We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Firefox password problem

lunny_2
lunny_2 Posts: 63 Forumite
Part of the Furniture Combo Breaker
in Techie Stuff
Im not sure how best to explain the problem im having with firefox, but here goes!

When ever i try to type a password into firefox, i can type either one or a few characters (depending how fast i type) and they the suddenly become highlighted, this is infuriatting, as i then have to delete the password typed so far, and then type it is fully again. The second time i type the password, i do not get this problem.

Any suggestions as to whats causing this, and how to solve it?

Many thanks
«13

Comments

  • mightywhites29111971
    mightywhites29111971 Posts: 156 Forumite
    Do you have the add-on last pass? It is an add-on for saving passwords account names etc
  • joncarpet
    joncarpet Posts: 158 Forumite
    does the highlighted text appear in the password box you're typing in or in a box at bottom of screen (goes a pinky red colour)?
    :think:
  • lunny_2
    lunny_2 Posts: 63 Forumite
    Part of the Furniture Combo Breaker
    @ mightywhites - No i dont have that add on installed
    @ joncarpet - The highlighted text is in the box im typing in

    does that help?
  • joncarpet
    joncarpet Posts: 158 Forumite
    afraid not.
    thought it could be the quick search - it catches me out a few times when my typing is too quick!!
    :think:
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    I dont wish to frighten you, but thats quite a new one on me and the first thing that came to my mind was a 'password keylogger'


    Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
    http://www.filehippo.com/download_hijackthis/
    Click DO A SCAN AND SAVE A LOGFILE (Takes seconds) then post the log so we can see whats running
    (do NOT do anything else with Hijack but scan and post the FULL log)
    :idea:
  • lunny_2
    lunny_2 Posts: 63 Forumite
    Part of the Furniture Combo Breaker
    @ Alienrik

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 16:36:17, on 08/04/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\WLTRYSVC.EXE
    C:\Windows\System32\bcmwltry.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Windows\system32\WLANExt.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Program Files\DellTPad\Apoint.exe
    C:\Windows\OEM02Mon.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    C:\Windows\System32\WLTRAY.EXE
    C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
    C:\Program Files\Dell\MediaDirect\PCMService.exe
    C:\Windows\system32\igfxsrvc.exe
    C:\Windows\System32\wpcumi.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\ThreatFire\TFTray.exe
    C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\system32\aestsrv.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    C:\Program Files\Kontiki\KService.exe
    C:\Program Files\PC Tools Firewall Plus\FWService.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    C:\Windows\system32\STacSV.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\ThreatFire\TFService.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\DRIVERS\xaudio.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\DellTPad\ApMsgFwd.exe
    C:\Program Files\DellTPad\Apntex.exe
    C:\Program Files\DellTPad\HidFind.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Windows\system32\wbem\wmiprvse.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=2080621
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
    O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe
    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
    O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s
    O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
    O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
    O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe
    O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk.disabled
    O4 - Global Startup: Logitech SetPoint.lnk.disabled
    O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O13 - Gopher Prefix:
    O16 - DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} (20-20 3D Viewer) - http://magnet.2020.net/virtualplanner/Core/Player/2020PlayerAX_Win32.cab
    O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
    O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - http://support.euro.dell.com/systemprofiler/SysProExe.CAB
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUplden-gb.cab
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
    O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
    O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exe
    O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 10845 bytes
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    You have a lot of these ~
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    Which points towards malware or suchlike

    Uninstall LOGITECH DESKTOP MESSENGER (Dont worry, it will still work with msn and yahoo etc) as it can create all sorts of problems

    then ~
    Download MALWAREBYTES (Make sure you click 'DOWNLOAD NOW')
    http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
    UPDATE and FULL SCAN
    Post the WHOLE log here AFTER youve deleted everything it finds
    :idea:
  • lunny_2
    lunny_2 Posts: 63 Forumite
    Part of the Furniture Combo Breaker
    sorry for the slow reply, family came first i'm afraid!
    Malwarebytes' Anti-Malware 1.36
    Database version: 1951
    Windows 6.0.6001 Service Pack 1

    08/04/2009 20:56:51
    mbam-log-2009-04-08 (20-56-51).txt

    Scan type: Full Scan (C:\|D:\|)
    Objects scanned: 215311
    Time elapsed: 2 hour(s), 23 minute(s), 55 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Run LSPFIX

    then run COMBOFIX (Follow the simple instructions)
    Post the WHOLE log here it creates (Split into sections if need be)
    :idea:
  • lunny_2
    lunny_2 Posts: 63 Forumite
    Part of the Furniture Combo Breaker
    Hi AlienRik

    LSPFIX reported no problems

    Here is the COMBOFOX logfile - It mentioned AVG still being there although i had uninstalled it and am now running avast, i have since run the avg removal tool again.

    ComboFix 09-04-04.01 - guy 2009-04-09 9:37:46.1 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.3061.1788 [GMT 1:00]
    Running from: c:\users\guy\Downloads\ComboFix.exe
    AV: AVG Anti-Virus Free *On-access scanning enabled* (Outdated)
    * Created a new restore point
    .

    ((((((((((((((((((((((((( Files Created from 2009-03-09 to 2009-04-09 )))))))))))))))))))))))))))))))
    .

    2009-03-28 21:40 . 2008-12-11 09:38 159,600 --a
    c:\windows\System32\drivers\pctgntdi.sys
    2009-03-28 21:40 . 2009-03-06 17:45 130,424 --a
    c:\windows\System32\drivers\PCTCore.sys
    2009-03-28 21:40 . 2008-12-18 13:16 73,840 --a
    c:\windows\System32\drivers\PCTAppEvent.sys
    2009-03-28 19:22 . 2009-03-28 19:22 <DIR> dr
    c:\windows\System32\config\systemprofile\Music
    2009-03-28 18:16 . 2009-03-28 18:16 <DIR> d
    C:\ISIS
    2009-03-28 18:16 . 2002-12-11 10:41 246,272 --a
    c:\windows\UNINST16.EXE
    2009-03-28 18:16 . 2009-03-28 18:16 46,020 --a
    c:\windows\System32\FORDLINE.TTF
    2009-03-28 09:40 . 2009-03-28 09:40 <DIR> d
    c:\users\guy\AppData\Roaming\PCToolsFirewallPlus
    2009-03-28 09:36 . 2009-03-28 21:44 <DIR> d
    c:\program files\PC Tools Firewall Plus
    2009-03-28 09:36 . 2009-03-28 21:40 <DIR> d
    c:\program files\Common Files\PC Tools
    2009-03-28 09:36 . 2008-09-22 13:29 97,408 --a
    c:\windows\System32\drivers\pctfw.sys
    2009-03-28 09:36 . 2009-01-21 11:38 95,640 --a
    c:\windows\System32\drivers\pctplfw.sys
    2009-03-28 09:35 . 2009-03-28 09:35 <DIR> d
    c:\users\All Users\PC Tools
    2009-03-28 09:35 . 2009-03-28 09:35 <DIR> d
    c:\programdata\PC Tools
    2009-03-28 09:35 . 2009-03-28 09:49 <DIR> d
    c:\program files\ThreatFire
    2009-03-28 09:35 . 2009-03-03 13:19 51,472 --a
    c:\windows\System32\drivers\TfFsMon.sys
    2009-03-28 09:35 . 2009-03-03 13:19 39,184 --a
    c:\windows\System32\drivers\TfSysMon.sys
    2009-03-28 09:35 . 2009-03-03 13:19 33,040 --a
    c:\windows\System32\drivers\TfNetMon.sys
    2009-03-28 09:35 . 2009-03-03 13:19 12,560 --a
    c:\windows\System32\drivers\TfKbMon.sys
    2009-03-27 14:42 . 2009-03-27 15:23 <DIR> d
    c:\users\guy\AppData\Roaming\Dreamsdwell Stories
    2009-03-20 11:43 . 2009-03-20 11:43 <DIR> d
    c:\users\guy\AppData\Roaming\Boolat Games
    2009-03-20 10:37 . 2009-03-20 10:37 <DIR> d
    c:\users\All Users\FarmFrenzy-PizzaParty
    2009-03-20 10:37 . 2009-03-20 10:37 <DIR> d
    c:\programdata\FarmFrenzy-PizzaParty
    2009-03-19 09:04 . 2008-06-20 02:14 781,344 --a
    c:\windows\System32\PresentationNative_v0300.dll
    2009-03-19 09:04 . 2008-06-20 02:14 622,080 --a
    c:\windows\System32\icardagt.exe
    2009-03-19 09:04 . 2008-06-20 02:14 326,160 --a
    c:\windows\System32\PresentationHost.exe
    2009-03-19 09:04 . 2008-06-20 02:14 105,016 --a
    c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll
    2009-03-19 09:04 . 2008-06-20 02:14 97,800 --a
    c:\windows\System32\infocardapi.dll
    2009-03-19 09:04 . 2008-06-20 02:14 43,544 --a
    c:\windows\System32\PresentationHostProxy.dll
    2009-03-19 09:04 . 2008-06-20 02:14 37,384 --a
    c:\windows\System32\infocardcpl.cpl
    2009-03-19 09:04 . 2008-06-20 02:14 11,264 --a
    c:\windows\System32\icardres.dll
    2009-03-19 08:57 . 2008-07-27 19:03 282,112 --a
    c:\windows\System32\mscoree.dll
    2009-03-19 08:57 . 2008-07-27 19:03 96,760 --a
    c:\windows\System32\dfshim.dll
    2009-03-19 08:57 . 2008-07-27 19:03 41,984 --a
    c:\windows\System32\netfxperf.dll
    2009-03-19 08:56 . 2008-07-27 19:03 158,720 --a
    c:\windows\System32\mscorier.dll
    2009-03-19 08:56 . 2008-07-27 19:03 83,968 --a
    c:\windows\System32\mscories.dll
    2009-03-12 10:45 . 2009-03-12 10:46 <DIR> d
    c:\users\All Users\Go Go Gourmet
    2009-03-12 10:45 . 2009-03-12 10:46 <DIR> d
    c:\programdata\Go Go Gourmet
    2009-03-11 08:48 . 2008-12-16 04:29 8,147,456 --a
    c:\windows\System32\wmploc.DLL
    2009-03-11 08:48 . 2009-02-09 04:10 2,033,152 --a
    c:\windows\System32\win32k.sys
    2009-03-11 08:48 . 2008-11-27 05:43 268,288 --a
    c:\windows\System32\schannel.dll
    2009-03-11 08:48 . 2008-12-16 06:31 7,680 --a
    c:\windows\System32\spwmp.dll
    2009-03-11 08:48 . 2008-12-16 06:31 4,096 --a
    c:\windows\System32\msdxm.ocx
    2009-03-11 08:48 . 2008-12-16 06:31 4,096 --a
    c:\windows\System32\dxmasf.dll

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-04-09 08:42
    d
    w c:\programdata\Kontiki
    2009-04-09 08:37
    d---a-w c:\programdata\TEMP
    2009-04-08 15:55
    d
    w c:\program files\Logitech
    2009-04-08 15:53
    d
    w c:\program files\Malwarebytes' Anti-Malware
    2009-04-08 11:05
    d
    w c:\users\guy\AppData\Roaming\uTorrent
    2009-04-06 14:32 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
    2009-04-06 14:32 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
    2009-03-29 14:16
    d
    w c:\programdata\Spybot - Search & Destroy
    2009-03-28 16:53
    d
    w c:\programdata\Roxio
    2009-03-28 08:06 3,888,459 ----a-w c:\windows\Internet Logs\tvDebug.Zip
    2009-03-27 15:47
    d
    w c:\program files\Virgin Media Games
    2009-03-27 14:46
    d
    w c:\programdata\MumboJumbo
    2009-03-27 14:46
    d
    w c:\program files\Oberon Media
    2009-03-27 07:50
    d
    w c:\program files\SUPERAntiSpyware
    2009-03-26 20:44
    d
    w c:\users\guy\AppData\Roaming\DVD Flick
    2009-03-26 20:44
    d
    w c:\program files\Glary Utilities
    2009-03-26 20:44
    d
    w c:\program files\AskBarDis
    2009-03-26 20:37 42,865 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_24_43_small.dmp.zip
    2009-03-26 20:37 36,661 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_30_10_small.dmp.zip
    2009-03-26 20:37 36,559 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_29_49_small.dmp.zip
    2009-03-26 20:37 35,800 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_29_58_small.dmp.zip
    2009-03-26 20:37 25,568 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_29_19_small.dmp.zip
    2009-03-26 20:37 25,538 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_29_37_small.dmp.zip
    2009-03-26 20:24 44,045 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_22_29_small.dmp.zip
    2009-03-12 08:01
    d
    w c:\program files\Windows Mail
    2009-03-05 17:34
    d
    w c:\users\guy\AppData\Roaming\EleFun Games
    2009-03-03 10:20
    d
    w c:\users\guy\AppData\Roaming\BeachPartyCraze
    2009-02-28 07:19
    d
    w c:\program files\Microsoft Silverlight
    2009-02-26 20:37
    d
    w c:\users\guy\AppData\Roaming\GlarySoft
    2009-02-26 20:20
    d
    w c:\program files\Trend Micro
    2009-02-26 12:15
    d
    w c:\programdata\SugarGames
    2009-02-25 20:33
    d
    w c:\users\guy\AppData\Roaming\Roxio
    2009-02-24 20:51
    d
    w c:\programdata\DVD Shrink
    2009-02-24 20:48
    d
    w c:\program files\DVD Shrink
    2009-02-22 18:06
    d
    w c:\program files\Spybot - Search & Destroy
    2009-02-17 08:59
    d
    w c:\programdata\Fugazo
    2009-02-16 00:11 293,528 ----a-w c:\windows\system32\drivers\vsdatant.sys
    2009-02-15 08:15 410,984 ----a-w c:\windows\System32\deploytk.dll
    2009-02-15 08:15
    d
    w c:\program files\Java
    2009-02-13 08:17
    d
    w c:\program files\Turbo Subs
    2009-02-12 22:13
    d
    w c:\program files\Alwil Software
    2009-02-12 22:07
    d
    w c:\users\guy\AppData\Roaming\Malwarebytes
    2009-02-12 22:07
    d
    w c:\programdata\SUPERAntiSpyware.com
    2009-02-12 22:07
    d
    w c:\programdata\Malwarebytes
    2009-02-12 22:06
    d
    w c:\users\guy\AppData\Roaming\SUPERAntiSpyware.com
    2009-02-12 22:06
    d
    w c:\program files\Common Files\Wise Installation Wizard
    2009-02-12 22:03
    d
    w c:\programdata\avg8
    2009-01-19 19:10 127,034
    r c:\windows\bwUnin-8.1.1.50-8876480SL.exe
    2009-01-18 09:17 31,890,303 ----a-w c:\windows\Internet Logs\vsmon_on_demand_thread_2009_01_18_09_15_36_full.dmp.zip
    2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet.dll
    2008-11-02 08:50 760 ----a-w c:\users\guy\AppData\Roaming\wklnhst.dat
    2008-08-09 11:58 174 --sha-w c:\program files\desktop.ini
    2008-06-21 11:33 76 --sh--r c:\windows\CT4CET.bin
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
    "msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
    "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Apoint"="c:\program files\DellTPad\Apoint.exe" [2007-10-25 167936]
    "OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2008-03-04 36864]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2008-03-06 133656]
    "DELL Webcam Manager"="c:\program files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 118784]
    "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
    "Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-12-12 3444736]
    "SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2007-11-12 405504]
    "PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-12-21 184320]
    "WPCUMI"="c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]
    "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
    "ThreatFire"="c:\program files\ThreatFire\TFTray.exe" [2009-03-03 263440]
    "00PCTFW"="c:\program files\PC Tools Firewall Plus\FirewallGUI.exe" [2009-02-23 2652056]
    "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-02-29 c:\windows\KHALMNPR.Exe]

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2008-06-21 50688]
    Logitech Desktop Messenger.lnk.disabled [2009-01-21 2252]
    Logitech SetPoint.lnk.disabled [2009-02-19 1835]
    QuickSet.lnk - c:\program files\Dell\QuickSet\quickset.exe [2007-09-07 1180952]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableUIADesktopToggle"= 0 (0x0)

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    2008-12-22 12:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
    2008-06-21 12:50 10536 c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GOEC62~1.DLL

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
    backup=c:\windows\pss\Adobe Gamma Loader.lnk.CommonStartup
    backupExtension=.CommonStartup

    [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
    backup=c:\windows\pss\Microsoft Office.lnk.CommonStartup
    backupExtension=.CommonStartup

    [HKLM\~\startupfolder\C:^Users^guy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.0.lnk]
    backup=c:\windows\pss\OpenOffice.org 3.0.lnk.Startup
    backupExtension=.Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\4oD]
    --a
    2007-04-23 11:23 1032640 c:\program files\Kontiki\KHost.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    --a
    2008-10-15 02:04 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupportCenter]
    --a
    2008-08-14 00:04 206064 c:\program files\Dell Support Center\bin\sprtcmd.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
    --a
    2008-01-19 08:33 125952 c:\windows\ehome\ehtray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\five Media Manager Tray]
    --a
    2008-05-21 11:32 368640 c:\program files\Entriq\MediaSphere\EntriqMediaTray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
    --a
    2008-03-06 08:58 141848 c:\windows\System32\igfxtray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\kdx]
    --a
    2007-04-23 11:23 1032640 c:\program files\Kontiki\KHost.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
    2008-02-20 17:19 356352 c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    --a
    2009-02-15 09:15 136600 c:\program files\Java\jre6\bin\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
    --a
    2008-01-19 08:33 202240 c:\program files\Windows Media Player\wmpnscfg.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
    "SUPERAntiSpyware"=c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
    "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    "dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe"
    "HotKeysCmds"=c:\windows\system32\hkcmd.exe
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    "Windows Defender"=%ProgramFiles%\Windows Defender\MSASCui.exe -hide

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{B97A218F-B57B-463B-B6B8-8BAC8F5F5285}"= c:\program files\Dell\MediaDirect\MediaDirect.exe:Dell MediaDirect
    "{924A64CB-AB0B-4087-9304-2D9E014234ED}"= c:\program files\Dell\MediaDirect\PCMService.exe:CyberLink PowerCinema Resident Program
    "{BB8CB084-99D3-4BF1-A220-F5A803CB09D9}"= c:\program files\Dell\MediaDirect\Kernel\DMP\CLBrowserEngine.exe:Cyberlink Media Server Browser Engine
    "{526A9986-A111-48EC-A40D-0470D1BA55C5}"= c:\program files\Dell\MediaDirect\Kernel\DMS\CLMSService.exe:CyberLink Media Server
    "{3B8A3CD5-CE39-43CD-AC4E-FE4678DD4EA3}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe
    "{62CB7B37-4BED-4B40-8960-26D43E7F0F74}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
    "{9B2A84F8-9875-495A-8141-B3C5467A4674}"= UDP:c:\program files\Kontiki\KService.exe:Delivery Manager Service
    "{F26379BE-0A3F-4F61-B98E-7E42AFD65D4D}"= TCP:c:\program files\Kontiki\KService.exe:Delivery Manager Service
    "{0017E8C9-0F07-4CDD-8AAE-F5D260A577F0}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
    "{7AA2BD61-F6E9-4C81-924F-2D39DAF82C51}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
    "{6666DAC5-F797-42CC-A108-1469F48349F8}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{D95B09B7-92E0-46C4-B3FA-5A6804293EEA}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{CB0FB048-3B30-4AE2-88C1-885156EB2BC3}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{1601CA93-6DDB-4C0D-A4E8-61C1462D5250}"= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe
    "{6F737E54-724E-4C09-AA2C-553079B808B1}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent
    "{968D5161-7194-4E93-A664-755833FA5118}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
    "EnableFirewall"= 0 (0x0)

    R0 TfFsMon;TfFsMon;c:\windows\System32\drivers\TfFsMon.sys [2009-03-28 51472]
    R0 TfSysMon;TfSysMon;c:\windows\System32\drivers\TfSysMon.sys [2009-03-28 39184]
    R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [2009-02-12 114768]
    R1 pctgntdi;pctgntdi;c:\windows\System32\drivers\pctgntdi.sys [2009-03-28 159600]
    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2009-01-15 9968]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-01-15 55024]
    R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\AEstSrv.exe [2008-06-21 73728]
    R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [2009-02-12 20560]
    R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2009-02-12 51792]
    R2 PCTAppEvent;PCTAppEvent Driver;c:\windows\System32\drivers\PCTAppEvent.sys [2009-03-28 73840]
    R2 ThreatFire;ThreatFire;c:\program files\ThreatFire\TFService.exe service --> c:\program files\ThreatFire\TFService.exe service [?]
    R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\System32\drivers\IntcHdmi.sys [2008-06-21 111616]
    R3 OEM02Dev;Creative Camera OEM002 Driver;c:\windows\System32\drivers\OEM02Dev.sys [2008-06-21 235648]
    R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;c:\windows\System32\drivers\OEM02Vfx.sys [2008-06-21 7424]
    R3 pctplfw;pctplfw;c:\windows\System32\drivers\pctplfw.sys [2009-03-28 95640]
    R3 TfNetMon;TfNetMon;c:\windows\System32\drivers\TfNetMon.sys [2009-03-28 33040]
    S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\System32\drivers\ggflt.sys [2008-09-11 13352]
    S3 RT-USB;Ross-Tech USB driver;c:\windows\System32\drivers\RT-USB.SYS [2007-11-16 54400]
    S3 s3017bus;Sony Ericsson Device 3017 driver (WDM);c:\windows\System32\drivers\s3017bus.sys [2008-09-11 83880]
    S3 s3017mdfl;Sony Ericsson Device 3017 USB WMC Modem Filter;c:\windows\System32\drivers\s3017mdfl.sys [2008-09-11 15016]
    S3 s3017mdm;Sony Ericsson Device 3017 USB WMC Modem Driver;c:\windows\System32\drivers\s3017mdm.sys [2008-09-11 110632]
    S3 s3017mgmt;Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s3017mgmt.sys [2008-09-11 104616]
    S3 s3017nd5;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS);c:\windows\System32\drivers\s3017nd5.sys [2008-09-11 25512]
    S3 s3017obex;Sony Ericsson Device 3017 USB WMC OBEX Interface;c:\windows\System32\drivers\s3017obex.sys [2008-09-11 100648]
    S3 s3017unic;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM);c:\windows\System32\drivers\s3017unic.sys [2008-09-11 110120]
    S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-01-15 7408]
    S4 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe [2008-12-06 464264]

    --- Other Services/Drivers In Memory ---

    *Deregistered* - mchInjDrv
    .
    Contents of the 'Scheduled Tasks' folder

    2009-04-09 c:\windows\Tasks\GlaryInitialize.job
    - c:\program files\Glary Utilities\initialize.exe [2009-02-12 18:10]
    .
    - - - - ORPHANS REMOVED - - - -

    WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - c:\program files\AskBarDis\bar\bin\askBar.dll


    .
    Supplementary Scan
    .
    LSP: c:\windows\system32\wpclsp.dll
    DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} - hxxp://magnet.2020.net/virtualplanner/Core/Player/2020PlayerAX_Win32.cab
    FF - ProfilePath - c:\users\guy\AppData\Roaming\Mozilla\Firefox\Profiles\dh1aend2.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.bbc.co.uk/
    FF - component: c:\users\guy\AppData\Roaming\Mozilla\Firefox\Profiles\dh1aend2.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\EbayAccessService.dll
    FF - component: c:\users\guy\AppData\Roaming\Mozilla\Firefox\Profiles\dh1aend2.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\EbayFormSubmitObserver.dll
    FF - plugin: c:\program files\Entriq\MediaSphere\3.8.2.9\npEntriqMediaMozillaPlugin.dll
    FF - plugin: c:\program files\Entriq\MediaSphere\3.8.2.9\npEntriqVersionCheckMozillaPlugin.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
    FF - plugin: c:\program files\Virtual Earth 3D\npVE3D.dll
    FF - plugin: c:\programdata\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
    FF - plugin: c:\users\guy\AppData\Roaming\Mozilla\Firefox\Profiles\dh1aend2.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll

    ---- FIREFOX POLICIES ----
    .

    **************************************************************************

    catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-04-09 09:42:57
    Windows 6.0.6001 Service Pack 1 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    DLLs Loaded Under Running Processes

    - - - - - - - > 'winlogon.exe'(792)
    c:\program files\ThreatFire\TFWAH.dll

    - - - - - - - > 'lsass.exe'(704)
    c:\program files\ThreatFire\TFWAH.dll

    - - - - - - - > 'Explorer.exe'(3776)
    c:\program files\ThreatFire\TFWAH.dll
    .
    Completion time: 2009-04-09 9:46:23
    ComboFix-quarantined-files.txt 2009-04-09 08:46:11

    Pre-Run: 144,025,608,192 bytes free
    Post-Run: 143,561,781,248 bytes free

    288 --- E O F --- 2009-04-07 07:09:55
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.1K Banking & Borrowing
  • 253.6K Reduce Debt & Boost Income
  • 454.2K Spending & Discounts
  • 245.1K Work, Benefits & Business
  • 600.7K Mortgages, Homes & Bills
  • 177.5K Life & Family
  • 258.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture