API tools faq
paste
ichsancpb

To Remove BOO Whistler

ichsancpb
May 22nd, 2012
34
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.82 KB | None | 0 0
raw download clone embed print report
  1. .
  2. DDS (Ver_2011-08-26.01) - NTFSx86
  3. Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
  4. Run by Administrator at 9:36:23 on 2012-05-23
  5. .
  6. ============== Running Processes ===============
  7. .
  8. C:\WINDOWS\Explorer.EXE
  9. C:\WINDOWS\system32\spoolsv.exe
  10. C:\WINDOWS\system32\acs.exe
  11. C:\Program Files\Avira\AntiVir Desktop\sched.exe
  12. C:\Program Files\Avira\AntiVir Desktop\avguard.exe
  13. C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  14. C:\WINDOWS\system32\AstSrv.exe
  15. C:\Program Files\Bonjour\mDNSResponder.exe
  16. C:\WINDOWS\system32\crypserv.exe
  17. C:\Program Files\Java\jre6\bin\jqs.exe
  18. C:\Program Files\Common Files\LightScribe\LSSrvc.exe
  19. C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
  20. C:\WINDOWS\system32\IoctlSvc.exe
  21. C:\WINDOWS\system32\PrintCtrl.exe
  22. C:\Program Files\CyberLink\Shared files\RichVideo.exe
  23. C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
  24. C:\Program Files\Virtual CD v9\System\VC9SecS.exe
  25. C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
  26. C:\WINDOWS\System32\alg.exe
  27. C:\Program Files\TP-LINK\TWCU\TWCU.exe
  28. C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
  29. C:\WINDOWS\system32\PrintDisp.exe
  30. C:\Program Files\WebMoney Agent\wmagent.exe
  31. C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
  32. C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
  33. C:\WINDOWS\system32\ctfmon.exe
  34. C:\Program Files\GAUS24\Gaus.Client\Gaus.Launcher.exe
  35. C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
  36. C:\PROGRA~1\MI3AA1~1\rapimgr.exe
  37. C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
  38. C:\PTPLA\Programs\jre\bin\javaw.exe
  39. C:\Program Files\Google\Chrome\Application\chrome.exe
  40. C:\Program Files\Google\Chrome\Application\chrome.exe
  41. C:\Program Files\Google\Chrome\Application\chrome.exe
  42. C:\Program Files\Google\Chrome\Application\chrome.exe
  43. F:\Piranti Lunak\Security & Anti Virus\DDS Tool\dds.scr
  44. C:\WINDOWS\System32\svchost.exe -k netsvcs
  45. C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
  46. C:\WINDOWS\system32\svchost.exe -k NetworkService
  47. C:\WINDOWS\system32\svchost.exe -k LocalService
  48. C:\WINDOWS\system32\svchost.exe -k imgsvc
  49. .
  50. ============== Pseudo HJT Report ===============
  51. .
  52. uStart Page = hxxp://www.google.com/
  53. uInternet Connection Wizard,ShellNext = iexplore
  54. mWinlogon: SfcDisable=-99 (0xffffff9d)
  55. BHO: DAPHelper Class: {0000cc75-acf3-4cac-a0a9-dd3868e06852} - c:\program files\dap\DAPBHO.dll
  56. BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
  57. BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
  58. BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
  59. BHO: WebMoneyAdvisorBHO: {e7d2cb77-6e2d-4c1f-b485-d50506b9fa6b} - c:\program files\webmoney advisor\2.2.4\wmadvisor.dll
  60. BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
  61. TB: Easy-WebPrint: {327c2873-e90d-4c37-aa9d-10ac9baba46c} - c:\program files\canon\easy-webprint\Toolband.dll
  62. TB: WebMoney Advisor: {405dfeae-1d2f-4649-be08-c92313c3e1ce} - c:\program files\webmoney advisor\2.2.4\wmadvisor.dll
  63. TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
  64. EB: Groove Folder Synchronization: {2a541ae1-5bf6-4665-a8a3-cfa9672e4291} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
  65. uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\Wcescomm.exe"
  66. uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
  67. uRun: [Gaus.Launcher] c:\program files\gaus24\gaus.client\Gaus.Launcher.exe
  68. uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\nero\lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
  69. mRun: [TWCU] "c:\program files\tp-link\twcu\TWCU.exe" -nogui
  70. mRun: [SoundMAXPnP] c:\program files\analog devices\soundmax\SMax4PNP.exe
  71. mRun: [PrintDisp] c:\windows\system32\PrintDisp.exe
  72. mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
  73. mRun: [wmagent.exe] "c:\program files\webmoney agent\wmagent.exe"
  74. mRun: [Gaus.Launcher] c:\program files\gaus24\gaus.client\Gaus.Launcher.exe
  75. mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
  76. mRun: [NeroFilterCheck] c:\program files\common files\nero\lib\NeroCheck.exe
  77. mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
  78. dRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
  79. IE: {669695BC-A811-4A9D-8CDF-BA8C795F261C} - c:\progra~1\dap\DAP.EXE
  80. IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
  81. IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
  82. IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~1\office12\ONBttnIE.dll
  83. IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\mi3aa1~1\INetRepl.dll
  84. IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\mi3aa1~1\INetRepl.dll
  85. IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~1\office12\REFIEBAR.DLL
  86. Trusted Zone: capitaller.ru
  87. Trusted Zone: enum.ru
  88. Trusted Zone: enum.ru\www
  89. Trusted Zone: exchanger.ru
  90. Trusted Zone: google.co.id\www
  91. Trusted Zone: megastock.com
  92. Trusted Zone: megastock.ru
  93. Trusted Zone: paymer.com
  94. Trusted Zone: softactivation.com
  95. Trusted Zone: telepat.ru
  96. Trusted Zone: webmoney.ru
  97. Trusted Zone: webmoney.ru\security
  98. Trusted Zone: wmcert.com
  99. Trusted Zone: wmkeeper.com
  100. Trusted Zone: wmtransfer.com
  101. DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
  102. DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
  103. DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
  104. TCP: Interfaces\{F2FD10BA-07F9-4EDF-8F02-8E8A8FE005D5} : NameServer = 10.0.28.18 10.0.18.42
  105. Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
  106. Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
  107. Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\progra~1\dap\dapie.dll
  108. Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\progra~1\dap\dapie.dll
  109. Name-Space Handler: HTTPS\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\progra~1\dap\dapie.dll
  110. Notify: igfxcui - igfxdev.dll
  111. SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
  112. STS: IE Component Categories cache daemon: {553858a7-4922-4e7e-b1c1-97140c1c16ef} - c:\windows\system32\ieframe.dll
  113. SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
  114. .
  115. ================= FIREFOX ===================
  116. .
  117. FF - ProfilePath - c:\documents and settings\administrator\application data\mozilla\firefox\profiles\ofh1d420.default\
  118. FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2790392&SearchSource=3&q={searchTerms}
  119. FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com
  120. FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=panda&type=PCAFSI1190&p=
  121. FF - prefs.js: network.proxy.ftp - 193.252.219.44
  122. FF - prefs.js: network.proxy.ftp_port - 3128
  123. FF - prefs.js: network.proxy.http - 193.252.219.44
  124. FF - prefs.js: network.proxy.http_port - 3128
  125. FF - prefs.js: network.proxy.socks - 193.252.219.44
  126. FF - prefs.js: network.proxy.socks_port - 3128
  127. FF - prefs.js: network.proxy.ssl - 193.252.219.44
  128. FF - prefs.js: network.proxy.ssl_port - 3128
  129. FF - prefs.js: network.proxy.type - 1
  130. FF - component: c:\program files\mozilla firefox\extensions\{ab2ce124-6272-4b12-94a9-7303c7397bd1}\components\SkypeFfComponent.dll
  131. FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
  132. FF - plugin: c:\program files\common files\research in motion\bbwebsllauncher\NPWebSLLauncher.dll
  133. FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
  134. FF - plugin: c:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll
  135. FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
  136. FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
  137. FF - plugin: c:\program files\mozilla firefox\plugins\npwachk.dll
  138. FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_2_202_233.dll
  139. .
  140. ---- FIREFOX POLICIES ----
  141. FF - user.js: network.http.max-persistent-connections-per-server - 4
  142. FF - user.js: nglayout.initialpaint.delay - 600
  143. FF - user.js: content.notify.interval - 600000
  144. FF - user.js: content.max.tokenizing.time - 1800000
  145. FF - user.js: content.switch.threshold - 600000
  146. FF - user.js: network.http.max-connections-per-server - 8
  147. FF - user.js: browser.blink_allowed - true
  148. FF - user.js: network.prefetch-next - true
  149. FF - user.js: layout.spellcheckDefault - 1
  150. FF - user.js: browser.search.openintab - false
  151. FF - user.js: browser.tabs.closeButtons - 1
  152. FF - user.js: browser.tabs.opentabfor.middleclick - true
  153. FF - user.js: browser.tabs.tabMinWidth - 100
  154. .
  155. ============= SERVICES / DRIVERS ===============
  156. .
  157. R? AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service
  158. R? clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86
  159. R? gupdate1cafbbff1d5c748;Google
  160. R? gupdatem;Google Update Service (gupdatem)
  161. R? HH9Help.sys;HH9Help.sys
  162. R? s1018bus;Sony Ericsson Device 1018 driver (WDM)
  163. R? s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter
  164. R? s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver
  165. R? s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM)
  166. R? s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS)
  167. R? s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface
  168. R? s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM)
  169. R? smierrsm32;WMI SNMP MIB Compiler Semantic Error Messages
  170. R? Sony Ericsson PCCompanion;Sony Ericsson PCCompanion
  171. R? SwitchBoard;SwitchBoard
  172. R? VQ680;VQ680 4 in 1 Digital Camera
  173. R? VQ680BLK;%PA7333I.SvcDesc%
  174. R? WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0
  175. S? AntiVirSchedulerService;Avira Scheduler
  176. S? AntiVirService;Avira Realtime Protection
  177. S? Ast Service;Ast Service
  178. S? avgntflt;avgntflt
  179. S? avkmgr;avkmgr
  180. S? Printer Control;Printer Control
  181. S? VC9SecS;Virtual CD v9 Management Service
  182. S? vdrv9000;vdrv9000
  183. .
  184. =============== Created Last 30 ================
  185. .
  186. 2012-05-02 09:16:12 -------- d-----w- c:\windows\system32\NtmsData
  187. 2012-05-02 09:13:15 -------- d-----w- c:\documents and settings\administrator\application data\Avira
  188. 2012-05-02 09:07:33 74640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
  189. 2012-05-02 09:07:33 36000 ----a-w- c:\windows\system32\drivers\avkmgr.sys
  190. 2012-05-02 09:07:32 -------- d-----w- c:\program files\Avira
  191. 2012-05-02 09:07:32 -------- d-----w- c:\documents and settings\all users\application data\Avira
  192. 2012-05-02 04:05:45 -------- d-----w- c:\documents and settings\administrator\local settings\application data\Ahead
  193. 2012-05-02 04:05:38 -------- d-----w- c:\program files\NeroInstall.bak
  194. 2012-05-01 15:31:29 0 ----a-w- c:\windows\system32\asr_71111.exe
  195. 2012-04-24 15:46:31 0 ----a-w- c:\windows\system32\asr_37063.exe
  196. 2012-04-24 15:34:26 0 ----a-w- c:\windows\system32\asr_34286.exe
  197. .
  198. ==================== Find3M ====================
  199. .
  200. 2012-04-22 10:35:33 0 ----a-w- c:\windows\system32\asr_46208.exe
  201. 2012-04-19 04:18:10 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
  202. 2012-04-19 04:18:10 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
  203. 2008-10-06 20:41:56 7746928 ----a-w- c:\program files\Adobe DNG Converter.exe
  204. .
  205. ============= FINISH: 9:37:03.95 ===============
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!