IE7 keeps crashing

morpheos · 12-10-2008, 11:02 AM

All my google searches have the same top 5 or so results

blinkx.com
best5online.co.uk
kontraband.com

as well as several other non related results. I have done the same search on my laptop and these do not show up.

Looks like my google has been hijacked

Can anyone help ?

IE7 sp3 keeps locking up as well i think it may be related

Iv'e reinstalled ie7 to no avail

Many thanks

DDS (Version 1.0) - NTFSx86
Run by admin at 18:47:10.98 on 10/12/2008
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1983.1417 [GMT 0:00]

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Internet Explorer\iexplore.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Documents and Settings\admin\Desktop\dds.com
C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.msn.com
uWindow Title =
mSearch Page = hxxp://www.msn.com
mStart Page = hxxp://www.msn.com
mWindow Title =
BHO: {0055C089-8582-441B-A0BF-17B458C2A3A8} - c:\program files\internet download manager\IDMIECC.dll
BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre6\bin\ssv.dll
BHO: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [MsnMsgr] "c:\program files\windows live\messenger\MsnMsgr.Exe" /background
uRun: [IDMan] c:\program files\internet download manager\IDMan.exe /onboot
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRunOnce: [Privacy Suite] "c:\program files\cyberscrub privacy suite\cspseraser.exe" "/r:c:\documents and settings\admin\application data\cyberscrub\Privacy Suite"
mRun: [<NO NAME>] "c:\windows\options\OEMReset.exe" /Audit
mRun: [NeroFilterCheck] "c:\windows\system32\NeroCheck.exe"
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [SSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\internet download manager\IEGetVL.htm
IE: Download with IDM - c:\program files\internet download manager\IEExt.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
LSP: c:\program files\common files\pc tools\lsp\PCTLsp.dll
LSP: c:\windows\system32\idmmbc.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R0 IKFileSec;File Security Driver;c:\windows\system32\drivers\ikfilesec.sys [2008-12-10 40840]
R1 IKSysFlt;System Filter Driver;c:\windows\system32\drivers\iksysflt.sys [2008-12-10 66952]
R1 IKSysSec;System Security Driver;c:\windows\system32\drivers\iksyssec.sys [2008-12-10 81288]
R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2007-4-12 207656]
R1 pctfw2;pctfw2;\??\c:\windows\system32\drivers\pctfw2.sys [2008-12-10 160792]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\mcafee\siteadvisor\McSACore.exe" [2008-10-4 203280]
R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2007-4-12 358736]
R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2007-4-12 144704]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2008-12-10 356920]
R2 sdCoreService;PC Tools Security Service;c:\program files\spyware doctor\pctsSvc.exe [2008-12-10 1079176]
R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2007-4-12 605512]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2007-4-12 79240]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2007-4-12 35240]
R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2007-4-12 40488]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2007-4-12 34152]
S3 ST330;ST330;c:\windows\system32\drivers\st330.sys [2008-6-2 30464]
S3 STBUS;STBUS;c:\windows\system32\drivers\stbus.sys [2008-6-2 12672]
S3 stppp;Speedtouch PPP Adapter Adapter;c:\windows\system32\drivers\stppp.sys [2008-6-2 32000]
S3 Z302Mic;Vimicro Z302 Mic Audio Filter Driver;c:\windows\system32\drivers\UsbMicfilt.sys []

============== File Associations ===============

regfile="regedit.exe" "%1"

=============== Created Last 30 ================

2008-12-10 18:37 250 a------- c:\windows\gmer.ini
2008-12-10 17:58 410,984 a------- c:\windows\system32\deploytk.dll
2008-12-10 14:17 160,792 a------- c:\windows\system32\drivers\pctfw2.sys
2008-12-10 14:17 81,288 a------- c:\windows\system32\drivers\iksyssec.sys
2008-12-10 14:17 66,952 a------- c:\windows\system32\drivers\iksysflt.sys
2008-12-10 14:17 40,840 a------- c:\windows\system32\drivers\ikfilesec.sys
2008-12-10 14:17 29,576 a------- c:\windows\system32\drivers\kcom.sys
2008-12-10 14:17 <DIR> --d----- c:\program files\common files\PC Tools
2008-12-10 14:17 <DIR> --d----- c:\program files\Spyware Doctor
2008-12-10 14:17 <DIR> --d----- c:\docume~1\alluse~1\applic~1\PC Tools
2008-12-10 14:17 <DIR> --d----- c:\docume~1\admin\applic~1\PC Tools
2008-12-10 14:03 <DIR> --d----- c:\program files\XoftSpySE
2008-12-10 13:47 0 a------- c:\windows\system32\8104297.jun
2008-12-10 13:47 <DIR> --d----- c:\program files\Browser Hijack Recover
2008-12-09 19:30 4,224 ac------ c:\windows\system32\dllcache\beep.sys
2008-12-09 19:30 4,224 a------- c:\windows\system32\drivers\beep.sys
2008-12-09 18:40 <DIR> --d----- C:\Binaries
2008-12-09 18:25 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2008-12-09 17:04 94,272 a------- c:\windows\system32\prunnet.exe
2008-12-08 18:54 65,536 a------- c:\windows\system32\ICE_JNIRegistry.dll
2008-12-06 14:25 <DIR> --d----- c:\docume~1\admin\applic~1\GrabPro
2008-12-06 14:11 156,672 a------- c:\windows\system32\rmc_fixasf.exe
2008-12-06 14:11 237,568 a------- c:\windows\system32\rmc_rtspdl.dll
2008-12-06 14:09 323,584 a------- c:\windows\system32\AUDIOGENIE2.DLL
2008-12-06 14:08 <DIR> --d----- c:\windows\Replay Media Catcher
2008-12-04 16:20 <DIR> --d----- c:\program files\common files\Ulead Systems
2008-12-04 16:19 <DIR> --d----- c:\program files\Ulead Systems
2008-12-03 19:27 <DIR> --d----- c:\program files\VirtualDJ
2008-12-01 19:12 <DIR> --d----- c:\docume~1\alluse~1\applic~1\River Past G5
2008-12-01 19:12 <DIR> --d----- c:\docume~1\admin\applic~1\River Past G5
2008-11-30 20:16 20,358 a------- c:\windows\vgirl.prf
2008-11-24 16:30 92,160 a------- c:\windows\system32\BarCod32.OCX
2008-11-22 17:39 0 a------- c:\docume~1\admin\applic~1\wklnhst.dat
2008-11-21 20:02 <DIR> --d----- c:\program files\Fake Webcam
2008-11-13 23:11 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2008-11-13 23:11 1,106,944 -c------ c:\windows\system32\dllcache\msxml3.dll
2008-11-12 11:37 <DIR> --d----- c:\docume~1\alluse~1\applic~1\13242
2008-11-12 11:34 483,328 a------- c:\windows\system32\actskn45.ocx

==================== Find3M ====================

2008-10-24 11:21 455,296 a------- c:\windows\system32\drivers\mrxsmb.sys
2008-10-23 12:36 286,720 a------- c:\windows\system32\gdi32.dll
2008-10-16 20:38 826,368 a------- c:\windows\system32\wininet.dll
2008-10-16 14:06 268,648 a------- c:\windows\system32\mucltui.dll
2008-10-16 14:06 208,744 a------- c:\windows\system32\muweb.dll
2008-10-06 16:02 98,304 a------- c:\windows\system32\CmdLineExt.dll
2008-10-03 10:02 247,326 a------- c:\windows\system32\strmdll.dll
2008-09-30 16:43 1,286,152 a------- c:\windows\system32\msxml4.dll
2008-09-15 12:12 1,846,400 a------- c:\windows\system32\win32k.sys

============= FINISH: 18:47:40.20 ===============