My Pastes
Public Pastes
Layout Width
Share Pastebin
Guest
Public paste!

Untitled

By: a guest | Mar 21st, 2010 | Syntax: None | Size: 13.59 KB | Hits: 155 | Expires: Never
Download | Raw | Embed | Report abuse
Copy text to clipboard
  1.  
  2. DDS (Ver_10-03-17.01) - NTFSx86  
  3. Run by User at 13:59:33.43 on Sun 03/21/2010
  4. Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_11
  5. Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.510.113 [GMT 8:00]
  6.  
  7. AV: avast! Internet Security *On-access scanning enabled* (Updated)   {7591DB91-41F0-48A3-B128-1A293FD8233D}
  8. FW: avast! Internet Security *enabled*   {7591DB91-41F0-48A3-B128-1A293FD8233D}
  9.  
  10. ============== Running Processes ===============
  11.  
  12. C:\WINDOWS\system32\Ati2evxx.exe
  13. C:\WINDOWS\system32\svchost -k DcomLaunch
  14. svchost.exe
  15. C:\WINDOWS\System32\svchost.exe -k netsvcs
  16. svchost.exe
  17. svchost.exe
  18. C:\Program Files\Alwil Software\Avast5\afwServ.exe
  19. C:\WINDOWS\system32\Ati2evxx.exe
  20. C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
  21. C:\WINDOWS\system32\spoolsv.exe
  22. C:\WINDOWS\Explorer.EXE
  23. svchost.exe
  24. C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  25. C:\Program Files\Bonjour\mDNSResponder.exe
  26. C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
  27. C:\Program Files\Java\jre6\bin\jqs.exe
  28. C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  29. C:\Program Files\CyberLink\Shared files\RichVideo.exe
  30. c:\program files\idt\intelxpv_v52\wdm\STacSV.exe
  31. C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
  32. C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  33. C:\WINDOWS\system32\svchost.exe -k imgsvc
  34. C:\Program Files\Mozilla Firefox\firefox.exe
  35. D:\DVD MOVEI\dds.scr
  36.  
  37. ============== Pseudo HJT Report ===============
  38.  
  39. uStart Page = hxxp://www.google.com/
  40. uSearch Page =
  41. uWindow Title =
  42. uSearch Bar =
  43. uInternet Connection Wizard,ShellNext = iexplore
  44. uInternet Settings,ProxyOverride = local
  45. mSearchAssistant =
  46. mWinlogon: Userinit=c:\windows\system32\userinit.exe
  47. mWinlogon: Taskman=c:\documents and settings\user\csrss.exe
  48. BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
  49. BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No File
  50. BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
  51. BHO: {93935F7F-9C88-42F8-8445-95251D27FABC} - No File
  52. BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
  53. BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
  54. mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
  55. mRun: [avast5] c:\progra~1\alwils~1\avast5\avastUI.exe /nogui
  56. mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
  57. dRun: [y3114SYS] "c:\windows\system32\n8127\sv711917030r.exe"
  58. dRun: [y474] "c:\windows\system32\n2847\sv71333030r.exe"
  59. uExplorerRun: [y1398Use] "c:\documents and settings\user\local settings\application data\dv688740x\yesbron.com"
  60. mExplorerRun: [A6558r] "c:\windows\_default40782.pif"
  61. mExplorerRun: [HP Online Support] c:\windows\system32\ConSvc.exe
  62. dExplorerRun: [y3114SYS] "c:\documents and settings\user\local settings\application data\dv6191700x\yesbron.com"
  63. dExplorerRun: [y474] "c:\documents and settings\user\local settings\application data\dv633300x\yesbron.com"
  64. StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
  65. uPolicies-explorer: NoWindowsUpdate = 0 (0x0)
  66. mPolicies-system: EnableLUA = 0 (0x0)
  67. dPolicies-system: DisableRegistryTools = 1 (0x1)
  68. IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
  69. IE: {09E90109-A9AA-4980-BCEF-76F8D924E902}
  70. IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
  71. IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
  72. IE: {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - {17A84966-F1E9-4645-AA9E-5E771EE1C859} - c:\progra~1\nuclea~1\videoget\plugins\VIDEOG~1.DLL
  73. IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
  74. DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab
  75. DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
  76. DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
  77. DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
  78. TCP: {E5E1B82E-B155-4B00-AA87-EDCB04001ECB} = 192.168.1.1
  79. Notify: AtiExtEvent - Ati2evxx.dll
  80. AppInit_DLLs: sockspy.dll
  81. Hosts: 127.0.0.1 www.virustotal.com
  82.  
  83. ================= FIREFOX ===================
  84.  
  85. FF - ProfilePath - c:\docume~1\user\applic~1\mozilla\firefox\profiles\p67p1ih0.default\
  86.  
  87. ---- FIREFOX POLICIES ----
  88. c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
  89. c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
  90. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
  91. c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
  92. c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
  93. c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency",   1600);
  94. c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
  95. c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
  96. c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
  97. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug",            false);
  98. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight",       2);
  99. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize",       1);
  100. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
  101. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
  102. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight",   25);
  103. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight",     5);
  104. c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
  105. c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
  106. c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
  107. c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
  108. c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
  109. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
  110. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
  111. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
  112. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
  113. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
  114. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
  115. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
  116. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
  117. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
  118. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
  119. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
  120. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
  121.  
  122. ============= SERVICES / DRIVERS ===============
  123.  
  124. R0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\drivers\aswNdis.sys [2010-3-21 12112]
  125. R0 aswNdis2;avast! Firewall Core Firewall Service;c:\windows\system32\drivers\aswNdis2.sys [2010-3-21 194768]
  126. R1 aswFW;avast! TDI Firewall driver;c:\windows\system32\drivers\aswFW.sys [2010-3-21 102480]
  127. R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2010-3-21 294480]
  128. R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2010-3-21 162640]
  129. R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};c:\program files\cyberlink\powerdvd8\000.fcl [2008-2-1 41456]
  130. R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2010-3-21 19024]
  131. R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2010-3-21 40384]
  132. R2 avast! Firewall;avast! Firewall;c:\program files\alwil software\avast5\afwServ.exe [2010-3-21 119200]
  133. R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2009-12-18 189736]
  134. R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2010-3-21 236368]
  135. R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2010-3-21 40384]
  136. R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2010-3-21 40384]
  137. R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-3-21 19160]
  138. S0 gffkzuuf;gffkzuuf; [x]
  139. S3 abp470n5;abp470n5;\??\c:\windows\system32\drivers\igpjpr.sys --> c:\windows\system32\drivers\igpjpr.sys [?]
  140. S3 DIGIRPS;Digi PortServer Driver;c:\windows\system32\drivers\digirlpt.sys [2009-10-2 42432]
  141. S3 GarenaPEngine;GarenaPEngine;c:\docume~1\user\locals~1\temp\UEX87.tmp [2010-3-21 25616]
  142. S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
  143. S3 WL230_XP;Aztech 802.11g WL230 1211B Driver;c:\windows\system32\drivers\WlanUZXP.sys [2008-3-4 437760]
  144.  
  145. =============== Created Last 30 ================
  146.  
  147. 2010-03-21 05:46:26     147456  --sh--r-        c:\documents and settings\user\csrss.exe
  148. 2010-03-21 04:08:27     38224   ----a-w-        c:\windows\system32\drivers\mbamswissarmy.sys
  149. 2010-03-21 04:08:25     19160   ----a-w-        c:\windows\system32\drivers\mbam.sys
  150. 2010-03-21 04:08:25     0       d-----w-        c:\program files\Malwarebytes' Anti-Malware
  151. 2010-03-21 03:41:24     0       d-----w-        c:\program files\Trend Micro
  152. 2010-03-19 23:20:26     128512  ----a-w-        c:\windows\Uverea.exe
  153. 2010-03-19 22:56:39     0       d-----w-        c:\program files\CBS Software
  154. 2010-03-19 22:50:55     0       d-----w-        c:\docume~1\user\applic~1\Thinstall
  155. 2010-03-19 21:27:48     0       d-----w-        c:\program files\Garena
  156. 2010-03-19 20:12:16     0       d-----w-        c:\program files\Counter-Strike 1.6
  157. 2010-03-19 19:10:10     0       d-----w-        c:\program files\Nuclear Coffee
  158. 2010-03-19 05:54:15     0       d-----w-        c:\docume~1\alluse~1\applic~1\Kaspersky Lab
  159. 2010-03-14 09:39:32     0       ----a-w-        c:\documents and settings\user\Desktop.ini
  160. 2010-03-13 14:03:54     56      ----a-w-        c:\windows\SpeedGear.INI
  161. 2010-03-07 13:41:11     54156   ---ha-w-        c:\windows\QTFont.qfn
  162. 2010-03-07 13:41:11     1409    ----a-w-        c:\windows\QTFont.for
  163. 2010-03-05 19:56:52     0       d-----w-        c:\program files\common files\Scanner
  164. 2010-03-05 19:56:49     0       d-----w-        c:\program files\CA Yahoo! Anti-Spy
  165. 2010-03-05 16:57:13     54016   ----a-w-        c:\windows\system32\drivers\dkrdtf.sys
  166. 2010-03-05 15:43:43     0       d-----w-        c:\docume~1\user\applic~1\Malwarebytes
  167. 2010-03-05 15:43:37     0       d-----w-        c:\docume~1\alluse~1\applic~1\Malwarebytes
  168. 2010-03-04 14:48:09     664     ----a-w-        c:\windows\system32\d3d9caps.dat
  169. 2010-03-02 17:53:43     0       d-----w-        c:\docume~1\alluse~1\applic~1\Seagate
  170. 2010-03-02 17:52:24     0       d-----w-        c:\program files\Carbonite
  171. 2010-03-02 17:51:26     0       d-----w-        c:\program files\Seagate
  172. 2010-03-02 17:51:14     0       d-----w-        c:\program files\common files\muvee Technologies
  173. 2010-03-02 17:46:46     0       d-----w-        c:\windows\system32\XPSViewer
  174. 2010-03-02 17:45:38     14048   ------w-        c:\windows\system32\spmsg2.dll
  175. 2010-02-28 13:50:50     0       d-----w-        c:\docume~1\alluse~1\applic~1\Apowersoft
  176. 2010-02-28 13:26:14     0       d-----w-        c:\program files\Apowersoft
  177. 2010-02-28 09:42:05     0       d-----w-        c:\docume~1\alluse~1\applic~1\Alwil Software
  178. 2010-02-26 23:39:02     0       d-----w-        c:\program files\CCleaner
  179. 2010-02-24 02:57:57     10      ----a-w-        c:\documents and settings\user\BFVIETNAM.pid
  180. 2010-02-24 02:57:57     0       d-----w-        c:\documents and settings\user\mods
  181.  
  182. ==================== Find3M  ====================
  183.  
  184. 2010-03-19 03:49:03     102480  ----a-w-        c:\windows\system32\drivers\aswFW.sys
  185. 2010-03-19 03:48:45     294480  ----a-w-        c:\windows\system32\drivers\aswSnx.sys
  186. 2010-03-19 03:48:21     194768  ----a-w-        c:\windows\system32\drivers\aswNdis2.sys
  187. 2010-03-17 00:00:46     90112   ----a-w-        c:\windows\DUMP3393.tmp
  188. 2010-01-30 07:24:56     410984  ----a-w-        c:\windows\system32\deploytk.dll
  189. 2008-05-26 09:45:47     43072   --sh--r-        c:\windows\j6407822.exe
  190. 2008-05-26 09:45:47     43072   --sh--r-        c:\windows\o4407827.exe
  191. 2008-05-26 09:45:47     43072   --sh--r-        c:\windows\_default40782.pif
  192. 2009-03-08 06:00:50     32      --sha-w-        c:\windows\system32\drivers\fidbox.dat
  193. 2009-03-08 06:00:50     8224    --sha-w-        c:\windows\system32\drivers\fidbox2.dat
  194. 2008-05-26 09:45:47     43072   --sh--r-        c:\windows\system32\n4695\smss.exe
  195. 2008-05-26 09:45:47     43072   --sh--r-        c:\windows\system32\n4695\sv71887430r.exe
  196.  
  197. ============= FINISH: 14:00:10.87 ===============
create new paste | create new version of this paste RAW Paste Data