orionstar

Sorry, I missed the opening thread.

So, as described in the earlier thread, I'm having problems with Internet Explorer, not closing properly when closed via the quit button. I still see it running in processes taking up memory until I have to force it to quit manually.

Here is the DDS txt.


DDS (Ver_09-10-13.01) - NTFSx86
Run by Butcher at 1:01:19.24 on 2009-10-18
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Professional 5.1.2600.3.949.82.1042.18.3326.2564 [GMT 13:00]

AV: 알약 *On-access scanning enabled* (Updated) {B9431E5A-E196-4B6F-843A-10E01DB25461}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\ESTsoft\ALYac\AYAgent.aye
svchost.exe
C:\Program Files\ESTsoft\ALYac\AYServiceNt.aye
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Documents and Settings\Butcher\Local Settings\Temporary Internet Files\Content.IE5\PDKEPCFR\dds[1].scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.naver.com/
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: 곰TV 길잡이: {375a6ab2-feec-445d-b853-2139fb561f80} - c:\progra~1\gretech\gomtvh~1\ghelper.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: 곰TV 길잡이: {375a6ab2-feec-445d-b853-2139fb561f80} - c:\progra~1\gretech\gomtvh~1\ghelper.dll
BHO: 네이버 툴바 도우미: {67c41e9e-2ebf-4f2b-af74-314f0d793172} - c:\program files\naver\navertoolbar\NaverTB_3_1_3_136.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~3\office12\GRA8E1~1.DLL
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: cside Class: {aeb636d6-ce03-4c89-9677-964a63322e2d} - c:\program files\gretech\gomtvhelper\infofinder\if.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: 네이버 툴바(&N): {d09cff09-a42a-4edc-9804-e61224f59ca1} - c:\program files\naver\navertoolbar\NaverTB_3_1_3_136.dll
TB: 곰TV 알리미: {c7928cf3-9532-44c0-b8cc-98e2c11ecc9f} - c:\program files\gretech\gomtvhelper\infofinder\if.dll
TB: 곰TV 알리미: {7a3ac86b-89ed-4b45-bbac-6e0213eaa768} - c:\program files\gretech\gomtvhelper\infofinder\if.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [LGODDFU] "c:\program files\lg_fwupdate\fwupdate.exe" blrun
mRun: [ALYac] "c:\program files\estsoft\alyac\AYUpdate.exe" /run
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [HncUpdate] c:\program files\common files\hnc\hncutils\HncUpdate.exe /A
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
dRun: [ctfmon.exe] ctfmon.exe
dRunOnce: [nltide_2] regsvr32 /s /n /i:U shell32
StartupFolder: c:\docume~1\butcher\시작메~1\프로그램\시작프~1\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: 네이버 검색 - c:\program files\naver\navertoolbar\NaverTB_3_1_3_136.dll /SEARCH.HTML
IE: 네이버 북마크하기 - c:\program files\naver\navertoolbar\NaverTB_3_1_3_136.dll /BOOKMARK.HTML
IE: 네이버 블로그 담기 - c:\program files\naver\navertoolbar\NaverTB_3_1_3_136.dll /BLOG.HTML
IE: 네이버 사전 검색 - c:\program files\naver\navertoolbar\NaverTB_3_1_3_136.dll /DIC.HTML
IE: 네이버 오픈캐스트 링크등록 - c:\program files\naver\navertoolbar\NaverTB_3_1_3_136.dll /OPENCAST.HTML
IE: 네이버 일한 번역 - c:\program files\naver\navertoolbar\NaverTB_3_1_3_136.dll /JKTRANS.HTML
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {013BCEA5-8309-448b-8604-85F23D7861A5} - {375A6AB2-FEEC-445D-B853-2139FB561F80} - c:\progra~1\gretech\gomtvh~1\ghelper.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
Trusted Zone: wedisk.co.kr
Trusted Zone: wedisk.net
DPF: {4AFE617E-ABD5-48F2-9107-774310802352} - hxxp://img.cyworld.com/img/video_v3/tvon/CyTVAxLauncher_V12.CAB
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1241608281203
DPF: {6CE20149-ABE3-462E-A1B4-5B549971AA38} - hxxps://npg.tgcorp.com/dlp/js/CKKeyPro/CKKeyPro3015_32k.cab
DPF: {7513B187-5954-4C64-ABF4-E652FE899F24} - hxxp://gl.wedisk.co.kr/app/WeDisk.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {8DC067B8-911D-473A-90F1-1171B887CDE0} - hxxp://cyimg7.cyworld.com/ImageUpload/CyPictureU1233.cab?20081124
DPF: {9CDD57AC-CA86-464C-B920-3228A388CC78} - hxxp://file.naver.com/activex/NaverFile.cab
DPF: {C044CD87-DFB0-4130-A5E4-49361106FBC8} - hxxps://members.hangame.com/common/HanSetup1020.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CB5C683C-416A-4701-B018-0F1B21D64D6B} - hxxp://cyimg7.cyworld.com/cymusic/package/skcinst.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {D912AABC-6CB0-416F-85B6-CABBB86FD558} - hxxp://plugin.inicis.com/wallet60/INIwallet60.cab
DPF: {FE342FC7-4374-4EBE-86DB-D73AE861F779} - hxxp://file.naver.com/activex/test/NaverAXGuide.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~3\office12\GR99D3~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\wpdshserviceobj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~3\office12\GRA8E1~1.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\butcher\applic~1\mozilla\firefox\profiles\o9ysiqwm.default\
FF - plugin: c:\program files\mozilla firefox\plugins\NPGomtvx_nie.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

============= SERVICES / DRIVERS ===============

R3 AtiHdmiService;ATI Function Driver for HDMI Service;c:\windows\system32\drivers\AtiHdmi.sys [2009-5-6 89600]
S3 AYDrvSP_ALYAC;AYDrvSP_ALYAC;c:\program files\estsoft\alyac\AYDrvSP.sys [2008-12-18 24312]
S3 JRSKD24;JRSKD24;c:\windows\system32\JRSKD24.SYS [2009-6-28 34744]
S3 lgmcbus;LGE Mobile driver (WDM);c:\windows\system32\drivers\lgmcbus.sys [2009-5-24 83584]
S3 lgmcmdfl;LGE Mobile USB WMC Modem Filter;c:\windows\system32\drivers\lgmcmdfl.sys [2009-5-24 14976]
S3 lgmcmdm;LGE Mobile USB WMC Modem Driver;c:\windows\system32\drivers\lgmcmdm.sys [2009-5-24 110464]
S3 lgmcmgmt;LGE Mobile USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\lgmcmgmt.sys [2009-5-24 104448]
S3 lgmcnd5;LGE Mobile USB WMC Ethernet ELDA (NDIS);c:\windows\system32\drivers\lgmcnd5.sys [2009-5-24 25344]
S3 lgmcobex;LGE Mobile USB WMC OBEX Interface;c:\windows\system32\drivers\lgmcobex.sys [2009-5-24 100480]
S3 lgmcunic;LGE Mobile USB WMC Ethernet ELDA (WDM);c:\windows\system32\drivers\lgmcunic.sys [2009-5-24 109952]

=============== Created Last 30 ================

2009-10-17 21:51 <DIR> --d----- c:\program files\Trend Micro
2009-10-15 23:23 <DIR> --d----- c:\program files\DtsFilter
2009-10-12 00:07 <DIR> --d----- c:\windows\system32\LogFiles
2009-10-05 10:19 <DIR> --d----- c:\docume~1\butcher\applic~1\Office Genuine Advantage
2009-10-02 20:55 <DIR> --d----- c:\program files\iPod
2009-10-02 20:55 <DIR> --d----- c:\program files\iTunes
2009-10-02 18:00 <DIR> --d----- c:\program files\Microsoft
2009-09-30 13:20 569,704 a------- c:\windows\system32\mpg123dsf.ax
2009-09-30 13:20 325,992 a------- c:\windows\system32\mp3ParseStream.ax
2009-09-30 13:20 144,744 a------- c:\windows\system32\skcef.dll
2009-09-30 13:20 79,208 a------- c:\windows\system32\nppeeraod.dll
2009-09-30 13:20 38,248 a------- c:\windows\system32\ShortCutIcon.dll
2009-09-25 00:25 <DIR> --d----- c:\program files\DivX
2009-09-23 22:01 106 a------- c:\windows\cc.ini

==================== Find3M ====================

2009-10-16 02:45 239,080 a------- c:\windows\system32\perfh012.dat
2009-10-16 02:45 68,294 a------- c:\windows\system32\perfc012.dat
2009-10-01 21:52 509,288 a------- c:\windows\system32\skcppl.dll
2009-10-01 21:52 460,136 a------- c:\windows\system32\skcbgm.dll
2009-10-01 21:52 202,088 a------- c:\windows\system32\skcwmf.dll
2009-09-12 03:17 136,192 a------- c:\windows\system32\msv1_0.dll
2009-09-05 10:03 58,880 a------- c:\windows\system32\msasn1.dll
2009-08-29 20:54 916,480 a------- c:\windows\system32\wininet.dll
2009-08-26 21:00 247,326 a------- c:\windows\system32\strmdll.dll
2009-08-18 02:50 34,744 a------- c:\windows\system32\JRSKD24.SYS
2009-08-18 02:50 12,600 a------- c:\windows\system32\JRSUKD25.SYS
2009-08-18 02:49 632,120 a------- c:\windows\system32\CKSetup32.exe
2009-08-06 19:23 274,288 a------- c:\windows\system32\mucltui.dll
2009-08-06 19:23 215,920 a------- c:\windows\system32\muweb.dll
2009-08-05 21:59 202,752 a------- c:\windows\system32\mswebdvd.dll
2009-08-05 06:26 2,146,816 a------- c:\windows\system32\ntoskrnl.exe
2009-08-05 06:25 2,025,472 a------- c:\windows\system32\ntkrnlpa.exe
2009-08-03 15:07 403,816 a------- c:\windows\system32\OGACheckControl.dll
2009-08-03 15:07 322,928 a------- c:\windows\system32\OGAAddin.dll
2009-08-03 15:07 230,768 a------- c:\windows\system32\OGAEXEC.exe
2009-08-01 12:56 120,120 a----r-- c:\windows\system32\CKAgent.exe
2009-07-26 16:44 48,448 a------- c:\windows\system32\sirenacm.dll
2009-07-25 06:23 411,368 a------- c:\windows\system32\deploytk.dll
2009-07-24 12:37 120,120 a------- c:\windows\system32\Jrsoftcp.dll
2009-07-24 12:37 140,600 a------- c:\windows\system32\CKApp.dll
2009-07-22 17:40 1,147,576 a------- c:\windows\system32\HanWebMsg1057.dll
2009-05-15 13:38 16,384 a--sh--- c:\windows\system32\config\systemprofile\cookies\index.dat
2009-05-15 13:38 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\index.dat
2009-05-06 17:03 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009050620090507\index.dat
2009-05-15 13:38 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\temporary internet files\content.ie5\index.dat
2009-06-12 21:46 16,384 a--sh--- c:\windows\temp\cookies\index.dat
2009-06-12 21:46 16,384 a--sh--- c:\windows\temp\history\history.ie5\index.dat
2009-06-12 21:46 49,152 a--sh--- c:\windows\temp\temporary internet files\content.ie5\index.dat

============= FINISH: 1:01:25.00 ===============


I have also access to a Windows Install Disc.

Thanks for the help.

Attached Files

	ark.txt (514 Bytes, 0 views)
	Attach.txt (14.2 KB, 0 views)