Printable View
Hi.
Just checked my startup list in CCleaner and noticed this entry which I havent seen before;
Program; Waiting1690
File; C:\Windows\stid1690.exe
I have noticed my boot time has increased, in particular my antivirus and firewall seem to be taking a lot longer to start up.
Any ideas what this could be?
Thanks
Jeff
Try submitting the stid1690.exe file here..
https://www.virustotal.com/
for a multiscan to confirm it is malware.
I suspect that it is and once that's confirmed pls read this thread...
http://discussions.virtualdr.com/sho...d.php?t=167915
and copy/paste the logfiles from all 4 scans below in this thread for further analysis.
I ran checks on the file which came up clean, after a bit of googling it seems it may be connected to a cheap webcam which I recently installed.
Ran the 4 scans. Couldnt complete the aswMBR scan as it seemed to keep freezing and also gave me a couple of BSOD, attached the logfile of what it managed to complete.
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Database version: v2012.06.21.06
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Jeff :: JEFF-PC [administrator]
23/06/2012 12:11:32
mbam-log-2012-06-23 (12-11-32).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 214701
Time elapsed: 4 minute(s), 11 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-06-23 12:54:51
Windows 6.1.7601 Service Pack 1
Running: 18sxws0g.exe
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\ac72897b0aa1
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\ac72897b0aa1 (not active ControlSet)
---- EOF - GMER 1.0.15 ----
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-06-23 13:19:58
-----------------------------
13:19:58.197 OS Version: Windows x64 6.1.7601 Service Pack 1
13:19:58.197 Number of processors: 4 586 0x2A07
13:19:58.197 ComputerName: JEFF-PC UserName: Jeff
13:19:59.554 Initialize success
13:20:06.652 AVAST engine defs: 12062300
13:20:08.789 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
13:20:08.789 Disk 0 Vendor: WDC_WD32 01.0 Size: 305245MB BusType: 3
13:20:08.805 Disk 0 MBR read successfully
13:20:08.805 Disk 0 MBR scan
13:20:08.820 Disk 0 Windows VISTA default MBR code
13:20:08.820 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 101 MB offset 63
13:20:08.836 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 23000 MB offset 208896
13:20:08.867 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 282142 MB offset 47312896
13:20:08.914 Disk 0 scanning C:\Windows\system32\drivers
13:20:21.628 Service scanning
13:20:47.727 Modules scanning
13:20:47.727 Disk 0 trace - called modules:
13:20:47.742 ntoskrnl.exe CLASSPNP.SYS disk.sys stdcfltn.sys ACPI.sys iaStor.sys hal.dll
13:20:47.742 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800965c060]
13:20:47.742 3 CLASSPNP.SYS[fffff8800185143f] -> nt!IofCallDriver -> [0xfffffa80094a7850]
13:20:47.758 5 stdcfltn.sys[fffff88001b89c52] -> nt!IofCallDriver -> [0xfffffa80076dd800]
13:20:47.758 7 ACPI.sys[fffff88000f867a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80076f4050]
13:20:49.599 AVAST engine scan C:\Windows
13:20:53.344 AVAST engine scan C:\Windows\system32
13:23:45.733 AVAST engine scan C:\Windows\system32\drivers
13:23:58.900 AVAST engine scan C:\Users\Jeff
13:32:55.311 Disk 0 MBR has been saved successfully to "C:\Users\Jeff\Desktop\stid1690\MBR.dat"
13:32:55.311 The log file has been saved successfully to "C:\Users\Jeff\Desktop\stid1690\aswMBR.txt"
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31
Run by Jeff at 13:33:16 on 2012-06-23
Microsoft Windows 7 Professional 6.1.7601.1.1252.44.1033.18.8086.5889 [GMT 1:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: COMODO Defense+ *Enabled/Updated* {FEEA52D5-051E-08DD-07EF-2F009097607D}
FW: COMODO Firewall *Enabled* {7DB03214-694B-060B-1600-BD4715C36DBB}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG2012\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\PRTG Traffic Grapher\PRTG Traffic Grapher.exe
C:\Program Files (x86)\PRTG Traffic Grapher\PRTG Traffic Grapher.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_262.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.co.uk/
uDefault_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=uk&l=en&s=gen
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: AVG Do Not Track: {31332eef-cb9f-458f-afeb-d30e9a66b6ba} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
uRun: [Gadwin PrintScreen] C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
mRun: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [<NO NAME>]
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {8CFCF42C-1C64-47D6-AEEC-F9D001832ED3} - hxxp://xserv.dell.com/DellDriverScanner/DellSystem.CAB
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
TCP: DhcpNameServer = 192.168.1.254 192.168.1.254
TCP: Interfaces\{227D8F3A-DD83-4C96-84DB-57BD33F02355} : DhcpNameServer = 192.168.1.254 192.168.1.254
TCP: Interfaces\{227D8F3A-DD83-4C96-84DB-57BD33F02355}\05C65737E6564775962756C6563737231334433444 : DhcpNameServer = 192.168.1.254
TCP: Interfaces\{227D8F3A-DD83-4C96-84DB-57BD33F02355}\2445F40756E6A7F6E656D284 : DhcpNameServer = 192.168.22.22 192.168.22.23
TCP: Interfaces\{227D8F3A-DD83-4C96-84DB-57BD33F02355}\D6F6C6C697 : DhcpNameServer = 192.168.0.1
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: AVG Do Not Track: {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll
BHO-X64: AVG Do Not Track - No File
BHO-X64: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
mRun-x64: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [(Default)]
mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
AppInit_DLLs-X64: C:\Windows\SysWOW64\guard32.dll
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Jeff\AppData\Roaming\Mozilla\Firefox\Profiles\yhxnbc17.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.co.uk/
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: C:\Users\Jeff\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
FF - plugin: C:\Users\Jeff\AppData\Roaming\Mozilla\Firefox\Profiles\yhxnbc17.default\extensions\[email protected]\plugins\npLMI64.dll
FF - plugin: C:\Users\Jeff\AppData\Roaming\Mozilla\Firefox\Profiles\yhxnbc17.default\extensions\[email protected]\plugins\npRACtrl.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHA;AVGIDSHA;C:\Windows\system32\DRIVERS\avgidsha.sys --> C:\Windows\system32\DRIVERS\avgidsha.sys [?]
R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\system32\DRIVERS\avgrkx64.sys --> C:\Windows\system32\DRIVERS\avgrkx64.sys [?]
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer;C:\Windows\system32\DRIVERS\stdcfltn.sys --> C:\Windows\system32\DRIVERS\stdcfltn.sys [?]
R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\system32\DRIVERS\avgldx64.sys --> C:\Windows\system32\DRIVERS\avgldx64.sys [?]
R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\system32\DRIVERS\avgmfx64.sys --> C:\Windows\system32\DRIVERS\avgmfx64.sys [?]
R1 Avgtdia;AVG TDI Driver;C:\Windows\system32\DRIVERS\avgtdia.sys --> C:\Windows\system32\DRIVERS\avgtdia.sys [?]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;C:\Windows\system32\DRIVERS\cmdguard.sys --> C:\Windows\system32\DRIVERS\cmdguard.sys [?]
R1 cmdHlp;COMODO Internet Security Helper Driver;C:\Windows\system32\DRIVERS\cmdhlp.sys --> C:\Windows\system32\DRIVERS\cmdhlp.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]
R2 AERTFilters;Andrea RT Filters Service;C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2012-5-19 98208]
R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2012-2-14 193288]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor;C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2010-12-14 901184]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2010-12-14 974912]
R2 cpuz135;cpuz135;\??\C:\Windows\system32\drivers\cpuz135_x64.sys --> C:\Windows\system32\drivers\cpuz135_x64.sys [?]
R2 PRTGService;PRTG Service;C:\Program Files (x86)\PRTG Traffic Grapher\PRTG Traffic Grapher.exe [2011-11-10 3949904]
R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys --> C:\Windows\system32\DRIVERS\TurboB.sys [?]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-10-24 2656280]
R3 Acceler;Accelerometer Service;C:\Windows\system32\DRIVERS\Accelern.sys --> C:\Windows\system32\DRIVERS\Accelern.sys [?]
R3 btmaux;Intel Bluetooth Auxiliary Service;C:\Windows\system32\DRIVERS\btmaux.sys --> C:\Windows\system32\DRIVERS\btmaux.sys [?]
R3 btmhsf;btmhsf;C:\Windows\system32\DRIVERS\btmhsf.sys --> C:\Windows\system32\DRIVERS\btmhsf.sys [?]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\system32\DRIVERS\CtClsFlt.sys --> C:\Windows\system32\DRIVERS\CtClsFlt.sys [?]
R3 iBtFltCoex;iBtFltCoex;C:\Windows\system32\DRIVERS\iBtFltCoex.sys --> C:\Windows\system32\DRIVERS\iBtFltCoex.sys [?]
R3 IntcDAud;Intel(R) Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 MEIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\system32\DRIVERS\NETwNs64.sys --> C:\Windows\system32\DRIVERS\NETwNs64.sys [?]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
R3 wdkmd;Intel WiDi KMD;C:\Windows\system32\DRIVERS\WDKMD.sys --> C:\Windows\system32\DRIVERS\WDKMD.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-2-10 136176]
S2 RoxWatch12;Roxio Hard Drive Watcher 12;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-9-4 219632]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-3-31 250056]
S3 Bluetooth Media Service;Bluetooth Media Service;C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2010-12-14 1298496]
S3 CAM1690;USB PC CAMERA 301P;C:\Windows\system32\Drivers\cam1690.sys --> C:\Windows\system32\Drivers\cam1690.sys [?]
S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\system32\DRIVERS\ggflt.sys --> C:\Windows\system32\DRIVERS\ggflt.sys [?]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-2-10 136176]
S3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys --> C:\Windows\system32\DRIVERS\Impcd.sys [?]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-5-24 113120]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-6-16 340240]
S3 RoxMediaDB12OEM;RoxMediaDB12OEM;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-9-4 1116656]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys --> C:\Windows\system32\Drivers\RtsUStor.sys [?]
S3 Sony PC Companion;Sony PC Companion;C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-6-20 155320]
S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys --> C:\Windows\system32\Drivers\usbaapl64.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S3 WSDPrintDevice;WSD Print Support via UMB;C:\Windows\system32\DRIVERS\WSDPrint.sys --> C:\Windows\system32\DRIVERS\WSDPrint.sys [?]
S3 WSDScan;WSD Scan Support via UMB;C:\Windows\system32\DRIVERS\WSDScan.sys --> C:\Windows\system32\DRIVERS\WSDScan.sys [?]
.
=============== Created Last 30 ================
.
2012-06-22 12:53:26 7680 ----a-w- C:\Windows\System32\usd1690.dll
2012-06-22 12:53:26 1700352 ----a-w- C:\Windows\gdiplus.dll
2012-06-22 12:53:25 60416 ----a-w- C:\Windows\stid1690.exe
2012-06-22 12:53:25 46592 ----a-w- C:\Windows\SysWow64\cam1690.dll
2012-06-22 12:53:25 46592 ----a-w- C:\Windows\System32\cam1690.dll
2012-06-22 12:53:25 36864 ----a-w- C:\Windows\SysWow64\cam1690.ax
2012-06-22 12:53:25 205696 ----a-w- C:\Windows\System32\drivers\cam1690.sys
2012-06-22 12:53:25 1597440 ----a-w- C:\Windows\stic1690.exe
2012-06-20 13:00:21 -------- d-----w- C:\Users\Jeff\AppData\Local\Sony
2012-06-20 12:17:26 27176 ----a-w- C:\Windows\System32\drivers\ggsemc.sys
2012-06-20 12:17:26 13352 ----a-w- C:\Windows\System32\drivers\ggflt.sys
2012-06-20 12:16:54 -------- d-----w- C:\ProgramData\Sony Ericsson
2012-06-20 12:16:51 -------- d-----w- C:\Program Files (x86)\Sony Ericsson
2012-06-20 12:12:22 -------- d-----w- C:\Program Files (x86)\Sony
2012-06-15 21:37:44 -------- d-----w- C:\Users\Jeff\AppData\Local\Macromedia
2012-06-14 17:16:58 -------- d-----w- C:\Program Files\iPod
2012-06-14 17:16:57 -------- d-----w- C:\Program Files\iTunes
2012-06-14 17:15:24 -------- d-----w- C:\Program Files\Bonjour
2012-06-14 17:15:24 -------- d-----w- C:\Program Files (x86)\Bonjour
2012-06-14 17:02:58 3216384 ----a-w- C:\Windows\System32\msi.dll
2012-06-14 17:02:57 2342400 ----a-w- C:\Windows\SysWow64\msi.dll
2012-06-14 17:02:47 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-06-05 21:23:06 770384 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcr100.dll
2012-06-05 21:23:06 421200 ----a-w- C:\Program Files (x86)\Mozilla Firefox\msvcp100.dll
2012-06-02 19:00:31 -------- d-----w- C:\Program Files\CCleaner
2012-05-28 21:02:57 -------- d-----w- C:\Windows\Hewlett-Packard
2012-05-28 20:37:30 -------- d-----w- C:\Program Files (x86)\Microsoft
2012-05-28 20:37:13 -------- d-----w- C:\Users\Jeff\AppData\Roaming\HpUpdate
2012-05-28 20:36:49 778088 ------w- C:\Windows\System32\HPDiscoPMa011.dll
2012-05-28 20:35:38 -------- d-----w- C:\Program Files (x86)\HP
2012-05-28 20:33:18 -------- d-----w- C:\Program Files\HP
2012-05-28 20:32:50 -------- d-----w- C:\Users\Jeff\AppData\Local\HP
2012-05-24 22:00:40 -------- d-----w- C:\Program Files (x86)\Mozilla Maintenance Service
2012-05-24 22:00:32 157608 ----a-w- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
2012-05-24 22:00:32 113120 ----a-w- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice.exe
2012-05-24 17:28:19 -------- d-----w- C:\Users\Jeff\AppData\Local\Deployment
2012-05-24 17:26:49 0 ----a-w- C:\Windows\invcol.tmp
2012-05-24 17:10:19 75120 ----a-w- C:\Windows\System32\drivers\partmgr.sys
2012-05-24 17:09:53 1544704 ----a-w- C:\Windows\System32\DWrite.dll
2012-05-24 17:09:53 1077248 ----a-w- C:\Windows\SysWow64\DWrite.dll
2012-05-24 17:07:55 1918320 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-05-24 17:07:44 1732096 ----a-w- C:\Program Files\Windows Journal\NBDoc.DLL
2012-05-24 17:07:44 1367552 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
2012-05-24 17:07:43 936960 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-05-24 17:07:43 1402880 ----a-w- C:\Program Files\Windows Journal\JNWDRV.dll
2012-05-24 17:07:43 1393664 ----a-w- C:\Program Files\Windows Journal\JNTFiltr.dll
.
==================== Find3M ====================
.
2012-06-22 22:34:11 70344 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-22 22:34:11 426184 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-06-14 16:56:17 955840 ----a-w- C:\Windows\System32\npdeployJava1.dll
2012-06-14 16:56:17 839096 ----a-w- C:\Windows\System32\deployJava1.dll
2012-05-18 02:06:48 2311680 ----a-w- C:\Windows\System32\jscript9.dll
2012-05-18 01:59:14 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-05-18 01:58:39 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-05-18 01:55:22 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-05-18 01:51:30 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-05-17 22:45:37 1800192 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-05-17 22:35:47 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-05-17 22:35:39 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-05-17 22:29:45 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-05-17 22:24:45 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-05-15 01:32:33 3146752 ----a-w- C:\Windows\System32\win32k.sys
2012-05-04 11:06:22 5559664 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-05-04 11:00:43 366592 ----a-w- C:\Windows\System32\qdvd.dll
2012-05-04 10:03:53 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-05-04 10:03:50 3913072 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-05-04 09:59:54 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll
2012-05-01 05:40:20 209920 ----a-w- C:\Windows\System32\profsvc.dll
2012-04-26 05:41:56 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-04-26 05:41:55 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-04-26 05:34:27 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
2012-04-24 05:37:37 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
2012-04-24 05:37:37 140288 ----a-w- C:\Windows\System32\cryptnet.dll
2012-04-24 05:37:36 1462272 ----a-w- C:\Windows\System32\crypt32.dll
2012-04-24 04:36:42 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
2012-04-24 04:36:42 1158656 ----a-w- C:\Windows\SysWow64\crypt32.dll
2012-04-24 04:36:42 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
2012-04-19 03:50:26 28480 ----a-w- C:\Windows\System32\drivers\avgidsha.sys
2012-04-18 19:56:30 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx
2012-04-18 19:56:30 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts
2012-04-04 14:56:40 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys
.
============= FINISH: 13:36:51.29 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 08/11/2011 10:34:31
System Uptime: 23/06/2012 13:17:40 (0 hours ago)
.
Motherboard: Dell Inc. | | 0D7C51
Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz | CPU | 2301/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 276 GiB total, 139.847 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID:
Description:
Device ID: USB\VID_138A&PID_0011\0A2056244D94
Manufacturer:
Name:
PNP Device ID: USB\VID_138A&PID_0011\0A2056244D94
Service:
.
==== System Restore Points ===================
.
RP116: 14/06/2012 12:19:51 - Scheduled Checkpoint
RP117: 14/06/2012 17:55:43 - Installed Java(TM) 7 Update 5 (64-bit)
RP118: 14/06/2012 18:03:44 - Windows Update
RP119: 20/06/2012 13:12:43 - Sony PC Companion
RP120: 20/06/2012 13:15:11 - Sony PC Companion
RP121: 20/06/2012 13:16:58 - Uninstalled Sony Ericsson Drivers
RP122: 20/06/2012 13:17:09 - Installed Sony Ericsson Drivers
RP123: 21/06/2012 18:23:37 - Uninstalled Sony Ericsson Drivers
RP124: 21/06/2012 18:24:04 - Installed Sony Ericsson Drivers
RP125: 21/06/2012 18:25:04 - Uninstalled Sony Ericsson Drivers
RP126: 21/06/2012 18:25:13 - Installed Sony Ericsson Drivers
RP127: 22/06/2012 13:38:49 - Installed JPEG Camera v1.02.
RP128: 22/06/2012 13:40:12 - Removed JPEG Camera v1.02.
RP129: 22/06/2012 13:41:55 - Installed JPEG Camera v1.02.
RP130: 22/06/2012 13:43:13 - Removed JPEG Camera v1.02.
RP131: 22/06/2012 13:53:52 - Device Driver Package Install: Generic Imaging devices
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
AccelerometerP11
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.3)
Adobe Shockwave Player 11.6
Advanced Audio FX Engine
Apple Application Support
Apple Software Update
µTorrent
Dell Webcam Central
DirectX 9 Runtime
Facebook Video Calling 1.2.0.159
FileHippo.com Update Checker
Gadwin PrintScreen
Genting Poker
Google Earth Plug-in
Google Update Helper
Hewlett-Packard ACLM.NET v1.1.0.0
HP Deskjet 3050A J611 series Help
HP Product Detection
HP Update
inSSIDer
Intel PROSet Wireless
Intel(R) Control Center
Intel(R) Management Engine Components
Intel(R) Processor Graphics
Intel(R) Wireless Display
Java Auto Updater
Java(TM) 6 Update 31
Malwarebytes Anti-Malware version 1.61.0.1400
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Plus 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Mozilla Firefox 13.0.1 (x86 en-GB)
Mozilla Maintenance Service
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MusicBrainz Picard
PC Wizard 2012.2.0
PhotoShowExpress
PingPlotter Freeware
PowerISO
QuickTime
Realtek High Definition Audio Driver
Roxio Activation Module
Roxio BackOnTrack
Roxio Burn
Roxio Creator Starter
Roxio Express Labeler 3
SABnzbd 0.6.15
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2596880) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597162) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
Security Update for Microsoft Office 2007 suites (KB2598041) 32-Bit Edition
Security Update for Microsoft Office Excel 2007 (KB2597161) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition
Security Update for Microsoft Office Word 2007 (KB2596917) 32-Bit Edition
Sonic CinePlayer Decoder Pack
Sony Ericsson Update Engine
Sony Ericsson Update Service
Sony PC Companion 2.10.065
swMSM
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2687267) 32-Bit Edition
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Visual Studio 2008 x64 Redistributables
Windows Media Player Firefox Plugin
.
==== Event Viewer Messages From Past Week ========
.
23/06/2012 13:18:35, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e (0xffffffffc0000005, 0x0000000000000000, 0x0000000000000008, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 062312-43009-01.
23/06/2012 13:02:55, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e (0xffffffffc0000005, 0x0000000000000000, 0x0000000000000008, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 062312-28376-01.
23/06/2012 11:56:18, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Software Protection service to connect.
23/06/2012 11:56:18, Error: Service Control Manager [7000] - The Software Protection service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
23/06/2012 11:55:47, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Intel(R) Management and Security Application Local Management Service service to connect.
23/06/2012 11:55:47, Error: Service Control Manager [7000] - The Intel(R) Management and Security Application Local Management Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
23/06/2012 11:51:11, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X64 service to connect.
23/06/2012 11:50:41, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.
.
==== End Of File ===========================
Managed to complete the aswMBR scan.
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-06-23 13:19:58
-----------------------------
13:19:58.197 OS Version: Windows x64 6.1.7601 Service Pack 1
13:19:58.197 Number of processors: 4 586 0x2A07
13:19:58.197 ComputerName: JEFF-PC UserName: Jeff
13:19:59.554 Initialize success
13:20:06.652 AVAST engine defs: 12062300
13:20:08.789 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
13:20:08.789 Disk 0 Vendor: WDC_WD32 01.0 Size: 305245MB BusType: 3
13:20:08.805 Disk 0 MBR read successfully
13:20:08.805 Disk 0 MBR scan
13:20:08.820 Disk 0 Windows VISTA default MBR code
13:20:08.820 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 101 MB offset 63
13:20:08.836 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 23000 MB offset 208896
13:20:08.867 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 282142 MB offset 47312896
13:20:08.914 Disk 0 scanning C:\Windows\system32\drivers
13:20:21.628 Service scanning
13:20:47.727 Modules scanning
13:20:47.727 Disk 0 trace - called modules:
13:20:47.742 ntoskrnl.exe CLASSPNP.SYS disk.sys stdcfltn.sys ACPI.sys iaStor.sys hal.dll
13:20:47.742 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800965c060]
13:20:47.742 3 CLASSPNP.SYS[fffff8800185143f] -> nt!IofCallDriver -> [0xfffffa80094a7850]
13:20:47.758 5 stdcfltn.sys[fffff88001b89c52] -> nt!IofCallDriver -> [0xfffffa80076dd800]
13:20:47.758 7 ACPI.sys[fffff88000f867a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80076f4050]
13:20:49.599 AVAST engine scan C:\Windows
13:20:53.344 AVAST engine scan C:\Windows\system32
13:23:45.733 AVAST engine scan C:\Windows\system32\drivers
13:23:58.900 AVAST engine scan C:\Users\Jeff
13:32:55.311 Disk 0 MBR has been saved successfully to "C:\Users\Jeff\Desktop\stid1690\MBR.dat"
13:32:55.311 The log file has been saved successfully to "C:\Users\Jeff\Desktop\stid1690\aswMBR.txt"
aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
Run date: 2012-06-23 13:51:55
-----------------------------
13:51:55.970 OS Version: Windows x64 6.1.7601 Service Pack 1
13:51:55.970 Number of processors: 4 586 0x2A07
13:51:55.970 ComputerName: JEFF-PC UserName: Jeff
13:51:57.040 Initialize success
13:52:01.220 AVAST engine defs: 12062300
13:52:04.058 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
13:52:04.058 Disk 0 Vendor: WDC_WD32 01.0 Size: 305245MB BusType: 3
13:52:04.120 Disk 0 MBR read successfully
13:52:04.120 Disk 0 MBR scan
13:52:04.136 Disk 0 Windows VISTA default MBR code
13:52:04.136 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 101 MB offset 63
13:52:04.167 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 23000 MB offset 208896
13:52:04.182 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 282142 MB offset 47312896
13:52:04.198 Disk 0 scanning C:\Windows\system32\drivers
13:52:34.834 Service scanning
13:54:03.016 Modules scanning
13:54:03.016 Disk 0 trace - called modules:
13:54:03.046 ntoskrnl.exe CLASSPNP.SYS disk.sys stdcfltn.sys ACPI.sys iaStor.sys
13:54:03.376 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800965c060]
13:54:03.386 3 CLASSPNP.SYS[fffff8800185143f] -> nt!IofCallDriver -> [0xfffffa80094a7850]
13:54:03.396 5 stdcfltn.sys[fffff88001b89c52] -> nt!IofCallDriver -> [0xfffffa80076dd800]
13:54:03.416 7 ACPI.sys[fffff88000f867a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80076f4050]
13:54:04.566 AVAST engine scan C:\Windows
13:54:09.179 AVAST engine scan C:\Windows\system32
13:57:12.486 AVAST engine scan C:\Windows\system32\drivers
13:57:25.209 AVAST engine scan C:\Users\Jeff
14:05:40.975 AVAST engine scan C:\ProgramData
14:06:48.785 Scan finished successfully
14:07:19.360 Disk 0 MBR has been saved successfully to "C:\Users\Jeff\Desktop\stid1690\MBR.dat"
14:07:19.360 The log file has been saved successfully to "C:\Users\Jeff\Desktop\stid1690\aswMBR.txt"
.Quote:
Try submitting the stid1690.exe file here..
https://www.virustotal.com/
for a multiscan to confirm it is malware.
Sorry Broni, I didnt make it clear enough. The stid1690 file came up clear on virustotal.comQuote:
Originally Posted by steadyeddie
In that case I don't see anything malicious.
You should be good to go.