I think i have some viruses!

hardrock163 · 08-12-2009, 04:25 AM

Hey!

I came home from my 5v holiday trip yesterday. When i started my computer i realized that i could hear any sound on the startup of the computer, i couldnt open mp3 files anymore, i coulnt hear any sound on internet, i couldnt open batch/bat files and when i rightclicked on desktop i didnt had and "send to" buttom?
And i also saw that i couldnt update my Windows Defender instead i got this code:0x80040154.

I have NOD32 antivirus and when i scan my computer i cant find any threats... Here is my DDS scan:

DDS (Ver_09-07-30.01) - NTFSx86
Run by Luka Mrkonjic at 11:51:15,67 on 2009-08-09
Internet Explorer: 8.0.6001.18813 BrowserJavaVersion: 1.6.0_13

============== Running Processes ===============

============== Pseudo HJT Report ===============

uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.google.se/
uSearch Bar = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local
BHO: Länkhjälp till Adobe PDF Reader: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: BitComet Helper: {39f7e362-828a-4b5a-bcaf-5b79bfdfea60} - c:\program files\bitcomet\tools\BitCometBHO_1.3.1.15.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Windows Live inloggningshjälpen: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [CurseClient] c:\program files\curse\CurseClient.exe -silent
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [Steam] "e:\program files\steam\Steam.exe" -silent
uRun: [RegBooster] c:\program files\regbooster\RegBooster.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [MSConfig] "c:\windows\system32\msconfig.exe" /auto
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe"
mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\quickcam\Quickcam.exe" /hide
StartupFolder: c:\users\lukamr~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\hamachi.lnk - c:\program files\hamachi\hamachi.exe
StartupFolder: c:\users\lukamr~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\quickcam\eReg.exe
IE: &D&ownload &with BitComet - c:\program files\bitcomet\BitComet.exe/AddLink.htm
IE: &D&ownload all video with BitComet - c:\program files\bitcomet\BitComet.exe/AddVideo.htm
IE: &D&ownload all with BitComet - c:\program files\bitcomet\BitComet.exe/AddAllLink.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://c:\program files\bitcomet\tools\BitCometBHO_1.3.1.15.dll/206
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

================= FIREFOX ===================

FF - ProfilePath -
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.visited_color", "#551A8B");
c:\program files\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".se");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.videoFeeds.handler", "ask");

============= SERVICES / DRIVERS ===============

============== File Associations ===============

regfile="regedit.exe" "%1"

=============== Created Last 30 ================

2009-08-09 10:13 <DIR> --d----- C:\$WINDOWS.~BT
2009-08-09 09:56 1,908 a------- c:\windows\diagwrn.xml
2009-08-09 09:56 1,908 a------- c:\windows\diagerr.xml
2009-08-09 07:48 <DIR> -cd-h--- c:\programdata\{EF63305C-BAD7-4144-9208-D65528260864}
2009-08-09 07:48 <DIR> -cd-h--- c:\progra~2\{EF63305C-BAD7-4144-9208-D65528260864}
2009-08-08 22:15 184 a------- c:\windows\War3Unin.bat
2009-08-08 22:06 <DIR> --d----- c:\program files\CCleaner
2009-08-08 22:03 <DIR> --d----- c:\users\luka mrkonjic\RegBooster
2009-08-08 22:03 <DIR> --d----- c:\program files\RegBooster
2009-08-08 16:33 <DIR> --d----- C:\4ce9246fbea5dc61736933ff91

==================== Find3M ====================

2009-08-08 21:47 34 a------- c:\users\luka mrkonjic\jagex_runescape_preferences.dat
2009-07-21 23:52 915,456 a------- c:\windows\system32\wininet.dll
2009-07-21 23:47 109,056 a------- c:\windows\system32\iesysprep.dll
2009-07-21 23:47 71,680 a------- c:\windows\system32\iesetup.dll
2009-07-21 22:13 133,632 a------- c:\windows\system32\ieUnatt.exe
2009-07-01 10:09 480,268 a------- c:\windows\system32\perfh01D.dat
2009-07-01 10:09 85,522 a------- c:\windows\system32\perfc01D.dat
2009-06-13 11:57 86,016 a------- c:\windows\inf\infstrng.dat
2009-06-13 11:57 51,200 a------- c:\windows\inf\infpub.dat
2009-06-13 11:57 86,016 a------- c:\windows\inf\infstor.dat
2009-06-07 10:07 32,632,835 a------- c:\users\luka mrkonjic\EmpireScape_Awesome_client.zip
2009-06-06 22:16 293 a------- c:\users\luka mrkonjic\net2ftp-1244319339.zip
2009-03-18 22:02 35,979 a------- c:\users\luka mrkonjic\Facebook_Freezer.zip
2009-02-21 21:39 3,630,342 a------- c:\users\luka mrkonjic\SwiftKit(Install).exe
2009-02-11 11:18 59,755,569 a------- c:\users\luka mrkonjic\client508_ipchanger.zip
2009-02-04 15:50 16,278,936 a------- c:\users\luka mrkonjic\jre-6u12-windows-i586-p.exe
2009-02-04 15:18 41,569,737 a------- c:\users\luka mrkonjic\DHGaming_Official_Client.zip
2009-02-04 14:57 203,661 a------- c:\users\luka mrkonjic\Silab_client_4.0.zip
2009-02-03 23:46 205,192 a------- c:\users\luka mrkonjic\silabv5new.zip
2009-02-03 22:41 54,686,488 a------- c:\users\luka mrkonjic\jdk-1_5_0_17-windows-i586-p.exe
2009-02-02 21:41 76,633,496 a------- c:\users\luka mrkonjic\jdk-6u12-windows-i586-p.exe
2009-02-02 19:43 18,046,419 a------- c:\users\luka mrkonjic\Nova_Pk_Client.zip
2009-02-02 19:30 18,230,394 a------- c:\users\luka mrkonjic\Galkons Anarchy V2.0.zip
2009-02-01 23:33 76,502,424 a------- c:\users\luka mrkonjic\jdk-6u10-windows-i586-p.exe
2009-02-01 11:31 130,284,263 a------- c:\users\luka mrkonjic\java_ee_sdk-5_01-windows.exe
2009-01-31 13:26 19,098,262 a------- c:\users\luka mrkonjic\fearcombat_update_engb_107_108.exe
2009-01-31 12:38 1,896,155,930 a------- c:\users\luka mrkonjic\fearcombat_en_107.exe
2009-01-28 22:55 7,301,702 a------- c:\users\luka mrkonjic\daemon4303-lite.zip
2009-01-28 22:55 7,321,032 a------- c:\users\luka mrkonjic\daemon4303-lite.exe
2009-01-26 21:16 97,953 a------- c:\users\luka mrkonjic\CG_trainer_adventure_quest_1375413.zip
2009-01-25 13:23 22,328 a------- c:\users\lukamr~1\appdata\roaming\PnkBstrK.sys
2009-01-16 23:55 69,632 a------- c:\users\luka mrkonjic\GroundZero's Facebook Freezer.exe
2009-01-15 20:40 174 a--sh--- c:\program files\desktop.ini
2009-01-15 20:28 665,600 a------- c:\windows\inf\drvindex.dat
2009-01-15 20:04 290,490 a------- c:\windows\inf\perflib\041d\perfi.dat
2009-01-15 20:04 290,490 a------- c:\windows\inf\perflib\041d\perfh.dat
2008-08-31 18:23 82 a------- c:\users\luka mrkonjic\build.cmd
2008-08-16 23:27 92 a------- c:\users\luka mrkonjic\run.cmd
2008-05-17 00:41 68 a------- c:\users\luka mrkonjic\run.bat
2007-08-27 13:22 35,978 a------- c:\windows\inf\perflib\041d\perfd.dat
2007-08-27 13:22 35,978 a------- c:\windows\inf\perflib\041d\perfc.dat
2006-11-02 11:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 11:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 11:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 11:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat
2009-02-16 20:45 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\history\history.ie5\index.dat
2009-02-16 20:45 32,768 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
2009-02-16 20:45 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\cookies\index.dat

============= FINISH: 11:53:02,24 ===============

HELP! :)

hardrock163 · 08-15-2009, 02:22 AM

Hey!

I came home from my holiday trip yesterday. When i started my computer i realized that i could hear any sound on the startup of the computer, i couldnt open mp3 files anymore, i coulnt hear any sound on internet, i couldnt open batch/bat files and when i rightclicked on desktop i didnt had and "send to" buttom?
And i also saw that i couldnt update my Windows Defender instead i got this code:0x80040154.

I have NOD32 antivirus and when i scan my computer i cant find any threats... Here is my DDS scan:

DDS (Ver_09-07-30.01) - NTFSx86
Run by Luka Mrkonjic at 11:51:15,67 on 2009-08-09
Internet Explorer: 8.0.6001.18813 BrowserJavaVersion: 1.6.0_13

============== Running Processes ===============

============== Pseudo HJT Report ===============

uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.google.se/
uSearch Bar = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local
BHO: Länkhjälp till Adobe PDF Reader: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: BitComet Helper: {39f7e362-828a-4b5a-bcaf-5b79bfdfea60} - c:\program files\bitcomet\tools\BitCometBHO_1.3.1.15.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Windows Live inloggningshjälpen: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [CurseClient] c:\program files\curse\CurseClient.exe -silent
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [Steam] "e:\program files\steam\Steam.exe" -silent
uRun: [RegBooster] c:\program files\regbooster\RegBooster.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [MSConfig] "c:\windows\system32\msconfig.exe" /auto
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe"
mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\quickcam\Quickcam.exe" /hide
StartupFolder: c:\users\lukamr~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\hamachi.lnk - c:\program files\hamachi\hamachi.exe
StartupFolder: c:\users\lukamr~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\quickcam\eReg.exe
IE: &D&ownload &with BitComet - c:\program files\bitcomet\BitComet.exe/AddLink.htm
IE: &D&ownload all video with BitComet - c:\program files\bitcomet\BitComet.exe/AddVideo.htm
IE: &D&ownload all with BitComet - c:\program files\bitcomet\BitComet.exe/AddAllLink.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://c:\program files\bitcomet\tools\BitCometBHO_1.3.1.15.dll/206
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_17-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

================= FIREFOX ===================

FF - ProfilePath -
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.visited_color", "#551A8B");
c:\program files\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".se");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.videoFeeds.handler", "ask");

============= SERVICES / DRIVERS ===============

============== File Associations ===============

regfile="regedit.exe" "%1"

=============== Created Last 30 ================

2009-08-09 10:13 <DIR> --d----- C:\$WINDOWS.~BT
2009-08-09 09:56 1,908 a------- c:\windows\diagwrn.xml
2009-08-09 09:56 1,908 a------- c:\windows\diagerr.xml
2009-08-09 07:48 <DIR> -cd-h--- c:\programdata\{EF63305C-BAD7-4144-9208-D65528260864}
2009-08-09 07:48 <DIR> -cd-h--- c:\progra~2\{EF63305C-BAD7-4144-9208-D65528260864}
2009-08-08 22:15 184 a------- c:\windows\War3Unin.bat
2009-08-08 22:06 <DIR> --d----- c:\program files\CCleaner
2009-08-08 22:03 <DIR> --d----- c:\users\luka mrkonjic\RegBooster
2009-08-08 22:03 <DIR> --d----- c:\program files\RegBooster
2009-08-08 16:33 <DIR> --d----- C:\4ce9246fbea5dc61736933ff91

==================== Find3M ====================

2009-08-08 21:47 34 a------- c:\users\luka mrkonjic\jagex_runescape_preferences.dat
2009-07-21 23:52 915,456 a------- c:\windows\system32\wininet.dll
2009-07-21 23:47 109,056 a------- c:\windows\system32\iesysprep.dll
2009-07-21 23:47 71,680 a------- c:\windows\system32\iesetup.dll
2009-07-21 22:13 133,632 a------- c:\windows\system32\ieUnatt.exe
2009-07-01 10:09 480,268 a------- c:\windows\system32\perfh01D.dat
2009-07-01 10:09 85,522 a------- c:\windows\system32\perfc01D.dat
2009-06-13 11:57 86,016 a------- c:\windows\inf\infstrng.dat
2009-06-13 11:57 51,200 a------- c:\windows\inf\infpub.dat
2009-06-13 11:57 86,016 a------- c:\windows\inf\infstor.dat
2009-06-07 10:07 32,632,835 a------- c:\users\luka mrkonjic\EmpireScape_Awesome_client.zip
2009-06-06 22:16 293 a------- c:\users\luka mrkonjic\net2ftp-1244319339.zip
2009-03-18 22:02 35,979 a------- c:\users\luka mrkonjic\Facebook_Freezer.zip
2009-02-21 21:39 3,630,342 a------- c:\users\luka mrkonjic\SwiftKit(Install).exe
2009-02-11 11:18 59,755,569 a------- c:\users\luka mrkonjic\client508_ipchanger.zip
2009-02-04 15:50 16,278,936 a------- c:\users\luka mrkonjic\jre-6u12-windows-i586-p.exe
2009-02-04 15:18 41,569,737 a------- c:\users\luka mrkonjic\DHGaming_Official_Client.zip
2009-02-04 14:57 203,661 a------- c:\users\luka mrkonjic\Silab_client_4.0.zip
2009-02-03 23:46 205,192 a------- c:\users\luka mrkonjic\silabv5new.zip
2009-02-03 22:41 54,686,488 a------- c:\users\luka mrkonjic\jdk-1_5_0_17-windows-i586-p.exe
2009-02-02 21:41 76,633,496 a------- c:\users\luka mrkonjic\jdk-6u12-windows-i586-p.exe
2009-02-02 19:43 18,046,419 a------- c:\users\luka mrkonjic\Nova_Pk_Client.zip
2009-02-02 19:30 18,230,394 a------- c:\users\luka mrkonjic\Galkons Anarchy V2.0.zip
2009-02-01 23:33 76,502,424 a------- c:\users\luka mrkonjic\jdk-6u10-windows-i586-p.exe
2009-02-01 11:31 130,284,263 a------- c:\users\luka mrkonjic\java_ee_sdk-5_01-windows.exe
2009-01-31 13:26 19,098,262 a------- c:\users\luka mrkonjic\fearcombat_update_engb_107_108.exe
2009-01-31 12:38 1,896,155,930 a------- c:\users\luka mrkonjic\fearcombat_en_107.exe
2009-01-28 22:55 7,301,702 a------- c:\users\luka mrkonjic\daemon4303-lite.zip
2009-01-28 22:55 7,321,032 a------- c:\users\luka mrkonjic\daemon4303-lite.exe
2009-01-26 21:16 97,953 a------- c:\users\luka mrkonjic\CG_trainer_adventure_quest_1375413.zip
2009-01-25 13:23 22,328 a------- c:\users\lukamr~1\appdata\roaming\PnkBstrK.sys
2009-01-16 23:55 69,632 a------- c:\users\luka mrkonjic\GroundZero's Facebook Freezer.exe
2009-01-15 20:40 174 a--sh--- c:\program files\desktop.ini
2009-01-15 20:28 665,600 a------- c:\windows\inf\drvindex.dat
2009-01-15 20:04 290,490 a------- c:\windows\inf\perflib\041d\perfi.dat
2009-01-15 20:04 290,490 a------- c:\windows\inf\perflib\041d\perfh.dat
2008-08-31 18:23 82 a------- c:\users\luka mrkonjic\build.cmd
2008-08-16 23:27 92 a------- c:\users\luka mrkonjic\run.cmd
2008-05-17 00:41 68 a------- c:\users\luka mrkonjic\run.bat
2007-08-27 13:22 35,978 a------- c:\windows\inf\perflib\041d\perfd.dat
2007-08-27 13:22 35,978 a------- c:\windows\inf\perflib\041d\perfc.dat
2006-11-02 11:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 11:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 11:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 11:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat
2009-02-16 20:45 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\history\history.ie5\index.dat
2009-02-16 20:45 32,768 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
2009-02-16 20:45 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\cookies\index.dat

============= FINISH: 11:53:02,24 ===============

HELP! :)

I have attached the "attach" file to my other post, "i think i have some viruses"

08-15-2009, 02:22 AM	#2 (permalink)
hardrock163 Registered User Join Date: Aug 2009 Posts: 23 OS: windows vista home premium	BUMP, Please Hey! I came home from my holiday trip yesterday. When i started my computer i realized that i could hear any sound on the startup of the computer, i couldnt open mp3 files anymore, i coulnt hear any sound on internet, i couldnt open batch/bat files and when i rightclicked on desktop i didnt had and "send to" buttom? And i also saw that i couldnt update my Windows Defender instead i got this code:0x80040154. I have NOD32 antivirus and when i scan my computer i cant find any threats... Here is my DDS scan: DDS (Ver_09-07-30.01) - NTFSx86 Run by Luka Mrkonjic at 11:51:15,67 on 2009-08-09 Internet Explorer: 8.0.6001.18813 BrowserJavaVersion: 1.6.0_13 ============== Running Processes =============== ============== Pseudo HJT Report =============== uSearch Page = hxxp://www.google.com uStart Page = hxxp://www.google.se/ uSearch Bar = hxxp://www.google.com/ie uInternet Settings,ProxyOverride = *.local BHO: Länkhjälp till Adobe PDF Reader: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll BHO: BitComet Helper: {39f7e362-828a-4b5a-bcaf-5b79bfdfea60} - c:\program files\bitcomet\tools\BitCometBHO_1.3.1.15.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll BHO: Windows Live inloggningshjälpen: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll TB: DAEMON Tools Toolbar: {32099aac-c132-4136-9e9a-4e364a424e17} - c:\program files\daemon tools toolbar\DTToolbar.dll TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun uRun: [CurseClient] c:\program files\curse\CurseClient.exe -silent uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized uRun: [Steam] "e:\program files\steam\Steam.exe" -silent uRun: [RegBooster] c:\program files\regbooster\RegBooster.exe mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe" mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice mRun: [MSConfig] "c:\windows\system32\msconfig.exe" /auto mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe" mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe" mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe" mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\quickcam\Quickcam.exe" /hide StartupFolder: c:\users\lukamr~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\hamachi.lnk - c:\program files\hamachi\hamachi.exe StartupFolder: c:\users\lukamr~1\appdata\roaming\micros~1\windows\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\quickcam\eReg.exe IE: &D&ownload &with BitComet - c:\program files\bitcomet\BitComet.exe/AddLink.htm IE: &D&ownload all video with BitComet - c:\program files\bitcomet\BitComet.exe/AddVideo.htm IE: &D&ownload all with BitComet - c:\program files\bitcomet\BitComet.exe/AddAllLink.htm IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000 IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://c:\program files\bitcomet\tools\BitCometBHO_1.3.1.15.dll/206 DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab DPF: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_17-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll ================= FIREFOX =================== FF - ProfilePath - FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} ---- FIREFOX POLICIES ---- c:\program files\mozilla firefox\greprefs\all.js - pref("browser.visited_color", "#551A8B"); c:\program files\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".se"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.videoFeeds.handler", "ask"); ============= SERVICES / DRIVERS =============== ============== File Associations =============== regfile="regedit.exe" "%1" =============== Created Last 30 ================ 2009-08-09 10:13 <DIR> --d----- C:\$WINDOWS.~BT 2009-08-09 09:56 1,908 a------- c:\windows\diagwrn.xml 2009-08-09 09:56 1,908 a------- c:\windows\diagerr.xml 2009-08-09 07:48 <DIR> -cd-h--- c:\programdata\{EF63305C-BAD7-4144-9208-D65528260864} 2009-08-09 07:48 <DIR> -cd-h--- c:\progra~2\{EF63305C-BAD7-4144-9208-D65528260864} 2009-08-08 22:15 184 a------- c:\windows\War3Unin.bat 2009-08-08 22:06 <DIR> --d----- c:\program files\CCleaner 2009-08-08 22:03 <DIR> --d----- c:\users\luka mrkonjic\RegBooster 2009-08-08 22:03 <DIR> --d----- c:\program files\RegBooster 2009-08-08 16:33 <DIR> --d----- C:\4ce9246fbea5dc61736933ff91 ==================== Find3M ==================== 2009-08-08 21:47 34 a------- c:\users\luka mrkonjic\jagex_runescape_preferences.dat 2009-07-21 23:52 915,456 a------- c:\windows\system32\wininet.dll 2009-07-21 23:47 109,056 a------- c:\windows\system32\iesysprep.dll 2009-07-21 23:47 71,680 a------- c:\windows\system32\iesetup.dll 2009-07-21 22:13 133,632 a------- c:\windows\system32\ieUnatt.exe 2009-07-01 10:09 480,268 a------- c:\windows\system32\perfh01D.dat 2009-07-01 10:09 85,522 a------- c:\windows\system32\perfc01D.dat 2009-06-13 11:57 86,016 a------- c:\windows\inf\infstrng.dat 2009-06-13 11:57 51,200 a------- c:\windows\inf\infpub.dat 2009-06-13 11:57 86,016 a------- c:\windows\inf\infstor.dat 2009-06-07 10:07 32,632,835 a------- c:\users\luka mrkonjic\EmpireScape_Awesome_client.zip 2009-06-06 22:16 293 a------- c:\users\luka mrkonjic\net2ftp-1244319339.zip 2009-03-18 22:02 35,979 a------- c:\users\luka mrkonjic\Facebook_Freezer.zip 2009-02-21 21:39 3,630,342 a------- c:\users\luka mrkonjic\SwiftKit(Install).exe 2009-02-11 11:18 59,755,569 a------- c:\users\luka mrkonjic\client508_ipchanger.zip 2009-02-04 15:50 16,278,936 a------- c:\users\luka mrkonjic\jre-6u12-windows-i586-p.exe 2009-02-04 15:18 41,569,737 a------- c:\users\luka mrkonjic\DHGaming_Official_Client.zip 2009-02-04 14:57 203,661 a------- c:\users\luka mrkonjic\Silab_client_4.0.zip 2009-02-03 23:46 205,192 a------- c:\users\luka mrkonjic\silabv5new.zip 2009-02-03 22:41 54,686,488 a------- c:\users\luka mrkonjic\jdk-1_5_0_17-windows-i586-p.exe 2009-02-02 21:41 76,633,496 a------- c:\users\luka mrkonjic\jdk-6u12-windows-i586-p.exe 2009-02-02 19:43 18,046,419 a------- c:\users\luka mrkonjic\Nova_Pk_Client.zip 2009-02-02 19:30 18,230,394 a------- c:\users\luka mrkonjic\Galkons Anarchy V2.0.zip 2009-02-01 23:33 76,502,424 a------- c:\users\luka mrkonjic\jdk-6u10-windows-i586-p.exe 2009-02-01 11:31 130,284,263 a------- c:\users\luka mrkonjic\java_ee_sdk-5_01-windows.exe 2009-01-31 13:26 19,098,262 a------- c:\users\luka mrkonjic\fearcombat_update_engb_107_108.exe 2009-01-31 12:38 1,896,155,930 a------- c:\users\luka mrkonjic\fearcombat_en_107.exe 2009-01-28 22:55 7,301,702 a------- c:\users\luka mrkonjic\daemon4303-lite.zip 2009-01-28 22:55 7,321,032 a------- c:\users\luka mrkonjic\daemon4303-lite.exe 2009-01-26 21:16 97,953 a------- c:\users\luka mrkonjic\CG_trainer_adventure_quest_1375413.zip 2009-01-25 13:23 22,328 a------- c:\users\lukamr~1\appdata\roaming\PnkBstrK.sys 2009-01-16 23:55 69,632 a------- c:\users\luka mrkonjic\GroundZero's Facebook Freezer.exe 2009-01-15 20:40 174 a--sh--- c:\program files\desktop.ini 2009-01-15 20:28 665,600 a------- c:\windows\inf\drvindex.dat 2009-01-15 20:04 290,490 a------- c:\windows\inf\perflib\041d\perfi.dat 2009-01-15 20:04 290,490 a------- c:\windows\inf\perflib\041d\perfh.dat 2008-08-31 18:23 82 a------- c:\users\luka mrkonjic\build.cmd 2008-08-16 23:27 92 a------- c:\users\luka mrkonjic\run.cmd 2008-05-17 00:41 68 a------- c:\users\luka mrkonjic\run.bat 2007-08-27 13:22 35,978 a------- c:\windows\inf\perflib\041d\perfd.dat 2007-08-27 13:22 35,978 a------- c:\windows\inf\perflib\041d\perfc.dat 2006-11-02 11:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat 2006-11-02 11:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat 2006-11-02 11:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat 2006-11-02 11:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat 2009-02-16 20:45 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\history\history.ie5\index.dat 2009-02-16 20:45 32,768 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat 2009-02-16 20:45 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\cookies\index.dat ============= FINISH: 11:53:02,24 =============== HELP! :) I have attached the "attach" file to my other post, "i think i have some viruses"