Norton Security

andyrules

Spybot found adviva, doubleclick, mediaplex, don't think they are bad?

Will go and do the DDS now

andyrules

here are the DDS logs. Not done as administrator I'm afraid


.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Gill at 0:20:27.50 on 02/04/2011
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_24
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.767.191 [GMT 1:00]
.
AV: AVG Internet Security 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *Enabled*
.
============== Running Processes ===============
.
C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
svchost.exe
C:\Program Files\AVG\AVG10\avgfws.exe
C:\Program Files\AVG\AVG10\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe -k imgsvc
C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG10\avgam.exe
C:\Program Files\AVG\AVG10\avgnsx.exe
C:\Program Files\AVG\AVG10\avgemcx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Gill\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\PROGRA~1\AVG\AVG10\avgrsx.exe
C:\Program Files\AVG\AVG10\avgcsrvx.exe
C:\Documents and Settings\Gill\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\Gill\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gill\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gill\My Documents\Downloads\dds (2).scr
C:\Documents and Settings\Gill\My Documents\Downloads\dds (2).scr
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://google.co.uk/
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg10\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [EPSON SX110 Series] c:\windows\system32\spool\drivers\w32x86\3\e_fatifbe.exe /fu "c:\windows\temp\E_S4D.tmp" /EF "HKCU"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
mRun: [AVG_TRAY] c:\program files\avg\avg10\avgtray.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1299409905205
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg10\avgpp.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\docume~1\gill\applic~1\mozilla\firefox\profiles\c2dd7ejr.default\
FF - prefs.js: network.proxy.type - 0
FF - component: c:\program files\avg\avg10\firefox\components\avgssff.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 25680]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 26064]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-12-8 251728]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 34384]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-11-12 299984]
R2 avgfws;AVG Firewall;c:\program files\avg\avg10\avgfws.exe [2010-11-22 3226632]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg10\identity protection\agent\bin\AVGIDSAgent.exe [2011-1-6 6128720]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg10\avgwdsvc.exe [2010-10-22 265400]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [2010-7-12 30432]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-3 123472]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-3 30288]
R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-3 26192]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [2010-7-12 30432]
.
=============== Created Last 30 ================
.
.
==================== Find3M ====================
.
2011-02-02 13:31:16 499712 ----a-w- c:\windows\system32\msvcp71.dll
2011-02-02 13:31:16 348160 ----a-w- c:\windows\system32\msvcr71.dll
.
============= FINISH: 0:21:10.65 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 06/03/2011 11:08:37
System Uptime: 01/04/2011 20:18:22 (4 hours ago)
.
Motherboard: | | K7VT4APro
Processor: AMD Sempron(tm) 2500+ | Socket-A | 1749/166mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 76 GiB total, 63.199 GiB free.
is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: RAID Controller
Device ID: PCI\VEN_1106&DEV_3149&SUBSYS_31491849&REV_80\3&61AAA01&0&78
Manufacturer:
Name: RAID Controller
PNP Device ID: PCI\VEN_1106&DEV_3149&SUBSYS_31491849&REV_80\3&61AAA01&0&78
Service:
.
Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Universal Serial Bus (USB) Controller
Device ID: PCI\VEN_1106&DEV_3104&SUBSYS_31041849&REV_86\3&61AAA01&0&84
Manufacturer:
Name: Universal Serial Bus (USB) Controller
PNP Device ID: PCI\VEN_1106&DEV_3104&SUBSYS_31041849&REV_86\3&61AAA01&0&84
Service:
.
==== System Restore Points ===================
.
RP31: 06/03/2011 13:22:36 - Installed Windows XP Service Pack 2.
RP32: 06/03/2011 13:32:05 - Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
RP33: 06/03/2011 13:32:12 - Installed AVG 2011
RP34: 06/03/2011 13:32:27 - Installed AVG 2011
RP35: 06/03/2011 13:48:51 - Unsigned printer driver EPSON SX110 Series installed.
RP36: 06/03/2011 15:22:04 - Unsigned driver install
RP37: 07/03/2011 08:23:02 - Software Distribution Service 3.0
RP38: 07/03/2011 23:23:09 - Software Distribution Service 3.0
RP39: 08/03/2011 07:17:20 - Removed AVG 2011
RP40: 08/03/2011 19:21:33 - Installed Microsoft Office Professional Edition 2003
RP41: 09/03/2011 09:00:04 - Software Distribution Service 3.0
RP42: 11/03/2011 07:32:02 - System Checkpoint
RP43: 11/03/2011 20:47:45 - Removed AVG 2011
RP44: 13/03/2011 12:11:36 - System Checkpoint
RP45: 14/03/2011 18:42:00 - System Checkpoint
RP46: 15/03/2011 19:00:57 - System Checkpoint
RP47: 16/03/2011 19:10:19 - System Checkpoint
RP48: 17/03/2011 20:26:12 - System Checkpoint
RP49: 18/03/2011 07:59:21 - Software Distribution Service 3.0
RP50: 19/03/2011 09:21:03 - System Checkpoint
RP51: 20/03/2011 12:00:43 - System Checkpoint
RP52: 20/03/2011 20:33:14 - Installed QuickTime
RP53: 20/03/2011 20:47:43 - Installed QuickTime
RP54: 20/03/2011 21:09:48 - Removed QuickTime
RP55: 20/03/2011 21:15:53 - Installed QuickTime
RP56: 22/03/2011 19:37:27 - System Checkpoint
RP57: 23/03/2011 20:37:06 - System Checkpoint
RP58: 25/03/2011 08:19:42 - System Checkpoint
RP59: 26/03/2011 08:21:03 - System Checkpoint
RP60: 27/03/2011 10:33:34 - System Checkpoint
RP61: 28/03/2011 07:36:00 - Installed Java(TM) 6 Update 24
RP62: 29/03/2011 08:34:44 - System Checkpoint
RP63: 30/03/2011 19:05:58 - Removed AVG 2011
RP64: 31/03/2011 13:29:03 - Removed AVG 2011
.
==== Installed Programs ======================
.
Adobe Flash Player 10 Plugin
Adobe Shockwave Player 11.5
Apple Application Support
Apple Software Update
Audacity 1.2.6
AVG 2011
C-Media WDM Audio Driver
CCleaner
EPSON Scan
EPSON SX110 Series Printer Uninstall
Google Chrome
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB976002-v5)
Hotfix for Windows XP (KB981793)
Java Auto Updater
Java(TM) 6 Update 24
Malwarebytes' Anti-Malware
Microsoft Data Access Components KB870669
Microsoft Office Professional Edition 2003
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Mozilla Firefox (3.6.15)
QuickTime
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player (KB979402)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB944338-v2)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB981350)
Security Update for Windows XP (KB982381)
Spybot - Search & Destroy
Update for Windows XP (KB898461)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer 3.1 (KB893803)
Windows XP Service Pack 2
.
==== Event Viewer Messages From Past Week ========
.
31/03/2011 22:00:49, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system. .
31/03/2011 22:00:49, error: SideBySide [59] - Generate Activation Context failed for C:\DOCUME~1\Gill\LOCALS~1\Temp\RarSFX0\MFC80U.DLL. Reference error message: The operation completed successfully. .
31/03/2011 22:00:49, error: SideBySide [32] - Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system.
31/03/2011 20:30:46, error: Dhcp [1002] - The IP address lease 192.168.1.102 for the Network Card with network address 000B6ADE559C has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================

RussJK

andyrules wrote: »

Spybot found adviva, doubleclick, mediaplex, don't think they are bad?

Will go and do the DDS now

Everything looks clear. Shame DDS didn't do this part for some reason
" .
=============== Created Last 30 ================
."

as it should show what files have been made recently, so you know what has installed itself.

Could you try HijackHunter (http://www.novirusthanks.org/product/hijack-hunter/), and only post the section pertaining recently created files?

In regards to running as admin in XP, there is a MS guide to enable that (http://support.microsoft.com/kb/294676).

Make sure you run the immunisations in Spybot, just for the passive protections it brings against these kinds of problems.

Lastly, you might choose to leave it scanning with the Microsoft Windows Malicious Software Removal Tool 32-bit (no install needed)
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

It'll take awhile so I wouldn't wait for it. Anyway, I'm off to bed so I'll check in the morning - good luck.

debitcardmayhem

Looks like Russ thinks its fairly good to go, so don't forget to update XP to SP3 , use Internet Explorer and visit Windows update site.... laters, and GL

macman

You are running only XP2 and IE6, you shoud update to SP3 and IE8-both both way out of date and leaving potential security holes.

RussJK

If you want to remove AVG, then use this tool (http://www.avg.com/us-en/download-tools), and follow up with Appremover to make sure that it went.

I've used free Avira for over a decade as it is one of the top antivirus scanners, but switched to Avast free for the extra web guards (although Avira is the superior antivirus). If I ever actually bought an antivirus, it would probably be Avira. If you like using trials, then give any of the top rated antivirus programs listed at http://www.av-comparatives.org/ a try. Currently f-secure is considered top dog.

andyrules

Right, I've run the Microsoft Windows Malicious Software Removal Tool, nothing found and the Hijack Hunter - hope this is the bit you meant -

Files created/modified 15 days ago

C:\WINDOWS\system32\drivers\mbam.sys (20952 bytes) (Malwarebytes Corporation) (31/03/2011 22:55:07) (--A-) (836e0e09ca9869be7eb39ef2cf3602c7) (Created)
C:\WINDOWS\system32\drivers\mbamswissarmy.sys (38224 bytes) (Malwarebytes Corporation) (31/03/2011 22:55:13) (--A-) (d68e165c3123aba3b1282eddb4213bd8) (Created)
C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (6c859c6fce6d694eafd7ea3ae66d54db) (Created)
C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (8e324717edbf12f7e005d26df26a0f96) (Created)
C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (ed5d191844d295959f82eb8c27546ac8) (Created)
C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (6c79088343e7d1a6e9239cdd21a94eea) (Created)
C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (e2b1caee5dda3a60db4212bb12afe1e3) (Created)
C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (8b5ebba931903b6200752cf8202a664b) (Created)
C:\Program Files\Internet Explorer\PLUGINS\npqtplugin7.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (e909ec5349996fc33eb68f3a677bc722) (Created)
C:\Program Files\Java\jre6\bin\awt.dll (1208320 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:11) (--A-) (212c148c76782bc473d6101fd51a4e4a) (Created)
C:\Program Files\Java\jre6\bin\axbridge.dll (118784 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (81315e12f48b8fe63a04e25c2cc8608a) (Created)
C:\Program Files\Java\jre6\bin\cmm.dll (192512 bytes) (Eastman Kodak Company) (28/03/2011 07:36:12) (--A-) (7f45dd08a3e00dc0d79ffcef42b44c1b) (Created)
C:\Program Files\Java\jre6\bin\dcpr.dll (143360 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (4cbfde6abbbf24a6d0d189a21823950c) (Created)
C:\Program Files\Java\jre6\bin\deploy.dll (77824 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (ca571f57633e79feddade78ff881a485) (Created)
C:\Program Files\Java\jre6\bin\deployJava1.dll (472808 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (f87ba06fe22c81cde563761ddfbab267) (Created)
C:\Program Files\Java\jre6\bin\dt_shmem.dll (16896 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (666b6270810048b31c73030b4a2badc0) (Created)
C:\Program Files\Java\jre6\bin\dt_socket.dll (13312 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (268013ed6aa3419733e1201c0870d835) (Created)
C:\Program Files\Java\jre6\bin\fontmanager.dll (323584 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (4f7e879c844611883748534cce70990c) (Created)
C:\Program Files\Java\jre6\bin\hpi.dll (15872 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (d9960580d80026e2204bb5a894fe032b) (Created)
C:\Program Files\Java\jre6\bin\hprof.dll (139264 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (57f06ad6289ed2df3a47219566dfd996) (Created)
C:\Program Files\Java\jre6\bin\instrument.dll (98304 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (9f77eebfd794abe34333c92bdb194e08) (Created)
C:\Program Files\Java\jre6\bin\ioser12.dll (12800 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (435d7923af6bd41ac9f74dda0ef9f491) (Created)
C:\Program Files\Java\jre6\bin\j2pcsc.dll (7680 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (fdc801add2b30b7a58171af8f3dc2858) (Created)
C:\Program Files\Java\jre6\bin\j2pkcs11.dll (41984 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (b71d953fcd246dfc087c0ed8ed52b605) (Created)
C:\Program Files\Java\jre6\bin\jaas_nt.dll (10240 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (92d592bbd460b455c4f5002dd8201d45) (Created)
C:\Program Files\Java\jre6\bin\java-rmi.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (d21641e49d94e2d1f14b0b0893e5b75f) (Created)
C:\Program Files\Java\jre6\bin\java.dll (126976 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (8d62d13d2f1fbaeb3eafee4ca8fde383) (Created)
C:\Program Files\Java\jre6\bin\java.exe (145184 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (68288da42bc798992a42cd59061b199d) (Created)
C:\Program Files\Java\jre6\bin\javacpl.cpl (73728 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (3fd411df4a9999ea848615def336e905) (Created)
C:\Program Files\Java\jre6\bin\javacpl.exe (59168 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (94309ff8d9da12ffa59994b219d8b993) (Created)
C:\Program Files\Java\jre6\bin\javaw.exe (145184 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (5bf8ba1b854d7dfce1f47e58852b3d8f) (Created)
C:\Program Files\Java\jre6\bin\javaws.exe (157472 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (58dc5cbdc930af070b177843810f2c85) (Created)
C:\Program Files\Java\jre6\bin\java_crw_demo.dll (14336 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (347650be43f6ee168f4c8e1accf101ef) (Created)
C:\Program Files\Java\jre6\bin\jawt.dll (5120 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (bbe50402e85eeb85d565cf857f41e7a9) (Created)
C:\Program Files\Java\jre6\bin\jbroker.exe (79648 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (ec6c4592b3c24ccdfe88a164fa2a77da) (Created)
C:\Program Files\Java\jre6\bin\JdbcOdbc.dll (36352 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (23b926f1225f875f7aec266c022f1f4e) (Created)
C:\Program Files\Java\jre6\bin\jdwp.dll (167936 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (18b9795d3e2cb4274c6b22f49095cef2) (Created)
C:\Program Files\Java\jre6\bin\jkernel.dll (217088 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (cd537b0dea933d74b82b2207125eccdb) (Created)
C:\Program Files\Java\jre6\bin\jli.dll (77824 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (652fff44b60c5632b9bcdcbfe22f3a1e) (Created)
C:\Program Files\Java\jre6\bin\jp2iexp.dll (112416 bytes) (Unknown) (28/03/2011 07:36:12) (--A-) (8e66e95fcd0218767cc5953f7ba64d19) (Created)
C:\Program Files\Java\jre6\bin\jp2launcher.exe (23328 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (49e3d4f43fbe89eaf5be581a831562f3) (Created)
C:\Program Files\Java\jre6\bin\jp2native.dll (8192 bytes) (Unknown) (28/03/2011 07:36:12) (--A-) (5fb067c58377a36203a6cb90f2ae3504) (Created)
C:\Program Files\Java\jre6\bin\jp2ssv.dll (41760 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (88e49c2b7e75b1d9695d6a063f28a8bb) (Created)
C:\Program Files\Java\jre6\bin\jpeg.dll (151552 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (5b979219c8f8e5d9bf26f9eb488e2548) (Created)
C:\Program Files\Java\jre6\bin\jpicom.dll (98304 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (f4c7a940d3502702ff57b298ae90428c) (Created)
C:\Program Files\Java\jre6\bin\jpiexp.dll (114688 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (973b12cf464a49de0e18ef2f3e659097) (Created)
C:\Program Files\Java\jre6\bin\jpinscp.dll (98304 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (61509e9399c40da24ff2c4950191c1ab) (Created)
C:\Program Files\Java\jre6\bin\jpioji.dll (65536 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (4f6bb0fcda18086d95d93313d783ebe0) (Created)
C:\Program Files\Java\jre6\bin\jpishare.dll (126976 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (2ed33ba1d790e7b77facf4162b5952ce) (Created)
C:\Program Files\Java\jre6\bin\jqs.exe (153376 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (5e06a9d23727daf96faa796f1135fdcd) (Created)
C:\Program Files\Java\jre6\bin\jqsnotify.exe (55072 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (87e5d2163d9bfb32e4216c7024272fe1) (Created)
C:\Program Files\Java\jre6\bin\jsound.dll (147456 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (d1ea63077b7962478e4dc8743be84ebd) (Created)
C:\Program Files\Java\jre6\bin\jsoundds.dll (18432 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (fee2eb30ac11ae7e9600ec5abef64c51) (Created)
C:\Program Files\Java\jre6\bin\keytool.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (2625c023ec56b7851acd2f55c859a792) (Created)
C:\Program Files\Java\jre6\bin\kinit.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (9ae06e5d92c3969bff38d55e54fa06f1) (Created)
C:\Program Files\Java\jre6\bin\klist.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (cb12e2bc0a509ede62c1f606524bba61) (Created)
C:\Program Files\Java\jre6\bin\ktab.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (161f9c88c72e4c969569f9ab1b70efd5) (Created)
C:\Program Files\Java\jre6\bin\management.dll (18432 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (7d88c4b85d6b49a6a31f823f60adeb05) (Created)
C:\Program Files\Java\jre6\bin\mlib_image.dll (602112 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (31182b1f02941816aa565d311f1dc2be) (Created)
C:\Program Files\Java\jre6\bin\msvcr71.dll (348160 bytes) (Microsoft Corporation) (28/03/2011 07:36:13) (--A-) (86f1895ae8c5e8b17d99ece768a70732) (Created)
C:\Program Files\Java\jre6\bin\msvcrt.dll (266293 bytes) (Microsoft Corporation) (28/03/2011 07:36:13) (--A-) (63da4613383ec70e047b4cd5c48f0b05) (Created)
C:\Program Files\Java\jre6\bin\net.dll (77824 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (943789e953c9710ee22c7512e15d1e4f) (Created)
C:\Program Files\Java\jre6\bin\nio.dll (20480 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (f5afcc4f34530dcfaf69eab3578f3fed) (Created)
C:\Program Files\Java\jre6\bin\npdeployJava1.dll (472808 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (9d35e12b661581b83dd74eb910ea9e6d) (Created)
C:\Program Files\Java\jre6\bin\npjpi160_24.dll (141088 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (1da2629eee65a34d54bb9741ce30de3d) (Created)
C:\Program Files\Java\jre6\bin\npoji610.dll (131072 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (079d3dc44a2bf2d79f8c021122e10f59) (Created)
C:\Program Files\Java\jre6\bin\npt.dll (8192 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (73e384cafc617c0498adabd6eb19788c) (Created)
C:\Program Files\Java\jre6\bin\orbd.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (82333e402c7cf956b0a7e202a486df36) (Created)
C:\Program Files\Java\jre6\bin\pack200.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (9164cb8864a363d5039a42ae58906a0e) (Created)
C:\Program Files\Java\jre6\bin\policytool.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (7edf602556687a62acdab380b31b6c99) (Created)
C:\Program Files\Java\jre6\bin\rmi.dll (5120 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (b30d5c93022ea20b5d3ad713c08fe03d) (Created)
C:\Program Files\Java\jre6\bin\rmid.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (76122678e5a8b2de18746690eb54af9d) (Created)
C:\Program Files\Java\jre6\bin\rmiregistry.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (4836d35cb1f00a785cebe2bb71b98ac4) (Created)
C:\Program Files\Java\jre6\bin\servertool.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (14db3bfea087032ea6744dfd58c8f760) (Created)
C:\Program Files\Java\jre6\bin\splashscreen.dll (131072 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (7fc8f5f554dc665e0e720c8adc9451f3) (Created)
C:\Program Files\Java\jre6\bin\ssv.dll (325408 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (71652cb75c2c833a5681f48f3495b3ae) (Created)
C:\Program Files\Java\jre6\bin\ssvagent.exe (30496 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (99f5095b7ad070ebec04aae89b7de3ac) (Created)
C:\Program Files\Java\jre6\bin\sunmscapi.dll (16384 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (0c8df68954fed5fecf6feb7445ff5e88) (Created)
C:\Program Files\Java\jre6\bin\tnameserv.exe (33568 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (690b2e74778bd2b920d864c8c927d4d9) (Created)
C:\Program Files\Java\jre6\bin\unicows.dll (245400 bytes) (Microsoft Corporation) (28/03/2011 07:36:13) (--A-) (2d2f84761a9fde81898ed505b227e7e3) (Created)
C:\Program Files\Java\jre6\bin\unpack.dll (61440 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (16ddbff7e65b651707e6dd6afc5c11d3) (Created)
C:\Program Files\Java\jre6\bin\unpack200.exe (132896 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (0bcafd748b3335aaf24c53f61eb47c83) (Created)
C:\Program Files\Java\jre6\bin\verify.dll (31744 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (613195af25136c645dd0139cbc03b22c) (Created)
C:\Program Files\Java\jre6\bin\w2k_lsa_auth.dll (10240 bytes) (Oracle) (28/03/2011 07:36:13) (--A-) (af14a961cc0beaf6db1c72124ac8586e) (Created)
C:\Program Files\Java\jre6\bin\wsdetect.dll (108320 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (99d93af7bd148319d23d6075aec01113) (Created)
C:\Program Files\Java\jre6\bin\zip.dll (46592 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (e295d3249d42a0c7eaef15a8e614bdc3) (Created)
C:\Program Files\Java\jre6\bin\client\jvm.dll (2695168 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:12) (--A-) (9567e1e9a68672811127e183f383cfec) (Created)
C:\Program Files\Java\jre6\bin\new_plugin\msvcr71.dll (348160 bytes) (Microsoft Corporation) (28/03/2011 07:36:15) (--A-) (86f1895ae8c5e8b17d99ece768a70732) (Created)
C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (472808 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:23) (--A-) (9d35e12b661581b83dd74eb910ea9e6d) (Created)
C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (69632 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (4ebb5b4dcabec18b29d01f9f607b0114) (Created)
C:\Program Files\Java\jre6\lib\deploy\lzma.dll (152576 bytes) (Unknown) (28/03/2011 07:36:13) (--A-) (9157ac8060f121120d86ece12e97c394) (Created)
C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (79648 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:13) (--A-) (a36f13f0a039de74e07d7b2fbcaf8bb7) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll (202576 bytes) (Malwarebytes Corporation) (31/03/2011 22:55:12) (--A-) (874438150b2c653840aa809377a8dd53) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (963976 bytes) (Malwarebytes Corporation) (31/03/2011 22:55:08) (--A-) (4cec4b72c5b255ec2f7c54cd03554540) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\mbamcore.dll (518480 bytes) (Malwarebytes Corporation) (31/03/2011 22:55:12) (--A-) (706c2e80cfcb37deeb0b1d01f8067843) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll (77648 bytes) (Malwarebytes Corporation) (31/03/2011 22:55:07) (--A-) (1365bb2a78db638870337422b54ddbac) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (443728 bytes) (Malwarebytes Corporation) (31/03/2011 22:55:10) (--A-) (87ffc1ff3b269fd8e0bb010294b697f6) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\mbamnet.dll (331088 bytes) (Malwarebytes Corporation) (31/03/2011 22:55:12) (--A-) (16a765146d8e38a8acae8dd7c5acfdba) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (363344 bytes) (Malwarebytes Corporation) (31/03/2011 22:55:13) (--A-) (246af5a08b0339231bdd7437ab6ff6b8) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\ssubtmr6.dll (46416 bytes) (vbAccelerator) (31/03/2011 22:55:13) (--A-) (66f6ccbeec3ba2781ec14e2a2b5960d8) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe (709456 bytes) (Unknown) (31/03/2011 22:55:07) (--A-) (c88c64609de58fa3d8637c4866c7c6bb) (Created)
C:\Program Files\Malwarebytes' Anti-Malware\vbalsgrid6.ocx (496976 bytes) (vbAccelerator) (31/03/2011 22:55:13) (--A-) (5adb7c7788a7113fe9b3180b7771d128) (Created)
C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll (472808 bytes) (Sun Microsystems, Inc.) (28/03/2011 07:36:23) (--A-) (9d35e12b661581b83dd74eb910ea9e6d) (Created)
C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:59) (--A-) (6c859c6fce6d694eafd7ea3ae66d54db) (Created)
C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:59) (--A-) (8e324717edbf12f7e005d26df26a0f96) (Created)
C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:59) (--A-) (ed5d191844d295959f82eb8c27546ac8) (Created)
C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (6c79088343e7d1a6e9239cdd21a94eea) (Created)
C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (e2b1caee5dda3a60db4212bb12afe1e3) (Created)
C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (8b5ebba931903b6200752cf8202a664b) (Created)
C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:18:00) (--A-) (e909ec5349996fc33eb68f3a677bc722) (Created)
C:\Program Files\NoVirusThanks\Hijack Hunter\HijackHunter.exe (628736 bytes) (NoVirusThanks Company Srl) (02/04/2011 01:01:03) (--A-) (b6ffa83b91d78a0369fe0e15e4dba69c) (Created)
C:\Program Files\NoVirusThanks\Hijack Hunter\nhdrv.sys (4608 bytes) (NoVirusThanks Company Srl) (02/04/2011 01:01:06) (--A-) (8f40312ac7b0f3d0246fe52105e4f1d7) (Created)
C:\Program Files\NoVirusThanks\Hijack Hunter\unins000.exe (707354 bytes) (Unknown) (02/04/2011 01:01:03) (--A-) (eecf7fe501b410aa3733bb0b23ab678a) (Created)
C:\Program Files\QuickTime\Plugins\npqtplugin.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:57) (--A-) (6c859c6fce6d694eafd7ea3ae66d54db) (Created)
C:\Program Files\QuickTime\Plugins\npqtplugin2.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:58) (--A-) (8e324717edbf12f7e005d26df26a0f96) (Created)
C:\Program Files\QuickTime\Plugins\npqtplugin3.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:58) (--A-) (ed5d191844d295959f82eb8c27546ac8) (Created)
C:\Program Files\QuickTime\Plugins\npqtplugin4.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:58) (--A-) (6c79088343e7d1a6e9239cdd21a94eea) (Created)
C:\Program Files\QuickTime\Plugins\npqtplugin5.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:58) (--A-) (e2b1caee5dda3a60db4212bb12afe1e3) (Created)
C:\Program Files\QuickTime\Plugins\npqtplugin6.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:59) (--A-) (8b5ebba931903b6200752cf8202a664b) (Created)
C:\Program Files\QuickTime\Plugins\npqtplugin7.dll (159744 bytes) (Apple Inc.) (20/03/2011 22:17:59) (--A-) (e909ec5349996fc33eb68f3a677bc722) (Created)
C:\Program Files\Spybot - Search & Destroy\advcheck.dll (1287000 bytes) (Safer Networking Limited) (01/04/2011 23:20:37) (--A-) (820ab10bb0186a7845a1b6460e50088b) (Created)
C:\Program Files\Spybot - Search & Destroy\aports.dll (34472 bytes) (SmartLine Inc.) (01/04/2011 23:20:38) (--A-) (279a23f355d2473022f8117272f5e73e) (Created)
C:\Program Files\Spybot - Search & Destroy\blindman.exe (428888 bytes) (Safer Networking Limited) (01/04/2011 23:20:37) (--A-) (8c9740a3b7603b0a746213dae8c89526) (Created)
C:\Program Files\Spybot - Search & Destroy\DelZip179.dll (255392 bytes) (DelphiZip) (01/04/2011 23:20:38) (--A-) (5a0f27a0f68eb7ace2f2c54b76603dd4) (Created)
C:\Program Files\Spybot - Search & Destroy\ROQTOACBNOENVNPZA.scr (2144088 bytes) (Safer Networking Limited) (01/04/2011 23:20:45) (HSAR) (896a1db9a972ad2339c2e8569ec926d1) (Created)
C:\Program Files\Spybot - Search & Destroy\SDFiles.exe (1757696 bytes) (Safer Networking Limited) (01/04/2011 23:20:37) (--A-) (8f70f2cce1def20016b53a8d217fa3b5) (Created)
C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (1879896 bytes) (Safer Networking Limited) (01/04/2011 23:20:37) (--A-) (022c2f6dccdfa0ad73024d254e62afac) (Created)
C:\Program Files\Spybot - Search & Destroy\SDMain.exe (414552 bytes) (Safer Networking Ltd.) (01/04/2011 23:20:37) (--A-) (6b44700917f45b19b96b46b345b6f0e7) (Created)
C:\Program Files\Spybot - Search & Destroy\SDShred.exe (2005504 bytes) (Safer Networking Limited) (01/04/2011 23:20:45) (--A-) (4cd08eeac08ba53a38e48af4813e1968) (Created)
C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe (1740632 bytes) (Safer Networking Limited) (01/04/2011 23:20:38) (HSAR) (7c616ad7ae8f75278a069641ecfcdc06) (Created)
C:\Program Files\Spybot - Search & Destroy\sqlite3.dll (333288 bytes) (Unknown) (01/04/2011 23:20:38) (--A-) (f9f07b9e08f555d3a54f7ed78f1726a6) (Created)
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (2144088 bytes) (Safer Networking Limited) (01/04/2011 23:20:43) (HSAR) (896a1db9a972ad2339c2e8569ec926d1) (Created)
C:\Program Files\Spybot - Search & Destroy\Tools.dll (1303896 bytes) (Safer Networking Limited) (01/04/2011 23:20:37) (--A-) (544b7fe37cb975f8cc97256704fe53bb) (Created)
C:\Program Files\Spybot - Search & Destroy\unins000.exe (696200 bytes) (Unknown) (01/04/2011 23:20:37) (--A-) (0ba1acfee0532249412f53ee6374ee93) (Created)
C:\Program Files\Spybot - Search & Destroy\UninsSrv.dll (204160 bytes) (Safer-Networking Ltd.) (01/04/2011 23:20:37) (--A-) (20807a8c7e22ef615dc2e9b8a27ed479) (Created)
C:\Program Files\Spybot - Search & Destroy\Update.exe (464728 bytes) (Safer Networking Limited) (01/04/2011 23:20:37) (--A-) (00071af6d95c1002e5f9b63ea00a37a3) (Created)
C:\Program Files\Spybot - Search & Destroy\ZAVPYB.scr (1740632 bytes) (Safer Networking Limited) (01/04/2011 23:20:40) (HSAR) (7c616ad7ae8f75278a069641ecfcdc06) (Created)
C:\Program Files\Spybot - Search & Destroy\Dummies\dummy.cd_clint.dll (54440 bytes) (CEXX Labs - https://www.cexx.org) (01/04/2011 23:20:46) (--A-) (e6ca375504ca89b91062e639e318bd47) (Created)
C:\Program Files\Spybot - Search & Destroy\Plugins\Chai.dll (790392 bytes) (Unknown) (01/04/2011 23:20:45) (--A-) (ddd2bff569e29e44daba708b72203a15) (Created)
C:\Program Files\Spybot - Search & Destroy\Plugins\Fennel.dll (795520 bytes) (Unknown) (01/04/2011 23:20:46) (--A-) (4ebd1ec62ac4cf53db91bdd25acfda51) (Created)
C:\Program Files\Spybot - Search & Destroy\Plugins\Mate.dll (717176 bytes) (Unknown) (01/04/2011 23:20:46) (--A-) (578f846d048d278230222964294cc282) (Created)
C:\Program Files\Spybot - Search & Destroy\Plugins\TCPIPAddress.dll (121344 bytes) (Unknown) (01/04/2011 23:20:45) (--A-) (e5e95edc3546821ae025d4a4726986c0) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\FP_PL_PFS_INSTALLER.exe (2832544 bytes) (Adobe Systems, Inc.) (21/03/2011 00:12:25) (--A-) (c655484b0ac91004a5b0eddab5577dec) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\80.tmp\MBR.DAT (89088 bytes) (Unknown) (02/04/2011 00:17:23) (--A-) (9daa7218961710008d7385b01bd3f386) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\80.tmp\PEV.DAT (256512 bytes) (Unknown) (02/04/2011 00:17:23) (--A-) (f1fba6185a6a2bc6456970914875078e) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\80.tmp\SED.DAT (98816 bytes) (Unknown) (02/04/2011 00:17:23) (--A-) (2b657a67aebb84aea5632c53e61e23bf) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\80.tmp\SWREG.DAT (518144 bytes) (SteelWerX) (02/04/2011 00:17:23) (--A-) (a46842c9b0c567a5a9584e83a163560c) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\81.tmp\MBR.DAT (89088 bytes) (Unknown) (02/04/2011 00:18:01) (--A-) (9daa7218961710008d7385b01bd3f386) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\81.tmp\PEV.DAT (256512 bytes) (Unknown) (02/04/2011 00:18:01) (--A-) (f1fba6185a6a2bc6456970914875078e) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\81.tmp\SED.DAT (98816 bytes) (Unknown) (02/04/2011 00:18:02) (--A-) (2b657a67aebb84aea5632c53e61e23bf) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\81.tmp\SWREG.DAT (518144 bytes) (SteelWerX) (02/04/2011 00:18:02) (--A-) (a46842c9b0c567a5a9584e83a163560c) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\8A.tmp\MBR.DAT (89088 bytes) (Unknown) (02/04/2011 00:20:26) (--A-) (9daa7218961710008d7385b01bd3f386) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\8A.tmp\PEV.DAT (256512 bytes) (Unknown) (02/04/2011 00:20:26) (--A-) (f1fba6185a6a2bc6456970914875078e) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\8A.tmp\SED.DAT (98816 bytes) (Unknown) (02/04/2011 00:20:26) (--A-) (2b657a67aebb84aea5632c53e61e23bf) (Created)
C:\DOCUME~1\Gill\LOCALS~1\Temp\8A.tmp\SWREG.DAT (518144 bytes) (SteelWerX) (02/04/2011 00:20:27) (--A-) (a46842c9b0c567a5a9584e83a163560c) (Created)

[+] Hidden files in suspicious folders

andyrules

Sorry, that seems very long!

Next job is to follow macman's advice and update. I'm a bit puzzled though, 2 weeks ago I paid someone a fair bit to do a reinstall and he could have done that for me surely?

Also, AVG has a day left, I will install Avast now. Do I uninstall AVG first or after the Avast is on? And does anyone have a safe link for it please?

Finally - a huge thank you to everyone who has helped me - especially Russ.

RussJK

andyrules wrote: »

Sorry, that seems very long!

Next job is to follow macman's advice and update. I'm a bit puzzled though, 2 weeks ago I paid someone a fair bit to do a reinstall and he could have done that for me surely?

Also, AVG has a day left, I will install Avast now. Do I uninstall AVG first or after the Avast is on? And does anyone have a safe link for it please?

Finally - a huge thank you to everyone who has helped me - especially Russ.

Yep that was the right part of the log to post, looks fine! No worries for the help.

Uninstall AVG first, but have Avast ready to go.
http://www.avast.com/en-gb/index
http://download.cnet.com/Avast-Free-Antivirus/3000-2239_4-10019223.html?part=dl-85737&subj=dl&!!!!!button

Yes, whoever you paid to reinstall it should have put SP3 on by default.

While you're at it you may as well check that you have DCOM disabled with this test:
http://www.grc.com/freeware/dcom.htm
As well as pass the ShieldsUp! 'all services test'.

andyrules

OK, am testing the DCOM, port 135 and it seems to be taking a while, is this normal?