• Forums
  • Best Betting Sites
  • Sportsbook Promos
  • Best Sports Betting Apps
  • NFL Betting Forum
  • NBA Betting Forum
  • MLB Betting Forum
  • NHL Betting Forum
  • NCAAF Betting Forum
  • NCAAB Betting Forum
  • Soccer Betting Forum
  • Tennis Betting Forum
  • General Discussion
  • Help Forum
  • Guidelines
  • FAQ
  • Forum Updates
    Covers Logo
    Covers App
    Faster picks. Smarter bets.
    All in the NEW Covers App
    Download on the App Store Download on the Google Play Store
    • Sports
      • NFL
        • Back
        • NFL
        • NFL Home
        • Scores & Matchups
        • Prop Projections
        • NFL Picks
        • NFL Prediction Prices
        • Weather
        • Injuries
      • NCAAF
        • Back
        • NCAAF
        • NCAAF Home
        • Scores & Matchups
        • Prop Projections
        • NCAAF Picks
        • Weather
        • Injuries
      • NBA
        • Back
        • NBA
        • NBA Home
        • Scores & Matchups
        • Prop Projections
        • NBA Picks
        • Injuries
      • NCAAB
        • Back
        • NCAAB
        • NCAAB Home
        • Scores & Matchups
        • NCAAB Picks
        • Injuries
      • MLB
        • Back
        • MLB
        • MLB Home
        • Scores & Matchups
        • Prop Projections
        • MLB Picks
        • Weather
        • Injuries
      • NHL
        • Back
        • NHL
        • NHL Home
        • Scores & Matchups
        • Prop Projections
        • NHL Picks
        • Injuries
      • Soccer
      • UFC
      • WNBA
        • Back
        • WNBA
        • WNBA Home
        • Scores & Matchups
        • WNBA Picks
        • Injuries
      • CFL
        • Back
        • CFL
        • CFL Home
        • Scores & Matchups
        • CFL Picks
      • Golf
        • Back
        • Golf
        • Golf Home
        • Golf Odds
        • Masters Odds
        • PGA Championship Odds
        • US Open Odds
        • British Open Odds
        • Ryder Cup Odds
        • Golf Picks
    • Odds
      • All Odds
      • NFL
      • NCAAF
      • NBA
      • NCAAB
      • MLB
      • NHL
      • Golf
      • Soccer Odds
        • Back
        • Soccer Odds
        • MLS Odds
        • Champions League Odds
        • Premier League Odds
      • UFC
      • WNBA
      • CFL
      • Election Odds
      • Futures
        • Back
        • Futures
        • NFL
        • NBA
        • MLB
        • NHL
        • NCAAB
        • NCAAF
      • Sports Odds History
      • Politics
        • Back
        • Politics
        • Politics Home
        • Presidential Election Odds
        • Midterm Election Odds
        • House Midterm Odds
        • Senate Midterm Odds
        • Texas Midterm Odds
        • Michigan Midterm Odds
    • Picks
      • All Picks
      • NFL
      • NBA
      • NHL
      • MLB
      • NCAAF
      • NCAAB
      • Golf
      • WNBA
      • CFL
      • User Picks
      • Team User Picks
      • Consensus Picks
        • Back
        • Consensus Picks
        • All Consensus Picks
        • NFL
        • NBA
        • NHL
        • MLB
        • NCAAF
        • NCAAB
        • CFL
        • WNBA
        • Consensus FAQ
        • Public Money
    • Prop Projections
      • NFL
      • NBA
      • MLB
      • NHL
    • Betting
      • US Betting Sites
      • Canada Betting Sites
      • Sportsbook Reviews
      • States
        • Back
        • States
        • US Legal Tracker
        • Revenue Tracker
        • Arizona
        • Arkansas
        • California
        • Colorado
        • Connecticut
        • DC
        • Florida
        • Georgia
        • Illinois
        • Indiana
        • Iowa
        • Kansas
        • Kentucky
        • Louisiana
        • Maine
        • Maryland
        • Massachusetts
        • Michigan
        • Mississippi
        • Missouri
        • Nevada
        • New Hampshire
        • New Jersey
        • New York
        • North Carolina
        • Ohio
        • Oregon
        • Pennsylvania
        • Tennessee
        • Texas
        • Vermont
        • Virginia
        • West Virginia
        • Wyoming
      • Provinces
        • Back
        • Provinces
        • Alberta
        • British Columbia
        • Manitoba
        • New Brunswick
        • Newfoundland and Labrador
        • Northwest Territories
        • Nova Scotia
        • Nunavut
        • Ontario
        • Prince Edward Island
        • Quebec (English)
        • Quebec (francais)
        • Saskatchewan
        • Yukon
      • By Sport
        • Back
        • By Sport
        • Baseball
        • Basketball
        • Boxing
        • College Football
        • F1
        • Football
        • Super Bowl
        • Golf
        • Hockey
        • Horse Racing
        • March Madness
        • Soccer
        • UFC
        • World Cup
      • Betting Apps
        • Back
        • Betting Apps
        • Best Sports Betting Apps USA
        • Ontario Sports Betting Apps
      • Rest of World
        • Back
        • Rest of World
        • UK Betting Offers
          • Back
          • UK Betting Offers
          • UK Betting Sites
          • bet365 Bonus Code UK
          • 888Sport Promo Code UK
          • William Hill Sign up Offer
          • Betway Sign up Offer
          • BetVictor Bonus Code UK
      • Betting Guides
        • Back
        • Betting Guides
        • All Guides
        • Glossary
        • Betting Calculators
          • Back
          • Betting Calculators
          • Odds Converter
          • Parlay Calculator
        • Futures Betting Guide
        • Moneyline Betting Guide
        • Over/Under Betting Guide
        • Parlay Betting Guide
        • Point Spread Betting Guide
        • Prop Betting Guide
        • Sports Betting Guides
          • Back
          • Sports Betting Guides
          • How To Bet On Sports Guide
          • NFL Betting Guide
          • NHL Betting Guide
          • NBA Betting Guide
          • MLB Betting Guide
          • NCAAB Betting Guide
          • NCAAF Betting Guide
          • Golf Betting Guide
          • Tennis Betting Guide
        • Teaser Betting Guide
      • Betting News
        • Back
        • Betting News
        • All News
        • Industry News
        • Podcasts
        • Covers Videos
        • Covers Writers
        • Offers & Boosts
    • Promos
      • Sportsbook Promos
      • Canada Sportsbook Promos
      • Bonuses By Sportsbook
        • Back
        • Bonuses By Sportsbook
        • bet365 Bonus Code
        • BET99 Promo Code
        • BetMGM Bonus Code
        • BetRivers Bonus Code
        • Caesars Sportsbook Promo
        • DraftKings Promo Code
        • Fanatics Sportsbook Promo
        • FanDuel Promo Code
        • Hard Rock Bet Promo Code
        • Sports Interaction Promo
        • Stake Promo Code
        • theScore Bet Promo Code
        • TonyBet Promo Code
      • Bonuses By Region
        • Back
        • Bonuses By Region
        • Arkansas Promos
        • Arizona Promos
        • Colorado Promos
        • Connecticut Promos
        • DC Promos
        • Illinois Promos
        • Indiana Promos
        • Iowa Promos
        • Kansas Promos
        • Kentucky Promos
        • Louisiana Promos
        • Maine Promos
        • Maryland Promos
        • Massachusetts Promos
        • Michigan Promos
        • Missouri Promos
        • New Jersey Promos
        • New York Promos
        • North Carolina Promos
        • Ohio Promos
        • Pennsylvania Promos
        • Tennessee Promos
        • Vermont Promos
        • Virginia Promos
        • West Virginia Promos
        • Wyoming Promos
    • Forum & Contests
      • All Forums
      • NFL Betting Forum
      • MLB Betting Forum
      • NCAAB Betting Forum
      • NCAAF Betting Forum
      • NBA Betting Forum
      • NHL Betting Forum
      • Soccer Betting Forum
      • Contests
        • Back
        • Contests
        • Contests Home
        • Streak Survivor
        • King of Covers
        • My Contests
    • Casino
      • Sweepstakes Casino
        • Back
        • Sweepstakes Casino
        • Sweepstakes Casino
        • Sweepstakes No-Deposit Bonuses
        • Sweepstakes Promos
          • Back
          • Sweepstakes Promos
          • Card Crush
          • Casino.click
          • Chanced Casino
          • Crown Coins Casino
          • FreeSpin Casino
          • LoneStar
          • McLuck
          • Mega Bonanza Casino
          • PlayFame
          • Pulsz
          • Stake.us
      • US Casinos
        • Back
        • US Casinos
        • US Online Casinos
        • US Online Casino Bonuses
        • Casino Promos
          • Back
          • Casino Promos
          • bet365 Casino Promo Code
          • BetRivers Casino Promo
          • Borgata Casino Bonus Code
          • Caesars Casino Bonus Code
          • DraftKings Casino Promo
          • Fanatics Casino Promo
          • FanDuel Casino Promo Code
          • Golden Nugget Casino Promo
          • Hard Rock Bet Casino Promo
          • Hollywood Casino Promo Code
      • Canada Casinos
        • Back
        • Canada Casinos
        • Canada Online Casinos
        • Provinces
          • Back
          • Provinces
          • Alberta Online Casino
          • BC Online Casino
          • Ontario Online Casinos
        • Casino Promos
          • Back
          • Casino Promos
          • BC.GAME Bonus Code
          • Cloudbet Promo Code
          • RainBet Promo Code
          • Roobet Promo Code
          • Shuffle Promo Code
          • Thrill Promo Code
    • Prediction Markets
      • Prediction Markets
      • Prediction Market Apps
      • Prediction Market Promos
      • Kalshi Promo Code
      • Kalshi Referral Code
      • Polymarket Promo Code
      • Polymarket Referral Code
      • DraftKings Predictions Promo Code
      • Novig Promo Code
      • ProphetX Promo Code
      • Underdog Promo Code
      • Betr Promo Code
      • OG Promo Code
      • Fanatics Markets Promo Code
      • Plus500 Promo Code
      • Gemini Predictions Promo Code
    • NFL Week 8
      NFL Week 8
      • NFL Odds
      • NFL Picks
      • Panthers-Packers Picks
      • NFL Prediction Markets
      • NFL Betting Sites
    Covers Account
    Log in Create account
    Join free Log in
    All Forums | Technology

    Browser hijacking problem....

    t6rider
    Lippsman
    jackjaffee
    mr_bollox
    Participants:
    Search
    Views: 1642
    Posts: 20
     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 6, 2010 - 8:16 PM ET #1

    I read some topics from some of you guys with some possible virus problems. I can't get rid of this thing. I'm on Windows XP and use Opera mainly, but also will use Internet Explorer.

    I'm getting the spam websites a ton now when clicking on a link or a tab. It has gotten really annoying today. I have tried every free program recommended on the web.

    I've used Malwarebytes, Ad- Aware, Combo Fix, CCleaner, Spybot.

    I've also run these programs in safe mode as well. They have not been able to find anything besides the tracking cookies. 

    Any help would be greatly appreciated. Thanks.

    Reply
    To remove first post, remove entire topic.

    I read some topics from some of you guys with some possible virus problems. I can't get rid of this thing. I'm on Windows XP and use Opera mainly, but also will use Internet Explorer.

    I'm getting the spam websites a ton now when clicking on a link or a tab. It has gotten really annoying today. I have tried every free program recommended on the web.

    I've used Malwarebytes, Ad- Aware, Combo Fix, CCleaner, Spybot.

    I've also run these programs in safe mode as well. They have not been able to find anything besides the tracking cookies. 

    Any help would be greatly appreciated. Thanks.

     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 6, 2010 - 8:23 PM ET #2

    ....also I am running AVG anti virus program. I have disabled it when running the malware removable programs.

    Is my only option finding the registry keys to remove them? I know that would be impossible for my dumb ass.

    Reply

    ....also I am running AVG anti virus program. I have disabled it when running the malware removable programs.

    Is my only option finding the registry keys to remove them? I know that would be impossible for my dumb ass.

     
    Lippsman
    Lippsman
    Covers Linesmen
    Participation Meter
    Joined: Feb, 2001
    Posts: 87445
    Posted: Aug. 7, 2010 - 11:52 AM ET #3

    1. Turn off system restore

    2. download this and run it

    Make sure you do not run it in demo mode. The question is a bit tricky when it ask you.

     

    Reply

    1. Turn off system restore

    2. download this and run it

    Make sure you do not run it in demo mode. The question is a bit tricky when it ask you.

     

     
    Lippsman
    Lippsman
    Covers Linesmen
    Participation Meter
    Joined: Feb, 2001
    Posts: 87445
    Posted: Aug. 7, 2010 - 11:58 AM ET #4

    3. Make sure Malwarebytes is completely updated and run it in safe mode .  A good deal of users won't click on the update tab to start with.  Always update to the latest version and when you update, run it one more time to make sure it has the latest def. files.

    4. Download and install combo-fix.  Here is the page for instructions and download.

    5. Also something very important.  You notice how I spelled Combo-Fix ?  When you download the program to your desktop.  (That's where you should save it). Right click on the file and rename the .exe file, exactly how I spelled it.

    When you download it, combofix.exe is how it will be spelled.  Some nasty malware's will block the original name of the .exe.

    Reply

    3. Make sure Malwarebytes is completely updated and run it in safe mode .  A good deal of users won't click on the update tab to start with.  Always update to the latest version and when you update, run it one more time to make sure it has the latest def. files.

    4. Download and install combo-fix.  Here is the page for instructions and download.

    5. Also something very important.  You notice how I spelled Combo-Fix ?  When you download the program to your desktop.  (That's where you should save it). Right click on the file and rename the .exe file, exactly how I spelled it.

    When you download it, combofix.exe is how it will be spelled.  Some nasty malware's will block the original name of the .exe.

     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 7, 2010 - 12:31 PM ET #5

    Thank you Lippsman. I will give this a try.
    Reply
    Thank you Lippsman. I will give this a try.
     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 7, 2010 - 3:02 PM ET #6

    Hey Lippsman, I ran Clean Up. My Malwarebytes is version 1.46 from April 29th.

    When I ran Malwarebytes in safe mode, it didn't pick up any infections.

    My ComboFix program should be renamed Combo-Fix on my desktop correct? I ran all three programs and this bastard is still there. Did I miss something?

    Once again thank you for your time and I really appreciate all of your help.

    Reply

    Hey Lippsman, I ran Clean Up. My Malwarebytes is version 1.46 from April 29th.

    When I ran Malwarebytes in safe mode, it didn't pick up any infections.

    My ComboFix program should be renamed Combo-Fix on my desktop correct? I ran all three programs and this bastard is still there. Did I miss something?

    Once again thank you for your time and I really appreciate all of your help.

     
    jackjaffee
    jackjaffee
    Captain
    Participation Meter
    Joined: Apr, 2005
    Posts: 8856
    Posted: Aug. 7, 2010 - 4:01 PM ET #7

    First, your Malwarebytes is over 3 months old, go into the update tab and update it to make sure it's the most current.

    Second, rename the combofix.exe on the desktop to anything else but what it is.  I usually rename it to 1.exe   Make sure it is on your desktop

    I find it odd none of these programs are picking up anything at all, what is combofix doing?  Are you getting all the screens (a window opens with a blue screen and has things like a recovery console question and 50+ stages and usually requires a reboot to finish up).  Also, the log at the end of combofix that pops can a lot of times provide info that gives clues and suspicious files that combofix might have not recognized or missed but lists as recent files and other types of stuff.  I've gotten rid of a few stubborn hanger on things from looking over the log.

    Also, make sure you download combofix from bleepingcomputer like lippsman said.  I usually use ccleaner as well to clean out the temp files and all that stuff before running the other programs
    Reply
    First, your Malwarebytes is over 3 months old, go into the update tab and update it to make sure it's the most current.

    Second, rename the combofix.exe on the desktop to anything else but what it is.  I usually rename it to 1.exe   Make sure it is on your desktop

    I find it odd none of these programs are picking up anything at all, what is combofix doing?  Are you getting all the screens (a window opens with a blue screen and has things like a recovery console question and 50+ stages and usually requires a reboot to finish up).  Also, the log at the end of combofix that pops can a lot of times provide info that gives clues and suspicious files that combofix might have not recognized or missed but lists as recent files and other types of stuff.  I've gotten rid of a few stubborn hanger on things from looking over the log.

    Also, make sure you download combofix from bleepingcomputer like lippsman said.  I usually use ccleaner as well to clean out the temp files and all that stuff before running the other programs
     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 7, 2010 - 4:32 PM ET #8

    Thanks jack, when I update Malwarebytes, I get the following error: MBAM_ERROR_UPDATING(12007,0) WinHttpSendRequest.

    So I uninstalled Malwarebytes and reinstalled it. Yea I renamed the file to Combo-Fix. Let me run it and I will paste the final log in here. Thanks again.

    Reply

    Thanks jack, when I update Malwarebytes, I get the following error: MBAM_ERROR_UPDATING(12007,0) WinHttpSendRequest.

    So I uninstalled Malwarebytes and reinstalled it. Yea I renamed the file to Combo-Fix. Let me run it and I will paste the final log in here. Thanks again.

     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 7, 2010 - 4:53 PM ET #9

    ComboFix 10-08-07.01 - Owner 08/07/2010 13:40:38.8.1 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.766.404 [GMT -7:00]
    Running from: c:\documents and settings\Owner\Desktop\1.exe.exe
    AV: AVG Anti-Virus *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    AV: ZoneAlarm Antivirus *On-access scanning disabled* (Outdated) {5D467B10-818C-4CAB-9FF7-6893B5B8F3CF}
    FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
    .

    ((((((((((((((((((((((((( Files Created from 2010-07-07 to 2010-08-07 )))))))))))))))))))))))))))))))
    .

    2010-08-07 20:34 . 2010-04-29 22:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-08-07 20:33 . 2010-08-07 20:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-08-07 20:33 . 2010-04-29 22:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-08-07 17:36 . 2010-08-07 17:36 -------- d-----w- c:\program files\CleanUp!
    2010-08-06 20:12 . 2010-08-06 20:12 -------- dc----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    2010-08-06 02:22 . 2010-08-06 02:22 -------- dc----w- c:\documents and settings\All Users\Application Data\TEMP
    2010-08-04 10:13 . 2010-08-07 10:13 -------- dc----w- C:\$AVG8.VAULT$
    2010-08-04 01:44 . 2010-08-04 01:44 11952 ----a-w- c:\windows\system32\avgrsstx.dll
    2010-08-04 01:44 . 2010-08-04 01:44 12552 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
    2010-08-04 01:44 . 2010-08-04 01:44 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
    2010-08-04 01:44 . 2010-08-04 01:44 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys
    2010-08-04 01:44 . 2010-08-04 01:44 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
    2010-08-04 01:44 . 2010-08-07 11:49 -------- d-----w- c:\windows\system32\drivers\Avg
    2010-08-04 01:44 . 2010-08-04 01:44 -------- d-----w- c:\program files\AVG
    2010-08-04 01:44 . 2010-08-06 02:11 -------- dc----w- c:\documents and settings\All Users\Application Data\avg8
    2010-08-03 23:38 . 2010-08-06 04:32 16968 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
    2010-08-03 23:37 . 2010-08-03 23:37 -------- dc----w- c:\documents and settings\All Users\Application Data\Hitman Pro
    2010-08-03 23:37 . 2010-08-03 23:37 -------- d-----w- c:\program files\Hitman Pro 3.5
    2010-08-03 04:44 . 2010-08-03 04:44 -------- d-----w- c:\documents and settings\Owner\Local Settings\Application Data\Sunbelt Software
    2010-08-03 04:43 . 2010-08-03 23:18 -------- dc----w- c:\documents and settings\All Users\Application Data\Lavasoft
    2010-08-03 04:32 . 2006-06-19 20:01 69632 ----a-w- c:\windows\system32\ztvcabinet.dll
    2010-08-03 04:32 . 2006-05-25 22:52 162304 ----a-w- c:\windows\system32\ztvunrar36.dll
    2010-08-03 04:32 . 2005-08-26 08:50 77312 ----a-w- c:\windows\system32\ztvunace26.dll
    2010-08-03 04:32 . 2003-02-03 03:06 153088 ----a-w- c:\windows\system32\unrar3.dll
    2010-08-03 04:32 . 2002-03-06 08:00 75264 ----a-w- c:\windows\system32\unacev2.dll
    2010-07-26 18:01 . 2010-07-26 18:01 -------- d-----w- c:\windows\system32\wbem\Repository
    2010-07-22 02:58 . 2010-07-22 02:58 -------- d-----w- c:\program files\iPod
    2010-07-22 02:58 . 2010-07-22 02:59 -------- d-----w- c:\program files\iTunes
    2010-07-22 02:54 . 2010-07-22 02:54 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.2.1.4\SetupAdmin.exe

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-08-07 04:48 . 2009-02-10 03:16 -------- d-----w- c:\documents and settings\Owner\Application Data\uTorrent
    2010-08-04 00:19 . 2009-02-09 21:59 -------- d-----w- c:\documents and settings\Owner\Application Data\Malwarebytes
    2010-08-04 00:18 . 2009-02-09 21:59 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2010-08-04 00:05 . 2009-02-10 04:02 -------- d-----w- c:\program files\Common Files\Apple
    2010-08-01 06:19 . 2009-02-09 17:25 -------- d-----w- c:\program files\CCleaner
    2010-07-26 18:08 . 2009-02-09 23:54 -------- d-----w- c:\program files\Opera
    2010-07-16 23:29 . 2009-02-15 21:54 -------- d-----w- c:\documents and settings\Owner\Application Data\U3
    2010-07-01 03:00 . 2010-01-04 04:09 -------- d-----w- c:\program files\ffdshow
    2010-07-01 01:41 . 2010-07-01 01:41 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_motoandroid_01007.Wdf
    2010-07-01 01:31 . 2010-07-01 01:31 -------- d-----w- c:\program files\Bonjour
    2010-06-14 14:31 . 2009-02-08 23:14 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    2010-05-18 23:35 . 2010-05-18 23:35 91424 ----a-w- c:\windows\system32\dnssd.dll
    2010-05-18 23:35 . 2010-05-18 23:35 107808 ----a-w- c:\windows\system32\dns-sd.exe
    .
    Reply
    ComboFix 10-08-07.01 - Owner 08/07/2010 13:40:38.8.1 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.766.404 [GMT -7:00]
    Running from: c:\documents and settings\Owner\Desktop\1.exe.exe
    AV: AVG Anti-Virus *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    AV: ZoneAlarm Antivirus *On-access scanning disabled* (Outdated) {5D467B10-818C-4CAB-9FF7-6893B5B8F3CF}
    FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
    .

    ((((((((((((((((((((((((( Files Created from 2010-07-07 to 2010-08-07 )))))))))))))))))))))))))))))))
    .

    2010-08-07 20:34 . 2010-04-29 22:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-08-07 20:33 . 2010-08-07 20:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-08-07 20:33 . 2010-04-29 22:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-08-07 17:36 . 2010-08-07 17:36 -------- d-----w- c:\program files\CleanUp!
    2010-08-06 20:12 . 2010-08-06 20:12 -------- dc----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    2010-08-06 02:22 . 2010-08-06 02:22 -------- dc----w- c:\documents and settings\All Users\Application Data\TEMP
    2010-08-04 10:13 . 2010-08-07 10:13 -------- dc----w- C:\$AVG8.VAULT$
    2010-08-04 01:44 . 2010-08-04 01:44 11952 ----a-w- c:\windows\system32\avgrsstx.dll
    2010-08-04 01:44 . 2010-08-04 01:44 12552 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
    2010-08-04 01:44 . 2010-08-04 01:44 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
    2010-08-04 01:44 . 2010-08-04 01:44 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys
    2010-08-04 01:44 . 2010-08-04 01:44 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
    2010-08-04 01:44 . 2010-08-07 11:49 -------- d-----w- c:\windows\system32\drivers\Avg
    2010-08-04 01:44 . 2010-08-04 01:44 -------- d-----w- c:\program files\AVG
    2010-08-04 01:44 . 2010-08-06 02:11 -------- dc----w- c:\documents and settings\All Users\Application Data\avg8
    2010-08-03 23:38 . 2010-08-06 04:32 16968 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
    2010-08-03 23:37 . 2010-08-03 23:37 -------- dc----w- c:\documents and settings\All Users\Application Data\Hitman Pro
    2010-08-03 23:37 . 2010-08-03 23:37 -------- d-----w- c:\program files\Hitman Pro 3.5
    2010-08-03 04:44 . 2010-08-03 04:44 -------- d-----w- c:\documents and settings\Owner\Local Settings\Application Data\Sunbelt Software
    2010-08-03 04:43 . 2010-08-03 23:18 -------- dc----w- c:\documents and settings\All Users\Application Data\Lavasoft
    2010-08-03 04:32 . 2006-06-19 20:01 69632 ----a-w- c:\windows\system32\ztvcabinet.dll
    2010-08-03 04:32 . 2006-05-25 22:52 162304 ----a-w- c:\windows\system32\ztvunrar36.dll
    2010-08-03 04:32 . 2005-08-26 08:50 77312 ----a-w- c:\windows\system32\ztvunace26.dll
    2010-08-03 04:32 . 2003-02-03 03:06 153088 ----a-w- c:\windows\system32\unrar3.dll
    2010-08-03 04:32 . 2002-03-06 08:00 75264 ----a-w- c:\windows\system32\unacev2.dll
    2010-07-26 18:01 . 2010-07-26 18:01 -------- d-----w- c:\windows\system32\wbem\Repository
    2010-07-22 02:58 . 2010-07-22 02:58 -------- d-----w- c:\program files\iPod
    2010-07-22 02:58 . 2010-07-22 02:59 -------- d-----w- c:\program files\iTunes
    2010-07-22 02:54 . 2010-07-22 02:54 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.2.1.4\SetupAdmin.exe

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-08-07 04:48 . 2009-02-10 03:16 -------- d-----w- c:\documents and settings\Owner\Application Data\uTorrent
    2010-08-04 00:19 . 2009-02-09 21:59 -------- d-----w- c:\documents and settings\Owner\Application Data\Malwarebytes
    2010-08-04 00:18 . 2009-02-09 21:59 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2010-08-04 00:05 . 2009-02-10 04:02 -------- d-----w- c:\program files\Common Files\Apple
    2010-08-01 06:19 . 2009-02-09 17:25 -------- d-----w- c:\program files\CCleaner
    2010-07-26 18:08 . 2009-02-09 23:54 -------- d-----w- c:\program files\Opera
    2010-07-16 23:29 . 2009-02-15 21:54 -------- d-----w- c:\documents and settings\Owner\Application Data\U3
    2010-07-01 03:00 . 2010-01-04 04:09 -------- d-----w- c:\program files\ffdshow
    2010-07-01 01:41 . 2010-07-01 01:41 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_motoandroid_01007.Wdf
    2010-07-01 01:31 . 2010-07-01 01:31 -------- d-----w- c:\program files\Bonjour
    2010-06-14 14:31 . 2009-02-08 23:14 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
    2010-05-18 23:35 . 2010-05-18 23:35 91424 ----a-w- c:\windows\system32\dnssd.dll
    2010-05-18 23:35 . 2010-05-18 23:35 107808 ----a-w- c:\windows\system32\dns-sd.exe
    .
     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 7, 2010 - 4:55 PM ET #10

    ------- Sigcheck -------

    [-] 2008-11-25 . 362BC5AF8EAF712832C58CC13AE05750 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
    .
    ((((((((((((((((((((((((((((( SnapShot@2010-08-03_23.51.08 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2006-12-02 07:46 . 2006-12-02 07:46 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
    + 2006-12-02 07:26 . 2006-12-02 07:26 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
    + 2006-12-02 07:25 . 2006-12-02 07:25 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
    + 2006-12-02 05:56 . 2006-12-02 05:56 96256 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
    + 2010-08-07 20:24 . 2010-08-07 20:24 16384 c:\windows\temp\Perflib_Perfdata_768.dat
    + 2010-08-04 01:44 . 2010-08-04 01:44 337408 c:\windows\Installer\4ffa23.msi
    + 2006-12-02 07:25 . 2006-12-02 07:25 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
    + 2006-12-02 07:25 . 2006-12-02 07:25 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2003-11-18 118784]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2003-11-18 155648]
    "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2010-08-04 2048352]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-08-11 7630848]

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
    2010-08-04 01:44 11952 ----a-w- c:\windows\system32\avgrsstx.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "MotoConnect Service"=2 (0x2)
    "mnmsrvc"=3 (0x3)
    "Bonjour Service"=2 (0x2)
    "helpsvc"=2 (0x2)

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
    Reply
    ------- Sigcheck -------

    [-] 2008-11-25 . 362BC5AF8EAF712832C58CC13AE05750 . 1614848 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
    .
    ((((((((((((((((((((((((((((( SnapShot@2010-08-03_23.51.08 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2006-12-02 07:46 . 2006-12-02 07:46 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
    + 2006-12-02 07:08 . 2006-12-02 07:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
    + 2006-12-02 07:26 . 2006-12-02 07:26 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
    + 2006-12-02 07:25 . 2006-12-02 07:25 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
    + 2006-12-02 05:56 . 2006-12-02 05:56 96256 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
    + 2010-08-07 20:24 . 2010-08-07 20:24 16384 c:\windows\temp\Perflib_Perfdata_768.dat
    + 2010-08-04 01:44 . 2010-08-04 01:44 337408 c:\windows\Installer\4ffa23.msi
    + 2006-12-02 07:25 . 2006-12-02 07:25 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
    + 2006-12-02 07:25 . 2006-12-02 07:25 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2003-11-18 118784]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2003-11-18 155648]
    "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2010-08-04 2048352]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-08-11 7630848]

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
    2010-08-04 01:44 11952 ----a-w- c:\windows\system32\avgrsstx.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "MotoConnect Service"=2 (0x2)
    "mnmsrvc"=3 (0x3)
    "Bonjour Service"=2 (0x2)
    "helpsvc"=2 (0x2)

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 7, 2010 - 4:55 PM ET #11

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\uTorrent\\uTorrent.exe"=
    "c:\\WINDOWS\\system32\\mmc.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
    "c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
    "c:\\Program Files\\AIM6\\aim6.exe"=
    "c:\\Program Files\\Opera\\opera.exe"=
    "c:\\Program Files\\QuickTime\\QuickTimePlayer.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgam.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgdiag.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgdiagex.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=

    R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [8/3/2010 6:44 PM 12552]
    R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [8/3/2010 6:44 PM 335240]
    R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [8/3/2010 6:44 PM 108552]
    R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [8/3/2010 6:44 PM 297752]
    S2 iPodDrv;iPodDrv;\??\c:\windows\system32\drivers\iPodDrv.sys --> c:\windows\system32\drivers\iPodDrv.sys [?]
    S3 ADM8511;ADMtek ADM8511/AN986 USB To Fast Ethernet Converter;c:\windows\system32\drivers\ADM8511.SYS [2/8/2009 4:27 PM 20160]
    S3 ADM851X;ADM851X USB To Fast Ethernet Adapter;c:\windows\system32\drivers\ADM851X.SYS [10/27/2004 5:05 PM 22144]
    S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\motoandroid.sys [12/25/2009 3:33 PM 25856]
    S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [12/25/2009 3:33 PM 19712]
    S3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [12/25/2009 3:33 PM 8320]
    S3 motport;Motorola USB Diagnostic Port;c:\windows\system32\DRIVERS\motport.sys --> c:\windows\system32\DRIVERS\motport.sys [?]
    S3 Xgiv3;Xgiv3;c:\windows\system32\drivers\Xgiv3m.sys [2/12/2009 5:54 PM 342656]
    S4 MotoConnect Service;MotoConnect Service;c:\program files\Motorola\MotoConnectService\MotoConnectService.exe [6/30/2010 6:44 PM 91392]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    HPService REG_MULTI_SZ HPSLPSVC
    .
    Contents of the 'Scheduled Tasks' folder

    2010-08-05 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 20:34]

    2010-08-07 c:\windows\Tasks\User_Feed_Synchronization-{0C7533BF-4781-45A3-94F3-EDD446281C2F}.job
    - c:\windows\system32\msfeedssync.exe [2007-08-14 11:31]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = www.google.com
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, https://www.gmer.net
    Rootkit scan 2010-08-07 13:45
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'explorer.exe'(3000)
    c:\windows\system32\WININET.dll
    c:\windows\system32\msi.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    Completion time: 2010-08-07 13:47:22
    ComboFix-quarantined-files.txt 2010-08-07 20:47
    ComboFix2.txt 2010-08-07 20:08
    ComboFix3.txt 2010-08-07 18:48
    ComboFix4.txt 2010-08-07 04:44
    ComboFix5.txt 2010-08-07 20:39

    Pre-Run: 16,391,999,488 bytes free
    Post-Run: 16,396,517,376 bytes free

    - - End Of File - - 3B9A6DDDBC8E19DF4400518159425DFD

    Reply
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\uTorrent\\uTorrent.exe"=
    "c:\\WINDOWS\\system32\\mmc.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
    "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
    "c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
    "c:\\Program Files\\AIM6\\aim6.exe"=
    "c:\\Program Files\\Opera\\opera.exe"=
    "c:\\Program Files\\QuickTime\\QuickTimePlayer.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgam.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgdiag.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgdiagex.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
    "c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=

    R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [8/3/2010 6:44 PM 12552]
    R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [8/3/2010 6:44 PM 335240]
    R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [8/3/2010 6:44 PM 108552]
    R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [8/3/2010 6:44 PM 297752]
    S2 iPodDrv;iPodDrv;\??\c:\windows\system32\drivers\iPodDrv.sys --> c:\windows\system32\drivers\iPodDrv.sys [?]
    S3 ADM8511;ADMtek ADM8511/AN986 USB To Fast Ethernet Converter;c:\windows\system32\drivers\ADM8511.SYS [2/8/2009 4:27 PM 20160]
    S3 ADM851X;ADM851X USB To Fast Ethernet Adapter;c:\windows\system32\drivers\ADM851X.SYS [10/27/2004 5:05 PM 22144]
    S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\motoandroid.sys [12/25/2009 3:33 PM 25856]
    S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [12/25/2009 3:33 PM 19712]
    S3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [12/25/2009 3:33 PM 8320]
    S3 motport;Motorola USB Diagnostic Port;c:\windows\system32\DRIVERS\motport.sys --> c:\windows\system32\DRIVERS\motport.sys [?]
    S3 Xgiv3;Xgiv3;c:\windows\system32\drivers\Xgiv3m.sys [2/12/2009 5:54 PM 342656]
    S4 MotoConnect Service;MotoConnect Service;c:\program files\Motorola\MotoConnectService\MotoConnectService.exe [6/30/2010 6:44 PM 91392]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    HPService REG_MULTI_SZ HPSLPSVC
    .
    Contents of the 'Scheduled Tasks' folder

    2010-08-05 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 20:34]

    2010-08-07 c:\windows\Tasks\User_Feed_Synchronization-{0C7533BF-4781-45A3-94F3-EDD446281C2F}.job
    - c:\windows\system32\msfeedssync.exe [2007-08-14 11:31]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = www.google.com
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, https://www.gmer.net
    Rootkit scan 2010-08-07 13:45
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'explorer.exe'(3000)
    c:\windows\system32\WININET.dll
    c:\windows\system32\msi.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    Completion time: 2010-08-07 13:47:22
    ComboFix-quarantined-files.txt 2010-08-07 20:47
    ComboFix2.txt 2010-08-07 20:08
    ComboFix3.txt 2010-08-07 18:48
    ComboFix4.txt 2010-08-07 04:44
    ComboFix5.txt 2010-08-07 20:39

    Pre-Run: 16,391,999,488 bytes free
    Post-Run: 16,396,517,376 bytes free

    - - End Of File - - 3B9A6DDDBC8E19DF4400518159425DFD

     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 9, 2010 - 8:44 PM ET #12

    This bastard is still here. Is there anything else I can do?
    Reply
    This bastard is still here. Is there anything else I can do?
     
    Lippsman
    Lippsman
    Covers Linesmen
    Participation Meter
    Joined: Feb, 2001
    Posts: 87445
    Posted: Aug. 9, 2010 - 9:10 PM ET #13

    So exactly what is poping up on your screen ?  Did you update malwarebytes again? They just updated again today. Your update should say Aug 9th. How many entries did malwarebytes find on your system.

    Make sure and run combofix in safe mode if you didn't.  It makes a huge difference.

    Reply

    So exactly what is poping up on your screen ?  Did you update malwarebytes again? They just updated again today. Your update should say Aug 9th. How many entries did malwarebytes find on your system.

    Make sure and run combofix in safe mode if you didn't.  It makes a huge difference.

     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 9, 2010 - 9:25 PM ET #14

    Quote Originally Posted by Lippsman:

    So exactly what is poping up on your screen ?  Did you update malwarebytes again? They just updated again today. Your update should say Aug 9th. How many entries did malwarebytes find on your system.

    Make sure and run combofix in safe mode if you didn't.  It makes a huge difference.



    Thanks again Lippsman. Yes I did everything just like you said. I didn't know Malwarebytes updated today. I will do that now.

    The problem is when I click on a link like Sports Forum for example, a new page will open up such as www.google analytics.com or www.cafemom.com.

    Reply
    Quote Originally Posted by Lippsman:

    So exactly what is poping up on your screen ?  Did you update malwarebytes again? They just updated again today. Your update should say Aug 9th. How many entries did malwarebytes find on your system.

    Make sure and run combofix in safe mode if you didn't.  It makes a huge difference.



    Thanks again Lippsman. Yes I did everything just like you said. I didn't know Malwarebytes updated today. I will do that now.

    The problem is when I click on a link like Sports Forum for example, a new page will open up such as www.google analytics.com or www.cafemom.com.

     
    Lippsman
    Lippsman
    Covers Linesmen
    Participation Meter
    Joined: Feb, 2001
    Posts: 87445
    Posted: Aug. 9, 2010 - 10:45 PM ET #15

    Once you do your malewarebytes update, restart your computer in safe mode without networking and do the scan.

    Also did you run the cleanup program ?  Not in demo mode

    Reply

    Once you do your malewarebytes update, restart your computer in safe mode without networking and do the scan.

    Also did you run the cleanup program ?  Not in demo mode

     
    Lippsman
    Lippsman
    Covers Linesmen
    Participation Meter
    Joined: Feb, 2001
    Posts: 87445
    Posted: Aug. 9, 2010 - 10:50 PM ET #16

    Quote Originally Posted by t6rider:



    Thanks again Lippsman. Yes I did everything just like you said. I didn't know Malwarebytes updated today. I will do that now.

    The problem is when I click on a link like Sports Forum for example, a new page will open up such as www.google analytics.com or www.cafemom.com.

    Wait a minute, those are not spammer sites, they are actually legit sites.  You may just need to adjust your popup settings.

    It looks like combofix did a bit of cleaning up.  Is the computer any better since the scan ?

    Reply
    Quote Originally Posted by t6rider:



    Thanks again Lippsman. Yes I did everything just like you said. I didn't know Malwarebytes updated today. I will do that now.

    The problem is when I click on a link like Sports Forum for example, a new page will open up such as www.google analytics.com or www.cafemom.com.

    Wait a minute, those are not spammer sites, they are actually legit sites.  You may just need to adjust your popup settings.

    It looks like combofix did a bit of cleaning up.  Is the computer any better since the scan ?

     
    t6rider
    t6rider
    Veteran
    Participation Meter
    Joined: Jan, 2004
    Posts: 4483
    Posted: Aug. 9, 2010 - 11:11 PM ET #17

    Yea Lipps I thought the same thing with the popups. I changed it to block all popups and I still get a ton of these things. This has been going on for about a week. I have never had this problem before.
    Reply
    Yea Lipps I thought the same thing with the popups. I changed it to block all popups and I still get a ton of these things. This has been going on for about a week. I have never had this problem before.
     
    Lippsman
    Lippsman
    Covers Linesmen
    Participation Meter
    Joined: Feb, 2001
    Posts: 87445
    Posted: Aug. 9, 2010 - 11:18 PM ET #18

    Have you updated malware and ran it in safe mode with networking yet ?

     

    Reply

    Have you updated malware and ran it in safe mode with networking yet ?

     

     
    Lippsman
    Lippsman
    Covers Linesmen
    Participation Meter
    Joined: Feb, 2001
    Posts: 87445
    Posted: Aug. 9, 2010 - 11:30 PM ET #19

    Quote Originally Posted by Lippsman:

    Have you updated malware and ran it in safe mode with networking yet ?

     

    Make that without networking

    Reply
    Quote Originally Posted by Lippsman:

    Have you updated malware and ran it in safe mode with networking yet ?

     

    Make that without networking

     
     
    mr_bollox
    mr_bollox
    All-Star
    Participation Meter
    Joined: Oct, 2009
    Posts: 14400
    Posted: Sep. 5, 2010 - 12:36 AM ET #20

    buy a mac
    Reply
    buy a mac
    All Forums | Technology

    Hot Forums IconHot Forum Topics

    • 🤢🥴💩_ Fubah's risky baseball bets _🥶😲🥵 463,059
    • 🏈🏈🏈 Fubah2's risky CFB bets 286,816
    • Thursday 10/29/2026 455
    • I’m on the Brewers to defeat the Rays in the World Series 6,491
    • NFL LOCKED IN! 110,869
    • Happening just recently . . . 39,403
    • NFL THREAD * 151 * 29,684
    • We have picked a terrible time to have the stupidest president ever 31,371
    • Week 9 Money 6,417
    • MODERATE voters say ... 35,329

    Warning - External Link

    Report User

    Thank you for reporting
    This content is abusive or harmful
    This post is spam
    An error has occurred
    This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

    Delete Post

    Are you sure you would like to remove this post?

    Remove Thread

    Are you sure you would like to remove this thread?

    Scan Results

    Login/Register

    Happy to have you join the conversation. To do so, please login or create an account.
    Accounts are free and easy to create.

    Search


    Loading…

    Loading…

    About Us
    Contact Us
    Careers
    Our Team
    Brand
    Testimonials
    Betting Guides
    Sportsbook Reviews
    Betting News
    Podcasts
    Responsible Gambling
    Betting Sites
    US Betting Sites
    Canada Betting Sites
    Canada Casinos
    Best Betting Apps
    Contests
    Streak Survivor
    King of Covers
    Ultimate Race
    Office Pools
    The Covers community has
    810,221
    lifetime members worldwide
    Join our community today
    Covers 30 Years Logo Established in 1995,
    Covers is the world
    leader in sports
    betting information.
    21+
    Gambling problem? Call 1-800-GAMBLER
    Help Privacy Privacy Choices Terms of Service Cookies Sitemap Forum
    YouTube logo
    Facebook logo
    Twitter logo
    Instagram logo
    LinkedIn logo
    Google News logo
    Covers is verified safe by:
    Evalon Logo Logo GPWA Logo GDPR logo Logo GeoTrust logo Logo
    Covers Logo
    Copyright © 1995 - 2026 Genius Sports. All Rights Reserved.
    If you choose to make use of any information on this website including online sports betting services from any websites that may be featured on this website, we strongly recommend that you carefully check your local laws before doing so.It is your sole responsibility to understand your local laws and observe them strictly.Covers does not provide any advice or guidance as to the legality of online sports betting or other online gambling activities within your jurisdiction and you are responsible for complying with laws that are applicable to you in your relevant locality.Covers disclaims all liability associated with your use of this website and use of any information contained on it.As a condition of using this website, you agree to hold the owner of this website harmless from any claims arising from your use of any services on any third party website that may be featured by Covers.