Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Super Slow Computer (Almost Non-Responsive)


  • Please log in to reply

#1
Joshlin

Joshlin

    New Member

  • Member
  • Pip
  • 2 posts
My computer re-starts really slowly and it seems as though malware or spyware might be the case. I've run combofix and it seems to work fine but something is missing because when it re-starts the problem happens all over again. I've run Malwarebytes but it didn't find anything nor did my AVG upon doing a line scan. Any help would be greatly appreciated.



ComboFix 09-07-14.08 - Joshlin 07/17/2009 13:35.4.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.585 [GMT -7:00]
Running from: c:\documents and settings\Joshlin\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: StopSign Antivirus FREE TRIAL diagnostic version *On-access scanning enabled* (Outdated) {3E1D4556-3240-40c8-BBED-64A8690A3FB4}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Joshlin\Application Data\bcrypt.html
c:\recycler\S-1-5-21-0431149003-6720943573-621924096-1817
c:\recycler\S-1-5-21-1774254304-0893637155-141166456-7100

.
((((((((((((((((((((((((( Files Created from 2009-06-17 to 2009-07-17 )))))))))))))))))))))))))))))))
.

2009-07-17 17:48 . 2009-07-02 21:44 2301208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avguiadv.dll
2009-07-17 17:48 . 2009-07-02 21:44 1107224 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgssie.dll
2009-07-17 17:48 . 2009-07-02 21:44 353048 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgxch32.dll
2009-07-15 18:13 . 2009-07-15 19:57 -------- d-----w- C:\32788R22FWJFW.0.tmp
2009-07-15 06:17 . 2009-07-15 06:17 -------- d-----w- c:\documents and settings\Joshlin\Application Data\Malwarebytes
2009-07-15 06:17 . 2009-07-13 20:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-15 06:17 . 2009-07-15 06:17 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-15 06:17 . 2009-07-15 06:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-07-15 06:17 . 2009-07-13 20:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-15 03:52 . 2009-07-15 04:09 -------- d-s---w- C:\vfh5349fj9b5j9-bvj9b3j9-536
2009-07-15 01:50 . 2009-07-15 01:50 -------- d-sh--w- C:\found.001
2009-07-10 04:40 . 2009-07-10 04:41 3629946 ----a-w- c:\program files\Acceleration Software.zip
2009-07-09 15:45 . 2009-07-02 21:44 327688 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgldx86.sys
2009-07-09 15:45 . 2009-07-09 15:44 3403032 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgui.exe
2009-07-09 15:45 . 2009-07-02 21:44 3298072 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\setup.exe
2009-07-09 15:45 . 2009-07-02 21:44 1204504 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgabout.dll
2009-07-09 15:45 . 2009-07-02 21:44 337176 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avglogx.dll
2009-07-09 15:45 . 2009-07-02 21:44 2167576 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgresf.dll
2009-07-09 15:45 . 2009-07-02 21:44 829208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgcfgx.dll
2009-07-09 15:44 . 2009-07-02 21:44 1085208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgupd.exe
2009-07-09 15:44 . 2009-07-02 21:44 1454360 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgupd.dll
2009-07-08 22:04 . 2009-07-08 22:04 -------- d-----w- c:\documents and settings\Joshlin\Application Data\eAcceleration
2009-07-08 22:03 . 2009-07-08 22:03 -------- d-----w- c:\program files\TheProblem
2009-07-08 22:02 . 2009-07-08 22:04 -------- d-----w- c:\documents and settings\All Users\Application Data\eAcceleration
2009-07-08 22:02 . 2009-07-08 22:03 -------- d-----w- c:\program files\Common Files\eAcceleration
2009-07-08 15:20 . 2009-07-08 15:20 -------- d-sh--w- C:\found.000
2009-07-04 22:47 . 2009-07-04 22:47 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2009-07-04 10:17 . 2009-07-04 10:17 -------- d-----w- c:\program files\MSXML 4.0
2009-07-03 17:55 . 2009-07-03 17:55 -------- d-----w- c:\documents and settings\Joshlin\Local Settings\Application Data\My Games
2009-07-03 16:45 . 2009-07-03 16:45 2052376 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgcorex.dll
2009-07-03 14:03 . 2009-07-17 14:30 -------- d--h--w- C:\$AVG8.VAULT$
2009-07-03 10:54 . 2009-07-03 10:54 -------- d-----w- c:\documents and settings\Joshlin\Application Data\DivX
2009-07-03 10:51 . 2009-07-03 10:51 -------- d-----w- c:\documents and settings\Joshlin\Local Settings\Application Data\GameSpy
2009-07-03 10:40 . 2009-07-03 10:40 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2009-07-03 10:34 . 2009-07-03 10:53 -------- d-----w- c:\windows\system32\CatRoot_bak
2009-07-03 10:15 . 2009-07-03 10:15 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
2009-07-03 10:15 . 2009-05-13 21:56 9336 ------w- c:\windows\system32\drivers\cdr4_xp.sys
2009-07-03 10:15 . 2009-05-13 21:56 9464 ------w- c:\windows\system32\drivers\cdralw2k.sys
2009-07-03 10:15 . 2009-05-13 21:56 129784 ------w- c:\windows\system32\pxafs.dll
2009-07-03 10:14 . 2009-07-03 10:15 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-07-03 10:14 . 2009-07-03 10:15 -------- d-----w- c:\program files\DivX
2009-07-03 10:12 . 2004-08-10 12:00 25600 ----a-w- c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2009-07-03 07:08 . 2009-07-03 07:08 -------- d-----w- c:\program files\GameSpy
2009-07-03 07:02 . 2009-07-03 07:02 -------- d-----w- c:\documents and settings\Joshlin\Application Data\InstallShield
2009-07-03 06:59 . 2009-07-03 06:59 -------- d-----w- c:\documents and settings\Joshlin\Application Data\Xfire
2009-07-03 06:58 . 2009-07-03 06:59 -------- d-s---w- c:\program files\Xfire
2009-07-03 06:43 . 2009-07-03 06:43 -------- d-----w- c:\program files\Firaxis Games
2009-07-03 06:42 . 2005-05-26 22:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2009-07-03 06:37 . 2009-07-03 06:37 -------- d-----w- c:\program files\PowerISO
2009-07-03 02:37 . 2008-10-16 21:06 268648 ----a-w- c:\windows\system32\mucltui.dll
2009-07-03 02:37 . 2008-10-16 21:06 208744 ----a-w- c:\windows\system32\muweb.dll
2009-07-03 01:58 . 2009-07-03 01:58 -------- d-----w- c:\program files\Windows Media Connect 2
2009-07-03 01:56 . 2009-07-03 01:57 -------- d-----w- c:\windows\system32\drivers\UMDF
2009-07-03 01:56 . 2009-07-03 01:56 -------- d-----w- c:\windows\system32\LogFiles
2009-07-03 01:20 . 2009-07-03 01:41 -------- d-----w- c:\program files\Trillian
2009-07-03 00:36 . 2009-07-03 00:36 -------- d-----w- c:\documents and settings\Joshlin\Application Data\Apple Computer
2009-07-02 23:08 . 2009-07-02 23:08 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-07-02 22:51 . 2009-07-02 22:51 -------- d-----w- c:\program files\uTorrent
2009-07-02 22:51 . 2009-07-17 14:50 -------- d-----w- c:\documents and settings\Joshlin\Application Data\uTorrent
2009-07-02 22:47 . 2009-07-02 22:47 -------- d-----w- c:\program files\Messenger Plus! Live
2009-07-02 21:54 . 2001-08-17 21:02 9600 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2009-07-02 21:54 . 2001-08-17 21:02 9600 ----a-w- c:\windows\system32\drivers\hidusb.sys
2009-07-02 21:54 . 2004-08-04 06:08 31616 -c--a-w- c:\windows\system32\dllcache\usbccgp.sys
2009-07-02 21:54 . 2004-08-04 06:08 31616 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2009-07-02 21:53 . 2009-07-03 02:03 -------- d-----w- c:\documents and settings\Joshlin\Tracing
2009-07-02 21:51 . 2009-07-02 21:51 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-07-02 21:51 . 2009-07-03 02:08 -------- d-----w- c:\program files\Windows Live
2009-07-02 21:47 . 2009-07-02 21:47 -------- d-----w- c:\program files\Common Files\Windows Live
2009-07-02 21:45 . 2009-07-02 21:45 -------- d-----w- c:\documents and settings\Joshlin\Local Settings\Application Data\Mozilla
2009-07-02 21:44 . 2009-07-02 21:44 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-07-02 21:44 . 2009-07-02 21:44 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-07-02 21:44 . 2009-07-09 15:44 335752 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-07-02 21:44 . 2009-07-02 21:44 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-07-02 21:44 . 2009-07-17 17:49 -------- d-----w- c:\windows\system32\drivers\Avg
2009-07-02 21:44 . 2009-07-02 21:44 -------- d-----w- c:\program files\AVG
2009-07-02 21:44 . 2009-07-17 17:43 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
2009-07-02 21:34 . 2009-07-02 21:34 -------- d-----w- c:\documents and settings\LocalService\Application Data\McAfee.com Personal Firewall
2009-07-02 21:27 . 2009-07-02 21:27 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\McAfee.com Personal Firewall
2009-07-02 21:27 . 2009-07-02 21:27 -------- d-----w- c:\documents and settings\Joshlin\Application Data\McAfee.com Personal Firewall
2009-07-02 21:25 . 2009-07-02 21:25 21275 ----a-w- c:\windows\system32\drivers\AegisP.sys
2009-07-02 21:25 . 2009-07-02 21:25 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\Intel
2009-07-02 21:25 . 2009-07-02 21:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Intel
2009-07-02 21:25 . 2009-07-02 21:25 -------- d-----w- c:\documents and settings\Administrator\Application Data\Intel
2009-07-02 21:25 . 2009-07-03 00:36 -------- dc----w- c:\windows\system32\DRVSTORE
2009-07-02 21:25 . 2006-02-16 09:18 -------- d-----w- c:\documents and settings\Default User\WINDOWS
2009-07-02 21:17 . 2009-07-02 21:17 -------- d-----w- c:\program files\AVerMedia
2009-07-02 21:16 . 2009-07-02 21:16 -------- d-----w- c:\program files\Common Files\InterVideo
2009-07-02 21:16 . 2005-11-28 05:51 135168 ----a-w- c:\windows\system32\igfxres.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-05 10:52 . 2006-02-16 10:39 -------- d-----w- c:\program files\Microsoft Works
2009-07-04 12:29 . 2006-02-16 09:55 -------- d-----w- c:\program files\Pure Networks
2009-07-04 11:33 . 2006-02-16 16:59 35920 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-04 11:31 . 2006-02-18 15:56 -------- d-----w- c:\program files\Google
2009-07-04 00:46 . 2006-02-15 15:37 87931 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-07-03 14:06 . 2006-02-17 09:57 -------- d-----w- c:\program files\DIGStream
2009-07-03 11:19 . 2006-02-16 09:55 -------- d-----w- c:\documents and settings\All Users\Application Data\AOL
2009-07-03 11:19 . 2006-02-16 09:55 -------- d-----w- c:\program files\Common Files\AOL
2009-07-03 10:50 . 2009-07-02 21:26 130 ----a-w- c:\documents and settings\Joshlin\Local Settings\Application Data\fusioncache.dat
2009-07-03 07:08 . 2006-02-15 16:20 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-07-03 00:36 . 2009-07-03 00:36 -------- d-----w- c:\program files\iTunes
2009-07-03 00:36 . 2009-07-03 00:36 -------- d-----w- c:\documents and settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-07-03 00:36 . 2009-07-03 00:36 -------- d-----w- c:\program files\iPod
2009-07-03 00:36 . 2009-07-03 00:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-07-03 00:35 . 2009-07-03 00:35 -------- d-----w- c:\program files\Bonjour
2009-07-03 00:35 . 2009-07-03 00:35 -------- d-----w- c:\program files\QuickTime
2009-07-03 00:34 . 2009-07-03 00:34 -------- d-----w- c:\program files\Apple Software Update
2009-07-03 00:34 . 2009-07-03 00:34 -------- d-----w- c:\program files\Common Files\Apple
2009-07-03 00:34 . 2009-07-03 00:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2009-07-02 21:27 . 2006-05-13 23:44 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee.com Personal Firewall
2009-07-02 21:25 . 2006-02-15 16:18 -------- d-----w- c:\program files\Intel
2009-07-02 21:25 . 2009-07-02 21:26 -------- d-----w- c:\documents and settings\Joshlin\Application Data\Intel
2009-07-02 21:16 . 2006-02-16 09:25 -------- d-----w- c:\program files\InterVideo
2009-06-05 20:57 . 2009-06-05 20:57 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe
2009-05-13 21:56 . 2005-10-26 20:12 43528 ------w- c:\windows\system32\drivers\pxhelp20.sys
2009-05-13 21:56 . 2006-02-16 09:50 120056 ------w- c:\windows\system32\pxcpyi64.exe
2009-05-13 21:56 . 2006-02-16 09:50 118520 ------w- c:\windows\system32\pxinsi64.exe
2009-05-13 21:54 . 2009-05-13 21:54 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-05-13 21:54 . 2009-05-13 21:54 823296 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-05-13 21:54 . 2009-05-13 21:54 823296 ----a-w- c:\windows\system32\divx_xx07.dll
2009-05-13 21:54 . 2009-05-13 21:54 815104 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-05-13 21:54 . 2009-05-13 21:54 811008 ----a-w- c:\windows\system32\divx_xx16.dll
2009-05-13 21:54 . 2009-05-13 21:54 802816 ----a-w- c:\windows\system32\divx_xx11.dll
2009-05-13 21:54 . 2009-05-13 21:54 685056 ----a-w- c:\windows\system32\DivX.dll
2009-06-03 03:00 . 2009-07-02 21:45 134648 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
2009-05-13 21:55 . 2009-05-13 21:55 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-13 21:55 . 2009-05-13 21:55 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( [email protected]_04.05.36 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-05 17:21 . 2009-07-07 15:10 24539592 c:\windows\system32\MRT.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2004-12-30 65536]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-10 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 761945]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-11-28 98304]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-11-28 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-11-28 118784]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"THotkey"="c:\program files\Toshiba\Toshiba Applet\thotkey.exe" [2006-01-05 352256]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2005-12-16 82009]
"LtMoh"="c:\program files\ltmoh\Ltmoh.exe" [2004-08-18 184320]
"Tvs"="c:\program files\Toshiba\Tvs\TvsTray.exe" [2005-11-30 73728]
"SmoothView"="c:\program files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe" [2005-04-27 122880]
"dla"="c:\windows\system32\dla\DLACTRLW.exe" [2005-10-06 122940]
"Pinger"="c:\toshiba\ivp\ism\pinger.exe" [2005-03-18 151552]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-05 667718]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-11-28 602182]
"MSKDetectorExe"="c:\program files\McAfee\SpamKiller\MSKDetct.exe" [2005-08-12 1121792]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-07-02 1948440]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-27 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-06-05 292136]
"TFncKy"="TFncKy.exe" [BU]
"TDispVol"="TDispVol.exe" - c:\windows\system32\TDispVol.exe [2005-03-11 73728]
"AGRSMMSG"="AGRSMMSG.exe" - c:\windows\agrsmmsg.exe [2005-10-15 88203]
"NDSTray.exe"="NDSTray.exe" [BU]
"TPSMain"="TPSMain.exe" - c:\windows\system32\TPSMain.exe [2005-06-01 282624]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-07-02 21:44 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^RAMASST.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\RAMASST.lnk
backup=c:\windows\pss\RAMASST.lnkCommon Startup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\TOSHIBA\\ivp\\NetInt\\Netint.exe"=
"c:\\TOSHIBA\\Ivp\\ISM\\pinger.exe"= c:\\TOSHIBA\\IVP\\ISM\\pinger.exe
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Common Files\\AolCoach\\en_en\\player\\AOLNySEV.exe"=
"c:\\Program Files\\Yahoo!\\Yahoo! Music Engine\\YahooMusicEngine.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Documents and Settings\\Joshlin\\Desktop\\utorrent.exe"=
"c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Civilization4.exe"=
"c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Warlords\\Civ4Warlords.exe"=
"c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Warlords\\Civ4Warlords_PitBoss.exe"=
"c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword.exe"=
"c:\\Program Files\\Firaxis Games\\Sid Meier's Civilization 4\\Beyond the Sword\\Civ4BeyondSword_PitBoss.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [7/2/2009 2:44 PM 335752]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [7/2/2009 2:44 PM 108552]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [7/2/2009 2:44 PM 298776]
S2 eac_notifysvc;eAcceleration Notification Service;"c:\progra~1\EACCEL~1\FRAMEW~1\eac_svc.exe" --> c:\progra~1\EACCEL~1\FRAMEW~1\eac_svc.exe [?]
S2 eac_productsvc;eAcceleration Product Manager Service;"c:\progra~1\EACCEL~1\FRAMEW~1\eac_productsvc.exe" --> c:\progra~1\EACCEL~1\FRAMEW~1\eac_productsvc.exe [?]
S2 gupdate1c9fbc7338d9430;Google Update Service (gupdate1c9fbc7338d9430);c:\program files\Google\Update\GoogleUpdate.exe [7/3/2009 3:15 AM 133104]
S2 sstsmonsvc;StopSign Antivirus Security Center Provider;"c:\progra~1\EACCEL~1\FRAMEW~1\eac_svc.exe" --> c:\progra~1\EACCEL~1\FRAMEW~1\eac_svc.exe [?]
S3 SVRPEDRV;SVRPEDRV;\??\c:\sysprep\PEDrv.sys --> c:\sysprep\PEDrv.sys [?]
.
Contents of the 'Scheduled Tasks' folder

2009-07-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 19:34]

2009-07-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-03 10:15]

2009-07-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-03 10:15]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.toshibadirect.com/dpdstart
uInternet Connection Wizard,ShellNext = hxxp://www.toshibadirect.com/dpdstart
uInternet Settings,ProxyOverride = local
uInternet Settings,ProxyServer = http=127.0.0.1:5656
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Joshlin\Application Data\Mozilla\Firefox\Profiles\wf1nzhjc.default\
FF - plugin: c:\program files\Java\jre1.5.0_04\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0_04\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0_04\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0_04\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0_04\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0_04\bin\NPJPI150_04.dll
FF - plugin: c:\program files\Java\jre1.5.0_04\bin\NPOJI610.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-17 13:41
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2009-07-17 13:43
ComboFix-quarantined-files.txt 2009-07-17 20:43
ComboFix2.txt 2009-07-15 21:13
ComboFix3.txt 2009-07-15 04:08

Pre-Run: 46,111,244,288 bytes free
Post-Run: 46,123,212,800 bytes free

256 --- E O F --- 2009-07-16 10:02
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP