Solved Computer acting weird

[Resolved] Computer acting weird

My computer is acting strange. Yesterday it starting not allowing me to run any programs and kept freezing up. I removed Avast and Ad-Aware today and it appears to have fixed it. But internet still sometimes freezes up.

Please review the attached logs for anything you may find suspicious. Nothing was found on any of the scans.

Thank you.
-------------------------------------------------------------------------
MWBytes Log:
--------------------------------------------------------------------------
Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.09.11.05

Windows Vista Service Pack 1 x86 NTFS
Internet Explorer 7.0.6001.18000
Acer :: ACER-PC [administrator]

Protection: Enabled

9/11/2013 12:32:38 PM
mbam-log-2013-09-11 (12-32-38).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 209025
Time elapsed: 12 minute(s), 4 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
-------------------------------------------------------------------------
DDS Log
-------------------------------------------------------------------------

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 7.0.6001.18639 BrowserJavaVersion: 10.25.2
Run by Acer at 11:41:40 on 2013-09-11
Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6001.1.1252.1.1033.18.2038.1096 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\dlbtcoms.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=DA1DBCB66159D41C9DF214523074F493
BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\programdata\realnetworks\realdownloader\browserplugins\ie\rndlbrowserrecordplugin.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe "
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe "
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe "
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot
mRun: [DLBTCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLBTtime.dll,_RunDLLEntry@16
mRun: [Search Protection] c:\programdata\search protection\SearchProtection.exe
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab
TCP: NameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{286AC4CD-FF2B-4BBE-9409-ACE9B11C2D48} : DHCPNameServer = 209.18.47.61 209.18.47.62
TCP: Interfaces\{64C66C46-53BA-4018-9356-9310A68C8C48} : DHCPNameServer = 209.18.47.61 209.18.47.62
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: igfxcui - igfxdev.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\acer\appdata\roaming\mozilla\firefox\profiles\r3kmhmhg.default\
FF - prefs.js: browser.search.selectedEngine - SecureSearch
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20513.0\npctrlui.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nprpplugin.dll
FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlchromebrowserrecordext.dll
FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlhtml5videoshim.dll
FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlpepperflashvideoshim.dll
FF - plugin: c:\programdata\realnetworks\realdownloader\browserplugins\npdlplugin.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_8_800_94.dll
FF - ExtSQL: 2013-08-03 04:21; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - ExtSQL: 2013-09-03 05:31; {DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}; c:\programdata\realnetworks\realdownloader\browserplugins\firefox\Ext
.
============= SERVICES / DRIVERS ===============
.
R0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys [2013-9-11 13560]
R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-6-18 211560]
R1 A2DDA;A2 Direct Disk Access Support Driver;c:\eek\run\a2ddax86.sys [2013-9-10 22056]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2013-9-11 418376]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2013-9-11 701512]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\realnetworks\realdownloader\rndlresolversvc.exe [2013-8-14 39056]
R3 b57nd60x;%SvcDispName%;c:\windows\system32\drivers\b57nd60x.sys [2013-9-3 179712]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-9-11 22856]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\NETw5v32.sys [2008-11-17 3668480]
R3 winbondcir;Winbond IR Transceiver;c:\windows\system32\drivers\winbondcir.sys [2007-3-28 43008]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2012-7-9 104912]
S3 cleanhlp;cleanhlp;c:\eek\run\cleanhlp32.sys [2013-9-10 50200]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2012-7-9 770008]
.
=============== Created Last 30 ================
.
2013-09-11 15:34:34 7166848 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\{d1207ecd-b3fb-48a8-b648-e69de8633d5b}\mpengine.dll
2013-09-11 14:09:56 -------- d-----w- c:\users\acer\appdata\roaming\Malwarebytes
2013-09-11 14:09:43 -------- d-----w- c:\programdata\Malwarebytes
2013-09-11 14:09:42 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-09-11 14:09:42 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-09-11 13:50:12 -------- d-----w- c:\users\acer\appdata\roaming\LavasoftStatistics
2013-09-11 13:49:58 -------- d-----w- c:\programdata\Downloaded Installations
2013-09-11 13:49:48 -------- d-----w- c:\users\acer\appdata\roaming\SecureSearch
2013-09-11 13:49:39 -------- d-----w- c:\program files\Lavasoft
2013-09-11 13:48:46 44424 ----a-w- c:\windows\system32\sbbd.exe
2013-09-11 13:48:46 13560 ----a-w- c:\windows\system32\drivers\gfibto.sys
2013-09-11 13:48:44 -------- d-----w- c:\users\acer\appdata\roaming\Ad-Aware Antivirus
2013-09-11 02:43:39 -------- d-----w- C:\EEK
2013-09-10 21:45:22 -------- d-----w- c:\program files\AVAST Software
2013-09-10 21:45:04 -------- d-----w- c:\programdata\AVAST Software
2013-09-10 21:20:26 7166848 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2013-09-10 14:38:39 1058704 ----a-w- c:\programdata\SPL41B0.tmp
2013-09-04 23:43:13 231936 ----a-w- c:\windows\system32\msshsq.dll
2013-09-04 03:03:12 80896 ----a-w- c:\windows\system32\MSNP.ax
2013-09-04 03:03:03 293376 ----a-w- c:\windows\system32\psisdecd.dll
2013-09-04 03:03:01 217088 ----a-w- c:\windows\system32\psisrndr.ax
2013-09-04 02:51:59 252416 ----a-w- c:\windows\system32\WSManMigrationPlugin.dll
2013-09-04 02:51:59 246272 ----a-w- c:\windows\system32\WSManHTTPConfig.exe
2013-09-04 02:51:59 1181696 ----a-w- c:\windows\system32\WsmSvc.dll
2013-09-04 01:58:04 168960 ----a-w- c:\program files\windows media player\wmplayer.exe
2013-09-04 01:58:03 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2013-09-04 01:57:20 125952 ----a-w- c:\windows\system32\srvsvc.dll
2013-09-04 01:57:19 17920 ----a-w- c:\windows\system32\netevent.dll
2013-09-04 01:56:42 501760 ----a-w- c:\windows\system32\usp10.dll
2013-09-04 01:56:29 515584 ----a-w- c:\program files\windows mail\wab.exe
2013-09-04 01:56:28 66048 ----a-w- c:\program files\windows mail\wabmig.exe
2013-09-04 01:56:28 33280 ----a-w- c:\program files\windows mail\wabfind.dll
2013-09-04 01:53:48 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2013-09-04 01:53:34 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys
2013-09-04 01:53:21 3548048 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-09-04 01:53:21 1205080 ----a-w- c:\windows\system32\ntdll.dll
2013-09-04 01:53:20 3600272 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-09-04 01:53:07 1136640 ----a-w- c:\windows\system32\mfc42.dll
2013-09-04 01:53:06 1161728 ----a-w- c:\windows\system32\mfc42u.dll
2013-09-04 01:52:53 1616384 ----a-w- c:\program files\windows mail\msoe.dll
2013-09-04 01:52:27 81920 ----a-w- c:\windows\system32\iccvid.dll
2013-09-04 01:52:16 72192 ----a-w- c:\windows\system32\drivers\pacer.sys
2013-09-04 01:52:15 15360 ----a-w- c:\windows\system32\pacerprf.dll
2013-09-04 01:52:01 304640 ----a-w- c:\windows\system32\drivers\srv.sys
2013-09-04 01:51:57 213504 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2013-09-04 01:51:56 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2013-09-04 01:51:56 105984 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2013-09-04 01:51:53 86528 ----a-w- c:\windows\system32\dnsrslvr.dll
2013-09-04 01:51:53 25088 ----a-w- c:\windows\system32\dnscacheugc.exe
2013-09-04 01:51:28 67072 ----a-w- c:\windows\system32\asycfilt.dll
2013-09-04 01:51:04 339968 ----a-w- c:\program files\windows nt\accessories\wordpad.exe
2013-09-04 01:51:04 1315840 ----a-w- c:\windows\system32\ole32.dll
2013-09-04 01:50:48 126464 ----a-w- c:\windows\system32\spoolsv.exe
2013-09-04 01:50:41 157184 ----a-w- c:\windows\system32\t2embed.dll
2013-09-04 01:50:25 2042368 ----a-w- c:\windows\system32\win32k.sys
2013-09-04 01:50:08 273408 ----a-w- c:\windows\system32\drivers\afd.sys
2013-09-04 01:49:18 1169408 ----a-w- c:\windows\system32\sdclt.exe
2013-09-04 01:49:06 10926592 ----a-w- c:\program files\movie maker\MOVIEMK.dll
2013-09-04 01:49:05 150016 ----a-w- c:\program files\movie maker\MOVIEMK.exe
2013-09-04 01:48:52 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2013-09-04 01:48:51 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2013-09-04 01:48:26 766464 ----a-w- c:\program files\common files\microsoft shared\vgx\VGX.dll
2013-09-04 01:48:14 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2013-09-04 01:48:02 430080 ----a-w- c:\windows\system32\vbscript.dll
2013-09-04 01:47:39 563200 ----a-w- c:\windows\system32\oleaut32.dll
2013-09-04 01:47:36 954752 ----a-w- c:\windows\system32\mfc40.dll
2013-09-04 01:47:35 954288 ----a-w- c:\windows\system32\mfc40u.dll
2013-09-04 01:47:01 36352 ----a-w- c:\windows\system32\rtutils.dll
2013-09-04 01:46:50 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2013-09-04 01:46:48 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2013-09-04 01:45:19 866816 ----a-w- c:\windows\system32\wmpmde.dll
2013-09-04 01:45:08 429056 ----a-w- c:\windows\system32\EncDec.dll
2013-09-04 01:45:08 323072 ----a-w- c:\windows\system32\sbe.dll
2013-09-04 01:45:07 177664 ----a-w- c:\windows\system32\mpg2splt.ax
2013-09-04 01:45:07 153088 ----a-w- c:\windows\system32\sbeio.dll
2013-09-04 01:44:52 1314816 ----a-w- c:\windows\system32\quartz.dll
2013-09-04 01:44:36 603648 ----a-w- c:\windows\system32\schedsvc.dll
2013-09-04 01:44:36 357376 ----a-w- c:\windows\system32\taskschd.dll
2013-09-04 01:44:35 345088 ----a-w- c:\windows\system32\wmicmiplugin.dll
2013-09-04 01:44:35 171520 ----a-w- c:\windows\system32\taskeng.exe
2013-09-04 01:44:34 270336 ----a-w- c:\windows\system32\taskcomp.dll
2013-09-04 01:44:20 738816 ----a-w- c:\windows\system32\inetcomm.dll
2013-09-04 01:44:18 81920 ----a-w- c:\windows\system32\consent.exe
2013-09-04 01:43:53 1257472 ----a-w- c:\windows\system32\msxml3.dll
2013-09-04 01:43:39 147456 ----a-w- c:\windows\system32\Faultrep.dll
2013-09-04 01:43:38 125952 ----a-w- c:\windows\system32\wersvc.dll
2013-09-04 01:43:35 565248 ----a-w- c:\windows\system32\emdmgmt.dll
2013-09-04 01:43:34 625152 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-09-04 01:43:34 45056 ----a-w- c:\windows\system32\dataclen.dll
2013-09-04 01:43:34 36864 ----a-w- c:\windows\system32\cdd.dll
2013-09-04 01:43:34 148480 ----a-w- c:\windows\system32\drivers\nwifi.sys
2013-09-04 01:43:25 2048 ----a-w- c:\windows\system32\tzres.dll
2013-09-04 01:42:29 90112 ----a-w- c:\windows\system32\wshext.dll
2013-09-04 01:42:29 155648 ----a-w- c:\windows\system32\wscript.exe
2013-09-04 01:42:29 135168 ----a-w- c:\windows\system32\wshom.ocx
2013-09-04 01:42:28 180224 ----a-w- c:\windows\system32\scrobj.dll
2013-09-04 01:42:28 172032 ----a-w- c:\windows\system32\scrrun.dll
2013-09-04 01:42:28 135168 ----a-w- c:\windows\system32\cscript.exe
2013-09-04 01:41:42 375808 ----a-w- c:\windows\system32\winsrv.dll
2013-09-04 01:41:41 49152 ----a-w- c:\windows\system32\csrsrv.dll
2013-09-04 01:41:29 2067456 ----a-w- c:\windows\system32\mstscax.dll
2013-09-04 01:41:28 677888 ----a-w- c:\windows\system32\mstsc.exe
2013-09-04 01:41:23 898952 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-09-04 01:41:16 531968 ----a-w- c:\windows\system32\comctl32.dll
2013-09-04 01:41:09 276992 ----a-w- c:\windows\system32\schannel.dll
2013-09-03 09:32:06 -------- d-----w- c:\users\acer\appdata\roaming\RealNetworks
2013-09-03 09:30:55 -------- d-----w- c:\program files\RealNetworks
2013-09-03 09:30:51 -------- d-----w- c:\programdata\RealNetworks
2013-09-03 09:30:28 -------- d-----w- c:\program files\common files\xing shared
2013-09-03 09:29:22 499712 ----a-w- c:\windows\system32\msvcp71.dll
2013-09-03 09:29:22 348160 ----a-w- c:\windows\system32\msvcr71.dll
2013-09-03 09:17:51 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll
2013-09-03 09:17:51 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll
2013-09-03 09:17:51 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll
2013-09-03 09:17:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll
2013-09-03 09:17:50 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll
2013-09-03 04:41:03 47560 ----a-w- c:\windows\system32\SPReview.exe
2013-09-03 04:41:03 152576 ----a-w- c:\windows\system32\SPWizUI.dll
2013-09-03 04:16:54 193024 ----a-w- c:\windows\system32\recdisc.exe
2013-09-03 04:16:48 6656 ----a-w- c:\windows\system32\sdspres.dll
2013-09-03 04:16:08 599552 ----a-w- c:\windows\system32\vsp1cln.exe
2013-09-03 04:14:59 90112 ----a-w- c:\program files\common files\system\ole db\msdaosp.dll
2013-09-03 04:13:58 68608 ----a-w- c:\windows\system32\shgina.dll
2013-09-03 04:12:58 93184 ----a-w- c:\windows\system32\esentutl.exe
2013-09-03 04:11:59 69120 ----a-w- c:\windows\system32\iesetup.dll
2013-09-03 04:10:58 94208 ----a-w- c:\windows\system32\Tabbtn.dll
2013-09-03 04:05:41 44032 ----a-w- c:\windows\system32\cbsra.exe
2013-09-03 01:48:20 -------- d-----w- c:\program files\Microsoft Security Client
2013-08-31 00:59:03 7166848 ------w- c:\programdata\microsoft\windows defender\definition updates\{0bfaea7b-388b-4a56-ba5d-7cd20a4de4e5}\mpengine.dll
2013-08-26 06:07:37 -------- d-----w- c:\users\acer\appdata\local\Apple Computer
2013-08-26 06:05:26 26840 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2013-08-26 06:04:13 -------- d-----w- c:\program files\iPod
2013-08-26 06:04:10 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-08-26 06:04:10 -------- d-----w- c:\program files\iTunes
2013-08-26 06:03:01 -------- d-----w- c:\users\acer\appdata\local\Apple
2013-08-26 06:01:05 -------- d-----w- c:\program files\Bonjour
2013-08-20 03:00:11 -------- d-----w- c:\program files\dl_Cats
2013-08-20 02:59:36 118272 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\dlbtPP5C.DLL
.
==================== Find3M ====================
.
2013-09-03 04:51:19 101888 ----a-w- c:\windows\system32\ifxcardm.dll
2013-09-03 04:51:15 82432 ----a-w- c:\windows\system32\axaltocm.dll
2013-08-05 03:25:48 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-08-05 03:25:48 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-08-03 23:00:34 378368 ----a-w- c:\windows\system32\winhttp.dll
2013-08-03 22:59:16 269312 ----a-w- c:\windows\system32\es.dll
2013-08-03 22:58:19 36864 ----a-w- c:\windows\system32\drivers\en-us\http.sys.mui
2013-08-03 08:50:36 72704 ----a-w- c:\windows\system32\admparse.dll
2013-08-03 08:50:31 48128 ----a-w- c:\windows\system32\mshtmler.dll
2013-08-03 08:49:07 61440 ----a-w- c:\windows\system32\winipsec.dll
2013-08-03 08:49:07 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL
2013-08-03 08:49:07 28672 ----a-w- c:\windows\system32\FwRemoteSvr.dll
2013-08-03 08:49:07 272896 ----a-w- c:\windows\system32\polstore.dll
2013-08-03 08:47:11 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2013-08-03 08:47:11 64512 ----a-w- c:\windows\system32\wlanapi.dll
2013-08-03 08:47:11 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2013-08-03 08:47:11 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2013-08-03 08:47:10 513024 ----a-w- c:\windows\system32\wlansvc.dll
2013-08-03 08:47:10 302592 ----a-w- c:\windows\system32\wlansec.dll
2013-08-03 08:47:10 15181 ----a-w- c:\windows\system32\gatherWirelessInfo.vbs
2013-08-03 08:44:44 71680 ----a-w- c:\windows\system32\atl.dll
2013-08-03 08:43:58 296960 ----a-w- c:\windows\system32\gdi32.dll
2013-08-03 08:43:34 562176 ----a-w- c:\windows\system32\msdtcprx.dll
2013-08-03 08:43:34 38912 ----a-w- c:\windows\system32\xolehlp.dll
2013-08-03 08:43:03 53248 ----a-w- c:\windows\system32\tsgqec.dll
2013-08-03 08:43:03 136192 ----a-w- c:\windows\system32\aaclient.dll
2013-08-03 08:42:33 303616 ----a-w- c:\windows\system32\wmpeffects.dll
2013-08-03 08:41:20 714240 ----a-w- c:\windows\system32\timedate.cpl
2013-08-03 08:39:48 636928 ----a-w- c:\windows\system32\localspl.dll
2013-08-03 08:39:21 2927104 ----a-w- c:\windows\explorer.exe
2013-08-03 08:38:53 171520 ----a-w- c:\windows\system32\wintrust.dll
2013-08-03 08:32:48 6656 ----a-w- c:\windows\system32\kbd106n.dll
2013-08-03 08:32:44 988216 ----a-w- c:\windows\system32\winload.exe
2013-08-03 08:32:44 927288 ----a-w- c:\windows\system32\winresume.exe
2013-08-03 08:32:44 40960 ----a-w- c:\windows\system32\srclient.dll
2013-08-03 08:32:44 378368 ----a-w- c:\windows\system32\srcore.dll
2013-08-03 08:32:44 318464 ----a-w- c:\windows\system32\rstrui.exe
2013-08-03 08:32:44 14848 ----a-w- c:\windows\system32\srdelayed.exe
2013-08-03 08:32:43 615992 ----a-w- c:\windows\system32\ci.dll
2013-08-03 08:32:43 46592 ----a-w- c:\windows\system32\setbcdlocale.dll
2013-08-03 08:32:43 19000 ----a-w- c:\windows\system32\kd1394.dll
2013-08-03 08:27:14 98304 ----a-w- c:\windows\system32\cabview.dll
2013-08-03 08:17:29 97800 ----a-w- c:\windows\system32\infocardapi.dll
2013-08-03 08:17:29 622080 ----a-w- c:\windows\system32\icardagt.exe
2013-08-03 08:17:29 37384 ----a-w- c:\windows\system32\infocardcpl.cpl
2013-08-03 08:17:29 11264 ----a-w- c:\windows\system32\icardres.dll
2013-08-03 08:17:25 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-08-03 08:17:24 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2013-08-03 07:30:06 94720 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2013-08-03 07:30:06 241152 ----a-w- c:\windows\system32\PortableDeviceApi.dll
2013-08-03 07:30:06 160768 ----a-w- c:\windows\system32\PortableDeviceTypes.dll
2013-08-03 07:28:56 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2013-08-03 07:28:56 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2013-08-03 07:28:56 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2013-08-03 07:28:56 19968 ----a-w- c:\windows\system32\ARP.EXE
2013-08-03 07:28:56 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2013-08-03 07:28:56 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2013-08-03 07:28:56 104960 ----a-w- c:\windows\system32\netiohlp.dll
2013-08-03 07:28:56 10240 ----a-w- c:\windows\system32\finger.exe
2013-08-03 07:27:01 2048 ----a-w- c:\windows\system32\msxml3r.dll
2013-08-03 07:27:00 2048 ----a-w- c:\windows\system32\msxml6r.dll
2013-08-03 07:27:00 1399296 ----a-w- c:\windows\system32\msxml6.dll
2013-08-03 07:26:13 213504 ----a-w- c:\windows\system32\msv1_0.dll
2013-08-03 07:25:25 2868224 ----a-w- c:\windows\system32\mf.dll
2013-08-03 07:25:24 98816 ----a-w- c:\windows\system32\mfps.dll
2013-08-03 07:25:24 53248 ----a-w- c:\windows\system32\rrinstaller.exe
2013-08-03 07:25:24 24576 ----a-w- c:\windows\system32\mfpmp.exe
2013-08-03 07:25:24 2048 ----a-w- c:\windows\system32\mferror.dll
2013-08-03 07:22:51 160256 ----a-w- c:\windows\system32\wkssvc.dll
2013-08-03 07:19:48 69632 ----a-w- c:\windows\system32\Mpeg2Data.ax
2013-08-03 07:19:48 57856 ----a-w- c:\windows\system32\MSDvbNP.ax
2013-08-03 07:15:05 9728 ----a-w- c:\windows\system32\lsass.exe
2013-08-03 07:15:05 72704 ----a-w- c:\windows\system32\secur32.dll
2013-08-03 07:15:05 499712 ----a-w- c:\windows\system32\kerberos.dll
2013-08-03 07:15:05 439896 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-08-03 07:15:05 175104 ----a-w- c:\windows\system32\wdigest.dll
2013-08-03 07:15:05 1256448 ----a-w- c:\windows\system32\lsasrv.dll
2013-08-03 07:14:26 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2013-08-03 07:14:26 190464 ----a-w- c:\windows\system32\iphlpsvc.dll
2013-08-03 07:14:26 15360 ----a-w- c:\windows\system32\drivers\TUNMP.SYS
2013-08-03 07:13:43 40960 ----a-w- c:\windows\apppatch\apihex86.dll
2013-08-03 07:13:43 24064 ----a-w- c:\windows\system32\amxread.dll
2013-08-03 07:13:43 13824 ----a-w- c:\windows\system32\apilogen.dll
2013-08-03 07:13:16 425472 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2013-08-03 07:13:15 712704 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-08-03 07:13:15 347136 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-08-03 07:12:13 443392 ----a-w- c:\windows\system32\win32spl.dll
2013-08-03 07:12:13 37888 ----a-w- c:\windows\system32\printcom.dll
2013-08-03 07:11:06 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2013-08-03 07:11:06 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2013-08-03 07:11:06 329216 ----a-w- c:\windows\system32\msdrm.dll
2013-08-03 07:11:06 151040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2013-08-03 07:11:06 151040 ----a-w- c:\windows\system32\secproc_ssp.dll
2013-08-03 07:11:05 523776 ----a-w- c:\windows\system32\RMActivate_isv.exe
2013-08-03 07:11:05 511488 ----a-w- c:\windows\system32\RMActivate.exe
2013-08-03 07:11:05 472576 ----a-w- c:\windows\system32\secproc_isv.dll
2013-08-03 07:11:05 472064 ----a-w- c:\windows\system32\secproc.dll
2013-08-03 06:07:09 23552 ----a-w- c:\windows\system32\lpk.dll
2013-08-03 06:07:09 10240 ----a-w- c:\windows\system32\dciman32.dll
2013-08-03 05:36:51 14848 ----a-w- c:\windows\system32\wshrm.dll
.
============= FINISH: 11:44:25.04 ===============

-------------------------------------------------------------------------
ATTACH Log
-------------------------------------------------------------------------

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft® Windows Vistaâ„¢ Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 7/31/2013 6:04:32 AM
System Uptime: 9/11/2013 11:39:43 AM (0 hours ago)
.
Motherboard: Acer, Inc. | | Chapala
Processor: Intel(R) Core(TM)2 Duo CPU T5250 @ 1.50GHz | U2E1 | 1500/166mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 88 GiB total, 56.717 GiB free.
D: is FIXED (NTFS) - 85 GiB total, 84.538 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.7)
Apple Application Support
Apple Mobile Device Support
Apple Software Update
Bonjour
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Intel PROSet Wireless
Intel(R) Graphics Media Accelerator Driver
Intel(R) PROSet/Wireless WiFi Software
Intel(R) TV Wizard
iTunes
Java 7 Update 25
Java Auto Updater
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4.5
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Ultimate 2007
Microsoft Office Word MUI (English) 2007
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Mozilla Firefox 23.0.1 (x86 en-US)
Mozilla Maintenance Service
QuickTime
RealDownloader
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealNetworks - Microsoft Visual C++ 2010 Runtime
RealPlayer
RealUpgrade 1.1
RICOH R5U8xx Media Driver ver.3.62.02
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
System Requirements Lab for Intel
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Windows Media Player Firefox Plugin
.
==== End Of File ===========================

 

Here are the results of my scan.

----------------------------------------------------
Roguekiller Log 1
----------------------------------------------------
RogueKiller V8.6.11 [Sep 11 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Started in : Normal mode
User : Acer [Admin rights]
Mode : Remove -- Date : 09/12/2013 01:35:21
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 3 ¤¤¤
[RUN][SUSP PATH] HKLM\[...]\Run : Search Protection (C:\ProgramData\Search Protection\SearchProtection.exe [x][x]) -> DELETED
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤
[Address] IRP[IRP_MJ_CREATE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BCC140)
[Address] IRP[IRP_MJ_CLOSE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BCC140)
[Address] IRP[IRP_MJ_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BBAA5A)
[Address] IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BBAA2C)
[Address] IRP[IRP_MJ_POWER] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BBAA88)
[Address] IRP[IRP_MJ_SYSTEM_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BC7B70)
[Address] IRP[IRP_MJ_PNP] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BC7B3C)

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost
::1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK2035GSS ATA Device +++++
--- User ---
[MBR] 483229e32e5039688f31f7a49839a850
[BSP] 7986bcf9f066a7f14d2c279b1653e0f7 : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 63 | Size: 9993 Mo
1 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 20467712 | Size: 90525 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 205862912 | Size: 86942 Mo
3 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 383920128 | Size: 3320 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_D_09122013_013521.txt >>
RKreport[0]_S_09122013_013506.txt

--------------------------------------------------------------
Roguekiller Log 2
RogueKiller V8.6.11 [Sep 11 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Started in : Normal mode
User : Acer [Admin rights]
Mode : Scan -- Date : 09/12/2013 01:35:06
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 3 ¤¤¤
[RUN][SUSP PATH] HKLM\[...]\Run : Search Protection (C:\ProgramData\Search Protection\SearchProtection.exe [x][x]) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤
[Address] IRP[IRP_MJ_CREATE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BCC140)
[Address] IRP[IRP_MJ_CLOSE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BCC140)
[Address] IRP[IRP_MJ_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BBAA5A)
[Address] IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BBAA2C)
[Address] IRP[IRP_MJ_POWER] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BBAA88)
[Address] IRP[IRP_MJ_SYSTEM_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BC7B70)
[Address] IRP[IRP_MJ_PNP] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] C:\Windows\system32\drivers\ataport.SYS @ 0x87BC7B3C)

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost
::1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK2035GSS ATA Device +++++
--- User ---
[MBR] 483229e32e5039688f31f7a49839a850
[BSP] 7986bcf9f066a7f14d2c279b1653e0f7 : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 63 | Size: 9993 Mo
1 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 20467712 | Size: 90525 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 205862912 | Size: 86942 Mo
3 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 383920128 | Size: 3320 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[0]_S_09122013_013506.txt >>

--------------------------------------------------------
MBAR
--------------------------------------------------------
NO MBAR CLEANUP NEEDED

 

Here is the combofix log.

ComboFix 13-09-16.01 - Acer 09/16/2013 22:07:24.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.2038.1235 [GMT -4:00]
Running from: c:\users\Acer\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\DFRB4CC.tmp
c:\programdata\Roaming
c:\programdata\SPL41B0.tmp
.
.
((((((((((((((((((((((((( Files Created from 2013-08-17 to 2013-09-17 )))))))))))))))))))))))))))))))
.
.
2013-09-17 02:15 . 2013-09-17 02:16 -------- d-----w- c:\users\Acer\AppData\Local\temp
2013-09-17 02:15 . 2013-09-17 02:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-09-16 20:37 . 2013-09-05 05:02 7328304 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8234AB47-5F16-4BAF-8BE0-410194AB166E}\mpengine.dll
2013-09-16 01:08 . 2011-03-12 21:55 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2013-09-16 01:08 . 2013-04-17 10:34 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2013-09-16 01:08 . 2013-04-17 11:28 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-09-16 01:08 . 2013-04-17 11:28 189952 ----a-w- c:\windows\system32\d3d10core.dll
2013-09-16 01:08 . 2013-04-17 11:28 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2013-09-16 01:08 . 2013-04-17 10:33 486400 ----a-w- c:\windows\system32\d3d10level9.dll
2013-09-16 01:08 . 2013-04-17 10:14 683008 ----a-w- c:\windows\system32\d2d1.dll
2013-09-16 01:08 . 2013-04-17 10:10 1069056 ----a-w- c:\windows\system32\DWrite.dll
2013-09-16 01:08 . 2013-04-17 10:10 798208 ----a-w- c:\windows\system32\FntCache.dll
2013-09-16 01:08 . 2013-04-17 11:28 1029120 ----a-w- c:\windows\system32\d3d10.dll
2013-09-15 20:05 . 2013-08-20 04:47 7166848 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-09-15 19:41 . 2013-09-15 19:41 -------- d-----w- c:\program files\Windows Portable Devices
2013-09-14 07:05 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2013-09-14 07:05 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2013-09-14 07:05 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2013-09-14 06:54 . 2012-02-29 15:11 5120 ----a-w- c:\windows\system32\wmi.dll
2013-09-14 06:54 . 2012-02-29 15:09 157696 ----a-w- c:\windows\system32\imagehlp.dll
2013-09-14 06:54 . 2012-02-29 13:32 12800 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2013-09-14 06:40 . 2013-09-14 06:40 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2013-09-14 06:39 . 2013-09-14 06:39 369664 ----a-w- c:\windows\system32\WMPhoto.dll
2013-09-14 06:39 . 2013-09-14 06:39 195584 ----a-w- c:\windows\system32\dxdiagn.dll
2013-09-14 06:39 . 2013-09-14 06:39 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-09-14 06:39 . 2013-09-14 06:39 519680 ----a-w- c:\windows\system32\d3d11.dll
2013-09-14 06:39 . 2013-09-14 06:39 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2013-09-14 06:39 . 2013-09-14 06:39 252928 ----a-w- c:\windows\system32\dxdiag.exe
2013-09-14 06:39 . 2013-09-14 06:39 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-09-14 06:19 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-09-14 06:18 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-09-14 06:18 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-09-14 06:18 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-09-14 06:18 . 2009-07-14 12:12 16896 ----a-w- c:\windows\system32\winusb.dll
2013-09-14 06:18 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-09-14 06:18 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-09-14 06:18 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-09-14 06:18 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2013-09-14 06:18 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-09-14 06:18 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll
2013-09-13 16:47 . 2011-09-30 15:57 707584 ----a-w- c:\program files\Common Files\System\wab32.dll
2013-09-13 16:46 . 2011-07-29 16:01 293376 ----a-w- c:\windows\system32\psisdecd.dll
2013-09-13 16:46 . 2011-07-29 16:01 217088 ----a-w- c:\windows\system32\psisrndr.ax
2013-09-13 16:46 . 2011-07-29 16:00 57856 ----a-w- c:\windows\system32\MSDvbNP.ax
2013-09-13 16:46 . 2011-07-29 16:00 69632 ----a-w- c:\windows\system32\Mpeg2Data.ax
2013-09-13 16:46 . 2013-06-15 13:22 15872 ----a-w- c:\windows\system32\icaapi.dll
2013-09-13 16:46 . 2013-06-15 11:23 24064 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
2013-09-13 16:46 . 2011-10-14 16:03 189952 ----a-w- c:\windows\system32\winmm.dll
2013-09-13 16:46 . 2011-10-14 16:00 23552 ----a-w- c:\windows\system32\mciseq.dll
2013-09-13 16:46 . 2012-05-11 15:57 623616 ----a-w- c:\windows\system32\localspl.dll
2013-09-13 16:45 . 2012-09-25 16:19 75776 ----a-w- c:\windows\system32\synceng.dll
2013-09-13 16:44 . 2013-07-05 04:53 905664 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-09-13 16:44 . 2011-10-14 16:02 429056 ----a-w- c:\windows\system32\EncDec.dll
2013-09-13 16:44 . 2013-07-17 19:41 2048 ----a-w- c:\windows\system32\tzres.dll
2013-09-13 16:44 . 2012-11-02 10:18 376320 ----a-w- c:\windows\system32\dpnet.dll
2013-09-13 16:44 . 2012-11-02 08:26 23040 ----a-w- c:\windows\system32\dpnsvr.exe
2013-09-13 16:43 . 2012-03-20 23:28 53120 ----a-w- c:\windows\system32\drivers\partmgr.sys
2013-09-13 16:43 . 2013-07-10 09:47 783360 ----a-w- c:\windows\system32\rpcrt4.dll
2013-09-13 16:43 . 2012-08-21 11:47 224640 ----a-w- c:\windows\system32\drivers\volsnap.sys
2013-09-13 16:43 . 2013-04-15 14:20 638328 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-09-13 16:43 . 2013-04-13 10:56 37376 ----a-w- c:\windows\system32\cdd.dll
2013-09-13 16:43 . 2011-02-22 14:13 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-09-13 16:43 . 2011-11-18 17:47 66560 ----a-w- c:\windows\system32\packager.dll
2013-09-13 16:42 . 2013-06-01 04:06 505344 ----a-w- c:\windows\system32\qedit.dll
2013-09-13 16:41 . 2013-08-03 02:06 304128 ----a-w- c:\program files\Internet Explorer\ieuser.exe
2013-09-13 16:41 . 2013-07-08 04:55 3603904 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-09-13 16:41 . 2013-07-09 12:10 1205168 ----a-w- c:\windows\system32\ntdll.dll
2013-09-13 16:41 . 2013-07-08 04:55 3551680 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-09-13 16:41 . 2013-03-09 01:28 64000 ----a-w- c:\windows\system32\smss.exe
2013-09-13 16:41 . 2013-03-09 03:45 49152 ----a-w- c:\windows\system32\csrsrv.dll
2013-09-13 16:41 . 2012-11-20 04:22 204288 ----a-w- c:\windows\system32\ncrypt.dll
2013-09-13 16:40 . 2013-03-03 19:07 1082232 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-09-13 16:40 . 2011-12-14 16:17 680448 ----a-w- c:\windows\system32\msvcrt.dll
2013-09-13 16:40 . 2012-11-08 03:48 1314816 ----a-w- c:\windows\system32\quartz.dll
2013-09-13 16:40 . 2012-06-05 16:47 708608 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2013-09-13 16:40 . 2013-05-02 04:04 443904 ----a-w- c:\windows\system32\win32spl.dll
2013-09-13 16:40 . 2013-05-02 04:03 37376 ----a-w- c:\windows\system32\printcom.dll
2013-09-13 16:40 . 2013-08-02 04:09 1548288 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-09-13 16:40 . 2013-04-24 01:46 812544 ----a-w- c:\windows\system32\certutil.exe
2013-09-13 16:40 . 2013-04-24 04:00 41984 ----a-w- c:\windows\system32\certenc.dll
2013-09-13 16:39 . 2012-11-02 10:19 1400832 ----a-w- c:\windows\system32\msxml6.dll
2013-09-13 16:39 . 2011-10-25 15:58 497152 ----a-w- c:\windows\system32\qdvd.dll
2013-09-13 16:39 . 2013-07-16 04:35 615936 ----a-w- c:\windows\system32\themeui.dll
2013-09-13 16:39 . 2011-11-16 16:23 377344 ----a-w- c:\windows\system32\winhttp.dll
2013-09-13 16:39 . 2012-03-01 11:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2013-09-13 16:39 . 2013-08-08 01:45 2049536 ----a-w- c:\windows\system32\win32k.sys
2013-09-13 16:38 . 2011-08-25 13:31 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2013-09-13 16:38 . 2011-08-25 16:15 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2013-09-13 16:38 . 2011-08-25 16:14 563712 ----a-w- c:\windows\system32\oleaut32.dll
2013-09-13 16:38 . 2011-08-25 16:14 238080 ----a-w- c:\windows\system32\oleacc.dll
2013-09-13 16:38 . 2013-03-08 03:53 376320 ----a-w- c:\windows\system32\winsrv.dll
2013-09-13 16:38 . 2012-06-05 16:47 1248768 ----a-w- c:\windows\system32\msxml3.dll
2013-09-13 16:37 . 2013-02-12 01:57 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys
2013-09-13 16:37 . 2013-03-08 03:52 2067968 ----a-w- c:\windows\system32\mstscax.dll
2013-09-13 16:37 . 2012-05-01 14:03 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2013-09-13 16:27 . 2013-04-17 12:30 24576 ----a-w- c:\windows\system32\cryptdlg.dll
2013-09-13 16:02 . 2012-06-04 15:26 440704 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-09-13 16:02 . 2012-06-02 00:04 278528 ----a-w- c:\windows\system32\schannel.dll
2013-09-13 16:02 . 2011-11-16 16:21 1259008 ----a-w- c:\windows\system32\lsasrv.dll
2013-09-13 16:02 . 2011-11-16 16:23 72704 ----a-w- c:\windows\system32\secur32.dll
2013-09-13 16:02 . 2011-11-16 14:12 9728 ----a-w- c:\windows\system32\lsass.exe
2013-09-13 16:02 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll
2013-09-13 16:02 . 2013-04-09 03:52 1218048 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-09-13 16:02 . 2013-04-09 03:51 964608 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-09-13 16:02 . 2012-02-01 15:10 1404928 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll
2013-09-13 16:02 . 2013-04-09 03:51 983552 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-09-13 16:02 . 2013-04-09 03:51 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-09-13 16:02 . 2012-02-01 13:58 47104 ----a-w- c:\program files\Windows Journal\PDIALOG.exe
2013-09-13 15:58 . 2013-07-08 04:16 992768 ----a-w- c:\windows\system32\crypt32.dll
2013-09-13 15:58 . 2013-07-08 04:20 172544 ----a-w- c:\windows\system32\wintrust.dll
2013-09-13 15:58 . 2013-07-08 04:16 98304 ----a-w- c:\windows\system32\cryptnet.dll
2013-09-13 15:58 . 2013-07-08 04:16 133120 ----a-w- c:\windows\system32\cryptsvc.dll
2013-09-13 15:54 . 2012-12-16 13:12 34304 ----a-w- c:\windows\system32\atmlib.dll
2013-09-13 15:54 . 2012-12-16 10:50 293376 ----a-w- c:\windows\system32\atmfd.dll
2013-09-12 21:15 . 2012-01-09 15:54 613376 ----a-w- c:\windows\system32\rdpencom.dll
2013-09-12 05:50 . 2013-09-12 06:11 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2013-09-12 04:11 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe
2013-09-12 04:11 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll
2013-09-12 04:11 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll
2013-09-12 04:11 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2013-09-12 04:10 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll
2013-09-12 04:10 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll
2013-09-12 04:10 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll
2013-09-12 04:10 . 2012-06-02 19:19 171904 ----a-w- c:\windows\system32\wuwebv.dll
2013-09-12 04:10 . 2012-06-02 19:12 33792 ----a-w- c:\windows\system32\wuapp.exe
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-14 06:39 . 2013-09-14 06:39 4096 ----a-w- c:\windows\system32\drivers\en-US\dxgkrnl.sys.mui
2013-09-11 16:45 . 2013-08-05 03:25 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-09-11 16:45 . 2013-08-05 03:25 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-09-03 04:51 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll
2013-09-03 04:51 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll
2013-08-03 22:58 . 2013-08-03 22:58 36864 ----a-w- c:\windows\system32\drivers\en-US\http.sys.mui
2013-08-03 08:49 . 2013-08-03 08:49 61440 ----a-w- c:\windows\system32\winipsec.dll
2013-08-03 08:49 . 2013-08-03 08:49 272896 ----a-w- c:\windows\system32\polstore.dll
2013-08-03 08:47 . 2013-08-03 08:47 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2013-08-03 08:47 . 2013-08-03 08:47 65024 ----a-w- c:\windows\system32\wlanapi.dll
2013-08-03 08:47 . 2013-08-03 08:47 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2013-08-03 08:47 . 2013-08-03 08:47 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2013-08-03 08:47 . 2013-08-03 08:47 513536 ----a-w- c:\windows\system32\wlansvc.dll
2013-08-03 08:47 . 2013-08-03 08:47 302592 ----a-w- c:\windows\system32\wlansec.dll
2013-08-03 08:47 . 2013-08-03 08:47 15181 ----a-w- c:\windows\system32\gatherWirelessInfo.vbs
2013-08-03 08:44 . 2013-08-03 08:44 71680 ----a-w- c:\windows\system32\atl.dll
2013-08-03 08:43 . 2013-08-03 08:43 53248 ----a-w- c:\windows\system32\tsgqec.dll
2013-08-03 08:43 . 2013-08-03 08:43 136192 ----a-w- c:\windows\system32\aaclient.dll
2013-08-03 08:41 . 2013-08-03 08:41 714240 ----a-w- c:\windows\system32\timedate.cpl
2013-08-03 08:36 . 2013-08-03 08:36 1793536 ----a-w- c:\windows\system32\NlsLexicons0045.dll
2013-08-03 08:36 . 2013-08-03 08:36 1808896 ----a-w- c:\windows\system32\NlsLexicons0046.dll
2013-08-03 08:36 . 2013-08-03 08:36 1558016 ----a-w- c:\windows\system32\NlsLexicons0049.dll
2013-08-03 08:36 . 2013-08-03 08:36 1411072 ----a-w- c:\windows\system32\NlsLexicons0047.dll
2013-08-03 08:36 . 2013-08-03 08:36 1782272 ----a-w- c:\windows\system32\NlsLexicons0039.dll
2013-08-03 08:36 . 2013-08-03 08:36 1236992 ----a-w- c:\windows\system32\NlsLexicons0020.dll
2013-08-03 08:36 . 2013-08-03 08:36 2136064 ----a-w- c:\windows\system32\NlsLexicons0021.dll
2013-08-03 08:36 . 2013-08-03 08:36 5499904 ----a-w- c:\windows\system32\NlsLexicons0022.dll
2013-08-03 08:36 . 2013-08-03 08:36 7964672 ----a-w- c:\windows\system32\NlsLexicons0024.dll
2013-08-03 08:36 . 2013-08-03 08:36 5791232 ----a-w- c:\windows\system32\NlsLexicons0026.dll
2013-08-03 08:36 . 2013-08-03 08:36 6224896 ----a-w- c:\windows\system32\NlsLexicons0027.dll
2013-08-03 08:36 . 2013-08-03 08:36 4175872 ----a-w- c:\windows\system32\NlsLexicons0010.dll
2013-08-03 08:36 . 2013-08-03 08:36 2466816 ----a-w- c:\windows\system32\NlsLexicons0011.dll
2013-08-03 08:36 . 2013-08-03 08:36 4981248 ----a-w- c:\windows\system32\NlsLexicons0013.dll
2013-08-03 08:36 . 2013-08-03 08:36 6781440 ----a-w- c:\windows\system32\NlsLexicons0019.dll
2013-08-03 08:36 . 2013-08-03 08:36 3331072 ----a-w- c:\windows\system32\NlsLexicons0018.dll
2013-08-03 08:36 . 2013-08-03 08:36 11722752 ----a-w- c:\windows\system32\NlsLexicons0001.dll
2013-08-03 08:36 . 2013-08-03 08:36 4164096 ----a-w- c:\windows\system32\NlsLexicons0002.dll
2013-08-03 08:36 . 2013-08-03 08:36 1452544 ----a-w- c:\windows\system32\NlsLexicons0003.dll
2013-08-03 08:36 . 2013-08-03 08:36 3419136 ----a-w- c:\windows\system32\NlsLexicons004a.dll
2013-08-03 08:36 . 2013-08-03 08:36 1702912 ----a-w- c:\windows\system32\NlsLexicons004b.dll
2013-08-03 08:36 . 2013-08-03 08:36 4093440 ----a-w- c:\windows\system32\NlsLexicons004c.dll
2013-08-03 08:36 . 2013-08-03 08:36 4045824 ----a-w- c:\windows\system32\NlsLexicons003e.dll
2013-08-03 08:36 . 2013-08-03 08:36 1972736 ----a-w- c:\windows\system32\NlsLexicons004e.dll
2013-08-03 08:36 . 2013-08-03 08:36 6014976 ----a-w- c:\windows\system32\NlsLexicons001a.dll
2013-08-03 08:36 . 2013-08-03 08:36 4096 ----a-w- c:\windows\system32\NlsLexicons002a.dll
2013-08-03 08:36 . 2013-08-03 08:36 6585856 ----a-w- c:\windows\system32\NlsLexicons001b.dll
2013-08-03 08:36 . 2013-08-03 08:36 6346240 ----a-w- c:\windows\system32\NlsLexicons001d.dll
2013-08-03 08:36 . 2013-08-03 08:36 9892864 ----a-w- c:\windows\system32\NlsLexicons000a.dll
2013-08-03 08:36 . 2013-08-03 08:36 6237696 ----a-w- c:\windows\system32\NlsLexicons000c.dll
2013-08-03 08:36 . 2013-08-03 08:36 5654528 ----a-w- c:\windows\system32\NlsLexicons000f.dll
2013-08-03 08:36 . 2013-08-03 08:36 1722368 ----a-w- c:\windows\system32\NlsLexicons000d.dll
2013-08-03 08:36 . 2013-08-03 08:36 5090816 ----a-w- c:\windows\system32\NlsLexicons0416.dll
2013-08-03 08:36 . 2013-08-03 08:36 4616192 ----a-w- c:\windows\system32\NlsLexicons0414.dll
2013-08-03 08:36 . 2013-08-03 08:36 5031936 ----a-w- c:\windows\system32\NlsLexicons0816.dll
2013-08-03 08:36 . 2013-08-03 08:36 7042560 ----a-w- c:\windows\system32\NlsLexicons081a.dll
2013-08-03 08:36 . 2013-08-03 08:36 5071872 ----a-w- c:\windows\system32\NlsModels0011.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData0046.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData0045.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData0047.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData0049.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData0039.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData0020.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData0026.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData0024.dll
2013-08-03 08:36 . 2013-08-03 08:36 1801216 ----a-w- c:\windows\system32\NlsData0022.dll
2013-08-03 08:36 . 2013-08-03 08:36 1801216 ----a-w- c:\windows\system32\NlsData0021.dll
2013-08-03 08:36 . 2013-08-03 08:36 1966592 ----a-w- c:\windows\system32\NlsData0027.dll
2013-08-03 08:36 . 2013-08-03 08:36 4495360 ----a-w- c:\windows\system32\NlsData0010.dll
2013-08-03 08:36 . 2013-08-03 08:36 2657280 ----a-w- c:\windows\system32\NlsData0011.dll
2013-08-03 08:36 . 2013-08-03 08:36 3466752 ----a-w- c:\windows\system32\NlsData0013.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData0018.dll
2013-08-03 08:36 . 2013-08-03 08:36 1523712 ----a-w- c:\windows\system32\NlsData0000.dll
2013-08-03 08:36 . 2013-08-03 08:36 4497408 ----a-w- c:\windows\system32\NlsData0019.dll
2013-08-03 08:36 . 2013-08-03 08:36 2599936 ----a-w- c:\windows\system32\NlsData0001.dll
2013-08-03 08:36 . 2013-08-03 08:36 2243072 ----a-w- c:\windows\system32\NlsData0007.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData0003.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData0002.dll
2013-08-03 08:36 . 2013-08-03 08:36 4875776 ----a-w- c:\windows\system32\NlsData0009.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData004b.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData004a.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData004e.dll
2013-08-03 08:36 . 2013-08-03 08:36 3104768 ----a-w- c:\windows\system32\NlsData004c.dll
2013-08-03 08:36 . 2013-08-03 08:36 1801216 ----a-w- c:\windows\system32\NlsData003e.dll
2013-08-03 08:36 . 2013-08-03 08:36 1801216 ----a-w- c:\windows\system32\NlsData002a.dll
2013-08-03 08:36 . 2013-08-03 08:36 4495360 ----a-w- c:\windows\system32\NlsData001d.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData001b.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData001a.dll
2013-08-03 08:36 . 2013-08-03 08:36 9847296 ----a-w- c:\windows\system32\NlsData000a.dll
2013-08-03 08:36 . 2013-08-03 08:36 2643456 ----a-w- c:\windows\system32\NlsData000c.dll
2013-08-03 08:36 . 2013-08-03 08:36 4495360 ----a-w- c:\windows\system32\NlsData0414.dll
2013-08-03 08:36 . 2013-08-03 08:36 2342912 ----a-w- c:\windows\system32\NlsData000d.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData000f.dll
2013-08-03 08:36 . 2013-08-03 08:36 4495360 ----a-w- c:\windows\system32\NlsData0816.dll
2013-08-03 08:36 . 2013-08-03 08:36 4495360 ----a-w- c:\windows\system32\NlsData0416.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData081a.dll
2013-08-03 08:36 . 2013-08-03 08:36 6917120 ----a-w- c:\windows\system32\NlsLexicons0c1a.dll
2013-08-03 08:36 . 2013-08-03 08:36 1965056 ----a-w- c:\windows\system32\NlsData0c1a.dll
2013-08-03 08:32 . 2013-08-03 08:32 6656 ----a-w- c:\windows\system32\kbd106n.dll
2013-08-03 08:30 . 2013-08-03 08:30 62464 ----a-w- c:\windows\system32\l3codeca.acm
2013-08-03 08:30 . 2013-08-03 08:30 220672 ----a-w- c:\windows\system32\l3codecp.acm
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar "= "c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor "= "c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"IgfxTray "= "c:\windows\system32\igfxtray.exe" [2009-10-02 141848]
"HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2009-10-02 173592]
"Persistence "= "c:\windows\system32\igfxpers.exe" [2009-10-02 150552]
"Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"APSDaemon "= "c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-22 59720]
"iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2013-08-16 152392]
"MSC "= "c:\program files\Microsoft Security Client\msseces.exe" [2013-06-20 995176]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2013-05-01 421888]
"TkBellExe "= "c:\program files\Real\RealPlayer\Update\realsched.exe" [2013-09-03 295512]
"DLBTCATS "= "c:\windows\system32\spool\DRIVERS\W32X86\3\DLBTtime.dll" [2007-02-22 73728]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle "= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@= "Service "
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@= "Service "
.
S1 A2DDA;A2 Direct Disk Access Support Driver;c:\eek\RUN\a2ddax86.sys [2013-09-10 22056]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder
.
2013-09-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-05 16:45]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_4&ent=hp&u=DA1DBCB66159D41C9DF214523074F493
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 209.18.47.61 209.18.47.62
FF - ProfilePath - c:\users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\r3kmhmhg.default\
FF - prefs.js: browser.search.selectedEngine - SecureSearch
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - ExtSQL: 2013-08-03 04:21; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - ExtSQL: 2013-09-03 05:31; {DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}; c:\programdata\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
.
- - - - ORPHANS REMOVED - - - -
.
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
SafeBoot-WudfPf
SafeBoot-WudfRd
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-09-16 22:16
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DLBTCATS = rundll32 c:\windows\system32\spool\DRIVERS\W32X86\3\DLBTtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
Completion time: 2013-09-16 22:19:59
ComboFix-quarantined-files.txt 2013-09-17 02:19
.
Pre-Run: 49,203,912,704 bytes free
Post-Run: 49,368,621,056 bytes free
.
- - End Of File - - 45B332036898E4C04FE585ACEECE8388
5C616939100B85E558DA92B899A0FC36

 

Here are the logs.

ADWCleaner
--------------
# AdwCleaner v3.004 - Report created 16/09/2013 at 23:34:49
# Updated 15/09/2013 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : Acer - ACER-PC
# Running from : C:\Users\Acer\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16506


-\\ Mozilla Firefox v23.0.1 (en-US)

[ File : C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\r3kmhmhg.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1044 octets] - [16/09/2013 23:34:07]
AdwCleaner[S0].txt - [973 octets] - [16/09/2013 23:34:49]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1032 octets] ##########

-------------
JRT Log
-------------

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.1 (09.15.2013:1)
OS: Windows Vista (TM) Home Premium x86
Ran by Acer on Mon 09/16/2013 at 23:41:32.29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1603897374-4250941417-3919134008-1000\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Acer\AppData\Roaming\mozilla\firefox\profiles\r3kmhmhg.default\minidumps [8 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Mon 09/16/2013 at 23:45:43.08
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


----------
OTL Log
----------

OTL logfile created on: 9/16/2013 11:49:17 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Acer\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 1.13 Gb Available Physical Memory | 56.71% Memory free
4.21 Gb Paging File | 3.22 Gb Available in Paging File | 76.38% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 88.40 Gb Total Space | 45.85 Gb Free Space | 51.86% Space Free | Partition Type: NTFS
Drive D: | 84.90 Gb Total Space | 84.54 Gb Free Space | 99.57% Space Free | Partition Type: NTFS

Computer Name: ACER-PC | User Name: Acer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/09/16 23:29:55 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Acer\Desktop\OTL.exe
PRC - [2013/09/03 05:29:38 | 000,295,512 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Real\RealPlayer\Update\realsched.exe
PRC - [2013/08/14 15:19:24 | 000,039,056 | ---- | M] () -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
PRC - [2013/06/20 18:05:14 | 000,312,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MpCmdRun.exe
PRC - [2013/06/20 18:05:14 | 000,022,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2013/06/20 17:25:44 | 000,995,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2013/05/10 03:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2009/04/11 02:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/10/16 17:26:20 | 000,860,160 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe
PRC - [2008/10/16 16:54:34 | 000,466,944 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
PRC - [2007/06/07 01:50:14 | 000,538,096 | ---- | M] ( ) -- C:\Windows\System32\dlbtcoms.exe


========== Modules (No Company Name) ==========

MOD - [2013/04/21 21:44:32 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2013/04/21 21:44:04 | 001,242,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll


========== Services (SafeList) ==========

SRV - [2013/09/11 12:45:38 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/08/16 21:00:42 | 000,117,656 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/08/14 15:19:24 | 000,039,056 | ---- | M] () [Auto | Running] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2013/06/20 18:05:14 | 000,022,208 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2013/05/10 03:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2008/10/16 17:26:20 | 000,860,160 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV - [2008/10/16 16:54:34 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV - [2008/01/18 23:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/06/07 01:50:14 | 000,538,096 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\dlbtcoms.exe -- (dlbt_device)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\usbstor.sys -- (USBSTOR)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | System | Stopped] -- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4F81F788-BF8D-446C-83D2-751F6AC22052}\MpKsl72b74398.sys -- (MpKsl72b74398)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Acer\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2013/09/11 09:48:45 | 000,013,560 | ---- | M] (GFI Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\gfibto.sys -- (gfibto)
DRV - [2013/09/10 00:12:44 | 000,022,056 | ---- | M] (Emsisoft GmbH) [File_System | System | Running] -- C:\EEK\Run\a2ddax86.sys -- (A2DDA)
DRV - [2013/09/10 00:12:40 | 000,050,200 | ---- | M] (Emsisoft GmbH) [File_System | On_Demand | Stopped] -- C:\EEK\Run\cleanhlp32.sys -- (cleanhlp)
DRV - [2013/04/04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2009/06/25 16:58:10 | 000,048,128 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2009/06/25 16:25:58 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2009/06/25 16:10:48 | 000,044,544 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2008/11/17 07:40:22 | 003,668,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32)
DRV - [2007/03/28 07:51:40 | 000,043,008 | ---- | M] (Winbond Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\winbondcir.sys -- (winbondcir)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1603897374-4250941417-3919134008-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-1603897374-4250941417-3919134008-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1603897374-4250941417-3919134008-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1603897374-4250941417-3919134008-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search
IE - HKU\S-1-5-21-1603897374-4250941417-3919134008-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1603897374-4250941417-3919134008-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/ "
FF - prefs.js..extensions.enabledAddons: %7BDF153AFF-6948-45d7-AC98-4FC4AF8A08E2%7D:1.3.3
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/09/03 05:30:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/09/11 22:58:17 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/09/11 22:58:17 | 000,000,000 | ---D | M]

[2013/08/03 02:50:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Acer\AppData\Roaming\Mozilla\Extensions
[2013/09/11 09:51:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Acer\AppData\Roaming\Mozilla\Firefox\Profiles\r3kmhmhg.default\extensions
[2013/09/08 02:16:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/08/16 21:00:44 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/09/03 05:30:58 | 000,000,000 | ---D | M] (RealDownloader) -- C:\PROGRAMDATA\REALNETWORKS\REALDOWNLOADER\BROWSERPLUGINS\FIREFOX\EXT

O1 HOSTS File: ([2013/09/16 22:15:58 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [DLBTCATS] C:\Windows\System32\spool\DRIVERS\W32X86\3\DLBTtime.DLL ()
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1603897374-4250941417-3919134008-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1603897374-4250941417-3919134008-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} http://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab (SysInfo Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{286AC4CD-FF2B-4BBE-9409-ACE9B11C2D48}: DhcpNameServer = 209.18.47.61 209.18.47.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{64C66C46-53BA-4018-9356-9310A68C8C48}: DhcpNameServer = 209.18.47.61 209.18.47.62
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/09/16 23:41:25 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013/09/16 23:34:03 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013/09/16 23:29:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Acer\Desktop\OTL.exe
[2013/09/16 23:29:47 | 001,029,675 | ---- | C] (Thisisu) -- C:\Users\Acer\Desktop\JRT.exe
[2013/09/16 22:20:08 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2013/09/16 22:20:01 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2013/09/16 22:20:01 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Local\temp
[2013/09/16 22:03:49 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013/09/16 22:03:49 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013/09/16 22:03:49 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013/09/16 22:03:37 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013/09/16 22:03:13 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2013/09/16 21:57:03 | 005,126,417 | R--- | C] (Swearware) -- C:\Users\Acer\Desktop\ComboFix.exe
[2013/09/15 15:41:15 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices
[2013/09/12 01:50:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2013/09/12 01:49:18 | 000,000,000 | ---D | C] -- C:\Users\Acer\Desktop\mbar
[2013/09/12 01:48:00 | 000,000,000 | ---D | C] -- C:\Users\Acer\Desktop\Windows BBS Logs
[2013/09/12 01:32:26 | 000,000,000 | ---D | C] -- C:\Users\Acer\Desktop\RK_Quarantine
[2013/09/11 16:14:14 | 000,000,000 | ---D | C] -- C:\Windows\System32\eu-ES
[2013/09/11 16:14:14 | 000,000,000 | ---D | C] -- C:\Windows\System32\ca-ES
[2013/09/11 16:14:13 | 000,000,000 | ---D | C] -- C:\Windows\System32\vi-VN
[2013/09/11 14:45:25 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2013/09/11 11:38:11 | 000,688,992 | R--- | C] (Swearware) -- C:\Users\Acer\Desktop\dds.com
[2013/09/11 10:09:56 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Roaming\Malwarebytes
[2013/09/11 10:09:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/09/11 10:09:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/09/11 10:09:42 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013/09/11 10:09:42 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013/09/11 09:50:12 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Roaming\LavasoftStatistics
[2013/09/11 09:49:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Downloaded Installations
[2013/09/11 09:49:48 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Roaming\SecureSearch
[2013/09/11 09:49:39 | 000,000,000 | ---D | C] -- C:\Program Files\Lavasoft
[2013/09/11 09:48:46 | 000,044,424 | ---- | C] (GFI Software) -- C:\Windows\System32\sbbd.exe
[2013/09/11 09:48:46 | 000,013,560 | ---- | C] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013/09/11 09:48:44 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Roaming\Ad-Aware Antivirus
[2013/09/10 22:43:39 | 000,000,000 | ---D | C] -- C:\EEK
[2013/09/10 17:46:36 | 000,229,648 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2013/09/10 17:45:22 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2013/09/10 17:45:04 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2013/09/08 05:48:12 | 000,000,000 | ---D | C] -- C:\ProgramData\WindowsSearch
[2013/09/04 15:44:21 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Roaming\Skype
[2013/09/04 15:43:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2013/09/03 22:54:31 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell
[2013/09/03 05:32:06 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Roaming\RealNetworks
[2013/09/03 05:30:55 | 000,000,000 | ---D | C] -- C:\Program Files\RealNetworks
[2013/09/03 05:30:51 | 000,000,000 | ---D | C] -- C:\ProgramData\RealNetworks
[2013/09/03 05:30:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\xing shared
[2013/09/03 05:29:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
[2013/09/03 05:29:42 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\System32\pncrt.dll
[2013/09/03 05:29:18 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2013/09/03 05:28:34 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Roaming\Real
[2013/09/03 05:27:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Real
[2013/09/03 05:17:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2013/09/03 05:16:30 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2013/09/02 21:48:20 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2013/08/26 02:07:37 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Roaming\Apple Computer
[2013/08/26 02:07:37 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Local\Apple Computer
[2013/08/26 02:07:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/08/26 02:05:25 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2013/08/26 02:04:13 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013/08/26 02:04:10 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013/08/26 02:04:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2013/08/26 02:04:10 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013/08/26 02:03:01 | 000,000,000 | ---D | C] -- C:\Users\Acer\AppData\Local\Apple
[2013/08/26 02:02:49 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2013/08/26 02:01:05 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2013/08/26 02:00:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2013/08/26 02:00:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2013/08/26 01:34:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2013/08/26 01:34:14 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2013/08/26 01:33:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2013/08/24 01:15:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013/08/24 01:15:02 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2013/08/19 23:00:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Printers
[2013/08/19 23:00:11 | 000,000,000 | ---D | C] -- C:\Program Files\dl_Cats

========== Files - Modified Within 30 Days ==========

[2013/09/16 23:43:26 | 000,657,036 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/09/16 23:43:26 | 000,125,326 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/09/16 23:40:16 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/09/16 23:36:28 | 000,003,952 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/09/16 23:36:27 | 000,003,952 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/09/16 23:36:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/09/16 23:29:55 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Acer\Desktop\OTL.exe
[2013/09/16 23:29:48 | 001,029,675 | ---- | M] (Thisisu) -- C:\Users\Acer\Desktop\JRT.exe
[2013/09/16 23:29:43 | 001,039,554 | ---- | M] () -- C:\Users\Acer\Desktop\adwcleaner.exe
[2013/09/16 22:15:58 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013/09/16 21:57:17 | 005,126,417 | R--- | M] (Swearware) -- C:\Users\Acer\Desktop\ComboFix.exe
[2013/09/15 23:08:50 | 000,002,585 | ---- | M] () -- C:\Users\Acer\Desktop\Microsoft Office Excel 2007.lnk
[2013/09/15 22:46:14 | 000,002,627 | ---- | M] () -- C:\Users\Acer\Desktop\Microsoft Office Word 2007.lnk
[2013/09/15 15:48:52 | 000,000,947 | ---- | M] () -- C:\Users\Acer\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/09/15 15:45:33 | 000,371,808 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013/09/15 15:35:30 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
[2013/09/14 02:42:28 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2013/09/14 02:42:28 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2013/09/14 02:42:07 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013/09/12 01:28:34 | 000,918,016 | ---- | M] () -- C:\Users\Acer\Desktop\RogueKiller.exe
[2013/09/11 11:38:18 | 000,688,992 | R--- | M] (Swearware) -- C:\Users\Acer\Desktop\dds.com
[2013/09/11 10:09:44 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/11 09:52:34 | 000,000,680 | ---- | M] () -- C:\Users\Acer\AppData\Local\d3d9caps.dat
[2013/09/11 09:48:45 | 000,044,424 | ---- | M] (GFI Software) -- C:\Windows\System32\sbbd.exe
[2013/09/11 09:48:45 | 000,013,560 | ---- | M] (GFI Software) -- C:\Windows\System32\drivers\gfibto.sys
[2013/09/10 22:44:00 | 000,000,502 | ---- | M] () -- C:\Users\Acer\Desktop\Emsisoft Emergency Kit.lnk
[2013/09/10 17:58:47 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2013/09/06 09:10:40 | 000,206,104 | ---- | M] () -- C:\Users\Acer\Desktop\James Lorich 2013 R New.pdf
[2013/09/04 22:50:11 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2013/09/04 19:12:10 | 000,001,614 | ---- | M] () -- C:\Users\Acer\Desktop\Calculator.lnk
[2013/09/03 05:31:15 | 000,001,073 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2013/09/03 05:29:43 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\System32\pncrt.dll
[2013/09/03 05:17:10 | 000,001,730 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2013/09/03 00:51:19 | 000,101,888 | ---- | M] (Infineon Technologies AG) -- C:\Windows\System32\ifxcardm.dll
[2013/09/03 00:51:15 | 000,082,432 | ---- | M] (Gemalto, Inc.) -- C:\Windows\System32\axaltocm.dll
[2013/09/03 00:42:10 | 000,196,608 | ---- | M] () -- C:\Windows\SPInstall.etl
[2013/09/02 21:49:10 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2013/08/30 03:47:32 | 000,229,648 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2013/08/29 04:32:43 | 000,000,942 | ---- | M] () -- C:\Users\Acer\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2013/08/26 14:43:06 | 000,065,544 | ---- | M] () -- C:\Users\Acer\Documents\2013 Food Stamps Application.pdf
[2013/08/26 02:07:26 | 000,001,668 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/08/26 01:34:30 | 000,001,896 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2013/08/20 01:13:26 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\UMDF\Msft_User_WpdMtpDr_01_00_00.Wdf

========== Files Created - No Company Name ==========

[2013/09/16 23:29:42 | 001,039,554 | ---- | C] () -- C:\Users\Acer\Desktop\adwcleaner.exe
[2013/09/16 22:03:49 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013/09/16 22:03:49 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013/09/16 22:03:49 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013/09/16 22:03:49 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013/09/16 22:03:49 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013/09/15 15:35:30 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
[2013/09/14 02:42:07 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013/09/14 02:19:24 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013/09/14 02:19:24 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013/09/12 01:28:16 | 000,918,016 | ---- | C] () -- C:\Users\Acer\Desktop\RogueKiller.exe
[2013/09/11 10:09:44 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013/09/10 22:44:00 | 000,000,502 | ---- | C] () -- C:\Users\Acer\Desktop\Emsisoft Emergency Kit.lnk
[2013/09/06 09:10:38 | 000,206,104 | ---- | C] () -- C:\Users\Acer\Desktop\James Lorich 2013 R New.pdf
[2013/09/04 22:50:11 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2013/09/04 19:12:10 | 000,001,614 | ---- | C] () -- C:\Users\Acer\Desktop\Calculator.lnk
[2013/09/04 15:15:00 | 000,130,008 | ---- | C] () -- C:\Windows\System32\systemsf.ebd
[2013/09/04 15:14:54 | 000,009,239 | ---- | C] () -- C:\Windows\System32\spcinstrumentation.man
[2013/09/04 15:14:34 | 000,442,788 | ---- | C] () -- C:\Windows\System32\dot3.tmf
[2013/09/04 15:14:30 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2013/09/04 15:14:29 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2013/09/04 15:14:23 | 000,392,170 | ---- | C] () -- C:\Windows\System32\onex.tmf
[2013/09/04 15:14:12 | 000,344,698 | ---- | C] () -- C:\Windows\System32\eaphost.tmf
[2013/09/04 15:13:33 | 000,208,966 | ---- | C] () -- C:\Windows\System32\WFP.TMF
[2013/09/04 15:13:28 | 000,092,918 | ---- | C] () -- C:\Windows\System32\slmgr.vbs
[2013/09/04 15:11:33 | 000,009,212 | ---- | C] () -- C:\Windows\System32\RacUR.xml
[2013/09/04 15:11:24 | 000,000,153 | ---- | C] () -- C:\Windows\System32\RacUREx.xml
[2013/09/03 23:07:29 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2013/09/03 23:07:23 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex
[2013/09/03 22:52:04 | 000,201,184 | ---- | C] () -- C:\Windows\System32\winrm.vbs
[2013/09/03 22:52:04 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml
[2013/09/03 22:52:04 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl
[2013/09/03 05:31:15 | 000,001,073 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2013/09/03 05:17:10 | 000,001,730 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2013/09/03 00:13:29 | 000,145,455 | ---- | C] () -- C:\Windows\System32\perfmon.msc
[2013/09/03 00:11:51 | 000,144,909 | ---- | C] () -- C:\Windows\System32\fsmgmt.msc
[2013/09/03 00:11:42 | 000,012,198 | ---- | C] () -- C:\Windows\System32\gatherWiredInfo.vbs
[2013/09/03 00:11:24 | 000,141,611 | ---- | C] () -- C:\Windows\System32\drivers\VSTProf.cty
[2013/09/03 00:04:21 | 000,196,608 | ---- | C] () -- C:\Windows\SPInstall.etl
[2013/09/02 21:49:10 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
[2013/09/02 21:48:47 | 000,001,830 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2013/08/29 04:32:43 | 000,000,942 | ---- | C] () -- C:\Users\Acer\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2013/08/26 14:41:52 | 000,065,544 | ---- | C] () -- C:\Users\Acer\Documents\2013 Food Stamps Application.pdf
[2013/08/26 02:07:26 | 000,001,668 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013/08/26 02:03:00 | 000,001,830 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2013/08/26 01:34:30 | 000,002,425 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2013/08/26 01:34:30 | 000,001,896 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2013/08/03 02:40:27 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2013/07/31 03:13:10 | 000,000,680 | ---- | C] () -- C:\Users\Acer\AppData\Local\d3d9caps.dat

========== ZeroAccess Check ==========

[2006/11/02 08:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shell32.dll -- [2012/06/08 13:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 02:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
" " = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 02:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013/09/11 09:48:44 | 000,000,000 | ---D | M] -- C:\Users\Acer\AppData\Roaming\Ad-Aware Antivirus
[2013/09/11 09:49:48 | 000,000,000 | ---D | M] -- C:\Users\Acer\AppData\Roaming\SecureSearch

========== Purity Check ==========



< End of report >


----------
Extras Log
----------

OTL Extras logfile created on: 9/16/2013 11:49:17 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Acer\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 1.13 Gb Available Physical Memory | 56.71% Memory free
4.21 Gb Paging File | 3.22 Gb Available in Paging File | 76.38% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 88.40 Gb Total Space | 45.85 Gb Free Space | 51.86% Space Free | Partition Type: NTFS
Drive D: | 84.90 Gb Total Space | 84.54 Gb Free Space | 99.57% Space Free | Partition Type: NTFS

Computer Name: ACER-PC | User Name: Acer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1 ",%*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1603897374-4250941417-3919134008-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1 ",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{324CCE77-4216-4784-9C59-635304FC347A}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{14E0C1A6-053F-46A2-BF53-37D434BB6433}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{44C6BC32-21A6-4A45-A3CE-AC9F083732D3}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{51286432-8856-454A-B507-94BF864EFDB0}" = protocol=17 | dir=in | app=c:\windows\system32\dlbtcoms.exe |
"{63B54310-7EEB-4450-B866-042EC810EDE8}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{83B30B67-4A6A-4DB6-8466-C957664C25FB}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B76C1798-8337-46C7-90FF-C58EC912CB24}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{B80269B2-47C3-4A8E-B11A-EC75B7000143}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{C7247E59-DB8A-4192-B62C-5D821CC376B3}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{EFD240B9-7DB5-4330-B4AA-DF188712C708}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{FF3BA651-528C-418B-8C38-4DF8466A0DD0}" = protocol=6 | dir=in | app=c:\windows\system32\dlbtcoms.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{35C0A1E4-D02A-412C-841F-266DBB116ABB}" = Intel(R) PROSet/Wireless WiFi Software
"{3DADB23F-94E6-4E4D-AFE8-15DE4395E8F3}" = Microsoft Security Client
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{53C63F43-B827-42D9-8886-4698D91EA33B}" = System Requirements Lab for Intel
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5U8xx Media Driver ver.3.62.02
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ULTIMATER_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ULTIMATER_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ULTIMATER_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ULTIMATER_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ULTIMATER_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ULTIMATER_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-002E-0000-0000-0000000FF1CE}" = Microsoft Office Ultimate 2007
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5
"{9B486871-27EB-49A5-8832-77176E63333C}" = iTunes
"{9F612429-4A00-3D44-88CF-146DA2EE1F92}" = Microsoft .NET Framework 4.5
"{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.8)
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{C8E8D2E3-EF6A-4B1D-A09E-7B27EBE2F3CE}" = RealDownloader
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 23.0.1 (x86 en-US)" = Mozilla Firefox 23.0.1 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"ProInst" = Intel PROSet Wireless
"RealPlayer 16.0" = RealPlayer
"TVWiz" = Intel(R) TV Wizard
"ULTIMATER" = Microsoft Office Ultimate 2007

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1603897374-4250941417-3919134008-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

========== Last 20 Event Log Errors ==========

[ OSession Events ]
Error - 8/19/2013 1:21:17 AM | Computer Name = Acer-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1783
seconds with 1500 seconds of active time. This session ended with a crash.


< End of report >


Thank you.

 

Here are the logs,

----------
OTL
----------
All processes killed
Error: Unable to interpret <Code:> in the current context!
========== OTL ==========
Service USBSTOR stopped successfully!
Service USBSTOR deleted successfully!
File C:\Windows\system32\drivers\usbstor.sys not found.
Service NwlnkFwd stopped successfully!
Service NwlnkFwd deleted successfully!
File system32\DRIVERS\nwlnkfwd.sys not found.
Service NwlnkFlt stopped successfully!
Service NwlnkFlt deleted successfully!
File system32\DRIVERS\nwlnkflt.sys not found.
Service MpKsl72b74398 stopped successfully!
Service MpKsl72b74398 deleted successfully!
File C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4F81F788-BF8D-446C-83D2-751F6AC22052}\MpKsl72b74398.sys not found.
Service IpInIp stopped successfully!
Service IpInIp deleted successfully!
File system32\DRIVERS\ipinip.sys not found.
Service catchme stopped successfully!
Service catchme deleted successfully!
File C:\Users\Acer\AppData\Local\Temp\catchme.sys not found.
Service blbdrive stopped successfully!
Service blbdrive deleted successfully!
File C:\Windows\system32\drivers\blbdrive.sys not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@Apple.com/iTunes,version=\ deleted successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
File\Folder C:\FRST not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Acer
->Temp folder emptied: 2206809 bytes
->Temporary Internet Files folder emptied: 151394229 bytes
->Java cache emptied: 37823 bytes
->FireFox cache emptied: 107973651 bytes
->Flash cache emptied: 20776 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 17116 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 250.00 mb


[EMPTYJAVA]

User: Acer
->Java cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Public

Total Java Files Cleaned = 0.00 mb


[EMPTYFLASH]

User: Acer
->Flash cache emptied: 0 bytes

User: All Users

User: Default

User: Default User

User: Public

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 09182013_220947

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

----------
Security Check Log
----------
Results of screen317's Security Check version 0.99.73
Windows Vista Service Pack 2 x86 (UAC is enabled)
Internet Explorer 9
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Microsoft Security Essentials
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
Java 7 Update 25
Adobe Flash Player 11.8.800.168
Adobe Reader 10.1.8 Adobe Reader out of Date!
Mozilla Firefox (23.0.1)
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 4 % Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````

----------
FSS Log
----------
Farbar Service Scanner Version: 13-09-2013
Ran by Acer (administrator) on 18-09-2013 at 22:43:15
Running from "C:\Users\Acer\Desktop "
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware "=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

----------
ESET Log
----------
No Threats found/No Log

 

Seems to be working OK. Changing internet pages takes forever though. I am going to clear the cache and let you know how it is working.

 

Mozilla Firefox. But it even happens at times using regular programs like Excel. Just freezes.