Inactive Redirect to Ask or Qbyrd

[Inactive] Redirect to Ask or Qbyrd

Hello,

I have an issue where I am redirected occasionally to either Ask.com or Qbyrd -- please advise. GMER gave the following message for all three times I performed scans: "GMER hasn't detected any system modification." Also, please note I have two external hard drives, so would appreciate if you would advise on how to clean them up as well. Thanks! (logs below)

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5499

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

1/10/2011 3:20:51 PM
mbam-log-2011-01-10 (15-20-51).txt

Scan type: Quick scan
Objects scanned: 156251
Time elapsed: 3 minute(s), 15 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

GMER ran twice and gave the following message:
“GMER hasn’t detected any system modification" (text file blank!?)
MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows 7 Home Premium Edition
Windows Information: (build 7600), 64-bit
Base Board Manufacturer: Hewlett-Packard
BIOS Manufacturer: Hewlett-Packard
System Manufacturer: Hewlett-Packard
System Product Name: HP G60 Notebook PC
Logical Drives Mask: 0x0000001c

Kernel Drivers (total 243):
0x02C11000 \SystemRoot\system32\ntoskrnl.exe
0x031ED000 \SystemRoot\system32\hal.dll
0x00BB2000 \SystemRoot\system32\kdcom.dll
0x00C18000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x00C5C000 \SystemRoot\system32\PSHED.dll
0x00C70000 \SystemRoot\system32\CLFS.SYS
0x00CCE000 \SystemRoot\system32\CI.dll
0x00E64000 \SystemRoot\system32\drivers\Wdf01000.sys
0x00F08000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x00F17000 \SystemRoot\system32\DRIVERS\ACPI.sys
0x00F6E000 \SystemRoot\system32\DRIVERS\WMILIB.SYS
0x00F77000 \SystemRoot\system32\DRIVERS\msisadrv.sys
0x00F81000 \SystemRoot\system32\DRIVERS\pci.sys
0x00FB4000 \SystemRoot\system32\DRIVERS\vdrvroot.sys
0x00FC1000 \SystemRoot\system32\DRIVERS\isapnp.sys
0x00FCA000 \SystemRoot\system32\DRIVERS\mpio.sys
0x00E00000 \SystemRoot\System32\drivers\partmgr.sys
0x00E15000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x00E1E000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x00E2A000 \SystemRoot\system32\DRIVERS\volmgr.sys
0x00D8E000 \SystemRoot\System32\drivers\volmgrx.sys
0x00E3F000 \SystemRoot\system32\DRIVERS\intelide.sys
0x00E47000 \SystemRoot\system32\DRIVERS\PCIIDEX.SYS
0x00E57000 \SystemRoot\system32\DRIVERS\aliide.sys
0x00FF4000 \SystemRoot\system32\DRIVERS\amdide.sys
0x00DEA000 \SystemRoot\system32\DRIVERS\cmdide.sys
0x010F1000 \SystemRoot\System32\drivers\mountmgr.sys
0x0110B000 \SystemRoot\system32\DRIVERS\msdsm.sys
0x01131000 \SystemRoot\system32\DRIVERS\nvraid.sys
0x0115A000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS
0x0118A000 \SystemRoot\system32\DRIVERS\pciide.sys
0x01191000 \SystemRoot\system32\DRIVERS\viaide.sys
0x01224000 \SystemRoot\system32\DRIVERS\iaStorV.sys
0x01342000 \SystemRoot\system32\DRIVERS\atapi.sys
0x0134B000 \SystemRoot\system32\DRIVERS\ataport.SYS
0x01375000 \SystemRoot\system32\DRIVERS\lsi_sas.sys
0x01392000 \SystemRoot\system32\DRIVERS\storport.sys
0x013F4000 \SystemRoot\system32\DRIVERS\msahci.sys
0x01200000 \SystemRoot\system32\DRIVERS\HpSAMD.sys
0x01000000 \SystemRoot\system32\DRIVERS\adp94xx.sys
0x0107B000 \SystemRoot\system32\DRIVERS\adpahci.sys
0x01199000 \SystemRoot\system32\DRIVERS\adpu320.sys
0x011C8000 \SystemRoot\system32\DRIVERS\amdsata.sys
0x01416000 \SystemRoot\system32\DRIVERS\amdsbs.sys
0x0145D000 \SystemRoot\system32\DRIVERS\amdxata.sys
0x01468000 \SystemRoot\system32\DRIVERS\arc.sys
0x01481000 \SystemRoot\system32\DRIVERS\arcsas.sys
0x0149C000 \SystemRoot\system32\DRIVERS\elxstor.sys
0x01523000 \SystemRoot\system32\DRIVERS\iirsp.sys
0x01534000 \SystemRoot\system32\DRIVERS\lsi_fc.sys
0x01553000 \SystemRoot\system32\DRIVERS\lsi_sas2.sys
0x01566000 \SystemRoot\system32\DRIVERS\lsi_scsi.sys
0x01585000 \SystemRoot\system32\DRIVERS\megasas.sys
0x01611000 \SystemRoot\system32\DRIVERS\MegaSR.sys
0x016B5000 \SystemRoot\system32\DRIVERS\nfrd960.sys
0x016C5000 \SystemRoot\system32\DRIVERS\nvstor.sys
0x0183F000 \SystemRoot\system32\DRIVERS\ql2300.sys
0x016F0000 \SystemRoot\system32\DRIVERS\ql40xx.sys
0x019E3000 \SystemRoot\system32\DRIVERS\SiSRaid2.sys
0x01800000 \SystemRoot\system32\DRIVERS\sisraid4.sys
0x01818000 \SystemRoot\system32\DRIVERS\stexstor.sys
0x0174F000 \SystemRoot\system32\DRIVERS\vsmraid.sys
0x01779000 \SystemRoot\system32\drivers\fltmgr.sys
0x01822000 \SystemRoot\system32\drivers\fileinfo.sys
0x01A52000 \SystemRoot\System32\Drivers\Ntfs.sys
0x01591000 \SystemRoot\System32\Drivers\msrpc.sys
0x01A00000 \SystemRoot\System32\Drivers\ksecdd.sys
0x01C74000 \SystemRoot\System32\Drivers\cng.sys
0x01CE7000 \SystemRoot\System32\drivers\pcw.sys
0x01CF8000 \SystemRoot\System32\Drivers\Fs_Rec.sys
0x01D02000 \SystemRoot\system32\drivers\ndis.sys
0x01C00000 \SystemRoot\system32\drivers\NETIO.SYS
0x01A1A000 \SystemRoot\System32\Drivers\ksecpkg.sys
0x01E00000 \SystemRoot\System32\drivers\tcpip.sys
0x020C6000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x02110000 \SystemRoot\system32\DRIVERS\wd.sys
0x02118000 \SystemRoot\system32\DRIVERS\volsnap.sys
0x02164000 \SystemRoot\System32\Drivers\spldr.sys
0x0216C000 \SystemRoot\system32\DRIVERS\sbp2port.sys
0x02189000 \SystemRoot\System32\drivers\rdyboost.sys
0x021C3000 \SystemRoot\System32\Drivers\mup.sys
0x021D5000 \SystemRoot\System32\drivers\hwpolicy.sys
0x02000000 \SystemRoot\System32\DRIVERS\fvevol.sys
0x0203A000 \SystemRoot\system32\DRIVERS\disk.sys
0x02088000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x017C5000 \SystemRoot\system32\DRIVERS\MpFilter.sys
0x04267000 \SystemRoot\System32\Drivers\SRTSP64.SYS
0x03415000 \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20110110.004\EX64.SYS
0x042DC000 \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
0x035CF000 \??\C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20110110.004\ENG64.SYS
0x03400000 \SystemRoot\System32\Drivers\SRTSPX64.SYS
0x035EF000 \SystemRoot\System32\Drivers\Null.SYS
0x035F8000 \SystemRoot\System32\Drivers\Beep.SYS
0x04312000 \SystemRoot\System32\drivers\vga.sys
0x04320000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x04345000 \SystemRoot\System32\drivers\watchdog.sys
0x04355000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x0435E000 \SystemRoot\system32\drivers\rdpencdd.sys
0x04367000 \SystemRoot\system32\drivers\rdprefmp.sys
0x04370000 \SystemRoot\System32\Drivers\Msfs.SYS
0x0437B000 \SystemRoot\System32\Drivers\Npfs.SYS
0x0438C000 \SystemRoot\system32\DRIVERS\tdx.sys
0x043AA000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x04890000 \SystemRoot\system32\drivers\afd.sys
0x0491A000 \SystemRoot\System32\DRIVERS\netbt.sys
0x0495F000 \SystemRoot\system32\DRIVERS\wfplwf.sys
0x04968000 \SystemRoot\system32\DRIVERS\pacer.sys
0x0498E000 \SystemRoot\system32\DRIVERS\vwififlt.sys
0x049A4000 \SystemRoot\system32\DRIVERS\netbios.sys
0x049D0000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x049EB000 \SystemRoot\system32\DRIVERS\termdd.sys
0x04800000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x04851000 \SystemRoot\system32\drivers\nsiproxy.sys
0x0485D000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x04A3C000 \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
0x04AB2000 \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
0x04AD7000 \SystemRoot\System32\drivers\discache.sys
0x04AE6000 \SystemRoot\System32\Drivers\dfsc.sys
0x04B04000 \SystemRoot\system32\DRIVERS\blbdrive.sys
0x04B15000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x04B3B000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x04B51000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
0x05028000 \SystemRoot\system32\DRIVERS\igdkmd64.sys
0x04486000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x0457A000 \SystemRoot\System32\drivers\dxgmms1.sys
0x045C0000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x04400000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x04456000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x045CD000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x05730000 \SystemRoot\system32\DRIVERS\Rt64win7.sys
0x04681000 \SystemRoot\system32\DRIVERS\athrx.sys
0x04600000 \SystemRoot\system32\DRIVERS\vwifibus.sys
0x0460D000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x0462B000 \SystemRoot\system32\DRIVERS\HpqKbFiltr.sys
0x04637000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x05769000 \SystemRoot\system32\DRIVERS\SynTP.sys
0x04646000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x04648000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x04657000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0x0465C000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
0x04669000 \SystemRoot\system32\DRIVERS\CompositeBus.sys
0x04467000 \SystemRoot\system32\DRIVERS\AgileVpn.sys
0x057B2000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x045F1000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x04B5A000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x057D6000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x05000000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x04B89000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x057F1000 \SystemRoot\system32\DRIVERS\taphss.sys
0x04679000 \SystemRoot\system32\DRIVERS\swenum.sys
0x04BA3000 \SystemRoot\system32\DRIVERS\ks.sys
0x04BE6000 \SystemRoot\system32\DRIVERS\umbus.sys
0x04200000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x04A00000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x05A94000 \SystemRoot\system32\drivers\CHDRT64.sys
0x05B42000 \SystemRoot\system32\drivers\portcls.sys
0x05B7F000 \SystemRoot\system32\drivers\drmk.sys
0x05BA1000 \SystemRoot\system32\drivers\ksthunk.sys
0x05BA7000 \SystemRoot\system32\DRIVERS\CAXHWAZL.sys
0x04C43000 \SystemRoot\system32\DRIVERS\CAX_DPV.sys
0x05EBE000 \SystemRoot\system32\DRIVERS\CAX_CNXT.sys
0x05F89000 \SystemRoot\system32\drivers\modem.sys
0x05F98000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x05FB5000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x05FC3000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x05FDC000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x05E00000 \SystemRoot\System32\Drivers\usbvideo.sys
0x05E2E000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x00070000 \SystemRoot\System32\win32k.sys
0x05E3B000 \SystemRoot\System32\drivers\Dxapi.sys
0x05E47000 \SystemRoot\system32\DRIVERS\monitor.sys
0x00440000 \SystemRoot\System32\TSDDD.dll
0x007C0000 \SystemRoot\System32\cdd.dll
0x05E55000 \SystemRoot\system32\DRIVERS\cdfs.sys
0x00950000 \SystemRoot\System32\ATMFD.DLL
0x05E72000 \SystemRoot\System32\Drivers\crashdmp.sys
0x05E80000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x05E8C000 \SystemRoot\System32\Drivers\dump_msahci.sys
0x05E97000 \SystemRoot\System32\Drivers\dump_dumpfve.sys
0x04DB7000 \SystemRoot\system32\drivers\luafv.sys
0x04DDA000 \SystemRoot\system32\drivers\WudfPf.sys
0x05FE5000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x05A00000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x05EAA000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x04C00000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x03259000 \SystemRoot\system32\drivers\HTTP.sys
0x03321000 \SystemRoot\system32\DRIVERS\bowser.sys
0x0333F000 \SystemRoot\System32\drivers\mpsdrv.sys
0x03357000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x03384000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x033D2000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x03200000 \SystemRoot\system32\DRIVERS\MpNWMon.sys
0x03210000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys
0x04E6E000 \SystemRoot\system32\drivers\peauth.sys
0x04F14000 \SystemRoot\System32\Drivers\secdrv.SYS
0x04F1F000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x04F4C000 \SystemRoot\System32\drivers\tcpipreg.sys
0x04F5E000 \SystemRoot\system32\DRIVERS\XAudio64.sys
0x04F66000 \SystemRoot\System32\DRIVERS\srv2.sys
0x05C05000 \SystemRoot\System32\DRIVERS\srv.sys
0x05D23000 \SystemRoot\system32\DRIVERS\asyncmac.sys
0x05D2E000 \SystemRoot\system32\drivers\mrxdav.sys
0x05D56000 \SystemRoot\system32\DRIVERS\NisDrvWFP.sys
0x77680000 \Windows\System32\ntdll.dll
0x483A0000 \Windows\System32\smss.exe
0xFF9A0000 \Windows\System32\apisetschema.dll
0xFF1E0000 \Windows\System32\autochk.exe
0x77850000 \Windows\System32\normaliz.dll
0xFF980000 \Windows\System32\nsi.dll
0xFF8B0000 \Windows\System32\usp10.dll
0xFF830000 \Windows\System32\shlwapi.dll
0xFF720000 \Windows\System32\msctf.dll
0xFF640000 \Windows\System32\advapi32.dll
0xFF510000 \Windows\System32\wininet.dll
0xFF300000 \Windows\System32\ole32.dll
0xFF180000 \Windows\System32\urlmon.dll
0xFF130000 \Windows\System32\ws2_32.dll
0xFE3A0000 \Windows\System32\shell32.dll
0xFE300000 \Windows\System32\clbcatq.dll
0xFE2F0000 \Windows\System32\lpk.dll
0x77580000 \Windows\System32\user32.dll
0xFE280000 \Windows\System32\gdi32.dll
0x77460000 \Windows\System32\kernel32.dll
0xFE1E0000 \Windows\System32\msvcrt.dll
0xFE140000 \Windows\System32\comdlg32.dll
0xFE110000 \Windows\System32\imm32.dll
0xFE030000 \Windows\System32\oleaut32.dll
0xFDFE0000 \Windows\System32\Wldap32.dll
0xFDFC0000 \Windows\System32\sechost.dll
0xFDE90000 \Windows\System32\rpcrt4.dll
0xFDCB0000 \Windows\System32\setupapi.dll
0xFDC30000 \Windows\System32\difxapi.dll
0xFDC10000 \Windows\System32\imagehlp.dll
0xFD9B0000 \Windows\System32\iertutil.dll
0x77840000 \Windows\System32\psapi.dll
0xFD990000 \Windows\System32\devobj.dll
0xFD820000 \Windows\System32\crypt32.dll
0xFD780000 \Windows\System32\comctl32.dll
0xFD740000 \Windows\System32\cfgmgr32.dll
0xFD6D0000 \Windows\System32\KernelBase.dll
0xFD690000 \Windows\System32\wintrust.dll
0xFD680000 \Windows\System32\msasn1.dll
0x77830000 \Windows\SysWOW64\normaliz.dll

Processes (total 101):
0 System Idle Process
4 System
300 C:\Windows\System32\smss.exe
404 csrss.exe
456 C:\Windows\System32\wininit.exe
464 csrss.exe
512 C:\Windows\System32\services.exe
528 C:\Windows\System32\lsass.exe
552 C:\Windows\System32\lsm.exe
560 C:\Windows\System32\winlogon.exe
684 C:\Windows\System32\svchost.exe
764 C:\Windows\System32\svchost.exe
852 C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
928 C:\Windows\System32\svchost.exe
964 C:\Windows\System32\svchost.exe
1004 C:\Windows\System32\svchost.exe
452 C:\Windows\System32\svchost.exe
1092 C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe
1160 C:\Windows\System32\svchost.exe
1240 C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
1576 C:\Windows\System32\spoolsv.exe
1608 C:\Windows\System32\svchost.exe
1776 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
1816 C:\Program Files (x86)\Bonjour\mDNSResponder.exe
1868 C:\Windows\System32\svchost.exe
1908 C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
1976 C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
2008 C:\Windows\System32\svchost.exe
1064 C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
1528 C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
1432 C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
1952 C:\Windows\System32\svchost.exe
1372 C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe
2212 C:\Program Files (x86)\Seagate Replica\bin\ReplicaSysMon.exe
2420 C:\Windows\System32\taskhost.exe
2488 C:\Windows\System32\dwm.exe
2532 C:\Windows\explorer.exe
2716 C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Autoplay.exe
2820 C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Svc.exe
2920 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
2928 C:\Windows\System32\igfxtray.exe
2944 C:\Windows\System32\hkcmd.exe
2984 C:\Windows\System32\igfxpers.exe
3052 C:\Windows\System32\igfxsrvc.exe
1632 C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
2156 C:\Program Files\Java\jre6\bin\jusched.exe
2152 C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Tray.exe
3036 C:\Program Files\Microsoft Security Client\msseces.exe
3180 C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
3216 C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
3324 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
3376 C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SmcGui.exe
3388 C:\Windows\System32\StikyNot.exe
3516 C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
3600 C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe
3708 C:\Windows\System32\SearchIndexer.exe
3888 C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
4004 C:\Users\Laptop mini\AppData\Roaming\Dropbox\bin\Dropbox.exe
3752 C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
2016 C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
3308 C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe
1260 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
876 C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
1744 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
4152 C:\Program Files (x86)\iTunes\iTunesHelper.exe
4236 C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
4280 WmiPrvSE.exe
4680 C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
4812 C:\Program Files\iPod\bin\iPodService.exe
4932 C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
5016 C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
4468 C:\Program Files (x86)\Hotspot Shield\bin\openvpntray.exe
4332 C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
2224 C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
5224 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe
3140 C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
1408 C:\Program Files\Windows Media Player\wmpnetwk.exe
676 C:\Windows\System32\svchost.exe
5168 C:\Windows\SysWOW64\notepad.exe
2996 C:\Program Files (x86)\Internet Explorer\ielowutil.exe
4588 C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
5908 C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
4808 C:\Windows\splwow64.exe
5968 C:\Windows\explorer.exe
3628 C:\Windows\System32\wuauclt.exe
5512 C:\Program Files (x86)\Internet Explorer\iexplore.exe
6000 C:\Program Files (x86)\Internet Explorer\iexplore.exe
5928 C:\Program Files (x86)\Internet Explorer\iexplore.exe
5028 C:\Program Files (x86)\Internet Explorer\iexplore.exe
4920 C:\Program Files (x86)\Internet Explorer\iexplore.exe
4496 C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
5824 C:\Windows\System32\rundll32.exe
5140 C:\Windows\servicing\TrustedInstaller.exe
2968 C:\Windows\System32\taskhost.exe
2836 C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
880 C:\Windows\System32\SearchProtocolHost.exe
3640 C:\Windows\System32\SearchFilterHost.exe
5528 C:\Windows\System32\audiodg.exe
504

“DDS.txtâ€

DDS (Ver_10-12-12.01) - NTFS_AMD64
Run by Laptop mini at 17:07:29.41 on Mon 01/10/2011
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_22
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3003.1227 [GMT -4:00]

AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
AV: Symantec Endpoint Protection *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Symantec Endpoint Protection *Enabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Windows\system32\svchost.exe -k HsfXAudioService
C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\Program Files (x86)\Seagate Replica\bin\ReplicaSysMon.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Autoplay.exe
C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Svc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Tray.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SmcGui.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Users\Laptop mini\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
C:\Program Files (x86)\Hotspot Shield\bin\openvpntray.exe
C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe
C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\splwow64.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Windows\system32\rundll32.exe
C:\Windows\servicing\TrustedInstaller.exe
c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
C:\Users\Laptop mini\Desktop\MBRCheck.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Laptop mini\Desktop\dds.pif
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO: vShare Plugin: {043c5167-00bb-4324-af7e-62013faedacf} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL
BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: Hotspot Shield Class: {f9e4a054-e9b1-4bc3-83a3-76a1ae736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
TB: Microsoft Live Search Toolbar: {1e61ed7c-7cb8-49d6-b9e9-ab4c880c8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
TB: vShare Plugin: {043c5167-00bb-4324-af7e-62013faedacf} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
TB: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
uRun: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
uRun: [Google Update] "C:\Users\Laptop mini\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe "
mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
mRun: [<NO NAME>]
mRun: [ccApp] "C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe "
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe "
mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe "
mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe "
mRunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
StartupFolder: C:\Users\LAPTOP~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Laptop mini\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\Users\LAPTOP~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
DPF: {7340F0E4-AEDA-47C6-8971-9DB314030BD7} - hxxp://websp.rossmed.edu.dm/w/static/amc/h264_decoder.cab
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {BA7A56EB-D1B9-443B-96E9-086532A378F1} - hxxp://websp.rossmed.edu.dm/w/static/amc/aac_decoder.cab
DPF: {BEA7310D-06C4-4339-A784-DC3804819809} - hxxp://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_7/PhotoCenter_ActiveX_Control.cab
DPF: {C32FE9F1-A857-48B0-B7BF-065B5792F28D} - hxxp://websp.rossmed.edu.dm/w/static/amc/mpeg4_decoder.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe "
BHO-X64: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
BHO-X64: Hotspot Shield Class: {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll
TB-X64: {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File
TB-X64: {043C5167-00BB-4324-AF7E-62013FAEDACF} - No File
EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File
mRun-x64: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
mRun-x64: [IgfxTray] C:\Windows\system32\igfxtray.exe
mRun-x64: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
mRun-x64: [Persistence] C:\Windows\system32\igfxpers.exe
mRun-x64: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
mRun-x64: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe "
mRun-x64: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
SEH-X64: Groove GFS Stub Execution Hook: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL

================= FIREFOX ===================

FF - ProfilePath - C:\Users\LAPTOP~1\AppData\Roaming\Mozilla\Firefox\Profiles\891k3nxu.default\
FF - component: C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Veetle\Player\npvlc.dll
FF - plugin: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\Laptop mini\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: C:\Users\Laptop mini\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
FF - plugin: C:\Users\Laptop mini\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - HiddenExtension: Java Console: No Registry Reference - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Extension: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Extension: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}

============= SERVICES / DRIVERS ===============

R1 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2010-10-24 188928]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-10-14 92216]
R2 HsfXAudioService;HsfXAudioService;C:\Windows\system32\svchost.exe -k HsfXAudioService [2009-7-13 27136]
R2 HssWd;Hotspot Shield Monitoring Service;C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe -product HSS --> C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe -product HSS [?]
R2 ReplicaSysMon;Seagate Replica System Monitor;C:\Program Files (x86)\Seagate Replica\bin\ReplicaSysMon.exe [2010-12-30 416208]
R2 Seagate-Replica-Svc;Seagate Replica Service;C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Svc.exe [2010-12-30 1947600]
R2 Symantec AntiVirus;Symantec Endpoint Protection;C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe [2010-11-2 1831024]
R3 CAXHWAZL;CAXHWAZL;C:\Windows\System32\drivers\CAXHWAZL.sys [2010-4-13 292864]
R3 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-3-13 227896]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-5-30 132656]
R3 MpNWMon;Microsoft Malware Protection Network Driver;C:\Windows\System32\drivers\MpNWMon.sys [2010-10-24 40832]
R3 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2010-10-24 72064]
R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616]
R3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-4-13 215040]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-3-25 30969208]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-3-13 216064]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2010-9-28 51712]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-5-9 1255736]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]

=============== Created Last 30 ================

2011-01-10 21:01:41 8199504 ----a-w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\{FEEF167B-B399-4314-9B93-1302CFC24F35}\mpengine.dll
2011-01-10 19:15:36 -------- d-----w- C:\Users\LAPTOP~1\AppData\Roaming\Malwarebytes
2011-01-10 19:15:20 38224 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
2011-01-10 19:15:19 -------- d-----w- C:\PROGRA~3\Malwarebytes
2011-01-10 19:15:15 24152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-01-10 19:15:15 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-01-09 04:28:56 8199504 ----a-w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-01-07 06:50:49 601424 ------w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\{20262CE4-B839-4D90-A057-D7BE831AFD62}\gapaengine.dll
2011-01-07 06:44:56 -------- d-----w- C:\Program Files (x86)\Microsoft Security Client
2011-01-07 06:44:38 -------- d-----w- C:\Program Files\Microsoft Security Client
2011-01-07 06:44:20 374664 ----a-w- C:\Windows\System32\drivers\netio.sys
2011-01-04 17:04:19 -------- d-----w- C:\Program Files\iPod
2011-01-04 17:04:14 -------- d-----w- C:\Program Files\iTunes
2011-01-04 17:04:14 -------- d-----w- C:\Program Files (x86)\iTunes
2010-12-31 16:07:08 15712 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\c63d36331cba90422\MeshBetaRemover.exe
2010-12-31 16:06:48 94040 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\ba5a21451cba9041a\DSETUP.dll
2010-12-31 16:06:48 525656 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\ba5a21451cba9041a\DXSETUP.exe
2010-12-31 16:06:48 1691480 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\ba5a21451cba9041a\dsetup32.dll
2010-12-31 16:06:47 94040 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\b913b9cd1cba90419\DSETUP.dll
2010-12-31 16:06:47 525656 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\b913b9cd1cba90419\DXSETUP.exe
2010-12-31 16:06:47 1691480 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\b913b9cd1cba90419\dsetup32.dll
2010-12-31 16:05:42 -------- d-----w- C:\Users\LAPTOP~1\AppData\Local\Windows Live
2010-12-30 15:46:36 -------- d-----w- C:\Program Files\Seagate Replica
2010-12-30 15:46:36 -------- d-----w- C:\Program Files (x86)\Seagate Replica
2010-12-24 17:52:20 -------- d-----w- C:\Program Files (x86)\CueCard
2010-12-24 01:56:59 -------- d-----w- C:\PROGRA~3\{23D58E70-3B83-4B83-A227-68770F84F5EC}
2010-12-16 04:29:59 112000 ----a-w- C:\Windows\System32\consent.exe
2010-12-16 04:28:59 1638912 ----a-w- C:\Windows\System32\mshtml.tlb
2010-12-15 15:09:22 -------- d-----w- C:\Users\LAPTOP~1\AppData\Roaming\Dropbox
2010-12-13 01:10:23 737072 ----a-w- C:\PROGRA~3\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-4\Microsoft.MediaCenter.Sports.UI.dll

==================== Find3M ====================

2010-11-29 21:38:30 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx
2010-11-29 21:38:30 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts
2010-11-12 18:46:58 4280320 ----a-w- C:\Windows\SysWow64\GPhotos.scr
2010-11-09 19:13:39 172592 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS
2010-11-05 22:01:31 0 ----a-w- C:\Users\Laptop mini\.uc-4553a8e7aca626914452d267f9b85fd5.laptop mini.laptopmini-pc.tmp
2010-11-04 06:35:53 1194496 ----a-w- C:\Windows\System32\wininet.dll
2010-11-04 06:31:34 57856 ----a-w- C:\Windows\System32\licmgr10.dll
2010-11-04 05:52:17 978944 ----a-w- C:\Windows\SysWow64\wininet.dll
2010-11-04 05:48:36 44544 ----a-w- C:\Windows\SysWow64\licmgr10.dll
2010-11-04 05:16:14 482816 ----a-w- C:\Windows\System32\html.iec
2010-11-04 04:41:26 386048 ----a-w- C:\Windows\SysWow64\html.iec
2010-11-04 04:08:54 1638912 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2010-11-02 05:18:17 524288 ----a-w- C:\Windows\System32\wmicmiplugin.dll
2010-11-02 05:17:38 473600 ----a-w- C:\Windows\System32\taskcomp.dll
2010-11-02 05:17:38 1169408 ----a-w- C:\Windows\System32\taskschd.dll
2010-11-02 05:16:53 1114624 ----a-w- C:\Windows\System32\schedsvc.dll
2010-11-02 05:10:47 464384 ----a-w- C:\Windows\System32\taskeng.exe
2010-11-02 05:10:32 285696 ----a-w- C:\Windows\System32\schtasks.exe
2010-11-02 04:40:36 496128 ----a-w- C:\Windows\SysWow64\taskschd.dll
2010-11-02 04:40:36 305152 ----a-w- C:\Windows\SysWow64\taskcomp.dll
2010-11-02 04:34:44 192000 ----a-w- C:\Windows\SysWow64\taskeng.exe
2010-11-02 04:34:33 179712 ----a-w- C:\Windows\SysWow64\schtasks.exe
2010-11-02 04:15:14 87368 ----a-w- C:\Windows\SysWow64\FwsVpn.dll
2010-11-02 04:15:14 137544 ----a-w- C:\Windows\SysWow64\SymVPN.dll
2010-11-02 04:15:14 137544 ----a-w- C:\Windows\System32\SymVPN.dll
2010-11-02 04:15:12 482352 ----a-w- C:\Windows\System32\drivers\srtspl64.sys
2010-11-02 04:15:12 447536 ----a-w- C:\Windows\System32\drivers\srtsp64.sys
2010-11-02 04:15:12 32304 ----a-w- C:\Windows\System32\drivers\srtspx64.sys
2010-10-27 17:28:46 11320 ----a-w- C:\Windows\help\OEM\Scripts\HPSARedirectorLauncher.exe
2010-10-27 05:06:22 2048 ----a-w- C:\Windows\System32\tzres.dll
2010-10-27 04:32:36 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2010-10-25 01:25:38 72064 ----a-w- C:\Windows\System32\drivers\NisDrvWFP.sys
2010-10-25 01:25:38 40832 ----a-w- C:\Windows\System32\drivers\MpNWMon.sys
2010-10-25 01:25:38 188928 ----a-w- C:\Windows\System32\drivers\MpFilter.sys
2010-10-20 05:20:01 46080 ----a-w- C:\Windows\System32\atmlib.dll
2010-10-20 04:54:18 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll
2010-10-20 03:09:15 3124224 ----a-w- C:\Windows\System32\win32k.sys
2010-10-20 03:05:46 367104 ----a-w- C:\Windows\System32\atmfd.dll
2010-10-20 02:58:41 294400 ----a-w- C:\Windows\SysWow64\atmfd.dll
2010-10-19 20:51:33 270720 ------w- C:\Windows\System32\MpSigStub.exe
2010-10-16 05:19:41 395776 ----a-w- C:\Windows\System32\webio.dll
2010-10-16 04:36:10 314368 ----a-w- C:\Windows\SysWow64\webio.dll

============= FINISH: 17:08:21.44 ===============

 

Redirect to Ask or Qbyrd

Part 2 of original post; redirect to ask or qbyrd, also asking for advice on external hard drives (I have two) - thank you

“Attach.txtâ€

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.01)

Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 4/19/2010 6:34:26 PM
System Uptime: 1/10/2011 3:10:25 PM (2 hours ago)

Motherboard: Hewlett-Packard | | 3612
Processor: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz | CPU | 1197/800mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 220 GiB total, 65.822 GiB free.
D: is FIXED (NTFS) - 13 GiB total, 1.937 GiB free.
E: is CDROM (CDFS)

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP71: 12/31/2010 12:03:59 PM - Windows Update
RP72: 1/2/2011 8:54:55 PM - Windows Backup
RP73: 1/2/2011 9:27:07 PM - HPSF Applying updates
RP74: 1/7/2011 2:28:36 AM - OTL Restore Point
RP75: 1/7/2011 2:43:52 AM - Windows Update
RP76: 1/7/2011 2:49:22 AM - Windows Update
RP77: 1/7/2011 3:00:10 AM - Windows Update
RP78: 1/9/2011 12:28:05 AM - Windows Update
RP79: 1/9/2011 9:38:42 PM - Windows Update
RP80: 1/10/2011 3:55:35 PM - Windows Update

==== Installed Programs ======================

Acrobat.com
ActiveCheck component for HP Active Support Library
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.0 MUI
Adobe Shockwave Player
Apple Application Support
Apple Software Update
Atheros Driver Installation Program
AXIS Media Control Embedded
Caesar 3 Demo
Compatibility Pack for the 2007 Office system
CueCard (remove only)
CyberLink DVD Suite
CyberLink MediaShow
CyberLink PowerDVD 8
CyberLink YouCam
Definition update for Microsoft Office 2010 (KB982726)
Dropbox
ESU for Microsoft Windows 7
Google Talk Plugin
Hotspot Shield 1.47
HP Advisor
HP Customer Experience Enhancements
HP Games
HP Product Detection
HP Quick Launch Buttons
HP Setup
HP Support Assistant
HP Update
HP User Guides 0156
HP Wireless Assistant
HPAsset component for HP Active Support Library
Java Auto Updater
Java(TM) 6 Update 22
Junk Mail filter update
LabelPrint
LightScribe System Software
LiveUpdate 3.3 (Symantec Corporation)
Malwarebytes' Anti-Malware
Master of Orion 3
McAfee Security Scan Plus
MCQE
Microsoft Choice Guard
Microsoft Live Search Toolbar
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Groove MUI (English) 2010
Microsoft Office InfoPath MUI (English) 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Suite Activation Assistant
Microsoft Office Word MUI (English) 2010
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
Moon Tycoon DEMO
Mozilla Firefox (3.6.13)
MSVCRT
muvee Reveal
Norton Online Backup
Picasa 3
Power2Go
PowerDirector
QLBCASL
QuickTime
Realtek 8136 8168 8169 Ethernet Driver
Realtek USB 2.0 Card Reader
Recovery Manager
Ross Net Drive 2.0
Seagate Replica v3.0.1801.8554
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft Office 2010 (KB2289078)
Security Update for Microsoft Office 2010 (KB2289161)
Security Update for Microsoft Publisher 2010 (KB2409055)
Security Update for Microsoft Word 2010 (KB2345000)
Sierra Utilities
Skype Toolbars
Skypeâ„¢ 5.0
SmartWebPrinting
Update for Microsoft Office 2010 (KB2202188)
Update for Microsoft Office 2010 (KB2413186)
Update for Microsoft OneNote 2010 (KB2433299)
Update for Microsoft Outlook Social Connector (KB2289116)
Ustream Producer
Veetle TV 0.9.18
vShare Plugin
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
WinRAR archiver

==== Event Viewer Messages From Past Week ========

1/9/2011 12:28:14 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.95.3426.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.6402.0 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/9/2011 12:28:14 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.95.3426.0 Update Source: Microsoft Update Server Update Stage: Install Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.6402.0 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/9/2011 12:28:14 AM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.95.3426.0 Update Source: Microsoft Update Server Update Stage: Download Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.6402.0 Error code: 0x80240016 Error description: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support.
1/4/2011 10:06:49 AM, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk2\DR2.
1/4/2011 1:01:36 PM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
1/10/2011 3:24:24 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.95.3548.0 Update Source: Microsoft Update Server Update Stage: Download Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.6402.0 Error code: 0x80240022 Error description: The program can't check for definition updates.
1/10/2011 3:24:24 PM, Error: Microsoft Antimalware [2001] - Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.95.3548.0 Update Source: Microsoft Update Server Update Stage: Download Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.6402.0 Error code: 0x80240022 Error description: The program can't check for definition updates.
1/10/2011 3:03:45 PM, Error: Service Control Manager [7031] - The Symantec Settings Manager service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 100 milliseconds: Restart the service.
1/10/2011 3:03:45 PM, Error: Service Control Manager [7031] - The Symantec Event Manager service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 200 milliseconds: Restart the service.
1/10/2011 1:15:42 PM, Error: bowser [8003] - The master browser has received a server announcement from the computer JENNIFER-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{BF72123D-34D0-451D-A605-72A3B3DD0752}. The master browser is stopping or an election is being forced.
1/10/2011 1:07:12 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ReplicaSysMon service.

==== End Of File ===========================

 

Whenever I try to download the uninstaller tool, it gives me...a redirect to qbyrd or ask. I did uninstall all Norton products now though.

I forgot to mention that MBR "found non-standard or infected MBR" and asked me to hit Y or N...

 

Thanks for the link; it tried to block that one too until I ran it in firefox. Here's the logs from combofix & MBR; do you need me to rerun all the scans (the full scan from Microsoft Security Essentials took several days, that's why I ask)? Thanks again

COMBOFIX:
ComboFix 11-01-12.04 - Laptop mini 01/13/2011 18:49:45.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3003.1822 [GMT -4:00]
Running from: c:\users\Laptop mini\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\Laptop mini\AppData\Local\Temp\F2D6.tmp
c:\users\LAPTOP~1\AppData\Local\Temp\F2D6.tmp

.
((((((((((((((((((((((((( Files Created from 2010-12-13 to 2011-01-13 )))))))))))))))))))))))))))))))
.

2011-01-13 22:57 . 2011-01-13 22:57 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-13 19:44 . 2010-11-10 01:35 8199504 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{16C3006B-5AD8-49A2-98D4-83EA65481543}\mpengine.dll
2011-01-12 23:02 . 2011-01-12 23:02 -------- d-----w- c:\users\Laptop mini\AppData\Roaming\Amazon
2011-01-12 23:02 . 2011-01-12 23:02 -------- d-----w- c:\users\Laptop mini\AppData\Local\Amazon
2011-01-12 17:23 . 2010-10-16 05:17 720896 ----a-w- c:\windows\system32\odbc32.dll
2011-01-12 17:23 . 2010-10-16 04:34 573440 ----a-w- c:\windows\SysWow64\odbc32.dll
2011-01-12 17:23 . 2010-10-16 05:16 1425408 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-01-12 17:23 . 2010-10-16 05:16 466944 ----a-w- c:\program files\Common Files\System\ado\msadomd.dll
2011-01-12 17:23 . 2010-10-16 05:16 495616 ----a-w- c:\program files\Common Files\System\ado\msadox.dll
2011-01-12 17:23 . 2010-10-16 05:16 258048 ----a-w- c:\program files\Common Files\System\msadc\msadco.dll
2011-01-12 17:23 . 2010-10-16 04:33 987136 ----a-w- c:\program files (x86)\Common Files\System\ado\msado15.dll
2011-01-12 17:23 . 2010-10-16 04:33 372736 ----a-w- c:\program files (x86)\Common Files\System\ado\msadox.dll
2011-01-12 17:23 . 2010-10-16 04:33 352256 ----a-w- c:\program files (x86)\Common Files\System\ado\msadomd.dll
2011-01-12 17:23 . 2010-10-16 04:33 208896 ----a-w- c:\program files (x86)\Common Files\System\msadc\msadco.dll
2011-01-10 19:15 . 2011-01-10 19:15 -------- d-----w- c:\users\Laptop mini\AppData\Roaming\Malwarebytes
2011-01-10 19:15 . 2010-12-20 22:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-01-10 19:15 . 2011-01-10 19:15 -------- d-----w- c:\programdata\Malwarebytes
2011-01-10 19:15 . 2011-01-10 19:15 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-01-10 19:15 . 2010-12-20 22:08 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-09 04:28 . 2010-11-10 01:35 8199504 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-01-07 06:50 . 2011-01-07 06:50 601424 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{20262CE4-B839-4D90-A057-D7BE831AFD62}\gapaengine.dll
2011-01-07 06:44 . 2011-01-07 06:44 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2011-01-07 06:44 . 2011-01-07 06:45 -------- d-----w- c:\program files\Microsoft Security Client
2011-01-07 06:44 . 2010-04-09 11:06 374664 ----a-w- c:\windows\system32\drivers\netio.sys
2011-01-04 17:04 . 2011-01-04 17:04 -------- d-----w- c:\program files\iPod
2011-01-04 17:04 . 2011-01-04 17:05 -------- d-----w- c:\program files\iTunes
2011-01-04 17:04 . 2011-01-04 17:05 -------- d-----w- c:\program files (x86)\iTunes
2011-01-03 01:24 . 2011-01-03 01:24 -------- d-----w- c:\program files (x86)\Common Files\Skype
2010-12-31 16:07 . 2010-12-31 16:07 15712 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\c63d36331cba90422\MeshBetaRemover.exe
2010-12-31 16:06 . 2010-12-31 16:06 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ba5a21451cba9041a\DXSETUP.exe
2010-12-31 16:06 . 2010-12-31 16:06 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ba5a21451cba9041a\DSETUP.dll
2010-12-31 16:06 . 2010-12-31 16:06 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ba5a21451cba9041a\dsetup32.dll
2010-12-31 16:06 . 2010-12-31 16:06 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\b913b9cd1cba90419\DSETUP.dll
2010-12-31 16:06 . 2010-12-31 16:06 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\b913b9cd1cba90419\DXSETUP.exe
2010-12-31 16:06 . 2010-12-31 16:06 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\b913b9cd1cba90419\dsetup32.dll
2010-12-31 16:05 . 2010-12-31 16:05 -------- d-----w- c:\users\Laptop mini\AppData\Local\Windows Live
2010-12-31 16:04 . 2010-05-23 08:35 206848 ----a-w- c:\windows\system32\mfps.dll
2010-12-31 16:04 . 2010-05-23 08:35 257024 ----a-w- c:\windows\system32\mfreadwrite.dll
2010-12-31 16:04 . 2010-05-23 10:11 196608 ----a-w- c:\windows\SysWow64\mfreadwrite.dll
2010-12-31 16:04 . 2010-05-23 10:15 1619456 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2010-12-31 16:04 . 2010-05-23 08:37 1888256 ----a-w- c:\windows\system32\WMVDECOD.DLL
2010-12-31 16:04 . 2010-05-23 08:35 4068864 ----a-w- c:\windows\system32\mf.dll
2010-12-31 16:04 . 2010-05-23 10:11 3181568 ----a-w- c:\windows\SysWow64\mf.dll
2010-12-30 15:46 . 2010-12-30 15:46 -------- d-----w- c:\program files (x86)\Seagate Replica
2010-12-30 15:46 . 2010-12-30 15:46 -------- d-----w- c:\program files\Seagate Replica
2010-12-30 15:43 . 2010-12-30 15:43 -------- d-----w- c:\users\Laptop mini\AppData\Roaming\Leadertech
2010-12-24 17:52 . 2010-12-24 17:52 -------- d-----w- c:\program files (x86)\CueCard
2010-12-24 01:56 . 2010-12-24 01:56 -------- d-----w- c:\programdata\{23D58E70-3B83-4B83-A227-68770F84F5EC}
2010-12-16 04:29 . 2010-10-16 05:23 112000 ----a-w- c:\windows\system32\consent.exe
2010-12-16 04:28 . 2010-11-04 04:35 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2010-12-15 15:09 . 2011-01-13 22:59 -------- d-----w- c:\users\Laptop mini\AppData\Roaming\Dropbox

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-24 00:19 . 2010-05-05 14:20 737072 ----a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll
2010-12-24 00:16 . 2010-05-05 14:20 4277016 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2010-12-24 00:16 . 2010-06-04 00:03 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2010-12-24 00:16 . 2010-05-05 14:19 539968 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2010-12-13 01:10 . 2010-12-13 01:10 737072 ----a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-4\Microsoft.MediaCenter.Sports.UI.dll
2010-12-13 01:10 . 2010-05-19 01:22 4277016 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2010-12-13 01:09 . 2010-05-19 01:22 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2010-12-09 01:33 . 2010-12-09 01:33 539968 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2010-11-29 21:38 . 2010-11-29 21:38 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2010-11-29 21:38 . 2010-11-29 21:38 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2010-11-12 18:46 . 2010-11-12 18:46 4280320 ----a-w- c:\windows\SysWow64\GPhotos.scr
2010-10-27 17:28 . 2010-10-27 17:28 11320 ----a-w- c:\windows\help\OEM\Scripts\HPSARedirectorLauncher.exe
2010-10-25 01:25 . 2010-10-25 01:25 72064 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2010-10-25 01:25 . 2010-10-25 01:25 40832 ----a-w- c:\windows\system32\drivers\MpNWMon.sys
2010-10-25 01:25 . 2010-10-25 01:25 188928 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2010-10-19 20:51 . 2010-04-19 22:00 270720 ------w- c:\windows\system32\MpSigStub.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@= "{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\users\Laptop mini\AppData\Roaming\Dropbox\bin\DropboxExt.13.dll

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@= "{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\users\Laptop mini\AppData\Roaming\Dropbox\bin\DropboxExt.13.dll

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@= "{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\users\Laptop mini\AppData\Roaming\Dropbox\bin\DropboxExt.13.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel "= "c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2010-01-22 2363392]
"HPADVISOR "= "c:\program files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-09-29 1685048]
"msnmsgr "= "c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2009-07-27 3883856]
"Google Update "= "c:\users\Laptop mini\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-08-31 136176]
"Skype "= "c:\program files (x86)\Skype\Phone\Skype.exe" [2010-12-03 14944136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe "= "c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-11-24 323640]
"Adobe Reader Speed Launcher "= "c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"HP Software Update "= "c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
"Adobe ARM "= "c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"WirelessAssistant "= "c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2010-03-23 500792]
"SunJavaUpdateSched "= "c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"BCSSync "= "c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"QuickTime Task "= "c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"AppleSyncNotifier "= "c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-12-14 47904]
"iTunesHelper "= "c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-12-13 421160]

c:\users\Laptop mini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Laptop mini\AppData\Roaming\Dropbox\bin\Dropbox.exe [2010-2-26 21979992]
OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2010-3-29 227712]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin "= 5 (0x5)
"ConsentPromptBehaviorUser "= 3 (0x3)
"EnableUIADesktopToggle "= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@= "Service "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@= "Driver "

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-10-25 40832]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-25 72064]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys [2009-06-05 216064]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2010-09-28 51712]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-10 1255736]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-06-10 389120]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-10-14 92216]
S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 HssWd;Hotspot Shield Monitoring Service;c:\program files (x86)\Hotspot Shield\bin\hsswd.exe [2010-06-23 322608]
S2 ReplicaSysMon;Seagate Replica System Monitor;c:\program files (x86)\Seagate Replica\bin\ReplicaSysMon.exe [2010-06-08 416208]
S2 Seagate-Replica-Svc;Seagate Replica Service;c:\program files (x86)\Seagate Replica\bin\Seagate-Replica-Svc.exe [2010-06-08 1947600]
S3 CAXHWAZL;CAXHWAZL;c:\windows\system32\DRIVERS\CAXHWAZL.sys [2009-02-13 292864]
S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-01-12 227896]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-23 215040]


[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2010-01-22 15:06 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder

2011-01-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3565567514-2250541963-1919029519-1001Core.job
- c:\users\Laptop mini\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-31 01:08]

2011-01-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3565567514-2250541963-1919029519-1001UA.job
- c:\users\Laptop mini\AppData\Local\Google\Update\GoogleUpdate.exe [2010-08-31 01:08]

2011-01-10 c:\windows\Tasks\HPCeeScheduleForLaptop mini.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07 12:22]
.

--------- x86-64 -----------


[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2010-06-23 02:49 284208 ----a-w- c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@= "{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 97792 ----a-w- c:\users\Laptop mini\AppData\Roaming\Dropbox\bin\DropboxExt64.13.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@= "{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 97792 ----a-w- c:\users\Laptop mini\AppData\Roaming\Dropbox\bin\DropboxExt64.13.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@= "{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 97792 ----a-w- c:\users\Laptop mini\AppData\Roaming\Dropbox\bin\DropboxExt64.13.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray "= "c:\windows\system32\igfxtray.exe" [2009-08-20 165912]
"HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2009-08-20 387608]
"Persistence "= "c:\windows\system32\igfxpers.exe" [2009-08-20 365592]
"cAudioFilterAgent "= "c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2009-07-14 495104]
"SunJavaUpdateSched "= "c:\program files\Java\jre6\bin\jusched.exe" [2010-03-13 171520]
"MSC "= "c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 1436224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs "=0x0
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
DPF: {7340F0E4-AEDA-47C6-8971-9DB314030BD7} - hxxp://websp.rossmed.edu.dm/w/static/amc/h264_decoder.cab
DPF: {BA7A56EB-D1B9-443B-96E9-086532A378F1} - hxxp://websp.rossmed.edu.dm/w/static/amc/aac_decoder.cab
DPF: {BEA7310D-06C4-4339-A784-DC3804819809} - hxxp://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_7/PhotoCenter_ActiveX_Control.cab
DPF: {C32FE9F1-A857-48B0-B7BF-065B5792F28D} - hxxp://websp.rossmed.edu.dm/w/static/amc/mpeg4_decoder.cab
FF - ProfilePath - c:\users\Laptop mini\AppData\Roaming\Mozilla\Firefox\Profiles\891k3nxu.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - (no file)
HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
AddRemove-{08DB3902-2CE0-474D-BCE3-0177766CE9F1} - c:\program files (x86)\InstallShield Installation Information\{08DB3902-2CE0-474D-BCE3-0177766CE9F1}\setup.exe



[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Seagate-Replica-Svc]
"ImagePath "= "c:\program files (x86)\Seagate Replica\bin\Seagate-Replica-Svc.exe /startedbyscm:FE2355B7-40E2EE35-RebitSvcModule "
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled "=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@= "Shockwave Flash Object "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx "
"ThreadingModel "= "Apartment "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@= "0 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@= "ShockwaveFlash.ShockwaveFlash.10 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@= "{D27CDB6B-AE6D-11cf-96B8-444553540000} "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@= "1.0 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@= "ShockwaveFlash.ShockwaveFlash "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@= "Macromedia Flash Factory Object "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx "
"ThreadingModel "= "Apartment "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@= "FlashFactory.FlashFactory.1 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@= "c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@= "{D27CDB6B-AE6D-11cf-96B8-444553540000} "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@= "1.0 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@= "FlashFactory.FlashFactory "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker4 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution "= "{15727DE6-F92D-4E46-ACB4-0E2C58B31A18} "

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key "= "ActionsPane3 "
"Location "= "c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd "

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Hotspot Shield\bin\openvpnas.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Seagate Replica\bin\Seagate-Replica-Autoplay.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files (x86)\Seagate Replica\bin\Seagate-Replica-Tray.exe
.
**************************************************************************
.
Completion time: 2011-01-13 19:03:49 - machine was rebooted
ComboFix-quarantined-files.txt 2011-01-13 23:03

Pre-Run: 62,990,159,872 bytes free
Post-Run: 62,413,438,976 bytes free

- - End Of File - - 5E99E28CDAAE176BBCE1DF0330C16350

MBR:
MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows 7 Home Premium Edition
Windows Information: (build 7600), 64-bit
Base Board Manufacturer: Hewlett-Packard
BIOS Manufacturer: Hewlett-Packard
System Manufacturer: Hewlett-Packard
System Product Name: HP G60 Notebook PC
Logical Drives Mask: 0x0000001c

Kernel Drivers (total 233):
0x02C61000 \SystemRoot\system32\ntoskrnl.exe
0x02C18000 \SystemRoot\system32\hal.dll
0x00BBF000 \SystemRoot\system32\kdcom.dll
0x00C7F000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x00CC3000 \SystemRoot\system32\PSHED.dll
0x00CD7000 \SystemRoot\system32\CLFS.SYS
0x00D35000 \SystemRoot\system32\CI.dll
0x00E64000 \SystemRoot\system32\drivers\Wdf01000.sys
0x00F08000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x00F17000 \SystemRoot\system32\DRIVERS\ACPI.sys
0x00F6E000 \SystemRoot\system32\DRIVERS\WMILIB.SYS
0x00F77000 \SystemRoot\system32\DRIVERS\msisadrv.sys
0x00F81000 \SystemRoot\system32\DRIVERS\pci.sys
0x00FB4000 \SystemRoot\system32\DRIVERS\vdrvroot.sys
0x00FC1000 \SystemRoot\system32\DRIVERS\isapnp.sys
0x00FCA000 \SystemRoot\system32\DRIVERS\mpio.sys
0x00E00000 \SystemRoot\System32\drivers\partmgr.sys
0x00E15000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x00E1E000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x00E2A000 \SystemRoot\system32\DRIVERS\volmgr.sys
0x00C00000 \SystemRoot\System32\drivers\volmgrx.sys
0x00E3F000 \SystemRoot\system32\DRIVERS\intelide.sys
0x00E47000 \SystemRoot\system32\DRIVERS\PCIIDEX.SYS
0x00E57000 \SystemRoot\system32\DRIVERS\aliide.sys
0x00FF4000 \SystemRoot\system32\DRIVERS\amdide.sys
0x00C5C000 \SystemRoot\system32\DRIVERS\cmdide.sys
0x00C64000 \SystemRoot\System32\drivers\mountmgr.sys
0x01018000 \SystemRoot\system32\DRIVERS\msdsm.sys
0x0103E000 \SystemRoot\system32\DRIVERS\nvraid.sys
0x01067000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS
0x01097000 \SystemRoot\system32\DRIVERS\pciide.sys
0x0109E000 \SystemRoot\system32\DRIVERS\viaide.sys
0x010A6000 \SystemRoot\system32\DRIVERS\iaStorV.sys
0x011C4000 \SystemRoot\system32\DRIVERS\atapi.sys
0x011CD000 \SystemRoot\system32\DRIVERS\ataport.SYS
0x012B3000 \SystemRoot\system32\DRIVERS\lsi_sas.sys
0x012D0000 \SystemRoot\system32\DRIVERS\storport.sys
0x01332000 \SystemRoot\system32\DRIVERS\msahci.sys
0x0133D000 \SystemRoot\system32\DRIVERS\HpSAMD.sys
0x01354000 \SystemRoot\system32\DRIVERS\adp94xx.sys
0x01200000 \SystemRoot\system32\DRIVERS\adpahci.sys
0x01256000 \SystemRoot\system32\DRIVERS\adpu320.sys
0x01285000 \SystemRoot\system32\DRIVERS\amdsata.sys
0x01414000 \SystemRoot\system32\DRIVERS\amdsbs.sys
0x0145B000 \SystemRoot\system32\DRIVERS\amdxata.sys
0x01466000 \SystemRoot\system32\DRIVERS\arc.sys
0x0147F000 \SystemRoot\system32\DRIVERS\arcsas.sys
0x0149A000 \SystemRoot\system32\DRIVERS\elxstor.sys
0x01521000 \SystemRoot\system32\DRIVERS\iirsp.sys
0x01532000 \SystemRoot\system32\DRIVERS\lsi_fc.sys
0x01551000 \SystemRoot\system32\DRIVERS\lsi_sas2.sys
0x01564000 \SystemRoot\system32\DRIVERS\lsi_scsi.sys
0x01583000 \SystemRoot\system32\DRIVERS\megasas.sys
0x0167F000 \SystemRoot\system32\DRIVERS\MegaSR.sys
0x01723000 \SystemRoot\system32\DRIVERS\nfrd960.sys
0x01733000 \SystemRoot\system32\DRIVERS\nvstor.sys
0x0185B000 \SystemRoot\system32\DRIVERS\ql2300.sys
0x0175E000 \SystemRoot\system32\DRIVERS\ql40xx.sys
0x01800000 \SystemRoot\system32\DRIVERS\SiSRaid2.sys
0x0180E000 \SystemRoot\system32\DRIVERS\sisraid4.sys
0x01826000 \SystemRoot\system32\DRIVERS\stexstor.sys
0x01830000 \SystemRoot\system32\DRIVERS\vsmraid.sys
0x01600000 \SystemRoot\system32\drivers\fltmgr.sys
0x0164C000 \SystemRoot\system32\drivers\fileinfo.sys
0x01A1B000 \SystemRoot\System32\Drivers\Ntfs.sys
0x0158F000 \SystemRoot\System32\Drivers\msrpc.sys
0x01BBE000 \SystemRoot\System32\Drivers\ksecdd.sys
0x01C59000 \SystemRoot\System32\Drivers\cng.sys
0x01CCC000 \SystemRoot\System32\drivers\pcw.sys
0x01CDD000 \SystemRoot\System32\Drivers\Fs_Rec.sys
0x01CE7000 \SystemRoot\system32\drivers\ndis.sys
0x01E38000 \SystemRoot\system32\drivers\NETIO.SYS
0x01E98000 \SystemRoot\System32\Drivers\ksecpkg.sys
0x02002000 \SystemRoot\System32\drivers\tcpip.sys
0x01EC3000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x01F0D000 \SystemRoot\system32\DRIVERS\wd.sys
0x01F15000 \SystemRoot\system32\DRIVERS\volsnap.sys
0x01F61000 \SystemRoot\System32\Drivers\spldr.sys
0x01F69000 \SystemRoot\system32\DRIVERS\sbp2port.sys
0x01F86000 \SystemRoot\System32\drivers\rdyboost.sys
0x01FC0000 \SystemRoot\System32\Drivers\mup.sys
0x01FD2000 \SystemRoot\System32\drivers\hwpolicy.sys
0x01C00000 \SystemRoot\System32\DRIVERS\fvevol.sys
0x01FDB000 \SystemRoot\system32\DRIVERS\disk.sys
0x017BD000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x013CF000 \SystemRoot\system32\DRIVERS\MpFilter.sys
0x01E2A000 \SystemRoot\System32\Drivers\Null.SYS
0x01C3A000 \SystemRoot\System32\Drivers\Beep.SYS
0x01C41000 \SystemRoot\System32\drivers\vga.sys
0x01DD9000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x01BD8000 \SystemRoot\System32\drivers\watchdog.sys
0x01C4F000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x01BE8000 \SystemRoot\system32\drivers\rdpencdd.sys
0x01BF1000 \SystemRoot\system32\drivers\rdprefmp.sys
0x01A00000 \SystemRoot\System32\Drivers\Msfs.SYS
0x017E7000 \SystemRoot\System32\Drivers\Npfs.SYS
0x01660000 \SystemRoot\system32\DRIVERS\tdx.sys
0x01A0B000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x034FA000 \SystemRoot\system32\drivers\afd.sys
0x03584000 \SystemRoot\System32\DRIVERS\netbt.sys
0x035C9000 \SystemRoot\system32\DRIVERS\wfplwf.sys
0x035D2000 \SystemRoot\system32\DRIVERS\pacer.sys
0x03400000 \SystemRoot\system32\DRIVERS\vwififlt.sys
0x03416000 \SystemRoot\system32\DRIVERS\netbios.sys
0x03442000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x0345D000 \SystemRoot\system32\DRIVERS\termdd.sys
0x03471000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x034C2000 \SystemRoot\system32\drivers\nsiproxy.sys
0x034CE000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x034D9000 \SystemRoot\System32\drivers\discache.sys
0x044AE000 \SystemRoot\System32\Drivers\dfsc.sys
0x044CC000 \SystemRoot\system32\DRIVERS\blbdrive.sys
0x044DD000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x04503000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x04519000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
0x0468A000 \SystemRoot\system32\DRIVERS\igdkmd64.sys
0x05063000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x05157000 \SystemRoot\System32\drivers\dxgmms1.sys
0x0519D000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x051AA000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x05000000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x05011000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x04D92000 \SystemRoot\system32\DRIVERS\Rt64win7.sys
0x05268000 \SystemRoot\system32\DRIVERS\athrx.sys
0x053E5000 \SystemRoot\system32\DRIVERS\vwifibus.sys
0x05200000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x0521E000 \SystemRoot\system32\DRIVERS\HpqKbFiltr.sys
0x0522A000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x04600000 \SystemRoot\system32\DRIVERS\SynTP.sys
0x05239000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x0523B000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x0524A000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0x0524F000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
0x05035000 \SystemRoot\system32\DRIVERS\CompositeBus.sys
0x05045000 \SystemRoot\system32\DRIVERS\AgileVpn.sys
0x04649000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x0525C000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x04DCB000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x0466D000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x04522000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x04543000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x053F2000 \SystemRoot\system32\DRIVERS\taphss.sys
0x0505B000 \SystemRoot\system32\DRIVERS\swenum.sys
0x0455D000 \SystemRoot\system32\DRIVERS\ks.sys
0x045A0000 \SystemRoot\system32\DRIVERS\umbus.sys
0x04400000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x0445A000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x0540D000 \SystemRoot\system32\drivers\CHDRT64.sys
0x054BB000 \SystemRoot\system32\drivers\portcls.sys
0x054F8000 \SystemRoot\system32\drivers\drmk.sys
0x0551A000 \SystemRoot\system32\drivers\ksthunk.sys
0x05520000 \SystemRoot\system32\DRIVERS\CAXHWAZL.sys
0x0584E000 \SystemRoot\system32\DRIVERS\CAX_DPV.sys
0x0560E000 \SystemRoot\system32\DRIVERS\CAX_CNXT.sys
0x056D9000 \SystemRoot\system32\drivers\modem.sys
0x00060000 \SystemRoot\System32\win32k.sys
0x056E8000 \SystemRoot\System32\drivers\Dxapi.sys
0x056F4000 \SystemRoot\system32\DRIVERS\cdfs.sys
0x05711000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x0572E000 \SystemRoot\System32\Drivers\usbvideo.sys
0x0575C000 \SystemRoot\system32\DRIVERS\monitor.sys
0x0576A000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x05778000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x05791000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x0579A000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x057A7000 \SystemRoot\System32\Drivers\crashdmp.sys
0x057B5000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x057C1000 \SystemRoot\System32\Drivers\dump_msahci.sys
0x057CC000 \SystemRoot\System32\Drivers\dump_dumpfve.sys
0x005E0000 \SystemRoot\System32\TSDDD.dll
0x00670000 \SystemRoot\System32\cdd.dll
0x00870000 \SystemRoot\System32\ATMFD.DLL
0x059C2000 \SystemRoot\system32\drivers\luafv.sys
0x057DF000 \SystemRoot\system32\drivers\WudfPf.sys
0x059E5000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x05572000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x05800000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x05813000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x032F3000 \SystemRoot\system32\drivers\HTTP.sys
0x033BB000 \SystemRoot\system32\DRIVERS\bowser.sys
0x033D9000 \SystemRoot\System32\drivers\mpsdrv.sys
0x03200000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x0322D000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x0327B000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x0329E000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys
0x042B2000 \SystemRoot\system32\drivers\peauth.sys
0x04358000 \SystemRoot\System32\Drivers\secdrv.SYS
0x04363000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x04390000 \SystemRoot\System32\drivers\tcpipreg.sys
0x043A2000 \SystemRoot\system32\DRIVERS\XAudio64.sys
0x04200000 \SystemRoot\System32\DRIVERS\srv2.sys
0x05A54000 \SystemRoot\System32\DRIVERS\srv.sys
0x05B5D000 \??\C:\Windows\system32\Drivers\PROCEXP113.SYS
0x76EB0000 \Windows\System32\ntdll.dll
0x477B0000 \Windows\System32\smss.exe
0xFF1D0000 \Windows\System32\apisetschema.dll
0xFF6E0000 \Windows\System32\autochk.exe
0xFEF60000 \Windows\System32\iertutil.dll
0xFEF50000 \Windows\System32\lpk.dll
0xFEE20000 \Windows\System32\wininet.dll
0xFECF0000 \Windows\System32\rpcrt4.dll
0xFEC80000 \Windows\System32\gdi32.dll
0xFEAA0000 \Windows\System32\setupapi.dll
0xFE9C0000 \Windows\System32\advapi32.dll
0xFE9A0000 \Windows\System32\imagehlp.dll
0xFE950000 \Windows\System32\ws2_32.dll
0xFE940000 \Windows\System32\nsi.dll
0xFE730000 \Windows\System32\ole32.dll
0xFE5B0000 \Windows\System32\urlmon.dll
0xFE510000 \Windows\System32\msvcrt.dll
0xFE490000 \Windows\System32\shlwapi.dll
0x77080000 \Windows\System32\psapi.dll
0xFE3C0000 \Windows\System32\usp10.dll
0xFE370000 \Windows\System32\Wldap32.dll
0xFE2D0000 \Windows\System32\clbcatq.dll
0xFE2A0000 \Windows\System32\imm32.dll
0xFE280000 \Windows\System32\sechost.dll
0xFE170000 \Windows\System32\msctf.dll
0x76D90000 \Windows\System32\kernel32.dll
0x77070000 \Windows\System32\normaliz.dll
0xFD3E0000 \Windows\System32\shell32.dll
0xFD300000 \Windows\System32\oleaut32.dll
0xFD260000 \Windows\System32\comdlg32.dll
0xFD1E0000 \Windows\System32\difxapi.dll
0x76C90000 \Windows\System32\user32.dll
0xFD170000 \Windows\System32\KernelBase.dll
0xFD0D0000 \Windows\System32\comctl32.dll
0xFD0B0000 \Windows\System32\devobj.dll
0xFCF40000 \Windows\System32\crypt32.dll
0xFCF00000 \Windows\System32\cfgmgr32.dll
0xFCEC0000 \Windows\System32\wintrust.dll
0xFCEB0000 \Windows\System32\msasn1.dll
0x74F40000 \Windows\SysWOW64\normaliz.dll

Processes (total 76):
0 System Idle Process
4 System
280 C:\Windows\System32\smss.exe
384 csrss.exe
440 C:\Windows\System32\wininit.exe
456 csrss.exe
488 C:\Windows\System32\services.exe
512 C:\Windows\System32\lsass.exe
520 C:\Windows\System32\lsm.exe
620 C:\Windows\System32\svchost.exe
684 C:\Windows\System32\svchost.exe
736 C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
788 C:\Windows\System32\svchost.exe
856 C:\Windows\System32\svchost.exe
908 C:\Windows\System32\svchost.exe
968 C:\Windows\System32\audiodg.exe
1008 C:\Windows\System32\svchost.exe
316 C:\Windows\System32\winlogon.exe
1052 C:\Windows\System32\svchost.exe
1272 C:\Windows\System32\spoolsv.exe
1304 C:\Windows\System32\svchost.exe
1384 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
1564 C:\Windows\System32\dwm.exe
1592 C:\Windows\System32\taskhost.exe
1628 C:\Windows\explorer.exe
1736 C:\Program Files (x86)\Bonjour\mDNSResponder.exe
1768 C:\Windows\System32\svchost.exe
1812 C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe
1888 C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
1912 C:\Windows\System32\svchost.exe
1932 C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
1960 C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
2028 C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
1544 C:\Windows\System32\svchost.exe
876 C:\Program Files (x86)\Seagate Replica\bin\ReplicaSysMon.exe
1192 C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Svc.exe
1664 C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Autoplay.exe
2876 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
2892 C:\Windows\System32\igfxtray.exe
2900 C:\Windows\System32\hkcmd.exe
2908 C:\Windows\System32\igfxpers.exe
2920 C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
2940 C:\Program Files\Java\jre6\bin\jusched.exe
2952 C:\Program Files\Microsoft Security Client\msseces.exe
3024 C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
3040 C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
2236 C:\Windows\System32\igfxsrvc.exe
2264 C:\Windows\System32\StikyNot.exe
2496 C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
2628 C:\Users\Laptop mini\AppData\Roaming\Dropbox\bin\Dropbox.exe
2636 C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
2808 C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
2720 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
2708 C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
2712 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
2748 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
2820 C:\Program Files (x86)\iTunes\iTunesHelper.exe
3196 C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
3428 C:\Program Files\iPod\bin\iPodService.exe
3504 C:\Windows\System32\SearchIndexer.exe
3716 WmiPrvSE.exe
4012 C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
4052 C:\Program Files (x86)\Seagate Replica\bin\Seagate-Replica-Tray.exe
900 C:\Program Files\Windows Media Player\wmpnetwk.exe
3956 C:\Windows\servicing\TrustedInstaller.exe
1576 C:\Windows\System32\wuauclt.exe
3920 C:\Windows\System32\svchost.exe
2316 C:\Windows\System32\notepad.exe
880 C:\Program Files (x86)\Internet Explorer\iexplore.exe
2044 C:\Program Files (x86)\Internet Explorer\iexplore.exe
3360 C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
4244 C:\Program Files (x86)\Internet Explorer\iexplore.exe
3960 C:\Users\Laptop mini\Desktop\MBRCheck.exe
3904 C:\Windows\System32\conhost.exe
4504 C:\Windows\System32\dllhost.exe
800 taskhost.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`0c800000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000037`13100000 (NTFS)

PhysicalDrive0 Model Number: TOSHIBAMK2556GSY, Rev: LH003C

Size Device Name MBR Status
--------------------------------------------
232 GB \\.\PhysicalDrive0 Unknown MBR code
SHA1: B7158ACFF5E65E1F957AAF55892D3359BA1A1997


Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit:

 

Bootkit Remover
(c) 2009 eSage Lab
www.esagelab.com

Program version: 1.2.0.0
OS Version: Microsoft Windows 7 Home Premium Edition (build 7600), 64-bit

System volume is \\.\C:
\\.\C: -> \\.\PhysicalDrive0 at offset 0x00000000`0c800000
Boot sector MD5 is: 80b36cd4d104e6fdd5e8bef337bf60db

Size Device Name MBR Status
--------------------------------------------
232 GB \\.\PhysicalDrive0 Unknown boot code

Unknown boot code has been found on some of your physical disks.
To inspect the boot code manually, dump the master boot sector:
remover.exe dump <device_name> [output_file]
To disinfect the master boot sector, use the following command:
remover.exe fix <device_name>


Done;
Press any key to quit...