andydi

DDS (Ver_09-06-26.01) - NTFSx86
Run by Andy at 19:28:46.92 on 03/07/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.44.1033.18.3070.1974 [GMT 1:00]

AV: Protector Plus Anti-virus Software *On-access scanning enabled* (Updated) {2BA05D34-0674-49A3-8DDA-DC7C8007484B}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
SP: Protector Plus Anti-Spyware Component *enabled* (Updated) {2BA05D34-0674-49A3-8DDA-DC7C8007484B}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\rundll32.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\RegCure\RegCure.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Protector Plus\PPAVMon.exe
C:\Protector Plus\PPServ.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\GIGABYTE\GEST\gest.exe
C:\Program Files\GIGABYTE\GEST\GSvr.exe
C:\Protector Plus\PPTBC.EXE
C:\Protector Plus\PPINUPDT.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\ehome\ehmsas.exe
C:\Protector Plus\POPSCAN.EXE
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Andy\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\Andy\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.co.uk/
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [Protector Plus Taskbar Control] c:\protec~1\PPTbc.EXE
mRun: [Protector Plus InstaUpdate] c:\protec~1\PPInupdt.exe
mRunOnce: [GEST] "c:\program files\gigabyte\gest\run.exe"
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} - hxxp://download.gigabyte.com.tw/object/Dldrv.ocx
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.8.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll

============= SERVICES / DRIVERS ===============

R2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\adobe\photoshop elements 7.0\PhotoshopElementsFileAgent.exe [2008-9-16 163840]
R2 ProtectorPlusAVMonitor;Protector Plus Anti-virus Monitor Service;c:\protector plus\PPAVMON.EXE [2009-6-2 62128]
R2 ProtectorPlusService;Protector Plus Service;c:\protector plus\PPSERV.EXE [2009-6-2 78512]
R3 GEST Service;GEST Service for program management.;c:\program files\gigabyte\gest\GSvr.exe [2008-10-15 47624]
R3 PPDrv;Protector Plus Driver;c:\protector plus\PPDRV.SYS [2009-6-2 703792]
R3 PPEMSCAN;Protector Plus Email Scan Driver;c:\protector plus\PPEMSCAN.SYS [2009-6-2 19272]
S3 AF05BDA;AF9005 BDA Device;c:\windows\system32\drivers\AF05BDA.sys [2009-2-12 133504]
S3 btnetBUs;IVT Bluetooth Bus Service for BtNic;c:\windows\system32\drivers\btnetBus.sys [2008-10-22 29832]
S3 etdrv;etdrv;c:\windows\etdrv.sys [2009-6-19 17488]
S3 FIXUSTOR;FIXUSTOR;c:\windows\system32\drivers\fixustor.sys [2009-4-16 12800]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\nos\bin\getPlus_HelperSvc.exe [2009-3-20 33176]
S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [2009-6-19 24944]
S3 RTL85n86;Belkin Wireless G Notebook Card Service v8;c:\windows\system32\drivers\RTL85n86.sys [2009-3-27 354816]

=============== Created Last 30 ================

2009-07-03 13:53 <DIR> --d----- c:\programdata\RegCure
2009-07-03 13:53 <DIR> --d----- c:\progra~2\RegCure
2009-07-03 13:49 <DIR> --d----- c:\program files\Trend Micro
2009-07-03 13:31 685,358 a------- c:\windows\unins001.exe
2009-07-03 13:31 6,602 a------- c:\windows\unins001.dat
2009-07-03 13:13 189,448 a------- c:\windows\system32\PnkBstrB.xtr
2009-06-27 09:28 <DIR> --d----- c:\program files\Coupon Printer
2009-06-19 18:18 4 a------- c:\windows\system32\GVTunner.ref
2009-06-19 16:36 17,488 a------- c:\windows\etdrv.sys
2009-06-19 16:35 24,944 a------- c:\windows\system32\drivers\GVTDrv.sys
2009-06-19 10:12 <DIR> --d----- c:\program files\common files\PCSuite
2009-06-19 10:12 <DIR> --d----- c:\program files\common files\Nokia
2009-06-19 10:11 18,816 a------- c:\windows\system32\drivers\pccsmcfd.sys
2009-06-19 10:10 <DIR> --d----- c:\program files\PC Connectivity Solution
2009-06-17 00:10 70,984 a------- c:\windows\CouponPrinter.ocx
2009-06-16 11:19 <DIR> --d----- c:\programdata\WindowsSearch
2009-06-16 10:47 <DIR> --d----- c:\programdata\FLEXnet
2009-06-16 10:40 <DIR> --d----- c:\program files\common files\Macrovision Shared
2009-06-15 10:28 428,544 a------- c:\windows\system32\EncDec.dll
2009-06-15 10:28 293,376 a------- c:\windows\system32\psisdecd.dll
2009-06-15 10:28 217,088 a------- c:\windows\system32\psisrndr.ax
2009-06-15 10:28 177,664 a------- c:\windows\system32\mpg2splt.ax
2009-06-15 10:28 80,896 a------- c:\windows\system32\MSNP.ax
2009-06-13 09:34 2,790,793 a------- C:\htc-magic-manual.pdf
2009-06-10 10:43 2,033,152 a------- c:\windows\system32\win32k.sys
2009-06-10 10:43 636,928 a------- c:\windows\system32\localspl.dll
2009-06-10 10:43 784,896 a------- c:\windows\system32\rpcrt4.dll
2009-06-09 18:29 19,796 a------- C:\committeee.odt
2009-06-07 20:49 <DIR> --d----- c:\program files\iPod
2009-06-07 20:49 <DIR> --d----- c:\program files\iTunes
2009-06-04 17:33 88,448 a------- c:\windows\system32\drivers\snapman.sys
2009-06-04 17:33 56,832 a------- c:\windows\system32\snapapi.dll
2009-06-04 17:33 37,888 a------- c:\windows\system32\setupnt.dll
2009-06-04 16:50 <DIR> --d----- c:\program files\Seagate

==================== Find3M ====================

2009-07-03 19:20 16,608 a------- c:\windows\gdrv.sys
2009-07-03 13:29 38,865 a------- c:\windows\unins000.dat
2009-07-03 13:29 667,998 a------- c:\windows\unins000.exe
2009-07-03 13:18 138,016 a------- c:\windows\system32\drivers\PnkBstrK.sys
2009-07-03 13:18 189,448 a------- c:\windows\system32\PnkBstrB.exe
2009-06-24 18:51 143,360 a------- c:\windows\inf\infstrng.dat
2009-06-24 18:51 86,016 a------- c:\windows\inf\infstor.dat
2009-06-24 18:51 51,200 a------- c:\windows\inf\infpub.dat
2009-06-16 11:17 129,784 -------- c:\windows\system32\pxafs.dll
2009-06-16 11:17 116,472 -------- c:\windows\system32\pxcpyi64.exe
2009-06-16 11:17 43,528 -------- c:\windows\system32\drivers\PxHelp20.sys
2009-06-16 11:17 118,520 -------- c:\windows\system32\pxinsi64.exe
2009-06-02 08:40 45,056 a------- c:\windows\system32\_PPCXM_.DLL
2009-06-02 08:40 29,360 a------- c:\windows\_SETUPD_.EXE
2009-06-01 14:15 410,984 a------- c:\windows\system32\deploytk.dll
2009-05-27 00:20 0 a---h--- c:\windows\system32\drivers\Msft_Kernel_LUsbFilt_01005.Wdf
2009-05-08 18:18 1,034,752 a------- c:\windows\system32\VSFilter.dll
2009-05-05 13:33 0 a---h--- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2009-04-24 17:05 827,904 a------- c:\windows\system32\wininet.dll
2009-04-24 17:02 78,336 a------- c:\windows\system32\ieencode.dll
2009-04-24 14:44 26,624 a------- c:\windows\system32\ieUnatt.exe
2009-04-06 12:14 737,280 a------- c:\windows\iun6002.exe
2009-03-28 12:39 1,871,509 a------- c:\program files\ntfsundelete.exe
2008-11-29 15:40 22,328 a------- c:\users\andy\appdata\roaming\PnkBstrK.sys
2008-11-11 10:42 174 a--sh--- c:\program files\desktop.ini
2008-11-11 10:34 665,600 a------- c:\windows\inf\drvindex.dat
2006-11-02 13:42 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 13:42 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 13:42 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 13:42 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 19:29:01.78 ===============
ark.zip

andydi

bump please