please help McAfee Security Center not protecting me

tierra · 01-25-2008, 01:26 PM

I have McAfee Security Center, CCleaner, Spyware Blaster, WinXP media service pack 2, 1.00 GB RAM, dial-up, NTFS files, and am in the US, IE7 (waiting for Safari to get out of beta), use dial-up, and rarely am on the internet for more than 10-30 minutes at a time and don’t download anything but windows xp, java, and McAfee Security Center updates and mostly go to about 8 sites. I have firewalls (windows and McAfee) and the setting is stealth, which is highest I can use to be on the internet (as I understand it). I ran a hardware diagnostic and no hardware malfunctions. McAfee claims I don't have any malware (second time in a few months) but I know I do (I did last time they said I didn’t). Word doesn't work properly, the computer is slow, logging into my computer the dots that form as you type your password (mine is 15 mixed character - so no one has access to computer but me) aren’t forming as typed but many seconds later, varies each time I log-on how long it takes to form the dots, I have pop-up blocker checked on IE7, but it keeps getting unchecked, I keep getting weird pop-ups, I go to tools > internet options > privacy > sites and instead of around 14 there will be hundreds of sites mostly sex or shopping, I've never been to a sex site, don't like shopping and wouldn't do it on the internet anyway. I don't open email from people I don't know and don't get nor would I open attachments. I know anywhere that you go on the internet, even the safest sites aren't safe; however, I (and my friends) don't understand why I'm repeatedly attacked and they aren't except they don't use McAfee Security Center. They all have high speed and go to the same sites + many more than I do.
I did panda and got the following:

Incident Status Location

Adware:adware/cws Not disinfected C:\Documents and Settings\Teresa Conyers\Favorites\health
Adware:adware/sbsoft Not disinfected Windows Registry
Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Teresa Conyers\Desktop\Unused Desktop Shortcuts\SDFix.exe[SDFix\apps\Process.exe]
Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Teresa Conyers\Desktop\Unused Desktop Shortcuts\SmitfraudFix\Process.exe
Virus:Trj/Rebooter.J Disinfected C:\Documents and Settings\Teresa Conyers\Desktop\Unused Desktop Shortcuts\SmitfraudFix\Reboot.exe
Potentially unwanted tool:Application/SuperFast Not disinfected C:\Documents and Settings\Teresa Conyers\Desktop\Unused Desktop Shortcuts\SmitfraudFix\restart.exe
Virus:Generic Malware Not disinfected C:\drivers\printer\924\drivers\Win_XP2K\i386\dlcctime.dl_[C:\drivers\printer\924\drivers\Win_XP2K\i386\dlcctime.dll]
Potentially unwanted tool:Application/Processor Not disinfected C:\SDFix\apps\Process.exe
Potentially unwanted tool:Application/NirCmd.A

I did the dds and got the following:

2008-01-06 18:08:45 0 d-------- C:\Program Files\Serif
2008-01-06 18

07 0 d-------- C:\Documents and Settings\Teresa Conyers\WINDOWS
2008-01-06 18:04:52 0 d-------- C:\Program Files\Mindscape

-- Find3M Report ---------------------------------------------------------------

2008-01-25 12:16:28 0 d-------- C:\Documents and Settings\Teresa Conyers\Application Data\SiteAdvisor
2008-01-25 11:25:50 0 d-------- C:\Program Files\iTunes
2008-01-25 11:23:17 0 d-------- C:\Program Files\Google
2008-01-25 11:22:56 0 d-------- C:\Program Files\Digital Line Detect
2008-01-25 08:46:09 0 d-------- C:\Program Files\McAfee
2008-01-24 21:32:17 51826 --a------ C:\Documents and Settings\Teresa Conyers\Application Data\wklnhst.dat
2008-01-23 19:47:58 0 d-------- C:\Program Files\SpywareBlaster
2008-01-18 15:26:07 125504 --a------ C:\Documents and Settings\Teresa Conyers\Application Data\GDIPFONTCACHEV1.DAT
2008-01-13 13:39:08 0 d-------- C:\Documents and Settings\Teresa Conyers\Application Data\Real
2008-01-12 14:13:44 0 d-------- C:\Program Files\SiteAdvisor
2008-01-09 11:40:14 125504 --a------ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2008-01-09 11:31:28 0 d-------- C:\Program Files\Common Files
2007-12-04 10:40:51 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-12-04 10:40:51 0 d-------- C:\Program Files\Art Explosion
2007-11-28 06:27:59 0 d-------- C:\Program Files\Common Files\xing shared
2007-11-28 06:27:58 0 d-------- C:\Program Files\Real
2007-11-28 06:27:49 0 d-------- C:\Program Files\Common Files\Real
2007-10-28 03:47:19 22879261 --a------ C:\sdat5150.exe <Not Verified; McAfee, Inc.; McAfee Core Components>

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [09/29/2005 11:01 AM]
"SigmatelSysTrayApp"="stsystra.exe" [02/10/2006 03:17 PM C:\WINDOWS\stsystra.exe]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [08/05/2005 06:05 PM]
"DMXLauncher"="C:\Program Files\Dell\Media Experience\DMXLauncher.exe" [10/05/2005 12:12 AM]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [06/10/2005 07:44 AM]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [06/10/2005 07:44 AM]
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [09/08/2005 02:20 AM]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [02/16/2005 10:11 PM]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [10/10/2007 07:51 PM]
"MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [01/17/2007 03:30 PM]
"SiteAdvisor"="C:\Program Files\SiteAdvisor\6253\SiteAdv.exe" [03/30/2007 07:42 AM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [06/29/2007 05:24 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [08/15/2007 07:15 PM]
"McAfee Backup"="C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe" [01/16/2007 12:59 PM]
"MBkLogOnHook"="C:\Program Files\McAfee\MBK\LogOnHook.exe" [01/08/2007 10:22 AM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [09/25/2007 01:11 AM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [11/28/2007 06:27 AM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DW4"="" []
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/10/2004 02:00 AM]

C:\Documents and Settings\Teresa Conyers\Start Menu\Programs\Startup\
Event Reminder.lnk - C:\Program Files\Mindscape\PrintMaster\PMREMIND.EXE [6/6/1998 7:33:30 AM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [10/15/2006 8:53:00 AM]
Event Planner Reminder.lnk - C:\WINDOWS\Installer\{B1C4042E-DDEE-487F-B56C-4E498E790B98}\Shortcut_EventPlan_5D0DF1BBD82E4FB2B98E4FDE42EF7EBB.exe [1/9/2008 11:38:38 AM]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [11/4/2004 7:28:24 PM]
HP Image Zone Fast Start.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [11/4/2004 7:50:52 PM]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 12:01:04 AM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
AutoRun\command- E:\setup.exe

*Newly Created Service* - RKPAVPROC

-- End of Deckard's System Scanner: finished at 2008-01-25 12:18:48 ------------

I'd appreciate any help, not only to get rid of the infection/infections, but also to keep from getting infected again.
Thank you.

tierra · 01-25-2008, 08:04 PM

I guess the full HiJackThis report isn't above:
Deckard's System Scanner v20071014.68
Run by Teresa Conyers on 2008-01-25 19:50:47
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- HijackThis (run as Teresa Conyers.exe) --------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:53:57 PM, on 1/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\McAfee\MSK\MskAgent.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Hallmark\Hallmark Card Studio 2007\Planner\PLNRnote.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\PROGRA~1\mcafee\msc\mcshell.exe
C:\Documents and Settings\Teresa Conyers\Desktop\Unused Desktop Shortcuts\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Teresa Conyers.exe
C:\Program Files\Internet Explorer\iexplore.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://www.google.com/ig/dell?hl=en&...us&ibd=3061015
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptcl.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [McAfee Backup] C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Event Reminder.lnk = C:\Program Files\Mindscape\PrintMaster\PMREMIND.EXE
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Event Planner Reminder.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqaio/downloads/sysinfo.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/micr...?1188268893468
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1188268518765
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1D10EAD5-A39A-4076-A61D-4E7643293FA9}: NameServer = 64.40.40.51 66.54.140.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{1D10EAD5-A39A-4076-A61D-4E7643293FA9}: NameServer = 64.40.40.51 66.54.140.10
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe

--
End of file - 10213 bytes

-- Files created between 2007-12-25 and 2008-01-25 -----------------------------

2008-01-25 17:35:58 0 d-------- C:\WINDOWS\system32\ActiveScan
2008-01-25 17:35:56 0 d-------- C:\WINDOWS\LastGood
2008-01-25 13:57:57 0 dr------- C:\Documents and Settings\Guest\Favorites
2008-01-25 13:57:57 0 d-------- C:\Documents and Settings\Guest\Desktop
2008-01-25 13:57:57 0 d--hs---- C:\Documents and Settings\Guest\Cookies
2008-01-25 13:57:57 0 dr-h----- C:\Documents and Settings\Guest\Application Data
2008-01-25 13:57:57 0 d---s---- C:\Documents and Settings\Guest\Application Data\Microsoft
2008-01-25 13:57:57 0 d-------- C:\Documents and Settings\Guest\Application Data\Identities
2008-01-25 13:57:55 0 d--h----- C:\Documents and Settings\Guest\Templates
2008-01-25 13:57:55 0 dr------- C:\Documents and Settings\Guest\Start Menu
2008-01-25 13:57:55 0 dr-h----- C:\Documents and Settings\Guest\SendTo
2008-01-25 13:57:55 0 dr-h----- C:\Documents and Settings\Guest\Recent
2008-01-25 13:57:55 0 d--h----- C:\Documents and Settings\Guest\PrintHood
2008-01-25 13:57:55 0 d--h----- C:\Documents and Settings\Guest\NetHood
2008-01-25 13:57:55 0 dr------- C:\Documents and Settings\Guest\My Documents
2008-01-25 13:57:55 0 d--h----- C:\Documents and Settings\Guest\Local Settings
2008-01-25 13:57:54 786432 --ah----- C:\Documents and Settings\Guest\NTUSER.DAT
2008-01-20 10:40:15 3664 --a------ C:\WINDOWS\system32\tmp.reg
2008-01-20 09:48:16 0 d-------- C:\WINDOWS\ERUNT
2008-01-20 08:09:26 29905867 --a------ C:\sdat5211.exe <Not Verified; McAfee, Inc.; McAfee Core Components>
2008-01-09 11:40:25 0 d-------- C:\Documents and Settings\All Users\Application Data\Creative Home
2008-01-09 11:31:28 0 d-------- C:\Program Files\Common Files\Nova Development
2008-01-09 11:31:26 0 d-------- C:\Documents and Settings\All Users\Application Data\Hallmark
2008-01-09 11:31:15 0 d-------- C:\Program Files\Hallmark
2008-01-06 18:09:13 0 d-------- C:\Program Files\Web Publish
2008-01-06 18:08:45 0 d-------- C:\Program Files\Serif
2008-01-06 18

07 0 d-------- C:\Documents and Settings\Teresa Conyers\WINDOWS
2008-01-06 18:04:52 0 d-------- C:\Program Files\Mindscape

-- Find3M Report ---------------------------------------------------------------

2008-01-25 19:52:44 0 d-------- C:\Program Files\Trend Micro
2008-01-25 17:28:17 0 d-------- C:\Documents and Settings\Teresa Conyers\Application Data\SiteAdvisor
2008-01-25 13:57:50 0 d-------- C:\Program Files\McAfee
2008-01-25 13:43:01 51768 --a------ C:\Documents and Settings\Teresa Conyers\Application Data\wklnhst.dat
2008-01-25 11:25:50 0 d-------- C:\Program Files\iTunes
2008-01-25 11:23:17 0 d-------- C:\Program Files\Google
2008-01-25 11:22:56 0 d-------- C:\Program Files\Digital Line Detect
2008-01-23 19:47:58 0 d-------- C:\Program Files\SpywareBlaster
2008-01-18 15:26:07 125504 --a------ C:\Documents and Settings\Teresa Conyers\Application Data\GDIPFONTCACHEV1.DAT
2008-01-13 13:39:08 0 d-------- C:\Documents and Settings\Teresa Conyers\Application Data\Real
2008-01-12 14:13:44 0 d-------- C:\Program Files\SiteAdvisor
2008-01-09 11:40:14 125504 --a------ C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2008-01-09 11:31:28 0 d-------- C:\Program Files\Common Files
2007-12-04 10:40:51 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-12-04 10:40:51 0 d-------- C:\Program Files\Art Explosion
2007-11-28 06:27:59 0 d-------- C:\Program Files\Common Files\xing shared
2007-11-28 06:27:58 0 d-------- C:\Program Files\Real
2007-11-28 06:27:49 0 d-------- C:\Program Files\Common Files\Real
2007-10-28 03:47:19 22879261 --a------ C:\sdat5150.exe <Not Verified; McAfee, Inc.; McAfee Core Components>

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [09/29/2005 11:01 AM]
"SigmatelSysTrayApp"="stsystra.exe" [02/10/2006 03:17 PM C:\WINDOWS\stsystra.exe]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [08/05/2005 06:05 PM]
"DMXLauncher"="C:\Program Files\Dell\Media Experience\DMXLauncher.exe" [10/05/2005 12:12 AM]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [06/10/2005 07:44 AM]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [06/10/2005 07:44 AM]
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [09/08/2005 02:20 AM]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [02/16/2005 10:11 PM]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [10/10/2007 07:51 PM]
"MskAgentexe"="C:\Program Files\McAfee\MSK\MskAgent.exe" [01/17/2007 03:30 PM]
"SiteAdvisor"="C:\Program Files\SiteAdvisor\6253\SiteAdv.exe" [03/30/2007 07:42 AM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [06/29/2007 05:24 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [08/15/2007 07:15 PM]
"McAfee Backup"="C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe" [01/16/2007 12:59 PM]
"MBkLogOnHook"="C:\Program Files\McAfee\MBK\LogOnHook.exe" [01/08/2007 10:22 AM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [09/25/2007 01:11 AM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [11/28/2007 06:27 AM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DW4"="" []
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/10/2004 02:00 AM]

C:\Documents and Settings\Teresa Conyers\Start Menu\Programs\Startup\
Event Reminder.lnk - C:\Program Files\Mindscape\PrintMaster\PMREMIND.EXE [6/6/1998 7:33:30 AM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [10/15/2006 8:53:00 AM]
Event Planner Reminder.lnk - C:\WINDOWS\Installer\{B1C4042E-DDEE-487F-B56C-4E498E790B98}\Shortcut_EventPlan_5D0DF1BBD82E4FB2B98E4FDE42EF7EBB.exe [1/9/2008 11:38:38 AM]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [11/4/2004 7:28:24 PM]
HP Image Zone Fast Start.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [11/4/2004 7:50:52 PM]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 12:01:04 AM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
AutoRun\command- E:\setup.exe

-- End of Deckard's System Scanner: finished at 2008-01-25 19:54:21 ------------

I can't seem to find the extra.txt file. It's not opening two text files, only one, and I've tried running it several times.

tierra · 01-29-2008, 12:55 AM

Bump.

tierra · 01-29-2008, 01:01 AM

Bump.

01-29-2008, 12:55 AM	#3 (permalink)
tierra Registered User Join Date: Nov 2007 Location: Seattle, Washington, USA Posts: 36 OS: win xp	Re: please help McAfee Security Center not protecting me Bump.

01-29-2008, 01:01 AM	#4 (permalink)
tierra Registered User Join Date: Nov 2007 Location: Seattle, Washington, USA Posts: 36 OS: win xp	Re: please help McAfee Security Center not protecting me Bump.