Any help would be great re virus threats

Posted 11/26/2007 12:32 AM
#56742
User avatar

scorp Member

Date Joined Nov 2016
Total Posts: 2
hi here is the 2 logs i did everything you said thanks for the help


ComboFix 07-11-19.3 - scott new 2007-11-26 11:24:05.1 - [color=red]FAT32[/color]x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.447 [GMT 11:00]
Running from: C:\Documents and Settings\scott new\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Scott\Application Data\Ultimate Cleaner
C:\Documents and Settings\Scott\Application Data\Ultimate Cleaner\settings.dat
C:\Documents and Settings\Scott\Desktop\Find Spyware Remover.lnk
C:\Documents and Settings\Scott\Desktop\Free Online Dating.lnk
C:\Documents and Settings\Scott\Desktop\Go to Casino.lnk
C:\Program Files\FunWebProducts
C:\Program Files\FunWebProducts\Shared\00E53464.dat
C:\Program Files\FunWebProducts\Shared\0F4D1977.dat
C:\Program Files\ucleaner_setup.exe
C:\WINDOWS\Casino.ico
C:\WINDOWS\Free Online Dating.ico
C:\WINDOWS\Spyware Remover.ico

.
((((((((((((((((((((((((( Files Created from 2007-10-26 to 2007-11-26 )))))))))))))))))))))))))))))))
.

2007-11-26 10:39 <DIR> d-------- C:\Documents and Settings\scott new\Application Data\Grisoft
2007-11-26 10:39 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-11-26 10:39 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-11-26 10:36 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Avg7
2007-11-26 10:29 <DIR> d-------- C:\Program Files\CCleaner
2007-11-26 10:02 <DIR> d-------- C:\WINDOWS\LastGood
2007-11-26 01:20 10,240 --a------ C:\WINDOWS\system32\drivers\799A1576-6533-4EE2-B03A-95EA271E2E83.cxv
2007-11-26 01:18 <DIR> d-------- C:\Program Files\STOPzilla!
2007-11-26 01:18 <DIR> d-------- C:\Program Files\Common Files\iS3
2007-11-26 01:18 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\STOPzilla!
2007-11-26 00:54 <DIR> d-------- C:\Program Files\Windows Defender
2007-11-26 00:43 <DIR> d-------- C:\Program Files\XoftSpySE
2007-11-26 00:24 <DIR> d-------- C:\Program Files\Trend Micro
2007-11-25 23:56 <DIR> d-------- C:\Documents and Settings\scott new\Application Data\SpywareBot
2007-11-25 23:55 <DIR> d-------- C:\Program Files\SpywareBot
2007-11-25 21:34 <DIR> d---s---- C:\Documents and Settings\me\UserData
2007-11-25 21:34 <DIR> d-------- C:\Documents and Settings\me\Application Data\Symantec
2007-11-25 21:34 <DIR> d-------- C:\Documents and Settings\me\Application Data\ATI
2007-11-25 21:34 <DIR> d-------- C:\Documents and Settings\me\Application Data\Ahead
2007-11-25 21:03 <DIR> d-------- C:\Documents and Settings\scott new\Application Data\Leadertech
2007-11-25 21:02 <DIR> d-------- C:\WINDOWS\SxsCaPendDel
2007-11-25 20:10 <DIR> d-------- C:\Documents and Settings\scott new\Application Data\Apple Computer
2007-11-25 19:57 <DIR> d-------- C:\Documents and Settings\scott new\Contacts
2007-11-25 18:23 <DIR> d-------- C:\Documents and Settings\scott new\Application Data\U3
2007-11-25 18:14 <DIR> d-------- C:\Documents and Settings\scott new\Application Data\Ahead
2007-11-25 18:13 <DIR> d--hs---- C:\Documents and Settings\scott new\UserData
2007-11-25 18:13 <DIR> d-------- C:\Documents and Settings\scott new\Application Data\Symantec
2007-11-25 18:13 <DIR> d-------- C:\Documents and Settings\scott new\Application Data\ATI
2007-11-25 17:33 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Symantec
2007-11-25 17:33 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\ATI
2007-11-25 17:23 <DIR> d---s---- C:\Documents and Settings\Administrator\UserData
2007-11-25 14:58 <DIR> d-------- C:\Program Files\Norton Security Scan
2007-11-24 23:29 <DIR> d-------- C:\Program Files\vabuipfi
2007-11-24 23:17 <DIR> d-------- C:\Program Files\E404 Helper
2007-11-24 23:16 <DIR> d-------- C:\Program Files\RichVideoCodec
2007-11-13 22:43 <DIR> d-------- C:\Legacy
2007-11-12 20:43 <DIR> d-------- C:\Program Files\Icegiant Software
2007-11-12 20:43 <DIR> d-------- C:\_ok2delete
2007-11-12 20:06 <DIR> d-------- C:\Program Files\FotoBatch
2007-11-04 15:24 <DIR> d-------- C:\Program Files\Common Files\ScanSoft Shared
2007-11-04 15:24 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ScanSoft
2007-11-01 18:48 <DIR> d-------- C:\Program Files\Say the Time

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-26 03:34 8,460,288 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll
2007-10-21 10:57 25,992 ----a-w C:\WINDOWS\system32\pgdfgsvc.exe
2007-10-15 00:26 --------- d-----w C:\Documents and Settings\Scott\Application Data\Nero
2007-10-14 09:24 --------- d-----w C:\Program Files\Windows Desktop Search
2007-10-14 09:20 --------- d-----w C:\Program Files\MSN Messenger
2007-10-13 06:35 --------- d-----w C:\Program Files\Brother
2007-10-11 05:19 --------- d-----w C:\Program Files\QuickTime
2007-10-11 04:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Bluetooth
2007-10-11 04:21 --------- d-----w C:\Program Files\IVT Corporation
2007-10-07 21:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Trymedia
2007-10-07 21:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sandlot Games
2007-10-07 21:52 --------- d-----w C:\Program Files\Yahoo! Games
2007-09-28 07:07 --------- d-----w C:\Program Files\MyVirtualHome
2007-09-28 07:06 --------- d-----w C:\Documents and Settings\Scott\Application Data\InstallShield
2007-05-24 10:15 113 ----a-w C:\Program Files\2ky.asx
2007-05-24 06:14 12,432,112 ----a-w C:\Program Files\BackCompat_04-2007.zip
2007-05-07 10:07 869,102 ----a-w C:\Program Files\zheng_gu_shui_4.jpg
2007-05-07 10:07 705,242 ----a-w C:\Program Files\zheng_gu_shui_2.jpg
2007-04-25 08:19 359,112 ----a-w C:\Program Files\LimeWireWin.exe
2007-03-29 09:34 5,832,685 ----a-w C:\Program Files\BitTorrent-5.0.7.exe
2007-02-12 00:50 256 ----a-w C:\Documents and Settings\Scott\Application Data\wklnhst.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 05:00]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 19:03]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:54]
"SpywareBot"="C:\Program Files\SpywareBot\SpywareBot.exe" [2007-11-20 14:41]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" []
"SiSPower"="Rundll32.exe" [2004-08-04 05:00 C:\WINDOWS\system32\rundll32.exe]
"CTHelper"="CTHELPER.EXE" [2002-09-02 18:55 C:\WINDOWS\system32\CTHELPER.EXE]
"SMSERIAL"="sm56hlpr.exe" [2005-06-06 07:40 C:\WINDOWS\sm56hlpr.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2004-04-13 06:49 C:\WINDOWS\AGRSMMSG.exe]
"eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\Monitor.exe" [2005-11-16 17:00]
"AspireService"="C:\Program Files\Acer\Acer eMode Management\AspireService.exe" [2005-09-29 16:07]
"MediaSync"="C:\Program Files\Acer\Acer eConsole\MediaSync.exe" []
"SoundMan"="SOUNDMAN.EXE" []
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 17:32]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 15:24]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 15:14]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57]
"NBKeyScan"="C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe" [2007-06-29 19:16]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 06:24]
"1A:Stardock TrayMonitor"="" []
"Say the Time"="" []
"SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 10:22]
"PaperPort PTD"="C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 14:25]
"IndexSearch"="C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 14:45]
"SetDefPrt"="C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe" [2005-01-26 18:02]
"ControlCenter2.0"="C:\Program Files\Brother\ControlCenter2\brctrcen.exe" [2005-05-17 17:42]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"RegistryMechanic"="" []
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 20:25]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"1A:Stardock TrayMonitor"="" []

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe [2006-02-03 17:27:15]
BlueSoleil.lnk - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2007-04-02 15:36:54]
Say the Time.lnk - C:\Program Files\Say the Time\SayTime.exe [2007-05-18 15:00:00]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

R2 int15.sys;int15.sys;\??\C:\Acer\Empowering Technology\eRecovery\int15.sys
R2 TE88IR;TE DTV IR Decoder;C:\WINDOWS\system32\Drivers\TE88IR.sys
R2 TE88XBar;TE DTV Crossbar;C:\WINDOWS\system32\drivers\TE88XBar.sys
R2 TE88XVid;TE DTV Video Capture;C:\WINDOWS\system32\drivers\te88vid.sys
R2 TETV;TE 2388x Tuner (TCL-2002);C:\WINDOWS\system32\drivers\te88TUNE.sys
R3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys
R3 SISNICXP;SiS PCI Fast Ethernet Adapter Driver for NDIS51;C:\WINDOWS\system32\DRIVERS\sisnicxp.sys
S3 TE88XAud;TE88XAud;C:\WINDOWS\system32\Drivers\TE88Aud.sys

*Newly Created Service* - AVG_ANTI-SPYWARE_DRIVER
*Newly Created Service* - AVG_ANTI-SPYWARE_GUARD
*Newly Created Service* - CATCHME
*Newly Created Service* - INT15.SYS
.
Contents of the 'Scheduled Tasks' folder
"2007-11-25 15:00:02 C:\WINDOWS\Tasks\Disk Cleanup.job"
- C:\WINDOWS\system32\cleanmgr.exe
"2007-11-25 03:58:32 C:\WINDOWS\Tasks\Norton Security Scan.job"
- C:\Program Files\Norton Security Scan\Nss.exe
"2007-11-25 22:56:52 C:\WINDOWS\Tasks\SpywareBot Scheduled Scan.job"
"2007-11-25 22:57:52 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
.
**************************************************************************

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, https://www.gmer.net
Rootkit scan 2007-11-26 11:25:49
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-11-26 11:26:21
.
--- E O F ---








Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:28:11, on 26/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\sm56hlpr.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Program Files\Acer\Acer eMode Management\AspireService.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Say the Time\SayTimeMain.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Say the Time\SayTimeMain.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = [url=https://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*https://www.yahoo.com/ext/search/search.html]https://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*https://www.yahoo.com/ext/search/search.html[/url]
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://windowsupdate.microsoft.com/
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SpywareBot] C:\Program Files\SpywareBot\SpywareBot.exe -boot
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Say the Time.lnk = C:\Program Files\Say the Time\SayTime.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - https://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15-3.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - https://messenger.zone.msn.com/EN-AU/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - https://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1138943509281
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - https://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - https://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6E10B9F3-4E0E-4027-A9DA-F97A1795B4BB}: Domain = nsw.bigpond.net.au
O23 - Service: Acer Media Server - Unknown owner - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

--
End of file - 7854 bytes
  • Unread posts or replies
  • No unread posts or replies
  • Unread Posts (Read Only Forum)
  • No Unread Posts (Read Only Forum)

Forum Information

Currently it is Tuesday, January 18, 2022, 4:49 AM (GMT +1)
There are a total of 61,946 posts in 13,685 threads.
In the last 3 days there were 0 new threads and 0 reply posts.

Who's online

This forum has 38,662 registered members. Please welcome our newest member, Star1.
100 Guest(s), 0 Registered Member(s) are currently online.
×

Just a minute

Privacy has never been so important.

Nearly 50% of online users are now using a VPN to protect their privacy.

Find out why

…and if it grabs you bag yourself a VPN bargain.