MBAM log

Malwarebytes' Anti-Malware 1.51.0.1200
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Database version: 6837

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

12/6/2011 6:03:27 AM
mbam-log-2011-06-12 (06-03-27).txt

Scan type: Quick scan
Objects scanned: 187083
Time elapsed: 3 minute(s), 39 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)



GMER

GMER 1.0.15.15640 - GMER - Rootkit Detector and Remover
Rootkit scan 2011-06-12 07:46:02
Windows 6.1.7601 Service Pack 1
Running: bbrbvg56.exe


---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Par ameters\Keys\c0cb38acdc8b
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Par ameters\Keys\c0cb38acdc8b@ec9b5b250636 0xEB 0x64 0xA4 0x83 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Par ameters\Keys\c0cb38acdc8b@5063139217d6 0xEF 0xB5 0x58 0x78 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Par ameters\Keys\c0cb38acdc8b@80501b37bf3d 0xC5 0x52 0xD4 0x4F ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Paramet ers\Keys\c0cb38acdc8b (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Paramet ers\Keys\c0cb38acdc8b@ec9b5b250636 0xEB 0x64 0xA4 0x83 ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Paramet ers\Keys\c0cb38acdc8b@5063139217d6 0xEF 0xB5 0x58 0x78 ...
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Paramet ers\Keys\c0cb38acdc8b@80501b37bf3d 0xC5 0x52 0xD4 0x4F ...

---- EOF - GMER 1.0.15 ----


MBRCheck

aswMBR version 0.9.6.399 Copyright(c) 2011 AVAST Software
Run date: 2011-06-12 08:10:39
-----------------------------
08:10:39.093 OS Version: Windows x64 6.1.7601 Service Pack 1
08:10:39.093 Number of processors: 4 586 0x2505
08:10:39.094 ComputerName: RAMESH UserName: ell
08:10:42.903 Initialize success
08:10:54.577 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
08:10:54.581 Disk 0 Vendor: ST950042 D005 Size: 476940MB BusType: 3
08:10:54.596 Disk 0 MBR read successfully
08:10:54.601 Disk 0 MBR scan
08:10:54.605 Disk 0 unknown MBR code
08:10:54.610 Service scanning
08:11:00.366 Disk 0 trace - called modules:
08:11:00.380 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll
08:11:00.385 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800521c060]
08:11:00.389 3 CLASSPNP.SYS[fffff88001bc843f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004f1a050]
08:11:00.394 Scan finished successfully
08:11:27.460 Disk 0 MBR has been saved successfully to "C:\Users\ell\Desktop\MBR.dat"
08:11:27.461 The log file has been saved successfully to "C:\Users\ell\Desktop\aswMBR.txt"


DDS log

.
DDS (Ver_2011-06-12.02) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_24
Run by ell at 8:11:47 on 2011-06-12
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.60.1033.18.3828.2023 [GMT 5.5:30]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
E:\Program Files (x86)\USB Safely Remove\USBSRService.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
c:\xampp\apache\bin\apache.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
c:\xampp\mysql\bin\mysqld-nt.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
C:\Program Files (x86)\Dell\DellComms\bin\sprtsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\xampp\apache\bin\apache.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\vds.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
E:\Program Files (x86)\USB Safely Remove\USBSafelyRemove.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
C:\Windows\Lion Skin Pack\RocketDock\RocketDock.exe
C:\Windows\system32\SearchIndexer.exe
C:\Users\ell\AppData\Local\Temp\{32774BAC-0EDB-4123-90DC-2832C1178D98}\TBShadow.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\OneUpIndustries\Bins\v0.9.8.186\Bins.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\OneUpIndustries\Bins\v0.9.8.186\Bins32on64.e xe
C:\Windows\system32\taskeng.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\Pres entationFontCache.exe
C:\Program Files\OneUpIndustries\Bins\v0.9.8.186\Bins.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\OneUpIndustries\Bins\v0.9.8.186\Bins32on64.e xe
C:\Windows\system32\taskhost.exe
F:\Softwares\Firefox\firefox 5.0\firefox.exe
C:\Windows\system32\wbem\wmiprvse.exe
F:\Softwares\Firefox\firefox 5.0\plugin-container.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page =
uStart Page = hxxp://www.bigseekpro.com/lionskin/{363893D7-D4AE-47B4-A796-40CB14736377}
uDefault_Search_URL = hxxp://search.autocompletepro.com/?si=10211&bi=400
uSearch Bar =
mStart Page = hxxp://www.bigseekpro.com/lionskin/{363893D7-D4AE-47B4-A796-40CB14736377}
mSearchAssistant = hxxp://start.facemoods.com/?a=ostpl&s={searchTerms}&f=4
uURLSearchHooks: H - No File
uURLSearchHooks: ToolbarURLSearchHook Class: {ca3eb689-8f09-4026-aa10-b9534c691ce0} - C:\Program Files (x86)\Lion Skin DB Toolbar\tbhelper.dll
BHO: IDM integration (IDMIEHlprObj Class): {0055c089-8582-441b-a0bf-17b458c2a3a8} - E:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
BHO: SSOIEAddonBHO Class: {da5bce70-d057-4d63-943d-5f3927ec59f1} - C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: IplexToALLPlayer: {df925ef3-7a87-44e4-9caf-8d7b280bf616} - C:\PROGRA~2\OPENSU~1\Iplex\IPLEXT~1.DLL
BHO: SMTTB2009 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - C:\Program Files (x86)\Lion Skin DB Toolbar\tbcore3.dll
TB: Lion Skin DB Toolbar: {338b4dfe-2e2c-4338-9e41-e176d497299e} - C:\Program Files (x86)\Lion Skin DB Toolbar\tbcore3.dll
TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
TB: {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
uRun: [USB Safely Remove] E:\Program Files (x86)\USB Safely Remove\USBSafelyRemove.exe /startup
uRun: [fsm]
mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun: [FATrayAlert] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
mRunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Sta rtup\BLUETO~1.LNK - C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Sta rtup\myBoard.lnk - C:\Windows\Lion Skin Pack\myBoard\myBoard.App.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Sta rtup\ROCKET~1.LNK - C:\Windows\Lion Skin Pack\RocketDock\RocketDock.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Sta rtup\TBShadow.lnk - C:\Windows\Lion Skin Pack\TBShadow\TBShadow.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200
IE: Download all links with IDM - E:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
IE: Download with IDM - E:\Program Files (x86)\Internet Download Manager\IEExt.htm
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{6A3BC3C6-4378-4C32-81ED-7BEAB7762978} : NameServer = 202.188.0.133
TCP: Interfaces\{B1FB036C-1B37-46F7-BBF7-6A5AAD58E6F4} : NameServer = 202.188.0.133,202.188.1.5
TCP: Interfaces\{B1FB036C-1B37-46F7-BBF7-6A5AAD58E6F4} : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{B4405618-1190-43A7-BD63-B332AC4E8BE1} : NameServer = 202.188.0.133
TCP: Interfaces\{E1B89A9C-BDB4-4F0D-95EC-01AD6454B894} : NameServer = 202.188.0.133
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
Notify: FastAccess - C:\Program Files (x86)\Sensible Vision\Fast Access\FALogNot.dll
AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
BHO-X64: IDM integration (IDMIEHlprObj Class): {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
BHO-X64: IDM Helper - No File
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Ask Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
BHO-X64: Ask Toolbar BHO - No File
BHO-X64: SSOIEAddonBHO Class: {DA5BCE70-D057-4D63-943D-5F3927EC59F1} - C:\Program Files (x86)\Sensible Vision\Fast Access\FAIESSO.dll
BHO-X64: SSOIEAddonBHO - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: IplexToALLPlayer: {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\OPENSU~1\Iplex\IPLEXT~1.DLL
BHO-X64: SMTTB2009 Class: {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\Lion Skin DB Toolbar\tbcore3.dll
BHO-X64: SMTTB2009 - No File
TB-X64: Lion Skin DB Toolbar: {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\Lion Skin DB Toolbar\tbcore3.dll
TB-X64: Ask Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
TB-X64: {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [FATrayAlert] C:\Program Files (x86)\Sensible Vision\Fast Access\FATrayMon.exe
mRunOnce-x64: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe
IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
AppInit_DLLs-X64: C:\Windows\SysWOW64\nvinit.dll
Hosts: 0.0.0.0 localhost
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\ell\AppData\Roaming\Mozilla\Firefox\Profi les\mo783nd6.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - prefs.js: keyword.URL - hxxp://search.autocompletepro.com?si=10211&q=
FF - prefs.js: network.proxy.ftp - 172.17.0.1
FF - prefs.js: network.proxy.ftp_port - 3128
FF - prefs.js: network.proxy.gopher - 172.17.0.1
FF - prefs.js: network.proxy.gopher_port - 3128
FF - prefs.js: network.proxy.http - 172.17.0.1
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.socks - 172.17.0.1
FF - prefs.js: network.proxy.socks_port - 3128
FF - prefs.js: network.proxy.ssl - 172.17.0.1
FF - prefs.js: network.proxy.ssl_port - 3128
FF - prefs.js: network.proxy.type - 4
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - plugin: E:\Program Files (x86)\Adobe\Reader 10.0\Reader\browser\nppdf32.dll
FF - plugin: e:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
FF - plugin: E:\Program Files (x86)\QuickTime\Plugins\npqtplugin.dll
FF - plugin: E:\Program Files (x86)\QuickTime\Plugins\npqtplugin2.dll
FF - plugin: E:\Program Files (x86)\QuickTime\Plugins\npqtplugin3.dll
FF - plugin: E:\Program Files (x86)\QuickTime\Plugins\npqtplugin4.dll
FF - plugin: E:\Program Files (x86)\QuickTime\Plugins\npqtplugin5.dll
FF - plugin: E:\Program Files (x86)\QuickTime\Plugins\npqtplugin6.dll
FF - plugin: E:\Program Files (x86)\QuickTime\Plugins\npqtplugin7.dll
.
============= SERVICES / DRIVERS ===============
.
R?2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [2010-6-7 408576]
R0 nvpciflt;nvpciflt;C:\Windows\system32\DRIVERS\nvpc iflt.sys --> C:\Windows\system32\DRIVERS\nvpciflt.sys [?]
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHl pa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AERTFilters;Andrea RT Filters Service;C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2011-6-1 98208]
R2 Apache2.2;Apache2.2;C:\xampp\apache\bin\apache.exe [2007-3-5 16896]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-1-18 13336]
R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-1-18 1997416]
R2 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe [2011-1-18 689472]
R2 sprtsvc_DellComms;SupportSoft Sprocket Service (DellComms);C:\Program Files (x86)\Dell\DellComms\bin\sprtsvc.exe [2009-5-5 206064]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-12-23 378984]
R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys --> C:\Windows\system32\DRIVERS\TurboB.sys [?]
R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-1-18 2533400]
R2 USBSafelyRemoveService;USB Safely Remove Assistant;E:\Program Files (x86)\USB Safely Remove\USBSRService.exe [2011-3-28 539032]
R2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [2010-6-7 911872]
R3 bpenum;bpenum;C:\Windows\system32\DRIVERS\bpenum.s ys --> C:\Windows\system32\DRIVERS\bpenum.sys [?]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\system32\DRIVERS\CtClsFlt.sys --> C:\Windows\system32\DRIVERS\CtClsFlt.sys [?]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys --> C:\Windows\system32\DRIVERS\Impcd.sys [?]
R3 IntcDAud;Intel(R) Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\system32\DRIVERS\NETw5s64.sys --> C:\Windows\system32\DRIVERS\NETw5s64.sys [?]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 qicflt;upper Device Filter Driver;C:\Windows\system32\DRIVERS\qicflt.sys --> C:\Windows\system32\DRIVERS\qicflt.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
R3 wdkmd;Intel WiDi KMD;C:\Windows\system32\DRIVERS\WDKMD.sys --> C:\Windows\system32\DRIVERS\WDKMD.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\ v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework6 4\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2010-3-5 340240]
S3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\system32\drivers\btwampfl.sys --> C:\Windows\system32\drivers\btwampfl.sys [?]
S3 FACAP;facap, FastAccess Video Capture;C:\Windows\system32\DRIVERS\facap.sys --> C:\Windows\system32\DRIVERS\facap.sys [?]
S3 IDMWFP;IDMWFP;C:\Windows\system32\DRIVERS\idmwfp.s ys --> C:\Windows\system32\DRIVERS\idmwfp.sys [?]
S3 JMCR;JMCR;C:\Windows\system32\DRIVERS\jmcr.sys --> C:\Windows\system32\DRIVERS\jmcr.sys [?]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]
S3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0;PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - PCDR Kernel Mode Service Helper Driver;C:\Program Files\Dell Support Center\pcdsrvc_x64.pkms [2010-7-30 25072]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsus bflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TurboBoost;TurboBoost;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-3 126352]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S4 DockLoginService;Dock Login Service;C:\Program Files\Dell\DellDock\DockLogin.exe [2009-6-9 155648]
S4 FAService;FAService;C:\Program Files (x86)\Sensible Vision\Fast Access\FAService.exe [2010-11-2 2428552]
S4 NOBU;Dell DataSafe Online;C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe [2010-8-26 2823000]
S4 RoxMediaDB12OEM;RoxMediaDB12OEM;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-9-4 1116656]
S4 RoxWatch12;Roxio Hard Drive Watcher 12;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-9-4 219632]
S4 SwitchBoard;SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S4 TeamViewer6;TeamViewer 6;E:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-2-16 2280312]
.
=============== Created Last 30 ================
.
2011-06-11 15:44:37 -------- d-----w- C:\Users\ell\AppData\Local\{B2880EEC-1E0F-4654-9C14-DEBFA364E9ED}
2011-06-11 02:49:51 -------- d-----w- C:\Users\ell\AppData\Local\{E3013B92-0E1A-48E6-9081-D4D214D2F3F5}
2011-06-10 19:33:04 8718160 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D668BA07-9851-444E-B71D-721369BB8FB1}\mpengine.dll
2011-06-10 14:49:39 -------- d-----w- C:\Users\ell\AppData\Local\{60D6D256-2C0B-4D21-93F1-3A0B48F21502}
2011-06-10 02:38:44 -------- d-----w- C:\Users\ell\AppData\Local\{0FD731C5-34D1-4B06-93FD-E820D8AEFC6D}
2011-06-09 14:38:19 -------- d-----w- C:\Users\ell\AppData\Local\{5D0F99F6-D753-4261-BF2A-BE8C843BF66E}
2011-06-09 11:29:28 -------- d-----w- C:\Users\ell\AppData\Local\Stardock
2011-06-09 11:20:28 -------- d-----w- C:\Program Files (x86)\Ask.com
2011-06-09 11:15:00 -------- d-----w- C:\ProgramData\CustoPackTools
2011-06-09 11:14:32 -------- d-----w- C:\Program Files (x86)\CustoPackTools
2011-06-09 1025 -------- d-----w- C:\Program Files (x86)\Lion Skin DB Toolbar
2011-06-09 10:54:59 2321920 ----a-w- C:\Windows\SysWow64\wsecedit.dll.xpize
2011-06-09 10:01:17 -------- d-----w- C:\Program Files (x86)\Aid file recovery
2011-06-09 06:17:11 -------- d-----w- C:\Users\ell\AppData\Local\Solo-Dev
2011-06-09 00:14:48 -------- d-----w- C:\Users\ell\AppData\Local\{7B212279-0A37-4CF6-B1BB-8659B9CC50FC}
2011-06-08 12:14:11 -------- d-----w- C:\Users\ell\AppData\Local\{4007F7BB-9712-4C0F-9423-0773F0532F05}
2011-06-08 01:04:42 -------- d-----w- C:\Program Files\AVAST Software
2011-06-08 00:13:46 -------- d-----w- C:\Users\ell\AppData\Local\{13ED0551-112F-4502-84F3-9DDAEF2955BE}
2011-06-07 12:13:33 -------- d-----w- C:\Users\ell\AppData\Local\{DF7FCA3C-ECA7-4D40-A285-BC4697CA8E46}
2011-06-06 19:04:14 -------- d-----w- C:\Users\ell\AppData\Roaming\Rovio
2011-06-06 13:43:57 -------- d-----w- C:\Users\ell\AppData\Local\{BEBBDF2C-BA44-4888-ACFB-575356F582B6}
2011-06-05 15:35:08 -------- d-----w- C:\Users\ell\AppData\Local\{EE02923B-CD1E-4F27-B29A-BDB5C89274CD}
2011-06-04 2300 -------- d-----w- C:\Users\ell\AppData\Local\{B3E7FA98-0C79-4EF7-85A9-1E2D899374AA}
2011-06-04 11:20:23 -------- d-----w- C:\Users\ell\AppData\Local\{C8A9D5C8-BB1C-4108-AA26-0DCEA9A0ED64}
2011-06-03 17:35:30 -------- d-----w- C:\Users\ell\AppData\Local\{F7A89FB8-1AE7-407B-ABC0-09CA7D9EC6E6}
2011-06-02 23:33:39 -------- d-----w- C:\Users\ell\AppData\Local\{A6B3C6E6-4B24-4419-847B-6073E5575A15}
2011-06-02 11:33:03 -------- d-----w- C:\Users\ell\AppData\Local\{29922296-2BD2-47E0-8AA4-81D95B20794B}
2011-06-01 14:46:07 96272 ----a-w- C:\Windows\System32\KemXML.dll
2011-06-01 14:46:07 235536 ----a-w- C:\Windows\System32\KemUtil.dll
2011-06-01 14:46:07 235536 ----a-w- C:\Windows\System32\kemutb.dll
2011-06-01 14:46:07 159248 ----a-w- C:\Windows\System32\KemWnd.dll
2011-06-01 14:45:54 -------- d-----w- C:\Program Files\SetPoint
2011-06-01 12:15:35 -------- d-----w- C:\Users\ell\AppData\Roaming\Roxio Log Files
2011-06-01 11:42:19 192512 ----a-w- C:\Windows\LockStatusTray.exe
2011-06-01 11:33:03 -------- d-----w- C:\Users\ell\AppData\Local\{77FAD4A7-0220-4B5B-AC2F-8476E1B58C2F}
2011-06-01 11:25:58 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Int el32\DotNetInstaller.exe
2011-06-01 11:09:00 -------- d-----w- C:\Users\ell\AppData\Local\BVRP Software
2011-06-01 11:09:00 -------- d-----w- C:\Program Files (x86)\Netwaiting
2011-06-01 11:08:22 -------- d-----w- C:\Program Files\Modem Diagnostic Tool
2011-06-01 11:06:46 -------- d-----w- C:\Program Files (x86)\Digital Line Detect
2011-05-31 18:37:48 -------- d-----w- C:\Users\ell\AppData\Roaming\DELL Drivers Update Utility
2011-05-31 18:37:44 -------- d-----w- C:\Program Files (x86)\DELL Drivers Update Utility 2.8
2011-05-31 14:52:14 -------- d-----w- C:\Users\ell\AppData\Local\{DF4A87C9-5D87-4C11-A62F-7D2A202113CB}
2011-05-31 02:51:39 -------- d-----w- C:\Users\ell\AppData\Local\{8F18ABD8-53FF-4774-9232-F8C542FEEABE}
2011-05-30 14:51:03 -------- d-----w- C:\Users\ell\AppData\Local\{C2DF7B75-B7C3-4E0B-BBB9-D5B0677A4FC0}
2011-05-29 16:02:51 -------- d-----w- C:\Users\ell\AppData\Local\{9747C278-C3FB-4918-A842-CFC67A0B67E6}
2011-05-28 14:05:09 -------- d-----w- C:\Users\ell\AppData\Local\{31570198-F003-45C1-89D9-5622D1AA7238}
2011-05-27 15:48:17 -------- d-----w- C:\Users\ell\AppData\Local\{2D16B923-2FF7-4792-BA8E-4F56642405DA}
2011-05-26 14:09:03 -------- d-----w- C:\Users\ell\AppData\Local\{AFFAECB6-4ED9-42D7-9EAF-F1A4FBB8B5D2}
2011-05-25 13:44:34 -------- d-----w- C:\Users\ell\AppData\Local\{103356CB-76EA-4D8C-A572-F9FE4A88F314}
2011-05-24 21:29:40 27520 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2011-05-24 19:42:54 -------- d-----w- C:\Users\ell\AppData\Local\{1B069602-691B-47F8-887A-047BB4C2CBB4}
2011-05-24 07:42:39 -------- d-----w- C:\Users\ell\AppData\Local\{C41BFCE9-9DBD-4E81-8847-09B2655547D1}
2011-05-23 14:15:01 -------- d-----w- C:\Users\ell\AppData\Local\{7C3ED33F-6EF8-45A4-A27C-A333F5786451}
2011-05-23 02:14:35 -------- d-----w- C:\Users\ell\AppData\Local\{B6DF59A4-E93F-4DB4-826D-2C6DF10204B8}
2011-05-22 10:52:05 404640 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-05-22 10:31:52 -------- d-----w- C:\Users\ell\AppData\Local\{496E518A-3C56-4C43-BB4A-868288F63993}
2011-05-21 22:31:28 -------- d-----w- C:\Users\ell\AppData\Local\{976756EA-7D53-4D73-AA54-0391920758CF}
2011-05-21 12:33:12 -------- d-----w- C:\Users\ell\AppData\Local\ALLConverter
2011-05-21 12:33:12 -------- d-----w- C:\Program Files (x86)\ALLConverter PRO
2011-05-21 12:33:06 810496 ----a-w- C:\Windows\SysWow64\xvidcore.dll
2011-05-21 12:33:06 797184 ----a-w- C:\Windows\SysWow64\ac3filter.ax
2011-05-21 12:33:06 258048 ----a-w- C:\Windows\SysWow64\libFLAC.dll
2011-05-21 12:33:06 -------- d-----w- C:\Users\ell\AppData\Local\ALLPlayer
2011-05-21 12:33:03 -------- d-----w- C:\Program Files (x86)\OpenSubtitlesPlayer
2011-05-21 11:28:05 -------- d-----w- C:\Users\ell\AppData\Roaming\IDM
2011-05-21 11:28:05 -------- d-----w- C:\Users\ell\AppData\Roaming\DMCache
2011-05-21 11:25:36 -------- d-----w- C:\Users\ell\AppData\Roaming\Software Informer
2011-05-21 11:25:35 -------- d-----w- C:\Program Files (x86)\Software Informer
2011-05-21 11:22:37 -------- d-----w- C:\Program Files (x86)\Movie Subtitles Searcher
2011-05-21 10:31:09 -------- d-----w- C:\Users\ell\AppData\Local\{C592639E-3B79-4451-93C6-CFCD6D7BC81F}
2011-05-21 04:59:35 5562240 ----a-w- C:\Windows\System32\ntoskrnl.exe
2011-05-21 04:59:34 3967872 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2011-05-21 04:59:34 3912576 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2011-05-21 04:59:25 142336 ----a-w- C:\Windows\System32\poqexec.exe
2011-05-21 04:59:25 123904 ----a-w- C:\Windows\SysWow64\poqexec.exe
.
==================== Find3M ====================
.
2011-06-09 10:54:28 2755072 ----a-w- C:\Windows\SysWow64\themeui.dll.tmp
2011-06-09 10:54:28 245760 ----a-w- C:\Windows\SysWow64\uxtheme.dll.tmp
2011-05-29 03:41:30 39984 ----a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
2011-05-29 03:41:20 25912 ----a-w- C:\Windows\System32\drivers\mbam.sys
2011-04-25 05:14:04 521448 ----a-w- C:\Windows\System32\deployJava1.dll
2011-04-13 22:40:10 4284416 ----a-w- C:\Windows\SysWow64\GPhotos.scr
2011-03-29 19:17:24 44544 ----a-w- C:\Windows\System32\themeservice.dll
2011-03-29 19:17:24 2851840 ----a-w- C:\Windows\System32\themeui.dll
2011-03-29 19:17:23 332288 ----a-w- C:\Windows\System32\uxtheme.dll
2011-03-28 17:46:40 146568 ----a-w- C:\Windows\System32\drivers\idmwfp.sys
2011-03-21 07:52:06 74272 ----a-w- C:\Windows\System32\RtNicProp64.dll
2011-03-21 07:52:06 452200 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys
2011-03-21 07:52:06 107552 ----a-w- C:\Windows\System32\RTNUninst64.dll
2011-02-18 01:16:16 104839 ----a-w- C:\Program Files (x86)\cftmon.exe
.
============= FINISH: 8:12:45.77 ===============

Please, observe following rules:

• Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
• If you're stuck, or you're not sure about certain step, always ask before doing anything else.
• Please refrain from running tools or applying updates other than those I suggest.
• Never run more than one scan at a time.
• Keep updating me regarding your computer behavior, good, or bad.
• The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
• If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
• I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

================================================== ==

You're not saying what's wrong with your computer...

i did according to the method meantioned.. mayb i hv posted the results wrongly but then i did the scan correctly as mentioend step by step n also the rules has been updated if u hv not noticed. mayb tht could be the reason??

You did perfectly fine

Still...

You're not saying what's wrong with your computer...

.

i want to know if there is problem or virus issues and i want to do a general maintenance of the laptop.

You posted your logs correctly, but you seem to be not reading my replies.

Please, read my previous reply.

i have replied it correctly. i want to know if there is problem or virus issues and i want to do a general maintenance of the laptop.

Your logs look clean.
Are you having any particular problem(s)?

oh ok. yah. start up problem. when i log in to my computer, it takes about 1min - 2 min to log in. until then it stays as white screen. could it be some problem?