Tech Support Forum banner
Status
Not open for further replies.
1 - 2 of 2 Posts

·
Registered
Joined
·
4 Posts
Discussion Starter · #1 ·
I had issues with my first post so hopefully this one shall be more successful...:grin:

I recently was misfortunate enough to be a victim of the antimalware doctor virus. After reading several sources of information during the brief few times I could actually get online...I sourced some programs which were recommended so as to eradicate my computer of this virus...I then transferred them to my laptop, from my brother's laptop via usb but the virus would not allow them to run...it shut down most systems so eventually I had to just restore my laptop to factory settings and cut my losses. I restored via keys at the start up as my computer was refusing to boot at that stage.

Now my computer seems to be running fine, except for the hourglass on the mouse which appears every few seconds and lasts for a few seconds, accompanied by a slowing of the computer during these moments. Now after the virus mishap I tried Vipre antivirus software and have ran a scan, which found a few issues but no major threats to the system...I also on the recommendation of a friend ran MalwareBytes which found two registry errors but the problem has still not been solved...I then ran RegCure to see if it was a registry error and it found a few problems but still the hourglass keeps flashing...

On other suggestions I've ran Emisoft Scanner, which simply highlighted RegCure as an issue and removed it...I then ran SuperAntispyware which located some cookies but nothing serious...

I have no idea what could be the issue so any help would be greatly appreciated...Thanks guys! :pray:


DDS (Ver_10-03-17.01) - NTFSx86
Run by Colin at 12:52:53.04 on 12/09/2010
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1015.661 [GMT 1:00]

AV: *On-access scanning disabled* (Outdated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Colin\Desktop\gmer\gmer.exe
c:\dell\E-center\gtb.exe
C:\Documents and Settings\Colin\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = www.google.ie/ig/dell?hl=en&client=dell-row&channel=ie
uSearch Page = hxxp://www.google.ie/hws/sb/dell-row/en/side.html?channel=ie
uSearch Bar = hxxp://www.google.ie/hws/sb/dell-row/en/side.html?channel=ie
uDefault_Page_URL = www.google.ie/ig/dell?hl=en&client=dell-row&channel=ie
mDefault_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=ie&l=en&s=gen
mStart Page = hxxp://www1.euro.dell.com/content/default.aspx?c=ie&l=en&s=gen
uInternet Connection Wizard,ShellNext = hxxp://www.google.ie/ig/dell?hl=en&client=dell-row&channel=ie
uInternet Settings,ProxyOverride = *.local
mSearchAssistant = hxxp://www.google.ie/hws/sb/dell-row/en/side.html?channel=ie
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 6.0\reader\activex\AcroIEHelper.dll
BHO: BitComet Helper: {39f7e362-828a-4b5a-bcaf-5b79bfdfea60} - c:\program files\bitcomet\tools\BitCometBHO_1.4.8.11.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\bae\BAE.dll
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [SunJavaUpdateSched] c:\program files\java\j2re1.4.2_03\bin\jusched.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [Norton Ghost 10.0] "c:\program files\norton ghost\agent\GhostTray.exe"
mRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\isuspm.exe" -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [DLA] c:\windows\system32\dla\DLACTRLW.EXE
mRun: [ECenter] "c:\dell\e-center\gtb.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [MSKDetectorExe] c:\program files\mcafee\spamkiller\MSKDetct.exe /uninstall
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
IE: &D&ownload &with BitComet - c:\program files\bitcomet\BitComet.exe/AddLink.htm
IE: &D&ownload all with BitComet - c:\program files\bitcomet\BitComet.exe/AddAllLink.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
IE: {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://c:\program files\bitcomet\tools\BitCometBHO_1.4.8.11.dll/206
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
Notify: igfxcui - igfxdev.dll
SEH: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - No File

============= SERVICES / DRIVERS ===============

R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccEvtMgr.exe [2004-12-13 198256]
R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSetMgr.exe [2004-12-13 165488]
R2 hnmwrlspkt;HomeNet Manager Wireless Protocol;c:\windows\system32\drivers\hnm_wrls_pkt.sys [2006-1-12 13696]
R2 wsppkt;Wireless Security Protocol;c:\windows\system32\drivers\wsp_pkt.sys [2006-1-12 13568]
S3 ccPwdSvc;Symantec Password Validation;c:\program files\common files\symantec shared\ccPwdSvc.exe [2004-12-13 79472]
S3 SBRE;SBRE;\??\c:\windows\system32\drivers\sbredrv.sys --> c:\windows\system32\drivers\SBREdrv.sys [?]
S3 Symantec Core LC;Symantec Core LC;c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe [2006-7-31 822424]

=============== Created Last 30 ================

2010-09-12 02:37:27 0 d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2010-09-11 22:00:41 0 d-----w- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2010-09-11 21:34:40 0 d-----w- c:\windows\ServicePackFiles
2010-09-11 21:32:10 0 d-----w- c:\program files\MSXML 4.0
2010-09-11 15:24:09 26496 ----a-w- c:\windows\system32\dllcache\usbstor.sys
2010-09-11 11:52:58 0 d-----w- c:\windows\pss
2010-09-11 02:03:19 92544 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2010-09-11 01:30:08 0 d-----w- c:\docume~1\colin\applic~1\Malwarebytes
2010-09-11 01:29:43 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-09-11 00:15:46 0 d-----w- c:\docume~1\alluse~1\applic~1\RegInOut
2010-09-11 00:15:17 0 d-----w- c:\windows\RegInOut
2010-09-10 11:53:40 0 d-----w- c:\windows\system32\CatRoot_bak
2010-09-10 11:28:25 352640 ------w- c:\windows\system32\dllcache\srv.sys
2010-09-10 11:24:22 202752 ------w- c:\windows\system32\dllcache\rmcast.sys
2010-09-10 11:23:37 82432 ------w- c:\windows\system32\dllcache\fontsub.dll
2010-09-10 11:23:32 293376 ------w- c:\windows\system32\browserchoice.exe
2010-09-10 11:23:22 454016 ------w- c:\windows\system32\dllcache\mrxsmb.sys
2010-09-10 11:23:09 3555328 ------w- c:\windows\system32\dllcache\moviemk.exe
2010-09-10 11:21:30 331776 ------w- c:\windows\system32\dllcache\msadce.dll
2010-09-10 11:19:07 470528 ------w- c:\windows\system32\dllcache\aclayers.dll
2010-09-10 11:18:50 1172480 ------w- c:\windows\system32\dllcache\msxml3.dll
2010-09-10 11:16:50 153088 ------w- c:\windows\system32\dllcache\triedit.dll
2010-09-10 11:14:22 743936 ------w- c:\windows\system32\dllcache\helpsvc.exe
2010-09-10 10:58:53 332800 ------w- c:\windows\system32\dllcache\netapi32.dll
2010-09-10 02:08:09 1196000 ------w- c:\windows\system32\dllcache\sysmain.sdb
2010-09-10 02:08:08 215552 ------w- c:\windows\system32\dllcache\wordpad.exe
2010-09-10 02:01:06 0 d-----w- c:\windows\system32\PreInstall
2010-09-10 02:01:05 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2010-09-10 00:00:21 4128 ----a-w- C:\INFCACHE.1
2010-09-09 20:26:23 655872 ------w- c:\windows\system32\dllcache\mstscax.dll
2010-09-09 20:12:57 0 d-----w- c:\program files\Sunbelt Software
2010-09-09 19:27:51 0 d-----w- C:\Downloads
2010-09-09 19:26:25 0 d-----w- c:\docume~1\colin\applic~1\BitComet
2010-09-09 19:26:23 0 d-----w- c:\program files\BitComet
2010-09-09 14:41:57 0 d-----w- c:\docume~1\alluse~1\applic~1\Alwil Software
2010-09-09 10:32:58 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-09-09 10:32:58 215920 ----a-w- c:\windows\system32\muweb.dll
2010-09-09 10:32:58 16736 ----a-w- c:\windows\system32\mucltui.dll.mui
2010-09-08 22:59:20 0 d-s---w- c:\documents and settings\colin\UserData
2010-09-08 20:21:01 497194 ----a-w- c:\windows\system32\drivers\Cat.DB
2010-09-08 20:07:41 0 d-----w- c:\docume~1\alluse~1\applic~1\PC Tools
2010-09-08 17:18:49 0 d-----w- c:\program files\VideoLAN
2010-09-08 16:25:07 0 d-----w- c:\documents and settings\colin\Tracing
2010-09-08 16:09:58 0 d-----w- c:\program files\Microsoft
2010-09-08 16:09:40 0 d-----w- c:\program files\Windows Live SkyDrive
2010-09-08 15:59:03 0 d-----w- c:\program files\common files\Windows Live
2010-09-08 15:24:47 0 d-----w- c:\program files\common files\ODBC
2010-09-08 15:22:18 0 d-----w- c:\windows\SHELLNEW
2010-09-08 13:33:34 0 d-----w- c:\program files\iPod
2010-09-08 13:33:30 0 d-----w- c:\program files\iTunes
2010-09-08 13:33:30 0 d-----w- c:\docume~1\alluse~1\applic~1\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-09-08 13:31:38 41984 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2010-09-08 13:31:38 3062048 ----a-w- c:\windows\system32\usbaaplrc.dll
2010-09-08 13:22:51 0 d-----w- c:\program files\Bonjour
2010-09-08 12:57:10 60888 ---ha-w- c:\windows\system32\mlfcache.dat
2010-09-08 12:57:08 54156 ---ha-w- c:\windows\QTFont.qfn
2010-09-08 12:57:08 1409 ----a-w- c:\windows\QTFont.for
2010-09-08 12:37:23 0 d-----w- c:\windows\system32\SoftwareDistribution
2010-09-08 12:28:38 2 ----a-w- c:\windows\msoffice.ini
2010-09-08 12:23:38 0 d-----w- c:\docume~1\colin\applic~1\McAfee.com Personal Firewall
2010-09-08 12:23:02 0 d-----w- c:\docume~1\colin\applic~1\You've Got Pictures Screensaver
2010-09-08 12:23:02 0 d-----w- c:\docume~1\colin\applic~1\Symantec
2010-09-08 12:23:02 0 d-----w- c:\docume~1\colin\applic~1\AOL
2010-09-08 12:20:39 8192 ----a-w- c:\windows\REGLOCS.OLD

==================== Find3M ====================

2010-07-27 17:44:10 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-07-27 17:44:10 75040 ----a-w- c:\windows\system32\jdns_sd.dll
2010-07-27 17:44:10 197920 ----a-w- c:\windows\system32\dnssdX.dll
2010-07-27 17:44:10 107808 ----a-w- c:\windows\system32\dns-sd.exe

============= FINISH: 12:53:33.06 ===============
 

Attachments

·
Registered
Joined
·
4 Posts
Discussion Starter · #2 ·
I have received a reply from a friend who is solving this situation for myself, I do not wish to waste any of the administrators time in any way.

Thank you for the service your provide.

Colin
 
1 - 2 of 2 Posts
Status
Not open for further replies.
Top