DDS (Ver_10-03-17.01) - NTFSx86 Run by Kolton at 2:11:52.25 on Sat 09/25/2010 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.503.108 [GMT -5:00] FW: McAfee Personal Firewall Plus *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8} ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe svchost.exe C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe C:\WINDOWS\system32\igfxsrvc.exe C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe C:\WINDOWS\stsystra.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Dell Support\DSAgnt.exe svchost.exe C:\WINDOWS\eHome\ehRecvr.exe C:\Program Files\Digital Line Detect\DLG.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\WINDOWS\system32\dllhost.exe C:\Documents and Settings\Kolton\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Kolton\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Kolton\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfConsole.exe C:\PROGRA~1\McAfee.com\PERSON~1\mvtx.exe C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe C:\Documents and Settings\Kolton\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Kolton\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Kolton\My Documents\Downloads\dds.scr ============== Pseudo HJT Report =============== uStart Page = hxxp://www.dell4me.com/myway uSearch Bar = hxxp://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/myway BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 6.0\reader\activex\AcroIEHelper.dll BHO: : {4d25f921-b9fe-4682-bf72-8ab8210d6d75} - c:\program files\mywaysa\srchasde\deSrcAs.dll BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll TB: McAfee VirusScan: {ba52b914-b692-46c4-b683-905236f6f655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll uRun: [ModemOnHold] c:\program files\netwaiting\netWaiting.exe uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [DellSupport] "c:\program files\dell support\DSAgnt.exe" /startup uRun: [Google Update] "c:\documents and settings\kolton\local settings\application data\google\update\GoogleUpdate.exe" /c mRun: [ehTray] c:\windows\ehome\ehtray.exe mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [igfxtray] c:\windows\system32\igfxtray.exe mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe mRun: [igfxpers] c:\windows\system32\igfxpers.exe mRun: [SunJavaUpdateSched] c:\program files\java\j2re1.4.2_03\bin\jusched.exe mRun: [] mRun: [IntelWireless] c:\program files\intel\wireless\bin\ifrmewrk.exe /tf Intel PROSet/Wireless mRun: [SigmatelSysTrayApp] stsystra.exe mRun: [Dell QuickSet] c:\program files\dell\quickset\quickset.exe mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe" mRun: [RealTray] c:\program files\real\realplayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [QBReminderFlash] "c:\program files\intuit\quickbooks 2005\atom\QBReminder.exe" mRun: [dla] c:\windows\system32\dla\tfswctrl.exe mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start mRun: [VSOCheckTask] "c:\progra~1\mcafee.com\vso\mcmnhdlr.exe" /checktask mRun: [MCAgentExe] c:\progra~1\mcafee.com\agent\mcagent.exe mRun: [MCUpdateExe] c:\progra~1\mcafee.com\agent\mcupdate.exe mRun: [BuildBU] c:\dell\bldbubg.exe mRun: [VirusScan Online] c:\progra~1\mcafee.com\vso\mcvsshld.exe mRun: [MPFExe] c:\progra~1\mcafee.com\person~1\MpfTray.exe mRun: [DellHelp] c:\dell\dellhelp\DellHelp.exe /c StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - hxxp://download.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,90/mcinsctl.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - hxxp://download.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,23/mcgdmgr.cab DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab Notify: igfxcui - igfxdev.dll Notify: IntelWireless - c:\program files\intel\wireless\bin\LgNotify.dll ============= SERVICES / DRIVERS =============== R1 MPFIREWL;MPFIREWL;c:\windows\system32\drivers\MpFirewall.sys [2005-11-12 83325] R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328] R3 NaiFiltr;NaiFiltr;c:\windows\system32\drivers\NaiFiltr.sys [2005-11-12 23296] S2 MCVSRte;McAfee.com VirusScan Online Realtime Engine;c:\progra~1\mcafee.com\vso\mcvsrte.exe [2005-11-12 122880] S3 McShield;McAfee.com McShield;c:\progra~1\mcafee.com\vso\mcshield.exe [2005-11-12 225375] S3 mcupdmgr.exe;McAfee SecurityCenter Update Manager;c:\progra~1\mcafee.com\agent\mcupdmgr.exe [2005-11-12 249856] =============== Created Last 30 ================ 2010-09-25 07:11:31 0 ----a-w- c:\documents and settings\kolton\defogger_reenable 2010-09-25 06:31:40 0 d-----w- c:\program files\TrendMicro 2010-09-25 03:40:56 0 d-sh--w- c:\documents and settings\kolton\PrivacIE 2010-09-25 03:00:39 0 d-----w- c:\windows\system32\scripting 2010-09-25 03:00:38 0 d-----w- c:\windows\l2schemas 2010-09-25 03:00:37 0 d-----w- c:\windows\system32\en 2010-09-25 03:00:36 0 d-----w- c:\windows\system32\bits 2010-09-25 02:53:17 0 d-----w- c:\windows\network diagnostic 2010-09-25 02:51:16 4128 ----a-w- C:\INFCACHE.1 2010-09-25 02:27:58 0 d-----w- c:\program files\common files\SWF Studio 2010-09-25 02:11:25 0 d-sh--w- c:\documents and settings\kolton\IETldCache 2010-09-25 02:03:58 10240 ------w- c:\windows\system32\drivers\sffp_mmc.sys 2010-09-25 02:02:40 397312 ------w- c:\windows\system32\mmcex.dll 2010-09-25 01:55:36 0 d-----w- c:\program files\MSXML 4.0 2010-09-25 01:53:11 0 d-----w- c:\windows\ie8updates 2010-09-25 01:52:11 12800 ------w- c:\windows\system32\dllcache\xpshims.dll 2010-09-25 01:52:09 599040 ------w- c:\windows\system32\dllcache\msfeeds.dll 2010-09-25 01:52:09 55296 ------w- c:\windows\system32\dllcache\msfeedsbs.dll 2010-09-25 01:52:06 247808 ------w- c:\windows\system32\dllcache\ieproxy.dll 2010-09-25 01:52:06 1986560 ------w- c:\windows\system32\dllcache\iertutil.dll 2010-09-25 01:52:03 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll 2010-09-25 01:52:03 11077120 ------w- c:\windows\system32\dllcache\ieframe.dll 2010-09-25 01:48:39 0 dc-h--w- c:\windows\ie8 2010-09-25 01:42:07 0 d-----w- C:\87275a5ac5773b1476cb112936823d5b 2010-09-25 01:41:04 0 d-----w- c:\windows\ServicePackFiles 2010-09-25 01:29:46 744448 ------w- c:\windows\system32\dllcache\helpsvc.exe 2010-09-25 01:27:31 455680 ------w- c:\windows\system32\dllcache\mrxsmb.sys 2010-09-25 01:27:24 3558912 ------w- c:\windows\system32\dllcache\moviemk.exe 2010-09-25 01:27:03 354304 ------w- c:\windows\system32\dllcache\srv.sys 2010-09-25 01:25:37 81920 ------w- c:\windows\system32\dllcache\fontsub.dll 2010-09-25 01:25:37 119808 ------w- c:\windows\system32\dllcache\t2embed.dll 2010-09-25 01:25:21 471552 ------w- c:\windows\system32\dllcache\aclayers.dll 2010-09-25 01:23:08 153088 ------w- c:\windows\system32\dllcache\triedit.dll 2010-09-25 01:21:23 128512 ------w- c:\windows\system32\dllcache\dhtmled.ocx 2010-09-25 01:20:19 0 d-----w- c:\windows\system32\LogFiles 2010-09-25 01:20:06 0 d-----w- c:\docume~1\kolton\applic~1\McAfee.com Personal Firewall 2010-09-25 01:19:11 0 d-----w- c:\docume~1\kolton\applic~1\Intel 2010-09-25 01:17:55 337408 ------w- c:\windows\system32\dllcache\netapi32.dll 2010-09-25 01:17:48 331776 ------w- c:\windows\system32\dllcache\msadce.dll 2010-09-25 01:17:02 2066432 ------w- c:\windows\system32\dllcache\mstscax.dll 2010-09-25 01:16:29 1172480 ------w- c:\windows\system32\dllcache\msxml3.dll 2010-09-25 01:16:20 8192 ----a-w- c:\windows\REGLOCS.OLD 2010-09-25 01:16:09 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys 2010-09-25 01:16:04 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys 2010-09-25 01:15:59 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2010-09-25 01:15:27 272128 ------w- c:\windows\system32\drivers\bthport.sys 2010-09-25 01:15:27 272128 ------w- c:\windows\system32\dllcache\bthport.sys 2010-09-25 01:15:22 203136 ------w- c:\windows\system32\dllcache\rmcast.sys 2010-09-25 01:15:00 23040 ------w- c:\windows\kb913800.exe 2010-09-25 01:13:02 5120 ----a-w- c:\windows\system32\xpsp4res.dll 2010-09-25 01:13:01 1206508 ------w- c:\windows\system32\dllcache\sysmain.sdb 2010-09-25 01:12:58 215552 ------w- c:\windows\system32\dllcache\wordpad.exe 2010-09-25 01:03:01 0 d-----w- c:\windows\system32\PreInstall 2010-09-25 00:58:18 0 d-s---w- c:\documents and settings\kolton\UserData 2010-09-25 00:23:43 0 d-----w- c:\windows\system32\appmgmt 2010-09-25 00:23:05 2 ----a-w- c:\windows\msoffice.ini 2010-09-25 00:20:38 0 d-----w- c:\windows\system32\SoftwareDistribution ==================== Find3M ==================== 2010-08-17 13:17:06 58880 ----a-w- c:\windows\system32\spoolsv.exe 2010-08-17 13:17:06 58880 ------w- c:\windows\system32\dllcache\spoolsv.exe 2010-07-27 06:30:35 8462336 ------w- c:\windows\system32\dllcache\shell32.dll 2010-07-22 15:49:15 590848 ----a-w- c:\windows\system32\rpcrt4.dll 2010-07-22 15:49:15 590848 ------w- c:\windows\system32\dllcache\rpcrt4.dll 2010-06-30 12:31:35 149504 ----a-w- c:\windows\system32\schannel.dll 2010-06-30 12:31:35 149504 ------w- c:\windows\system32\dllcache\schannel.dll ============= FINISH: 2:12:33.15 ===============