[hauspooieshubby]

My wife has had problems with many tabs and windows opening while surfing. I was wondering if anyone could look over my HJT log and give anyhelp possible. Thank you.


Logfile of HijackThis v1.99.1
Scan saved at 12:50:12 PM, on 11/28/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\WINDOWS\vphc700.exe
C:\Program Files\Nova Development\Photo Explosion 3.0 SE\calcheck.exe
C:\Program Files\Fisher-Price\Easy-Link internet launch pad\Easy-Link internet launch pad.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.5.0_12\bin\jusched.exe
C:\Program Files\Lexmark 2500 Series\lxddmon.exe
C:\Program Files\Lexmark 2500 Series\lxddamon.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Documents and Settings\Owner\Desktop\hijack\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
F2 - REG:system.ini: UserInit=C:\Windows\System32\Userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_12\bin\ssv.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"
O4 - HKLM\..\Run: [cafwc] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl
O4 - HKLM\..\Run: [capfasem] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
O4 - HKLM\..\Run: [capfupgrade] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe
O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe"
O4 - HKLM\..\Run: [phc700] C:\WINDOWS\vphc700.exe
O4 - HKLM\..\Run: [PhotoExplosionCalCheck] C:\Program Files\Nova Development\Photo Explosion 3.0 SE\calcheck.exe
O4 - HKLM\..\Run: [eligmini] C:\Program Files\Fisher-Price\Easy-Link internet launch pad\Easy-Link internet launch pad.exe 0
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_12\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [lxddmon.exe] "C:\Program Files\Lexmark 2500 Series\lxddmon.exe"
O4 - HKLM\..\Run: [lxddamon] "C:\Program Files\Lexmark 2500 Series\lxddamon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [Free Internet Window Washer] C:\Program Files\Free Internet Window Washer\Clearpch.exe -Start
O4 - Startup: wkcalrem.LNK = C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_12\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_12\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: Yahoo! Bingo - http://origin.games.yahoo.net/games/clients/y/xt0_x.cab
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testActiveX/built/signed/DisneyOnlineGames.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129259452104
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://games.myspace.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://games.pogo.com/online2/pogo/bejeweled2/popcaploader_v6.cab
O20 - Winlogon Notify: dimsntfy - C:\WINDOWS\
O20 - Winlogon Notify: PFW - C:\WINDOWS\SYSTEM32\UmxWnp.Dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe

 

[sUBs]

Please follow the instructs from this webpage (sticky):

http://www.techsupportforum.com/sec...read-before-posting-malware-removal-help.html

You shall have a proper set of logs for us after that. Someone shall be along shortly

* Kindly note that threads without the proper logs would likely be ignored.

 

[hauspooieshubby]

Ok my wife says that when she goes to close a IE window or Tab in IE7 that 20-30 tabs will open and freeze the computer. We have also been having problems with an overall slowing of everything from internet loading to program loading and I was wondering if she or I might have down loaded any thing that might be causing this. Any help you can offer will be greatly appreciated thank you.


DDS (Version 1.0) - NTFSx86
Run by Owner at 13:48:36.64 on Fri 11/28/2008

============== Psuedo HJT Report ===============

uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = 127.0.0.1;*.local
uSearchURL,(Default) = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com
mWinlogon: Userinit=c:\windows\system32\Userinit.exe
BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.5.0_12\bin\ssv.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [updateMgr] c:\program files\adobe\acrobat 7.0\reader\AdobeUpdateManager.exe AcRdB7_0_9
uRun: [Free Internet Window Washer] c:\program files\free internet window washer\Clearpch.exe -Start
mRun: [NVMixerTray] "c:\program files\nvidia corporation\nvmixer\NVMixerTray.exe"
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [cctray] "c:\program files\ca\ca internet security suite\cctray\cctray.exe"
mRun: [CAVRID] "c:\program files\ca\ca internet security suite\ca anti-virus\CAVRID.exe"
mRun: [cafwc] c:\program files\ca\ca internet security suite\ca personal firewall\cafw.exe -cl
mRun: [capfasem] c:\program files\ca\ca internet security suite\ca personal firewall\capfasem.exe
mRun: [capfupgrade] c:\program files\ca\ca internet security suite\ca personal firewall\capfupgrade.exe
mRun: [QOELOADER] "c:\program files\ca\ca internet security suite\ca anti-spam\qsp-5.1.18.0\QOELoader.exe"
mRun: [phc700] c:\windows\vphc700.exe
mRun: [PhotoExplosionCalCheck] c:\program files\nova development\photo explosion 3.0 se\calcheck.exe
mRun: [eligmini] c:\program files\fisher-price\easy-link internet launch pad\Easy-Link internet launch pad.exe 0
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.5.0_12\bin\jusched.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [lxddmon.exe] "c:\program files\lexmark 2500 series\lxddmon.exe"
mRun: [lxddamon] "c:\program files\lexmark 2500 series\lxddamon.exe"
mRun: [FaxCenterServer] "c:\program files\lexmark fax solutions\fm3032.exe" /s
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
uPolicies-system: NoDispAppearancePage = 0 (0x0)
mPolicies-explorer: NoViewContextMenu = 0 (0x0)
IE: {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - c:\program files\aim\aim.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_12\bin\ssv.dll
IE: {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - c:\program files\aim\aim.exe
LSP: c:\windows\system32\VetRedir.dll
Notify: PFW - UmxWnp.Dll
LSA: Notification Packages = scecli

============= SERVICES / DRIVERS ===============


=============== Created Last 30 ================

2008-11-28 13:15 250 a------- c:\windows\gmer.ini
2008-11-27 23:05 40,960 a------- c:\windows\system32\lxddvs.dll
2008-11-27 23:05 344,064 a----r-- c:\windows\system32\lxddcoin.dll
2008-11-27 23:02 65,536 a------- c:\windows\system32\lxddcaps.dll
2008-11-27 23:02 692,224 a------- c:\windows\system32\lxdddrs.dll
2008-11-27 23:02 69,632 a------- c:\windows\system32\lxddcnv4.dll
2008-11-27 22:58 45,056 a------- c:\windows\system32\LXF3PMON.DLL
2008-11-27 22:58 32,768 a------- c:\windows\system32\LXF3FXPU.DLL
2008-11-27 22:57 36,864 a------- c:\windows\system32\lxf3oem.dll
2008-11-27 22:24 <DIR> --d----- c:\program files\RegCure
2008-11-27 22:23 44 a------- c:\windows\system32\lxddrwrd.ini
2008-11-27 22:21 <DIR> --d----- c:\program files\Abbyy FineReader 6.0 Sprint
2008-11-27 22:20 585,728 a------- c:\windows\system32\tmp9.tmp
2008-11-27 22:19 <DIR> --d----- c:\program files\Lexmark 2500 Series
2008-11-10 20:06 90,112 a------- c:\windows\unvise32.exe
2008-11-10 20:05 <DIR> --d----- c:\program files\The Rosetta Stone
2008-11-08 13:08 <DIR> --d----- c:\program files\MSXML 4.0
2008-11-07 19:25 <DIR> --d----- c:\program files\Free Internet Window Washer
2008-11-02 16:29 <DIR> --d----- c:\program files\Full Tilt Poker

==================== Find3M ====================

2008-11-28 13:06 <DIR> --d----- c:\docume~1\owner\applic~1\Lexmark Productivity Studio
2008-11-27 23:09 <DIR> --d----- c:\program files\Lx_cats
2008-11-27 23:09 <DIR> --d----- c:\docume~1\owner\applic~1\uTorrent
2008-11-27 23:00 <DIR> --d----- c:\program files\Lexmark Fax Solutions
2008-11-27 22:23 <DIR> --d----- c:\program files\Lexmark Toolbar
2008-11-16 23:18 <DIR> --d----- c:\docume~1\owner\applic~1\Atari
2008-11-14 11:54 <DIR> --d----- c:\program files\Web Publish
2008-11-08 13:08 <DIR> --d----- c:\program files\Messenger
2008-11-08 13:06 <DIR> --d----- c:\program files\Windows NT
2008-11-07 19:30 <DIR> --d----- c:\program files\Microsoft AntiSpyware
2008-10-28 22:26 76,487 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2008-10-28 22:19 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Viewpoint
2008-10-28 22:19 <DIR> --d----- c:\program files\Viewpoint
2008-10-28 21:59 <DIR> --d----- c:\program files\Unity
2008-10-28 21:59 <DIR> --d----- c:\program files\Yahoo! Games
2008-10-28 21:59 <DIR> --d----- c:\docume~1\owner\applic~1\PlayFirst
2008-10-28 21:59 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Sandlot Games
2008-10-28 21:58 <DIR> --d----- c:\program files\common files\AOL
2008-10-28 21:38 <DIR> --d----- c:\program files\Yahoo!
2008-10-28 21:14 <DIR> --d----- c:\docume~1\owner\applic~1\Smart PC Solutions
2008-10-28 21:14 <DIR> --d----- c:\program files\Smart PC Solutions
2008-10-26 17:41 <DIR> --d----- c:\docume~1\owner\applic~1\Unity
2008-10-16 14:06 268,648 a------- c:\windows\system32\mucltui.dll
2008-10-16 14:06 208,744 a------- c:\windows\system32\muweb.dll
2008-10-15 17:11 321,291 a------- c:\windows\java\packages\5vn3p3tv.zip
2008-10-15 17:11 2,814 a------- c:\windows\java\packages\data\of3rpzrf.dat
2008-10-07 13:53 <DIR> --d----- c:\program files\iTunes
2008-10-07 13:53 <DIR> --d----- c:\docume~1\alluse~1\applic~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-10-07 13:53 <DIR> --d----- c:\program files\iPod
2008-10-02 15:32 <DIR> --d----- c:\program files\Bonjour
2008-09-30 16:43 1,286,152 a------- c:\windows\system32\msxml4.dll
2008-09-15 05:57 1,846,016 -------- c:\windows\system32\win32k.sys
2008-09-04 10:42 1,106,944 a------- c:\windows\system32\msxml3.dll
2008-09-02 20:09 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2008-08-16 13:15 <DIR> --d----- c:\docume~1\owner\applic~1\aicon
2008-08-03 20:09 <DIR> --d----- c:\docume~1\owner\applic~1\SecondLife
2008-06-18 13:52 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Zylom
2008-06-06 08:54 <DIR> --d----- c:\docume~1\owner\applic~1\FaxCtr
2008-06-05 23:53 <DIR> --d----- c:\docume~1\owner\applic~1\Ulead Systems
2008-06-05 22:50 <DIR> --d----- c:\docume~1\alluse~1\applic~1\FaxCtr
2008-05-31 17:22 <DIR> --d----- c:\docume~1\owner\applic~1\You've Got Pictures Screensaver
2008-05-31 17:22 <DIR> --d----- c:\docume~1\owner\applic~1\LimeWire
2008-04-16 07:10 <DIR> --d----- c:\docume~1\owner\applic~1\Snapfish
2008-03-26 18:59 <DIR> --d----- c:\docume~1\owner\applic~1\QQ Games Plugin
2008-01-02 01:58 <DIR> --d----- c:\docume~1\alluse~1\applic~1\HipSoft
2007-08-25 00:15 <DIR> --d----- c:\docume~1\alluse~1\applic~1\CA
2007-08-16 14:05 <DIR> --d----- c:\docume~1\alluse~1\applic~1\pdf995
2007-08-16 14:05 <DIR> --d----- c:\docume~1\owner\applic~1\pdf995
2007-08-15 18:19 <DIR> --d----- c:\docume~1\owner\applic~1\My Games
2007-08-15 12:26 <DIR> --d----- c:\docume~1\alluse~1\applic~1\MinigolfVUG_TacoBell3
2007-05-08 13:07 <DIR> --d----- c:\docume~1\owner\applic~1\Tenebril
2007-05-08 12:58 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Tenebril
2007-04-30 14:11 <DIR> --d----- c:\docume~1\owner\applic~1\NCH Swift Sound
2007-04-11 09:05 <DIR> --d----- c:\docume~1\owner\applic~1\Uniblue
2006-10-14 15:45 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Knowledge Adventure
2006-09-18 20:21 <DIR> --d----- c:\docume~1\owner\applic~1\BitTorrent
2006-07-08 00:02 <DIR> --d----- c:\docume~1\owner\applic~1\MySpace
2006-04-27 14:08 <DIR> --d----- c:\docume~1\owner\applic~1\Magic Match
2006-03-18 04:18 <DIR> --d----- c:\docume~1\owner\applic~1\Ambient Design
2006-01-24 14:19 <DIR> --d----- c:\docume~1\owner\applic~1\SmartDraw
2006-01-22 00:24 <DIR> --d----- c:\docume~1\alluse~1\applic~1\PopCap
2005-09-21 06:40 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Vivendi Universal Games
2005-09-03 10:10 <DIR> --d----- c:\docume~1\owner\applic~1\Shareaza
2005-08-20 15:22 <DIR> --d----- c:\docume~1\owner\applic~1\flightgear.org
2005-08-20 15:22 <DIR> --d----- c:\docume~1\owner\applic~1\fltk.org
2005-08-07 21:45 <DIR> --d----- c:\docume~1\owner\applic~1\KonicaMinolta
2005-07-27 11:23 <DIR> --d----- c:\docume~1\owner\applic~1\funkitron
2005-06-30 16:29 <DIR> --d----- c:\docume~1\alluse~1\applic~1\element5
2005-05-17 15:24 <DIR> --d----- c:\docume~1\owner\applic~1\GameBlend
2005-05-17 15:24 <DIR> --d----- c:\docume~1\alluse~1\applic~1\GameBlend
2005-04-22 11:54 <DIR> --d----- c:\docume~1\owner\applic~1\STOPzilla!
2005-04-21 16:54 <DIR> --d----- c:\docume~1\owner\applic~1\psar
2005-04-18 20:59 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Symantec
2005-03-26 11:08 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Trymedia
2005-03-21 12:40 <DIR> --d----- c:\docume~1\owner\applic~1\Symantec
2005-01-20 17:31 <DIR> --d----- c:\docume~1\alluse~1\applic~1\McAfee.com
2005-01-20 17:25 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Pure Networks
2005-01-20 17:13 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Prism Deploy

============= FINISH: 13:50:05.78 ===============

 

[sUBs]

Ok my wife says that when she goes to close a IE window or Tab in IE7 that 20-30 tabs will open and freeze the computer.

I don't see malware in your logs but your descript does sound like malware activity.


Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Post the log from ComboFix when you've accomplished that.

 

[sUBs]

Due to the lack of feedback, this Topic is closed.