[hero12]

hello my problem is im star donwloading softwer and then came a pop up in google chrome i start searching to elimanting the malware but when its done only 1 that i cant uninstall  i need help 

 

this is the log  scan with MBAM:

  

 

Malwarebytes Anti-Malware

www.malwarebytes.org

 

Scan Date: 4/18/2014

Scan Time: 12:44:31 AM

Logfile: log.txt

Administrator: Yes

 

Version: 2.00.1.1004

Malware Database: v2014.04.17.05

Rootkit Database: v2014.03.27.01

License: Trial

Malware Protection: Enabled

Malicious Website Protection: Enabled

Chameleon: Disabled

 

OS: Windows 8

CPU: x64

File System: NTFS

User: Hafizh

 

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 268999

Time Elapsed: 10 min, 36 sec

 

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Shuriken: Enabled

PUP: Enabled

PUM: Enabled

 

Processes: 0

(No malicious items detected)

 

Modules: 0

(No malicious items detected)

 

Registry Keys: 0

(No malicious items detected)

 

Registry Values: 0

(No malicious items detected)

 

Registry Data: 0

(No malicious items detected)

 

Folders: 0

(No malicious items detected)

 

Files: 0

(No malicious items detected)

 

Physical Sectors: 0

(No malicious items detected)

 

 

(end)

 

DDS (Ver_2012-11-20.01) - NTFS_AMD64 

Internet Explorer: 10.0.9200.16537  BrowserJavaVersion: 10.51.2

Run by Hafizh at 0:52:41 on 2014-04-18

Microsoft Windows 8 Single Language  6.2.9200.0.1252.1.1033.18.6022.3394 [GMT 7:00]

.

AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\system32\dwm.exe

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Program Files\HitmanPro\hmpsched.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Windows\system32\dashost.exe

C:\Program Files\Intel\iCLS Client\HeciServer.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

C:\Windows\SysWOW64\PnkBstrA.exe

c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe

C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

C:\Program Files\ASUS\P4G\BatteryLife.exe

C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe

C:\Windows\system32\taskhostex.exe

C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe

C:\Program Files (x86)\UnHackMe\hackmon.exe

C:\Windows\Explorer.EXE

C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

C:\Program Files (x86)\UnHackMe\gwebupdate.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

C:\Program Files (x86)\Bluetooth Suite\BtTray.exe

C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe

C:\Program Files (x86)\Common Files\ACD Systems\EN\DevDetect.exe

C:\Program Files (x86)\Razer\Razer Game Booster\main.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Program Files\Smartfren Connex AC782 UI\App.exe

C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe

C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe

C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe

C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe

C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

C:\Windows\SysWOW64\ACEngSvr.exe

C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

C:\Program Files (x86)\Winamp\winampa.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe

C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

C:\Windows\System32\spoolsv.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\iTunes\iTunes.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe

C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\RUNDLL32.EXE

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://asus13.msn.com

uSearch Bar = Preserve

BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll

BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

uRun: [Messenger (Yahoo!)] "C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe" -quiet

uRun: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent

mRun: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"

mRun: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe /S

mRun: [Device Detector] DevDetect.exe -autorun

mRun: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

mRun: [RazerGameBooster] C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe -autorun

StartupFolder: C:\Users\Hafizh\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\StartUp\MCAFEE~1.LNK - C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-System: DisableCAD = dword:1

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

TCP: Interfaces\{13FA4B7E-82B0-4063-8837-CB6514FD3AF9} : NameServer = 10.17.118.187 10.17.118.251

TCP: Interfaces\{AA1D2AB0-08E5-47BA-AA52-145896AF64EF} : DHCPNameServer = 192.168.1.1

TCP: Interfaces\{AA1D2AB0-08E5-47BA-AA52-145896AF64EF}\253502A4D434 : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{AA1D2AB0-08E5-47BA-AA52-145896AF64EF}\2535A4D434 : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{AA1D2AB0-08E5-47BA-AA52-145896AF64EF}\D61696E6662716D6560243E263 : DHCPNameServer = 192.168.43.1

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

AppInit_DLLs= c:\windows\syswow64\nvinit.dll c:\progra~2\sw-boo~1\assist~1.dll

SSODL: WebCheck - <orphaned>

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-BHO: CIESpeechBHO Class: {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe

x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe

x64-Run: [RTHDVCPL] "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

x64-Run: [BtTray] "C:\Program Files (x86)\Bluetooth Suite\BtTray.exe"

x64-Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

x64-Run: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

x64-Run: [Nvtmru] "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"

x64-Run: [NvBackend] "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"

x64-mPolicies-System: DisableCAD = dword:1

x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

x64-IE: {7815BE26-237D-41A8-A98F-F7BD75F71086} - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

x64-Notify: igfxcui - igfxdev.dll

x64-SSODL: WebCheck - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Hafizh\AppData\Roaming\Mozilla\Firefox\Profiles\hxr5u3ak.default-1397745598011\

FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll

FF - plugin: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll

FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll

FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

FF - plugin: C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMSS.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

.

============= SERVICES / DRIVERS ===============

.

R?2 NvNetworkService;NVIDIA Network Service;C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-4-11 1494304]

R0 iaStorA;iaStorA;C:\Windows\System32\Drivers\iaStorA.sys [2012-10-5 647736]

R0 nvpciflt;nvpciflt;C:\Windows\System32\Drivers\nvpciflt.sys [2014-4-11 30496]

R1 ATKWMIACPIIO;ATKWMIACPI Driver;C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-9-8 17536]

R2 ASMMAP64;ASMMAP64;C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-7-3 15416]

R2 ASUS InstantOn;ASUS InstantOn Service;C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [2012-4-14 277120]

R2 AtherosSvc;AtherosSvc;C:\Program Files (x86)\Bluetooth Suite\AdminService.exe [2012-9-30 220288]

R2 HitmanProScheduler;HitmanPro Scheduler;C:\Program Files\HitmanPro\hmpsched.exe [2014-4-17 127752]

R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-4-21 635104]

R2 Intel® ME Service;Intel® ME Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-11-8 128896]

R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe [2012-11-8 165760]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-4-17 1809720]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-4-17 857912]

R2 NvStreamSvc;NVIDIA Streamer Service;C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-4-11 15129376]

R2 RzKLService;RzKLService;C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [2014-3-5 105448]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-6-21 413472]

R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-11-8 364416]

R2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent;C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2012-9-30 323584]

R3 AiCharger;ASUS Charger Driver;C:\Windows\System32\Drivers\AiCharger.sys [2012-9-19 17152]

R3 ATP;ASUS PS/2 Port Input Device;C:\Windows\System32\Drivers\AsusTP.sys [2012-9-12 61824]

R3 BTATH_BUS;Qualcomm Atheros Bluetooth Bus;C:\Windows\System32\Drivers\btath_bus.sys [2012-11-8 33944]

R3 HIDSwitch;ASUS Wireless Radio Control;C:\Windows\System32\Drivers\AsHIDSwitch64.sys [2012-10-5 21152]

R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\Drivers\IntcDAud.sys [2012-10-5 342528]

R3 MBAMProtector;MBAMProtector;C:\Windows\System32\Drivers\mbam.sys [2014-4-17 25816]

R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\Drivers\MBAMSwissArmy.sys [2014-4-17 119512]

R3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\Drivers\mwac.sys [2014-4-17 63192]

R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);C:\Windows\System32\Drivers\nvvad64v.sys [2014-4-11 39200]

R3 RTL8168;Realtek 8168 NT Driver;C:\Windows\System32\Drivers\Rt630x64.sys [2012-11-8 690832]

R3 USB_BusEnum_T;EVDO Telecom USB Bus Enumerator;C:\Windows\System32\Drivers\USB_BusEnum_T.sys [2012-1-12 47808]

R3 USB_ETS_T;ZTE ETS Port FFDD;C:\Windows\System32\Drivers\USB_ETS_T.sys [2012-1-12 25024]

R3 USB_WinMux_T;EVDO Telecom USB MUX Serial Port;C:\Windows\System32\Drivers\USB_WinMux_T.sys [2012-1-12 40640]

R3 UsbModemDriver;ZTE USB Modem FFDD;C:\Windows\System32\Drivers\USB_MODEM_T.sys [2012-1-12 31424]

S3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;C:\Windows\System32\Drivers\btath_flt.sys [2012-11-8 88728]

S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;C:\Windows\System32\Drivers\btath_a2dp.sys [2012-11-8 344216]

S3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;C:\Windows\System32\Drivers\btath_avdt.sys [2012-11-8 114840]

S3 BTATH_HCRP;Bluetooth HCRP Server driver;C:\Windows\System32\Drivers\btath_hcrp.sys [2012-11-8 178840]

S3 BTATH_LWFLT;Bluetooth LWFLT Device;C:\Windows\System32\Drivers\btath_lwflt.sys [2012-11-8 76952]

S3 BTATH_RCP;Bluetooth AVRCP Device;C:\Windows\System32\Drivers\btath_rcp.sys [2012-11-8 135832]

S3 BtFilter;BtFilter;C:\Windows\System32\Drivers\btfilter.sys [2012-11-8 575128]

S3 BthLEEnum;Bluetooth Low Energy Driver;C:\Windows\System32\Drivers\BthLEEnum.sys [2012-7-26 202752]

S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\System32\Drivers\ssudbus.sys [2013-8-20 103576]

S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [2013-9-6 288776]

S3 PROLiNKusbdiag;PROLiNK DataCard Diagnostic Port;C:\Windows\System32\Drivers\PROLiNKusbdiag.sys [2013-6-17 123392]

S3 PROLiNKusbmodem;PROLiNK DataCard Proprietary USB Driver;C:\Windows\System32\Drivers\PROLiNKusbmodem.sys [2013-6-17 123392]

S3 PROLiNKusbnmea;PROLiNK DataCard NMEA Port;C:\Windows\System32\Drivers\PROLiNKusbnmea.sys [2013-6-17 123392]

S3 PROLiNKusbvoice;PROLiNK DataCard Voice Port;C:\Windows\System32\Drivers\PROLiNKusbvoice.sys [2013-6-17 123392]

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\Drivers\RtsUStor.sys [2012-11-8 252048]

S3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\Drivers\ssudmdm.sys [2013-8-20 204568]

S3 WUDFWpdMtp;WUDFWpdMtp;C:\Windows\System32\Drivers\WUDFRd.sys [2012-7-26 198656]

S3 xusb22;Xbox 360 Wireless Receiver Driver Service 22;C:\Windows\System32\Drivers\xusb22.sys [2012-7-26 89088]

.

=============== File Associations ===============

.

FileExt: .txt: textfile="C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE" "%1" [UserChoice]

.

=============== Created Last 30 ================

.

2014-04-17 17:19:37 -------- d-----w- C:\Program Files (x86)\Intel Corporation

2014-04-17 17:08:48 -------- d-----w- C:\Program Files (x86)\SystemRequirementsLab

2014-04-17 16:09:16 -------- d-----w- C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2014-04-17 14:50:49 75888 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{90AE13FB-AC5B-4FB7-B28E-073AE7E76CE7}\offreg.dll

2014-04-17 14:38:35 40720 ----a-w- C:\Windows\System32\Partizan.exe

2014-04-17 14:38:35 -------- d-----w- C:\@RestoreQuarantine

2014-04-17 14:36:29 -------- d-----w- C:\ProgramData\RegRun

2014-04-17 14:30:39 35816 ----a-w- C:\Windows\SysWow64\drivers\Partizan.sys

2014-04-17 14:30:36 2 --shatr- C:\Windows\winstart.bat

2014-04-17 14:30:34 12800 ----a-w- C:\Windows\SysWow64\drivers\UnHackMeDrv.sys

2014-04-17 14:30:27 -------- d-----w- C:\Program Files (x86)\UnHackMe

2014-04-17 13:59:36 119512 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys

2014-04-17 13:59:17 91352 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys

2014-04-17 13:59:17 63192 ----a-w- C:\Windows\System32\drivers\mwac.sys

2014-04-17 13:59:17 25816 ----a-w- C:\Windows\System32\drivers\mbam.sys

2014-04-17 13:59:17 -------- d-----w- C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-17 13:52:03 -------- d-----w- C:\Windows\ERUNT

2014-04-17 13:46:23 -------- d-----w- C:\AdwCleaner

2014-04-17 13:19:01 -------- d-----w- C:\ProgramData\SuperbApp

2014-04-17 13:16:58 -------- d-----w- C:\Users\Hafizh\AppData\Local\Comodo

2014-04-17 13:16:39 -------- d-----w- C:\ProgramData\eb64a50985f10bee

2014-04-17 13:16:38 -------- d-----w- C:\ProgramData\savve  neT

2014-04-17 13:14:43 -------- d-----w- C:\ProgramData\InstallMate

2014-04-15 20:00:09 10521840 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{90AE13FB-AC5B-4FB7-B28E-073AE7E76CE7}\mpengine.dll

2014-04-14 16:07:58 6217904 ----a-w- C:\Windows\System32\DDPP64A.dll

2014-04-14 16:07:58 605496 ----a-w- C:\Windows\System32\audioLibVc.dll

2014-04-14 16:07:58 501184 ----a-w- C:\Windows\System32\DTSU2PLFX64.dll

2014-04-14 16:07:58 487360 ----a-w- C:\Windows\System32\DTSU2PGFX64.dll

2014-04-14 16:07:58 415680 ----a-w- C:\Windows\System32\DTSU2PREC64.dll

2014-04-14 16:07:58 313520 ----a-w- C:\Windows\System32\DDPO64A.dll

2014-04-14 16:07:58 2743328 ----a-w- C:\Windows\System32\FMAPO64.dll

2014-04-14 16:07:58 260272 ----a-w- C:\Windows\System32\DDPA64.dll

2014-04-14 16:07:58 209096 ----a-w- C:\Windows\System32\AERTAC64.dll

2014-04-14 16:07:58 1938608 ----a-w- C:\Windows\System32\DDPD64A.dll

2014-04-14 16:07:58 113576 ----a-w- C:\Windows\System32\CONEQMSAPOGUILibrary.dll

2014-04-14 16:07:58 109848 ----a-w- C:\Windows\System32\AcpiServiceVnA64.dll

2014-04-13 11:46:47 -------- d-----w- C:\Users\Hafizh\AppData\Local\Sniper Elite [bleep] Zombie Army 2

2014-04-13 06:09:34 -------- d-----w- C:\Users\Hafizh\AppData\Local\Sniper Elite [bleep] Zombie Army

2014-04-11 12:24:28 39200 ----a-w- C:\Windows\System32\drivers\nvvad64v.sys

2014-04-11 12:24:28 35104 ----a-w- C:\Windows\System32\nvaudcap64v.dll

2014-04-11 12:24:28 32544 ----a-w- C:\Windows\SysWow64\nvaudcap32v.dll

2014-04-11 10:33:18 -------- d-----w- C:\Windows\SysWow64\NV

2014-04-11 10:33:18 -------- d-----w- C:\Windows\System32\NV

2014-04-11 10:11:00 884512 ----a-w- C:\Windows\System32\nvvsvc.exe

2014-04-11 10:11:00 67072 ----a-w- C:\Windows\System32\nv3dappshextr.dll

2014-04-11 10:11:00 6496544 ----a-w- C:\Windows\System32\nvcpl.dll

2014-04-11 10:11:00 63776 ----a-w- C:\Windows\System32\nvshext.dll

2014-04-11 10:11:00 3514656 ----a-w- C:\Windows\System32\nvsvc64.dll

2014-04-11 10:11:00 3253909 ----a-w- C:\Windows\System32\nvcoproc.bin

2014-04-11 10:11:00 2555680 ----a-w- C:\Windows\System32\nvsvcr.dll

2014-04-11 10:11:00 237856 ----a-w- C:\Windows\System32\nvmctray.dll

2014-04-11 10:11:00 1025312 ----a-w- C:\Windows\System32\nv3dappshext.dll

2014-04-11 10:05:53 -------- d-----w- C:\Program Files (x86)\NVIDIA Corporation

2014-04-11 10:04:47 1884448 ----a-w- C:\Windows\System32\nvdispco6432723.dll

2014-04-11 10:04:47 1511712 ----a-w- C:\Windows\System32\nvdispgenco6432723.dll

2014-04-11 05:57:08 10536864 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll

2014-04-09 13:09:36 -------- d-----w- C:\Users\Hafizh\AppData\Roaming\.minecraft

2014-04-05 23:28:31 -------- d-----w- C:\Users\Hafizh\AppData\Roaming\NVIDIA

2014-04-04 12:42:39 -------- d-----w- C:\ProgramData\Intel® Update Manager

2014-04-04 09:42:00 -------- d-----w- C:\Users\Hafizh\AppData\Local\techland

2014-03-30 07:19:00 -------- d-----w- C:\Users\Hafizh\AppData\Local\NVIDIA Corporation

2014-03-30 06:34:31 -------- d-----w- C:\Users\Hafizh\AppData\Local\NVIDIA

2014-03-30 06:28:00 -------- d-----w- C:\ProgramData\NVIDIA Corporation

2014-03-30 05:52:35 982232 ----a-w- C:\Windows\SysWow64\nvspcap.dll

2014-03-30 05:52:35 1100248 ----a-w- C:\Windows\System32\nvspcap64.dll

2014-03-22 10:50:10 -------- d-----w- C:\Users\Hafizh\AppData\Roaming\MMFApplications

.

==================== Find3M  ====================

.

2014-04-17 15:08:28 416 ----a-w- C:\Users\Hafizh\AppData\Roaming\sp_data.sys

2014-03-12 18:49:46 178800 ----a-w- C:\Windows\SysWow64\CmdLineExt_x64.dll

2014-02-20 11:14:22 15453904 ----a-w- C:\Windows\SysWow64\xlive.dll

2014-02-20 11:14:20 13642960 ----a-w- C:\Windows\SysWow64\xlivefnt.dll

2014-01-19 07:33:29 270496 ------w- C:\Windows\System32\MpSigStub.exe

2014-01-18 04:53:04 280904 ----a-w- C:\Windows\SysWow64\PnkBstrB.xtr

2014-01-18 04:53:04 280904 ----a-w- C:\Windows\SysWow64\PnkBstrB.exe

2014-01-18 04:44:34 280904 ----a-w- C:\Windows\SysWow64\PnkBstrB.ex0

.

============= FINISH:  0:53:30.69 ===============

the MBAM didnt find any thread but the program still cant remove it

 

 

[Advertisements]

Gday hero12,   

Only the experts in the Security Forum are permitted to deal with virus infections..   If you are still having problems after you are given a clean bill of health, please come back to this topic and we will help you. 

Please follow the instructions and post your topic > http://www.geekstogo...cleaning-guide/

 

Thank you for your understanding. 

[iammykyl]

Gday hero12,   

Only the experts in the Security Forum are permitted to deal with virus infections..   If you are still having problems after you are given a clean bill of health, please come back to this topic and we will help you. 

Please follow the instructions and post your topic > http://www.geekstogo...cleaning-guide/

 

Thank you for your understanding. 

[JSntgRvr]

Being helped here. We are proceeding to close this topic.