[RESOLVED] MALWARE - Fast Clean Pro
I tried to download a CODEC pack for Windows Media Player from CNET.com, but had been tricked into downloading a file called "WECPSetup.exe". After clicking it, FastClean PRO had been installed, and a new search toolbar appeared on my IE 8.0.6001.18702 I am running Windows XP Pro on the PC.
Now, the PC is having this FastClean Pro running all the time and consuming more than 50% of the CPU, and the PC is as slow like a snail.
I have google for a good way of removing this malware, and there are many sites asking to download their 'removal tools', which I think are just more malware.
Is there a good way to getting rid of this FirstClean Pro?
I appreciate your help.
MALWARE - Fast Clean Pro - MalwareBytes Log
============= MalwareBytes Log ======= run on March 4, 2014
=======================================================
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
Database version: v2014.03.04.11
Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
ADMIN :: TEST-0EDA6CF69E [administrator]
3/4/2014 7:55:40 PM
mbam-log-2014-03-04 (19-55-40).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 255216
Time elapsed: 34 minute(s), 13 second(s)
Memory Processes Detected: 3
C:\Program Files\FindRight\updateFindRight.exe (PUP.Optional.FindRight.A) -> 4028 -> Delete on reboot.
C:\Program Files\FindRight\bin\utilFindRight.exe (PUP.Optional.FindRight.A) -> 4888 -> Delete on reboot.
C:\Documents and Settings\ADMIN\Application Data\Search Protection\SearchProtection.exe (PUP.Optional.SearchProtection.A) -> 3636 -> Delete on reboot.
Memory Modules Detected: 5
C:\Program Files\FindRight\FindRightBHO.dll (PUP.Optional.FindRight.A) -> Delete on reboot.
C:\Program Files\Mysearchdial\1.8.29.0\bh\mysearchdial.dll (PUP.Optional.MySearchDial.A) -> Delete on reboot.
C:\Program Files\Mysearchdial\1.8.29.0\mysearchdialApp.dll (PUP.Optional.MySearchDial.A) -> Delete on reboot.
C:\Program Files\Mysearchdial\1.8.29.0\mysearchdialEng.dll (PUP.Optional.MySearchDial.A) -> Delete on reboot.
C:\Program Files\FindRight\bin\sqlite3.dll (PUP.Optional.FindRight.A) -> Delete on reboot.
Registry Keys Detected: 47
HKLM\SYSTEM\CurrentControlSet\Services\Update FindRight (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKLM\SYSTEM\CurrentControlSet\Services\Util FindRight (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{2c774641-5504-46a8-b63f-6715ae3fe376} (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKCR\TypeLib\{c638abe2-47da-4351-b170-e6a673d25ca3} (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKCR\Interface\{4CCADDA1-60AD-48AA-97C2-FA892D2499FB} (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C774641-5504-46A8-B63F-6715AE3FE376} (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2C774641-5504-46A8-B63F-6715AE3FE376} (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\mysearchdial.mysearchdialHlpr.1 (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\mysearchdial.mysearchdialHlpr (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{C358B3D0-B911-41E3-A276-E7D43A6BA56D} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\mysearchdial.mysearchdialappCore.1 (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\mysearchdial.mysearchdialappCore (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{4ED063C9-4A0B-4B44-A9DC-23AFF424A0D3} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\m (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{3004627E-F8E9-4E8B-909D-316753CBA923} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\mysearchdial.mysearchdialdskBnd.1 (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\mysearchdial.mysearchdialdskBnd (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{3004627E-F8E9-4E8B-909D-316753CBA923} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3004627E-F8E9-4E8B-909D-316753CBA923} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} (PUP.Optional.BrowseFox.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\esrv.mysearchdialESrvc.1 (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\esrv.mysearchdialESrvc (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\Typelib\{FBC322D5-407E-4854-8C0B-555B951FD8E3} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCR\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1881A451-F7FB-44BC-85B2-FCEA4B1403E3} (PUP.Optional.Albrechto.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1881A451-F7FB-44BC-85B2-FCEA4B1403E3} (PUP.Optional.Albrechto.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8} (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller (PUP.Optional.Somoto.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FindRight (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKCU\Software\FindRight (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKCU\Software\mysearchdial (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCU\Software\AppDataLow\Software\Search Protection (PUP.Optional.MyEmoticons.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\BI (PUP.Optional.FilesFrog.A) -> Quarantined and deleted successfully.
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Quarantined and deleted successfully.
HKCU\Software\InstallCore\mysearchdial (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\InstallCore\mysearchdial (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
HKLM\Software\FindRight (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
HKLM\Software\InstallIQ (PUP.Optional.InstallBrain.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
Registry Values Detected: 6
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|IMJPMIG8.1 (Trojan.Agent.GN) -> Data: "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{3004627E-F8E9-4E8B-909D-316753CBA923} (PUP.Optional.MySearchDial.A) -> Data: mysearchdial Toolbar -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{3004627E-F8E9-4E8B-909D-316753CBA923} (PUP.Optional.MySearchDial.A) -> Data: -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|SearchProtection (PUP.Optional.SearchProtection.A) -> Data: "C:\Documents and Settings\ADMIN\Application Data\Search Protection\SearchProtection.EXE" /autostart -> Quarantined and deleted successfully.
HKCU\Software\BI|ui_path_filesfrog (PUP.Optional.FilesFrog.A) -> Data: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker -> Quarantined and deleted successfully.
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Data: 0B1G1O1S0V1G1F -> Quarantined and deleted successfully.
Registry Data Items Detected: 1
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.MySearchDial.A) -> Bad: (http://start.mysearchdial.com/?f=1&a...=885997282&ir=) Good: (http://www.google.com) -> Quarantined and repaired successfully.
Folders Detected: 12
C:\Program Files\FindRight (PUP.Optional.FindRight.A) -> Delete on reboot.
C:\Program Files\FindRight\bin (PUP.Optional.FindRight.A) -> Delete on reboot.
C:\Program Files\FindRight\bin\plugins (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Application Data\mysearchdial (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Application Data\mysearchdial\icons_2.17.0.1 (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Application Data\mysearchdial\mysearchdial (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Application Data\mysearchdial\UpdateProc (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Program Files\Mysearchdial (PUP.Optional.MySearchDial.A) -> Delete on reboot.
C:\Program Files\Mysearchdial\1.8.29.0 (PUP.Optional.MySearchDial.A) -> Delete on reboot.
C:\Program Files\Mysearchdial\1.8.29.0\bh (PUP.Optional.MySearchDial.A) -> Delete on reboot.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2 (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702 (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
Files Detected: 90
C:\Program Files\FindRight\updateFindRight.exe (PUP.Optional.FindRight.A) -> Delete on reboot.
C:\Program Files\FindRight\bin\utilFindRight.exe (PUP.Optional.FindRight.A) -> Delete on reboot.
C:\Program Files\FindRight\FindRightBHO.dll (PUP.Optional.FindRight.A) -> Delete on reboot.
C:\Program Files\Mysearchdial\1.8.29.0\bh\mysearchdial.dll (PUP.Optional.MySearchDial.A) -> Delete on reboot.
C:\Program Files\Mysearchdial\1.8.29.0\mysearchdialApp.dll (PUP.Optional.MySearchDial.A) -> Delete on reboot.
C:\Program Files\Mysearchdial\1.8.29.0\mysearchdialEng.dll (PUP.Optional.MySearchDial.A) -> Delete on reboot.
C:\WINDOWS\ime\imjp8_1\imjpmig.exe (Trojan.Agent.GN) -> Quarantined and deleted successfully.
C:\Program Files\Mysearchdial\1.8.29.0\mysearchdialTlbr.dll (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Program Files\Mysearchdial\1.8.29.0\mysearchdialsrv.exe (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Application Data\mysearchdial\UpdateProc\UpdateTask.exe (PUP.Optional.DealPly) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\YouTube Downloader\ytd_installer.exe (PUP.Optional.Spigot.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\YTD Video Downloader\ytd_installer.exe (PUP.Optional.Spigot.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\My Documents\Downloads\InstallConverter_brff(1).exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\My Documents\Downloads\InstallConverter_brff.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\My Documents\Downloads\iLividSetup-r418-n-bc.exe (PUP.Optional.Bandoo) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\My Documents\Downloads\iLividSetup.exe (PUP.Optional.Bandoo) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\My Documents\Downloads\iLividSetupV1.exe (PUP.Optional.Bandoo) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\My Documents\Downloads\coretemp_d7632790 (1).exe (PUP.Optional.InstallIQ) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\My Documents\Downloads\coretemp_d7632790.exe (PUP.Optional.InstallIQ) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\My Documents\Downloads\ezlyrkaraoke_1337.exe (PUP.Optional.InstallIQ.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\temp\UpdateCheckerSetup.exe (PUP.Optional.Somoto.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\temp\pricepeep_130001_0101.exe (PUP.Optional.PricePeep.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\temp\mconduitinstaller.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\temp\OptimizerPro.exe (PUP.Optional.OptimizePro.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\temp\nso2E2.tmp\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\temp\is30925921\mysearchdial.dll (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\temp\is349140818\30032319_stp\FindRightSetup.exe (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\Bundled software uninstaller\biclient.exe (PUP.Optional.Somoto.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Temporary Internet Files\Content.IE5\GAMWXXHV\Setup[1].exe (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Temporary Internet Files\Content.IE5\JB0URMBH\Setup[1].exe (PUP.Optional.Albrecto.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\FindRight.ico (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\0 (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\7za.exe (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\FindRight.BrowserFilter.Helper.dll (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\FindRightBrowserFilter.exe (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\FindRightUninstall.exe (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\updateFindRight.InstallState (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\bin\FindRight.BrowserFilter.Helper.dll (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\bin\FindRightBrowserFilter.exe (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\bin\sqlite3.dll (PUP.Optional.FindRight.A) -> Delete on reboot.
C:\Program Files\FindRight\bin\utilFindRight.InstallState (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\bin\plugins\FindRight.BrowserFilterG.dll (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\bin\plugins\FindRight.CompatibilityChecker.dll (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\bin\plugins\FindRight.FFUpdate.dll (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Program Files\FindRight\bin\plugins\FindRight.IEUpdate.dll (PUP.Optional.FindRight.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Application Data\Search Protection\SearchProtection.exe (PUP.Optional.SearchProtection.A) -> Delete on reboot.
C:\Documents and Settings\ADMIN\Application Data\mysearchdial\UpdateProc\config.dat (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Application Data\mysearchdial\UpdateProc\STTL.DAT (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Application Data\mysearchdial\UpdateProc\TTL.DAT (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Program Files\Mysearchdial\1.8.29.0\FavIcon.ico (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Program Files\Mysearchdial\1.8.29.0\Sqlite3.dll (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Program Files\Mysearchdial\1.8.29.0\uninst.dat (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Program Files\Mysearchdial\1.8.29.0\uninstall.exe (PUP.Optional.MySearchDial.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\passport.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\TNT2UserPS.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\Autorun.inf (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\crx.tar (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\GameApps.ini (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\GameConsole.exe (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\GameEngine.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\GLOBALUNINSTALL.TNT (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\hmac.1.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\iestage2.1.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\IEToolbar.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\IEToolbar64.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\INSTALL.TNT (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\log.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\MinecraftShims64.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\npTNT2.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\npTNT2Ghost.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\PARTNER.TNT (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\passport64.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\pinnedSearch.htm (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\pinnedSearch_FindWide.htm (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\progress.1.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\regsvr.1.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\RemoteSkin.wms (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\sqlite.1.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\tnt2chrome.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\TNT2User.exe (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\TNT2UserPS64.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\TntMagicDel.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\UnInjLib.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\UnInjLib64.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\UNINSTALL.TNT (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\UninstallDlg.1.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\untar.1.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\UPDATE.TNT (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\xpi.tar (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
C:\Documents and Settings\ADMIN\Local Settings\Application Data\TNT2\2.0.0.1702\zipunzip.1.dll (PUP.Optional.TidyNetwork.A) -> Quarantined and deleted successfully.
(end)
Win XP Pro SP3.
MALWARE - Fast Clean Pro - DDS txt
======= DDS txt - run on March 4, 2014 ======
=======================================
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.51.2
Run by ADMIN at 20:52:27 on 2014-03-04
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3191.2146 [GMT -5:00]
.
AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ================
.
C:\Program Files\Tencent\QQPCMgr\7.3.8099.213\QQPCRtp.exe
C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\1.3.22.5\GoogleCrashHandler.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe
C:\Program Files\AVG SafeGuard toolbar\vprot.exe
C:\Documents and Settings\ADMIN\Local Settings\Application Data\Sevas-S\YouTube to MP3 Converter\yt2mp3_updater.exe
C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Documents and Settings\ADMIN\Local Settings\Application Data\Sevas-S\YouTube To MP3 Converter\yt2mp3converter.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SogouInput\Components\AddressSearch\1.0.0.1178\SGImeGuard.exe
C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\FastClean PRO\fastcleanpro.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k netsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.ca/
mStart Page = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: HelperObject Class: {00C6482D-C502-44C8-8409-FCE54AD9C208} - c:\program files\techsmith\snagit 7\SnagItBHO.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.7.9012.1008\swg.dll
BHO: WOT Helper: {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - c:\program files\wot\WOT.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: YouTube to MP3 Converter: {E71596B0-A83B-453D-82C1-4BE99947C65F} - c:\documents and settings\admin\local settings\application data\sevas-s\youtube to mp3 converter\browserextensions\ie\YouTubeDownloaderExtension.dll
BHO: GretechBHO Class: {F0181C6E-9218-4792-9F3C-E8DF52B2F1AC} - c:\program files\gretech\gompicker\GomPickerBHO1.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: WOT: {71576546-354D-41C9-AAE8-31F2EC22BF0D} - c:\program files\wot\WOT.dll
TB: SnagIt: {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - c:\program files\techsmith\snagit 7\SnagItIEAddin.dll
TB: WOT: {71576546-354D-41c9-AAE8-31F2EC22BF0D} - c:\program files\wot\WOT.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [ImeGuardCom] c:\program files\sogouinput\components\addresssearch\1.0.0.1178\SGImeGuard.exe
uRun: [Google Update] "c:\documents and settings\admin\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe"
uRun: [GoogleDriveSync] "c:\program files\google\drive\googledrivesync.exe" /autostart
uRun: [AVG-Secure-Search-Update_1113a] c:\documents and settings\admin\application data\avg 1113a campaign\AVG-Secure-Search-Update-1113a.exe /PROMPT /mid=Unknown /CMPID=1113a
uRun: [fastclean] "c:\program files\fastclean pro\fastcleanpro.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [Linksys Wireless Manager] "c:\program files\linksys\linksys wireless manager\LinksysWirelessManager.exe" /cm /min /lcid 1033
mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
mRun: [AVG_UI] "c:\program files\avg\avg2014\avgui.exe" /TRAYONLY
mRun: [vProt] "c:\program files\avg safeguard toolbar\vprot.exe"
mRun: [YouTube to MP3 Converter Updater] c:\documents and settings\admin\local settings\application data\sevas-s\youtube to mp3 converter\yt2mp3_updater.exe
mRun: [WD Drive Manager] c:\program files\western digital\wd drive manager\WDBtnMgrUI.exe
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [ QQPCTray] "c:\program files\tencent\qqpcmgr\7.3.8099.213\QQPCTray.exe" /regrun
mRun: [nmctxth] "c:\program files\common files\pure networks shared\platform\nmctxth.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
uPolicies-Explorer: NoDriveTypeAutoRun = dword:323
uPolicies-Explorer: NoDriveAutoRun = dword:67108863
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDrives = dword:0
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {C6B95BE9-4373-4BF8-9D18-9FCEAE5563F0} - hxxps://col0-sec.mail.live.com/mail/MailMigrationCabFileHolder.aspx?n=64163164
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{ECE18B44-B075-4E67-9D65-BBC70BFDC123} : DHCPNameServer = 192.168.0.1
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll
Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - c:\program files\common files\pure networks shared\platform\puresp4.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.146\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\admin\application data\mozilla\firefox\profiles\1scr8ssh.default\
FF - prefs.js: browser.startup.homepage - hxxp://start.mysearchdial.com/?f=1&a=irmsd0202ie&cd=2XzuyEtN2Y1L1QzutDtDtCtCzzyD0D0E0AzzyCtA0Azy0AtCtN0D0Tzu0SyBzyyEtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyByCzyzy0DtByDtG0EyCzz0EtG0E0B0CtDtGyCyDyCtAtGtD0Bzy0B0By
CtCtA0AzytCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtDzytDtBzy0FyCtGzztDyDyBtGtByCtAtAtG0DtA0D0DtGtDtA0FyEyDtDyDyEyC0F0BtB2Q&cr=885997282&ir=
FF - prefs.js: browser.search.selectedEngine - Yahoo!
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=
FF - plugin: c:\documents and settings\admin\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\documents and settings\admin\application data\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\documents and settings\admin\application data\mozilla\plugins\npo1d.dll
FF - plugin: c:\documents and settings\admin\local settings\application data\google\update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: c:\documents and settings\admin\local settings\application data\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\common files\tencent\txsso\1.2.1.42\bin\npSSOAxCtrlForPTLogin.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20125.0\npctrlui.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_9_900_170.dll
.
---- FIREFOX POLICIES ----
.
.
.
.
.
FF - user.js: extensions.mysearchdial.hmpg - true
FF - user.js: extensions.mysearchdial.hmpgUrl - hxxp://start.mysearchdial.com/?f=1&a=irmsd0202ie&cd=2XzuyEtN2Y1L1QzutDtDtCtCzzyD0D0E0AzzyCtA0Azy0AtCtN0D0Tzu0SyBzyyEtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzyt
DtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyByCzyz
y0DtByDtG0EyCzz0EtG0E0B0CtDtGyCyDyCtAtGtD0Bzy0B0ByCtCtA0AzytCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtDzytDtBzy0FyCtGzztDyDyBtGtByCtAtAtG0DtA0D0DtGtDtA0FyEyDtDyDyEyC0F0BtB2Q&cr=885997282&ir=
FF - user.js: extensions.mysearchdial.dfltSrch - true
FF - user.js: extensions.mysearchdial.srchPrvdr - Mysearchdial
FF - user.js: extensions.mysearchdial.dnsErr - true
FF - user.js: extensions.mysearchdial_i.newTab - false
FF - user.js: extensions.mysearchdial.newTabUrl - hxxp://start.mysearchdial.com/?f=2&a=irmsd0202ie&cd=2XzuyEtN2Y1L1QzutDtDtCtCzzyD0D0E0AzzyCtA0Azy0AtCtN0D0Tzu0SyBzyyEtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyByCzyzy0DtByDtG0EyCzz0EtG0E0B0CtDtGyCyDyCtAtGtD0Bzy0B0ByCtCtA0
AzytCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtDzytDtBzy0FyCtGzztDyDyBtGtByCtAtAtG0DtA0D0DtGtDtA0FyEyDtDyDyEyC0F0BtB2Q&cr=885997282&ir=
FF - user.js: extensions.mysearchdial.tlbrSrchUrl - hxxp://start.mysearchdial.com/?f=3&a=irmsd0202ie&cd=2XzuyEtN2Y1L1QzutDtDtCtCzzyD0D0E0AzzyCtA0Azy0AtCtN0D0Tzu0SyBzyyEtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyByCzyzy0DtByDtG0EyCzz0EtG0E0B0CtDtGyCyDyCtAtGtD0Bzy0B0ByCtCtA0
AzytCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtDzytDtBzy0FyCtGzztDyDyBtGtByCtAtAtG0DtA0D0DtGtDtA0FyEyDtDyDyEyC0F0BtB2Q&cr=885997282&ir=&q=
FF - user.js: extensions.mysearchdial.id - 001185DEA863A9A1
FF - user.js: extensions.mysearchdial.instlDay - 16133
FF - user.js: extensions.mysearchdial.vrsn - 1.8.29.0
FF - user.js: extensions.mysearchdial.vrsni - 1.8.29.0
FF - user.js: extensions.mysearchdial_i.vrsnTs - 1.8.29.015:8:37
FF - user.js: extensions.mysearchdial.prtnrId - mysearchdial
FF - user.js: extensions.mysearchdial.prdct - mysearchdial
FF - user.js: extensions.mysearchdial.aflt - irmsd0202ie
FF - user.js: extensions.mysearchdial_i.smplGrp - none
FF - user.js: extensions.mysearchdial.tlbrId - base
FF - user.js: extensions.mysearchdial.instlRef - 0901-a
FF - user.js: extensions.mysearchdial.dfltLng -
FF - user.js: extensions.mysearchdial.appId - {CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
FF - user.js: extensions.mysearchdial.excTlbr - false
FF - user.js: extensions.mysearchdial_i.hmpg - true
FF - user.js: extensions.mysearchdial.cr - 885997282
FF - user.js: extensions.mysearchdial.cd - 2XzuyEtN2Y1L1QzutDtDtCtCzzyD0D0E0AzzyCtA0Azy0AtCtN0D0Tzu0SyBzyyEtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyByCzyzy0DtByDtG0Ey
zz0EtG0E0B0CtDtGyCyDyCtAtGtD0Bzy0B0ByCtC
tA0AzytCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtDzytDtBzy0FyCtGzztDyDyBtGtByCtAtAtG0DtA0D0DtGtDtA0FyEyDtDyDyEyC0F0BtB2Q
FF - user.js: extensions.mysearchdial.AL - 2
.
user_pref(extensions.autoDisableScopes,14);
FF - user.js: extensions.irmysearch.aflt - irmsd0202ie
FF - user.js: extensions.irmysearch.instlRef - 0901-a
FF - user.js: extensions.irmysearch.cr - 885997282
FF - user.js: extensions.irmysearch.cd - 2XzuyEtN2Y1L1QzutDtDtCtCzzyD0D0E0AzzyCtA0Azy0AtCtN0D0Tzu0SyBzyyEtN1L2XzutBtFtCyBtFtDtFtCtN1L1CzutDzytDtCtG1TtN1L1G1B1V1N2Y1L1Qzu2SyEyByCzyzy0DtByDtG0EyCzz0EtG0E0B0CtDtGyCyDyCtAtGtD0Bzy
0B0ByCtCtA0AzytCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtDzytDtBzy0FyCtGzztDyDyBtGtByCtAtAtG0DtA0D0DtGtDtA0FyEyDtDyDyEyC0F0BtB2Q
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2013-2-8 149272]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2013-2-8 222520]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2013-2-8 102712]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2013-2-8 27448]
R0 TsFltMgr;TsFltMgr;c:\windows\system32\drivers\TsFltMgr.sys [2012-11-16 73024]
R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\drivers\avgdiskx.sys [2013-8-1 120600]
R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2013-2-26 210712]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2013-3-1 22808]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2013-2-8 176952]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2013-2-14 193848]
R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2013-4-11 33112]
R1 RapportCerberus_59849;RapportCerberus_59849;c:\documents and settings\all users\application data\trusteer\rapport\store\exts\rapportcerberus\baseline\RapportCerberus32_59849.sys [2014-1-2 340432]
R1 RapportEI;RapportEI;c:\program files\trusteer\rapport\bin\RapportEI.sys [2014-2-10 155704]
R1 TSDefenseBt;TSDefenseBt;c:\windows\system32\drivers\TSDefenseBt.sys [2012-11-16 60448]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2014\avgidsagent.exe [2014-1-22 3788816]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2014\avgwdsvc.exe [2013-9-24 348008]
R2 cvhsvc;Client Virtualization Handler;c:\program files\common files\microsoft shared\virtualization handler\CVHSVC.EXE [2013-4-22 822504]
R2 OkiPar;OkiPar;c:\windows\system32\drivers\OkiPar.sys [2011-12-23 43656]
R2 QQPCRTP;QQPCMgr RTP Service;c:\program files\tencent\qqpcmgr\7.3.8099.213\qqpcrtp.exe -r --> c:\program files\tencent\qqpcmgr\7.3.8099.213\QQPCRtp.exe -r [?]
R2 RapportMgmtService;Rapport Management Service;c:\program files\trusteer\rapport\bin\RapportMgmtService.exe [2014-2-10 1444120]
R2 sftlist;Application Virtualization Client;c:\program files\microsoft application virtualization client\sftlist.exe [2013-6-26 523944]
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\all users\application data\skype\toolbars\skype c2c service\c2c_service.exe [2013-3-19 3289208]
R2 WDBtnMgrSvc.exe;WD Drive Manager Service;c:\program files\western digital\wd drive manager\WDBtnMgrSvc.exe [2008-1-30 106496]
R3 Sftfs;Sftfs;c:\windows\system32\drivers\Sftfsxp.sys [2011-10-1 587944]
R3 Sftplay;Sftplay;c:\windows\system32\drivers\Sftplayxp.sys [2011-10-1 213288]
R3 Sftredir;Sftredir;c:\windows\system32\drivers\Sftredirxp.sys [2011-10-1 23208]
R3 Sftvol;Sftvol;c:\windows\system32\drivers\Sftvolxp.sys [2011-10-1 19112]
R3 sftvsa;Application Virtualization Service Agent;c:\program files\microsoft application virtualization client\sftvsa.exe [2013-6-26 207528]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-7-20 754856]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-9-5 171680]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2011-7-15 167264]
S3 CorelCreatorMessages;CorelCreatorMessages;"c:\windows\system32\corelcreatormessages.exe" --> c:\windows\system32\CorelCreatorMessages.exe [?]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589;c:\program files\google\google desktop search\GoogleDesktop.exe [2009-2-3 30192]
S3 HP8207_8307;HP-HP8207_8307;c:\windows\system32\drivers\hp8207_8307.sys --> c:\windows\system32\drivers\HP8207_8307.sys [?]
S3 RapportKELL;RapportKELL;c:\windows\system32\drivers\RapportKELL.sys [2014-2-10 107256]
S3 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2014-2-10 228888]
S3 TcHardWare;TcHardWare;\??\c:\program files\tencent\qqpcmgr\7.3.8099.213\qqpchw.sys --> c:\program files\tencent\qqpcmgr\7.3.8099.213\QQPCHW.sys [?]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2008-5-6 11520]
S3 WUSB54GCv3;Compact Wireless-G USB Network Adapter;c:\windows\system32\drivers\WUSB54GCv3.sys [2011-1-19 627072]
.
=============== Created Last 30 ================
.
2014-03-04 20:13:28 -------- d-----w- c:\documents and settings\admin\local settings\application data\fastcleanpro
2014-03-04 20:09:21 -------- d-----w- c:\program files\FastClean PRO
2014-03-04 20:08:13 -------- d-----w- c:\program files\Essentials Codec Pack
2014-03-04 20:04:41 -------- d-----w- C:\SOFTWARE-WinMediaPlayer Codec
2014-02-25 14:57:45 -------- d-----w- C:\HP Envy 700-149 Details
2014-02-22 01:15:40 -------- d-----w- C:\SOFTWARE-OKI Drivers
2014-02-20 11:34:34 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2014-02-19 11:27:01 275696 ----a-w- c:\windows\system32\mucltui.dll
2014-02-19 11:27:01 214256 ----a-w- c:\windows\system32\muweb.dll
2014-02-19 11:27:01 17136 ----a-w- c:\windows\system32\mucltui.dll.mui
2014-02-19 01:12:24 -------- d-----w- c:\documents and settings\admin\local settings\application data\Microsoft Help
2014-02-18 18:43:57 -------- d-----w- c:\documents and settings\all users\application data\VirtualizedApplications
2014-02-18 16:28:16 -------- d-----w- c:\documents and settings\admin\local settings\application data\SoftGrid Client
2014-02-18 16:28:14 -------- d-----w- c:\documents and settings\admin\application data\SoftGrid Client
2014-02-18 16:20:12 -------- d-----w- c:\program files\Microsoft Application Virtualization Client
2014-02-18 16:20:12 -------- d-----w- c:\documents and settings\all users\Microsoft
2014-02-18 16:15:25 -------- d-----w- c:\documents and settings\admin\application data\TP
2014-02-18 13:33:51 -------- d-----w- C:\SOFTWARE-Microsoft Office 2010 (Paid via SoftwareKing)
2014-02-15 23:18:55 -------- d-----w- C:\WIN 8 Tech Stuff
2014-02-15 15:18:20 -------- d-----w- C:\SOFTWARE-ClassicShell
2014-02-15 13:48:51 -------- d-----w- C:\SOFTWARE-PowerISO
2014-02-10 16:35:40 107256 ----a-w- c:\windows\system32\drivers\RapportKELL.sys
2014-02-10 13:36:23 -------- d-----w- c:\documents and settings\admin\application data\BHOK
2014-02-10 12:50:20 -------- d-----w- c:\program files\BHOK IT Consulting
2014-02-10 12:40:11 -------- d-----w- c:\documents and settings\all users\TaxFreeway 2013
2014-02-10 12:13:49 -------- d-----w- c:\program files\Entropy Technology Ltd
2014-02-04 12:21:41 -------- d-----w- c:\windows\system32\URTTemp
.
==================== Find3M ====================
.
2014-02-21 19:55:48 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 19:55:48 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-02-05 23:26:52 920064 ----a-w- c:\windows\system32\wininet.dll
2014-02-05 23:26:43 43520 ------w- c:\windows\system32\licmgr10.dll
2014-02-05 23:26:42 1469440 ------w- c:\windows\system32\inetcpl.cpl
2014-02-05 23:26:37 18944 ----a-w- c:\windows\system32\corpol.dll
2014-02-05 22:24:05 385024 ------w- c:\windows\system32\html.iec
2014-01-20 02:46:54 22808 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys
2014-01-07 18:11:30 143360 ----a-w- c:\windows\system32\OPDMN094.DLL
2014-01-04 03:13:05 420864 ----a-w- c:\windows\system32\vbscript.dll
2013-12-19 02:10:01 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-12-19 01:46:50 145408 ----a-w- c:\windows\system32\javacpl.cpl
2013-12-05 11:26:06 1172992 ----a-w- c:\windows\system32\msxml3.dll
2004-10-01 19:00:16 40960 ----a-w- c:\program files\Uninstall_CDS.exe
.
============= FINISH: 20:54:28.37 ===============
MALWARE - Fast Clean Pro Attach.txt
============= DDS Attach.txt run on March 4, 2014 ===========
=======================================================
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 7/11/2008 4:34:14 PM
System Uptime: 3/4/2014 8:42:55 PM (0 hours ago)
.
Motherboard: Hewlett-Packard | | 0968h
Processor: Intel(R) Pentium(R) 4 CPU 3.40GHz | XU1 PROCESSOR | 3391/800mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 75 GiB total, 16.989 GiB free.
D: is CDROM ()
E: is FIXED (NTFS) - 1863 GiB total, 778.448 GiB free.
F: is FIXED (NTFS) - 466 GiB total, 463.713 GiB free.
G: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E96F-E325-11CE-BFC1-08002BE10318}
Description: PS/2 Compatible Mouse
Device ID: ACPI\PNP0F13\4&1117367&0
Manufacturer: Microsoft
Name: PS/2 Compatible Mouse
PNP Device ID: ACPI\PNP0F13\4&1117367&0
Service: i8042prt
.
Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}
Description: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
Device ID: ACPI\PNP0303\4&1117367&0
Manufacturer: (Standard keyboards)
Name: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
PNP Device ID: ACPI\PNP0303\4&1117367&0
Service: i8042prt
.
==== System Restore Points ===================
.
RP472: 1/27/2014 6:30:34 AM - Software Distribution Service 3.0
RP473: 1/28/2014 6:07:00 AM - Software Distribution Service 3.0
RP474: 1/29/2014 5:10:52 AM - Software Distribution Service 3.0
RP475: 1/29/2014 8:08:11 PM - Software Distribution Service 3.0
RP476: 1/30/2014 5:18:11 AM - Software Distribution Service 3.0
RP477: 1/31/2014 5:41:37 AM - Software Distribution Service 3.0
RP478: 2/1/2014 7:53:19 AM - Software Distribution Service 3.0
RP479: 2/2/2014 7:21:11 AM - Software Distribution Service 3.0
RP480: 2/3/2014 10:13:49 AM - System Checkpoint
RP481: 2/4/2014 7:20:26 AM - Software Distribution Service 3.0
RP482: 2/5/2014 6:43:04 AM - Software Distribution Service 3.0
RP483: 2/6/2014 3:00:35 AM - Software Distribution Service 3.0
RP484: 2/6/2014 7:03:09 AM - Software Distribution Service 3.0
RP485: 2/7/2014 6:48:51 AM - Software Distribution Service 3.0
RP486: 2/8/2014 9:21:53 AM - System Checkpoint
RP487: 2/9/2014 8:55:42 AM - Software Distribution Service 3.0
RP488: 2/10/2014 5:35:03 AM - Software Distribution Service 3.0
RP489: 2/10/2014 7:11:43 AM - Installed MSXML 4.0 SP3 Parser
RP490: 2/10/2014 7:13:24 AM - Installed TaxFreeway 2013.
RP491: 2/10/2014 7:50:18 AM - Installed StudioTax 2013
RP492: 2/11/2014 5:43:03 AM - Software Distribution Service 3.0
RP493: 2/12/2014 6:12:16 AM - Software Distribution Service 3.0
RP494: 2/12/2014 8:34:47 AM - Installed AVG 2014
RP495: 2/13/2014 10:50:08 AM - System Checkpoint
RP496: 2/14/2014 6:01:37 AM - Software Distribution Service 3.0
RP497: 2/15/2014 6:20:24 AM - Software Distribution Service 3.0
RP498: 2/16/2014 6:23:53 AM - Software Distribution Service 3.0
RP499: 2/17/2014 3:00:15 AM - Software Distribution Service 3.0
RP500: 2/18/2014 4:36:35 AM - Software Distribution Service 3.0
RP501: 2/18/2014 11:28:43 AM - Printer Driver Send To Microsoft OneNote 2010 Driver Installed
RP502: 2/18/2014 11:49:48 AM - Removed Corel PDF Fusion Addins
RP503: 2/18/2014 11:50:54 AM - Removed Corel PDF Fusion.
RP504: 2/19/2014 9:29:37 AM - Installed Rapport
RP505: 2/20/2014 6:03:25 AM - Software Distribution Service 3.0
RP506: 2/21/2014 6:11:04 AM - Software Distribution Service 3.0
RP507: 2/21/2014 6:33:38 AM - Software Distribution Service 3.0
RP508: 2/22/2014 7:08:45 AM - Software Distribution Service 3.0
RP509: 2/22/2014 2:41:43 PM - Installed Rapport
RP510: 2/23/2014 8:05:15 AM - Software Distribution Service 3.0
RP511: 2/24/2014 6:55:06 AM - Software Distribution Service 3.0
RP512: 2/25/2014 6:15:31 AM - Software Distribution Service 3.0
RP513: 2/26/2014 7:10:04 AM - Software Distribution Service 3.0
RP514: 2/27/2014 6:57:50 AM - Software Distribution Service 3.0
RP515: 2/28/2014 6:51:10 AM - Software Distribution Service 3.0
RP516: 3/1/2014 8:29:29 AM - Software Distribution Service 3.0
RP517: 3/2/2014 8:21:45 AM - Software Distribution Service 3.0
RP518: 3/3/2014 6:34:46 AM - Software Distribution Service 3.0
RP519: 3/4/2014 6:49:26 AM - Software Distribution Service 3.0
RP520: 3/4/2014 3:08:57 PM - Installed FastClean PRO
.
==== Installed Programs ======================
.
?????
??????? 6.5???
µTorrent
7-zip v9.20
Acrobat.com
Adobe AIR
Adobe Digital Editions
Adobe Flash Player 12 ActiveX
Adobe Flash Player 12 Plugin
Adobe Reader 9
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVG 2014
AVG SafeGuard toolbar
AviSubtitler v2.02
B410 420 430 UserGuide
Belarc Advisor 7.2
Broadcom NetXtreme Ethernet Controller
Canon Camera Access Library
Canon CanoScan Toolbox 4.5
Canon DIGITAL CAMERA Solution Disk Software Guide
Canon MOV Decoder
Canon MOV Encoder
Canon MovieEdit Task for ZoomBrowser EX
Canon PowerShot A1200 Camera User Guide
Canon Utilities CameraWindow DC 8
Canon Utilities CameraWindow Launcher
Canon Utilities Movie Uploader for YouTube
Canon Utilities MyCamera
Canon Utilities PhotoStitch
Canon Utilities ZoomBrowser EX
Canon ZoomBrowser EX Memory Card Utility
CCleaner
CD+G Disc Player Plug-In for Winamp
CDRWIN
CloneCD
Compatibility Pack for the 2007 Office system
Core Temp 1.0 RC6
CoreAAC
CPUID CPU-Z 1.61.3
Dia (remove only)
doPDF 7.3 printer
DVD Solution
ESET Online Scanner v3
EvilLyrics
FastClean PRO
File Opener Pro
FLAC 1.2.1b (remove only)
FLV to MP3 Converter
Free CD Ripper 3.1
Free FLV to MP4 Converter
Free MP4 Video Converter version 5.0.20.1031
Free Sound Recorder 2010 v9.2.1
Free Studio version 5.3.3
Free Word/Doc Txt to Image Jpg/Jpeg Bmp Tiff Png Converter 5.1
FreeRIP3 3.70
GoldWave v5.14
GOM PICKER
GOM Player
GOM Video Converter
Google Chrome
Google Desktop
Google Earth
Google Talk Plugin
Google Toolbar for Internet Explorer
Google Update Helper
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB2633952)
Hotfix for Windows XP (KB2756822)
Hotfix for Windows XP (KB2779562)
Hotfix for Windows XP (KB942288-v3)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
Intel(R) Graphics Media Accelerator Driver
InterActual Player
IrfanView (remove only)
IsoBuster 2.4
iTunes
Japanese Fonts Support For Adobe Reader 9
Java 7 Update 51
Java Auto Updater
Jing
K-Lite Codec Pack 2.72 Full
Karaoke Builder Studio 3.x
Karaoke for DirectX (remove only)
LAME v3.98.3 for Audacity
Linksys Wireless Manager
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2698023)
Microsoft .NET Framework 1.1 Security Update (KB2742597)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft Office 2003 Primary Interop Assemblies
Microsoft Office Click-to-Run 2010
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2010 - English
Microsoft Office Professional Edition 2003
Microsoft Office Visio Professional 2003
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Visual Studio 2005 Tools for Office Runtime
Microsoft Works 6-9 Converter
Monkey's Audio
Mozilla Firefox 26.0 (x86 en-US)
Mozilla Maintenance Service
Mozilla Thunderbird 17.0.6 (x86 en-US)
MP3+G Toolz
MPEG2 Codec(libmpeg2/mad)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB2758694)
MSXML 6.0 Parser (KB933579)
Multimedia Launcher
Nero 7 Premium
Nitro PDF Professional
OKI B410 Printer Menu Setup Tool
PCFriendly
PDF Form Filler 2
Picasa 2
Power CD+G Burner 2
Power CD+G to Video Karaoke Converter 2
PowerDVD
PowerProducer
Pure Networks Platform
QQ??8.5
QuickTime
QuickWordtoPDF
Rapport
Samsung_MonSetup
Search Protection
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2832407)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2861188)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2898855v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2901110v2)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)
Security Update for Microsoft .NET Framework 4 Extended (KB2901110v2)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB2744842)
Security Update for Windows Internet Explorer 8 (KB2817183)
Security Update for Windows Internet Explorer 8 (KB2829530)
Security Update for Windows Internet Explorer 8 (KB2838727)
Security Update for Windows Internet Explorer 8 (KB2846071)
Security Update for Windows Internet Explorer 8 (KB2847204)
Security Update for Windows Internet Explorer 8 (KB2862772)
Security Update for Windows Internet Explorer 8 (KB2870699)
Security Update for Windows Internet Explorer 8 (KB2879017)
Security Update for Windows Internet Explorer 8 (KB2888505)
Security Update for Windows Internet Explorer 8 (KB2898785)
Security Update for Windows Internet Explorer 8 (KB2909210)
Security Update for Windows Internet Explorer 8 (KB2909921)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB2834904-v2)
Security Update for Windows Media Player (KB2834904)
Security Update for Windows Media Player (KB2845142)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player (KB979402)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2482017)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2585542)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2619339)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2621440)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2633171)
Security Update for Windows XP (KB2639417)
Security Update for Windows XP (KB2641653)
Security Update for Windows XP (KB2646524)
Security Update for Windows XP (KB2647518)
Security Update for Windows XP (KB2653956)
Security Update for Windows XP (KB2655992)
Security Update for Windows XP (KB2659262)
Security Update for Windows XP (KB2660465)
Security Update for Windows XP (KB2661637)
Security Update for Windows XP (KB2676562)
Security Update for Windows XP (KB2685939)
Security Update for Windows XP (KB2686509)
Security Update for Windows XP (KB2691442)
Security Update for Windows XP (KB2695962)
Security Update for Windows XP (KB2698365)
Security Update for Windows XP (KB2705219)
Security Update for Windows XP (KB2707511)
Security Update for Windows XP (KB2709162)
Security Update for Windows XP (KB2712808)
Security Update for Windows XP (KB2718523)
Security Update for Windows XP (KB2719985)
Security Update for Windows XP (KB2723135)
Security Update for Windows XP (KB2724197)
Security Update for Windows XP (KB2727528)
Security Update for Windows XP (KB2731847)
Security Update for Windows XP (KB2753842-v2)
Security Update for Windows XP (KB2753842)
Security Update for Windows XP (KB2757638)
Security Update for Windows XP (KB2758857)
Security Update for Windows XP (KB2761226)
Security Update for Windows XP (KB2770660)
Security Update for Windows XP (KB2778344)
Security Update for Windows XP (KB2779030)
Security Update for Windows XP (KB2780091)
Security Update for Windows XP (KB2799494)
Security Update for Windows XP (KB2802968)
Security Update for Windows XP (KB2807986)
Security Update for Windows XP (KB2808735)
Security Update for Windows XP (KB2813170)
Security Update for Windows XP (KB2813345)
Security Update for Windows XP (KB2820197)
Security Update for Windows XP (KB2820917)
Security Update for Windows XP (KB2829361)
Security Update for Windows XP (KB2834886)
Security Update for Windows XP (KB2839229)
Security Update for Windows XP (KB2845187)
Security Update for Windows XP (KB2847311)
Security Update for Windows XP (KB2849470)
Security Update for Windows XP (KB2850851)
Security Update for Windows XP (KB2850869)
Security Update for Windows XP (KB2859537)
Security Update for Windows XP (KB2862152)
Security Update for Windows XP (KB2862330)
Security Update for Windows XP (KB2862335)
Security Update for Windows XP (KB2864063)
Security Update for Windows XP (KB2868038)
Security Update for Windows XP (KB2868626)
Security Update for Windows XP (KB2876217)
Security Update for Windows XP (KB2876315)
Security Update for Windows XP (KB2876331)
Security Update for Windows XP (KB2883150)
Security Update for Windows XP (KB2892075)
Security Update for Windows XP (KB2893294)
Security Update for Windows XP (KB2893984)
Security Update for Windows XP (KB2898715)
Security Update for Windows XP (KB2900986)
Security Update for Windows XP (KB2914368)
Security Update for Windows XP (KB2916036)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950759)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB963027)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981349)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982381)
Security Update for Windows XP (KB982665)
Siglos Karaoke Professional
Skype Click to Call
Skype™ 6.11
SnagIt 7
SoundMAX
StudioTax 2012
StudioTax 2013
TaxFreeway 2012
TaxFreeway 2013
Trusteer Endpoint Protection
Tweaking.com - Windows Repair (All in One)
Uninstall Helper
Update for Windows Internet Explorer 8 (KB2598845)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2641690)
Update for Windows XP (KB2661254-v2)
Update for Windows XP (KB2718704)
Update for Windows XP (KB2736233)
Update for Windows XP (KB2749655)
Update for Windows XP (KB2863058)
Update for Windows XP (KB2904266)
Update for Windows XP (KB942763)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update for Windows XP (KB980182)
Visual Studio 2005 Tools for Office Second Edition Runtime
Visual Studio 2012 x86 Redistributables
WD Diagnostics
WD Drive Manager (x86)
WebFldrs XP
Winamp (remove only)
Windows Essentials Media Codec Pack 4.0 [32-Bit]
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows PowerShell(TM) 1.0
Windows XP Service Pack 3
WinRAR archiver
Wisdom-soft ScreenHunter 6.0 Free
WOT for Internet Explorer
YouTube to MP3 Converter
YTD Toolbar v7.0
YTD Video Downloader 4.7.2
.
==== Event Viewer Messages From Past Week ========
.
3/4/2014 8:47:27 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: i8042prt PCIIde
2/28/2014 6:48:29 AM, error: Dhcp [1002] - The IP address lease 192.168.0.109 for the Network Card with network address 001185DEA863 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
2/25/2014 6:20:30 AM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2833941).
2/25/2014 11:25:17 AM, error: Service Control Manager [7034] - The Pure Networks Platform Service service terminated unexpectedly. It has done this 1 time(s).
2/25/2014 11:25:01 AM, error: Service Control Manager [7000] - The TcHardWare service failed to start due to the following error: The system cannot find the file specified.
2/25/2014 11:24:58 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: i8042prt
2/25/2014 11:24:58 AM, error: Service Control Manager [7022] - The Pure Networks Platform Service service hung on starting.
.
==== End Of File ===========================
