fluidjay

I was using u torrent for downloading and have removed it and all of the downloads associated with it. When i try to run my antivirus it runs for
two seconds and then says trojan and then the screen goes dark and i have to restart the computer which takes a long time to start up again. I'm running windows xp(sorry don't know what version i'm very new at computers) and have tried running in safe mode with my antivirus but it finds no problems. I have problems with surfing the net where almost every site that i try to visit is replaced by an ad or another search engine site. Here is the info that you guys need to tell me what to do to fix this problem. Thanks


DDS (Ver_09-05-14.01) - NTFSx86
Run by admin at 2:34:55.07 on Mon 06/22/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1007.581 [GMT -7:00]

AV: McAfee VirusScan Enterprise *On-access scanning enabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}

============== Running Processes ===============

F:\WINDOWS\system32\svchost -k DcomLaunch
F:\WINDOWS\system32\svchost -k rpcss
F:\WINDOWS\System32\svchost.exe -k netsvcs
F:\WINDOWS\system32\svchost.exe -k NetworkService
F:\WINDOWS\system32\svchost.exe -k LocalService
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
F:\WINDOWS\system32\svchost.exe -k LocalService
F:\Program Files\McAfee\Common Framework\UdaterUI.exe
F:\WINDOWS\system32\igfxtray.exe
F:\Program Files\McAfee\Common Framework\McTray.exe
F:\Program Files\Java\jre6\bin\jusched.exe
F:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
F:\Program Files\Analog Devices\SoundMAX\Smax4.exe
F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
F:\Program Files\iTunes\iTunesHelper.exe
F:\Program Files\Bonjour\mDNSResponder.exe
F:\Program Files\Java\jre6\bin\jqs.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\Windows Live\Messenger\msnmsgr.exe
F:\Program Files\McAfee\Common Framework\FrameworkService.exe
F:\Program Files\Wireless Device\Wireless Keyboard\Magickey.exe
F:\Program Files\Wireless Device\Wireless Mouse\MouseAp.exe
F:\Program Files\Wireless Device\Wireless Keyboard\osd.exe
F:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
F:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
F:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
F:\Program Files\McAfee\Common Framework\naPrdMgr.exe
F:\Program Files\Internet Explorer\iexplore.exe
F:\Program Files\iPod\bin\iPodService.exe
F:\WINDOWS\System32\alg.exe
F:\Program Files\Internet Explorer\iexplore.exe
F:\Program Files\Java\jre6\bin\jucheck.exe
F:\Documents and Settings\admin\Desktop\dds.scr
F:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - f:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - f:\program files\java\jre6\bin\ssv.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - f:\program files\mcafee\virusscan enterprise\scriptcl.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - f:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - f:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - f:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [ctfmon.exe] f:\windows\system32\ctfmon.exe
uRun: [msnmsgr] "f:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [BitComet] "f:\bitcomet\BitComet.exe" /tray
mRun: [ShStatEXE] "f:\program files\mcafee\virusscan enterprise\SHSTAT.EXE" /STANDALONE
mRun: [McAfeeUpdaterUI] "f:\program files\mcafee\common framework\UdaterUI.exe" /StartedFromRunKey
mRun: [IgfxTray] f:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] f:\windows\system32\hkcmd.exe
mRun: [SunJavaUpdateSched] "f:\program files\java\jre6\bin\jusched.exe"
mRun: [SoundMAXPnP] f:\program files\analog devices\soundmax\SMax4PNP.exe
mRun: [SoundMAX] "f:\program files\analog devices\soundmax\Smax4.exe" /tray
mRun: [QuickTime Task] "f:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "f:\program files\itunes\iTunesHelper.exe"
mRun: [Adobe Reader Speed Launcher] "f:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
dRunOnce: [nltide_2] regsvr32 /s /n /i:U shell32
StartupFolder: f:\docume~1\alluse~1\startm~1\programs\startup\enable~1.lnk - f:\program files\wireless device\wireless keyboard\Magickey.exe
StartupFolder: f:\docume~1\alluse~1\startm~1\programs\startup\enable~2.lnk - f:\program files\wireless device\wireless mouse\MouseAp.exe
IE: E&xport to Microsoft Excel - f:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1220518536250
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Notify: igfxcui - igfxsrvc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - f:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath -

============= SERVICES / DRIVERS ===============

R1 kbfilter;Keyboard Filter Driver;f:\windows\system32\drivers\kbfilter.sys [2009-5-2 12964]
R1 mferkdk;VSCore mferkdk;f:\program files\mcafee\virusscan enterprise\mferkdk.sys [2006-11-29 31944]
R2 McAfeeFramework;McAfee Framework Service;f:\program files\mcafee\common framework\FrameworkService.exe [2008-9-4 104000]
R2 McShield;McAfee McShield;f:\program files\mcafee\virusscan enterprise\Mcshield.exe [2006-11-29 144960]
R2 McTaskManager;McAfee Task Manager;f:\program files\mcafee\virusscan enterprise\VsTskMgr.exe [2006-11-29 54872]
R3 mfeavfk;McAfee Inc.;f:\windows\system32\drivers\mfeavfk.sys [2008-9-4 72264]
R3 mfebopk;McAfee Inc.;f:\windows\system32\drivers\mfebopk.sys [2008-9-4 34152]
R3 mfehidk;McAfee Inc.;f:\windows\system32\drivers\mfehidk.sys [2008-9-4 168776]
S0 PCTCore;PCTools KDS;f:\windows\system32\drivers\pctcore.sys --> f:\windows\system32\drivers\PCTCore.sys [?]
S3 rt2870;Linksys 802.11n USB Wireless LAN Card Driver;f:\windows\system32\drivers\rt2870.sys --> f:\windows\system32\drivers\rt2870.sys [?]

=============== Created Last 30 ================

2009-06-21 21:16 <DIR> --d----- f:\program files\Bifrost
2009-06-21 21:16 22,040 a------- f:\docume~1\admin\applic~1\addon.dat
2009-06-19 02:02 664 a------- f:\windows\system32\d3d9caps.dat
2009-06-17 21:40 <DIR> --dsh--- f:\documents and settings\admin\IECompatCache
2009-06-17 21:39 <DIR> --dsh--- f:\documents and settings\admin\PrivacIE
2009-06-17 21:37 <DIR> --dsh--- f:\documents and settings\admin\IETldCache
2009-06-17 18:58 <DIR> --d----- f:\windows\system32\XPSViewer
2009-06-17 18:57 1,676,288 -c------ f:\windows\system32\dllcache\xpssvcs.dll
2009-06-17 18:57 597,504 -c------ f:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-06-17 18:57 575,488 -c------ f:\windows\system32\dllcache\xpsshhdr.dll
2009-06-17 18:57 89,088 -c------ f:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-06-17 18:57 1,676,288 -------- f:\windows\system32\xpssvcs.dll
2009-06-17 18:57 575,488 -------- f:\windows\system32\xpsshhdr.dll
2009-06-17 18:57 117,760 -------- f:\windows\system32\prntvpt.dll
2009-06-17 18:51 246,272 -c------ f:\windows\system32\dllcache\ieproxy.dll
2009-06-17 18:51 12,800 -c------ f:\windows\system32\dllcache\xpshims.dll
2009-06-17 18:51 <DIR> --d----- f:\windows\ie8updates
2009-06-17 18:51 102,912 -c------ f:\windows\system32\dllcache\iecompat.dll
2009-06-17 18:49 <DIR> -cd-h--- f:\windows\ie8
2009-06-17 16:40 <DIR> --d----- f:\windows\system32\appmgmt
2009-06-01 22:39 <DIR> --d----- f:\docume~1\admin\applic~1\Red Kawa

==================== Find3M ====================

2009-05-13 04:52 410,984 a------- f:\windows\system32\deploytk.dll
2009-05-12 22:15 915,456 a------- f:\windows\system32\wininet.dll
2009-05-07 08:32 345,600 a------- f:\windows\system32\localspl.dll
2009-04-17 05:26 1,847,168 a------- f:\windows\system32\win32k.sys
2009-04-15 07:51 585,216 a------- f:\windows\system32\rpcrt4.dll
2009-03-26 15:23 1,900,544 a------- f:\windows\system32\usbaaplrc.dll
2008-09-04 01:09 86 ac------ f:\documents and settings\admin\DelACD.bat

============= FINISH: 2:35:18.70 ===============

Attached Files

	ark.zip (1.2 KB, 1 views)
	Attach.zip (3.0 KB, 0 views)

Angelfire777

Please visit this webpage for download links, and instructions for running combofix:

http://www.bleepingcomputer.com/comb...o-use-combofix

Note: Please rename combofix.exe to cfix.exe

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.