We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Computer Slow and Freezing

13

Comments

  • Wardy
    Wardy Posts: 261 Forumite
    aliEnRIK wrote: »
    You never UPDATED malwarebytes (Youll probably need to update twice, once to update malwarebytes and again to get the database up to date)

    Malwarebytes' Anti-Malware 1.42
    Database version: 3349

    malwarebytes is currenty on version 1.44 and the database version 3521. Yours is 4 months behind or more


    Sorry:o I've updated it - it's on database version 3522 - i'm presuming thats ok?

    Have left it to run again - took over 2hrs last time so will update tomorrow morning probably.

    Thanks again:beer:
  • Wardy
    Wardy Posts: 261 Forumite
    Malwarebytes' Anti-Malware 1.44
    Database version: 3522
    Windows 5.1.2600 Service Pack 3
    Internet Explorer 7.0.5730.13
    09/01/2010 09:11:14
    mbam-log-2010-01-09 (09-10-53).txt
    Scan type: Full Scan (C:\|)
    Objects scanned: 244407
    Time elapsed: 1 hour(s), 26 minute(s), 46 second(s)
    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 8
    Memory Processes Infected:
    (No malicious items detected)
    Memory Modules Infected:
    (No malicious items detected)
    Registry Keys Infected:
    (No malicious items detected)
    Registry Values Infected:
    (No malicious items detected)
    Registry Data Items Infected:
    (No malicious items detected)
    Folders Infected:
    (No malicious items detected)
    Files Infected:
    C:\Documents and Settings\HelpAssistant\Local Settings\Temp\57.tmp (Rootkit.MBR) -> No action taken.
    C:\Documents and Settings\HelpAssistant\Local Settings\Temp\58.tmp (Rootkit.MBR) -> No action taken.
    C:\Documents and Settings\HelpAssistant\Local Settings\Temp\5B.tmp (Rootkit.MBR) -> No action taken.
    C:\Documents and Settings\HelpAssistant\Local Settings\Temp\OdnN.dll (Rootkit.MBR) -> No action taken.
    C:\Documents and Settings\HelpAssistant\Local Settings\Temporary Internet Files\Content.IE5\X9GVUYBA\eHdff2fdf8V0100f070006Ra5a024c7102T94c704b1201l0809Ke0dcdaa830dP000000080[1] (Rootkit.MBR) -> No action taken.
    C:\System Volume Information\_restore{E462A319-1F4D-45DD-9782-322400C6449B}\RP137\A0056323.sys (Malware.Trace) -> No action taken.
    C:\System Volume Information\_restore{E462A319-1F4D-45DD-9782-322400C6449B}\RP137\A0057385.sys (Malware.Trace) -> No action taken.
    C:\System Volume Information\_restore{E462A319-1F4D-45DD-9782-322400C6449B}\RP137\A0057548.sys (Malware.Trace) -> No action taken.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    They all say 'no action taken'
    If you havnt aleady you need to rescan and TICK them and REMOVE them all
    :idea:
  • Wardy
    Wardy Posts: 261 Forumite
    Left it on overnite so still there - have ticked and removed them all
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Download and run the FREE version of DR WEB
    http://www.freedrweb.com/download+cureit/gr/
    Turn your anti virus OFF
    Click CANCEL to the 'Would you like to read purchase terms now?' message
    Click START click OK
    It will auto QUICK scan
    After that set to scan the WHOLE computer and press the 'play' icon

    ***DO NOT UPGRADE TO FULL VERSION***

    It'll probably take a long time so probably best leaving running overnight
    :idea:
  • Wardy
    Wardy Posts: 261 Forumite
    if it asks me to cure something, do i just say yes?:confused:
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Yes, go for it
    :idea:
  • Wardy
    Wardy Posts: 261 Forumite
    All done - it cured what it could and deleted the rest.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Ok, download a fresh copy of combofix (They update it online)

    And run it. Ill have another look at a fresh log
    :idea:
  • Wardy
    Wardy Posts: 261 Forumite
    Ran a lot quicker this time:j

    ComboFix 10-01-04.01 - Karen 09/01/2010 18:45:19.3.2 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.495.232 [GMT 0:00]
    Running from: c:\documents and settings\Karen\My Documents\QWERTY.exe
    AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    .
    ((((((((((((((((((((((((( Files Created from 2009-12-09 to 2010-01-09 )))))))))))))))))))))))))))))))
    .
    2010-01-09 09:35 . 2010-01-09 14:20
    d
    w- c:\documents and settings\Karen\DoctorWeb
    2010-01-08 21:55 . 2010-01-08 21:55 5115824 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
    2010-01-01 19:07 . 2010-01-01 19:07 388096 ----a-r- c:\documents and settings\Karen\Application Data\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
    2010-01-01 19:07 . 2010-01-01 19:07
    d
    w- c:\program files\TrendMicro
    2009-12-30 16:10 . 2009-12-30 16:10 52224 ----a-w- c:\documents and settings\Karen\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
    2009-12-28 19:05 . 2009-12-28 19:05
    d
    w- c:\program files\Lame MP3 Codec
    2009-12-28 19:05 . 2005-05-03 09:33 299008 ----a-w- c:\windows\system32\LAME_MP3.dll
    2009-12-28 19:04 . 2009-12-28 19:04
    d
    w- c:\program files\XviD
    2009-12-26 18:18 . 2009-12-26 18:18
    d
    w- c:\documents and settings\HelpAssistant\WINDOWS
    2009-12-26 18:18 . 2009-12-26 18:18
    d
    w- c:\documents and settings\HelpAssistant\UserData
    2009-12-26 18:18 . 2009-12-26 18:18
    d
    w- c:\documents and settings\HelpAssistant\Tracing
    2009-12-26 17:47 . 2009-12-26 17:47
    d
    w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
    2009-12-26 12:08 . 2009-12-26 12:08
    d
    w- c:\documents and settings\HelpAssistant\Contacts
    2009-12-25 11:16 . 2009-12-25 11:39
    d
    w- c:\documents and settings\Karen\Application Data\Apple Computer
    2009-12-25 11:15 . 2008-04-17 13:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
    2009-12-25 11:15 . 2009-05-18 14:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
    2009-12-25 11:14 . 2009-12-25 11:14
    d
    w- c:\program files\iPod
    2009-12-25 11:14 . 2009-12-25 11:15
    d
    w- c:\program files\iTunes
    2009-12-25 11:14 . 2009-12-25 11:15
    d
    w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
    2009-12-25 11:13 . 2009-12-25 11:13
    d
    w- c:\program files\Bonjour
    2009-12-25 11:12 . 2009-12-25 11:13
    d
    w- c:\program files\QuickTime
    2009-12-25 11:12 . 2009-12-25 11:14
    d
    w- c:\documents and settings\All Users\Application Data\Apple Computer
    2009-12-25 11:11 . 2009-12-25 11:11
    d
    w- c:\documents and settings\Karen\Local Settings\Application Data\Apple
    2009-12-25 11:11 . 2009-12-25 11:11
    d
    w- c:\program files\Apple Software Update
    2009-12-25 11:11 . 2009-08-28 19:42 40448 ----a-w- c:\windows\system32\drivers\usbaapl.sys
    2009-12-25 11:11 . 2009-08-28 19:42 2065696 ----a-w- c:\windows\system32\usbaaplrc.dll
    2009-12-25 11:09 . 2009-12-25 11:26
    d
    w- c:\documents and settings\All Users\Application Data\Apple
    2009-12-25 11:09 . 2009-12-25 11:14
    d
    w- c:\program files\Common Files\Apple
    2009-12-25 11:08 . 2009-12-26 10:20
    d
    w- c:\documents and settings\Karen\Local Settings\Application Data\Apple Computer
    2009-12-25 10:59 . 2001-08-17 22:36 5632 ----a-w- c:\windows\system32\ptpusb.dll
    2009-12-25 10:59 . 2008-04-14 05:42 159232 ----a-w- c:\windows\system32\ptpusd.dll
    2009-12-23 14:58 . 2009-12-14 17:10 916248 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgcfgx.dll
    2009-12-20 09:44 . 2009-12-20 09:44
    d
    w- c:\documents and settings\Karen\Local Settings\Application Data\HP
    2009-12-19 08:50 . 2009-12-19 08:50 294656 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avglngx.dll
    2009-12-18 18:59 . 2009-12-18 18:59
    d
    w- c:\documents and settings\Karen\Application Data\Samsung
    2009-12-18 18:50 . 2006-05-03 22:53 174592 ----a-w- c:\windows\system32\framedyn.dll
    2009-12-18 18:49 . 2009-12-18 18:49
    d
    w- c:\program files\DIFX
    2009-12-18 18:41 . 2008-02-22 15:33 14976 ----a-w- c:\windows\system32\drivers\sscdmdfl.sys
    2009-12-18 18:41 . 2008-02-22 15:33 12160 ----a-w- c:\windows\system32\drivers\sscdwhnt.sys
    2009-12-18 18:41 . 2008-02-22 15:33 12160 ----a-w- c:\windows\system32\drivers\sscdwh.sys
    2009-12-18 18:41 . 2008-02-22 15:33 114304 ----a-w- c:\windows\system32\drivers\sscdmdm.sys
    2009-12-18 18:41 . 2008-02-22 15:33 87936 ----a-w- c:\windows\system32\drivers\sscdbus.sys
    2009-12-18 18:41 . 2008-02-22 15:33 12160 ----a-w- c:\windows\system32\drivers\sscdcmnt.sys
    2009-12-18 18:41 . 2008-02-22 15:33 12160 ----a-w- c:\windows\system32\drivers\sscdcm.sys
    2009-12-18 18:40 . 2009-12-18 18:41
    d
    w- c:\windows\system32\Samsung_USB_Drivers
    2009-12-18 18:37 . 2009-12-18 18:56 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
    2009-12-18 18:36 . 2009-12-28 19:02
    d
    w- c:\program files\Samsung
    2009-12-18 18:27 . 2009-12-18 18:27
    d
    w- c:\documents and settings\Karen\Local Settings\Application Data\Identities
    2009-12-15 15:23 . 2009-12-14 17:10 877848 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe
    2009-12-15 15:23 . 2009-12-14 17:10 1657112 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll
    2009-12-15 15:23 . 2009-12-14 17:10 798488 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avginet.dll
    2009-12-14 18:13 . 2009-10-16 12:12 1119488 ----a-w- c:\documents and settings\All Users\Application Data\AVG Security Toolbar\IEToolbar.dll
    2009-12-14 17:12 . 2009-12-14 17:12
    d
    w- C:\$AVG
    2009-12-14 17:11 . 2009-12-14 17:11 12464 ----a-w- c:\windows\system32\avgrsstx.dll
    2009-12-14 17:11 . 2009-12-14 17:11 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys
    2009-12-14 17:11 . 2009-12-14 17:11 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys
    2009-12-14 17:11 . 2009-12-14 17:11 28424 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
    2009-12-14 17:11 . 2010-01-09 09:42
    d
    w- c:\windows\system32\drivers\Avg
    2009-12-14 17:11 . 2009-12-23 14:55
    d
    w- c:\documents and settings\All Users\Application Data\AVG Security Toolbar
    2009-12-14 17:10 . 2009-12-14 17:10
    d
    w- c:\program files\AVG
    2009-12-14 17:10 . 2009-12-14 17:10
    d
    w- c:\documents and settings\All Users\Application Data\avg9
    2009-12-14 17:10 . 2009-12-15 07:01
    d
    w- c:\windows\SxsCaPendDel
    2009-12-14 16:40 . 2009-12-14 16:40
    d
    w- c:\program files\MSXML 4.0
    2009-12-14 13:15 . 2009-08-06 19:23 274288 ----a-w- c:\windows\system32\mucltui.dll
    2009-12-12 17:40 . 2009-12-12 17:40
    d
    w- c:\documents and settings\All Users\Application Data\Symantec
    2009-12-12 17:36 . 2009-12-12 17:36 117760 ----a-w- c:\documents and settings\Karen\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
    2009-12-12 17:34 . 2009-12-12 17:34
    d
    w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    2009-12-12 17:33 . 2009-12-12 17:33
    d
    w- c:\program files\SUPERAntiSpyware
    2009-12-12 17:33 . 2009-12-12 17:33
    d
    w- c:\documents and settings\Karen\Application Data\SUPERAntiSpyware.com
    2009-12-12 17:32 . 2009-12-12 17:32
    d
    w- c:\program files\Common Files\Wise Installation Wizard
    2009-12-12 16:30 . 2009-12-12 16:30
    d
    w- c:\documents and settings\Karen\Application Data\Malwarebytes
    2009-12-12 15:33 . 2009-12-12 15:33
    d
    w- c:\documents and settings\Administrator\Application Data\Malwarebytes
    2009-12-12 15:33 . 2010-01-07 16:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-12-12 15:33 . 2010-01-08 22:00
    d
    w- c:\program files\Malwarebytes' Anti-Malware
    2009-12-12 15:33 . 2010-01-07 16:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
    2009-12-12 15:33 . 2009-12-12 15:33
    d
    w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-12-12 12:23 . 2009-12-12 12:23
    d
    w- c:\documents and settings\Karen\Local Settings\Application Data\Symantec
    2009-12-11 22:32 . 2009-12-14 16:29
    d
    w- c:\program files\Common Files\Symantec Shared
    2009-12-11 22:22 . 2009-12-14 16:34
    d
    w- c:\documents and settings\All Users\Application Data\Norton
    2009-12-11 22:20 . 2009-12-14 16:34
    d
    w- c:\program files\NortonInstaller
    2009-12-11 22:20 . 2009-12-11 23:02
    d
    w- c:\documents and settings\All Users\Application Data\NortonInstaller
    2009-12-11 21:12 . 2009-12-12 12:31
    d
    w- c:\documents and settings\Karen\Local Settings\Application Data\dgnygc
    2009-12-11 20:22 . 2009-12-11 20:22
    d
    w- c:\documents and settings\Karen\Local Settings\Application Data\COMODO
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-01-09 18:00 . 2009-09-12 18:36
    d
    w- c:\documents and settings\Karen\Application Data\HPAppData
    2009-12-28 19:02 . 2009-12-28 19:02
    d
    w- c:\program files\MarkAny
    2009-12-28 19:02 . 2009-08-20 11:56
    d--h--w- c:\program files\InstallShield Installation Information
    2009-12-23 14:57 . 2009-12-15 15:29 4043544 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgui.exe
    2009-12-23 14:54 . 2009-12-15 15:29 3966744 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgcorex.dll
    2009-12-14 16:56 . 2009-08-20 17:21
    d
    w- c:\program files\Microsoft Silverlight
    2009-12-12 16:39 . 2009-08-20 18:30 1474832 ----a-w- c:\windows\system32\drivers\sfi.dat
    2009-12-05 14:51 . 2009-12-05 14:43
    d
    w- c:\program files\Microsoft
    2009-12-05 14:50 . 2009-08-20 15:46
    d
    w- c:\program files\Windows Live
    2009-12-05 14:50 . 2009-12-05 14:50
    d
    w- c:\program files\Microsoft Sync Framework
    2009-12-05 14:47 . 2009-12-05 14:47
    d
    w- c:\program files\Microsoft SQL Server Compact Edition
    2009-12-03 13:23 . 2009-12-03 13:23
    d
    w- c:\program files\Coupon Printer
    2009-12-03 13:23 . 2009-12-03 13:23 31 ---ha-w- c:\windows\UKCpInfo.sys
    2009-11-12 17:07 . 2009-11-12 17:07 79144 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe
    2009-10-29 07:46 . 2008-04-14 09:42 832512
    w- c:\windows\system32\wininet.dll
    2009-10-29 07:46 . 2008-04-14 09:41 78336 ----a-w- c:\windows\system32\ieencode.dll
    2009-10-29 07:46 . 2008-04-14 09:41 17408 ----a-w- c:\windows\system32\corpol.dll
    2009-10-21 05:38 . 2008-04-14 09:42 75776 ----a-w- c:\windows\system32\strmfilt.dll
    2009-10-21 05:38 . 2008-04-14 09:41 25088 ----a-w- c:\windows\system32\httpapi.dll
    2009-10-20 16:20 . 2008-04-14 04:23 265728 ----a-w- c:\windows\system32\drivers\http.sys
    2009-10-13 10:30 . 2008-04-14 09:42 270336 ----a-w- c:\windows\system32\oakley.dll
    2009-10-12 13:38 . 2008-04-14 09:42 149504 ----a-w- c:\windows\system32\rastls.dll
    2009-10-12 13:38 . 2008-04-14 09:42 79872 ----a-w- c:\windows\system32\raschap.dll
    .
    ((((((((((((((((((((((((((((( [EMAIL="SnapShot@2010-01-07_21.52.27"]SnapShot@2010-01-07_21.52.27[/EMAIL] )))))))))))))))))))))))))))))))))))))))))
    .
    + 2010-01-09 09:22 . 2010-01-09 09:22 16384 c:\windows\Temp\Perflib_Perfdata_66c.dat
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
    "{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]
    [HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]
    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
    2009-11-25 13:01 1230080 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]
    [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]
    [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
    "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-11-23 2001648]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2004-07-01 155648]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2004-07-01 118784]
    "SoundMan"="SOUNDMAN.EXE" [2006-08-02 577536]
    "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-14 49152]
    "hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
    "ReminderApp"="c:\program files\Nova Development\Scrapbook Factory Deluxe 4.0\ReminderApp.exe" [2007-06-08 161864]
    "AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-01-01 2033432]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-11-10 417792]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-11-12 141600]
    "SMSTray"="c:\program files\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-02-23 126976]
    c:\documents and settings\Karen\Start Menu\Programs\Startup\
    Picture Motion Browser Media Check Tool.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2009-8-23 385024]
    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    2009-09-03 14:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
    backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
    backup=c:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
    2001-07-09 10:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2009-08-20 12:12 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
    "c:\\Program Files\\AVG\\AVG9\\avgemc.exe"=
    "c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
    "c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "65533:TCP"= 65533:TCP:Services
    "52344:TCP"= 52344:TCP:Services
    "3246:TCP"= 3246:TCP:Services
    "2479:TCP"= 2479:TCP:Services
    "3389:TCP"= 3389:TCP:Remote Desktop
    R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [14/12/2009 17:11 333192]
    R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [14/12/2009 17:11 360584]
    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [23/11/2009 08:43 9968]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [23/11/2009 08:43 74480]
    R2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [14/12/2009 17:10 906520]
    R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [14/12/2009 17:10 285392]
    R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [23/11/2009 08:43 7408]
    --- Other Services/Drivers In Memory ---
    *Deregistered* - DwShield00002E3F
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    .
    Contents of the 'Scheduled Tasks' folder
    2010-01-09 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
    .
    .
    Supplementary Scan
    .
    uStart Page = hxxp://www.google.co.uk/
    uInternet Settings,ProxyServer = http=127.0.0.1:5555
    uInternet Settings,ProxyOverride = <local>;*.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    .
    **************************************************************************
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-01-09 18:52
    Windows 5.1.2600 Service Pack 3 NTFS
    scanning hidden processes ...
    scanning hidden autostart entries ...
    scanning hidden files ...
    scan completed successfully
    hidden files: 0
    **************************************************************************
    .
    DLLs Loaded Under Running Processes
    - - - - - - - > 'winlogon.exe'(640)
    c:\program files\SUPERAntiSpyware\SASWINLO.dll
    c:\windows\system32\WININET.dll
    - - - - - - - > 'explorer.exe'(3004)
    c:\windows\system32\WININET.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    Completion time: 2010-01-09 18:56:03
    ComboFix-quarantined-files.txt 2010-01-09 18:56
    ComboFix2.txt 2010-01-08 18:25
    ComboFix3.txt 2010-01-07 22:04
    Pre-Run: 157,259,067,392 bytes free
    Post-Run: 157,292,515,328 bytes free
    - - End Of File - - 6D56173213B9145EB6FB99530DA7EDBF
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.1K Banking & Borrowing
  • 253.5K Reduce Debt & Boost Income
  • 454.2K Spending & Discounts
  • 245.1K Work, Benefits & Business
  • 600.7K Mortgages, Homes & Bills
  • 177.4K Life & Family
  • 258.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture