Ok,
Not sure if you require specs, but a few main ones are;
Dell XPS M1530
Windows Vista 32-bit
This problem started a few days ago, i can honestly say i don't have a clue how it started. I lent my laptop too my brother one day... day later suddenly BOOM, 100 problems launched in my face.
The problem i'm having is that when ever i open up the Internet i get 2 pop ups that pop up twice (opening 2 seperate internet windows) See attachments.
The problem has now gotten far worse which i think is because of this. My laptop now takes about 10 minutes too fully boot up (from about 2minutes). Everything in general on the laptop is slow, opening applications is hard, sometimes causing the laptop too now go to the Blue Screen of Death.
The laptop itself used too run as smooth as ever, internet / applications / games, you name it.
In following the things i should do before posting i had a problem getting the first .txt from the GMER Rootkit scanner. Everytime i opened it, it would either run then crash or it would open then go to Blue screen of death, sorry i couldn't get it.
I was able to get the 2nd .txt for GMER Rootkit by running in safe mode.
Everything else i was successfull in completing.
The MBAM Log was ran in safemode, finding nothing, not sure if i should try running this again normally booting up?) It's just extremely hard with how bad the computer runs now, most times it will just BSOD on me.
Not much more i can say, i was going too Restore, but 1. i don't make restore points, and 2. i don't think it would get rid of any virus's or that anyway.
GMER LOG 2 (with - Sections, IAT/EAT unticked)
GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-06-22 18:04:03
Windows 6.0.6001 Service Pack 1
Running: 3d34jwcw.exe; Driver: C:\Users\Me\AppData\Local\Temp\pxldypoc.sys
---- System - GMER 1.0.15 ----
SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcess [0x87D0CCDC]
SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcessEx [0x87D0CECE]
SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwTerminateProcess [0x87D0C982]
SSDT \SystemRoot\system32\drivers\PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateUserProcess [0x87D0D0D6]
---- Devices - GMER 1.0.15 ----
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001e4cdd9a64
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xEE 0x29 0xCC 0xA5 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x4E 0xA6 0x43 0x1D ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x51 0x67 0x4E 0x7C ...
Reg HKLM\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\001e4cdd9a64 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xEE 0x29 0xCC 0xA5 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x4E 0xA6 0x43 0x1D ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x51 0x67 0x4E 0x7C ...
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib@Last Counter 8664
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib@Last Help 8665
---- EOF - GMER 1.0.15 ----
MBAM LOG - 2010-06-22
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4052
Windows 6.0.6001 Service Pack 1 (Safe Mode)
Internet Explorer 7.0.6001.18000
22/06/2010 19:13:38
mbam-log-2010-06-22 (19-13-38).txt
Scan type: Full scan (C:\|)
Objects scanned: 258619
Time elapsed: 57 minute(s), 27 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
DDS;
DDS (Ver_10-03-17.01) - NTFSx86
Run by Me at 20:01:45.24 on 22/06/2010
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_20
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.44.1033.18.2045.1158 [GMT 1:00]
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\aestsrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\STacSV.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Windows\OEM02Mon.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Windows\system32\conime.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Users\Me\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.co.uk/
uWindow Title = N1ghtHawk
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: PC Tools Browser Guard BHO: {2a0f3d1b-0909-4ff4-b272-609cce6054e7} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: PC Tools Browser Guard: {472734ea-242a-422b-adf8-83d1e48cc825} - c:\program files\spyware doctor\bdt\PCTBrowserDefender.dll
uRun: [Steam] "c:\program files\steam\Steam.exe" -silent
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [WebcamMaxAutoRun] "c:\program files\webcammax\WebcamMax.exe" -a
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [NVHotkey] rundll32.exe c:\windows\system32\nvHotkey.dll,Start
mRun: [OEM02Mon.exe] c:\windows\OEM02Mon.exe
mRun: [Apoint] c:\program files\delltpad\Apoint.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Korean IME Migration] c:\progra~1\common~1\micros~1\ime12\imekr\IMKRMIG.EXE /UNINSTALL
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
mRun: [MSSE] "c:\program files\microsoft security essentials\msseces.exe" -hide -runkey
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Microsoft Excel? ????(&X) - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
================= FIREFOX ===================
FF - ProfilePath - c:\users\me\appdata\roaming\mozilla\firefox\profiles\5b18j25d.default\
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
============= SERVICES / DRIVERS ===============
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2010-6-22 207280]
R1 1UnHooker;1UnHooker;c:\windows\system32\drivers\1UnHooker.sys [2010-3-2 22016]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009-9-11 108792]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2009-12-2 149040]
R1 MpKsl4e74fca8;MpKsl4e74fca8;c:\programdata\microsoft\microsoft antimalware\definition updates\{dd8ee29c-be1c-4669-9b53-321ff1d08324}\MpKsl4e74fca8.sys [2010-6-22 28752]
R2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\driverstore\filerepository\stwrt.inf_c09c50a2\AEstSrv.exe [2009-7-16 73728]
R2 Browser Defender Update Service;Browser Defender Update Service;c:\program files\spyware doctor\bdt\BDTUpdateService.exe [2010-6-22 112592]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2009-9-11 735960]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2009-9-11 95896]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2010-6-22 358600]
R2 sdCoreService;PC Tools Security Service;c:\program files\spyware doctor\pctsSvc.exe [2010-6-22 1141200]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2009-12-2 42368]
=============== Created Last 30 ================
2010-06-22 17:10:38 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-22 17:10:37 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-06-22 17:10:37 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-22 15:06:54 0 d-----w- c:\program files\Microsoft Security Essentials
2010-06-22 00:52:11 767952 ----a-w- c:\windows\BDTSupport.dll
2010-06-22 00:52:09 882 ----a-w- c:\windows\RegSDImport.xml
2010-06-22 00:52:09 880 ----a-w- c:\windows\RegISSImport.xml
2010-06-22 00:52:09 149456 ----a-w- c:\windows\SGDetectionTool.dll
2010-06-22 00:52:09 131 ----a-w- c:\windows\IDB.zip
2010-06-22 00:52:09 1152470 ----a-w- c:\windows\UDB.zip
2010-06-22 00:52:08 165840 ----a-w- c:\windows\PCTBDRes.dll
2010-06-22 00:52:08 1636304 ----a-w- c:\windows\PCTBDCore.dll
2010-06-22 00:49:20 97208 ----a-w- c:\windows\system32\drivers\pctwfpfilter.sys
2010-06-22 00:49:20 7387 ----a-w- c:\windows\system32\drivers\pctgntdi.cat
2010-06-22 00:49:20 229304 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2010-06-22 00:48:57 7383 ----a-w- c:\windows\system32\drivers\pctcore.cat
2010-06-22 00:48:56 87784 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2010-06-22 00:48:56 7412 ----a-w- c:\windows\system32\drivers\PCTAppEvent.cat
2010-06-22 00:48:56 207280 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2010-06-22 00:48:30 7383 ----a-w- c:\windows\system32\drivers\pctplsg.cat
2010-06-22 00:48:29 70408 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2010-06-22 00:47:33 0 d-----w- c:\program files\common files\PC Tools
2010-06-22 00:47:31 0 d-----w- c:\users\me\appdata\roaming\PC Tools
2010-06-22 00:47:31 0 d-----w- c:\programdata\PC Tools
2010-06-22 00:47:31 0 d-----w- c:\program files\Spyware Doctor
2010-06-22 00:46:36 0 d---a-w- c:\programdata\TEMP
2010-06-21 19:30:47 0 d-----w- c:\users\me\appdata\roaming\Malwarebytes
2010-06-21 19:30:27 0 d-----w- c:\programdata\Malwarebytes
2010-06-21 18:34:14 273235425 ----a-w- c:\windows\MEMORY.DMP
2010-06-21 09:26:46 0 d-----w- c:\program files\Tizer™ Rootkit Razor
2010-06-17 20:57:06 0 d-----w- c:\users\me\appdata\roaming\WebcamMax
2010-06-17 20:57:06 0 d-----w- c:\programdata\WebcamMax
2010-06-17 20:56:32 0 d-----w- c:\program files\WebcamMax
2010-06-16 20:41:52 0 d-----w- c:\program files\common files\DVDVideoSoft
2010-06-16 20:41:51 0 d-----w- c:\program files\DVDVideoSoft
2010-06-13 17:20:21 0 d-----w- c:\users\me\appdata\roaming\MessengerDiscovery 2
2010-06-13 17:16:00 0 d-----w- c:\programdata\MessengerDiscovery 2
2010-06-13 17:15:59 0 d-----w- c:\program files\MessengerDiscovery 2
2010-06-06 20:10:19 0 d-----w- c:\program files\common files\PX Storage Engine
2010-06-05 19:20:30 0 d-----w- c:\program files\Microsoft
2010-06-05 16:49:32 0 d-----w- c:\programdata\Messenger Plus!
2010-06-05 16:47:28 0 d-----w- c:\program files\Messenger Plus! Live
2010-05-31 09:02:28 0 d-----w- c:\program files\Frameworkx
2010-05-30 22:18:25 0 d-----w- c:\windows\pss
2010-05-30 21:05:22 0 d-----w- c:\program files\MTA San Andreas
2010-05-30 20:37:35 0 d-----w- c:\program files\Rockstar Games
2010-05-30 14:13:22 0 d--h--w- c:\windows\msdownld.tmp
2010-05-30 13:34:39 0 d-----w- c:\program files\League Of Legends
2010-05-30 13:31:10 0 d-----w- c:\programdata\PMB Files
2010-05-30 13:30:46 0 d-----w- c:\program files\Pando Networks
2010-05-30 13:19:38 0 d-----w- c:\users\me\appdata\roaming\LolClient
2010-05-30 09:02:28 68616 ----a-w- c:\windows\system32\XAPOFX1_1.dll
2010-05-30 09:02:28 509448 ----a-w- c:\windows\system32\XAudio2_2.dll
2010-05-30 09:02:26 467984 ----a-w- c:\windows\system32\d3dx10_39.dll
2010-05-30 09:02:26 1493528 ----a-w- c:\windows\system32\D3DCompiler_39.dll
2010-05-30 09:02:24 3851784 ----a-w- c:\windows\system32\D3DX9_39.dll
2010-05-28 21:07:22 0 d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2010-05-28 20:25:21 0 d-----w- c:\programdata\ESET
2010-05-28 20:25:21 0 d-----w- c:\program files\ESET
2010-05-27 15:44:04 32656 ----a-w- c:\windows\system32\msonpmon.dll
2010-05-27 15:32:30 0 d-----w- c:\program files\Microsoft Visual Studio 8
2010-05-27 10:12:14 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-05-27 10:11:02 0 d-----w- c:\program files\DAEMON Tools Lite
2010-05-27 10:10:11 0 d-----w- c:\users\me\appdata\roaming\DAEMON Tools Lite
2010-05-27 10:10:09 0 d-----w- c:\programdata\DAEMON Tools Lite
2010-05-26 15:21:23 0 d-----w- c:\programdata\Spybot - Search & Destroy
2010-05-26 15:21:23 0 d-----w- c:\program files\Spybot - Search & Destroy
2010-05-25 19:32:04 0 d-----w- c:\program files\common files\Steam
2010-05-25 19:31:50 0 d-----w- c:\program files\Steam
2010-05-25 18:33:01 2048 ----a-w- c:\windows\system32\tzres.dll
2010-05-25 12:25:39 0 d-----w- c:\program files\Counter-Strike 1.6
2010-05-24 01:04:03 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-05-23 23:33:14 0 d-----w- c:\programdata\Kaspersky Lab
2010-05-23 23:30:44 0 d-----w- c:\programdata\Kaspersky Lab Setup Files
2010-05-23 22:56:32 843776 ----a-w- c:\windows\MSNImport.exe
==================== Find3M ====================
2010-06-22 15:03:13 27554 ----a-w- c:\programdata\nvModes.dat
2010-05-25 15:26:54 86016 ----a-w- c:\windows\inf\infstor.dat
2010-05-25 15:26:54 51200 ----a-w- c:\windows\inf\infpub.dat
2010-05-25 15:26:54 143360 ----a-w- c:\windows\inf\infstrng.dat
2010-05-12 01:21:16 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-05-11 18:32:38 41872 ----a-w- c:\windows\system32\xfcodec.dll
2010-04-16 06:33:36 3003680 ----a-w- c:\windows\system32\usbaaplrc.dll
2010-04-12 15:29:19 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-04-08 11:20:02 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-04-08 11:20:02 107808 ----a-w- c:\windows\system32\dns-sd.exe
2009-11-01 17:33:00 174 --sha-w- c:\program files\desktop.ini
2009-11-01 17:24:01 665600 ----a-w- c:\windows\inf\drvindex.dat
2006-11-02 12:42:02 30674 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 12:42:02 30674 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 12:42:02 287440 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 12:42:02 287440 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2007-02-21 19:49:52 8192 --sha-w- c:\windows\users\default\NTUSER.DAT
============= FINISH: 20:07:05.12 ===============
ATTACH;
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-03-17.01)
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 16/07/2009 19:23:17
System Uptime: 22/06/2010 19:31:48 (1 hours ago)
Motherboard: Dell Inc. | | 0XR148
Processor: Intel(R) Core(TM)2 Duo CPU T7250 @ 2.00GHz | Microprocessor | 800/200mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 230 GiB total, 37.295 GiB free.
D: is CDROM ()
E: is CDROM ()
F: is Removable
==== Disabled Device Manager Items =============
==== System Restore Points ===================
No restore point in system.
==== Installed Programs ======================
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 8.1.3
Adobe Shockwave Player 11.5
Apple Application Support
Apple Mobile Device Support
Apple Software Update
µTorrent
Bonjour
Browser Defender 2.0.6.10
Counter-Strike
Counter-Strike: Source
Dell Touchpad
ESET NOD32 Antivirus
Free 3GP Video Converter version 3.5
GTA San Andreas
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Intel(R) PROSet/Wireless Software
iTunes
Java Auto Updater
Java(TM) 6 Update 20
Laptop Integrated Webcam Driver (1.04.01.1011)
League of Legends
LimeWire 5.2.13
Malwarebytes' Anti-Malware
Marvell Miniport Driver
mCore
mDriver
Messenger Plus! Live
MessengerDiscovery 2.5.95
mHelp
Microsoft .NET Framework 3.5 SP1
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Security Essentials
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
mMHouse
Mozilla Firefox (3.5.9)
mPfMgr
MSVCRT
MTA:SA v1.0.3
mWMI
Nero 6 Demo
NVIDIA Drivers
OGA Notifier 2.0.0048.0
OpenAL
Pando Media Booster
Project64 1.6
QuickTime
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.54.06
Security Update for CAPICOM (KB931906)
SigmaTel Audio
Spotify
Spyware Doctor 7.0
Steam
Tizer™ Rootkit Razor
TouchChip USB Driver 2.6
Uninstall 1.0.0.1
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Outlook 2007 Junk Email Filter (kb981726)
Vista Shortcut Manager
VLC media player 1.0.1
WebcamMax
Winamp
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
WinRAR archiver
Xfire (remove only)
==== Event Viewer Messages From Past Week ========
19/06/2010 19:43:39, Error: EventLog [6008] - The previous system shutdown at 19:41:45 on 19/06/2010 was unexpected.
19/06/2010 19:04:31, Error: Microsoft-Windows-WMPNSS-Service [14370] - A device with IP address '192.168.1.7' failed to register itself for protected content retrieval due to unknown error '0xc00d28af'.
19/06/2010 18:59:56, Error: EventLog [6008] - The previous system shutdown at 18:56:01 on 19/06/2010 was unexpected.
18/06/2010 20:20:31, Error: Microsoft-Windows-DistributedCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.
17/06/2010 17:52:47, Error: Microsoft-Windows-WMPNSS-Service [14365] - Proximity detection failed due to unknown error '0x80004004'. The best proximity time detected was -1 milliseconds.
17/06/2010 15:10:49, Error: Microsoft-Windows-WMPNSS-Service [14370] - A device with IP address '192.168.1.3' failed to register itself for protected content retrieval due to unknown error '0xc00d28af'.
17/06/2010 14:38:25, Error: Microsoft-Windows-ResourcePublication [1002] - Element Provider\Microsoft.Base.Publication/Publication/Computer failed to publish. Ensure that both PKEY_PUBSVCS_METADATA and PKEY_PUBSVCS_TYPE are set properly on the function instance and there were no errors adding the function instance.
17/06/2010 14:26:50, Error: Microsoft-Windows-Dhcp-Client [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 001DE03685AD. The following error occurred: The operation was canceled by the user.. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
15/06/2010 04:01:30, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
==== End Of File ===========================
