1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Search setting 1.2

Discussion in 'Malware and Virus Removal Archive' started by chrischris, 2009/10/06.

  1. 2009/10/06
    chrischris

    chrischris Inactive Thread Starter

    Joined:
    2009/10/06
    Messages:
    2
    Likes Received:
    0
    DDS (Ver_09-09-29.01) - NTFSx86
    Run by Milad Toumieh at 17:33:25.73 on Tue 10/06/2009
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1015.336 [GMT -4:00]

    AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}

    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\LTMSG.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\PROGRA~1\SYMANT~1\VPTray.exe
    svchost.exe
    C:\WINDOWS\vVX3000.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Symantec AntiVirus\DefWatch.exe
    C:\Program Files\Search Settings\SearchSettings.exe
    C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
    C:\WINDOWS\UMStor\Res.EXE
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    C:\Program Files\Windows Live\Family Safety\fsui.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Symantec AntiVirus\DoScan.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
    C:\Program Files\DNA\btdna.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Symantec AntiVirus\Rtvscan.exe
    C:\Program Files\uTorrent\uTorrent.exe
    C:\Program Files\Personal Vault\VaultClientUpgrade.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
    C:\WINDOWS\system32\msiexec.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\SlimBrowser\sbrowser.exe
    C:\Documents and Settings\Milad Toumieh\Desktop\dds.pif

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.google.ca/
    uInternet Connection Wizard,ShellNext = iexplore
    uInternet Settings,ProxyOverride = *.local
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    mSearchAssistant = hxxp://search.live.com/sphome.aspx
    uURLSearchHooks: DefaultSearchHook Class: {c94e154b-1459-4a47-966b-4b843befc7db} - c:\program files\asksearch\bin\DefaultSearch.dll
    uURLSearchHooks: SearchSettings Class: {e312764e-7706-43f1-8dab-fcdd2b1e416d} - c:\program files\search settings\kb127\SearchSettings.dll
    uURLSearchHooks: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTog0.dll
    uURLSearchHooks: Nogomi.com Toolbar: {b2793ea6-40ae-4bd1-a277-e2ecbf8ff296} - c:\program files\nogomi.com\tbNogo.dll
    uURLSearchHooks: Tv Online Toolbar: {318035f1-f80b-45f6-b7f2-079c83e70268} - c:\program files\tv_online\tbTv_O.dll
    BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
    BHO: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTog0.dll
    BHO: Tv Online Toolbar: {318035f1-f80b-45f6-b7f2-079c83e70268} - c:\program files\tv_online\tbTv_O.dll
    BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - c:\program files\windows live\family safety\fssbho.dll
    BHO: Click-to-Call BHO: {5c255c8a-e604-49b4-9d64-90988571cecb} - c:\program files\windows live\messenger\wlchtc.dll
    BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
    BHO: Programme d'aide de l'Assistant de connexion Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Nogomi.com Toolbar: {b2793ea6-40ae-4bd1-a277-e2ecbf8ff296} - c:\program files\nogomi.com\tbNogo.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
    BHO: SearchSettings Class: {e312764e-7706-43f1-8dab-fcdd2b1e416d} - c:\program files\search settings\kb127\SearchSettings.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File
    TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
    TB: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTog0.dll
    TB: Nogomi.com Toolbar: {b2793ea6-40ae-4bd1-a277-e2ecbf8ff296} - c:\program files\nogomi.com\tbNogo.dll
    TB: Tv Online Toolbar: {318035f1-f80b-45f6-b7f2-079c83e70268} - c:\program files\tv_online\tbTv_O.dll
    TB: {5CBE2611-C31B-401F-89BC-4CBB25E853D7} - No File
    TB: {B7D3E479-CC68-42B5-A338-938ECE35F419} - No File
    TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
    {e67c74f4-a00a-4f2c-9fec-fd9dc004a67f}
    EB: {2D51D869-C36B-42bd-AE68-0A81BC771FA5} - No File
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
    uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe "
    uRun: [AROReminder] c:\program files\advanced registry optimizer\ARO.exe -rem
    uRun: [DW6] "c:\program files\the weather channel fw\desktop\DesktopWeather.exe "
    uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe "
    uRun: [free team] c:\docume~1\miladt~1\applic~1\browse~1\ownsthunk.exe
    uRun: [AlcoholAutomount] "c:\program files\alcohol soft\alcohol 120\axcmd.exe" /automount
    uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
    uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe "
    uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
    mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
    mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
    mRun: [AlcxMonitor] ALCXMNTR.EXE
    mRun: [LTMSG] LTMSG.exe 7
    mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe "
    mRun: [vptray] c:\progra~1\symant~1\VPTray.exe
    mRun: [LifeCam] "c:\program files\microsoft lifecam\LifeExp.exe "
    mRun: [VX3000] c:\windows\vVX3000.exe
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe "
    mRun: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
    mRun: [SearchSettings] c:\program files\search settings\SearchSettings.exe
    mRun: [USB Storage Toolbox] c:\windows\umstor\Res.EXE
    mRun: [Once Name Hope Play] c:\documents and settings\all users\application data\memo upload once name\Name Move.exe
    mRun: [fssui] "c:\program files\windows live\family safety\fsui.exe" -autorun
    mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe "
    mRun: [Dbadelukigate] rundll32.exe "c:\windows\asiwinaqa.dll ",e
    mRun: [-FreedomNeedsReboot] "c:\program files\bell\gestionnaire de securite\ZkRunOnceR.exe "
    mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
    dRun: [Nokia.PCSync] c:\documents and settings\milad toumieh\desktop\nokia pc suite 6\PcSync2.exe /NoDialog
    StartupFolder: c:\docume~1\miladt~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
    StartupFolder: c:\docume~1\miladt~1\startm~1\programs\startup\imvu.lnk - c:\program files\imvu\IMVUClient.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\autoca~1.lnk - c:\program files\common files\autodesk shared\acstart17.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hppsc2~1.lnk - c:\program files\hewlett-packard\digital imaging\bin\hpobnz08.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpoddt~1.lnk - c:\program files\hewlett-packard\digital imaging\bin\hpotdd01.exe
    uPolicies-explorer: ForceClassicControlPanel = 1 (0x1)
    IE: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm491YYCA
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
    IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\milad toumieh\start menu\programs\imvu\Run IMVU.lnk
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
    IE: {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - {552781AF-37E4-4FEE-920A-CED9E648EADD} - c:\program files\common files\microsoft shared\encarta search bar\ENCSBAR.DLL
    DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
    DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - hxxp://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/CursorManiaFWBInitialSetup1.0.0.15-3.cab
    DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.systemrequirementslab.com/srl_bin/sysreqlab_srl.cab
    DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    DPF: {58172624-85DD-4482-9E64-02ADCA637E96} - hxxp://www.kungfuchess.com/activex/web665.cab
    DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader3.cab
    DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/EN-CA/a-UNO1/GAME_UNO1.cab
    DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://go.divx.com/plugin/DivXBrowserPlugin.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
    DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} - hxxp://update.videoegg.com/Install/Windows/Initial/VideoEggPublisher.exe
    DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    TCP: NameServer = 85.255.112.232,85.255.112.234
    TCP: {4E4D3E78-B61E-42D4-94E0-1E832736C7E9} = 85.255.112.232,85.255.112.234
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    Notify: AutorunsDisabled - WgaLogon.dll
    Notify: cbXnLbaY - cbXnLbaY.dll
    Notify: igfxcui - igfxsrvc.dll
    Notify: NavLogon - c:\windows\system32\NavLogon.dll
    Notify: __c008C280 - c:\windows\system32\__c008C280.dat
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    LSA: Notification Packages = scecli Sysiclov.dll

    ============= SERVICES / DRIVERS ===============

    R1 SAVRT;SAVRT;c:\program files\symantec antivirus\savrt.sys [2005-2-4 324232]
    R1 SAVRTPEL;SAVRTPEL;c:\program files\symantec antivirus\Savrtpel.sys [2005-2-4 53896]
    R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccEvtMgr.exe [2005-4-8 185968]
    R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSetMgr.exe [2005-4-8 161392]
    R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2008-12-19 55136]
    R2 fsssvc;Windows Live Contrôle parental;c:\program files\windows live\family safety\fsssvc.exe [2009-2-6 533360]
    R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
    R2 Symantec AntiVirus;Symantec AntiVirus;c:\program files\symantec antivirus\Rtvscan.exe [2005-4-17 1706176]
    R2 VaultClientUpgrade;Personal Vault Upgrade Service;c:\program files\personal vault\VaultClientUpgrade.exe [2008-3-7 53248]
    R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20091002.003\naveng.sys [2009-10-2 84912]
    R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20091002.003\navex15.sys [2009-10-2 1323568]
    S3 ccPwdSvc;Symantec Password Validation;c:\program files\common files\symantec shared\ccPwdSvc.exe [2005-4-8 83568]
    S3 Radialpoint Security Services;Radialpoint Security Services;c:\windows\system32\dllhost.exe [2004-8-3 5120]
    S3 SavRoam;SAVRoam;c:\program files\symantec antivirus\SavRoam.exe [2005-4-17 124608]
    S3 scrcap;scrcap;c:\windows\system32\drivers\scrcap.sys --> c:\windows\system32\drivers\scrcap.sys [?]

    =============== Created Last 30 ================

    2009-10-05 17:59 14,735 a------- c:\windows\9480zworm37e5.exe
    2009-10-05 12:17 13,103 a------- c:\windows\4556zhie92770.cpl
    2009-10-03 19:07 11,302 a------- c:\windows\system32\289fspzrs52160.cpl
    2009-10-02 21:43 14,592 ac------ c:\windows\system32\dllcache\kbdhid.sys
    2009-10-02 21:43 14,592 a------- c:\windows\system32\drivers\kbdhid.sys
    2009-10-02 21:43 21,504 ac------ c:\windows\system32\dllcache\hidserv.dll
    2009-10-02 21:43 21,504 a------- c:\windows\system32\hidserv.dll
    2009-10-02 21:43 12,160 ac------ c:\windows\system32\dllcache\mouhid.sys
    2009-10-02 21:43 12,160 a------- c:\windows\system32\drivers\mouhid.sys
    2009-09-28 10:06 15,715 a------- c:\windows\system32\28976wzrm651.ocx
    2009-09-27 10:17 11,601 a------- c:\windows\system32\398at5ze92893.bin
    2009-09-26 22:24 6,468 a------- c:\windows\system32\25ebspyw9rez75.exe
    2009-09-26 15:09 4,733 a------- c:\windows\14z96spamb5t2de.bin
    2009-09-26 10:25 <DIR> --d----- c:\program files\MSECache
    2009-09-26 04:29 15,292 a------- c:\windows\3931wz5m7e9.cpl
    2009-09-24 17:58 <DIR> --d----- C:\video_output
    2009-09-24 17:56 <DIR> --d----- c:\docume~1\miladt~1\applic~1\GetRightToGo
    2009-09-23 08:41 4,093 a------- c:\windows\system32\3809spamb593ze.ocx
    2009-09-23 03:18 14,294 a------- c:\windows\292075ot9a-virzs7d6.dll
    2009-09-22 13:43 9,246 a------- c:\windows\12471nzt-a-vi9us5c3.exe
    2009-09-22 03:26 10,231 a------- c:\windows\system32\7305thie9134z.dll
    2009-09-21 07:48 16,364 a------- c:\windows\7929s9arsez558.cpl
    2009-09-20 01:32 5,843 a------- c:\windows\2826959y55z.exe
    2009-09-18 09:29 11,028 a------- c:\windows\3093ztr9j795.bin
    2009-09-17 21:54 107,368 a------- c:\windows\system32\GEARAspi.dll
    2009-09-17 21:54 26,600 a------- c:\windows\system32\drivers\GEARAspiWDM.sys
    2009-09-17 21:53 <DIR> --d----- c:\program files\iPod
    2009-09-17 21:53 <DIR> --d----- c:\program files\iTunes
    2009-09-17 21:53 <DIR> --d----- c:\docume~1\alluse~1\applic~1\{755AC846-7372-4AC8-8550-C52491DAA8BD}
    2009-09-17 21:53 <DIR> --d----- c:\program files\Bonjour
    2009-09-17 21:49 2,065,696 a------- c:\windows\system32\usbaaplrc.dll
    2009-09-17 21:49 40,448 a------- c:\windows\system32\drivers\usbaapl.sys
    2009-09-17 08:27 8,536 a------- c:\windows\system32\599f5ir54z.bin
    2009-09-15 20:31 153,088 -c------ c:\windows\system32\dllcache\triedit.dll
    2009-09-13 19:28 <DIR> --d----- c:\program files\uTorrent
    2009-09-13 19:27 <DIR> --d----- c:\docume~1\miladt~1\applic~1\uTorrent
    2009-09-12 11:50 8,791 a------- c:\windows\system32\15945not-a-virus68z.bin
    2009-09-12 10:13 11,306 a------- c:\windows\system32\3da4z5ywar936.exe
    2009-09-11 19:25 10,565 a------- c:\windows\system32\12z1addwa95334.dll
    2009-09-11 04:44 13,893 a------- c:\windows\system32\303e9ddware25z9.cpl
    2009-09-10 14:33 16,689 a------- c:\windows\3015zoj295.ocx
    2009-09-10 07:56 12,951 a------- c:\windows\1d55vi93506z.exe

    ==================== Find3M ====================

    2009-09-03 08:35 7,118 a------- c:\windows\system32\9023szam59t4a3.exe
    2009-08-28 12:10 11,952 a------- c:\windows\system32\3977hazktoo9655.bin
    2009-08-28 10:46 16,928 a------- c:\windows\system32\1696z59rm5e8.bin
    2009-08-23 15:31 11,965 a------- c:\windows\9795vizus539.bin
    2009-08-23 00:14 14,534 a------- c:\windows\48ezs9arse5847.bin
    2009-08-21 21:26 15,878 a------- c:\windows\91924s5y79az.dll
    2009-08-21 17:58 24,339 a------- c:\windows\Sysvxd.exe
    2009-08-21 07:55 13,490 a------- c:\windows\17071n9t-a-v5rus4z2.bin
    2009-08-20 23:38 7,184 a------- c:\windows\96595zoj558.exe
    2009-08-17 00:35 14,365 a------- c:\windows\5419zorm452.dll
    2009-08-16 10:15 13,051 a------- c:\windows\system32\7b5zaddwar9353.exe
    2009-08-11 23:36 3,070 a------- c:\windows\9z5addware94395.dll
    2009-08-09 13:40 8,720 a------- c:\windows\system32\23686notza-v5r9s5e7.exe
    2009-08-06 14:42 4,173 a------- c:\windows\1693zs5y19c.exe
    2009-08-06 01:36 11,584 a------- c:\windows\system32\156z7spambo92c95.dll
    2009-08-05 18:22 3,554 a------- c:\windows\32z9downloader1455.dll
    2009-08-05 05:01 204,800 a------- c:\windows\system32\mswebdvd.dll
    2009-08-04 00:59 15,757 a------- c:\windows\system32\6600backzoor569.exe
    2009-08-04 00:18 7,281 a------- c:\windows\26679t5oj1zd.exe
    2009-08-03 06:32 12,419 a------- c:\windows\8995pyware2624z.exe
    2009-08-02 08:18 6,203 a------- c:\windows\system32\9a5backdoorz099.dll
    2009-08-01 03:10 18,037 a------- c:\windows\system32\57699notza-virus2fb.dll
    2009-07-28 18:38 6,240 a------- c:\windows\system32\506819irus2ccz.bin
    2009-07-27 19:45 33,139 a------- c:\windows\scunin.dat
    2009-07-27 19:45 94,208 a------- c:\windows\ScUnin.exe
    2009-07-26 13:26 18,415 a------- c:\windows\system32\22099tzo572d9.dll
    2009-07-24 16:19 4,445 a------- c:\windows\system32\2405zspy5eb9.exe
    2009-07-23 10:30 4,683 a------- c:\windows\system32\22153szy579.bin
    2009-07-23 00:30 10,417 a------- c:\windows\16853wzrm539.dll
    2009-07-21 03:10 8,959 a------- c:\windows\system32\65c7addware399z.bin
    2009-07-18 18:31 10,745 a------- c:\windows\system32\17013szambo91e45.exe
    2009-07-17 15:01 58,880 a------- c:\windows\system32\atl.dll
    2009-07-13 23:43 286,208 a------- c:\windows\system32\wmpdxm.dll
    2009-02-28 23:42 34 a------- c:\documents and settings\milad toumieh\jagex_runescape_preferences.dat
    2008-05-09 17:50 62,910 a------- c:\program files\Uninstall.exe
    2008-05-09 17:50 0 a------- c:\program files\uninstall.dat
    2008-03-27 00:26 32 a------- c:\docume~1\alluse~1\applic~1\ezsid.dat
    2005-07-14 15:31 27,648 a--sh--- c:\windows\system32\AVSredirect.dll
    2009-04-22 15:37 1,462 a--sh--- c:\windows\system32\GroupPolicy000.dat
    2008-06-12 08:59 24,198 a--sh--- c:\windows\system32\PsrBLkkj.ini2
    2009-06-29 19:34 16,384 a--sh--- c:\windows\system32\config\systemprofile\ietldcache\index.dat
    2009-06-29 19:34 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\application data\microsoft\feeds cache\index.dat
    2009-06-28 19:13 49,152 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009062220090629\index.dat
    2009-06-29 19:34 49,152 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009062920090630\index.dat
    2009-06-29 19:34 32,768 a--sh--- c:\windows\system32\config\systemprofile\privacie\index.dat
    2009-05-26 08:07 32,768 a--sh--- c:\windows\temp\cookies\index.dat
    2009-05-26 08:07 49,152 a--sh--- c:\windows\temp\history\history.ie5\index.dat
    2009-05-26 08:07 278,528 a--sh--- c:\windows\temp\temporary internet files\content.ie5\index.dat

    ============= FINISH: 17:33:55.14 ===============



    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-09-29.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume1
    Install Date: 12/18/2006 2:39:06 PM
    System Uptime: 10/6/2009 5:20:49 PM (0 hours ago)

    Motherboard: TriGem Computer Inc. | | Glendale motherboard
    Processor: Intel(R) Celeron(R) CPU 2.40GHz | WMT478/NWD | 2392/mhz

    ==== Disk Partitions =========================

    A: is Removable
    C: is FIXED (NTFS) - 75 GiB total, 13.491 GiB free.
    D: is CDROM ()
    E: is CDROM ()
    F: is CDROM (CDFS)
    G: is CDROM (CDFS)

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP819: 3/30/2009 5:47:35 PM - System Checkpoint
    RP820: 3/31/2009 6:45:58 PM - System Checkpoint
    RP821: 4/1/2009 7:13:01 PM - System Checkpoint
    RP822: 4/2/2009 7:13:59 PM - System Checkpoint
    RP823: 4/3/2009 11:15:13 PM - System Checkpoint
    RP824: 4/5/2009 12:02:22 AM - System Checkpoint
    RP825: 4/6/2009 3:44:30 PM - System Checkpoint
    RP826: 4/7/2009 6:46:19 PM - System Checkpoint
    RP827: 4/9/2009 10:12:59 AM - System Checkpoint
    RP828: 4/10/2009 11:02:09 AM - System Checkpoint
    RP829: 4/11/2009 11:56:42 AM - System Checkpoint
    RP830: 4/11/2009 4:30:28 PM - Installed Java(TM) 6 Update 13
    RP831: 4/12/2009 4:34:38 PM - System Checkpoint
    RP832: 4/13/2009 4:50:39 PM - System Checkpoint
    RP833: 4/14/2009 5:50:24 PM - System Checkpoint
    RP834: 4/15/2009 6:01:15 PM - System Checkpoint
    RP835: 4/16/2009 8:40:40 PM - System Checkpoint
    RP836: 4/17/2009 12:46:06 PM - Software Distribution Service 3.0
    RP837: 4/18/2009 8:20:25 PM - System Checkpoint
    RP838: 4/19/2009 11:40:59 PM - System Checkpoint
    RP839: 4/21/2009 9:05:53 AM - System Checkpoint
    RP840: 4/22/2009 9:15:04 AM - System Checkpoint
    RP841: 4/23/2009 10:07:07 AM - System Checkpoint
    RP842: 4/24/2009 3:09:32 PM - System Checkpoint
    RP843: 4/25/2009 5:09:30 PM - System Checkpoint
    RP844: 4/26/2009 5:40:30 PM - System Checkpoint
    RP845: 4/28/2009 9:43:23 PM - System Checkpoint
    RP846: 4/29/2009 10:20:20 PM - System Checkpoint
    RP847: 4/30/2009 3:00:30 AM - Software Distribution Service 3.0
    RP848: 5/1/2009 9:13:47 AM - System Checkpoint
    RP849: 5/2/2009 9:17:33 AM - System Checkpoint
    RP850: 5/3/2009 10:02:59 AM - System Checkpoint
    RP851: 5/4/2009 10:19:50 AM - System Checkpoint
    RP852: 5/5/2009 3:24:39 PM - System Checkpoint
    RP853: 5/6/2009 4:30:08 PM - System Checkpoint
    RP854: 5/7/2009 8:48:52 PM - System Checkpoint
    RP855: 5/8/2009 11:48:29 PM - System Checkpoint
    RP856: 5/10/2009 12:57:06 AM - System Checkpoint
    RP857: 5/11/2009 4:00:20 PM - System Checkpoint
    RP858: 5/12/2009 3:00:20 AM - Software Distribution Service 3.0
    RP859: 5/13/2009 3:31:53 AM - System Checkpoint
    RP860: 5/14/2009 3:00:33 AM - Software Distribution Service 3.0
    RP861: 5/15/2009 8:21:13 AM - System Checkpoint
    RP862: 5/16/2009 9:16:19 AM - System Checkpoint
    RP863: 5/17/2009 12:30:18 PM - System Checkpoint
    RP864: 5/18/2009 12:34:23 PM - System Checkpoint
    RP865: 5/19/2009 1:16:33 PM - System Checkpoint
    RP866: 5/20/2009 3:27:30 PM - System Checkpoint
    RP867: 5/21/2009 4:10:43 PM - System Checkpoint
    RP868: 5/22/2009 4:54:45 PM - System Checkpoint
    RP869: 5/23/2009 5:01:16 PM - System Checkpoint
    RP870: 5/24/2009 5:48:52 PM - System Checkpoint
    RP871: 5/26/2009 8:23:02 AM - System Checkpoint
    RP872: 5/27/2009 6:40:46 PM - System Checkpoint
    RP873: 5/28/2009 7:15:40 AM - Software Distribution Service 3.0
    RP874: 5/29/2009 8:13:38 AM - System Checkpoint
    RP875: 5/30/2009 8:35:51 AM - System Checkpoint
    RP876: 5/31/2009 10:48:14 AM - System Checkpoint
    RP877: 6/1/2009 10:56:54 AM - System Checkpoint
    RP878: 6/2/2009 4:53:13 PM - System Checkpoint
    RP879: 6/3/2009 5:35:31 PM - System Checkpoint
    RP880: 6/4/2009 6:58:17 PM - System Checkpoint
    RP881: 6/5/2009 7:15:22 PM - System Checkpoint
    RP882: 6/6/2009 2:13:42 PM - Installed Windows XP WgaNotify.
    RP883: 6/7/2009 3:09:36 PM - System Checkpoint
    RP884: 6/8/2009 3:13:22 PM - System Checkpoint
    RP885: 6/8/2009 9:17:55 PM - Installé Détection et neutralisation Sympatico(MC)
    RP886: 6/9/2009 11:05:55 PM - System Checkpoint
    RP887: 6/10/2009 3:01:02 AM - Software Distribution Service 3.0
    RP888: 6/11/2009 11:18:53 AM - System Checkpoint
    RP889: 6/12/2009 11:48:17 AM - System Checkpoint
    RP890: 6/13/2009 12:48:17 PM - System Checkpoint
    RP891: 6/14/2009 2:03:47 PM - System Checkpoint
    RP892: 6/15/2009 5:44:58 PM - System Checkpoint
    RP893: 6/16/2009 6:14:09 PM - System Checkpoint
    RP894: 6/17/2009 7:15:13 PM - System Checkpoint
    RP895: 6/18/2009 9:37:27 PM - System Checkpoint
    RP896: 6/19/2009 10:31:09 PM - System Checkpoint
    RP897: 6/20/2009 11:44:16 PM - System Checkpoint
    RP898: 6/22/2009 12:13:24 AM - System Checkpoint
    RP899: 6/22/2009 2:55:24 PM - Installed Windows Internet Explorer 8.
    RP900: 6/22/2009 2:56:54 PM - Software Distribution Service 3.0
    RP901: 6/23/2009 3:43:10 PM - System Checkpoint
    RP902: 6/24/2009 4:15:15 PM - System Checkpoint
    RP903: 6/25/2009 4:20:08 PM - System Checkpoint
    RP904: 6/26/2009 5:16:09 PM - System Checkpoint
    RP905: 10/6/2009 5:03:24 PM - System Checkpoint

    ==== Installed Programs ======================

    µTorrent
    ACDSee 9 Photo Manager
    Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
    Adobe Common File Installer
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Help Center 1.0
    Adobe Photoshop CS2
    Adobe Reader 8.1.2
    Adobe Reader 8.1.2 Security Update 1 (KB403742)
    Adobe Shockwave Player
    Adobe Stock Photos 1.0
    Adobe SVG Viewer 3.0
    Advanced Registry Optimizer
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    Archiveur WinRAR
    Ares 3.0.7.7075
    Assistant de connexion Windows Live
    Authentium AntiVirus SDK - 2
    AutoCAD 2007 - English
    AutoUpdate
    Bonjour
    Choice Guard
    Compatibility Pack for the 2007 Office system
    Critical Update for Windows Media Player 11 (KB959772)
    DivX Converter
    DivX Web Player
    DNA
    Détection et neutralisation Sympatico(MC)
    Empire Earth
    Empire Earth Patch 1.0.4.0
    Free FLV Converter V 5.9.2
    Galerie de photos Windows Live
    Gestionnaire de sauvegarde
    Gestionnaire de sécurité Sympatico
    Graboid Video 1.65
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Internet Explorer 7 (KB947864)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB954708)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB970653-v3)
    HP Memories Disc
    HP Photo and Imaging 2.0 - All-in-One
    HP Photo and Imaging 2.0 - All-in-One Drivers
    HP Photo and Imaging 2.0 - hp psc 2100 series
    hp psc 2100 series
    Installation Windows Live
    Intel(R) Extreme Graphics Driver
    iTunes
    Java(TM) 6 Update 13
    Java(TM) 6 Update 7
    Junk Mail filter update
    LimeWire 5.2.13
    LiveUpdate 2.6 (Symantec Corporation)
    Loader
    Messenger Plus! Live & Sponsor (CiD)
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB928366)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Application Error Reporting
    Microsoft Base Smart Card Cryptographic Service Provider Package
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Encarta 2007 - Études
    Microsoft Encarta Maths
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft LifeCam
    Microsoft Math
    Microsoft MPEG-4 VKI Video Codec V1/V2/V3
    Microsoft National Language Support Downlevel APIs
    Microsoft Office 2003 Proofing Tools
    Microsoft Office FrontPage 2003
    Microsoft Office Live Add-in 1.3
    Microsoft Office Outlook Connector
    Microsoft Office Professional Edition 2003
    Microsoft Office Visio Professional 2003
    Microsoft Search Enhancement Pack
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Student 2007 for Learning Essentials
    Microsoft Student with Encarta Premium 2007
    Microsoft Sync Framework Runtime Native v1.0 (x86)
    Microsoft Sync Framework Services Native v1.0 (x86)
    Microsoft User-Mode Driver Framework Feature Pack 1.5
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Mise à jour Encarta_Les Indispensables Éducation
    MP3 Cutter Joiner 1.17
    MP3 Player
    MSN
    MSVCRT
    MSXML 4.0 SP2 (KB954430)
    MSXML 6 Service Pack 2 (KB954459)
    Multi Virus Cleaner 2009
    Multimedia Transcoding Tool
    Nogomi.com Toolbar
    Norton Security Scan
    OpenOffice.org Installer 1.0
    Outil de téléchargement Windows Live
    PC Connectivity Solution
    PerfectDisk
    PPSDKRedistributables
    PVRLoader
    QuickTime
    Radialpoint Security Services
    Realtek AC'97 Audio
    RPS Ad Blocker
    RPS AntiFraud
    RPS AntiSpyware
    RPS AntiVirus
    RPS App Detector
    RPS AsRealtime
    RPS Backup
    RPS Burn
    RPS Diagnostic Utility
    RPS Firewall
    RPS ParentalControl
    RPS Performance Tool
    RPS PopupBlocker
    RPS Privacy Manager
    RPS Security Cleanup
    RPS Zip
    Search Settings 1.2
    Security Update for CAPICOM (KB931906)
    Security Update for Windows Internet Explorer 7 (KB928090)
    Security Update for Windows Internet Explorer 7 (KB929969)
    Security Update for Windows Internet Explorer 7 (KB931768)
    Security Update for Windows Internet Explorer 7 (KB933566)
    Security Update for Windows Internet Explorer 7 (KB937143)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB939653)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 8 (KB969897)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB972260)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows Media Player 9 (KB917734)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB923689)
    Security Update for Windows XP (KB923789)
    Security Update for Windows XP (KB938464-v2)
    Security Update for Windows XP (KB938464)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950759)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951376)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953838)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954211)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956390)
    Security Update for Windows XP (KB956391)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB957095)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958215)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958690)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960714)
    Security Update for Windows XP (KB960715)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961371)
    Security Update for Windows XP (KB961373)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB963027)
    Security Update for Windows XP (KB968537)
    Security Update for Windows XP (KB969897)
    Security Update for Windows XP (KB969898)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB971557)
    Security Update for Windows XP (KB971633)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB973346)
    Security Update for Windows XP (KB973354)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973869)
    Segoe UI
    Sepao
    Skypeâ„¢ 4.1
    SlimBrowser (remove only)
    Starcraft
    Symantec AntiVirus
    System Requirements Lab
    The Weather Channel Desktop 6
    ToggleEN Toolbar
    Tv_Online Toolbar
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Windows Internet Explorer 8 (KB971180)
    Update for Windows XP (KB951072-v2)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB961503)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB973815)
    Viewpoint Media Player
    WebFldrs XP
    WinBlueSoft
    Windows Genuine Advantage Notifications (KB905474)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Imaging Component
    Windows Internet Explorer 7
    Windows Internet Explorer 8
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Contrôle parental
    Windows Live Mail
    Windows Live Messenger
    Windows Live Sync
    Windows Live Toolbar
    Windows Live Writer
    Windows Media Format 11 runtime
    Windows Media Format SDK Hotfix - KB891122
    Windows Media Player 11
    Windows Rights Management Client Backwards Compatibility SP2
    Windows Rights Management Client with Service Pack 2
    Windows XP Service Pack 3
    ZillaTube 3.1

    ==== Event Viewer Messages From Past Week ========

    10/2/2009 2:48:21 PM, error: Schannel [36881] - The certificate received from the remote server has expired. The SSL connection request has failed. The attached data contains the server certificate.
    10/1/2009 7:06:50 PM, error: Service Control Manager [7000] - The NTPort Library Driver service failed to start due to the following error: The system cannot find the file specified.

    ==== End Of File ===========================
     
  2. 2009/10/06
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    As per our Malware Posting Rules...

     
    Arie,
    #2

  3. to hide this advert.

  4. 2009/10/07
    chrischris

    chrischris Inactive Thread Starter

    Joined:
    2009/10/06
    Messages:
    2
    Likes Received:
    0
    i am posting this because of the Search settings 1.2

    thnk you

    search settings 1.2
     
  5. 2009/10/07
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    Please stop double posting this in the Windows XP forum!

    Malware logs need to be here.

    Still my questions stands:

     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.