1. Link back to initial thread: http://forums.spybot.info/showthread...9602-Unwanted-
Ads&p=446524#post446524
2. I ran Spybot, again, but this time, as administrator.
After 34:41 minutes, Spybot reported finding 24 'results'.
So, I clicked on 'Fix Selected'.
3. DDS.txt:
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16720
Run by Wheelsup Club at 11:34:46 on 2013-11-02
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5872.1861 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
Running Processes
.
C:windowssystem32lsm.exe
C:windowssystem32svchost.exe -k DcomLaunch
C:windowssystem32svchost.exe -k RPCSS
c:Program FilesMicrosoft Security ClientMsMpEng.exe
C:windowssystem32atiesrxx.exe
C:windowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:windowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:windowssystem32svchost.exe -k LocalService
C:windowssystem32svchost.exe -k netsvcs
C:windowssystem32svchost.exe -k GPSvcGroup
C:windowssystem32svchost.exe -k NetworkService
C:windowssystem32atieclxx.exe
C:windowsSystem32spoolsv.exe
C:windowssystem32svchost.exe -k LocalServiceNoNetwork
C:Program Files (x86)Common FilesAdobeARM1.0armsvc.exe
C:Program FilesATI TechnologiesATI.ACEFuelFuel.Service.exe
C:Program Files (x86)Common FilesAppleMobile Device SupportAppleMobileDeviceService.exe
C:windowssystem32Dwm.exe
C:windowsExplorer.EXE
C:windowssystem32taskhost.exe
C:windowssystem32taskeng.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program Files (x86)GatewayRegistrationGregHSRW.exe
C:Program Files (x86)LinksysLinksys UpdaterbinLinksysUpdater.exe
c:PROGRA~2mcafeeSITEAD~1mcsacore.exe
C:Program Files (x86)Microsoft SQL ServerMSSQLBinnsqlservr.exe
C:windowsSysWOW64java.exe
C:windowssystem32rundll32.exe
C:windowssystem32rundll32.exe
C:windowsSysWOW64rundll32.exe
C:Program FilesMicrosoft Security Clientmsseces.exe
C:Program FilesEraserEraser.exe
C:Program FilesRealtekAudioHDARAVCpl64.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program Files (x86)Spybot - Search & Destroy 2SDFSSvc.exe
C:Program Files (x86)MicrosoftBingBarSeaPort.EXE
C:Program Files (x86)Microsoft Application Virtualization Clientsftvsa.exe
C:Program Files (x86)SoftwareUpdaterUpdaterService.exe
C:windowssystem32svchost.exe -k imgsvc
C:Program Files (x86)SaltarSmartupdateSaltarSmart.exe
C:Program FilesGatewayGateway UpdaterUpdaterService.exe
C:Program Files (x86)SaltarSmartbinutilSaltarSmart.exe
C:Program Files (x86)UltraVNC Addonsuvnc_service.exe
C:PROGRA~2VIDEOD~2bar1.bin4zbarsvc.exe
C:Program Files (x86)Common FilesVMwareUSBvmware-usbarbitrator64.exe
C:windowsSysWOW64vmnat.exe
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE
C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSvcM.exe
C:Program Files (x86)Common FilesPure Networks SharedPlatformnmsrvc.exe
C:Program Files (x86)Spybot - Search & Destroy 2SDUpdSvc.exe
C:Program Files (x86)Spybot - Search & Destroy 2SDWSCSvc.exe
C:Program Files (x86)Microsoft Application Virtualization Clientsftlist.exe
C:Program Files (x86)VMwareVMware Playervmware-authd.exe
C:windowsSysWOW64vmnetdhcp.exe
C:Program Files (x86)Common FilesMicrosoft SharedVirtualization HandlerCVHSVC.EXE
C:windowssystem32SearchIndexer.exe
c:Program FilesMicrosoft Security ClientNisSrv.exe
C:windowssystem32svchost.exe -k NetworkServiceNetworkRestricted
C:WindowsSpeechCommonsapisvr.exe
C:windowsSystem32WUDFHost.exe
C:Program Files (x86)Business-in-a-BoxBIBLauncher.exe
C:Program FilesdeskswareDesktop iCalendar LiteDesktop iCalendar Lite.exe
C:Program Files (x86)CorelWordPerfect Office 2000RegisterRemind32.exe
C:Program FilesMcAfee Security Scan3.8.130SSScheduler.exe
C:Program Files (x86)Microsoft SQL Server80ToolsBinnsqlmangr.exe
C:VstaScanVsAccess.exe
C:Program Files (x86)CorelWordPerfect Office 2000programsalarm.exe
C:Program Files (x86)IBMLotusSymphonyframeworkrcpeclipseplugins
com.ibm.rcp.base_6.2.3.20110915-1350win32x86symphony.exe
C:Program Files (x86)CorelWordPerfect Office 2000programsdad9.exe
C:Program Files (x86)GatewayHotkey UtilityHotkeyUtility.exe
C:Program Files (x86)Gateway Photo FrameButtonMonitor.exe
C:Program Files (x86)Winampwinampa.exe
C:Program Files (x86)Common FilesPure Networks SharedPlatformnmctxth.exe
C:Program Files (x86)Napsternapster.exe
C:Program Files (x86)Browny02BrotherBrStMonW.exe
C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program Files (x86)Browny02BrYNSvc.exe
C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program Files (x86)VideoDownloadConverter_4zbar1.bin4zbrmon.exe
C:Program Files (x86)iTunesiTunesHelper.exe
C:Program Files (x86)Spybot - Search & Destroy 2SDTray.exe
C:Program FilesiPodbiniPodService.exe
C:windowsMicrosoft.NetFramework64v3.0WPFPresentationFontCache.exe
C:windowssystem32svchost.exe -k LocalServiceAndNoImpersonation
C:Program Files (x86)IBMLotusSymphonyframeworksharedeclipseplugins
com.ibm.symphony.brand.win32_3.0.1.20120110-2000programsoffice.bin
C:Program FilesWindows Media Playerwmpnetwk.exe
C:Program Files (x86)Windows LiveMailwlmail.exe
C:Program Files (x86)Windows LiveContactswlcomm.exe
C:Program Files (x86)Spybot - Search & Destroy 2SDWelcome.exe
C:Program Files (x86)Spybot - Search & Destroy 2SDScan.exe
C:windowssystem32notepad.exe
C:Program Files (x86)Mozilla Firefoxfirefox.exe
C:Program Files (x86)Mozilla Firefoxplugin-container.exe
C:windowsSysWOW64MacromedFlashFlashPlayerPlugin_11_9_900_117.exe
C:windowsSysWOW64MacromedFlashFlashPlayerPlugin_11_9_900_117.exe
c:Program FilesMicrosoft Security ClientMpCmdRun.exe
C:windowssystem32SearchProtocolHost.exe
C:windowssystem32SearchFilterHost.exe
C:windowssystem32wbemwmiprvse.exe
C:windowsSystem32cscript.exe
.
Pseudo HJT Report
.
uStart Page = about:blank
uWindow Title = Internet Explorer, optimized for Bing and MSN
uSearch Bar = res://C:Program Files (x86)Copernic Agent
CopernicAgentExt.dll/INTEGRATION_BAND_SEARCHBAR_HTML
uSearchURL,(Default) = hxxp://www.forumswatcher.com/search.htm
uURLSearchHooks: <No Name>: {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:Program Files (x86)Copernic
AgentCopernicAgentExt.dll
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:Program
Files (x86)McAfeeSiteAdvisorMcIEPlg.dll
uURLSearchHooks: <No Name>: {93a3111f-4f74-4ed8-895e-d9708497629e} - C:Program Files
(x86)VideoDownloadConverter_4zbar1.bin4zSrcAs.dll
uURLSearchHooks: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:Program Files
(x86)freevideomastertbfree.dll
uURLSearchHooks: FCToolbarURLSearchHook Class: {cc376ed9-9e09-4b39-bad5-083d151eaa86} - C:Program
Files (x86)Pazera ToolbarHelper.dll
uURLSearchHooks: <No Name>: - LocalServer32 - <no file>
uURLSearchHooks: ytbyclick B1 Toolbar: {49c53dce-afa0-49a1-a08b-2eb8e8444128} - C:Program Files
(x86)ytbyclick_B1prxtbytby.dll
uURLSearchHooks: MixiDJ V44 Toolbar: {90a1b331-c2b4-4933-9f63-ba7b84d60d58} - C:Program Files
(x86)MixiDJ_V44prxtbMixi.dll
mURLSearchHooks: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:Program Files
(x86)freevideomastertbfree.dll
mURLSearchHooks: ytbyclick B1 Toolbar: {49c53dce-afa0-49a1-a08b-2eb8e8444128} - C:Program Files
(x86)ytbyclick_B1prxtbytby.dll
mURLSearchHooks: MixiDJ V44 Toolbar: {90a1b331-c2b4-4933-9f63-ba7b84d60d58} - C:Program Files
(x86)MixiDJ_V44prxtbMixi.dll
mWinlogon: Userinit = userinit.exe
BHO: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:Program Files
(x86)freevideomastertbfree.dll
BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:Program FilesMcAfee Security
Scan3.8.130McAfeeMSS_IE.dll
BHO: SuperLyrics-16: {11111111-1111-1111-1111-110411411162} - C:Program Files (x86)SuperLyrics-
16SuperLyrics-16-bho.dll
BHO: Pazera Toolbar BHO: {1B169632-4FA6-4BE0-B980-460B5BF7FD08} - C:Program Files (x86)Pazera
ToolbarToolbar.dll
BHO: Trellian BHO Impl: {24180B00-2EB6-11d7-BD6F-004854603DCE} - C:Program Files (x86)Trellian
Toolbartoolbar.dll
BHO: Toolbar BHO: {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:Program Files
(x86)VideoDownloadConverter_4zbar1.bin4zbar.dll
BHO: ytbyclick B1 Toolbar: {49c53dce-afa0-49a1-a08b-2eb8e8444128} - C:Program Files
(x86)ytbyclick_B1prxtbytby.dll
BHO: SSVHelper Class: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre6bin
ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program Files
(x86)Common FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
BHO: MixiDJ V44 Toolbar: {90a1b331-c2b4-4933-9f63-ba7b84d60d58} - C:Program Files
(x86)MixiDJ_V44prxtbMixi.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program Files (x86)Google
Google ToolbarGoogleToolbar_32.dll
BHO: Freecorder extension: {B15BBE59-42F5-4206-B3F0-BE98F5DC4B93} - C:Program Files
(x86)Freecorder extensionScriptHost.dll
BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:Program Files (x86)McAfee
SiteAdvisorMcIEPlg.dll
BHO: Search Assistant BHO: {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:Program Files
(x86)VideoDownloadConverter_4zbar1.bin4zSrcAs.dll
BHO: {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - <orphaned>
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -
BHO: SaltarSmart: {d99a4ec9-00bd-4fe4-85a5-4db018351265} - C:Program Files (x86)SaltarSmart
SaltarSmartbho.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files
(x86)Javajre6binjp2ssv.dll
BHO: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - <orphaned>
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:Program Files (x86)GoogleGoogle
ToolbarGoogleToolbar_32.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} -
TB: Trellian &Toolbar: {71AAABE5-1F0F-11d7-BD6F-004854603DCE} - C:Program Files (x86)Trellian
Toolbartoolbar.dll
TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:Program Files
(x86)McAfeeSiteAdvisorMcIEPlg.dll
TB: FireShot: {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} -
TB: VideoDownloadConverter: {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:Program Files
(x86)VideoDownloadConverter_4zbar1.bin4zbar.dll
TB: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - C:Program Files
(x86)freevideomastertbfree.dll
TB: Pazera Toolbar: {093B3D46-0F87-44CF-B44B-79537F1597E5} - C:Program Files (x86)Pazera Toolbar
Toolbar.dll
TB: ytbyclick B1 Toolbar: {49c53dce-afa0-49a1-a08b-2eb8e8444128} - C:Program Files
(x86)ytbyclick_B1prxtbytby.dll
TB: MixiDJ V44 Toolbar: {90a1b331-c2b4-4933-9f63-ba7b84d60d58} - C:Program Files
(x86)MixiDJ_V44prxtbMixi.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program Files (x86)GoogleGoogle
ToolbarGoogleToolbar_32.dll
EB: Developer Tools: {1A6FE369-F28C-4AD9-A3E6-2BCB50807CF1} - C:Program Files (x86)Internet
Exploreriedvtool.dll
EB: Copernic Agent Results: {6F480F82-C3A6-4D35-96F7-B297AD49FBE8} - C:Program Files (x86)Copernic
AgentCopernicAgentExt.dll
uRun: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
uRun: [Speech Recognition] 'C:windowsSpeechCommonsapisvr.exe' -SpeechUX -Startup
uRun: [swg] 'C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe'
uRun: [Update Service] 'C:Program Files (x86)Common FilesTeknum Systemsupdate.exe' /startup
uRun: [BIBLauncher] C:Program Files (x86)Business-in-a-BoxBIBLauncher.exe
uRun: [VerControl] C:UsersWHEELS~1AppDataLocalTempImgVerControl.exe
uRun: [SymphonyPreLoad] 'C:Program Files (x86)IBMLotusSymphonyframeworksharedeclipseplugins
com.ibm.symphony.standard.launcher.win32.x86_3.0.1.20120110-2000IBM Lotus Symphony' -nogui -
nosplash
uRun: [Desktop iCalendar Lite.exe] 'C:Program FilesdeskswareDesktop iCalendar LiteDesktop
iCalendar Lite.exe'
uRunOnce: [Uninstall C:UsersWheelsup ClubAppDataLocalMicrosoftSkyDrive16.4.6013.0910amd64]
C:windowsSystem32cmd.exe /q /c rmdir /s /q 'C:UsersWheelsup ClubAppDataLocalMicrosoft
SkyDrive16.4.6013.0910amd64'
uRunOnce: [Uninstall C:UsersWheelsup ClubAppDataLocalMicrosoftSkyDrive16.4.6013.0910] C:
windowsSystem32cmd.exe /q /c rmdir /s /q 'C:UsersWheelsup ClubAppDataLocalMicrosoft
SkyDrive16.4.6013.0910'
mRun: [Hotkey Utility] C:Program Files (x86)GatewayHotkey UtilityHotkeyUtility.exe
mRun: [OOTag] C:Program Files (x86)GatewayOOBEOfferOOTag.exe
mRun: [Gateway Photo Frame] C:Program Files (x86)Gateway Photo FrameButtonMonitor.exe -A
mRun: [WinampAgent] 'C:Program Files (x86)Winampwinampa.exe'
mRun: [nmctxth] 'C:Program Files (x86)Common FilesPure Networks SharedPlatformnmctxth.exe'
mRun: [NapsterShell] C:Program Files (x86)Napsternapster.exe /systray
mRun: [APSDaemon] 'C:Program Files (x86)Common FilesAppleApple Application Support
APSDaemon.exe'
mRun: [BrStsMon00] C:Program Files (x86)Browny02BrotherBrStMonW.exe /AUTORUN
mRun: [StartCCC] 'C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLIStart.exe' MSRun
mRun: [AMD AVT] Cmd.exe /c start 'AMD Accelerated Video Transcoding device initialization' /min 'C:
Program Files (x86)AMD AVTbinkdbsync.exe' aml
mRun: [Aimersoft Helper Compact.exe] C:Program Files (x86)Common FilesAimersoftAimersoft Helper
CompactASHelper.exe
mRun: [VideoDownloadConverter Search Scope Monitor] 'C:PROGRA~2VIDEOD~2bar1.bin4zsrchmn.exe'
/m=2 /w /h
mRun: [VideoDownloadConverter_4z Browser Plugin Loader] C:PROGRA~2VIDEOD~2bar1.bin4zbrmon.exe
mRun: [Adobe ARM] 'C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe'
mRun: [QuickTime Task] 'C:Program Files (x86)QuickTimeQTTask.exe' -atboottime
mRun: [Nikon Message Center 2] C:Program Files (x86)NikonNikon Message Center 2NkMC2.exe -s
mRun: [iTunesHelper] 'C:Program Files (x86)iTunesiTunesHelper.exe'
mRun: [SDTray] 'C:Program Files (x86)Spybot - Search & Destroy 2SDTray.exe'
dRun: [SearchProtect] SearchProtectbincltmng.exe
StartupFolder: C:UsersWHEELS~1AppDataRoamingMICROS~1WindowsSTARTM~1ProgramsStartup
CORELC~1.LNK - C:Program Files (x86)CorelWordPerfect Office 2000programsalarm.exe
StartupFolder: C:UsersWHEELS~1AppDataRoamingMICROS~1WindowsSTARTM~1ProgramsStartup
DESKTO~1.LNK - C:Program Files (x86)CorelWordPerfect Office 2000programsdad9.exe
StartupFolder: C:PROGRA~3MICROS~1WindowsSTARTM~1ProgramsStartupCORELR~1.LNK - C:Program
Files (x86)CorelWordPerfect Office 2000RegisterRemind32.exe
StartupFolder: C:PROGRA~3MICROS~1WindowsSTARTM~1ProgramsStartupMCAFEE~1.LNK - C:Program
FilesMcAfee Security Scan3.8.130SSScheduler.exe
StartupFolder: C:PROGRA~3MICROS~1WindowsSTARTM~1ProgramsStartupSERVIC~1.LNK - C:Program
Files (x86)Microsoft SQL Server80ToolsBinnsqlmangr.exe
StartupFolder: C:PROGRA~3MICROS~1WindowsSTARTM~1ProgramsStartupVISTAA~1.LNK - C:VstaScan
VsAccess.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: Download current page with FreshWebSuction - C:Program Files (x86)FreshWebmaster
FreshWebSuctionobiectx_all.htm
IE: Download using FreshWebSuction - C:Program Files (x86)FreshWebmasterFreshWebSuction
obiectx.htm
IE: Free YouTube Download - C:Program Files (x86)Common FilesDVDVideoSoftplugins
freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - C:Program Files (x86)Common FilesDVDVideoSoftplugins
freeytmp3downloader.htm
IE: Search Using Copernic Agent - C:Program Files (x86)Copernic Agent
CopernicAgentExt.dll/INTEGRATION_MENU_SEARCHEXT
IE: {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:PROGRA~2COPERN~1COPERN~1.EXE
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:Program
Files (x86)Windows LiveWriterWriterBrowserExtension.dll
IE: {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:PROGRA~2COPERN~1COPERN~1.EXE
IE: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - <orphaned>
LSP: %SystemRoot%system32vsocklib.dll
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10
-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-
windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-
windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-
windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-
windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} -
hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
TCP: NameServer = 64.71.255.204 64.71.255.198
TCP: Interfaces{16C6E4AB-95AE-44B4-B300-BF7F85B75A16} : DHCPNameServer = 64.71.255.204
64.71.255.198
TCP: Interfaces{7A83BCC7-06FE-4C29-BFF1-A71A0A9D6DB9} : DHCPNameServer = 64.71.255.204
64.71.255.198
Handler: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - C:Program Files (x86)Copernic
AgentCopernicAgentExt.dll
Handler: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - C:Program Files
(x86)Copernic AgentCopernicAgentExt.dll
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:Program Files (x86)McAfee
SiteAdvisorMcIEPlg.dll
Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:Program Files (x86)Common FilesPure
Networks SharedPlatformpuresp4.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:Program Files (x86)McAfee
SiteAdvisorMcIEPlg.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:Program Files (x86)Windows LivePhoto
GalleryAlbumDownloadProtocolHandler.dll
Notify: SDWinLogon - SDWinLogon.dll
AppInit_DLLs= c:progra~3browse~125986~1.67{c16c1~1browse~1.dll
SSODL: WebCheck - <orphaned>
x64-BHO: SuperLyrics-16: {11111111-1111-1111-1111-110411411162} - C:Program Files
(x86)SuperLyrics-16SuperLyrics-16-bho64.dll
x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files
Javajre7binssv.dll
x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program Files
Common FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program Files
(x86)GoogleGoogle ToolbarGoogleToolbar_64.dll
x64-BHO: Freecorder extension x64: {B15BBE59-42F5-4206-B3F0-BE98F5DC4B93} - C:Program Files
Freecorder extension x64ScriptHost.dll
x64-BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:Program Files
(x86)McAfeeSiteAdvisorx64McIEPlg.dll
x64-BHO: {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - <orphaned>
x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files
Javajre7binjp2ssv.dll
x64-BHO: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - <orphaned>
x64-TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:Program Files
(x86)McAfeeSiteAdvisorx64McIEPlg.dll
x64-TB: FireShot: {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} -
x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program Files (x86)Google
Google ToolbarGoogleToolbar_64.dll
x64-Run: [OOTag] C:Program Files (x86)GatewayOOBEOfferootag.exe
x64-Run: [MSC] 'c:Program FilesMicrosoft Security Clientmsseces.exe' -hide -runkey
x64-Run: [Eraser] 'C:PROGRA~1EraserEraser.exe' --atRestart
x64-Run: [RtHDVCpl] C:Program FilesRealtekAudioHDARAVCpl64.exe -s
x64-IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - <orphaned>
x64-IE: {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - <orphaned>
.
INFO: x64-HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
x64-Handler: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - <orphaned>
x64-Handler: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - <orphaned>
x64-Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:Program Files (x86)McAfee
SiteAdvisorx64McIEPlg.dll
x64-Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:Program Files (x86)Common Files
Pure Networks SharedPlatformamd64puresp4.dll
x64-Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:Program Files (x86)McAfee
SiteAdvisorx64McIEPlg.dll
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
Hosts: 127.0.0.1 www.spywareinfo.com
.
FIREFOX
.
FF - ProfilePath - C:UsersWheelsup ClubAppDataRoamingMozillaFirefoxProfiles
51iipmx9.default-1368301715119
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?
ctid=CT3298580&CUI=UN41812124047612243&UM=2&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?
ctid=CT3298580&SearchSource=2&CUI=UN41812124047612243&UM=2&q=
FF - prefs.js: network.proxy.ftp - 202.147.204.125
FF - prefs.js: network.proxy.ftp_port - 8888
FF - prefs.js: network.proxy.gopher - 202.147.204.125
FF - prefs.js: network.proxy.gopher_port - 8888
FF - prefs.js: network.proxy.http - 202.147.204.125
FF - prefs.js: network.proxy.http_port - 8888
FF - prefs.js: network.proxy.socks - 202.147.204.125
FF - prefs.js: network.proxy.socks_port - 8888
FF - prefs.js: network.proxy.ssl - 202.147.204.125
FF - prefs.js: network.proxy.ssl_port - 8888
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:PROGRA~2MICROS~2Office14NPSPWRAP.DLL
FF - plugin: C:Program Files (x86)AdobeReader 11.0ReaderAIRnppdf32.dll
FF - plugin: C:Program Files (x86)GoogleGoogle Earthpluginnpgeplugin.dll
FF - plugin: C:Program Files (x86)GoogleUpdate1.3.21.165npGoogleUpdate3.dll
FF - plugin: C:Program Files (x86)Javajre6binnew_pluginnpdeployJava1.dll
FF - plugin: C:Program Files (x86)McAfeeSiteAdvisorNPMcFFPlg32.dll
FF - plugin: c:Program Files (x86)Microsoft Silverlight5.1.20913.0npctrlui.dll
FF - plugin: C:Program Files (x86)Virtual Earth 3DnpVE3D.dll
FF - plugin: C:Program Files (x86)Winamp Detectnpwachk.dll
FF - plugin: C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll
FF - plugin: C:Program FilesMcAfee Security Scan3.8.130npMcAfeeMSS.dll
FF - plugin: C:windowsSysWOW64MacromedFlashNPSWF32_11_9_900_117.dll
FF - ExtSQL: 2013-09-16 14:56; {90a1b331-c2b4-4933-9f63-ba7b84d60d58}; C:UsersWheelsup Club
AppDataRoamingMozillaFirefoxProfiles51iipmx9.default-1368301715119extensions{90a1b331-c2b4-
4933-9f63-ba7b84d60d58}
FF - ExtSQL: 2013-10-03 15:24; jid0-KMOFrRnd6cHkSQEU5WJxd4Vz7SA@jetpack; C:UsersWheelsup Club
AppDataRoamingMozillaFirefoxProfiles51iipmx9.default-1368301715119extensionsjid0-
KMOFrRnd6cHkSQEU5WJxd4Vz7SA@jetpack.xpi
FF - ExtSQL: 2013-10-03 15:24; arpit3@techraga.in; C:UsersWheelsup ClubAppDataRoamingMozilla
FirefoxProfiles51iipmx9.default-1368301715119extensionsarpit3@techraga.in.xpi
FF - ExtSQL: 2013-10-03 15:25; proxytool@proxylist.co; C:UsersWheelsup ClubAppDataRoaming
MozillaFirefoxProfiles51iipmx9.default-1368301715119extensionsproxytool@proxylist.co.xpi
FF - ExtSQL: 2013-10-03 16:59; firefox@saltarsmart.biz; C:UsersWheelsup ClubAppDataRoaming
MozillaFirefoxProfiles51iipmx9.default-1368301715119extensionsfirefox@saltarsmart.biz.xpi
FF - ExtSQL: 2013-10-15 09:40; jid0-XXocAsQYPfKHSY8ebTi0VcX8eNQ@jetpack; C:UsersWheelsup Club
AppDataRoamingMozillaFirefoxProfiles51iipmx9.default-1368301715119extensionsjid0-
XXocAsQYPfKHSY8ebTi0VcX8eNQ@jetpack.xpi
FF - ExtSQL: 2013-10-23 14:10; {e8f509f0-b677-11de-8a39-0800200c9a66}; C:UsersWheelsup Club
AppDataRoamingMozillaFirefoxProfiles51iipmx9.default-1368301715119extensions{e8f509f0-b677-
11de-8a39-0800200c9a66}.xpi
FF - ExtSQL: 2013-10-23 14:10; save-as-pdf-ff@pdfcrowd.com; C:UsersWheelsup ClubAppDataRoaming
MozillaFirefoxProfiles51iipmx9.default-1368301715119extensionssave-as-pdf-ff@pdfcrowd.com.xpi
.
SERVICES / DRIVERS
.
R0 ahcix64s;ahcix64s;C:windowsSystem32driversahcix64s.sys [2010-5-31 235312]
R0 MpFilter;Microsoft Malware Protection Driver;C:windowsSystem32driversMpFilter.sys [2013-6-18
247216]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/12/15 09:45:12];C:Program Files
(x86)CyberLinkPowerDVD9000.fcl [2010-2-8 146928]
R2 AMD External Events Utility;AMD External Events Utility;C:windowsSystem32atiesrxx.exe [2012-7
-4 238080]
R2 AMD FUEL Service;AMD FUEL Service;C:Program FilesATI TechnologiesATI.ACEFuelFuel.Service.exe
[2012-7-4 361984]
R2 AODDriver4.1;AODDriver4.1;C:Program FilesATI TechnologiesATI.ACEFuelamd64aoddriver2.sys
[2012-3-5 53888]
R2 cvhsvc;Client Virtualization Handler;C:Program Files (x86)Common Filesmicrosoft shared
Virtualization HandlerCVHSVC.EXE [2013-4-22 822504]
R2 Greg_Service;GRegService;C:Program Files (x86)GatewayRegistrationGregHSRW.exe [2009-8-28
1150496]
R2 LinksysUpdater;Linksys Updater;C:Program Files (x86)LinksysLinksys Updaterbin
LinksysUpdater.exe [2008-11-13 204800]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:PROGRA~2mcafeeSITEAD~1mcsacore.exe
[2013-10-3 121616]
R2 NisDrv;Microsoft Network Inspection System;C:windowsSystem32driversNisDrvWFP.sys [2011-4-27
139616]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;C:Program Files (x86)Spybot - Search & Destroy
2SDFSSvc.exe [2013-10-30 3921880]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;C:Program Files (x86)Spybot - Search & Destroy
2SDUpdSvc.exe [2013-10-30 1042272]
R2 SDWSCService;Spybot-S&D 2 Security Center Service;C:Program Files (x86)Spybot - Search &
Destroy 2SDWSCSvc.exe [2013-10-30 171416]
R2 sftlist;Application Virtualization Client;C:Program Files (x86)Microsoft Application
Virtualization Clientsftlist.exe [2013-6-26 523944]
R2 SrvUpdater;Software Updater;C:Program Files (x86)SoftwareUpdaterUpdaterService.exe [2013-2-18
31744]
R2 Update SaltarSmart;Update SaltarSmart;C:Program Files (x86)SaltarSmartupdateSaltarSmart.exe
[2013-10-3 65312]
R2 Updater Service;Updater Service;C:Program FilesGatewayGateway UpdaterUpdaterService.exe
[2010-5-31 243232]
R2 Util SaltarSmart;Util SaltarSmart;C:Program Files (x86)SaltarSmartbinutilSaltarSmart.exe
[2013-10-30 65312]
R2 Uvnc_service;Uvnc_service;C:Program Files (x86)UltraVNC Addonsuvnc_service.exe [2013-3-22
63296]
R2 VideoDownloadConverter_4zService;VideoDownloadConverterService;C:PROGRA~2VIDEOD~2bar1.bin
4zbarsvc.exe [2013-3-18 42504]
R2 VMUSBArbService;VMware USB Arbitration Service;C:Program Files (x86)Common FilesVMwareUSB
vmware-usbarbitrator64.exe [2011-8-29 846448]
R3 amdiox64;AMD IO Driver;C:windowsSystem32driversamdiox64.sys [2012-7-12 46136]
R3 anvsnddrv;AnvSoft Virtual Sound Device;C:windowsSystem32driversanvsnddrv.sys [2013-3-19
33872]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:windowsSystem32drivers
AtihdW76.sys [2012-2-23 95760]
R3 AVer7231_x64;AVerMedia 7231 capture service;C:windowsSystem32driversAVer7231_x64.sys [2010-7
-26 1799808]
R3 bbcap;bb_capture_driver;C:windowsSystem32driversbbcap.sys [2013-3-22 4608]
R3 BrYNSvc;BrYNSvc;C:Program Files (x86)Browny02BrYNSvc.exe [2012-3-14 245760]
R3 NisSrv;Microsoft Network Inspection;C:Program FilesMicrosoft Security ClientNisSrv.exe [2013-
8-12 366600]
R3 RTL8167;Realtek 8167 NT Driver;C:windowsSystem32driversRt64win7.sys [2010-5-31 346144]
R3 rtl819xpn64;Realtek RTL8190/RTL8192E 802.11n Wireless LAN (Mini-)PCI NIC NT Driver;C:windows
System32driversrtl819xp.sys [2010-2-1 622624]
R3 Sftfs;Sftfs;C:windowsSystem32driversSftfslh.sys [2013-6-26 767144]
R3 Sftplay;Sftplay;C:windowsSystem32driversSftplaylh.sys [2013-6-26 273576]
R3 Sftredir;Sftredir;C:windowsSystem32driversSftredirlh.sys [2013-6-26 28840]
R3 Sftvol;Sftvol;C:windowsSystem32driversSftvollh.sys [2013-6-26 23208]
R3 sftvsa;Application Virtualization Service Agent;C:Program Files (x86)Microsoft Application
Virtualization Clientsftvsa.exe [2013-6-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:Windows
Microsoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:Windows
Microsoft.NETFramework64v4.0.30319mscorsvw.exe [2010-3-18 138576]
S2 CltMngSvc;Search Protect by Conduit Updater;C:Program Files (x86)SearchProtectbin
CltMngSvc.exe --> C:Program Files (x86)SearchProtectbinCltMngSvc.exe [?]
S3 BBSvc;Bing Bar Update Service;C:Program Files (x86)MicrosoftBingBarBBSvc.EXE [2011-4-1
183560]
S3 debutfilter;Debut Filter Driver v6.20.00;C:windowsSystem32driversdebutfilterx64.sys [2013-3-
23 33488]
S3 fssfltr;fssfltr;C:windowsSystem32driversfssfltr.sys [2013-8-14 57840]
S3 fsssvc;Windows Live Family Safety Service;C:Program Files (x86)Windows LiveFamily Safety
fsssvc.exe [2013-2-5 1512448]
S3 GSService;GSService;C:WindowsSysWOW64GSService.exe [2013-3-17 448736]
S3 McComponentHostService;McAfee Security Scan Component Host Service;C:Program FilesMcAfee
Security Scan3.8.130McCHSvc.exe [2013-9-6 288776]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:windowsSystem32drivers
rdpvideominiport.sys [2013-3-19 19456]
S3 SndTAudio;SndTAudio;C:windowsSystem32driversSndTAudio.sys [2013-3-17 34528]
S3 SWDUMon;SWDUMon;C:windowsSystem32driversSWDUMon.sys [2012-3-30 15672]
S3 TsUsbFlt;TsUsbFlt;C:windowsSystem32driversTsUsbFlt.sys [2013-3-19 57856]
S3 USBAAPL64;Apple Mobile USB Driver;C:windowsSystem32driversusbaapl64.sys [2012-7-9 52736]
S3 WatAdminSvc;Windows Activation Technologies Service;C:windowsSystem32WatWatAdminSvc.exe
[2011-10-27 1255736]
S3 WsAudio_Device(1);WsAudio_Device(1);C:windowsSystem32driversVirtualAudio1.sys [2013-3-17
31080]
S3 WsAudio_Device(2);WsAudio_Device(2);C:windowsSystem32driversVirtualAudio2.sys [2013-3-17
31080]
S3 WsAudio_Device(3);WsAudio_Device(3);C:windowsSystem32driversVirtualAudio3.sys [2013-3-17
31080]
S3 WsAudio_Device(4);WsAudio_Device(4);C:windowsSystem32driversVirtualAudio4.sys [2013-3-17
31080]
S3 WsAudio_Device(5);WsAudio_Device(5);C:windowsSystem32driversVirtualAudio5.sys [2013-3-17
31080]
.
Created Last 30
.
2013-11-01 20:11:08 10280728 ----a-w- C:ProgramDataMicrosoftMicrosoft
AntimalwareDefinition Updates{01E01A6A-BC83-4FE0-A01C-372922FD9866}mpengine.dll
2013-11-01 16:05:53 10280728 ------w- C:ProgramDataMicrosoftMicrosoft
AntimalwareDefinition UpdatesBackupmpengine.dll
2013-10-31 13:22:17 71048 ----a-w- C:windowsSysWow64FlashPlayerCPLApp.cpl
2013-10-31 13:22:17 692616 ----a-w- C:windowsSysWow64FlashPlayerApp.exe
2013-10-30 13:51:03 21040 ----a-w- C:windowsSystem32sdnclean64.exe
2013-10-30 13:50:45 -------- d-----w- C:Program Files (x86)Spybot - Search &
Destroy 2
2013-10-29 18:41:37 -------- d-----w- C:Program FilesUninstaller
2013-10-29 18:39:47 -------- d-----w- C:Program Files (x86)SaltarSmart
2013-10-29 18:37:13 -------- d-----w- C:Program Files (x86)SuperLyrics-16
2013-10-27 12:54:40 -------- d-----w- C:Program FilesiPod
2013-10-27 12:54:39 -------- d-----w- C:ProgramData34BE82C4-E596-4e99-A191-
52C6199EBF69
2013-10-27 12:54:39 -------- d-----w- C:Program FilesiTunes
2013-10-27 12:54:39 -------- d-----w- C:Program Files (x86)iTunes
2013-10-24 20:31:13 -------- d-----w- C:UsersWheelsup ClubAppDataLocal
FreeFileViewer
2013-10-19 14:18:58 965000 ------w- C:ProgramDataMicrosoftMicrosoft Antimalware
Definition Updates{09992E5C-E36E-42A4-BEC1-C9B59B97F77E}gapaengine.dll
2013-10-17 15:44:01 -------- d-----w- C:Program FilesMcAfee Security Scan
2013-10-16 12:57:03 17813896 ----a-w- C:windowsSysWow64FlashPlayerInstaller.exe
2013-10-15 20:28:53 -------- d-----w- C:Program Files (x86)Flash Movie Player
2013-10-15 14:26:46 163504 ----a-w- C:ProgramDataMicrosoftWindowsSqmManifest
Sqm10145.bin
2013-10-09 17:41:57 -------- d-----w- C:UsersWheelsup ClubAppDataRoaming
DonationCoder
2013-10-09 17:41:44 -------- d-----w- C:ProgramDataDonationCoder
2013-10-09 17:41:44 -------- d-----w- C:Program Files (x86)ScreenshotCaptor
2013-10-09 15:34:28 -------- d-----w- C:FFOutput
2013-10-09 15:33:33 -------- d-----w- C:Program Files (x86)FreeTime
2013-10-09 15:14:36 -------- d-----w- C:Program Files (x86)Free All to Image
Jpg-Jpeg Bmp Tiff Png Converter
2013-10-09 14:14:32 -------- d-----w- C:UsersWheelsup ClubAppDataRoaming
Free-backup.info
2013-10-06 02:54:17 -------- d-----w- C:Program Files (x86)K-Lite Codec Pack
2013-10-04 20:51:52 -------- d-----w- C:Program Files (x86)MPC-HC
.
Find3M
.
2013-09-22 23:28:06 1767936 ----a-w- C:windowsSysWow64wininet.dll
2013-09-22 23:27:49 2876928 ----a-w- C:windowsSysWow64jscript9.dll
2013-09-22 23:27:48 61440 ----a-w- C:windowsSysWow64iesetup.dll
2013-09-22 23:27:48 109056 ----a-w- C:windowsSysWow64iesysprep.dll
2013-09-22 22:55:10 2241024 ----a-w- C:windowsSystem32wininet.dll
2013-09-22 22:54:51 3959296 ----a-w- C:windowsSystem32jscript9.dll
2013-09-22 22:54:50 67072 ----a-w- C:windowsSystem32iesetup.dll
2013-09-22 22:54:50 136704 ----a-w- C:windowsSystem32iesysprep.dll
2013-09-21 03:38:39 2706432 ----a-w- C:windowsSystem32mshtml.tlb
2013-09-21 03:30:24 2706432 ----a-w- C:windowsSysWow64mshtml.tlb
2013-09-21 02:48:36 89600 ----a-w- C:windowsSystem32RegisterIEPKEYs.exe
2013-09-21 02:39:47 71680 ----a-w- C:windowsSysWow64RegisterIEPKEYs.exe
2013-09-14 01:10:19 497152 ----a-w- C:windowsSystem32driversafd.sys
2013-09-08 02:30:37 1903552 ----a-w- C:windowsSystem32driverstcpip.sys
2013-09-08 02:27:14 327168 ----a-w- C:windowsSystem32mswsock.dll
2013-09-08 02:03:58 231424 ----a-w- C:windowsSysWow64mswsock.dll
2013-09-04 12:12:11 343040 ----a-w- C:windowsSystem32driversusbhub.sys
2013-09-04 12:11:51 325120 ----a-w- C:windowsSystem32driversusbport.sys
2013-09-04 12:11:49 99840 ----a-w- C:windowsSystem32driversusbccgp.sys
2013-09-04 12:11:43 52736 ----a-w- C:windowsSystem32driversusbehci.sys
2013-09-04 12:11:43 30720 ----a-w- C:windowsSystem32driversusbuhci.sys
2013-09-04 12:11:42 25600 ----a-w- C:windowsSystem32driversusbohci.sys
2013-09-04 12:11:40 7808 ----a-w- C:windowsSystem32driversusbd.sys
2013-08-29 02:17:48 5549504 ----a-w- C:windowsSystem32ntoskrnl.exe
2013-08-29 02:16:35 1732032 ----a-w- C:windowsSystem32ntdll.dll
2013-08-29 02:16:28 243712 ----a-w- C:windowsSystem32wow64.dll
2013-08-29 02:16:14 859648 ----a-w- C:windowsSystem32tdh.dll
2013-08-29 02:13:28 878080 ----a-w- C:windowsSystem32advapi32.dll
2013-08-29 01:51:45 3969472 ----a-w- C:windowsSysWow64ntkrnlpa.exe
2013-08-29 01:51:45 3914176 ----a-w- C:windowsSysWow64ntoskrnl.exe
2013-08-29 01:50:31 5120 ----a-w- C:windowsSysWow64wow32.dll
2013-08-29 01:50:30 1292192 ----a-w- C:windowsSysWow64ntdll.dll
2013-08-29 01:50:16 619520 ----a-w- C:windowsSysWow64tdh.dll
2013-08-29 01:48:17 640512 ----a-w- C:windowsSysWow64advapi32.dll
2013-08-29 01:48:15 44032 ----a-w- C:windowsapppatchacwow64.dll
2013-08-29 00:49:53 25600 ----a-w- C:windowsSysWow64setup16.exe
2013-08-29 00:49:52 7680 ----a-w- C:windowsSysWow64instnm.exe
2013-08-29 00:49:52 14336 ----a-w- C:windowsSysWow64ntvdm64.dll
2013-08-29 00:49:49 2048 ----a-w- C:windowsSysWow64user.exe
2013-08-28 01:21:06 3155968 ----a-w- C:windowsSystem32win32k.sys
2013-08-28 01:12:33 461312 ----a-w- C:windowsSystem32scavengeui.dll
2013-08-21 01:12:32 4812567 ----a-w- C:UsersWheelsup ClubFileZilla_3.7.3_win32-
setup.exe
2013-08-18 03:08:39 106496 ----a-w- C:windowsSysWow64ATL71.DLL
2013-08-14 01:39:44 1169609 ----a-w- C:windowsunins001.exe
2013-08-13 17:51:58 4817275 ----a-w- C:UsersWheelsup ClubFileZilla_3.7.2_win32-
setup.exe
2013-08-05 02:25:45 155584 ----a-w- C:windowsSystem32driversataport.sys
.
FINISH: 11:36:34.80
4. When I launched Firefox to get back to this post, one of the bothersome ads popped up, in a new
tab, again.
5. aswMBR Log:
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-11-02 11:46:31
-----------------------------
11:46:31.670 OS Version: Windows x64 6.1.7601 Service Pack 1
11:46:31.670 Number of processors: 4 586 0x402
11:46:31.680 ComputerName: WHEELSUPCLUB-PC UserName: Wheelsup Club
11:46:36.503 Initialize success
11:49:32.473 AVAST engine defs: 13110200
11:52:53.826 Disk 0 (boot) DeviceHarddisk0DR0 -> Device00000074
11:52:53.826 Disk 0 Vendor: WDC_____ 01.0 Size: 953805MB BusType: 8
11:52:53.976 Disk 0 MBR read successfully
11:52:53.976 Disk 0 MBR scan
11:52:54.056 Disk 0 unknown MBR code
11:52:54.066 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 16000 MB offset 2048
11:52:54.116 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 32770048
11:52:54.156 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 937703 MB offset 32974848
11:52:54.236 Disk 0 scanning C:windowssystem32drivers
11:53:12.308 Service scanning
11:53:52.652 Modules scanning
11:53:52.652 Disk 0 trace - called modules:
11:53:52.672 ntoskrnl.exe CLASSPNP.SYS disk.sys storport.sys hal.dll ahcix64s.sys
11:53:52.682 1 nt!IofCallDriver -> DeviceHarddisk0DR0[0xfffffa80067c8060]
11:53:52.682 3 CLASSPNP.SYS[fffff880018a443f] -> nt!IofCallDriver -> Device00000074
[0xfffffa8005e389c0]
11:53:55.783 AVAST engine scan C:windows
11:54:05.724 AVAST engine scan C:windowssystem32
11:59:10.902 AVAST engine scan C:windowssystem32drivers
11:59:40.715 AVAST engine scan C:UsersWheelsup Club
01:47:13.742 AVAST engine scan C:ProgramData
01:10:57.966 Scan finished successfully
06:43:12.596 Disk 0 MBR has been saved successfully to 'C:UsersWheelsup ClubDesktopMBR.dat'
06:43:12.636 The log file has been saved successfully to 'C:UsersWheelsup ClubDesktop
aswMBR.txt'
6. I think I successfully uploaded the 'attached.zip' file, in the 'Managed Attachments' facility.
Kindly let me know, though, if I did something wrong and need to try uploading the file, again.
- r