:\Windows\System32\drivers\mrxsmb20.sys
2011-06-24 10:03:38 3133952 ----a-w- C:\Windows\System32\win32k.sys
2011-06-24 10:02:52 197120 ----a-w- C:\Windows\System32\d3d10_1.dll
2011-06-24 10:02:52 161792 ----a-w- C:\Windows\SysWow64\d3d10_1.dll
2011-06-24 10:02:42 461312 ----a-w- C:\Windows\System32\drivers\srv.sys
2011-06-24 10:02:42 399872 ----a-w- C:\Windows\System32\drivers\srv2.sys
2011-06-24 10:02:42 161792 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2011-06-24 10:02:19 861184 ----a-w- C:\Windows\System32\oleaut32.dll
2011-06-24 10:02:19 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2011-06-24 10:02:02 976896 ----a-w- C:\Windows\System32\inetcomm.dll
2011-06-24 10:02:02 740864 ----a-w- C:\Windows\SysWow64\inetcomm.dll
2011-06-12 00:51:32 476904 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\npdeployJava1.dll
2011-06-12 00:51:31 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2011-06-12 00:46:17 -------- d-----w- C:\Program Files\iTunes
2011-06-12 00:46:17 -------- d-----w- C:\Program Files\iPod
2011-06-12 00:42:01 -------- d-----w- C:\Program Files\Bonjour
2011-06-12 00:42:01 -------- d-----w- C:\Program Files (x86)\Bonjour
2011-06-11 18:02:09 11776 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\nprjplug.dll
2011-06-11 18:01:38 -------- d-----w- C:\Program Files (x86)\Common
Files\xing shared
2011-06-11 18:01:21 150712 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\nppl3260.dll
2011-06-11 18:00:29 105472 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\nprpjplug.dll
2011-06-11 01:38:48 404640 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-06-10 18:11:30 -------- d-----w- C:\Program Files (x86)\YouTube
Downloader Toolbar
2011-06-10 18:11:30 -------- d-----w- C:\Program Files (x86)\Application Updater
2011-06-10 15:31:34 367104 ----a-w- C:\Windows\System32\wcncsvc.dll
2011-06-10 15:31:34 276992 ----a-w- C:\Windows\SysWow64\wcncsvc.dll
2011-06-09 23:47:54 476160 ----a-w- C:\Windows\System32\XpsGdiConverter.dll
2011-06-09 23:46:45 367104 ----a-w- C:\Windows\System32\atmfd.dll
2011-06-09 23:46:45 294912 ----a-w- C:\Windows\SysWow64\atmfd.dll
2011-06-09 23:46:44 46080 ----a-w- C:\Windows\System32\atmlib.dll
2011-06-09 23:46:44 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2011-06-09 23:44:58 3138048 ----a-w- C:\Windows\System32\mstscax.dll
2011-06-07 19:35:34 103864 ----a-w- C:\Program Files (x86)\Mozilla
Firefox\plugins\nppdf32.dll
2011-06-07 19:35:34 103864 ----a-w- C:\Program Files (x86)\Internet
Explorer\Plugins\nppdf32.dll
.
==================== Find3M ====================
.
2011-06-29 20:42:11 17920 ----a-w- C:\Windows\System32\rpcnetp.exe
2011-06-29 19:39:28 17920 ----a-w- C:\Windows\SysWow64\rpcnetp.dll
2011-06-29 19:39:27 52224 ----a-w- C:\Windows\SysWow64\rpcnet.dll
2011-06-29 19:38:24 17920 ----a-w- C:\Windows\SysWow64\rpcnetp.exe
2011-06-11 18:00:14 499712 ----a-w- C:\Windows\SysWow64\msvcp71.dll
2011-06-11 18:00:14 348160 ----a-w- C:\Windows\SysWow64\msvcr71.dll
2011-05-29 16:11:20 25912 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-05-25 02:14:10 270720 ------w- C:\Windows\System32\MpSigStub.exe
2011-05-24 11:21:59 404992 ----a-w- C:\Windows\System32\umpnpmgr.dll
2011-05-24 10:34:20 64512 ----a-w- C:\Windows\SysWow64\devobj.dll
2011-05-24 10:34:20 44544 ----a-w- C:\Windows\SysWow64\devrtl.dll
2011-05-24 10:34:00 145920 ----a-w- C:\Windows\SysWow64\cfgmgr32.dll
2011-05-24 10:32:46 252928 ----a-w- C:\Windows\SysWow64\drvinst.exe
2011-05-10 15:06:08 51712 ----a-w- C:\Windows\System32\drivers\usbaapl64.sys
2011-05-10 15:06:08 4517664 ----a-w- C:\Windows\System32\usbaaplrc.dll
2011-05-04 05:30:38 2326016 ----a-w- C:\Windows\System32\tquery.dll
2011-05-04 05:28:07 779264 ----a-w- C:\Windows\System32\mssvp.dll
2011-05-04 05:28:07 2228224 ----a-w- C:\Windows\System32\mssrch.dll
2011-05-04 05:28:06 75264 ----a-w- C:\Windows\System32\msscntrs.dll
2011-05-04 05:28:06 491520 ----a-w- C:\Windows\System32\mssph.dll
2011-05-04 05:28:06 288256 ----a-w- C:\Windows\System32\mssphtb.dll
2011-05-04 05:24:09 593408 ----a-w- C:\Windows\System32\SearchIndexer.exe
2011-05-04 05:24:09 249856 ----a-w- C:\Windows\System32\SearchProtocolHost.exe
2011-05-04 05:24:09 113664 ----a-w- C:\Windows\System32\SearchFilterHost.exe
2011-05-04 04:53:10 1553920 ----a-w- C:\Windows\SysWow64\tquery.dll
2011-05-04 04:52:59 666624 ----a-w- C:\Windows\SysWow64\mssvp.dll
2011-05-04 04:52:59 59392 ----a-w- C:\Windows\SysWow64\msscntrs.dll
2011-05-04 04:52:59 337408 ----a-w- C:\Windows\SysWow64\mssph.dll
2011-05-04 04:52:59 197120 ----a-w- C:\Windows\SysWow64\mssphtb.dll
2011-05-04 04:52:59 1401856 ----a-w- C:\Windows\SysWow64\mssrch.dll
2011-05-04 04:52:12 86528 ----a-w- C:\Windows\SysWow64\SearchFilterHost.exe
2011-05-04 04:52:12 428032 ----a-w- C:\Windows\SysWow64\SearchIndexer.exe
2011-05-04 04:52:12 164352 ----a-w- C:\Windows\SysWow64\SearchProtocolHost.exe
2011-04-23 01:29:25 2303488 ----a-w- C:\Windows\System32\jscript9.dll
2011-04-23 01:19:19 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2011-04-22 23:35:56 1797632 ----a-w- C:\Windows\SysWow64\jscript9.dll
2011-04-22 23:25:54 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2011-04-22 20:18:47 27008 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2011-04-09 06:58:56 142336 ----a-w- C:\Windows\System32\poqexec.exe
2011-04-09 06:45:48 5509504 ----a-w- C:\Windows\System32\ntoskrnl.exe
2011-04-09 06:13:06 3957632 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2011-04-09 06:13:06 3901824 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2011-04-09 05:56:38 123904 ----a-w- C:\Windows\SysWow64\poqexec.exe
2011-04-06 23:26:58 96544 ----a-w- C:\Windows\System32\dnssd.dll
2011-04-06 23:26:58 69408 ----a-w- C:\Windows\System32\jdns_sd.dll
2011-04-06 23:26:58 237856 ----a-w- C:\Windows\System32\dnssdX.dll
2011-04-06 23:26:58 119584 ----a-w- C:\Windows\System32\dns-sd.exe
2011-04-06 23:20:16 91424 ----a-w- C:\Windows\SysWow64\dnssd.dll
2011-04-06 23:20:16 75040 ----a-w- C:\Windows\SysWow64\jdns_sd.dll
2011-04-06 23:20:16 197920 ----a-w- C:\Windows\SysWow64\dnssdX.dll
2011-04-06 23:20:16 107808 ----a-w- C:\Windows\SysWow64\dns-sd.exe
.
============= FINISH: 14:54:25.49 ===============
textbox. Do not include the word Code
.

