Solved Nothing Happens When Clicking on a Link

[Resolved] Nothing Happens When Clicking on a Link

When I click on a link at a websie or in my email, nothing happens. This has been a problem that seemed to resolved itself but began up agai a day afer & continues. How can I correct this?

 

I thought I understood what to do when posting a new issue in this forum. I did download & run MBAM & I have a log (which I am including in this post). However, when I click on Mirror 1 and also try Mirror 2, Nothing happens, just as with my emails & in different websites, so I am unable to post either of those logs, but I do have the MBAM log. It says if I do not follow the instructions no response will be given to my posted issue. With my emails & in other websites, to get to a link I must copy & paste it, but this will not work with the DDS Mirrors???
What can I do?[/QUOTE][/QUOTE]
MBAM LOG:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.07.23.02

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
JayeTee :: JT [administrator]

7/22/2013 8:01:36 PM
mbam-log-2013-07-22 (20-01-36).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 206479
Time elapsed: 5 minute(s), 27 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

 

IE9, I believe, how do I know for sure?

 

Google, which I don't use regularly.

 

Nothing happens when clicking on a link

Was able to download using Google Chrome

DDS Log:
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16496
Run by JayeTee at 19:19:03 on 2013-07-23
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.1.1033.18.767.170 [GMT -7:00]
.
AV: Norton Security Suite *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Security Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Security Suite *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Norton Security Suite\Engine\20.4.0.40\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Norton Security Suite\Engine\20.4.0.40\ccSvcHst.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\System32\svchost.exe -k secsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.yahoo.com/
uWindow Title = Internet Explorer, optimized for Bing and MSN
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mStart Page = hxxp://www.google.com
BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - c:\program files\mcafee security scan\3.0.318\McAfeeMSS_IE.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\program files\norton security suite\engine\20.4.0.40\coieplg.dll
BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - c:\program files\norton security suite\engine\20.4.0.40\ips\ipsbho.dll
TB: Acer eDataSecurity Management: {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - c:\windows\system32\eDStoolbar.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Acer eDataSecurity Management: {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - c:\windows\system32\eDStoolbar.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: <No Name>: {ae07101b-46d4-4a98-af68-0333ea26e113} - LocalServer32 - <no file>
TB: WOT: {71576546-354D-41c9-AAE8-31F2EC22BF0D} - c:\program files\wot\WOT.dll
TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\program files\norton security suite\engine\20.4.0.40\coieplg.dll
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe "
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\3.0.318\SSScheduler.exe
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: &ieSpell Options - c:\program files\iespell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - c:\program files\iespell\iespell.dll/SPELLCHECK.HTM
IE: Lookup on Merriam Webster - c:\program files\iespell\Merriam Webster.HTM
IE: Lookup on Wikipedia - c:\program files\iespell\wikipedia.HTM
IE: {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - c:\program files\iespell\iespell.dll/SPELLCHECK.HTM
IE: {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - c:\program files\iespell\iespell.dll/SPELLOPTION.HTM
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} -
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
TCP: NameServer = 10.238.239.61
TCP: Interfaces\{69E14A43-1964-4C36-9C15-F7285A51AC77} : DHCPNameServer = 10.238.239.61
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\28.0.1500.72\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\n360\1404000.028\symds.sys [2013-7-16 367704]
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\1404000.028\symefa.sys [2013-7-16 934488]
R1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definitions\bashdefs\20130715.001\BHDrvx86.sys [2013-7-16 1002072]
R1 ccSet_N360;Norton Security Suite Settings Manager;c:\windows\system32\drivers\n360\1404000.028\ccsetx86.sys [2013-7-16 134744]
R1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definitions\ipsdefs\20130720.001\IDSvix86.sys [2013-7-22 386720]
R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\n360\1404000.028\ironx86.sys [2013-7-16 175264]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\system32\drivers\n360\1404000.028\symtdiv.sys [2013-7-16 352344]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2013-2-26 21504]
R2 N360;Norton Security Suite;c:\program files\norton security suite\engine\20.4.0.40\ccsvchst.exe [2013-7-16 144368]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2013-7-17 106656]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2013-7-5 39272]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2012-3-8 1492840]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-7-6 22856]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\3.0.318\McCHSvc.exe [2013-2-5 235216]
S3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2013-5-5 80744]
S4 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2013-7-6 418376]
S4 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2013-7-6 701512]
S4 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\realnetworks\realdownloader\rndlresolversvc.exe [2013-4-16 39056]
.
=============== Created Last 30 ================
.
2013-07-24 02:06:57 7143960 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{14a50397-31a0-4389-8ffb-e30be5e23ae9}\mpengine.dll
2013-07-21 06:20:25 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-07-19 04:04:20 -------- d-----w- c:\programdata\McAfee Security Scan
2013-07-19 04:04:11 -------- d-----w- c:\program files\McAfee Security Scan
2013-07-16 17:45:05 352344 ----a-w- c:\windows\system32\drivers\n360\1404000.028\symtdiv.sys
2013-07-16 17:45:05 339544 ----a-w- c:\windows\system32\drivers\n360\1404000.028\symnets.sys
2013-07-16 17:45:05 21400 ----a-r- c:\windows\system32\drivers\n360\1404000.028\symelam.sys
2013-07-16 17:45:04 934488 ----a-w- c:\windows\system32\drivers\n360\1404000.028\symefa.sys
2013-07-16 17:45:04 603224 ----a-w- c:\windows\system32\drivers\n360\1404000.028\srtsp.sys
2013-07-16 17:45:04 367704 ----a-w- c:\windows\system32\drivers\n360\1404000.028\symds.sys
2013-07-16 17:45:04 32344 ----a-w- c:\windows\system32\drivers\n360\1404000.028\srtspx.sys
2013-07-16 17:45:04 175264 ----a-r- c:\windows\system32\drivers\n360\1404000.028\ironx86.sys
2013-07-16 17:45:04 134744 ----a-w- c:\windows\system32\drivers\n360\1404000.028\ccsetx86.sys
2013-07-16 17:44:33 14818 ----a-w- c:\windows\system32\drivers\n360\1404000.028\symvtcer.dat
2013-07-16 17:44:33 -------- d-----w- c:\windows\system32\drivers\n360\1404000.028
2013-07-14 03:16:29 -------- d-----w- c:\windows\system32\MRT
2013-07-12 20:34:23 7143960 ------w- c:\programdata\microsoft\windows defender\definition updates\updates\mpengine.dll
2013-07-11 16:48:30 2049024 ----a-w- c:\windows\system32\win32k.sys
2013-07-11 16:48:05 798208 ----a-w- c:\windows\system32\FntCache.dll
2013-07-11 16:48:05 683008 ----a-w- c:\windows\system32\d2d1.dll
2013-07-11 16:48:05 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2013-07-11 16:48:05 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-07-11 16:48:05 189952 ----a-w- c:\windows\system32\d3d10core.dll
2013-07-11 16:48:05 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2013-07-11 16:48:05 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2013-07-11 16:48:05 1069056 ----a-w- c:\windows\system32\DWrite.dll
2013-07-11 16:48:05 1029120 ----a-w- c:\windows\system32\d3d10.dll
2013-07-11 16:48:02 936960 ----a-w- c:\program files\common files\microsoft shared\ink\journal.dll
2013-07-11 16:47:59 505344 ----a-w- c:\windows\system32\qedit.dll
2013-07-11 16:47:57 1548288 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-10 03:19:31 -------- d-----w- c:\program files\ieSpell
2013-07-09 00:45:38 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-07-09 00:45:38 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-07-08 21:47:45 -------- d-----w- C:\_OTL
2013-07-06 08:18:13 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-07-06 08:18:12 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-07-06 07:57:59 -------- d-----w- c:\program files\FileHippo.com
2013-07-06 07:01:02 -------- d-----w- c:\users\jayetee\appdata\local\Secunia PSI
2013-07-06 07:00:26 -------- d-----w- c:\program files\Secunia
2013-07-06 06:45:53 -------- d-----w- c:\program files\WOT
2013-07-06 06:13:28 -------- d-----w- c:\windows\en
2013-07-06 06:12:09 39272 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2013-07-06 06:09:51 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2013-07-06 06:07:26 -------- d-----w- c:\windows\PCHEALTH
2013-07-06 06:05:35 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2013-07-06 06:05:35 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2013-07-06 06:05:35 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2013-07-06 06:04:54 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2013-07-06 05:51:04 7450888 ----a-w- c:\program files\common files\windows live\.cache\cb3f15ec1ce7a0c46\bingbarsetup.exe
2013-07-06 05:49:19 15712 ----a-w- c:\program files\common files\windows live\.cache\8e57327c1ce7a0c37\MeshBetaRemover.exe
2013-07-06 05:46:53 89944 ----a-w- c:\program files\common files\windows live\.cache\36ffc2dc1ce7a0c2a\DSETUP.dll
2013-07-06 05:46:53 537432 ----a-w- c:\program files\common files\windows live\.cache\36ffc2dc1ce7a0c2a\DXSETUP.exe
2013-07-06 05:46:53 1801048 ----a-w- c:\program files\common files\windows live\.cache\36ffc2dc1ce7a0c2a\dsetup32.dll
2013-07-06 05:46:49 94040 ----a-w- c:\program files\common files\windows live\.cache\34060adc1ce7a0c29\DSETUP.dll
2013-07-06 05:46:49 525656 ----a-w- c:\program files\common files\windows live\.cache\34060adc1ce7a0c29\DXSETUP.exe
2013-07-06 05:46:49 1691480 ----a-w- c:\program files\common files\windows live\.cache\34060adc1ce7a0c29\dsetup32.dll
2013-07-06 05:42:11 -------- d-----w- c:\users\jayetee\appdata\local\Windows Live
2013-07-06 05:42:08 -------- d-----w- c:\program files\common files\Windows Live
2013-07-06 05:40:54 754688 ----a-w- c:\windows\system32\webservices.dll
2013-07-06 03:53:08 -------- d-----w- c:\program files\FileOpenerPro
2013-07-05 02:52:24 -------- d-----w- c:\program files\ESET
2013-07-02 05:12:12 -------- d-----w- c:\windows\ERUNT
2013-07-02 05:11:57 -------- d-----w- C:\JRT
2013-07-02 04:08:42 174 ----a-w- c:\windows\DeleteOnReboot.bat
2013-07-01 06:55:51 -------- d-----w- c:\users\jayetee\appdata\local\temp
2013-07-01 06:54:36 -------- d-sh--w- C:\$RECYCLE.BIN
2013-06-30 21:49:46 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2013-06-29 02:48:44 -------- d-----w- c:\users\jayetee\appdata\roaming\Malwarebytes
2013-06-29 02:48:24 -------- d-----w- c:\programdata\Malwarebytes
2013-06-27 06:00:18 662288 ----a-w- c:\windows\system32\MSCOMCT2.OCX
2013-06-27 06:00:18 137000 ----a-w- c:\windows\system32\MSMAPI32.OCX
2013-06-27 06:00:18 116224 ----a-w- c:\windows\system32\pdfcmnnt.dll
2013-06-27 06:00:09 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2013-06-27 06:00:08 -------- d-----w- c:\program files\PDFCreator
2013-06-27 05:51:50 -------- d-----w- c:\program files\InfoSeeker
2013-06-27 05:47:35 632656 ----a-w- c:\windows\system32\msvcr80.dll
2013-06-27 05:47:35 554832 ----a-w- c:\windows\system32\msvcp80.dll
2013-06-27 05:47:35 479232 ----a-w- c:\windows\system32\msvcm80.dll
2013-06-26 04:51:49 142496 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2013-06-26 04:51:49 -------- d-----w- c:\program files\Symantec
2013-06-26 04:51:49 -------- d-----w- c:\program files\common files\Symantec Shared
2013-06-26 04:49:59 -------- d-----w- c:\windows\system32\drivers\N360
2013-06-26 04:49:50 -------- d-----w- c:\program files\Norton Security Suite
2013-06-26 04:43:41 -------- d-----w- c:\program files\NortonInstaller
2013-06-25 03:38:55 -------- d-----w- c:\program files\Mobile App Sync
.
==================== Find3M ====================
.
2013-07-19 07:34:10 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-07-19 07:34:09 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-06-21 05:42:57 499712 ----a-w- c:\windows\system32\msvcp71.dll
2013-06-21 05:42:57 348160 ----a-w- c:\windows\system32\msvcr71.dll
2013-05-29 01:50:14 1800704 ----a-w- c:\windows\system32\jscript9.dll
2013-05-29 01:41:52 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-29 01:41:08 1129472 ----a-w- c:\windows\system32\wininet.dll
2013-05-29 01:37:15 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-29 01:36:09 420864 ----a-w- c:\windows\system32\vbscript.dll
2013-05-29 01:33:22 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2013-05-08 04:37:21 905576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-02 22:03:36 3603832 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-05-02 22:03:36 3551096 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-05-02 09:06:08 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-05-02 04:04:25 443904 ----a-w- c:\windows\system32\win32spl.dll
2013-05-02 04:03:42 37376 ----a-w- c:\windows\system32\printcom.dll
2013-05-01 10:59:12 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2013-05-01 10:59:12 69632 ----a-w- c:\windows\system32\QuickTime.qts
.
============= FINISH: 19:21:05.07 ===============

Attach Log:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft® Windows Vista™ Home Basic
Boot Device: \Device\HarddiskVolume2
Install Date: 2/25/2013 5:00:10 PM
System Uptime: 7/23/2013 6:46:19 PM (1 hours ago)
.
Motherboard: Acer | | EM61SM/EM61PM
Processor: AMD Athlon(tm) 64 Processor 3800+ | Socket M2 | 1800/201mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 70 GiB total, 33.319 GiB free.
D: is FIXED (NTFS) - 70 GiB total, 60.45 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP167: 7/17/2013 2:00:30 PM - Scheduled Checkpoint
RP168: 7/17/2013 11:19:51 PM - Norton_Power_Eraser_20130717231951760
RP169: 7/18/2013 12:01:44 PM - Scheduled Checkpoint
RP170: 7/19/2013 11:15:18 AM - Windows Update
RP171: 7/20/2013 10:21:00 PM - Scheduled Checkpoint
RP172: 7/20/2013 11:17:53 PM - Removed Java 7 Update 25
RP173: 7/20/2013 11:19:42 PM - Installed Java 7 Update 25
RP174: 7/22/2013 10:54:45 AM - Scheduled Checkpoint
RP175: 7/23/2013 12:36:31 PM - Scheduled Checkpoint
RP176: 7/23/2013 6:58:50 PM - Windows Update
.
==== Installed Programs ======================
.
15354 Webcam Live
Acer eDataSecurity Management
Acer eMode Management
Acer Empowering Technology
Acer ePerformance Management
Acer Registration
Acer ScreenSaver
Acer Tour
Adobe Flash Player 11 ActiveX
Adobe Reader X (10.1.4)
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Bonjour
Compatibility Pack for the 2007 Office system
D3DX10
DriverUpdate
Dropbox
Epson FAX Utility
Epson PC-FAX Driver
EPSON Scan
EPSON WorkForce 320 Series Printer Uninstall
ESET Online Scanner v3
Fast Free Converter
File Opener Pro
FileHippo.com Update Checker
Google Chrome
Google Drive
Google Toolbar for Internet Explorer
Google Update Helper
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
iCloud
ieSpell
InfoSeeker
iTunes
Java 7 Update 25
Java Auto Updater
Junk Mail filter update
LightScribe 1.4.136.1
LTCM Client
Malwarebytes Anti-Malware version 1.75.0.1300
McAfee Security Scan Plus
Mesh Runtime
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Mobile App Sync
Motorola SM56 Speakerphone Modem
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB2758694)
Norton Security Suite
NTI Backup NOW! 4.7
NTI CD & DVD-Maker
NVIDIA Drivers
PDFCreator
PowerProducer
QuickTime
RealDownloader
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealNetworks - Microsoft Visual C++ 2010 Runtime
RealPlayer
Realtek High Definition Audio Driver
RealUpgrade 1.1
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2832407)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
Segoe UI
Super Collapse! II
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
Video Downloader
Video Downloader version 2.0
Watchtower Library 2011 - English
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WOT for Internet Explorer
Zoom Downloader
.
==== Event Viewer Messages From Past Week ========
.
7/23/2013 9:40:37 AM, Error: netbt [4321] - The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.238.239.127. The computer with the IP address 10.238.239.61 did not allow the name to be claimed by this computer.
7/23/2013 7:08:30 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.155.565.0).
7/23/2013 6:46:56 PM, Error: EventLog [6008] - The previous system shutdown at 3:10:21 PM on 7/23/2013 was unexpected.
7/21/2013 4:27:11 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.
7/21/2013 4:27:11 PM, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
7/21/2013 4:27:10 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments " " in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
7/19/2013 11:26:24 AM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.155.311.0).
7/17/2013 11:19:31 AM, Error: EventLog [6008] - The previous system shutdown at 9:35:26 PM on 7/16/2013 was unexpected.
7/16/2013 4:52:16 PM, Error: Service Control Manager [7022] - The Windows Update service hung on starting.
.
==== End Of File ===========================

Sorry, I did not know how to zip the Attach Log

 

Restore point was created after running RKreport

RKreport:
RogueKiller V8.6.3 [Jul 17 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Started in : Normal mode
User : JayeTee [Admin rights]
Mode : Remove -- Date : 07/23/2013 20:57:00
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 5 ¤¤¤
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> DELETED
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> DELETED
[HJ POL] HKLM\[...]\System : DisableRegistryTools (0) -> DELETED
[HJ DESK] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ DESK] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤
[Address] SSDT[13] : NtAlertResumeThread @ 0x820A27FF -> HOOKED (Unknown @ 0x8EB5DD28)
[Address] SSDT[14] : NtAlertThread @ 0x8201B357 -> HOOKED (Unknown @ 0x8EB5DE08)
[Address] SSDT[18] : NtAllocateVirtualMemory @ 0x820576AD -> HOOKED (Unknown @ 0x8EAD8F18)
[Address] SSDT[21] : NtAlpcConnectPort @ 0x81FF989D -> HOOKED (Unknown @ 0x8EA03320)
[Address] SSDT[42] : NtAssignProcessToJobObject @ 0x81FCCB2E -> HOOKED (Unknown @ 0x8EBDEE30)
[Address] SSDT[67] : NtCreateMutant @ 0x8202F9A3 -> HOOKED (Unknown @ 0x8EB5DA78)
[Address] SSDT[77] : NtCreateSymbolicLinkObject @ 0x81FCF345 -> HOOKED (Unknown @ 0x8EBDEB50)
[Address] SSDT[78] : NtCreateThread @ 0x820A0E14 -> HOOKED (Unknown @ 0x8E9CEE00)
[Address] SSDT[116] : NtDebugActiveProcess @ 0x82073F04 -> HOOKED (Unknown @ 0x8EBDEF10)
[Address] SSDT[129] : NtDuplicateObject @ 0x82007581 -> HOOKED (Unknown @ 0x8E9CEB10)
[Address] SSDT[147] : NtFreeVirtualMemory @ 0x81E93E15 -> HOOKED (Unknown @ 0x8EAD8CD0)
[Address] SSDT[156] : NtImpersonateAnonymousToken @ 0x81FC9F3B -> HOOKED (Unknown @ 0x8EB5DB68)
[Address] SSDT[158] : NtImpersonateThread @ 0x81FDF580 -> HOOKED (Unknown @ 0x8EB5DC48)
[Address] SSDT[165] : NtLoadDriver @ 0x81F7AE12 -> HOOKED (Unknown @ 0x8EA032A8)
[Address] SSDT[177] : NtMapViewOfSection @ 0x8201F99C -> HOOKED (Unknown @ 0x8EAD8BD0)
[Address] SSDT[184] : NtOpenEvent @ 0x82008DFF -> HOOKED (Unknown @ 0x8EB5D998)
[Address] SSDT[194] : NtOpenProcess @ 0x8203013F -> HOOKED (Unknown @ 0x8E9CECF0)
[Address] SSDT[195] : NtOpenProcessToken @ 0x82010A60 -> HOOKED (Unknown @ 0x8E9CEA30)
[Address] SSDT[197] : NtOpenSection @ 0x82020794 -> HOOKED (Unknown @ 0x8EB5D7D8)
[Address] SSDT[201] : NtOpenThread @ 0x8202B63B -> HOOKED (Unknown @ 0x8E9CEC00)
[Address] SSDT[210] : NtProtectVirtualMemory @ 0x820293F2 -> HOOKED (Unknown @ 0x8EBDED40)
[Address] SSDT[282] : NtResumeThread @ 0x8202AC5A -> HOOKED (Unknown @ 0x8EB5DEE8)
[Address] SSDT[289] : NtSetContextThread @ 0x820A22AB -> HOOKED (Unknown @ 0x8EAD8920)
[Address] SSDT[305] : NtSetInformationProcess @ 0x820239EE -> HOOKED (Unknown @ 0x8EAD8A00)
[Address] SSDT[317] : NtSetSystemInformation @ 0x81FF5F14 -> HOOKED (Unknown @ 0x8EBDEFD0)
[Address] SSDT[330] : NtSuspendProcess @ 0x820A273B -> HOOKED (Unknown @ 0x8EB5D8B8)
[Address] SSDT[331] : NtSuspendThread @ 0x81FA9943 -> HOOKED (Unknown @ 0x8EAD87A0)
[Address] SSDT[334] : NtTerminateProcess @ 0x82000173 -> HOOKED (Unknown @ 0x8EA35E28)
[Address] SSDT[335] : unknown @ 0x8202B670 -> HOOKED (Unknown @ 0x8EAD8840)
[Address] SSDT[348] : NtUnmapViewOfSection @ 0x8201FC5F -> HOOKED (Unknown @ 0x8EAD8AF0)
[Address] SSDT[358] : NtWriteVirtualMemory @ 0x8201CA2F -> HOOKED (Unknown @ 0x8EAD8DC0)
[Address] SSDT[382] : NtCreateThreadEx @ 0x8202B125 -> HOOKED (Unknown @ 0x8EBDEC40)
[Address] Shadow SSDT[317] : NtUserAttachThreadInput -> HOOKED (Unknown @ 0x8EA42790)
[Address] Shadow SSDT[397] : NtUserGetAsyncKeyState -> HOOKED (Unknown @ 0x85B78230)
[Address] Shadow SSDT[428] : NtUserGetKeyboardState -> HOOKED (Unknown @ 0x8E09AD28)
[Address] Shadow SSDT[430] : NtUserGetKeyState -> HOOKED (Unknown @ 0x8E00E168)
[Address] Shadow SSDT[442] : NtUserGetRawInputData -> HOOKED (Unknown @ 0x8E09AEF8)
[Address] Shadow SSDT[479] : NtUserMessageCall -> HOOKED (Unknown @ 0x8E09AAB8)
[Address] Shadow SSDT[497] : NtUserPostMessage -> HOOKED (Unknown @ 0x8E09AC58)
[Address] Shadow SSDT[498] : NtUserPostThreadMessage -> HOOKED (Unknown @ 0x8E09AB88)
[Address] Shadow SSDT[573] : NtUserSetWindowsHookEx -> HOOKED (Unknown @ 0x8E0990B8)
[Address] Shadow SSDT[576] : NtUserSetWinEventHook -> HOOKED (Unknown @ 0x8E085238)

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost
::1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HDS721616PLA SCSI Disk Device +++++
--- User ---
[MBR] 1efcc60f3425e4262e1504a3be706033
[BSP] 80a3bc587bf167f9fc6568b69cc4cfcf : Acer MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 9993 Mo
1 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 20466810 | Size: 71453 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 166802895 | Size: 71178 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Finished : << RKreport[0]_D_07232013_205700.txt >>
RKreport[0]_S_07232013_204830.txt

MBAR ran & found no malware & cleanup wsn't required.

mbar log:
Malwarebytes Anti-Rootkit BETA 1.06.0.1004
www.malwarebytes.org

Database version: v2013.07.24.02

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
JayeTee :: JT [administrator]

7/23/2013 9:13:40 PM
mbar-log-2013-07-23 (21-13-40).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUM | P2P
Scan options disabled: PUP
Objects scanned: 209350
Time elapsed: 13 minute(s), 37 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

system log:
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.06.0.1004

(c) Malwarebytes Corporation 2011-2012

OS version: 6.0.6002 Windows Vista Service Pack 2 x86

Account is Administrative

Internet Explorer version: 9.0.8112.16421

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.410000 GHz
Memory total: 804069376, free: 137076736

Downloaded database version: v2013.07.24.02
Downloaded database version: v2013.07.15.01
Initializing...
------------ Kernel report ------------
07/23/2013 21:13:33
------------ Loaded modules -----------
\SystemRoot\system32\ntkrnlpa.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\BOOTVID.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\acpi.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\nvstor32.sys
\SystemRoot\system32\drivers\storport.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\N360\1404000.028\SYMDS.SYS
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\system32\DRIVERS\psdfilter.sys
\SystemRoot\system32\drivers\N360\1404000.028\SYMEFA.SYS
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\msrpc.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\system32\drivers\psdvdisk.sys
\SystemRoot\system32\drivers\PSDNServ.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\ecache.sys
\SystemRoot\system32\drivers\disk.sys
\SystemRoot\system32\drivers\CLASSPNP.SYS
\SystemRoot\system32\drivers\crcdisk.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\tunmp.sys
\SystemRoot\system32\DRIVERS\amdk8.sys
\SystemRoot\system32\DRIVERS\usbohci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\DRIVERS\smserial.sys
\SystemRoot\system32\drivers\modem.sys
\SystemRoot\system32\DRIVERS\ohci1394.sys
\SystemRoot\system32\DRIVERS\1394BUS.SYS
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\system32\DRIVERS\NTIDrvr.sys
\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
\SystemRoot\system32\DRIVERS\yk60x86.sys
\SystemRoot\system32\DRIVERS\nvlddmkm.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\system32\DRIVERS\serial.sys
\SystemRoot\system32\DRIVERS\serenum.sys
\SystemRoot\system32\DRIVERS\parport.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\msiscsi.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\system32\drivers\MODEMCSA.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\RTKVHDA.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\system32\drivers\N360\1404000.028\ccSetx86.sys
\SystemRoot\system32\drivers\N360\1404000.028\Ironx86.SYS
\SystemRoot\System32\Drivers\Fs_Rec.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\System32\DRIVERS\rasacd.sys
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\System32\Drivers\N360\1404000.028\SYMTDIV.SYS
\??\C:\Windows\system32\Drivers\SYMEVENT.SYS
\SystemRoot\system32\DRIVERS\smb.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\drivers\ws2ifsl.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\drivers\N360\1404000.028\SRTSPX.SYS
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
\SystemRoot\System32\Drivers\dfsc.sys
\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130715.001\BHDrvx86.sys
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\PAC7302.SYS
\SystemRoot\system32\DRIVERS\STREAM.SYS
\SystemRoot\system32\drivers\usbaudio.sys
\SystemRoot\system32\DRIVERS\USBSTOR.SYS
\SystemRoot\system32\DRIVERS\hidusb.sys
\SystemRoot\system32\DRIVERS\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\kbdhid.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_diskdump.sys
\SystemRoot\System32\Drivers\dump_nvstor32.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\drivers\WudfPf.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\spsys.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\drivers\mrxdav.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\system32\DRIVERS\parvdm.sys
\??\C:\Acer\Empowering Technology\eRecovery\int15.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\system32\DRIVERS\cdfs.sys
\SystemRoot\System32\Drivers\N360\1404000.028\SRTSP.SYS
\??\C:\Users\JayeTee\AppData\Local\Temp\mbr.sys
\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130723.017\NAVEX15.SYS
\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130723.017\NAVENG.SYS
\??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130723.001\IDSvix86.sys
\??\C:\Windows\system32\TrueSight.sys
\SystemRoot\System32\ATMFD.DLL
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\mbamswissarmy.sys
\Windows\System32\ntdll.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk4\DR4
Upper Device Object: 0xffffffff85901948
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\00000072\
Lower Device Object: 0xffffffff8564e030
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk3\DR3
Upper Device Object: 0xffffffff8564f640
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\00000071\
Lower Device Object: 0xffffffff8562d940
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk2\DR2
Upper Device Object: 0xffffffff8564f030
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\00000070\
Lower Device Object: 0xffffffff8562d030
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk1\DR1
Upper Device Object: 0xffffffff8562d3d8
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\0000006f\
Lower Device Object: 0xffffffff8562dcb8
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xffffffff84fa4ac8
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\0000005d\
Lower Device Object: 0xffffffff837a7c90
Lower Device Driver Name: \Driver\nvstor32\
<<<2>>>
Device number: 0, partition: 2
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xffffffff84fa4ac8, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff84ea11e0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff84fa4ac8, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff837a6b68, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xffffffff837a7c90, DeviceName: \Device\0000005d\, DriverName: \Driver\nvstor32\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
Device number: 0, partition: 2
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\Windows\system32\drivers...
<<<2>>>
Device number: 0, partition: 2
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 74409E16

Partition information:

Partition 0 type is Other (0x27)
Partition is NOT ACTIVE.
Partition starts at LBA: 63 Numsec = 20466747

Partition 1 type is Other (0x6)
Partition is ACTIVE.
Partition starts at LBA: 20466810 Numsec = 146336085
Partition file system is NTFS
Partition is bootable

Partition 2 type is Primary (0x7)
Partition is NOT ACTIVE.
Partition starts at LBA: 166802895 Numsec = 145773810

Partition 3 type is Empty (0x0)
Partition is NOT ACTIVE.
Partition starts at LBA: 0 Numsec = 0

Disk Size: 164696555520 bytes
Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-62-321652960-321672960)...
Done!
Physical Sector Size: 0
Drive: 1, DevicePointer: 0xffffffff8562d3d8, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff8564eb40, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff8562d3d8, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff8562dcb8, DeviceName: \Device\0000006f\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 2, DevicePointer: 0xffffffff8564f030, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff8564fd18, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff8564f030, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff8562d030, DeviceName: \Device\00000070\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 3, DevicePointer: 0xffffffff8564f640, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff85901020, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff8564f640, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff8562d940, DeviceName: \Device\00000071\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 4, DevicePointer: 0xffffffff85901948, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff85901630, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff85901948, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff8564e030, DeviceName: \Device\00000072\, DriverName: \Driver\USBSTOR\
------------ End ----------
Scan finished
=======================================


Removal queue found; removal started
Removing c:\programdata\malwarebytes' anti-malware (portable)\mbr_0_i.mbam...
Removing c:\programdata\malwarebytes' anti-malware (portable)\bootstrap_0_1_20466810_i.mbam...
Removing c:\programdata\malwarebytes' anti-malware (portable)\mbr_0_r.mbam...
Removal finished

 

Combofix Log:
ComboFix 13-07-23.01 - JayeTee 07/23/2013 22:51:38.2.1 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.1.1033.18.767.161 [GMT -7:00]
Running from: c:\users\JayeTee\Downloads\ComboFix.exe
AV: Norton Security Suite *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Security Suite *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Security Suite *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2013-06-24 to 2013-07-24 )))))))))))))))))))))))))))))))
.
.
2013-07-24 06:00 . 2013-07-24 06:00 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-24 02:06 . 2013-07-02 06:54 7143960 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{14A50397-31A0-4389-8FFB-E30BE5E23AE9}\mpengine.dll
2013-07-21 06:20 . 2013-07-21 06:20 -------- d-----w- c:\program files\Common Files\Java
2013-07-21 06:20 . 2013-07-21 06:20 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-07-21 06:20 . 2013-07-21 06:20 -------- d-----w- c:\program files\Java
2013-07-19 04:04 . 2013-07-19 04:04 -------- d-----w- c:\programdata\McAfee Security Scan
2013-07-19 04:04 . 2013-07-22 03:52 -------- d-----w- c:\program files\McAfee Security Scan
2013-07-14 03:16 . 2013-07-14 03:21 -------- d-----w- c:\windows\system32\MRT
2013-07-11 16:48 . 2013-06-04 01:50 2049024 ----a-w- c:\windows\system32\win32k.sys
2013-07-11 16:48 . 2013-04-17 11:28 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-07-11 16:48 . 2013-04-17 11:28 189952 ----a-w- c:\windows\system32\d3d10core.dll
2013-07-11 16:48 . 2013-04-17 11:28 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2013-07-11 16:48 . 2013-04-17 11:28 1029120 ----a-w- c:\windows\system32\d3d10.dll
2013-07-11 16:48 . 2013-04-17 10:34 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2013-07-11 16:48 . 2013-04-17 10:33 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2013-07-11 16:48 . 2013-04-17 10:14 683008 ----a-w- c:\windows\system32\d2d1.dll
2013-07-11 16:48 . 2013-04-17 10:10 1069056 ----a-w- c:\windows\system32\DWrite.dll
2013-07-11 16:48 . 2013-04-17 10:10 798208 ----a-w- c:\windows\system32\FntCache.dll
2013-07-11 16:48 . 2013-04-09 03:51 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-11 16:47 . 2013-06-01 04:06 505344 ----a-w- c:\windows\system32\qedit.dll
2013-07-11 16:47 . 2013-05-08 04:04 1548288 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-10 03:19 . 2013-07-10 03:19 -------- d-----w- c:\program files\ieSpell
2013-07-09 00:45 . 2013-07-21 06:20 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-07-09 00:45 . 2013-07-21 06:20 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-07-09 00:31 . 2013-07-09 00:31 -------- d-----w- c:\programdata\McAfee
2013-07-08 21:47 . 2013-07-08 21:47 -------- d-----w- C:\_OTL
2013-07-06 08:18 . 2013-04-04 21:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-07-06 08:18 . 2013-07-06 08:18 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-07-06 07:57 . 2013-07-06 07:58 -------- d-----w- c:\program files\FileHippo.com
2013-07-06 07:01 . 2013-07-06 07:01 -------- d-----w- c:\users\JayeTee\AppData\Local\Secunia PSI
2013-07-06 07:00 . 2013-07-06 07:00 -------- d-----w- c:\program files\Secunia
2013-07-06 06:45 . 2013-07-06 06:45 -------- d-----w- c:\program files\WOT
2013-07-06 06:13 . 2013-07-06 06:13 -------- d-----w- c:\windows\en
2013-07-06 06:12 . 2012-03-09 01:32 39272 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2013-07-06 06:09 . 2013-07-06 06:09 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2013-07-06 06:07 . 2013-07-06 06:07 -------- d-----w- c:\windows\PCHEALTH
2013-07-06 06:06 . 2013-07-06 06:13 -------- d-----w- c:\program files\Windows Live
2013-07-06 06:05 . 2009-09-05 00:44 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2013-07-06 06:05 . 2009-09-05 00:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2013-07-06 06:05 . 2009-09-05 00:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2013-07-06 06:04 . 2006-11-29 20:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2013-07-06 05:42 . 2013-07-06 05:42 -------- d-----w- c:\users\JayeTee\AppData\Local\Windows Live
2013-07-06 05:42 . 2013-07-06 05:42 -------- d-----w- c:\program files\Common Files\Windows Live
2013-07-06 05:40 . 2009-08-04 08:02 754688 ----a-w- c:\windows\system32\webservices.dll
2013-07-06 03:53 . 2013-07-06 03:53 -------- d-----w- c:\program files\FileOpenerPro
2013-07-05 02:52 . 2013-07-05 02:52 -------- d-----w- c:\program files\ESET
2013-07-02 05:12 . 2013-07-02 05:12 -------- d-----w- c:\windows\ERUNT
2013-07-02 05:11 . 2013-07-02 05:11 -------- d-----w- C:\JRT
2013-07-02 04:08 . 2013-07-02 04:09 174 ----a-w- c:\windows\DeleteOnReboot.bat
2013-07-01 06:55 . 2013-07-24 06:00 -------- d-----w- c:\users\JayeTee\AppData\Local\temp
2013-06-30 21:49 . 2013-07-24 04:29 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2013-06-29 02:48 . 2013-06-29 02:48 -------- d-----w- c:\users\JayeTee\AppData\Roaming\Malwarebytes
2013-06-29 02:48 . 2013-06-29 02:48 -------- d-----w- c:\programdata\Malwarebytes
2013-06-27 06:00 . 2004-03-09 08:00 662288 ----a-w- c:\windows\system32\MSCOMCT2.OCX
2013-06-27 06:00 . 2001-10-29 00:42 116224 ----a-w- c:\windows\system32\pdfcmnnt.dll
2013-06-27 06:00 . 1998-06-24 08:00 137000 ----a-w- c:\windows\system32\MSMAPI32.OCX
2013-06-27 06:00 . 1998-07-06 08:00 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2013-06-27 06:00 . 2013-06-27 06:01 -------- d-----w- c:\program files\PDFCreator
2013-06-27 05:51 . 2013-06-27 05:51 -------- d-----w- c:\program files\InfoSeeker
2013-06-27 05:47 . 2013-02-05 07:25 632656 ----a-w- c:\windows\system32\msvcr80.dll
2013-06-27 05:47 . 2013-02-05 07:25 554832 ----a-w- c:\windows\system32\msvcp80.dll
2013-06-27 05:47 . 2013-02-05 07:25 479232 ----a-w- c:\windows\system32\msvcm80.dll
2013-06-26 04:51 . 2013-07-16 17:45 142496 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2013-06-26 04:51 . 2013-06-26 06:11 -------- d-----w- c:\program files\Common Files\Symantec Shared
2013-06-26 04:51 . 2013-06-26 04:51 -------- d-----w- c:\program files\Symantec
2013-06-26 04:49 . 2013-07-16 23:47 -------- d-----w- c:\windows\system32\drivers\N360
2013-06-26 04:49 . 2013-06-26 04:49 -------- d-----w- c:\program files\Norton Security Suite
2013-06-26 04:43 . 2013-06-26 04:43 -------- d-----w- c:\program files\NortonInstaller
2013-06-25 03:38 . 2013-06-25 03:39 -------- d-----w- c:\program files\Mobile App Sync
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-19 07:34 . 2013-03-01 19:35 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-07-19 07:34 . 2013-03-01 19:35 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-07-06 06:06 . 2011-03-29 01:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-06-21 05:42 . 2007-04-25 21:08 348160 ----a-w- c:\windows\system32\msvcr71.dll
2013-06-21 05:42 . 2007-04-25 21:07 499712 ----a-w- c:\windows\system32\msvcp71.dll
2013-05-08 04:37 . 2013-06-12 16:43 905576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-02 22:03 . 2013-06-12 16:42 3603832 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-05-02 22:03 . 2013-06-12 16:42 3551096 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-05-02 09:06 . 2013-02-26 04:10 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-05-02 04:04 . 2013-06-12 16:43 443904 ----a-w- c:\windows\system32\win32spl.dll
2013-05-02 04:03 . 2013-06-12 16:43 37376 ----a-w- c:\windows\system32\printcom.dll
2013-05-01 10:59 . 2013-05-01 10:59 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2013-05-01 10:59 . 2013-05-01 10:59 69632 ----a-w- c:\windows\system32\QuickTime.qts
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-06-07 06:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-07 06:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-06-07 06:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-06-07 06:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@= "{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} "
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-06-07 06:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle "= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux2 "=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@= "Service "
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer Empowering Technology Monitor]
2007-01-24 17:27 319488 ----a-w- c:\acer\Empowering Technology\SysMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2013-04-22 04:43 59720 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileAppSync]
2013-06-25 03:38 313856 ----a-w- c:\program files\Mobile App Sync\D2MClient.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2008-06-20 08:04 92704 ----a-w- c:\windows\System32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PAC7302_Monitor]
2006-11-03 18:01 319488 ----a-w- c:\windows\Pixart\Pac7302\Monitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2013-05-01 10:59 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2007-02-15 09:07 4390912 ----a-w- c:\windows\RtHDVCpl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
2009-10-26 21:46 1458176 ----a-w- c:\program files\Motorola\SMSERIAL\sm56hlpr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-03-12 14:32 253816 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2013-06-21 05:43 295512 ----a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring "=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring "=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring "=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-07-14 02:15 1173456 ----a-w- c:\program files\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-07-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-01 07:34]
.
2013-07-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-24 18:02]
.
2013-07-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-05-24 18:02]
.
.
------- Supplementary Scan -------
.
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uStart Page = hxxp://www.yahoo.com/
mStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = *.local
IE: &ieSpell Options - c:\program files\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Check &Spelling - c:\program files\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM
TCP: DhcpNameServer = 10.238.239.61
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
AddRemove-Fast Free Converter - c:\program files\Fast Free Converter\uninstall.exe
AddRemove-Zoom Downloader - c:\program files\Zoom Downloader\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-07-23 23:00
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N360]
"ImagePath "= "\ "c:\program files\Norton Security Suite\Engine\20.4.0.40\ccSvcHst.exe\" /s \ "N360\" /m \ "c:\program files\Norton Security Suite\Engine\20.4.0.40\diMaster.dll\" /prefetch:1 "
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "FlashBroker "
"LocalizedString "= "@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled "=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@= "c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@= "IFlashBroker5 "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@= "{00020424-0000-0000-C000-000000000046} "
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@= "{FAB3E735-69C7-453B-A446-B6823C6DF1C9} "
"Version "= "1.0 "
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
"MSCurrentCountry "=dword:000000b5
.
Completion time: 2013-07-23 23:04:10
ComboFix-quarantined-files.txt 2013-07-24 06:04
.
Pre-Run: 35,694,034,944 bytes free
Post-Run: 35,669,889,024 bytes free
.
- - End Of File - - 31C9C665E426691B91985E76967E55E2
A863475757CC50891AA8458C415E4B25

 

I've been using Google Chrome to be able to click on links successfully. Do I need to run RKill after Combofix has run successfullY or only if there is a problem w/combofix?

 

Nothjng happens when clicking on a link

Hooray, It Worked! Thanks so much! The option ot show 'resolved' is not in Thread Tools (???)