Buy Malwarebytes antimalware











This site is hosted at Hostgator.com




Sponsored Adverts

Sponsored Ads

These adverts come direct from Google adsense



Recent Posts

Pages: 1 2 [3] 4 5 6 7 8 ... 10
21
Uploads / Re: Eddie @ Sup.Guy. cont.....
« Last post by eddie5659 on April 11, 2013, 19:39:08 »
That doesn't appear right, I'll reply in the forum at TSG ;)
22
Malware removal and help / Re: ilivid or possibly something worse
« Last post by Derek on April 11, 2013, 07:23:37 »
Please download AdwCleaner to your desktop.
  • Double click the adwcleaner.exe to run the tool.
  • Click Search.
  • When the scan finished, a notepad window will be opened.
  • Please post the contents here in your topic.
  • The logfile will also be saved in C:\AdwCleaner[R1].txt.
23
Malware removal and help / ilivid or possibly something worse
« Last post by arabiangoggles on April 11, 2013, 03:11:59 »
Hello,

My computer is ransacked!  Help!  I downloaded a new version of Firefox from a third party website (on accident) and must have downloaded malware.  I ran a Spybot scan which found ilivid but was unable to remove it.  The computer also has been running at 100% CPU since then.  I then ran malwarebytes and it found nothing.  Then I ran hijackthis and it was able to get rid of all traces of ilivid but the computer is still not functioning right and running at 100% and my wife's autocad will not open. 

I just ran combofix and here is the log.

Thank you very much for you help in advance!

ComboFix 13-04-10.02 - Daniel 04/10/2013  21:35:02.1.2 - x64 NETWORK
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.6143.5361 [GMT -4:00]
Running from: c:\users\Daniel\Downloads\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
I:\autorun.inf
I:\Setup.exe
J:\Autorun.inf
J:\Setup.exe
.
.
(((((((((((((((((((((((((   Files Created from 2013-03-11 to 2013-04-11  )))))))))))))))))))))))))))))))
.
.
2013-04-11 01:51 . 2013-04-11 01:51    --------    d-----w-    c:\users\Default\AppData\Local\temp
2013-04-10 23:47 . 2013-02-21 10:14    15404544    ----a-w-    c:\windows\system32\ieframe.dll
2013-04-10 23:46 . 2013-02-21 10:14    19230208    ----a-w-    c:\windows\system32\mshtml.dll
2013-04-10 22:39 . 2013-04-10 23:23    --------    d-----w-    c:\users\Daniel\AppData\Local\NPE
2013-04-10 22:39 . 2013-04-10 22:39    --------    d-----w-    c:\programdata\Norton
2013-04-10 22:13 . 2013-03-15 06:28    9311288    ----a-w-    c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1B9D8979-B36E-4146-AABE-227285DA0919}\mpengine.dll
2013-04-10 09:33 . 2013-02-15 06:06    3717632    ----a-w-    c:\windows\system32\mstscax.dll
2013-04-10 09:33 . 2013-02-15 04:37    3217408    ----a-w-    c:\windows\SysWow64\mstscax.dll
2013-04-10 09:33 . 2013-02-15 06:02    158720    ----a-w-    c:\windows\system32\aaclient.dll
2013-04-10 09:33 . 2013-02-15 04:34    131584    ----a-w-    c:\windows\SysWow64\aaclient.dll
2013-04-10 09:33 . 2013-02-15 06:08    44032    ----a-w-    c:\windows\system32\tsgqec.dll
2013-04-10 09:33 . 2013-02-15 03:25    36864    ----a-w-    c:\windows\SysWow64\tsgqec.dll
2013-04-10 09:32 . 2013-03-01 03:36    3153408    ----a-w-    c:\windows\system32\win32k.sys
2013-04-10 09:32 . 2013-03-02 06:04    1655656    ----a-w-    c:\windows\system32\drivers\ntfs.sys
2013-04-10 09:28 . 2013-01-24 06:01    223752    ----a-w-    c:\windows\system32\drivers\fvevol.sys
2013-04-10 09:28 . 2013-03-19 06:04    5550424    ----a-w-    c:\windows\system32\ntoskrnl.exe
2013-04-10 09:28 . 2013-03-19 05:04    3913560    ----a-w-    c:\windows\SysWow64\ntoskrnl.exe
2013-04-10 09:28 . 2013-03-19 05:04    3968856    ----a-w-    c:\windows\SysWow64\ntkrnlpa.exe
2013-04-10 09:28 . 2013-03-19 03:06    112640    ----a-w-    c:\windows\system32\smss.exe
2013-04-10 09:28 . 2013-03-19 05:46    43520    ----a-w-    c:\windows\system32\csrsrv.dll
2013-04-10 09:28 . 2013-03-19 04:47    6656    ----a-w-    c:\windows\SysWow64\apisetschema.dll
2013-04-10 00:19 . 2013-04-10 00:19    --------    d-----w-    c:\users\Daniel\AppData\Roaming\Malwarebytes
2013-04-10 00:18 . 2013-04-10 00:18    --------    d-----w-    c:\programdata\Malwarebytes
2013-04-10 00:18 . 2013-04-04 18:50    25928    ----a-w-    c:\windows\system32\drivers\mbam.sys
2013-04-10 00:18 . 2013-04-10 00:19    --------    d-----w-    c:\program files (x86)\Malwarebytes' Anti-Malware
2013-04-10 00:17 . 2013-04-10 00:17    --------    d-----w-    c:\users\Daniel\AppData\Local\Programs
2013-04-09 16:57 . 2013-03-15 06:28    9311288    ----a-w-    c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-04-07 19:25 . 2013-04-07 19:25    --------    d-----w-    c:\programdata\boost_interprocess
2013-04-07 19:08 . 2013-04-07 19:08    --------    d-----w-    c:\programdata\Browser Manager
2013-04-07 17:06 . 2013-04-07 17:06    --------    d-----w-    c:\program files (x86)\Mozilla Maintenance Service
2013-04-07 17:04 . 2013-04-07 17:04    --------    d-----w-    c:\program files (x86)\FGIcon
2013-04-07 17:03 . 2013-04-08 23:49    --------    d-----w-    c:\program files (x86)\Settings Alerter
2013-04-02 21:23 . 2013-04-02 21:23    405360    ----a-w-    c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-29 13:34 . 2010-08-31 16:27    110592    ----a-w-    c:\windows\SysWow64\wdapi1021.dll
2013-03-29 01:49 . 2013-03-29 01:49    95648    ----a-w-    c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-29 01:49 . 2013-03-29 01:49    --------    d-----w-    c:\program files (x86)\Java
2013-03-28 20:27 . 2013-03-28 20:27    --------    d-----w-    c:\users\Daniel\AppData\Local\Macromedia
2013-03-28 16:27 . 2009-09-02 15:48    143360    ----a-w-    c:\windows\SysWow64\wdapi1010.dll
2013-03-28 16:26 . 2013-03-28 16:26    --------    d-----w-    c:\program files\Garmin
2013-03-28 16:26 . 2013-03-28 16:26    --------    d-----w-    c:\windows\SysWow64\Silabs
2013-03-28 12:50 . 2013-03-28 12:50    --------    d-----w-    c:\programdata\Tacx
2013-03-28 12:50 . 2010-08-31 16:23    254976    ----a-w-    c:\windows\system32\drivers\windrvr6.sys
2013-03-28 12:46 . 2013-03-28 12:46    --------    d-----w-    c:\program files (x86)\Tacx
2013-03-28 12:44 . 2009-03-16 18:18    69448    ----a-w-    c:\windows\SysWow64\XAPOFX1_3.dll
2013-03-28 12:44 . 2009-03-16 18:18    517448    ----a-w-    c:\windows\SysWow64\XAudio2_4.dll
2013-03-28 12:44 . 2009-03-16 18:18    235352    ----a-w-    c:\windows\SysWow64\xactengine3_4.dll
2013-03-28 12:44 . 2009-03-16 18:18    22360    ----a-w-    c:\windows\SysWow64\X3DAudio1_6.dll
2013-03-28 12:43 . 2008-05-30 18:19    507400    ----a-w-    c:\windows\SysWow64\XAudio2_1.dll
2013-03-28 12:43 . 2008-05-30 18:17    65032    ----a-w-    c:\windows\SysWow64\XAPOFX1_0.dll
2013-03-28 12:43 . 2008-05-30 18:17    25608    ----a-w-    c:\windows\SysWow64\X3DAudio1_4.dll
2013-03-28 12:43 . 2007-07-20 04:57    267112    ----a-w-    c:\windows\SysWow64\xactengine2_9.dll
2013-03-28 12:43 . 2007-07-20 04:54    18280    ----a-w-    c:\windows\SysWow64\x3daudio1_2.dll
2013-03-28 12:43 . 2007-04-04 22:53    81768    ----a-w-    c:\windows\SysWow64\xinput1_3.dll
2013-03-28 12:43 . 2007-03-12 20:42    3495784    ----a-w-    c:\windows\SysWow64\d3dx9_33.dll
2013-03-28 12:43 . 2006-09-28 20:05    2414360    ----a-w-    c:\windows\SysWow64\d3dx9_31.dll
2013-03-22 07:39 . 2012-11-29 04:50    972264    ------w-    c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9B55C619-DD08-4F00-BFF5-EA4E64FF4E36}\gapaengine.dll
2013-03-20 20:21 . 2013-02-12 04:12    19968    ----a-w-    c:\windows\system32\drivers\usb8023.sys
2013-03-20 12:07 . 2013-03-20 12:07    --------    d-----w-    c:\users\Default\AppData\Local\Google
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-04-11 00:03 . 2011-07-06 18:44    72702784    ----a-w-    c:\windows\system32\MRT.exe
2013-04-02 10:34 . 2010-11-21 03:27    282744    ------w-    c:\windows\system32\MpSigStub.exe
2013-03-29 01:49 . 2012-06-29 02:45    861088    ----a-w-    c:\windows\SysWow64\npDeployJava1.dll
2013-03-29 01:49 . 2011-07-07 04:35    782240    ----a-w-    c:\windows\SysWow64\deployJava1.dll
2013-02-12 05:45 . 2013-03-13 06:11    135168    ----a-w-    c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45 . 2013-03-13 06:11    308736    ----a-w-    c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45 . 2013-03-13 06:11    350208    ----a-w-    c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 05:45 . 2013-03-13 06:11    111104    ----a-w-    c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 04:48 . 2013-03-13 06:11    474112    ----a-w-    c:\windows\apppatch\AcSpecfc.dll
2013-02-12 04:48 . 2013-03-13 06:11    2176512    ----a-w-    c:\windows\apppatch\AcGenral.dll
2013-01-20 20:59 . 2013-01-20 20:59    230320    ----a-w-    c:\windows\system32\drivers\MpFilter.sys
2013-01-20 20:59 . 2010-10-25 02:25    130008    ----a-w-    c:\windows\system32\drivers\NisDrvWFP.sys
2013-01-13 21:17 . 2013-02-27 08:00    9728    ---ha-w-    c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-13 21:17 . 2013-02-27 08:00    2560    ---ha-w-    c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-13 21:16 . 2013-02-27 08:00    10752    ---ha-w-    c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-13 21:12 . 2013-02-27 08:00    3584    ---ha-w-    c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-13 21:11 . 2013-02-27 08:00    4096    ---ha-w-    c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-13 21:11 . 2013-02-27 08:00    5632    ---ha-w-    c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-13 21:11 . 2013-02-27 08:00    5632    ---ha-w-    c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-13 21:11 . 2013-02-27 08:00    3072    ---ha-w-    c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-13 21:11 . 2013-02-27 08:00    3072    ---ha-w-    c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-13 20:35 . 2013-02-27 08:00    9728    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-13 20:35 . 2013-02-27 08:00    2560    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-13 20:35 . 2013-02-27 08:00    10752    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-13 20:32 . 2013-02-27 08:00    3584    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-13 20:31 . 2013-02-27 08:00    4096    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-13 20:31 . 2013-02-27 08:00    5632    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-13 20:31 . 2013-02-27 08:00    5632    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-13 20:31 . 2013-02-27 08:00    3072    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-13 20:31 . 2013-02-27 08:00    3072    ---ha-w-    c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-13 20:31 . 2013-02-27 08:00    1247744    ----a-w-    c:\windows\SysWow64\DWrite.dll
2013-01-13 20:22 . 2013-02-27 08:00    1988096    ----a-w-    c:\windows\SysWow64\d3d10warp.dll
2013-01-13 20:20 . 2013-02-27 08:00    293376    ----a-w-    c:\windows\SysWow64\dxgi.dll
2013-01-13 20:09 . 2013-02-27 08:00    249856    ----a-w-    c:\windows\SysWow64\d3d10_1core.dll
2013-01-13 20:08 . 2013-02-27 08:00    220160    ----a-w-    c:\windows\SysWow64\d3d10core.dll
2013-01-13 20:08 . 2013-02-27 08:00    1504768    ----a-w-    c:\windows\SysWow64\d3d11.dll
2013-01-13 19:59 . 2013-02-27 08:00    1643520    ----a-w-    c:\windows\system32\DWrite.dll
2013-01-13 19:58 . 2013-02-27 08:00    1175552    ----a-w-    c:\windows\system32\FntCache.dll
2013-01-13 19:54 . 2013-02-27 08:00    604160    ----a-w-    c:\windows\SysWow64\d3d10level9.dll
2013-01-13 19:53 . 2013-02-27 08:00    207872    ----a-w-    c:\windows\SysWow64\WindowsCodecsExt.dll
2013-01-13 19:53 . 2013-02-27 08:01    187392    ----a-w-    c:\windows\SysWow64\UIAnimation.dll
2013-01-13 19:51 . 2013-02-27 08:00    2565120    ----a-w-    c:\windows\system32\d3d10warp.dll
2013-01-13 19:49 . 2013-02-27 08:00    363008    ----a-w-    c:\windows\system32\dxgi.dll
2013-01-13 19:48 . 2013-02-27 08:00    161792    ----a-w-    c:\windows\SysWow64\d3d10_1.dll
2013-01-13 19:46 . 2013-02-27 08:00    1080832    ----a-w-    c:\windows\SysWow64\d3d10.dll
2013-01-13 19:43 . 2013-02-27 08:00    1230336    ----a-w-    c:\windows\SysWow64\WindowsCodecs.dll
2013-01-13 19:38 . 2013-02-27 08:00    333312    ----a-w-    c:\windows\system32\d3d10_1core.dll
2013-01-13 19:38 . 2013-02-27 08:00    1887232    ----a-w-    c:\windows\system32\d3d11.dll
2013-01-13 19:38 . 2013-02-27 08:00    296960    ----a-w-    c:\windows\system32\d3d10core.dll
2013-01-13 19:37 . 2013-02-27 08:00    3419136    ----a-w-    c:\windows\SysWow64\d2d1.dll
2013-01-13 19:25 . 2013-02-27 08:00    245248    ----a-w-    c:\windows\system32\WindowsCodecsExt.dll
2013-01-13 19:24 . 2013-02-27 08:00    648192    ----a-w-    c:\windows\system32\d3d10level9.dll
2013-01-13 19:24 . 2013-02-27 08:01    221184    ----a-w-    c:\windows\system32\UIAnimation.dll
2013-01-13 19:20 . 2013-02-27 08:00    194560    ----a-w-    c:\windows\system32\d3d10_1.dll
2013-01-13 19:20 . 2013-02-27 08:00    1238528    ----a-w-    c:\windows\system32\d3d10.dll
2013-01-13 19:15 . 2013-02-27 08:00    1424384    ----a-w-    c:\windows\system32\WindowsCodecs.dll
2013-01-13 19:10 . 2013-02-27 08:00    3928064    ----a-w-    c:\windows\system32\d2d1.dll
2013-01-13 19:02 . 2013-02-27 08:00    417792    ----a-w-    c:\windows\SysWow64\WMPhoto.dll
2013-01-13 18:34 . 2013-02-27 08:00    364544    ----a-w-    c:\windows\SysWow64\XpsGdiConverter.dll
2013-01-13 18:32 . 2013-02-27 08:00    465920    ----a-w-    c:\windows\system32\WMPhoto.dll
2013-01-13 18:09 . 2013-02-27 08:00    522752    ----a-w-    c:\windows\system32\XpsGdiConverter.dll
2013-01-13 17:26 . 2013-02-27 08:00    1158144    ----a-w-    c:\windows\SysWow64\XpsPrint.dll
2013-01-13 17:05 . 2013-02-27 08:00    1682432    ----a-w-    c:\windows\system32\XpsPrint.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32    129272    ----a-w-    c:\users\Daniel\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32    129272    ----a-w-    c:\users\Daniel\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32    129272    ----a-w-    c:\users\Daniel\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [2011-08-11 91864]
R2 clearwireDeviceDiagnosticsService;Clearwire Device Diagnostics Service;c:\program files (x86)\Clearwire\Connection Manager\clearwireDeviceDiagnosticsService.exe [2011-03-29 407552]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 CXIR;Conexant Polaris IR Transceiver;c:\windows\system32\drivers\cxcir64.sys [2010-07-13 44032]
R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R2 SMSI Device Launch Service;Clearwire Device Launch Service;c:\program files (x86)\Clearwire\Connection Manager\DeviceLaunchSvc.exe [2011-11-22 108376]
R3 bcm;WiMAX Network Adapter;c:\windows\system32\DRIVERS\drxvi314_64.sys [2011-10-17 382848]
R3 bcmbusctr;WiMAX Bus Driver;c:\windows\system32\DRIVERS\BcmBusCtr_64.sys [2011-10-17 60416]
R3 CACLEARWIRE;Clearwire Con App Svc;c:\program files (x86)\Clearwire\Connection Manager\ConAppsSvc.exe [2011-11-22 124760]
R3 CLEARWIRERcAppSvc;Clearwire RcAppSvc;c:\program files (x86)\Clearwire\Connection Manager\RcAppSvc.exe [2011-11-22 120664]
R3 CXPOLARIS;Conexant Polaris Video Capture;c:\windows\system32\drivers\cxpolar64.sys [2010-07-22 428288]
R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-07-29 52584]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys [2010-07-29 29720]
R3 jnprna;Juniper Network Agent Miniport;c:\windows\system32\DRIVERS\jnprna6.sys

R3 JnprVaMgr;Juniper Networks Virtual Adapter Manager Service;c:\windows\system32\DRIVERS\jnprvamgr.sys [2011-04-19 45352]
R3 libusb0;LibUsb-Win32 - Kernel Driver 07/07/2009, 0.1.12.2;c:\windows\system32\DRIVERS\libusb0.sys [2009-07-07 32256]
R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2011-09-09 11776]
R3 massfilter_hs;HS HandSet Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter_hs.sys [2011-09-20 18456]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 25928]
R3 MRV6X64P;Vista 64-bits Native WiFi Driver;c:\windows\system32\DRIVERS\MRVW13C.sys [2007-10-17 245248]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
R3 PCTINDIS5X64;PCTINDIS5X64 NDIS Protocol Driver;c:\windows\system32\PCTINDIS5X64.SYS [2010-08-05 43032]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736]
R3 UsbGps;LGE CDMA USB GPS NMEA Port;c:\windows\system32\DRIVERS\lgx64gps.sys [2008-11-11 27136]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-07-07 1255736]
R3 zghsdiag;ZTE General Handset Diagnostic Port;c:\windows\system32\DRIVERS\zghsdiag.sys [2011-09-20 129304]
R3 zghsmdm;ZTE General Handset USB Modem Proprietary;c:\windows\system32\DRIVERS\zghsmdm.sys [2011-09-20 129304]
R4 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R4 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-09-15 1431888]
S0 Si3531;SiI-3531 SATA Controller;c:\windows\system32\DRIVERS\Si3531.sys [2009-02-09 333864]
S3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187B.sys [2009-06-10 416768]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-04-10 08:46    1642448    ----a-w-    c:\program files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-04-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-14 03:35]
.
2013-04-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-14 03:35]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32    162552    ----a-w-    c:\users\Daniel\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32    162552    ----a-w-    c:\users\Daniel\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32    162552    ----a-w-    c:\users\Daniel\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32    162552    ----a-w-    c:\users\Daniel\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-03-07 20:31    776144    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-03-07 20:31    776144    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-03-07 20:31    776144    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-03-07 20:31    776144    ----a-w-    c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - LocalService
FontCache
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
TCP: DhcpNameServer = 192.168.0.1 192.168.0.2
FF - ProfilePath - c:\users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\xel5sobs.default\
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-10 - (no file)
Toolbar-10 - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-04-10  22:06:47
ComboFix-quarantined-files.txt  2013-04-11 02:06
.
Pre-Run: 1,546,811,555,840 bytes free
Post-Run: 1,546,641,645,568 bytes free
.
- - End Of File - - FEE05DC98954E63DCBDFE7F48636249B
   
Click here to Reply or Forward
14% full
Using 1.5 GB of your 10.1 GB
©2013 Google - Terms & Privacy
Last account activity: 0 minutes ago
Currently being used in 1 other location  Details
   
   
Free Spell Check Toolbar
24
Malware removal and help / MOVED: Eddie @ Sup.Guy. cont.....
« Last post by Derek on April 09, 2013, 22:59:24 »
25
Uploads / Eddie @ Sup.Guy. cont.....
« Last post by Joelo on April 09, 2013, 22:05:19 »
I think I got this right  ::) but not sure. Lmk >>

Requested file archive from 4/9/2013 4:54:14 PM
Created by Suspicious File Packer 0.2
Copyright © 2004-2005 Safer Networking Limited. All rights reserved.

Requests:
C:\Users\My Laptop\Downloads\clientlauncher.exe

Operations:
+ added: C:\Users\My Laptop\Downloads\clientlauncher.exe


28
Uploads / Re: permission to post file here (cont. clean-up process)
« Last post by eddie5659 on March 31, 2013, 18:47:52 »
Thanks, and actually didn't realise it was the large log, so will be useful :)
29
Glad to help.
You know where to find me if you get any more problems.
30
Everything looks good, thanks for the prevention tips and the fix!
Pages: 1 2 [3] 4 5 6 7 8 ... 10

Donations

You have come to The Spykiller for help because your Antivirus or Antispyware hasn't been able to fix your problem.

Modern Malware has become so involved and difficult to fix that it takes a very long time and a lot of hard work to read all the logs posted here and research and prepare the fixes for you. In many cases each part of the fix takes about 30 minutes to prepare, so a large part of my time is spent helping you

Would you do all this for nothing?

The reason I run this site is to raise funds for Hedgehog Rescue

Please donate if I have helped you or you have found this site useful.

You can donate safely and securely by using the paypal service, just click on one of the buttons below.

To donate in UK £

To donate in US$

To donate in Euro €

Any amount no matter how small is gratefully accepted and needed to ensure we keep the Rescue Centre running

To donate via paypal when the button doesn't appear or the link doesn't work: just go to www.paypal.com or your country's paypal log in page and chose send money and use help@thehedgehog.co.uk as recipient email address and select other service as the option. then follow prompts


Useful Advice and Programs

Stop killing hedgehogs with strimmers
Welcome, Guest. Please login or register.
Did you miss your activation email?
June 18, 2013, 05:33:37

Login with username, password and session length

secunia Software inspector


RoboForm: Learn more...

You have come to The Spykiller for help because your Antivirus or Antispyware hasn't been able to fix your problem.

Modern Malware is so involved and difficult to fix that it takes a very long time and a lot of hard work to read all the logs posted here and research and prepare the fixes for you.
In many cases each part of the fix takes about 30 minutes to prepare, so a large part of my time is spent helping you

Would you do all this for nothing?

I run this site to help raise funds for Hedgehog Rescue

Please donate if I have helped you or you have found this site useful.

You can donate safely and securely by using the PayPal service, just click on one of the buttons below.

To donate in UK £

To donate in US$

To donate in Euro €

Any amount no matter how small is gratefully accepted and needed to ensure we keep the Rescue Centre running