1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Deckard's System Scanner Results

Discussion in 'Malware and Virus Removal Archive' started by pbenjamin, 2008/06/29.

  1. 2008/06/29
    pbenjamin

    pbenjamin Inactive Thread Starter

    Joined:
    2008/06/17
    Messages:
    11
    Likes Received:
    0
    Hi. My cousin has been having a lot of problems with his computer. Mainly it is really sluggish, has internet problems, and freezes. I have been successful on installing avg anti-virus from my usb flashdrive onto his computer because his previous one expired. When I saw that I knew something wasn't right. He had so many programs that he wasn't using and some that I weren't even sure what they did? I did find one Virus on there and a folder for it. It was called WildTangent. I am running spyware scans and anti-virus scans right now but he is still having problems with the system stability. I will post the dss.exe scan result on a seperate message. Any help would be greatly appreciated. Thanks for your time.
     
  2. 2008/06/29
    pbenjamin

    pbenjamin Inactive Thread Starter

    Joined:
    2008/06/17
    Messages:
    11
    Likes Received:
    0
    Deckard's System Scanner v20071014.68
    Run by Compaq_Owner on 2008-06-28 14:48:03
    Computer is in Normal Mode.
    --------------------------------------------------------------------------------

    -- System Restore --------------------------------------------------------------

    Successfully created a Deckard's System Scanner Restore Point.


    -- Last 5 Restore Point(s) --
    85: 2008-06-28 21:48:15 UTC - RP509 - Deckard's System Scanner Restore Point
    84: 2008-06-28 21:03:48 UTC - RP508 - Installed AVG Free 8.0
    83: 2008-06-28 20:49:44 UTC - RP507 - 06/28/2008
    82: 2008-06-28 20:21:22 UTC - RP506 - Removed ScanSoft OmniPage SE 4.0
    81: 2008-06-28 05:16:21 UTC - RP505 - Software Distribution Service 3.0


    -- First Restore Point --
    1: 2008-03-30 06:19:34 UTC - RP425 - System Checkpoint


    Backed up registry hives.
    Performed disk cleanup.

    Total Physical Memory: 447 MiB (512 MiB recommended).


    -- HijackThis (run as Compaq_Owner.exe) ----------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 2:49:56 PM, on 6/28/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16674)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\Program Files\iolo\common\lib\ioloServiceManager.exe
    C:\Program Files\iolo\System Mechanic Professional 7\IoloSGCtrl.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
    C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe
    C:\Program Files\iolo\System Mechanic Professional 7\SystemGuardAlerter.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
    C:\Program Files\AVG\AVG8\avgui.exe
    C:\Program Files\AVG\AVG8\avgscanx.exe
    C:\Documents and Settings\Compaq_Owner\Desktop\dss.exe
    C:\Program Files\iolo\System Mechanic Professional 7\SysMech7.exe
    C:\DOCUME~1\COMPAQ~1\Desktop\HIJACK~1\Compaq_Owner.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=64&bd=PRESARIO&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=64&bd=PRESARIO&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=64&bd=PRESARIO&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=64&bd=PRESARIO&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=64&bd=PRESARIO&pf=desktop
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
    O2 - BHO: hpWebHelper Class - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - (no file)
    O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
    O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
    O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
    O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe "
    O4 - HKLM\..\Run: [SystemGuardAlerter] C:\Program Files\iolo\System Mechanic Professional 7\SystemGuardAlerter.exe
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe "
    O4 - HKCU\..\Run: [EPSON Stylus Photo R280 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICKA.EXE /FU "C:\WINDOWS\TEMP\E_SC7.tmp" /EF "HKCU "
    O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
    O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - AppInit_DLLs: avgrsstx.dll
    O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
    O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
    O23 - Service: iolo System Guard (IOLO_SRV) - Unknown owner - C:\Program Files\iolo\System Mechanic Professional 7\IoloSGCtrl.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: WUSB54GCSVC - GEMTEKS - C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe

    --
    End of file - 8815 bytes

    -- HijackThis Fixed Entries (C:\DOCUME~1\COMPAQ~1\Desktop\HIJACK~1\backups\) ---

    backup-20080628-133058-206 O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    backup-20080628-133058-279 O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
    backup-20080628-133058-295 O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZK
    backup-20080628-133058-362 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    backup-20080628-133058-454 O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    backup-20080628-133058-494 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
    backup-20080628-133058-656 O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    backup-20080628-133145-771 O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

    -- File Associations -----------------------------------------------------------

    .js - JSFile - shell\open\command - NOTEPAD.EXE %1
    .reg - regfile - shell\open\command - NOTEPAD.EXE %1
    .scr - scrfile - shell\open\command - NOTEPAD.EXE %1
    .vbs - VBSFile - shell\open\command - NOTEPAD.EXE %1


    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

    R1 FileDisk - c:\windows\system32\drivers\filedisk.sys <Not Verified; iolo technologies, LLC (based on original work by Bo Brantén); filedisk (based on original work by Bo Brantén)>
    R3 Afc (PPdus ASPI Shell) - c:\windows\system32\drivers\afc.sys <Not Verified; Arcsoft, Inc.; Arcsoft(R) ASPI Shell>
    R3 GTNDIS5 (GTNDIS5 NDIS Protocol Driver) - c:\windows\system32\gtndis5.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>

    S0 ftsata2 - c:\windows\system32\drivers\ftsata2.sys (file missing)
    S4 intelppm (Intel Processor Driver) - c:\windows\system32\drivers\intelppm.sys (file missing)


    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

    S2 CLTNetCnService (Symantec Lic NetConnect service) - "c:\program files\common files\symantec shared\ccsvchst.exe" /h cccommon (file missing)
    S4 CCALib8 (Canon Camera Access Library 8) - c:\program files\canon\cal\calmain.exe <Not Verified; Canon Inc.; >


    -- Device Manager: Disabled ----------------------------------------------------

    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description: NVIDIA nForce Networking Controller
    Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0269\4&273FFFD6&0&01
    Manufacturer: NVIDIA
    Name: NVIDIA nForce Networking Controller
    PNP Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0269\4&273FFFD6&0&01
    Service: NVENETFD


    -- Scheduled Tasks -------------------------------------------------------------

    2008-06-27 16:43:22 426 --a------ C:\WINDOWS\Tasks\Registry Repair4.job


    -- Files created between 2008-05-28 and 2008-06-28 -----------------------------

    2008-06-28 14:52:16 680960 --a------ C:\WINDOWS\is-4N68F.exe
    2008-06-28 14:30:12 198688 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
    2008-06-28 14:25:10 0 d--h----- C:\$AVG8.VAULT$
    2008-06-28 14:23:32 0 d-------- C:\Program Files\ZoneAlarmSB
    2008-06-28 14:21:51 0 d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
    2008-06-28 14:21:35 4212 ---h----- C:\WINDOWS\system32\zllictbl.dat
    2008-06-28 14:19:03 11264 --a------ C:\WINDOWS\system32\SpOrder.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System>
    2008-06-28 14:17:53 0 d-------- C:\WINDOWS\system32\ZoneLabs
    2008-06-28 14:17:24 0 d-------- C:\WINDOWS\Internet Logs
    2008-06-28 14:04:12 0 d-------- C:\WINDOWS\system32\drivers\Avg
    2008-06-28 14:04:12 0 d-------- C:\Documents and Settings\Compaq_Owner\Application Data\AVGTOOLBAR
    2008-06-28 14:03:49 0 d-------- C:\Program Files\AVG
    2008-06-28 14:03:48 0 d-------- C:\Documents and Settings\All Users\Application Data\avg8
    2008-06-28 13:48:44 0 d--hs---- C:\WINDOWS\ftpcache
    2008-06-27 19:48:29 0 d-------- C:\WINDOWS\Prefetch
    2008-06-27 19:07:47 0 d-------- C:\WINDOWS\system32\scripting
    2008-06-27 19:07:45 0 d-------- C:\WINDOWS\l2schemas
    2008-06-27 19:07:44 0 d-------- C:\WINDOWS\system32\en
    2008-06-27 19:07:43 0 d-------- C:\WINDOWS\system32\bits
    2008-06-27 18:49:17 1845248 --a------ C:\WINDOWS\system32\win32k.sys <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
    2008-06-27 18:48:42 0 d-------- C:\WINDOWS\EHome
    2008-06-27 17:29:54 0 d-------- C:\Documents and Settings\LocalService\Application Data\iolo
    2008-06-27 17:29:44 9341 --a------ C:\WINDOWS\system32\drivers\filedisk.sys <Not Verified; iolo technologies, LLC (based on original work by Bo Brantén); filedisk (based on original work by Bo Brantén)>
    2008-06-27 17:29:37 22528 --a------ C:\WINDOWS\system32\smrgdf.exe
    2008-06-27 17:29:37 34304 --a------ C:\WINDOWS\system32\iolobtdfg.exe
    2008-06-27 17:29:26 0 d-------- C:\Program Files\iolo
    2008-06-27 17:25:02 74703 --a------ C:\WINDOWS\system32\mfc45.dll
    2008-06-27 16:43:06 0 d-------- C:\WINDOWS\Registry Repair
    2008-06-27 14:59:49 0 d-------- C:\Documents and Settings\Compaq_Owner\.housecall6.6
    2008-06-27 14:58:35 32768 -----n--- C:\WINDOWS\system32\IJRMF.exe <Not Verified; CANON INC.; Canon User Registration>
    2008-06-27 14:08:31 0 d-------- C:\WINDOWS\system32\CatRoot_bak
    2008-06-27 14:03:58 0 d-------- C:\Documents and Settings\Compaq_Owner\Application Data\Symantec
    2008-06-27 11:49:48 0 d-------- C:\Documents and Settings\Compaq_Owner\Application Data\iolo
    2008-06-27 11:49:48 0 d-------- C:\Documents and Settings\All Users\Application Data\iolo
    2008-05-28 12:53:20 0 d-------- C:\Documents and Settings\All Users\Application Data\EPSON
    2008-05-28 12:30:57 0 d-------- C:\Documents and Settings\Compaq_Owner\Application Data\Leadertech
    2008-05-28 12:30:54 0 d-------- C:\EPSONREG
    2008-05-28 12:28:55 11776 --a------ C:\WINDOWS\system32\drivers\afc.sys <Not Verified; Arcsoft, Inc.; Arcsoft(R) ASPI Shell>
    2008-05-28 12:28:54 0 d-------- C:\Program Files\Common Files\ArcSoft
    2008-05-28 12:28:45 126976 --a------ C:\WINDOWS\system32\PhotoImpression Slideshow.scr <Not Verified; ArcSoft Inc.; PhotoImpression Slideshow>
    2008-05-28 12:28:28 0 d-------- C:\WINDOWS\system32\PhotoImpression Slideshow
    2008-05-28 12:26:03 0 d-------- C:\Program Files\EPSON Print CD
    2008-05-28 12:21:46 73220 --a------ C:\WINDOWS\system32\EPPICPrinterDB.dat
    2008-05-28 12:21:46 1140 --a------ C:\WINDOWS\system32\EPPICPresetData_PT.dat
    2008-05-28 12:21:46 1130 --a------ C:\WINDOWS\system32\EPPICPresetData_FR.dat
    2008-05-28 12:21:46 1137 --a------ C:\WINDOWS\system32\EPPICPresetData_ES.dat
    2008-05-28 12:21:46 1104 --a------ C:\WINDOWS\system32\EPPICPresetData_EN.dat
    2008-05-28 12:21:46 1130 --a------ C:\WINDOWS\system32\EPPICPresetData_CF.dat
    2008-05-28 12:21:46 1140 --a------ C:\WINDOWS\system32\EPPICPresetData_BP.dat
    2008-05-28 12:21:46 4943 --a------ C:\WINDOWS\system32\EPPICPattern6.dat
    2008-05-28 12:21:46 15670 --a------ C:\WINDOWS\system32\EPPICPattern5.dat
    2008-05-28 12:21:46 10673 --a------ C:\WINDOWS\system32\EPPICPattern4.dat
    2008-05-28 12:21:46 21021 --a------ C:\WINDOWS\system32\EPPICPattern3.dat
    2008-05-28 12:21:46 13280 --a------ C:\WINDOWS\system32\EPPICPattern2.dat
    2008-05-28 12:21:46 31053 --a------ C:\WINDOWS\system32\EPPICPattern131.dat
    2008-05-28 12:21:46 27417 --a------ C:\WINDOWS\system32\EPPICPattern121.dat
    2008-05-28 12:21:46 29114 --a------ C:\WINDOWS\system32\EPPICPattern1.dat
    2008-05-28 12:21:38 0 d-------- C:\Documents and Settings\Compaq_Owner\Application Data\InstallShield
    2008-05-28 12:20:12 0 d-------- C:\Program Files\EPSON
    2008-05-28 12:04:25 0 d-------- C:\Documents and Settings\All Users\Application Data\ZoomBrowser
    2008-05-28 12:00:46 0 d-------- C:\Program Files\Common Files\Canon


    -- Find3M Report ---------------------------------------------------------------

    2008-06-28 13:21:40 0 d-------- C:\Program Files\Common Files
    2008-06-27 22:32:52 0 d-------- C:\Program Files\WildTangent
    2008-06-27 21:56:59 0 d-------- C:\Program Files\Common Files\Symantec Shared
    2008-06-27 19:42:05 0 d-------- C:\Program Files\Messenger
    2008-06-27 19:35:53 0 d-------- C:\Program Files\Windows NT
    2008-06-27 19:35:46 0 d-------- C:\Program Files\Movie Maker
    2008-06-27 15:51:29 0 d-------- C:\Program Files\MySpace
    2008-06-27 15:27:57 0 d-------- C:\Program Files\Common Files\Sonic Shared
    2008-06-27 14:57:59 0 d-------- C:\Program Files\Common Files\Real
    2008-06-27 14:57:27 0 d-------- C:\Documents and Settings\Compaq_Owner\Application Data\Real
    2008-06-27 14:53:26 0 d-------- C:\Program Files\Sonic
    2008-06-27 11:59:27 0 d-------- C:\Program Files\MSN Messenger
    2008-06-27 11:59:07 0 d-------- C:\Documents and Settings\Compaq_Owner\Application Data\MSNInstaller
    2008-05-28 12:30:03 0 d-------- C:\Program Files\ArcSoft
    2008-05-28 12:30:02 0 d--h----- C:\Program Files\InstallShield Installation Information
    2008-05-28 12:29:28 0 d-------- C:\Documents and Settings\Compaq_Owner\Application Data\ArcSoft
    2008-05-28 12:25:52 0 d-------- C:\Program Files\Common Files\InstallShield
    2008-05-28 12:05:38 0 d-------- C:\Program Files\Canon
    2008-05-13 22:57:03 12136 --a------ C:\Documents and Settings\Compaq_Owner\Application Data\wklnhst.dat


    -- Registry Dump ---------------------------------------------------------------

    *Note* empty entries & legit default entries are not shown


    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
    06/28/2008 02:04 PM 2050816 --a------ C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}]
    06/28/2008 02:23 PM 262144 --a------ C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
    "{A057A204-BACC-4D26-9990-79A187E2698E} "= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [06/28/2008 02:04 PM 2050816]
    "{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA} "= C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL [06/28/2008 02:23 PM 262144]

    [-HKEY_CLASSES_ROOT\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}]
    [HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

    [-HKEY_CLASSES_ROOT\CLSID\{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ftutil2 "= "ftutil2.dll" [06/07/2004 02:05 PM C:\WINDOWS\system32\ftutil2.dll]
    "RTHDCPL "= "RTHDCPL.EXE" [06/13/2006 08:05 PM C:\WINDOWS\RTHDCPL.EXE]
    "NvCplDaemon "= "C:\WINDOWS\system32\NvCpl.dll" [05/09/2006 03:50 PM]
    "nwiz "= "nwiz.exe" [05/09/2006 03:50 PM C:\WINDOWS\system32\nwiz.exe]
    "SMSystemAnalyzer "= "C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe" [05/06/2008 04:48 PM]
    "SystemGuardAlerter "= "C:\Program Files\iolo\System Mechanic Professional 7\SystemGuardAlerter.exe" [05/06/2008 04:49 PM]
    "AVG8_TRAY "= "C:\PROGRA~1\AVG\AVG8\avgtray.exe" [06/28/2008 02:04 PM]
    "ZoneAlarm Client "= "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [04/02/2008 08:07 PM]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "EPSON Stylus Photo R280 Series "= "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICKA.exe" [04/13/2007 06:00 AM]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce]
    "InnoSetupRegFile.0000000001 "= "C:\WINDOWS\is-4N68F.exe" /REG
    "iolo WebUpdate Reboot "=
    "iolo SR Reboot "=
    "iolo DriveScrubber Reboot "=

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    Compaq Connections.lnk - C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe [8/1/2006 11:56:30 AM]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "appinit_dlls "=avgrsstx.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    "Notification Packages "= scecli

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
    C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPBootOp]
    "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    "C:\Program Files\iTunes\iTunesHelper.exe "

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MySpaceIM]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE4]
    "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe "

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCDrProfiler]


    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    "C:\Program Files\QuickTime\qttask.exe" -atboottime

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Recguard]
    C:\WINDOWS\SMINST\RECGUARD.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
    "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "RasMan "=3 (0x3)
    "CCALib8 "=2 (0x2)


    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
    AutoRun\command- D:\setupSNK.exe

    *Newly Created Service* - GTNDIS5
    *Newly Created Service* - KLIF
    *Newly Created Service* - SRESCAN
    *Newly Created Service* - VSMON



    -- End of Deckard's System Scanner: finished at 2008-06-28 14:58:03 ------------
     

  3. to hide this advert.

  4. 2008/06/29
    pbenjamin

    pbenjamin Inactive Thread Starter

    Joined:
    2008/06/17
    Messages:
    11
    Likes Received:
    0
    HijackThis Log File

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 9:48:12 PM, on 6/20/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16674)
    Boot mode: Normal

    Running processes:
    D:\WINDOWS\System32\smss.exe
    D:\WINDOWS\system32\csrss.exe
    D:\WINDOWS\system32\winlogon.exe
    D:\WINDOWS\system32\services.exe
    D:\WINDOWS\system32\lsass.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\system32\svchost.exe
    D:\Program Files\Windows Defender\MsMpEng.exe
    D:\WINDOWS\System32\svchost.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\system32\ZoneLabs\vsmon.exe
    D:\WINDOWS\Explorer.EXE
    D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    D:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
    D:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
    D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    D:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\Symantec\Norton AntiBot\agent\Bin\NABAgent.exe
    D:\Program Files\a-squared Anti-Dialer\a2service.exe
    D:\Program Files\a-squared Free\a2service.exe
    D:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    D:\Program Files\iolo\common\lib\ioloServiceManager.exe
    D:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
    D:\WINDOWS\system32\nvsvc32.exe
    D:\Program Files\Spyware Terminator\sp_rsser.exe
    D:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    D:\WINDOWS\system32\svchost.exe
    D:\Program Files\Symantec\Norton AntiBot\agent\Bin\NABWatcher.exe
    D:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe
    D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    D:\Program Files\Windows Defender\MSASCui.exe
    D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    D:\Program Files\Symantec\Norton AntiBot\agent\bin\NortonAntiBot.exe
    D:\WINDOWS\System32\alg.exe
    D:\WINDOWS\system32\ctfmon.exe
    D:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe
    D:\Program Files\Symantec\Norton AntiBot\agent\bin\NABMonitor.exe
    D:\Program Files\Vidalia Bundle\Privoxy\privoxy.exe
    D:\Program Files\Vidalia Bundle\Tor\tor.exe
    D:\Program Files\Trillian\trillian.exe
    D:\Documents and Settings\Paul\Desktop\dss.exe
    D:\PROGRA~1\TRENDM~1\HIJACK~1\Paul.exe
    D:\WINDOWS\system32\wbem\wmiprvse.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - D:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - D:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - D:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - D:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - D:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
    O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - D:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
    O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - D:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - D:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [osCheck] "D:\Program Files\Norton 360\osCheck.exe "
    O4 - HKLM\..\Run: [ccApp] D:\Program Files\Common Files\Symantec Shared\ccApp.exe
    O4 - HKLM\..\Run: [SMSystemAnalyzer] "D:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe "
    O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe "
    O4 - HKLM\..\Run: [a-squared] "D:\Program Files\a-squared Anti-Dialer\a2adguard.exe "
    O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [NortonAntiBot] "D:\Program Files\Symantec\Norton AntiBot\agent\bin\NortonAntiBot.exe "
    O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Vidalia] "D:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe "
    O4 - HKCU\..\Run: [EPSON Stylus CX7400 Series] D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICDA.EXE /FU "D:\WINDOWS\TEMP\E_S113.tmp" /EF "HKCU "
    O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
    O4 - Global Startup: Privoxy.lnk = D:\Program Files\Vidalia Bundle\Privoxy\privoxy.exe
    O8 - Extra context menu item: Crawler Search - tbr:iemenu
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {15BC34E3-81B5-41EF-8704-A6421FAD29F9} (AgentObj Class) - https://endpointassessment.sophos.com/webagent/webagentNT.cab
    O16 - DPF: {167C192D-44C1-4EAB-9279-496EA91C75D2} (CredListObj Class) - https://endpointassessment.sophos.com/webagent/credlist.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1212617664203
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1212617739984
    O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - https://endpointassessment.sophos.com/webagent/msxml4.cab
    O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - D:\PROGRA~1\Crawler\Toolbar\ctbr.dll
    O20 - Winlogon Notify: !SASWinLogon - D:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: a-squared Anti-Dialer Service (a2AntiDialer) - Emsi Software GmbH - D:\Program Files\a-squared Anti-Dialer\a2service.exe
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - D:\Program Files\a-squared Free\a2service.exe
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
    O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - D:\Program Files\iolo\common\lib\ioloServiceManager.exe
    O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - D:\Program Files\iolo\common\lib\ioloServiceManager.exe
    O23 - Service: LiveUpdate - Symantec Corporation - D:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
    O23 - Service: LiveUpdate Notice - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - D:\Program Files\WinPcap\rpcapd.exe
    O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - D:\Program Files\Spyware Terminator\sp_rsser.exe
    O23 - Service: Audio Service (STacSV) - IDT, Inc. - d:\d\s\z2\STacSV.exe
    O23 - Service: Symantec Core LC - Unknown owner - D:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
    O23 - Service: SymantecAntiBotAgent - Symantec - D:\Program Files\Symantec\Norton AntiBot\agent\Bin\NABAgent.exe
    O23 - Service: SymantecAntiBotWatcher - Symantec - D:\Program Files\Symantec\Norton AntiBot\agent\Bin\NABWatcher.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZoneLabs\vsmon.exe

    --
    End of file - 11514 bytes
     
  5. 2008/07/01
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hi pbenjamin,

    What was the outcome of the AV and antispyware scans? Is the computer any better now? Still having problems? If so, please create and post a fresh Deckards log.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.