6 replies to this topic

[quilter]

About two weeks ago I noticed when I would log in to facebook the page would not show correct. I did a system restore and that fixed the problem. Today the same thing. I could have picked up something and hope someone can take a look. Here are the required logs.

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6282

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

4/5/2011 7:49:01 PM
mbam-log-2011-04-05 (19-49-01).txt

Scan type: Quick scan
Objects scanned: 152063
Time elapsed: 3 minute(s), 57 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

GMER 1.0.15.15570 - http://www.gmer.net
Rootkit scan 2011-04-05 20:44:51
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 FUJITSU_MHV2080BH rev.00850028
Running: bmizu2f3.exe; Driver: C:\DOCUME~1\Tom\LOCALS~1\Temp\pxtdypod.sys


---- System - GMER 1.0.15 ----

SSDT \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SASKUTIL.SYS/SUPERAdBlocker.com and SUPERAntiSpyware.com) ZwTerminateProcess [0xAA33A620]

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\Program Files\Skype\Phone\Skype.exe[244] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtCreateFile] [00352F20] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Skype\Phone\Skype.exe[244] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDeviceIoControlFile] [00352C90] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Skype\Phone\Skype.exe[244] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtClose] [00352CF0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Skype\Phone\Skype.exe[244] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDuplicateObject] [00352CC0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\WINDOWS\Explorer.EXE[396] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtCreateFile] [018C2F20] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\WINDOWS\Explorer.EXE[396] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDeviceIoControlFile] [018C2C90] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\WINDOWS\Explorer.EXE[396] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtClose] [018C2CF0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\WINDOWS\Explorer.EXE[396] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDuplicateObject] [018C2CC0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe[3088] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtCreateFile] [01132F20] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe[3088] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDeviceIoControlFile] [01132C90] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe[3088] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtClose] [01132CF0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe[3088] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDuplicateObject] [01132CC0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[4080] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtCreateFile] [01332F20] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[4080] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDeviceIoControlFile] [01332C90] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[4080] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtClose] [01332CF0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[4080] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDuplicateObject] [01332CC0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

Device mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation)
Device A800CD20

AttachedDevice fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)
Device \FileSystem\Cdfs \Cdfs tfsnifs.sys (Drive Letter Access Component/Sonic Solutions)

---- EOF - GMER 1.0.15 ----


.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 2/18/2010 7:58:11 PM
System Uptime: 4/5/2011 6:26:20 AM (14 hours ago)
.
Motherboard: Dell Inc. | | 0KD882
Processor: Genuine Intel® CPU T2050 @ 1.60GHz | Microprocessor | 1324/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 68 GiB total, 51.589 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP139: 1/6/2011 6:40:12 AM - Software Distribution Service 3.0
RP140: 1/6/2011 8:44:13 AM - Software Distribution Service 3.0
RP141: 1/7/2011 9:38:58 AM - System Checkpoint
RP142: 1/8/2011 7:12:34 AM - Software Distribution Service 3.0
RP143: 1/9/2011 7:44:19 AM - Software Distribution Service 3.0
RP144: 1/10/2011 6:49:27 AM - Software Distribution Service 3.0
RP145: 1/11/2011 7:02:41 AM - Software Distribution Service 3.0
RP146: 1/12/2011 7:18:35 AM - Software Distribution Service 3.0
RP147: 1/12/2011 8:45:25 PM - Software Distribution Service 3.0
RP148: 1/14/2011 6:55:31 AM - Software Distribution Service 3.0
RP149: 1/15/2011 8:08:52 AM - Software Distribution Service 3.0
RP150: 1/16/2011 8:34:22 AM - System Checkpoint
RP151: 1/16/2011 10:35:18 AM - Software Distribution Service 3.0
RP152: 1/16/2011 7:03:01 PM - Software Distribution Service 3.0
RP153: 1/17/2011 7:19:54 PM - System Checkpoint
RP154: 1/18/2011 5:56:46 AM - Software Distribution Service 3.0
RP155: 1/19/2011 6:44:33 AM - Software Distribution Service 3.0
RP156: 1/20/2011 7:05:29 AM - System Checkpoint
RP157: 1/20/2011 8:03:07 PM - Software Distribution Service 3.0
RP158: 1/21/2011 8:36:04 PM - System Checkpoint
RP159: 1/22/2011 7:41:25 AM - Software Distribution Service 3.0
RP160: 1/23/2011 7:45:43 AM - System Checkpoint
RP161: 1/24/2011 6:23:50 AM - Software Distribution Service 3.0
RP162: 1/25/2011 6:39:01 AM - Software Distribution Service 3.0
RP163: 1/26/2011 7:10:04 AM - Software Distribution Service 3.0
RP164: 1/26/2011 7:14:48 AM - Software Distribution Service 3.0
RP165: 1/26/2011 7:28:55 AM - Software Distribution Service 3.0
RP166: 1/27/2011 6:10:34 PM - Software Distribution Service 3.0
RP167: 1/28/2011 7:27:18 PM - System Checkpoint
RP168: 1/29/2011 7:56:57 AM - Software Distribution Service 3.0
RP169: 1/30/2011 7:59:19 AM - System Checkpoint
RP170: 1/30/2011 11:08:13 AM - Software Distribution Service 3.0
RP171: 1/31/2011 6:23:23 PM - Software Distribution Service 3.0
RP172: 2/1/2011 7:07:17 PM - System Checkpoint
RP173: 2/2/2011 6:39:34 AM - Software Distribution Service 3.0
RP174: 2/3/2011 12:57:18 PM - Software Distribution Service 3.0
RP175: 2/4/2011 1:33:02 PM - System Checkpoint
RP176: 2/5/2011 7:59:27 AM - Software Distribution Service 3.0
RP177: 2/6/2011 8:13:57 AM - System Checkpoint
RP178: 2/7/2011 6:53:18 AM - Software Distribution Service 3.0
RP179: 2/8/2011 7:30:26 AM - System Checkpoint
RP180: 2/8/2011 11:16:26 AM - Software Distribution Service 3.0
RP181: 2/9/2011 1:19:53 PM - System Checkpoint
RP182: 2/9/2011 8:46:45 PM - Software Distribution Service 3.0
RP183: 2/10/2011 6:21:42 AM - Software Distribution Service 3.0
RP184: 2/11/2011 7:03:43 AM - Software Distribution Service 3.0
RP185: 2/12/2011 7:47:20 AM - System Checkpoint
RP186: 2/13/2011 7:19:53 AM - Software Distribution Service 3.0
RP187: 2/13/2011 5:11:28 PM - Software Distribution Service 3.0
RP188: 2/14/2011 5:21:05 PM - System Checkpoint
RP189: 2/15/2011 6:13:53 AM - Software Distribution Service 3.0
RP190: 2/16/2011 6:41:26 AM - Software Distribution Service 3.0
RP191: 2/17/2011 6:59:58 AM - System Checkpoint
RP192: 2/18/2011 7:33:36 AM - Software Distribution Service 3.0
RP193: 2/19/2011 9:00:31 AM - System Checkpoint
RP194: 2/20/2011 7:03:33 AM - Software Distribution Service 3.0
RP195: 2/21/2011 2:31:39 PM - Software Distribution Service 3.0
RP196: 2/22/2011 2:36:14 PM - System Checkpoint
RP197: 2/23/2011 7:09:37 AM - Software Distribution Service 3.0
RP198: 2/24/2011 8:26:00 AM - System Checkpoint
RP199: 2/25/2011 6:43:39 AM - Software Distribution Service 3.0
RP200: 2/26/2011 7:21:29 AM - Software Distribution Service 3.0
RP201: 2/27/2011 7:30:59 AM - System Checkpoint
RP202: 2/28/2011 6:59:01 AM - Software Distribution Service 3.0
RP203: 3/1/2011 7:30:10 AM - System Checkpoint
RP204: 3/2/2011 6:39:47 AM - Software Distribution Service 3.0
RP205: 3/3/2011 6:58:58 AM - Software Distribution Service 3.0
RP206: 3/4/2011 7:18:22 AM - Software Distribution Service 3.0
RP207: 3/5/2011 7:18:46 AM - System Checkpoint
RP208: 3/6/2011 6:32:15 AM - Software Distribution Service 3.0
RP209: 3/7/2011 6:42:22 AM - Software Distribution Service 3.0
RP210: 3/8/2011 7:01:27 AM - System Checkpoint
RP211: 3/8/2011 6:38:04 PM - Software Distribution Service 3.0
RP212: 3/9/2011 10:00:17 AM - Software Distribution Service 3.0
RP213: 3/10/2011 7:15:50 AM - Software Distribution Service 3.0
RP214: 3/11/2011 8:22:36 AM - System Checkpoint
RP215: 3/12/2011 6:58:28 AM - Software Distribution Service 3.0
RP216: 3/13/2011 8:00:06 AM - Software Distribution Service 3.0
RP217: 3/14/2011 8:58:30 AM - System Checkpoint
RP218: 3/15/2011 6:37:53 AM - Software Distribution Service 3.0
RP219: 3/16/2011 7:07:09 AM - System Checkpoint
RP220: 3/16/2011 10:00:16 AM - Software Distribution Service 3.0
RP221: 3/16/2011 10:29:22 AM - Software Distribution Service 3.0
RP222: 3/17/2011 10:52:49 AM - System Checkpoint
RP223: 3/18/2011 6:40:46 AM - Software Distribution Service 3.0
RP224: 3/19/2011 7:09:12 AM - Software Distribution Service 3.0
RP225: 3/20/2011 7:44:21 AM - Installed Java™ 6 Update 24
RP226: 3/20/2011 7:49:05 AM - Software Distribution Service 3.0
RP227: 3/21/2011 8:10:10 AM - System Checkpoint
RP228: 3/21/2011 8:20:14 PM - Software Distribution Service 3.0
RP229: 3/22/2011 7:21:36 PM - Restore Operation
RP230: 3/22/2011 7:47:05 PM - Software Distribution Service 3.0
RP231: 3/22/2011 8:25:08 PM - Software Distribution Service 3.0
RP232: 3/23/2011 2:29:02 PM - Installed Java™ 6 Update 24
RP233: 3/23/2011 8:41:43 PM - Software Distribution Service 3.0
RP234: 3/24/2011 6:35:27 AM - Software Distribution Service 3.0
RP235: 3/25/2011 7:04:29 AM - System Checkpoint
RP236: 3/25/2011 7:40:34 PM - Software Distribution Service 3.0
RP237: 3/27/2011 6:55:57 AM - Software Distribution Service 3.0
RP238: 3/28/2011 7:00:26 AM - System Checkpoint
RP239: 3/29/2011 6:40:07 AM - Software Distribution Service 3.0
RP240: 3/30/2011 6:53:14 AM - Software Distribution Service 3.0
RP241: 3/31/2011 7:02:42 AM - System Checkpoint
RP242: 3/31/2011 6:09:34 PM - Software Distribution Service 3.0
RP243: 4/1/2011 6:37:19 PM - System Checkpoint
RP244: 4/2/2011 6:35:37 AM - Software Distribution Service 3.0
RP245: 4/3/2011 7:58:12 AM - Software Distribution Service 3.0
RP246: 4/4/2011 8:34:33 AM - System Checkpoint
RP247: 4/5/2011 6:38:48 AM - Software Distribution Service 3.0
.
==== Installed Programs ======================
.
7-Zip 4.65
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.4.3
Apple Application Support
Apple Software Update
Autodesk MapGuide® Viewer ActiveX Control Release 6.5
Broadcom Management Programs
CCleaner
ClearType Tuning Control Panel Applet
Conexant HDA D110 MDC V.92 Modem
Dell Digital Jukebox Driver
Dell Game Console
Dell Support 3.1
Dell System Restore
Digital Content Portal
Digital Line Detect
Documentation & Support Launcher
EducateU
ESPNMotion
Games, Music, & Photos Launcher
GemMaster Mystic
Google Chrome
High Definition Audio Driver Package - KB835221
HijackThis 2.0.2
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
Intel® Graphics Media Accelerator Driver
Intel® Processor ID Utility
Intel® PROSet/Wireless Software
Internal Network Card Power Management
Java Auto Updater
Java™ 6 Update 24
Learn2 Player (Uninstall Only)
Logitech Vid
Logitech Webcam Software
Logitech Webcam Software Driver Package
Malwarebytes' Anti-Malware
mCore
mDrWiFi
mHlpDell
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Security Client
Microsoft Security Essentials
mIWA
mLogView
mMHouse
Modem Helper
mPfMgr
mPfWiz
mProSafe
MSN
mSSO
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Musicmatch for Windows Media Player
Musicmatch® Jukebox
mWlsSafe
mWMI
mXML
mZConfig
Otto
PowerDVD 5.7
Quick Startup 2.8.0.718
QuickSet
QuickTime
RealPlayer Basic
Secunia PSI (2.0.0.1003)
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Segoe UI
Skype Toolbars
Skype™ 5.0
SnagIt 7
Sonic DLA
Sonic Encoders
Sonic MyDVD LE
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
SpywareBlaster 4.3
SUPERAntiSpyware
Synaptics Pointing Device Driver
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB978506)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows Media Player 10 (KB910393)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB961503)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update for Windows XP (KB978207)
Update Rollup 2 for Windows XP Media Center Edition 2005
Viewpoint Media Player
WebFldrs XP
WildTangent Web Driver
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 8
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Format Runtime
Windows Media Player 10
Windows Media Player 10 Hotfix [See EmeraldQFE2 for more information]
Windows XP Media Center Edition 2005 KB2502898
Windows XP Media Center Edition 2005 KB908246
Windows XP Media Center Edition 2005 KB912067
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3
WOT for Internet Explorer
.
==== Event Viewer Messages From Past Week ========
.
4/5/2011 8:01:23 PM, error: atapi [9] - The device, \Device\Ide\IdePort0, did not respond within the timeout period.
4/1/2011 2:28:42 PM, error: Service Control Manager [7034] - The Secunia Update Agent service terminated unexpectedly. It has done this 1 time(s).
4/1/2011 2:28:42 PM, error: Service Control Manager [7034] - The Secunia PSI Agent service terminated unexpectedly. It has done this 1 time(s).
4/1/2011 2:28:42 PM, error: Service Control Manager [7034] - The Process Monitor service terminated unexpectedly. It has done this 1 time(s).
4/1/2011 2:28:42 PM, error: Service Control Manager [7034] - The NICCONFIGSVC service terminated unexpectedly. It has done this 1 time(s).
4/1/2011 2:28:42 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
4/1/2011 2:28:42 PM, error: Service Control Manager [7034] - The Intel® PROSet/Wireless Registry Service service terminated unexpectedly. It has done this 1 time(s).
4/1/2011 2:28:40 PM, error: Service Control Manager [7034] - The Intel® PROSet/Wireless SSO Service service terminated unexpectedly. It has done this 1 time(s).
4/1/2011 2:28:40 PM, error: Service Control Manager [7034] - The Intel® PROSet/Wireless Service service terminated unexpectedly. It has done this 1 time(s).
4/1/2011 2:28:40 PM, error: Service Control Manager [7034] - The Intel® PROSet/Wireless Event Log service terminated unexpectedly. It has done this 1 time(s).
4/1/2011 2:28:40 PM, error: Service Control Manager [7031] - The Microsoft Antimalware Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 15000 milliseconds: Restart the service.
3/31/2011 5:57:21 PM, error: Service Control Manager [7023] - The HID Input Service service terminated with the following error: The specified module could not be found.
3/30/2011 6:26:41 AM, error: Dhcp [1002] - The IP address lease 192.168.1.100 for the Network Card with network address 001302E06B93 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
.
==== End Of File ===========================

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Tom at 20:54:03.05 on Tue 04/05/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.220 [GMT -5:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Secunia\PSI\PSIA.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Secunia\PSI\psi_tray.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Secunia\PSI\sua.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Tom\Desktop\dds.scr
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://yahoo.com/
BHO: HelperObject Class: {00c6482d-c502-44c8-8409-fce54ad9c208} - c:\program files\techsmith\snagit 7\SnagItBHO.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - c:\program files\wot\WOT.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - c:\program files\wot\WOT.dll
TB: SnagIt: {8ff5e183-abde-46eb-b09e-d2aab95cabe3} - c:\program files\techsmith\snagit 7\SnagItIEAddin.dll
TB: {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No File
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [IntelZeroConfig] "c:\program files\intel\wireless\bin\ZCfgSvc.exe"
mRun: [IntelWireless] "c:\program files\intel\wireless\bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\logitech webcam software\LWS.exe" /hide
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\secuni~1.lnk - c:\program files\secunia\psi\psi_tray.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
Trusted Zone: musicmatch.com\online
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1266545719656
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} - hxxps://secure.logmein.com/activex/ractrl.cab?lmi=100
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: igfxcui - igfxdev.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
============= SERVICES / DRIVERS ===============
.
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2009-12-2 165264]
R1 MpKslbf7822dd;MpKslbf7822dd;c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a01672e0-8f0d-45ac-b2d1-1b342b192215}\MpKslbf7822dd.sys [2011-4-5 28752]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67656]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\secunia\psi\psia.exe [2010-12-21 987704]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\secunia\psi\sua.exe [2010-12-21 399416]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [2010-9-1 15544]
S3 DCamUSBVeo532;Veo Web Camera;c:\windows\system32\drivers\ubVeo532.sys [2010-6-14 95232]
S4 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
.
=============== Created Last 30 ================
.
2011-04-05 11:39:29 28752 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{a01672e0-8f0d-45ac-b2d1-1b342b192215}\MpKslbf7822dd.sys
2011-04-05 11:38:50 6792528 ----a-w- c:\docume~1\alluse~1\applic~1\microsoft\microsoft antimalware\definition updates\{a01672e0-8f0d-45ac-b2d1-1b342b192215}\mpengine.dll
2011-03-23 00:34:53 -------- d-----w- c:\docume~1\tom\applic~1\GlarySoft
2011-03-23 00:34:51 -------- d-----w- c:\program files\Quick Startup
2011-03-23 00:25:39 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-03-23 00:25:39 -------- d-----w- c:\windows\system32\wbem\Repository
2011-03-20 12:45:31 -------- d-----w- c:\program files\common files\Java(2)
2011-03-12 17:28:40 103864 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
2011-03-08 22:55:23 -------- d-----w- c:\program files\ESET
.
==================== Find3M ====================
.
2011-02-04 22:48:32 456192 ----a-w- c:\windows\system32\encdec.dll
2011-02-04 22:48:30 291840 ----a-w- c:\windows\system32\sbe.dll
2011-02-03 02:40:23 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-03 00:19:39 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-02-02 23:11:20 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-02-02 07:58:35 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-01-27 11:57:06 677888 ----a-w- c:\windows\system32\mstsc.exe
2011-01-21 14:44:37 439296 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09:02 290048 ----a-w- c:\windows\system32\atmfd.dll
.
============= FINISH: 20:54:24.73 ===============

[quilter]

MBRCheck, version 1.2.3
© 2010, AD

Command-line:
Windows Version: Windows XP Professional
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x0000000c

Kernel Drivers (total 155):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E5000 \WINDOWS\system32\hal.dll
0xF7AFD000 \WINDOWS\system32\KDCOM.DLL
0xF7A0D000 \WINDOWS\system32\BOOTVID.dll
0xF74CE000 ACPI.sys
0xF7AFF000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xF74BD000 pci.sys
0xF75FD000 isapnp.sys
0xF7A11000 compbatt.sys
0xF7A15000 \WINDOWS\system32\DRIVERS\BATTC.SYS
0xF7BC5000 pciide.sys
0xF787D000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xF760D000 MountMgr.sys
0xF749E000 ftdisk.sys
0xF7478000 dmio.sys
0xF7885000 PartMgr.sys
0xF761D000 VolSnap.sys
0xF7460000 atapi.sys
0xF762D000 disk.sys
0xF763D000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xF7440000 fltmgr.sys
0xF742E000 sr.sys
0xF7419000 drvmcdb.sys
0xF788D000 PxHelp20.sys
0xF7402000 KSecDD.sys
0xF7375000 Ntfs.sys
0xF7348000 NDIS.sys
0xF764D000 ohci1394.sys
0xF765D000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
0xF732E000 Mup.sys
0xF767D000 \SystemRoot\system32\DRIVERS\nic1394.sys
0xF6ADD000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xF7ACD000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0xF68FF000 \SystemRoot\system32\DRIVERS\ialmnt5.sys
0xF68EB000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xF68C3000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xF6766000 \SystemRoot\system32\DRIVERS\w39n51.sys
0xF7915000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xF6742000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xF791D000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xF6ACD000 \SystemRoot\system32\DRIVERS\bcm4sbxp.sys
0xF672E000 \SystemRoot\system32\DRIVERS\sdbus.sys
0xF7925000 \SystemRoot\system32\DRIVERS\rimmptsk.sys
0xF6ABD000 \SystemRoot\system32\DRIVERS\rimsptsk.sys
0xF66E2000 \SystemRoot\system32\DRIVERS\rixdptsk.sys
0xF6AAD000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xF668B000 \SystemRoot\system32\DRIVERS\SynTP.sys
0xF7B1D000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xF792D000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xF7935000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xF6A9D000 \SystemRoot\system32\DRIVERS\imapi.sys
0xF7B1F000 \SystemRoot\system32\drivers\sscdbhk5.sys
0xF6A8D000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xF6A7D000 \SystemRoot\system32\DRIVERS\redbook.sys
0xF6668000 \SystemRoot\system32\DRIVERS\ks.sys
0xF7C86000 \SystemRoot\system32\DRIVERS\audstub.sys
0xF6A6D000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xF7AE1000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xF6651000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xF6A5D000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xF6A4D000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xF793D000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xF6640000 \SystemRoot\system32\DRIVERS\psched.sys
0xF769D000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xF7945000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xF794D000 \SystemRoot\system32\DRIVERS\raspti.sys
0xF6610000 \SystemRoot\system32\DRIVERS\rdpdr.sys
0xF76AD000 \SystemRoot\system32\DRIVERS\termdd.sys
0xF7B21000 \SystemRoot\system32\DRIVERS\swenum.sys
0xF65B2000 \SystemRoot\system32\DRIVERS\update.sys
0xF730A000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xF7955000 \SystemRoot\system32\DRIVERS\omci.sys
0xF76CD000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xAA6C8000 \SystemRoot\system32\drivers\sthda.sys
0xAA6A4000 \SystemRoot\system32\drivers\portcls.sys
0xF76ED000 \SystemRoot\system32\drivers\drmk.sys
0xAA672000 \SystemRoot\system32\DRIVERS\HSFHWAZL.sys
0xAA575000 \SystemRoot\system32\DRIVERS\HSF_DPV.sys
0xAA4C5000 \SystemRoot\system32\DRIVERS\HSF_CNXT.sys
0xF7965000 \SystemRoot\System32\Drivers\Modem.SYS
0xF76FD000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xF66DE000 \SystemRoot\System32\Drivers\i2omgmt.SYS
0xAA476000 \SystemRoot\system32\DRIVERS\MpFilter.sys
0xF79A5000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xF7B79000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF7C8E000 \SystemRoot\System32\Drivers\Null.SYS
0xF7B7B000 \SystemRoot\System32\Drivers\Beep.SYS
0xF79B5000 \SystemRoot\system32\drivers\ssrtln.sys
0xF79BD000 \SystemRoot\System32\drivers\vga.sys
0xF7B7D000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF7B7F000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF79C5000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF79CD000 \SystemRoot\System32\Drivers\Npfs.SYS
0xF65A6000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xAA41B000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xAA3C2000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xAA39A000 \SystemRoot\system32\DRIVERS\netbt.sys
0xAA374000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xAA352000 \SystemRoot\System32\drivers\afd.sys
0xF771D000 \SystemRoot\system32\DRIVERS\netbios.sys
0xF772D000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xAA330000 \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
0xF774D000 \SystemRoot\system32\DRIVERS\arp1394.sys
0xF79D5000 \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
0xAA305000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xAA295000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xF775D000 \SystemRoot\System32\Drivers\Fips.SYS
0xF7306000 \SystemRoot\SYSTEM32\DRIVERS\APPDRV.SYS
0xAA4C1000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xF777D000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xF79E5000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xA9BFD000 \SystemRoot\system32\DRIVERS\lvuvc.sys
0xF778D000 \SystemRoot\system32\drivers\usbaudio.sys
0xA9B1D000 \SystemRoot\system32\DRIVERS\lvrs.sys
0xAA4BD000 \SystemRoot\system32\DRIVERS\mouhid.sys
0xF77DD000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xA9B05000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF7B85000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xF66C2000 \SystemRoot\System32\drivers\Dxapi.sys
0xF7A05000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF7C3A000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF020000 \SystemRoot\System32\ialmdnt5.dll
0xBF012000 \SystemRoot\System32\ialmrnt5.dll
0xBF042000 \SystemRoot\System32\ialmdev5.DLL
0xBF077000 \SystemRoot\System32\ialmdd5.DLL
0xA9BCD000 \SystemRoot\system32\drivers\drvnddm.sys
0xF7CCF000 \SystemRoot\system32\dla\tfsndres.sys
0xA99AF000 \SystemRoot\system32\dla\tfsnifs.sys
0xA9AE9000 \SystemRoot\system32\dla\tfsnopio.sys
0xF7BB3000 \SystemRoot\system32\dla\tfsnpool.sys
0xF78BD000 \SystemRoot\system32\dla\tfsnboio.sys
0xA9BBD000 \SystemRoot\system32\dla\tfsncofs.sys
0xF7CD0000 \SystemRoot\system32\dla\tfsndrct.sys
0xA9996000 \SystemRoot\system32\dla\tfsnudf.sys
0xA997D000 \SystemRoot\system32\dla\tfsnudfa.sys
0xF78F5000 \SystemRoot\system32\DRIVERS\AegisP.sys
0xA9A35000 \SystemRoot\system32\DRIVERS\s24trans.sys
0xA9931000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xA95E0000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xF7B4B000 \SystemRoot\System32\Drivers\ASCTRM.SYS
0xA94D7000 \SystemRoot\System32\Drivers\HTTP.sys
0xA942F000 \SystemRoot\system32\DRIVERS\srv.sys
0xA95D0000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys
0xA9302000 \SystemRoot\system32\drivers\wdmaud.sys
0xA9528000 \SystemRoot\system32\drivers\sysaudio.sys
0xF790D000 \SystemRoot\system32\DRIVERS\LVPr2Mon.sys
0xA88B8000 \SystemRoot\system32\DRIVERS\psi_mf.sys
0xF795D000 \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A01672E0-8F0D-45AC-B2D1-1B342B192215}\MpKslbf7822dd.sys
0xA8029000 \??\C:\DOCUME~1\Tom\LOCALS~1\Temp\pxtdypod.sys
0xA8005000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xA808D000 \??\C:\DOCUME~1\Tom\LOCALS~1\Temp\mbr.sys
0xA7E72000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 56):
0 System Idle Process
4 System
812 C:\WINDOWS\system32\smss.exe
860 csrss.exe
884 C:\WINDOWS\system32\winlogon.exe
928 C:\WINDOWS\system32\services.exe
940 C:\WINDOWS\system32\lsass.exe
1132 C:\WINDOWS\system32\svchost.exe
1200 svchost.exe
1364 C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
1404 C:\WINDOWS\system32\svchost.exe
1452 C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
1552 C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
1608 C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe
1660 svchost.exe
1856 svchost.exe
292 C:\WINDOWS\system32\spoolsv.exe
396 C:\WINDOWS\explorer.exe
464 svchost.exe
516 C:\WINDOWS\ehome\ehrecvr.exe
536 C:\WINDOWS\ehome\ehSched.exe
608 C:\Program Files\Java\jre6\bin\jqs.exe
652 C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
692 C:\Program Files\Dell\NicConfigSvc\NicConfigSvc.exe
864 C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
1288 C:\Program Files\Secunia\PSI\psia.exe
320 svchost.exe
740 C:\WINDOWS\system32\svchost.exe
2324 C:\WINDOWS\ehome\ehtray.exe
2336 wmiprvse.exe
2424 C:\WINDOWS\system32\igfxsrvc.exe
2444 C:\WINDOWS\system32\hkcmd.exe
2472 C:\WINDOWS\stsystra.exe
2548 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
2584 C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe
2604 C:\WINDOWS\system32\dllhost.exe
2764 C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe
2780 C:\WINDOWS\system32\igfxpers.exe
2928 alg.exe
3088 C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
3096 C:\WINDOWS\ehome\ehmsas.exe
3280 C:\Program Files\Microsoft Security Client\msseces.exe
3492 C:\Program Files\Common Files\Java\Java Update\jusched.exe
4080 C:\Program Files\Windows Live\Messenger\msnmsgr.exe
172 C:\WINDOWS\system32\ctfmon.exe
244 C:\Program Files\Skype\Phone\Skype.exe
112 C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe
1244 C:\Program Files\Secunia\PSI\psi_tray.exe
3696 C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
792 C:\Program Files\Secunia\PSI\sua.exe
1600 C:\Program Files\Windows Live\Contacts\wlcomm.exe
3452 C:\WINDOWS\system32\wscntfy.exe
3296 C:\Program Files\Internet Explorer\iexplore.exe
1700 C:\Program Files\Internet Explorer\iexplore.exe
3416 C:\Program Files\Internet Explorer\iexplore.exe
4000 C:\Documents and Settings\Tom\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`02738a00 (NTFS)

PhysicalDrive0 Model Number: FUJITSUMHV2080BH, Rev: 00850028

Size Device Name MBR Status
--------------------------------------------
73 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A


Done!

[Broni]

Welcome aboard

Please, observe following rules:

• Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
  
• If you're stuck, or you're not sure about certain step, always ask before doing anything else.
  
• Please refrain from running tools or applying updates other than those I suggest.
  
• Never run more than one scan at a time.
  
• Keep updating me regarding your computer behavior, good, or bad.
  
• The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
  
• If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
  
• I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

==============================================================================================================

MBRCheck log is missing.

Does it happen on Facebook only?
What browser do you use?
Did you try different browser?

So far, your logs look fine.
We'll keep checking, but I need your answers, first.

[quilter]

I posted the logfile MBR. It was just late. I use internet explorer 8. I have not tried another broswer. I think I am clean and I do what you told me before when I posted. I run all the things you mentioned. Only the facebook page is the problem. It is no big deal. Thanks for looking anyway. Jill

[Broni]

Sorry about that :)

Does it happen on Facebook only?
What browser do you use?
Did you try different browser?

[quilter]

I got it fixed Broni. I just reset internet explorer and now it works. Not sure how it got that way but it is now working. Thanks for looking at my logfiles. I thought I might have caught somehthing. The computer works great again. Thanks again. Jill

[Broni]

Good news :)