west5910

DDS (Ver_09-05-14.01) - NTFSx86
Run by westd at 12:19:14.42 on Mon 06/08/2009
Internet Explorer: 7.0.5730.13

============== Pseudo HJT Report ===============

uSearch Page = hxxp://www.google.com
uWindow Title = Microsoft Internet Explorer provided by Southwire Company
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uStart Page = hxxp://swpeople.southwire.com
uDefault_Page_URL = hxxp://swpeople.southwire.com
mDefault_Page_URL = hxxp://swpeople.southwire.com
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan enterprise\scriptcl.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [RightFAX Print-to-Fax Driver] c:\program files\rightfax\client\FaxCtrl.exe
mRun: [PDVDDXSrv] "c:\program files\cyberlink\powerdvd dx\PDVDDXSrv.exe"
mRun: [RoxioDragToDisc] "c:\program files\roxio\drag-to-disc\DrgToDsc.exe"
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [IntelAPMClient] "c:\program files\landesk\ldclient\amclient.exe" /apm /s /ro /Retry=2 /Tspan=60 /Rstart
mRun: [SDClientMonitor] "c:\program files\landesk\ldclient\webportal\sdclientmonitor.exe"
mRun: [WinVNC] "c:\program files\tightvnc\WinVNC.exe" -servicehelper
mRun: [McAfeeUpdaterUI] "c:\program files\mcafee\common framework\udaterui.exe" /StartedFromRunKey
mRun: [ShStatEXE] "c:\program files\mcafee\virusscan enterprise\SHSTAT.EXE" /STANDALONE
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://go.microsoft.com/fwlink/?linkid=58813
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1219752627515
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
Notify: igfxcui - igfxdev.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\westd\applic~1\mozilla\firefox\profiles\jmj1ku2k.default\
FF - prefs.js: browser.startup.homepage - hxxp://swdirectory/default.asp

============= SERVICES / DRIVERS ===============


=============== Created Last 30 ================

2009-06-04 07:59 <DIR> --d----- C:\WINNT
2009-06-02 09:06 819 a------- c:\windows\system32\LexFiles.usr
2009-06-01 09:01 124,928 a------- c:\windows\system32\OLD18.tmp
2009-05-22 10:06 7,680 a--sh--- C:\Thumbs.db
2009-05-22 10:06 7,680 a--sh--- c:\windows\Thumbs.db
2009-05-18 10:41 354,304 -c------ c:\windows\system32\dllcache\winhttp.dll
2009-05-18 10:41 2,560 -------- c:\windows\system32\xpsp4res.dll
2009-05-18 10:41 215,552 -c------ c:\windows\system32\dllcache\wordpad.exe
2009-05-12 12:48 177,864 a------- c:\windows\system32\drivers\mfehidk.sys
2009-05-12 12:48 73,512 a------- c:\windows\system32\drivers\mfeavfk.sys
2009-05-12 12:48 65,000 a------- c:\windows\system32\drivers\mfeapfk.sys
2009-05-12 12:48 52,168 a------- c:\windows\system32\drivers\mfetdik.sys
2009-05-12 12:48 34,408 a------- c:\windows\system32\drivers\mfebopk.sys
2009-05-12 12:48 <DIR> --d----- c:\program files\common files\McAfee
2009-05-12 12:40 <DIR> --d----- c:\program files\McAfee

==================== Find3M ====================

2009-05-26 13:20 40,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-26 13:19 19,096 a------- c:\windows\system32\drivers\mbam.sys
2000-04-10 01:34 2,857 a------- c:\program files\Readme.txt
2000-04-10 01:34 247 a------- c:\program files\File_id.diz
2000-04-10 01:33 345,600 a------- c:\program files\addrempr.exe

============= FINISH: 12:24:53.46 ===============

Attached Files

	ark.zip (730 Bytes, 1 views)
	Attach.zip (1.2 KB, 0 views)

Dogg

You need to post in the spyware help forum: http://www.techsupportforum.com/secu...-spyware-help/

Using the instructions here: NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help