[xDokii]

Okay I will do tomorrow because I know that Malwarebytes' takes quite long to scan

[Advertisements]

Hi xDokii,

Okay, catch you then.

When you do come back there is another scan that I was going to suggest you use.

Perhaps you could carry out that one first and we can come back to the MBAM and OTl later.

Please read carefully and follow these steps.

• Download TDSSKiller and save it to your Desktop.
• Extract its contents to your desktop.
• Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  
  
  
• If an infected file is detected, the default action will be Cure, click on Continue.
  
  
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
  
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
  
  
• If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

[emeraldnzl]

Hi xDokii,

Okay, catch you then.

When you do come back there is another scan that I was going to suggest you use.

Perhaps you could carry out that one first and we can come back to the MBAM and OTl later.

Please read carefully and follow these steps.

• Download TDSSKiller and save it to your Desktop.
• Extract its contents to your desktop.
• Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  
  
  
• If an infected file is detected, the default action will be Cure, click on Continue.
  
  
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
  
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
  
  
• If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

[xDokii]

So shall I do the TDSSKiller scan then post the result and wait for you to check it before running MBAM and OTL or shall i just run TDSSKiller then Mbam then OTL and post the scans altogether?

Edited by xDokii, 07 August 2010 - 06:53 PM.

[emeraldnzl]

Run the TDSSKiller first and post back the results.

[xDokii]

TDSSKiller log:

2010/08/08 15:55:17.0281 TDSS rootkit removing tool 2.4.1.0 Aug 4 2010 15:06:41
2010/08/08 15:55:17.0281 ================================================================================
2010/08/08 15:55:17.0281 SystemInfo:
2010/08/08 15:55:17.0281
2010/08/08 15:55:17.0281 OS Version: 5.1.2600 ServicePack: 2.0
2010/08/08 15:55:17.0281 Product type: Workstation
2010/08/08 15:55:17.0281 ComputerName: WAI-50D7DE54CDA
2010/08/08 15:55:17.0281 UserName: Maria
2010/08/08 15:55:17.0281 Windows directory: C:\WINDOWS
2010/08/08 15:55:17.0281 System windows directory: C:\WINDOWS
2010/08/08 15:55:17.0281 Processor architecture: Intel x86
2010/08/08 15:55:17.0281 Number of processors: 1
2010/08/08 15:55:17.0281 Page size: 0x1000
2010/08/08 15:55:17.0281 Boot type: Normal boot
2010/08/08 15:55:17.0281 ================================================================================
2010/08/08 15:55:17.0984 Initialize success
2010/08/08 15:55:23.0843 ================================================================================
2010/08/08 15:55:23.0843 Scan started
2010/08/08 15:55:23.0843 Mode: Manual;
2010/08/08 15:55:23.0843 ================================================================================
2010/08/08 15:55:24.0984 ACPI (a10c7534f7223f4a73a948967d00e69b) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2010/08/08 15:55:25.0062 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
2010/08/08 15:55:25.0140 aec (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys
2010/08/08 15:55:25.0203 AFD (55e6e1c51b6d30e54335750955453702) C:\WINDOWS\System32\drivers\afd.sys
2010/08/08 15:55:25.0265 agp440 (2c428fa0c3e3a01ed93c9b2a27d8d4bb) C:\WINDOWS\system32\DRIVERS\agp440.sys
2010/08/08 15:55:25.0343 alcan5wn (0940030d5a5869067ccc03e3b0b8dec7) C:\WINDOWS\system32\DRIVERS\alcan5wn.sys
2010/08/08 15:55:25.0406 alcaudsl (4c9577888c53243e2991456f510488a1) C:\WINDOWS\system32\DRIVERS\alcaudsl.sys
2010/08/08 15:55:25.0531 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2010/08/08 15:55:25.0609 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
2010/08/08 15:55:25.0656 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2010/08/08 15:55:25.0703 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2010/08/08 15:55:25.0781 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\WINDOWS\System32\Drivers\avgldx86.sys
2010/08/08 15:55:25.0875 AvgMfx86 (53b3f979930a786a614d29cafe99f645) C:\WINDOWS\System32\Drivers\avgmfx86.sys
2010/08/08 15:55:25.0937 AvgTdiX (22e3b793c3e61720f03d3a22351af410) C:\WINDOWS\System32\Drivers\avgtdix.sys
2010/08/08 15:55:26.0000 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2010/08/08 15:55:26.0046 bvrp_pci (c945dc4eee3f624dfd07788ea7f0db0a) C:\WINDOWS\system32\drivers\bvrp_pci.sys
2010/08/08 15:55:26.0187 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2010/08/08 15:55:26.0234 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2010/08/08 15:55:26.0281 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
2010/08/08 15:55:26.0343 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2010/08/08 15:55:26.0437 ctsfm2k (8db84de3aab34a8b4c2f644eff41cd76) C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys
2010/08/08 15:55:26.0531 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
2010/08/08 15:55:26.0609 dmboot (c0fbb516e06e243f0cf31f597e7ebf7d) C:\WINDOWS\system32\drivers\dmboot.sys
2010/08/08 15:55:26.0703 dmio (f5e7b358a732d09f4bcf2824b88b9e28) C:\WINDOWS\system32\drivers\dmio.sys
2010/08/08 15:55:26.0718 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2010/08/08 15:55:26.0765 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
2010/08/08 15:55:26.0828 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
2010/08/08 15:55:26.0875 drvmcdb (b15f9e526ba511a48b1b1b8537815740) C:\WINDOWS\system32\drivers\drvmcdb.sys
2010/08/08 15:55:26.0937 drvnddm (fa4670cae95ae2bb857c68e535661145) C:\WINDOWS\system32\drivers\drvnddm.sys
2010/08/08 15:55:27.0140 E100B (d57a8fc800b501ac05b10d00f66d127a) C:\WINDOWS\system32\DRIVERS\e100b325.sys
2010/08/08 15:55:27.0171 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
2010/08/08 15:55:27.0187 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
2010/08/08 15:55:27.0203 Fips (e153ab8a11de5452bcf5ac7652dbf3ed) C:\WINDOWS\system32\drivers\Fips.sys
2010/08/08 15:55:27.0234 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2010/08/08 15:55:27.0265 FltMgr (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
2010/08/08 15:55:27.0343 fssfltr (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
2010/08/08 15:55:27.0406 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\WINDOWS\system32\FsUsbExDisk.SYS
2010/08/08 15:55:27.0437 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2010/08/08 15:55:27.0468 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2010/08/08 15:55:27.0562 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
2010/08/08 15:55:27.0609 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2010/08/08 15:55:27.0656 hidusb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2010/08/08 15:55:27.0718 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
2010/08/08 15:55:27.0765 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
2010/08/08 15:55:27.0796 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
2010/08/08 15:55:27.0859 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
2010/08/08 15:55:27.0968 i8042prt (5502b58eef7486ee6f93f3f164dcb808) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2010/08/08 15:55:28.0046 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
2010/08/08 15:55:28.0140 IntelC51 (8e51bf1696821a72656444e0fd5081a3) C:\WINDOWS\system32\DRIVERS\IntelC51.sys
2010/08/08 15:55:28.0218 IntelC52 (331ce31882754000ca2afbf7bd480513) C:\WINDOWS\system32\DRIVERS\IntelC52.sys
2010/08/08 15:55:28.0250 IntelC53 (8001fac548eb0285d0085f4eb53c1e3f) C:\WINDOWS\system32\DRIVERS\IntelC53.sys
2010/08/08 15:55:28.0296 IntelIde (2d722b2b54ab55b2fa475eb58d7b2aad) C:\WINDOWS\system32\DRIVERS\intelide.sys
2010/08/08 15:55:28.0312 intelppm (279fb78702454dff2bb445f238c048d2) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2010/08/08 15:55:28.0359 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
2010/08/08 15:55:28.0406 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2010/08/08 15:55:28.0421 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2010/08/08 15:55:28.0437 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2010/08/08 15:55:28.0500 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2010/08/08 15:55:28.0546 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
2010/08/08 15:55:28.0609 isapnp (e504f706ccb699c2596e9a3da1596e87) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2010/08/08 15:55:28.0656 Kbdclass (ebdee8a2ee5393890a1acee971c4c246) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2010/08/08 15:55:28.0718 kmixer (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys
2010/08/08 15:55:28.0765 KSecDD (674d3e5a593475915dc6643317192403) C:\WINDOWS\system32\drivers\KSecDD.sys
2010/08/08 15:55:28.0859 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2010/08/08 15:55:28.0906 Modem (6fc6f9d7acc36dca9b914565a3aeda05) C:\WINDOWS\system32\drivers\Modem.sys
2010/08/08 15:55:28.0953 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys
2010/08/08 15:55:28.0968 mohfilt (bdd406003c0c340cf6c5501165e83dcd) C:\WINDOWS\system32\DRIVERS\mohfilt.sys
2010/08/08 15:55:29.0015 Mouclass (34e1f0031153e491910e12551400192c) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2010/08/08 15:55:29.0078 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2010/08/08 15:55:29.0078 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
2010/08/08 15:55:29.0109 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2010/08/08 15:55:29.0203 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2010/08/08 15:55:29.0250 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
2010/08/08 15:55:29.0265 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010/08/08 15:55:29.0281 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010/08/08 15:55:29.0281 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
2010/08/08 15:55:29.0328 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2010/08/08 15:55:29.0343 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
2010/08/08 15:55:29.0359 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
2010/08/08 15:55:29.0421 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2010/08/08 15:55:29.0468 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2010/08/08 15:55:29.0484 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2010/08/08 15:55:29.0500 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
2010/08/08 15:55:29.0531 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
2010/08/08 15:55:29.0562 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
2010/08/08 15:55:29.0609 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
2010/08/08 15:55:29.0656 NPPTNT2 (9131fe60adfab595c8da53ad6a06aa31) C:\WINDOWS\system32\npptNT2.sys
2010/08/08 15:55:29.0718 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
2010/08/08 15:55:29.0765 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2010/08/08 15:55:29.0875 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
2010/08/08 15:55:29.0953 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2010/08/08 15:55:29.0968 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2010/08/08 15:55:30.0015 OMCI (cec7e2c6c1fa00c7ab2f5434f848ae51) C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS
2010/08/08 15:55:30.0078 ossrv (103a9b117a7d9903111955cdafe65ac6) C:\WINDOWS\system32\DRIVERS\ctoss2k.sys
2010/08/08 15:55:30.0125 P17 (df886ffed69aead0cf608b89b18c3f6f) C:\WINDOWS\system32\drivers\P17.sys
2010/08/08 15:55:30.0203 Parport (29744eb4ce659dfe3b4122deb45bc478) C:\WINDOWS\system32\DRIVERS\parport.sys
2010/08/08 15:55:30.0234 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
2010/08/08 15:55:30.0281 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
2010/08/08 15:55:30.0328 pccsmcfd (175cc28dcf819f78caa3fbd44ad9e52a) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
2010/08/08 15:55:30.0406 PCI (8086d9979234b603ad5bc2f5d890b234) C:\WINDOWS\system32\DRIVERS\pci.sys
2010/08/08 15:55:30.0437 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\drivers\PCIIde.sys
2010/08/08 15:55:30.0515 Pcmcia (82a087207decec8456fbe8537947d579) C:\WINDOWS\system32\drivers\Pcmcia.sys
2010/08/08 15:55:30.0656 PfModNT (d9ed17ac15720096a9f92ff4ea587b09) C:\WINDOWS\system32\drivers\PfModNT.sys
2010/08/08 15:55:30.0703 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2010/08/08 15:55:30.0750 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2010/08/08 15:55:31.0062 PxHelp20 (30cbae0a34359f1cd19d1576245149ed) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2010/08/08 15:55:31.0312 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2010/08/08 15:55:31.0359 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2010/08/08 15:55:31.0390 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2010/08/08 15:55:31.0421 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2010/08/08 15:55:31.0484 Rdbss (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2010/08/08 15:55:31.0500 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2010/08/08 15:55:31.0562 RDPWD (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys
2010/08/08 15:55:31.0625 redbook (b31b4588e4086d8d84adbf9845c2402b) C:\WINDOWS\system32\DRIVERS\redbook.sys
2010/08/08 15:55:31.0796 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
2010/08/08 15:55:31.0812 SASKUTIL (61db0d0756a99506207fd724e3692b25) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
2010/08/08 15:55:31.0859 se59bus (7c38fc284136981ebe002252fa0900d3) C:\WINDOWS\system32\DRIVERS\se59bus.sys
2010/08/08 15:55:31.0890 Secdrv (d26e26ea516450af9d072635c60387f4) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2010/08/08 15:55:31.0937 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
2010/08/08 15:55:32.0000 Serial (cd9404d115a00d249f70a371b46d5a26) C:\WINDOWS\system32\DRIVERS\serial.sys
2010/08/08 15:55:32.0078 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
2010/08/08 15:55:32.0156 splitter (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys
2010/08/08 15:55:32.0218 sr (e41b6d037d6cd08461470af04500dc24) C:\WINDOWS\system32\DRIVERS\sr.sys
2010/08/08 15:55:32.0296 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
2010/08/08 15:55:32.0328 sscdbhk5 (d7968049be0adbb6a57cee3960320911) C:\WINDOWS\system32\drivers\sscdbhk5.sys
2010/08/08 15:55:32.0359 ssrtln (c3ffd65abfb6441e7606cf74f1155273) C:\WINDOWS\system32\drivers\ssrtln.sys
2010/08/08 15:55:32.0421 ss_bbus (eaa66218cd39f5bb1b4853a78c67c787) C:\WINDOWS\system32\DRIVERS\ss_bbus.sys
2010/08/08 15:55:32.0468 ss_bmdfl (91765f99914ed8693d8bc76524f21581) C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys
2010/08/08 15:55:32.0515 ss_bmdm (840e7b738b03c10ee91d9b7d3d6eff15) C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys
2010/08/08 15:55:32.0546 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
2010/08/08 15:55:32.0593 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
2010/08/08 15:55:32.0671 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
2010/08/08 15:55:32.0796 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2010/08/08 15:55:32.0859 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
2010/08/08 15:55:32.0875 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
2010/08/08 15:55:32.0921 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
2010/08/08 15:55:32.0984 tfsnboio (1d265cd2fb1673a0873bf8cec19ddc7f) C:\WINDOWS\system32\dla\tfsnboio.sys
2010/08/08 15:55:33.0000 tfsncofs (62e4901295e0467cac78e5b4b131ae5c) C:\WINDOWS\system32\dla\tfsncofs.sys
2010/08/08 15:55:33.0015 tfsndrct (a2f380f9252ab3464c859adf91eead9c) C:\WINDOWS\system32\dla\tfsndrct.sys
2010/08/08 15:55:33.0046 tfsndres (eee79bbefe9c6a2a3ce6c8753cfea950) C:\WINDOWS\system32\dla\tfsndres.sys
2010/08/08 15:55:33.0062 tfsnifs (9d644eb11fec9487450c4cfcd63a5df4) C:\WINDOWS\system32\dla\tfsnifs.sys
2010/08/08 15:55:33.0062 tfsnopio (e656af05c67edb7c0e9230a5df71ed1b) C:\WINDOWS\system32\dla\tfsnopio.sys
2010/08/08 15:55:33.0078 tfsnpool (64fccb9cce703ca507dffc3cebf6b2cb) C:\WINDOWS\system32\dla\tfsnpool.sys
2010/08/08 15:55:33.0093 tfsnudf (48bc9d8ab4e4b9bff70fb18e55cec3d6) C:\WINDOWS\system32\dla\tfsnudf.sys
2010/08/08 15:55:33.0109 tfsnudfa (79f60822224256b49bfc855da8d651d5) C:\WINDOWS\system32\dla\tfsnudfa.sys
2010/08/08 15:55:33.0156 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
2010/08/08 15:55:33.0171 Update (aff2e5045961bbc0a602bb6f95eb1345) C:\WINDOWS\system32\DRIVERS\update.sys
2010/08/08 15:55:33.0250 USBAAPL (1df89c499bf45d878b87ebd4421d462d) C:\WINDOWS\system32\Drivers\usbaapl.sys
2010/08/08 15:55:33.0296 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2010/08/08 15:55:33.0328 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2010/08/08 15:55:33.0343 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2010/08/08 15:55:33.0359 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2010/08/08 15:55:33.0390 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys
2010/08/08 15:55:33.0453 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2010/08/08 15:55:33.0468 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2010/08/08 15:55:33.0531 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
2010/08/08 15:55:33.0609 VolSnap (ee4660083deba849ff6c485d944b379b) C:\WINDOWS\system32\drivers\VolSnap.sys
2010/08/08 15:55:33.0687 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2010/08/08 15:55:33.0750 wdmaud (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys
2010/08/08 15:55:33.0812 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
2010/08/08 15:55:33.0875 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
2010/08/08 15:55:33.0968 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2010/08/08 15:55:34.0046 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2010/08/08 15:55:34.0109 ================================================================================
2010/08/08 15:55:34.0109 Scan finished
2010/08/08 15:55:34.0109 ================================================================================

[emeraldnzl]

Thank you for that.

Now let's move on to the MBAM and OTL ones.

[xDokii]

MBAM log:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4408

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

08/08/2010 21:56:11
mbam-log-2010-08-08 (21-56-11).txt

Scan type: Quick scan
Objects scanned: 164842
Time elapsed: 13 minute(s), 12 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[xDokii]

OTL.Txt:

OTL logfile created on: 08/08/2010 21:58:55 - Run 2
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Maria\Desktop
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

511.00 Mb Total Physical Memory | 231.00 Mb Available Physical Memory | 45.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 51.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 145.45 Gb Total Space | 114.67 Gb Free Space | 78.84% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: WAI-50D7DE54CDA
Current User Name: Maria
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/08/08 00:14:19 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Maria\Desktop\OTL.exe
PRC - [2010/07/20 16:29:01 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgemc.exe
PRC - [2010/07/15 16:39:16 | 000,515,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe
PRC - [2010/07/15 16:39:15 | 000,620,896 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe
PRC - [2010/07/15 16:39:12 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe
PRC - [2010/07/15 16:38:26 | 000,723,296 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe
PRC - [2010/07/15 16:38:24 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2010/04/12 02:09:49 | 000,095,232 | ---- | M] () -- C:\Program Files\ViiKiiDesktopPlugin\ViiKiiDesktopPlugin.exe
PRC - [2010/03/29 16:54:03 | 000,557,056 | ---- | M] (Orbitdownloader.com) -- C:\Program Files\Orbitdownloader\orbitnet.exe
PRC - [2009/12/21 12:24:54 | 001,719,568 | ---- | M] (Orbitdownloader.com) -- C:\Program Files\Orbitdownloader\orbitdm.exe
PRC - [2009/05/19 12:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2009/03/31 10:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2004/08/12 14:57:20 | 001,032,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2010/08/08 00:14:19 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Maria\Desktop\OTL.exe
MOD - [2004/08/12 15:01:17 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2004/08/12 14:55:50 | 001,050,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/07/20 16:29:01 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgemc.exe -- (avg9emc)
SRV - [2010/07/15 16:39:12 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009/08/05 23:48:42 | 000,704,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2009/05/19 12:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2009/03/31 10:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2009/02/18 23:21:00 | 002,769,658 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2008/04/07 10:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2005/11/14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\kxryyaod.sys -- (kxryyaod)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\NCsoft\Exteel (US)\System\GameGuard\dump_wmimmc.sys -- (dump_wmimmc)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Maria\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2010/07/15 16:39:17 | 000,243,024 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010/07/15 16:38:26 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010/06/03 12:33:25 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2010/05/10 19:41:30 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/02/17 19:25:48 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2009/08/05 23:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009/03/31 10:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/03/20 11:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009/03/20 11:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009/03/20 11:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2007/09/17 16:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007/06/15 03:47:26 | 001,127,936 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\P17.sys -- (P17)
DRV - [2006/09/05 19:07:00 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se59bus.sys -- (se59bus) Sony Ericsson Device 089 driver (WDM)
DRV - [2005/01/10 11:15:30 | 000,106,496 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2005/01/10 11:15:24 | 000,138,752 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2005/01/04 10:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\npptNT2.sys -- (NPPTNT2)
DRV - [2004/12/22 12:58:14 | 000,008,704 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Pfmodnt.sys -- (PfModNT)
DRV - [2004/08/13 03:56:00 | 000,040,544 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\drvnddm.sys -- (drvnddm)
DRV - [2004/08/13 02:05:00 | 000,100,603 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnudfa.sys -- (tfsnudfa)
DRV - [2004/08/13 02:05:00 | 000,098,714 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnudf.sys -- (tfsnudf)
DRV - [2004/08/13 02:05:00 | 000,086,202 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnifs.sys -- (tfsnifs)
DRV - [2004/08/13 02:05:00 | 000,034,843 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsncofs.sys -- (tfsncofs)
DRV - [2004/08/13 02:05:00 | 000,025,723 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnboio.sys -- (tfsnboio)
DRV - [2004/08/13 02:05:00 | 000,014,715 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnopio.sys -- (tfsnopio)
DRV - [2004/08/13 02:05:00 | 000,006,363 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsnpool.sys -- (tfsnpool)
DRV - [2004/08/13 02:05:00 | 000,004,123 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsndrct.sys -- (tfsndrct)
DRV - [2004/08/13 02:05:00 | 000,002,239 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\dla\tfsndres.sys -- (tfsndres)
DRV - [2004/08/04 04:21:00 | 000,087,136 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\drvmcdb.sys -- (drvmcdb)
DRV - [2004/08/03 23:29:56 | 001,897,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2004/07/14 12:29:04 | 000,005,627 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\sscdbhk5.sys -- (sscdbhk5)
DRV - [2004/07/14 12:28:50 | 000,023,545 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\ssrtln.sys -- (ssrtln)
DRV - [2004/03/24 16:12:44 | 000,004,272 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bvrp_pci.sys -- (bvrp_pci)
DRV - [2003/12/08 12:53:48 | 000,053,600 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcan5wn.sys -- (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)
DRV - [2003/12/08 12:53:46 | 000,070,688 | ---- | M] (THOMSON) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl)
DRV - [2003/11/20 23:14:28 | 000,646,825 | R--- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\IntelC52.sys -- (IntelC52)
DRV - [2003/11/20 23:13:40 | 001,232,741 | R--- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\IntelC51.sys -- (IntelC51)
DRV - [2003/11/20 23:12:56 | 000,059,717 | R--- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\IntelC53.sys -- (IntelC53)
DRV - [2003/11/20 23:12:42 | 000,037,048 | R--- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mohfilt.sys -- (mohfilt)
DRV - [2001/08/22 09:42:58 | 000,013,632 | ---- | M] (Dell Computer Corporation) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS -- (OMCI)
DRV - [2001/08/17 14:57:38 | 000,016,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\MODEMCSA.sys -- (MODEMCSA)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://uk.red.client...fo/bt_side.html

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.client...arch.yahoo.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://uk.red.client...fo/bt_side.html
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo! Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..extensions.enabledItems: avg@igeared:4.002.023.004
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..keyword.URL: "http://us.yhs.search...2-tb-web_us&p="

FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010/07/31 13:33:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG9\Toolbar\Firefox\avg@igeared [2010/03/27 03:19:27 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/08/02 02:25:26 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/07/24 12:45:33 | 000,000,000 | ---D | M]

[2009/11/22 13:06:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maria\Application Data\Mozilla\Extensions
[2010/08/08 01:20:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maria\Application Data\Mozilla\Firefox\Profiles\0f8j2sbz.default\extensions
[2009/11/30 19:08:54 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Maria\Application Data\Mozilla\Firefox\Profiles\0f8j2sbz.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/08/08 00:31:05 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/05/12 22:36:06 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/05/12 22:35:05 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/07/24 12:45:17 | 000,001,538 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2010/07/24 12:45:17 | 000,000,947 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2010/07/24 12:45:17 | 000,000,769 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2010/07/24 12:45:17 | 000,000,831 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2010/08/08 01:16:25 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (no name) - {193d7001-bd9f-48c2-b5c7-69775aa2201d} - No CLSID value found.
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll ()
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe File not found
O4 - HKLM..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe File not found
O4 - HKLM..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe File not found
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe File not found
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask .exe (Apple Inc.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe (Orbitdownloader.com)
O4 - Startup: C:\Documents and Settings\Maria\Start Menu\Programs\Startup\ViiKiiDesktopPlugin.lnk = C:\Program Files\ViiKiiDesktopPlugin\ViiKiiDesktopPlugin.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zon...kr.cab56986.cab (Checkers Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} http://download.yaho...alls/yab_af.cab (Reg Error: Key error.)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zon...nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.4.2_03)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macr...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop WallPaper: C:\Documents and Settings\Maria\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Maria\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/11/22 03:50:46 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/08/08 15:48:35 | 001,196,368 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Maria\Desktop\TDSSKiller.exe
[2010/08/08 01:11:12 | 000,000,000 | ---D | C] -- C:\_OTL
[2010/08/08 00:14:18 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Maria\Desktop\OTL.exe
[2010/08/07 23:15:09 | 000,000,000 | --SD | C] -- C:\Confuse.exe
[2010/08/07 13:10:38 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/08/06 23:20:07 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/08/06 23:14:31 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/08/06 23:14:31 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/08/06 23:14:31 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/08/06 23:14:31 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/08/06 23:09:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/08/05 23:50:35 | 000,472,064 | ---- | C] ( ) -- C:\Documents and Settings\Maria\Desktop\RootRepeal.exe
[2010/08/04 17:10:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maria\Application Data\WinRAR
[2010/07/31 18:53:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maria\Application Data\OnlineArmor
[2010/07/31 18:40:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010/07/31 18:15:55 | 000,000,000 | ---D | C] -- C:\Avenger
[2010/07/31 13:53:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2010/07/31 13:53:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maria\Application Data\SUPERAntiSpyware.com
[2010/07/31 13:52:16 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2010/07/31 13:38:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maria\Application Data\Malwarebytes
[2010/07/31 13:37:23 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/07/31 13:37:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/07/31 13:37:18 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/07/31 13:37:15 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/07/31 12:47:06 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/07/29 18:00:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maria\Local Settings\Application Data\BVRP Software
[2010/07/29 16:15:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Apple
[2010/07/29 13:50:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2010/07/24 20:22:56 | 000,005,872 | R--- | C] (MCCI) -- C:\WINDOWS\System32\drivers\se59whnt.sys
[2010/07/24 20:22:56 | 000,005,872 | R--- | C] (MCCI) -- C:\WINDOWS\System32\drivers\se59wh.sys
[2010/07/24 20:22:55 | 000,061,536 | R--- | C] (MCCI) -- C:\WINDOWS\System32\drivers\se59bus.sys
[2010/07/24 20:14:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maria\Application Data\Teleca
[2010/07/24 20:06:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maria\Application Data\Sony Ericsson
[2010/07/24 19:55:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Teleca Shared
[2010/07/24 12:47:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maria\Local Settings\Application Data\Conduit
[2010/07/22 16:47:17 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Documents\Settings
[2010/07/22 12:26:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2010/07/22 12:26:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2010/07/15 16:39:15 | 000,012,536 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2002/04/11 02:41:06 | 000,065,536 | ---- | C] ( ) -- C:\WINDOWS\System32\A3d.dll

========== Files - Modified Within 30 Days ==========

[2010/08/08 21:10:03 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/08/08 17:10:01 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/08/08 15:47:54 | 001,130,629 | ---- | M] () -- C:\Documents and Settings\Maria\Desktop\tdsskiller.zip
[2010/08/08 11:53:42 | 063,051,185 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/08/08 11:49:37 | 000,000,752 | ---- | M] () -- C:\Documents and Settings\Maria\Start Menu\Programs\Startup\ViiKiiDesktopPlugin.lnk
[2010/08/08 11:49:36 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Orbit.lnk
[2010/08/08 11:47:32 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/08/08 11:47:23 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/08/08 11:47:22 | 535,875,584 | -HS- | M] () -- C:\hiberfil.sys
[2010/08/08 02:11:17 | 003,932,160 | -H-- | M] () -- C:\Documents and Settings\Maria\ntuser.dat
[2010/08/08 02:11:17 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Maria\ntuser.ini
[2010/08/08 01:16:25 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2010/08/08 00:14:19 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Maria\Desktop\OTL.exe
[2010/08/07 23:14:39 | 003,816,812 | R--- | M] () -- C:\Documents and Settings\Maria\Desktop\Confuse.exe.exe
[2010/08/06 23:20:15 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010/08/05 23:52:21 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Maria\Desktop\settings.dat
[2010/08/05 16:15:11 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/08/04 17:09:37 | 000,284,915 | R--- | M] () -- C:\Documents and Settings\Maria\Desktop\gmer.zip
[2010/08/04 16:51:05 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/08/04 15:07:42 | 001,196,368 | ---- | M] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Maria\Desktop\TDSSKiller.exe
[2010/07/31 21:58:41 | 000,000,608 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/07/31 21:58:41 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/07/31 21:58:41 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2010/07/31 18:52:23 | 000,473,714 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/07/31 18:52:23 | 000,083,466 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/07/31 13:52:45 | 000,001,678 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/07/31 13:37:33 | 000,000,714 | ---- | M] () -- C:\Documents and Settings\Maria\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk
[2010/07/31 13:37:33 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/07/31 12:47:09 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\Maria\Desktop\HijackThis.lnk
[2010/07/24 20:57:50 | 000,099,888 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\photo6.jpg
[2010/07/24 20:57:43 | 000,089,095 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\photo5.jpg
[2010/07/24 20:57:37 | 000,098,122 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\photo4.jpg
[2010/07/24 20:57:31 | 000,079,530 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\photo3.jpg
[2010/07/24 20:57:15 | 000,052,247 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\photo.jpg
[2010/07/24 20:57:06 | 000,073,876 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\photo2.jpg
[2010/07/24 20:56:27 | 000,066,359 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\photo1.jpg
[2010/07/24 19:43:14 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010/07/24 19:43:14 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2010/07/22 16:47:04 | 000,000,442 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2010/07/22 16:33:50 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Maria\Ÿ;Ÿ;
[2010/07/15 16:39:17 | 000,243,024 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/07/15 16:39:15 | 000,012,536 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010/07/15 16:38:26 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010/07/14 20:51:15 | 003,474,108 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Jason Derulo _quot;Ridin_ Solo_quot; (Official Lyrics Video) [www.keepvid.com].flv.MP3
[2010/07/14 20:50:25 | 003,521,338 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Frisky - Tinie Tempah ft. Labrinth LYRICS [www.keepvid.com].flv.MP3
[2010/07/14 20:49:28 | 003,365,857 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Down Jay Sean ft. Lil Wayne Lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:48:40 | 003,695,209 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Close To You JLS Lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:47:50 | 003,464,913 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Baby-Justin bieber Studio Version with lyrics and download link [www.keepvid.com].flv.MP3
[2010/07/14 20:47:01 | 002,841,318 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Airplanes By B.O.B ft Hayley Williams (HD) [www.keepvid.com].flv.MP3
[2010/07/14 20:46:15 | 003,253,426 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Sean Kingston ft. Justin Bieber - Eenie Meenie Lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:45:26 | 003,029,400 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Scouting For Girls - This Aint A Love Song (With Lyrics) [www.keepvid.com].flv.MP3
[2010/07/14 20:44:34 | 003,577,762 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Pixie Lott - _Gravity_ [www.keepvid.com].flv.MP3
[2010/07/14 20:43:43 | 003,002,232 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Kesha - Your Love Is My Drug (Lyrics) [www.keepvid.com].flv.MP3
[2010/07/14 20:42:56 | 003,297,312 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\JLS- Tightrope, with lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:42:09 | 002,974,229 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\JLS mary with Lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:41:24 | 003,362,095 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Jay Sean ft. Sean Paul - Do You Remember (Lyrics) [www.keepvid.com].flv.MP3
[2010/07/13 22:59:33 | 002,847,169 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Green Day - American Idiot With Lyrics. [www.keepvid.com].flv.MP3
[2010/07/13 22:58:53 | 004,101,047 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\6. Greenday - Boulevard Of Broken Dreams (With Lyrics) [www.keepvid.com].flv.MP3
[2010/07/13 22:57:59 | 003,605,765 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\The Killers - Mr. Brightside Lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:56:08 | 003,749,125 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Who I am hates who I_ve been by Relient K with lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:55:00 | 003,476,616 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\This Ain_t A Scene - Fall Out Boy -[Lyrics]- [www.keepvid.com].flv.MP3
[2010/07/13 22:53:32 | 003,846,092 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Relient K-Be My Escape w_ lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:52:04 | 003,001,396 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Panic At The Disco - I Write Sins, Not Tragedies (Lyrics) [www.keepvid.com].flv.MP3
[2010/07/13 22:32:20 | 003,259,695 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Fall Out Boy Thnks Fr Th Mmrs-lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:31:29 | 002,919,058 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Fall Out Boy - Dance, Dance [www.keepvid.com].flv.MP3
[2010/07/13 22:30:35 | 003,462,405 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Sugar We_re Going Down- Fall Out Boy Lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:29:40 | 004,166,667 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Paramore_ Brick By Boring Brick [OFFICIAL VIDEO] [www.keepvid.com].flv.MP3
[2010/07/13 22:28:36 | 003,502,112 | ---- | M] () -- C:\Documents and Settings\Maria\My Documents\Fall Out Boy-The Take Over, The Breaks Over lyrics [www.keepvid.com].flv.MP3

========== Files Created - No Company Name ==========

[2010/08/08 15:47:35 | 001,130,629 | ---- | C] () -- C:\Documents and Settings\Maria\Desktop\tdsskiller.zip
[2010/08/07 23:14:21 | 003,816,812 | R--- | C] () -- C:\Documents and Settings\Maria\Desktop\Confuse.exe.exe
[2010/08/06 23:20:15 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010/08/06 23:20:09 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010/08/06 23:14:31 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/08/06 23:14:31 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/08/06 23:14:31 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/08/06 23:14:31 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/08/06 23:14:31 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/08/05 23:52:21 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Maria\Desktop\settings.dat
[2010/08/04 17:15:58 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\Maria\Desktop\gmer.exe
[2010/08/04 17:09:44 | 000,284,915 | R--- | C] () -- C:\Documents and Settings\Maria\Desktop\gmer.zip
[2010/07/31 13:52:45 | 000,001,678 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/07/31 13:37:33 | 000,000,714 | ---- | C] () -- C:\Documents and Settings\Maria\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk
[2010/07/31 13:37:33 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/07/31 12:47:09 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\Maria\Desktop\HijackThis.lnk
[2010/07/24 20:57:50 | 000,099,888 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\photo6.jpg
[2010/07/24 20:57:42 | 000,089,095 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\photo5.jpg
[2010/07/24 20:57:36 | 000,098,122 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\photo4.jpg
[2010/07/24 20:57:31 | 000,079,530 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\photo3.jpg
[2010/07/24 20:57:13 | 000,052,247 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\photo.jpg
[2010/07/24 20:57:06 | 000,073,876 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\photo2.jpg
[2010/07/24 20:56:23 | 000,066,359 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\photo1.jpg
[2010/07/24 19:40:58 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2010/07/24 19:40:57 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2010/07/22 16:33:50 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Maria\Ÿ;Ÿ;
[2010/07/14 20:51:15 | 003,474,108 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Jason Derulo _quot;Ridin_ Solo_quot; (Official Lyrics Video) [www.keepvid.com].flv.MP3
[2010/07/14 20:50:24 | 003,521,338 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Frisky - Tinie Tempah ft. Labrinth LYRICS [www.keepvid.com].flv.MP3
[2010/07/14 20:49:27 | 003,365,857 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Down Jay Sean ft. Lil Wayne Lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:48:40 | 003,695,209 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Close To You JLS Lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:47:49 | 003,464,913 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Baby-Justin bieber Studio Version with lyrics and download link [www.keepvid.com].flv.MP3
[2010/07/14 20:47:00 | 002,841,318 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Airplanes By B.O.B ft Hayley Williams (HD) [www.keepvid.com].flv.MP3
[2010/07/14 20:46:15 | 003,253,426 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Sean Kingston ft. Justin Bieber - Eenie Meenie Lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:45:26 | 003,029,400 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Scouting For Girls - This Aint A Love Song (With Lyrics) [www.keepvid.com].flv.MP3
[2010/07/14 20:44:33 | 003,577,762 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Pixie Lott - _Gravity_ [www.keepvid.com].flv.MP3
[2010/07/14 20:43:42 | 003,002,232 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Kesha - Your Love Is My Drug (Lyrics) [www.keepvid.com].flv.MP3
[2010/07/14 20:42:56 | 003,297,312 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\JLS- Tightrope, with lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:42:08 | 002,974,229 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\JLS mary with Lyrics [www.keepvid.com].flv.MP3
[2010/07/14 20:41:24 | 003,362,095 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Jay Sean ft. Sean Paul - Do You Remember (Lyrics) [www.keepvid.com].flv.MP3
[2010/07/13 22:59:32 | 002,847,169 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Green Day - American Idiot With Lyrics. [www.keepvid.com].flv.MP3
[2010/07/13 22:58:53 | 004,101,047 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\6. Greenday - Boulevard Of Broken Dreams (With Lyrics) [www.keepvid.com].flv.MP3
[2010/07/13 22:57:58 | 003,605,765 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\The Killers - Mr. Brightside Lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:56:07 | 003,749,125 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Who I am hates who I_ve been by Relient K with lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:54:59 | 003,476,616 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\This Ain_t A Scene - Fall Out Boy -[Lyrics]- [www.keepvid.com].flv.MP3
[2010/07/13 22:53:32 | 003,846,092 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Relient K-Be My Escape w_ lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:52:03 | 003,001,396 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Panic At The Disco - I Write Sins, Not Tragedies (Lyrics) [www.keepvid.com].flv.MP3
[2010/07/13 22:32:20 | 003,259,695 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Fall Out Boy Thnks Fr Th Mmrs-lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:31:28 | 002,919,058 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Fall Out Boy - Dance, Dance [www.keepvid.com].flv.MP3
[2010/07/13 22:30:34 | 003,462,405 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Sugar We_re Going Down- Fall Out Boy Lyrics [www.keepvid.com].flv.MP3
[2010/07/13 22:29:39 | 004,166,667 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Paramore_ Brick By Boring Brick [OFFICIAL VIDEO] [www.keepvid.com].flv.MP3
[2010/07/13 22:28:36 | 003,502,112 | ---- | C] () -- C:\Documents and Settings\Maria\My Documents\Fall Out Boy-The Take Over, The Breaks Over lyrics [www.keepvid.com].flv.MP3
[2010/02/15 12:37:47 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010/02/15 12:37:47 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010/01/26 21:53:31 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2009/12/30 01:15:15 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/11/22 05:21:53 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009/11/22 04:44:09 | 000,040,448 | ---- | C] () -- C:\WINDOWS\System32\regobj.dll
[2009/11/22 04:39:52 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\YCRWin32.dll
[2009/11/22 04:35:56 | 000,005,606 | ---- | C] () -- C:\WINDOWS\System32\stci.dll
[2009/11/22 04:23:33 | 000,000,136 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2009/11/22 04:07:09 | 000,004,272 | R--- | C] () -- C:\WINDOWS\System32\drivers\bvrp_pci.sys
[2007/10/25 18:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2005/05/03 12:38:42 | 000,064,512 | ---- | C] () -- C:\WINDOWS\System32\P17.dll
[2004/09/22 19:47:00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/08/12 15:04:51 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2003/10/02 11:48:18 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\P17CPI.dll
[2003/01/07 16:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
< End of report >

[emeraldnzl]

Hello xDokii,

Your Java is out to date. Older versions are vunerable to attack.

Please follow these steps:

• Download from here Java Runtime Environment (JRE) Update
• Scroll to where it says "Windows 7/Vista/2000/2003/2008 online" and download and follow the instructions.
  
  Reboot your computer.
  You also need to uininstall older versions of Java.
  
• Click Start > Control Panel > Add or Remove Programs
• Remove all Java updates except the latest one you have just installed.

Next

Please run OTL.exe

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :OTL
  O2 - BHO: (no name) - {193d7001-bd9f-48c2-b5c7-69775aa2201d} - No CLSID value found.
  
  :Commands
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot when it is done
• It will produce a log for you on reboot, please post that log in your next reply.

Finally in this post

Kaspersky on line scanner is very thorough. It can take a long time and for periods may seem not to be working. Just be patient and let it do its job.

Kaspersky works with Internet Explorer and Firefox 3. It uses Java Runtime Environment (JRE) .

Go to Kaspersky website and perform an online antivirus scan.

Note: you will need to turn off your security programs to allow Kaspersky to do its job.

• Read through the requirements and privacy statement and click on Accept button.
• It will start dowanloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, Adware, Dialers, and other potentially dangerous programs
    Archives
    Mail databases
• Click on My Computer under Scan.
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As....
• Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.

Copy and paste that information in your next post.

So when you return please post

• OTL fix log
• Kaspersky scan results

[xDokii]

Do I remove Java 2 Runtime Environment, SE v1.4.2_03?

[emeraldnzl]

Yes

[xDokii]

I've done up to the OTL and I will do the Kaspersky scan tomorrow. However, After rebooting after the OTL scan (Which was basically just a flash ), a log has not come up??

Edited by xDokii, 08 August 2010 - 07:12 PM.

[emeraldnzl]

Don't worry about the OTL log it was just to deal with an orphan.

I will wait for you Kaspersky one tomorrow.

Catch you then.

[xDokii]

Its been about 4 hours since i started scanning with kaspersky and about an hour and a half into the scan i noticed it had stopped, the timer for the scan had stopped (01:11:49) and the files it was scanning has been the same (22% fles scanned). It has been like that for about 2 and a half hours and it still hasn't changed.

I did one before but it had also stopped at 21% and stayed for about 3 hours? so i tried to restart the scan but the above was what happened. I know you said there would be periods when it may seem like its not working but i'm not sure if 3 hours and 2 and a half hours (still counting) is normal? I'm still letting it run but i wanted to check just in case

[emeraldnzl]

I know you said there would be periods when it may seem like its not working but i'm not sure if 3 hours and 2 and a half hours (still counting) is normal?

Well it can take a long time but hanging and doing nothing for 3hrs seems a bit excessive.

If it hasn't started again since you posted then we will leave it and try something else.

Try this:

Please run a free online scan with the ESET Online Scanner
Note: ESET was designed to run with Internet Explorer, compatibility with other browsers has been added recently but if you find difficulty, go to using Internet Explorer

• Click the green ESET Online Scanner box
• Tick the box next to YES, I accept the Terms of Use
• You may see a panel towards the top of the screen telling you the website wants to install an addon... click and allow it to install. If your firewall asks whether you want to allow installation, say yes.
• Click Start and if your security program asks you if you want to allow the program, click yes.
• If you anti-virus is active you may see a panel appear warning you that this may affect performance. Disabling the programs listed may speed things along.
• Make sure that the options Remove found threats and Scan archives are checked (do not worry about advanced settings)
• Click Scan (This scan can take several hours, so please be patient)
• Once the scan is completed, you may close the window
• Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt (open Notepad > File > Open and navigate to the log.txt)
• Copy and paste that log as a reply to this topic