Firefox problem??

aliEnRIK

Clearly somethings wrong somewhere. Every one of the programs I posted 'should' just work

Try the last program I posted (At least if that DOES run I can see whats going on in that computer of yours)

Then try DR WEBS CURE IT
Assuming it actually works (Though im not holding my breath ), it will auto scan with a QUICK scan. Once thats complete then run a FULL scan

gerturdeanna

So how should I progress from here? I'm stuck following the instructions due to this administrator problems I'm seeming to have!!

gerturdeanna

Sorry crossed posts!! Am running the DDS thing

aliEnRIK

You might be best creating a completely NEW user for your computer (Admin user obviously) if just to get things up and running

I assume you are actually logged in as admin now?

gerturdeanna

Results:
DDS (Ver_09-03-16.01) - NTFSx86
Run by Jane at 16:43:08.55 on 19/04/2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_13
Microsoft® Windows Vista™ Home Basic 6.0.6001.1.1252.44.1033.18.765.125 [GMT 1:00]

============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Windows\system32\rundll32.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Users\Jane\AppData\Local\Temp\RtkBtMnt.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Sun\StarOffice 8\program\soffice.BIN
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Jane\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.sky.com
uDefault_Page_URL = hxxp://www.sky.com
uWindow Title = Internet Explorer Provided By Sky Broadband
mStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0809&s=2&o=vb32&d=1008&m=d620
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: McAfee Phishing Filter: {27b4851a-3207-45a2-b947-be8afe6163ab} - c:\progra~1\mcafee\msk\mskapbho.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: RoboForm: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\progra~1\mcafee\viruss~1\scriptsn.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.0.926.3450\swg.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: &RoboForm: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [BkupTray] "c:\program files\newtech infosystems\nti backup now 5\BkupTray.exe"
mRun: [LManager] c:\progra~1\launch~1\LManager.exe
mRun: [eRecoveryService]
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [WarReg_PopUp] c:\program files\emachines\wr_popup\WarReg_PopUp.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
StartupFolder: c:\users\jane\appdata\roaming\micros~1\windows\startm~1\programs\startup\starof~1.lnk - c:\program files\sun\staroffice 8\program\quickstart.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Customize Menu - [URL]file://c:\program[/URL] files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Fill Forms - [URL]file://c:\program[/URL] files\siber systems\ai roboform\RoboFormComFillForms.html
IE: RoboForm Toolbar - [URL]file://c:\program[/URL] files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: Save Forms - [URL]file://c:\program[/URL] files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {08E730A4-FB02-45BD-A900-01E4AD8016F6} - http://www.sky.com
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUplden-gb.cab
DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - hxxp://www.eset.eu/buxus/docs/OnlineScanner.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://download.bitdefender.com/resources/scan8/oscan8.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://dl8-cdn-09.sun.com/s/ESD7/JSCDL/jdk/6u13-b03/jinstall-6u13-windows-i586-jc.cab?e=1239267281158&h=e48889405313de4ce1c8ca4519cf6c75/&filename=jinstall-6u13-windows-i586-jc.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
================= FIREFOX ===================
FF - ProfilePath - c:\users\jane\appdata\roaming\mozilla\firefox\profiles\x4nyaljc.default\
FF - component: c:\program files\mcafee\siteadvisor\components\McFFPlg.dll
FF - component: c:\users\jane\appdata\roaming\mozilla\firefox\profiles\x4nyaljc.default\extensions\{22119944-ed35-4ab1-910b-e619ea06a115}\components\rfproxy_27.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
============= SERVICES / DRIVERS ===============
S3 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr.sys [2009-1-19 55264]
=============== Created Last 30 ================
2009-04-18 20:15 376,832 a

---

c:\windows\system32\winhttp.dll
2009-04-18 20:15 562,176 a

---

c:\windows\system32\msdtcprx.dll
2009-04-18 20:15 38,912 a

---

c:\windows\system32\xolehlp.dll
2009-04-18 20:13 1,255,936 a

---

c:\windows\system32\lsasrv.dll
2009-04-18 20:13 72,704 a

---

c:\windows\system32\secur32.dll
2009-04-18 20:13 24,064 a

---

c:\windows\system32\amxread.dll
2009-04-18 20:13 13,824 a

---

c:\windows\system32\apilogen.dll
2009-04-18 20:00 1,383,424 a

---

c:\windows\system32\mshtml.tlb
2009-04-13 13:29 <DIR> --d

---

c:\programdata\Meridian93
2009-04-13 13:29 <DIR> --d

---

c:\progra~2\Meridian93
2009-04-13 13:23 <DIR> --d

---

c:\users\jane\appdata\roaming\Meridian93
2009-04-10 18:01 <DIR> --d

---

c:\users\jane\appdata\roaming\WildTangent
2009-04-09 09:55 410,984 a

---

c:\windows\system32\deploytk.dll
2009-04-08 09:35 107,368 a

---

c:\windows\system32\GEARAspi.dll
2009-04-08 09:35 23,400 a

---

c:\windows\system32\drivers\GEARAspiWDM.sys
2009-04-08 09:34 <DIR> --d

---

c:\program files\iPod
2009-04-08 09:33 <DIR> --d

---

c:\programdata\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-04-08 09:33 <DIR> --d

---

c:\program files\iTunes
2009-04-08 09:33 <DIR> --d

---

c:\progra~2\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-04-08 09:30 <DIR> --d

---

c:\program files\Bonjour
2009-04-08 09:26 <DIR> --d

---

c:\programdata\Apple Computer
2009-04-08 09:20 <DIR> --d

---

c:\programdata\Apple
2009-04-07 17:41 <DIR> --d

---

c:\programdata\PopCap Games
2009-04-07 17:41 <DIR> --d

---

c:\progra~2\PopCap Games
2009-03-20 22:25 <DIR> --d

---

c:\program files\Trend Micro
2009-03-20 22:06 <DIR> --d

---

c:\users\jane\appdata\roaming\Malwarebytes
2009-03-20 22:06 15,504 a

---

c:\windows\system32\drivers\mbam.sys
2009-03-20 22:05 38,496 a

---

c:\windows\system32\drivers\mbamswissarmy.sys
2009-03-20 22:05 <DIR> --d

---

c:\programdata\Malwarebytes
2009-03-20 22:05 <DIR> --d

---

c:\program files\Malwarebytes' Anti-Malware
2009-03-20 22:05 <DIR> --d

---

c:\progra~2\Malwarebytes
==================== Find3M ====================
2009-04-08 09:23 86,016 a

---

c:\windows\inf\infstor.dat
2009-04-08 09:23 51,200 a

---

c:\windows\inf\infpub.dat
2009-04-08 09:23 86,016 a

---

c:\windows\inf\infstrng.dat
2009-03-25 11:06 40,552 a

---

c:\windows\system32\drivers\mfesmfk.sys
2009-03-25 11:06 214,024 a

---

c:\windows\system32\drivers\mfehidk.sys
2009-03-25 11:06 79,880 a

---

c:\windows\system32\drivers\mfeavfk.sys
2009-03-25 11:06 35,272 a

---

c:\windows\system32\drivers\mfebopk.sys
2009-03-25 11:05 34,216 a

---

c:\windows\system32\drivers\mferkdk.sys
2009-03-20 10:13 109,400 a

---

c:\windows\system32\GDIPFONTCACHEV1.DAT
2009-03-17 04:38 40,960 a

---

c:\windows\apppatch\apihex86.dll
2009-03-04 10:45 160,550 a

---

c:\windows\hpoins27.dat
2009-03-03 05:40 827,392 a

---

c:\windows\system32\wininet.dll
2009-03-03 05:37 78,336 a

---

c:\windows\system32\ieencode.dll
2009-03-03 03:28 26,624 a

---

c:\windows\system32\ieUnatt.exe
2009-02-24 10:35 0 a---h--- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-02-09 04:10 2,033,152 a

---

c:\windows\system32\win32k.sys
2009-02-07 21:19 56 a---h--- c:\programdata\ezsidmv.dat
2009-02-07 21:19 56 a---h--- c:\progra~2\ezsidmv.dat
2008-08-27 23:45 665,600 a

---

c:\windows\inf\drvindex.dat
2008-01-21 03:57 174 a--sh--- c:\program files\desktop.ini
2006-11-02 13:39 287,440 a

---

c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 13:39 287,440 a

---

c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 13:39 30,674 a

---

c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 13:39 30,674 a

---

c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 10:20 287,440 a

---

c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 10:20 287,440 a

---

c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 10:20 30,674 a

---

c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 10:20 30,674 a

---

c:\windows\inf\perflib\0000\perfc.dat
============= FINISH: 16:45:04.33 ===============

gerturdeanna

I'm logged in as me...there are no other profiles set up - is there somewhere to check that I have admin duties?

aliEnRIK

Goto CONTROL PANEL and USER ACCOUNTS to find what your in as (Though if theres ONLY you then you should be in as admin)

gerturdeanna

I am administrator according to that.

So I did the DDS log as above....dr web next??

aliEnRIK

run dr web yes

Im working nightshift tonight so not sure when ill be able to go through the log

gerturdeanna

This is the other log from DDS


Just realised it said at the top not to post on a forum!! haha!





So I remove the DDS thing now?

Thanks for all your help - really appreciate it!