Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Possible Infection related to Google Chrome  (Read 11420 times)

0 Members and 1 Guest are viewing this topic.

whathim

    Topic Starter


    Beginner

    Possible Infection related to Google Chrome
    « on: July 01, 2012, 03:22:03 AM »
    This thread has been continued from http://www.computerhope.com/forum/index.php/topic,131726.0.html

    Initial symptoms:
    Computer running slow, especially Google Chrome, which would often sit for ages trying to connect to a web site.

    A few days back I ran all the steps 1 to 5 as per http://www.computerhope.com/forum/index.php/topic,46313.0.html.  SUPERAntiSpyware found a Trojan infection (see below log) while MBAM found nothing (so did not save a log).  I did not run DDS at that time.  Initially the computer seemed to be back to health but then I started getting the following:

    Secondary Symptoms:
    Every time I start my computer and start Google Chrome it pops up a message, “Your profile could not be opened correctly. …”.  I created a new browser user profile as per http://support.google.com/chrome/bin/answer.py?hl=en&answer=142059.  This works for the current Windows session (ie. I can close and reopen Chrome with no message popup) but when I reboot the computer and then open Chrome the message is there again.  Also, my Logitech Media Server has crashed several times, which is unusual.

    Today I ran DDS – logs pasted below as instructed.

    I would very much appreciate if some kind soul can take a look at this problem I am having.  I realise it might have been better if I had ran all the steps 1 to 6 in one go.  I can repeat them all if this is advised.

    I might add that I am having the identical same set of problems on my Laptop (the pasted/attached logs are for my Desktop PC – Dell Vostro 430 running Windows XP Pro).

    Thanks
    Keith

    -------------------------------------------------------
    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 06/27/2012 at 05:35 PM

    Application Version : 5.1.1002

    Core Rules Database Version : 8805
    Trace Rules Database Version: 6617

    Scan type       : Complete Scan
    Total Scan Time : 02:49:37

    Operating System Information
    Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
    Administrator

    Memory items scanned      : 766
    Memory threats detected   : 0
    Registry items scanned    : 33477
    Registry threats detected : 0
    File items scanned        : 353130
    File threats detected     : 70

    Adware.Tracking Cookie
       core.saymedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\SYX6EENY ]
       .doubleclick.net [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .atdmt.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .atdmt.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       statse.webtrendslive.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .doubleclick.net [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .saymedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .ehg-newscientist.hitbox.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .ehg-newscientist.hitbox.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .hitbox.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .hitbox.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       dc.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       dc.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .adbrite.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .adbrite.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       *Blocked Russian URL* [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .yieldmanager.net [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       cms.ad.yieldmanager.net [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .apmebf.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .apmebf.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .mediaplex.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .kontera.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .mediaplex.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .virginmedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .adfarm1.adition.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .adfarm1.adition.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       ad2.adfarm1.adition.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .adfarm1.adition.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .advertising.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .advertising.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .advertising.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .advertising.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .at.atwola.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .advertising.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .advertising.com [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .fastclick.net [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .revsci.net [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .revsci.net [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       .revsci.net [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
       track.prd1.netshelter.net [ C:\DOCUMENTS AND SETTINGS\KEITH WATERS\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]

    Trojan.Agent/Gen-Bancos
       C:\WORKAREA\IHS\ZSTUFF\SLOG\ESDUSCOPEADMINAPP\.SVN\TEXT-BASE\ESDULIC.DLL.SVN-BASE
       C:\WORKAREA\IHS\ZSTUFF\SLOG\ESDUSCOPEADMINAPP\ESDULIC.DLL

    -------------------------------------------------------
    .
    DDS (Ver_2011-08-26.01) - NTFSx86
    Internet Explorer: 8.0.6001.18702  BrowserJavaVersion: 1.6.0_33
    Run by Keith Waters at 9:45:17 on 2012-07-01
    Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.3063.2157 [GMT 1:00]
    .
    AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    FW: COMODO Firewall *Enabled*
    .
    ============== Running Processes ===============
    .
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
    C:\WINDOWS\system32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    svchost.exe
    C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
    C:\Program Files\AVG\AVG2012\avgwdsvc.exe
    C:\Program Files\Broadcom\BACS\BPowMon.exe
    C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
    C:\Program Files\AVG\AVG2012\avgnsx.exe
    C:\WINDOWS\Explorer.EXE
    c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
    C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
    C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
    C:\Program Files\AVG\AVG2012\avgrsx.exe
    C:\Program Files\AVG\AVG2012\avgtray.exe
    C:\Program Files\AVG Secure Search\vprot.exe
    C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
    C:\Program Files\AVG\AVG2012\avgcsrvx.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtMon.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\WrtProc.exe
    C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    C:\Program Files\Dell Remote Access\ezi_ra.exe
    C:\Program Files\FinePixViewer\QuickDCF.exe
    C:\Program Files\Squeezebox\SqueezeTray.exe
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Microsoft Office\Office\OSA.EXE
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\Program Files\WinZip\WZQKPICK.EXE
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\CDBurnerXP\NMSAccessU.exe
    c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.1.0\ToolbarUpdater.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\PROGRA~1\SQUEEZ~1\server\SQUEEZ~3.EXE
    C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
    C:\Program Files\Common Files\Dell\Advanced Networking Service\hnm_svc.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\program files\Adobe Media Player\Adobe Media Player.exe
    C:\WINDOWS\system32\SearchProtocolHost.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uURLSearchHooks: H - No File
    mURLSearchHooks: H - No File
    BHO: HelperObject Class: {00c6482d-c502-44c8-8409-fce54ad9c208} - c:\program files\techsmith\snagit 7\SnagItBHO.dll
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: AVG Do Not Track: {31332eef-cb9f-458f-afeb-d30e9a66b6ba} - c:\program files\avg\avg2012\avgdtiex.dll
    BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg2012\avgssie.dll
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\11.1.0.7\AVG Secure Search_toolbar.dll
    BHO: WOT Helper: {c920e44a-7f78-4e64-bdd7-a57026e7feb7} - c:\program files\wot\WOT.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
    TB: SnagIt: {8ff5e183-abde-46eb-b09e-d2aab95cabe3} - c:\program files\techsmith\snagit 7\SnagItIEAddin.dll
    TB: WOT: {71576546-354d-41c9-aae8-31f2ec22bf0d} - c:\program files\wot\WOT.dll
    TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\11.1.0.7\AVG Secure Search_toolbar.dll
    TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
    {e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
    uRun: [msnmsgr] "c:\progra~1\wi1f86~1\messen~1\msnmsgr.exe" /background
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
    mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
    mRun: [PDVDDXSrv] "c:\program files\cyberlink\powerdvd dx\PDVDDXSrv.exe"
    mRun: [DBRMTray] c:\dell\dbrm\reminder\DbrmTrayIcon.exe
    mRun: [REGSHAVE] c:\program files\regshave\REGSHAVE.EXE /AUTORUN
    mRun: [RTHDCPL] RTHDCPL.EXE
    mRun: [COMODO Internet Security] "c:\program files\comodo\comodo internet security\cfp.exe" -h
    mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe"
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    mRun: [vProt] "c:\program files\avg secure search\vprot.exe"
    mRun: [ROC_roc_dec12] "c:\program files\avg secure search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
    mRun: [SSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot
    mRun: [OpwareSE4] "c:\program files\scansoft\omnipagese4.0\OpwareSE4.exe"
    mRun: [WrtMon.exe] c:\windows\system32\spool\drivers\w32x86\3\WrtMon.exe
    mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    mRun: [CDAServer] c:\program files\common files\common desktop agent\CDASrv.exe
    mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
    dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
    dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dellre~1.lnk - c:\windows\installer\{f66a31d9-7831-4fba-ba02-c411c0047cc5}\NewShortcut4_F66A31D978314FBABA02C411C0047CC5.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\exifla~1.lnk - c:\program files\finepixviewer\QuickDCF.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\logite~1.lnk - c:\program files\squeezebox\SqueezeTray.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office\FINDFAST.EXE
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~2.lnk - c:\program files\microsoft office 2000\office\OSA9.EXE
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\office~1.lnk - c:\program files\microsoft office\office\OSA.EXE
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\window~1.lnk - c:\program files\windows desktop search\WindowsSearch.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXE
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    IE: {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - c:\program files\avg\avg2012\avgdtiex.dll
    DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
    DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://ras-uk.ihs.com/dana-cached/sc/JuniperSetupClient.cab
    TCP: DhcpNameServer = 192.168.0.1
    TCP: Interfaces\{A7873D3E-6529-447C-A21C-85D6DAE2EFFF} : DhcpNameServer = 192.168.0.1
    Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll
    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\11.1.0\ViProtocol.dll
    Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - c:\program files\wot\WOT.dll
    Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
    Notify: AtiExtEvent - Ati2evxx.dll
    AppInit_DLLs: c:\windows\system32\guard32.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
    SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\documents and settings\keith waters\application data\mozilla\firefox\profiles\0uc8mmsq.default\
    FF - prefs.js: browser.startup.homepage - hxxp://uk.foxstart.com/?rls=en:uk:mc
    FF - component: c:\program files\avg\avg10\firefox4\components\avgssff4.dll
    FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
    FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
    FF - component: c:\program files\avg\avg10\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll
    FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
    FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
    FF - plugin: c:\program files\common files\avg secure search\sitesafetyinstaller\11.1.0\npsitesafety.dll
    FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
    FF - plugin: c:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll
    FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\program files\java\jre6\bin\plugin2\npdeployJava1.dll
    FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll
    FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll
    FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
    FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_3_300_262.dll
    FF - plugin: c:\windows\system32\npdeployJava1.dll
    FF - plugin: c:\windows\system32\npptools.dll
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: network.cookie.cookieBehavior - 0
    FF - user.js: privacy.clearOnShutdown.cookies - false
    FF - user.js: security.warn_viewing_mixed - false
    FF - user.js: security.warn_viewing_mixed.show_once - false
    FF - user.js: security.warn_submit_insecure - false
    FF - user.js: security.warn_submit_insecure.show_once - false
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-4-19 24896]
    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 31952]
    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-9-7 235216]
    R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 41040]
    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-9-7 301248]
    R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [2010-6-4 494968]
    R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2010-6-1 31704]
    R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2010-2-17 12880]
    R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-5-10 67664]
    R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2010-6-29 116608]
    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\avgidsagent.exe [2012-4-30 5106744]
    R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2012-2-14 193288]
    R2 BPowMon;Broadcom Power monitoring service;c:\program files\broadcom\bacs\BPowMon.exe [2009-6-12 79168]
    R2 cmdAgent;COMODO Internet Security Helper Service;c:\program files\comodo\comodo internet security\cmdagent.exe [2010-6-1 1983232]
    R2 SSPORT;SSPORT;c:\windows\system32\drivers\SSPORT.sys [2010-12-23 5120]
    R2 vToolbarUpdater11.1.0;vToolbarUpdater11.1.0;c:\program files\common files\avg secure search\vtoolbarupdater\11.1.0\ToolbarUpdater.exe [2012-6-12 935480]
    R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2011-12-23 139856]
    R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\avgidsfilterx.sys [2011-12-23 24144]
    R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2011-12-23 17232]
    R3 k57w2k;Broadcom NetLink (TM) Gigabit Ethernet;c:\windows\system32\drivers\k57xp32.sys [2010-1-28 209960]
    S0 cerc6;cerc6;

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-4-21 136176]
    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-5-10 250056]
    S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2010-1-28 1684736]
    S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2011-5-6 1025352]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-4-21 136176]
    S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2008-4-14 14336]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
    .
    =============== Created Last 30 ================
    .
    2012-06-27 21:02:39   73728   ----a-w-   c:\windows\system32\javacpl.cpl
    2012-06-27 21:02:39   476936   ----a-w-   c:\windows\system32\npdeployJava1.dll
    2012-06-14 11:22:53   --------   d-----w-   c:\documents and settings\all users\application data\Samsung
    2012-06-14 11:22:42   --------   d-----w-   c:\documents and settings\keith waters\application data\Samsung
    2012-06-14 11:19:20   --------   d-----w-   c:\program files\common files\Common Desktop Agent
    2012-06-14 11:18:38   --------   d-----w-   c:\program files\SamsungPrinterLiveUpdateInstaller
    2012-06-14 11:18:37   --------   d-----w-   c:\program files\SamsungPrinterLiveUpdate
    2012-06-14 11:18:31   26624   ----a-w-   c:\windows\system32\ssi1mlm.dll
    2012-06-14 11:18:24   19968   ----a-w-   c:\windows\system32\spool\prtprocs\w32x86\ssi1mpc.dll
    2012-06-14 11:18:18   65536   ----a-w-   c:\windows\system32\ssi1mci.dll
    2012-06-14 11:18:18   151552   ----a-w-   c:\windows\system32\ssi1mci.exe
    2012-06-14 11:16:58   --------   d-----w-   c:\program files\Samsung
    2012-06-14 11:12:41   25856   -c--a-w-   c:\windows\system32\dllcache\usbprint.sys
    2012-06-14 11:12:41   25856   ----a-w-   c:\windows\system32\drivers\usbprint.sys
    2012-06-14 09:43:56   521728   -c----w-   c:\windows\system32\dllcache\jsdbgui.dll
    2012-06-10 07:17:10   --------   d-----w-   c:\program files\Mozilla Maintenance Service
    2012-06-10 07:17:07   770384   ----a-w-   c:\program files\mozilla firefox\msvcr100.dll
    2012-06-10 07:17:07   624608   ----a-w-   c:\program files\mozilla firefox\gkmedias.dll
    2012-06-10 07:17:07   43488   ----a-w-   c:\program files\mozilla firefox\mozglue.dll
    2012-06-10 07:17:07   421200   ----a-w-   c:\program files\mozilla firefox\msvcp100.dll
    2012-06-10 07:17:07   157600   ----a-w-   c:\program files\mozilla firefox\maintenanceservice_installer.exe
    2012-06-10 07:17:07   113120   ----a-w-   c:\program files\mozilla firefox\maintenanceservice.exe
    .
    ==================== Find3M  ====================
    .
    2012-06-27 21:02:27   472840   ----a-w-   c:\windows\system32\deployJava1.dll
    2012-06-23 11:19:27   70344   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
    2012-06-23 11:19:27   426184   ----a-w-   c:\windows\system32\FlashPlayerApp.exe
    2012-06-02 14:19:44   22040   ----a-w-   c:\windows\system32\wucltui.dll.mui
    2012-06-02 14:19:38   219160   ----a-w-   c:\windows\system32\wuaucpl.cpl
    2012-06-02 14:19:38   15384   ----a-w-   c:\windows\system32\wuaucpl.cpl.mui
    2012-06-02 14:19:34   15384   ----a-w-   c:\windows\system32\wuapi.dll.mui
    2012-06-02 14:19:30   17944   ----a-w-   c:\windows\system32\wuaueng.dll.mui
    2012-06-02 14:18:58   275696   ----a-w-   c:\windows\system32\mucltui.dll
    2012-06-02 14:18:58   214256   ----a-w-   c:\windows\system32\muweb.dll
    2012-06-02 14:18:58   17136   ----a-w-   c:\windows\system32\mucltui.dll.mui
    2012-05-31 13:22:09   599040   ----a-w-   c:\windows\system32\crypt32.dll
    2012-05-16 15:08:26   916992   ----a-w-   c:\windows\system32\wininet.dll
    2012-05-15 13:20:33   1863168   ----a-w-   c:\windows\system32\win32k.sys
    2012-05-11 14:42:33   43520   ----a-w-   c:\windows\system32\licmgr10.dll
    2012-05-11 14:42:33   1469440   ------w-   c:\windows\system32\inetcpl.cpl
    2012-05-11 11:38:02   385024   ----a-w-   c:\windows\system32\html.iec
    2012-05-04 13:16:13   2148352   ----a-w-   c:\windows\system32\ntoskrnl.exe
    2012-05-04 12:32:19   2026496   ----a-w-   c:\windows\system32\ntkrnlpa.exe
    2012-05-02 13:46:36   139656   ----a-w-   c:\windows\system32\drivers\rdpwd.sys
    2012-04-19 03:50:26   24896   ----a-w-   c:\windows\system32\drivers\avgidshx.sys
    2012-04-04 14:56:40   22344   ----a-w-   c:\windows\system32\drivers\mbam.sys
    .
    ============= FINISH:  9:48:15.98 ===============
    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2011-08-26.01)
    .
    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume2
    Install Date: 31/08/2010 20:37:04
    System Uptime: 01/07/2012 08:24:20 (1 hours ago)
    .
    Motherboard: Dell Inc. |  | 0D735T
    Processor: Intel(R) Core(TM) i7 CPU         860  @ 2.80GHz | CPU 1 | 2793/133mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 466 GiB total, 288.367 GiB free.
    D: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    No restore point in system.
    .
    ==== Installed Programs ======================
    .
    Acrobat.com
    ActivePerl 5.10.1 Build 1006
    ActiveState Komodo Edit 5.2.1
    Adobe AIR
    Adobe Flash Player 11 ActiveX
    Adobe Flash Player 11 Plugin
    Adobe Media Player
    Adobe Reader X (10.1.3)
    Amazon MP3 Downloader 1.0.9
    Application Verifier
    ArcSoft PhotoStudio 5.5
    ATI Catalyst Control Center
    ATI Display Driver
    AVG 2012
    Beyond Compare Version 2.5.3
    Broadcom Management Programs
    Canon CanoScan Toolbox 5.0
    Catalyst Control Center - Branding
    Catalyst Control Center Core Implementation
    Catalyst Control Center Graphics Full Existing
    Catalyst Control Center Graphics Full New
    Catalyst Control Center Graphics Light
    Catalyst Control Center Graphics Previews Common
    Catalyst Control Center Localization All
    ccc-core-preinstall
    ccc-core-static
    ccc-utility
    CCC Help Chinese Standard
    CCC Help Chinese Traditional
    CCC Help English
    CCC Help French
    CCC Help German
    CCC Help Hungarian
    CCC Help Italian
    CCC Help Japanese
    CCC Help Korean
    CCC Help Portuguese
    CCC Help Spanish
    CCC Help Turkish
    CCleaner
    CDBurnerXP
    Common Desktop Agent
    COMODO Internet Security
    Compatibility Pack for the 2007 Office system
    Crystal Reports Basic for Visual Studio 2008
    dBpoweramp CD Writer
    dBpoweramp DSP Effects
    dBpoweramp Music Converter
    dBpowerAMP Raw Codec
    Debugging Tools for Windows (x86)
    Dell Backup and Recovery Manager
    Dell Remote Access
    Download Manager
    doxygen 1.7.6.1
    EditiX-XML Editor2011 2011
    ESDU Amops Version 1.3
    ESDU Contact Version 1.0
    Exception Hunter 2
    FileZilla Client 3.5.3
    FinePixViewer Ver.4.1
    FUJIFILM USB Driver
    Google Chrome
    Google Earth
    Google Update Helper
    Graphviz
    H2Viewer by http://www.Helpware.net
    Help Workshop
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB2465361)
    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB2538241)
    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB971091)
    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB971092)
    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB973674)
    Hotfix for Microsoft Visual Studio 2008 Professional Edition - ENU (KB974479)
    Hotfix for Windows XP (KB2158563)
    Hotfix for Windows XP (KB2443685)
    Hotfix for Windows XP (KB2570791)
    Hotfix for Windows XP (KB2633952)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB981793)
    ImageMixer VCD2 for FinePix
    InfraRecorder
    Inno Setup QuickStart Pack version 5.3.6
    Intel(R) Debugger for applications running on IA-32, Version 10.1
    Intel(R) Fortran Compiler for IA-32 applications, Version 10.1.021
    Intel(R) Visual Fortran Compiler 10.1 Integrations in Microsoft Visual Studio*
    Intel® Matrix Storage Manager
    Java Auto Updater
    Java(TM) 6 Update 33
    Juniper Networks Host Checker
    Juniper Networks Network Connect 6.4.0
    Juniper Networks Network Connect 7.1.0
    Juniper Networks Setup Client Activex Control
    Juniper Networks, Inc. Setup Client
    Junk Mail filter update
    Logitech Media Server 7.7.2
    Malwarebytes Anti-Malware version 1.61.0.1400
    Medieval CUE Splitter
    Microsoft .NET Compact Framework 2.0 SP2
    Microsoft .NET Compact Framework 3.5
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Security Update (KB2656353)
    Microsoft .NET Framework 1.1 Security Update (KB2656370)
    Microsoft .NET Framework 1.1 Security Update (KB979906)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 4 Client Profile
    Microsoft .NET Framework 4 Extended
    Microsoft .NET Framework 4 Multi-Targeting Pack
    Microsoft Application Error Reporting
    Microsoft Choice Guard
    Microsoft Device Emulator version 3.0 - ENU
    Microsoft Document Explorer 2008
    Microsoft Document Explorer 2008 (6001.18000.367)
    Microsoft Excel 97
    Microsoft FrontPage Client - English
    Microsoft FxCop 10.0
    Microsoft Help Viewer 1.0
    Microsoft Office 2000 Small Business
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office PowerPoint Viewer 2007 (English)
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3)
    Microsoft Office Visual Web Developer 2007
    Microsoft Office Visual Web Developer MUI (English) 2007
    Microsoft Publisher 98
    Microsoft Silverlight
    Microsoft SQL Server 2005
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft SQL Server 2005 Express Edition
    Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
    Microsoft SQL Server 2005 Tools Express Edition
    Microsoft SQL Server 2008 Management Objects
    Microsoft SQL Server Compact 3.5 for Devices ENU
    Microsoft SQL Server Compact 3.5 SP1 Design Tools English
    Microsoft SQL Server Compact 3.5 SP1 English
    Microsoft SQL Server Database Publishing Wizard 1.3
    Microsoft SQL Server Native Client
    Microsoft SQL Server Setup Support Files (English)
    Microsoft SQL Server VSS Writer
    Microsoft Sync Framework Runtime Native v1.0 (x86)
    Microsoft Sync Framework Services Native v1.0 (x86)
    Microsoft VC Redist 2008 (6001.18000.367)
    Microsoft Visual C# .NET Standard 2003 - English
    Microsoft Visual C++  Compilers 2010 Standard - enu - x86
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
    Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x86
    Microsoft Visual Studio 2005 Tools for Office Runtime
    Microsoft Visual Studio 2008 Professional Edition - ENU
    Microsoft Visual Studio 2008 Professional Edition - ENU Service Pack 1 (KB945140)
    Microsoft Visual Studio 2008 SDK 1.1
    Microsoft Visual Studio Web Authoring Component
    Microsoft Windows Performance Toolkit
    Microsoft Windows SDK .NET Framework Tools
    Microsoft Windows SDK .NET Framework Tools (30514)
    Microsoft Windows SDK for Visual Studio .NET 4.0 Framework Tools
    Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools - enu
    Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries
    Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense
    Microsoft Windows SDK for Visual Studio 2008 SP1 Tools
    Microsoft Windows SDK for Visual Studio 2008 SP1 Win32 Tools
    Microsoft Windows SDK for Windows 7 (7.1)
    Microsoft Windows SDK for Windows 7 Common Utilities (30514)
    Microsoft Windows SDK for Windows 7 Headers and Libraries (30514)
    Microsoft Windows SDK for Windows 7 Samples (30514)
    Microsoft Windows SDK for Windows 7 Utilities for Win32 Development (30514)
    Microsoft Windows SDK for Windows Server 2008 (6001.18000.367)
    Microsoft Windows SDK for Windows Server 2008 .NET Documentation (6001.18000.367)
    Microsoft Windows SDK for Windows Server 2008 Common Utilities (6001.18000.367)
    Microsoft Windows SDK for Windows Server 2008 Headers and Libraries (6001.18000.367)
    Microsoft Windows SDK for Windows Server 2008 Samples (6001.18000.367)
    Microsoft Windows SDK for Windows Server 2008 Utilities for Win32 Development (6001.18000.367)
    Microsoft Windows SDK for Windows Server 2008 Win32 Documentation (6001.18000.367)
    Microsoft Windows SDK Intellisense and Reference Assemblies (30514)
    Microsoft Windows SDK Intellisense and Reference Assemblies (6001.18000.367)
    Microsoft Windows SDK MDAC Headers and Libraries (6001.18000.367)
    Microsoft Windows SDK MSHelp (30514)
    Microsoft Windows SDK Net Fx Interop Headers And Libraries (30514)
    Microsoft Windows SDK Net Fx Interop Headers And Libraries (6001.18000.367)
    Microsoft Word 97
    Microsoft Works
    MicroStaff WINASPI
    Mozilla Firefox 13.0 (x86 en-US)
    Mozilla Maintenance Service
    Mp3tag v2.47a
    MSDN Library for Visual Studio .NET 2003
    MSDN Library for Visual Studio 2008 - ENU
    MSVCRT
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MSXML 6.0 Parser
    OGA Notifier 2.0.0048.0
    PowerDVD DX
    Presto! PageManager 7.15.14
    RAW FILE CONVERTER LE
    Realtek High Definition Audio Driver
    Roxio Creator Audio
    Roxio Creator Copy
    Roxio Creator Data
    Roxio Creator DE 10.3
    Roxio Creator Tools
    Roxio Express Labeler 3
    Roxio Update Manager
    Samsung Easy Printer Manager
    Samsung ML-331x Series
    Samsung Printer Live Update
    Sandcastle
    Sandcastle Help File Builder
    ScanSoft OmniPage SE 4.0
    Security Update for 2007 Microsoft Office System (KB2288621)
    Security Update for 2007 Microsoft Office System (KB2584063)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
    Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
    Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
    Security Update for Microsoft Office system 2007 (KB974234)
    Security Update for Microsoft Visual Studio 2008 Professional Edition - ENU (KB2251487)
    Security Update for Microsoft Visual Studio 2008 Professional Edition - ENU (KB2669970)
    Security Update for Microsoft Visual Studio 2008 Professional Edition - ENU (KB972222)
    Security Update for Microsoft Visual Studio 2008 Professional Edition - ENU (KB973675)
    Security Update for Microsoft Windows (KB2564958)
    Security Update for Windows Internet Explorer 8 (KB2183461)
    Security Update for Windows Internet Explorer 8 (KB2360131)
    Security Update for Windows Internet Explorer 8 (KB2416400)
    Security Update for Windows Internet Explorer 8 (KB2482017)
    Security Update for Windows Internet Explorer 8 (KB2497640)
    Security Update for Windows Internet Explorer 8 (KB2510531)
    Security Update for Windows Internet Explorer 8 (KB2530548)
    Security Update for Windows Internet Explorer 8 (KB2544521)
    Security Update for Windows Internet Explorer 8 (KB2559049)
    Security Update for Windows Internet Explorer 8 (KB2586448)
    Security Update for Windows Internet Explorer 8 (KB2618444)
    Security Update for Windows Internet Explorer 8 (KB2647516)
    Security Update for Windows Internet Explorer 8 (KB2675157)
    Security Update for Windows Internet Explorer 8 (KB2699988)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB981332)
    Security Update for Windows Internet Explorer 8 (KB982381)
    Security Update for Windows Media Player (KB2378111)
    Security Update for Windows Media Player (KB975558)
    Security Update for Windows XP (KB2079403)
    Security Update for Windows XP (KB2115168)
    Security Update for Windows XP (KB2121546)
    Security Update for Windows XP (KB2124261)
    Security Update for Windows XP (KB2160329)
    Security Update for Windows XP (KB2183461)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB2259922)
    Security Update for Windows XP (KB2279986)
    Security Update for Windows XP (KB2286198)
    Security Update for Windows XP (KB2290570)
    Security Update for Windows XP (KB2296011)
    Security Update for Windows XP (KB2296199)
    Security Update for Windows XP (KB2347290)
    Security Update for Windows XP (KB2360937)
    Security Update for Windows XP (KB2387149)
    Security Update for Windows XP (KB2393802)
    Security Update for Windows XP (KB2412687)
    Security Update for Windows XP (KB2419632)
    Security Update for Windows XP (KB2423089)
    Security Update for Windows XP (KB2436673)
    Security Update for Windows XP (KB2440591)
    Security Update for Windows XP (KB2443105)
    Security Update for Windows XP (KB2476490)
    Security Update for Windows XP (KB2476687)
    Security Update for Windows XP (KB2478960)
    Security Update for Windows XP (KB2478971)
    Security Update for Windows XP (KB2479628)
    Security Update for Windows XP (KB2479943)
    Security Update for Windows XP (KB2481109)
    Security Update for Windows XP (KB2483185)
    Security Update for Windows XP (KB2485376)
    Security Update for Windows XP (KB2485663)
    Security Update for Windows XP (KB2491683)
    Security Update for Windows XP (KB2503658)
    Security Update for Windows XP (KB2503665)
    Security Update for Windows XP (KB2506212)
    Security Update for Windows XP (KB2506223)
    Security Update for Windows XP (KB2507618)
    Security Update for Windows XP (KB2507938)
    Security Update for Windows XP (KB2508272)
    Security Update for Windows XP (KB2508429)
    Security Update for Windows XP (KB2509553)
    Security Update for Windows XP (KB2511455)
    Security Update for Windows XP (KB2524375)
    Security Update for Windows XP (KB2535512)
    Security Update for Windows XP (KB2536276-v2)
    Security Update for Windows XP (KB2536276)
    Security Update for Windows XP (KB2544893-v2)
    Security Update for Windows XP (KB2544893)
    Security Update for Windows XP (KB2555917)
    Security Update for Windows XP (KB2562937)
    Security Update for Windows XP (KB2566454)
    Security Update for Windows XP (KB2567053)
    Security Update for Windows XP (KB2567680)
    Security Update for Windows XP (KB2570222)
    Security Update for Windows XP (KB2570947)
    Security Update for Windows XP (KB2584146)
    Security Update for Windows XP (KB2585542)
    Security Update for Windows XP (KB2592799)
    Security Update for Windows XP (KB2598479)
    Security Update for Windows XP (KB2603381)
    Security Update for Windows XP (KB2618451)
    Security Update for Windows XP (KB2619339)
    Security Update for Windows XP (KB2620712)
    Security Update for Windows XP (KB2621440)
    Security Update for Windows XP (KB2624667)
    Security Update for Windows XP (KB2631813)
    Security Update for Windows XP (KB2633171)
    Security Update for Windows XP (KB2639417)
    Security Update for Windows XP (KB2641653)
    Security Update for Windows XP (KB2646524)
    Security Update for Windows XP (KB2647518)
    Security Update for Windows XP (KB2653956)
    Security Update for Windows XP (KB2659262)
    Security Update for Windows XP (KB2660465)
    Security Update for Windows XP (KB2661637)
    Security Update for Windows XP (KB2685939)
    Security Update for Windows XP (KB2686509)
    Security Update for Windows XP (KB2695962)
    Security Update for Windows XP (KB2707511)
    Security Update for Windows XP (KB2709162)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953155)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB970483)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB971961)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB976323)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979687)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB980436)
    Security Update for Windows XP (KB981322)
    Security Update for Windows XP (KB981349)
    Security Update for Windows XP (KB981852)
    Security Update for Windows XP (KB981957)
    Security Update for Windows XP (KB981997)
    Security Update for Windows XP (KB982132)
    Security Update for Windows XP (KB982214)
    Security Update for Windows XP (KB982665)
    Security Update for Windows XP (KB982802)
    Segoe UI
    Silverfrost FTN95
    Skins
    SnagIt 7
    Spelling Dictionaries Support For Adobe Reader 9
    SQL Server System CLR Types
    Sumit Version 2.0
    SUPERAntiSpyware
    Syntext Serna Free 4.3.0
    TortoiseSVN 1.6.7.18415 (32 bit)
    Update for 2007 Microsoft Office System (KB2284654)
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Microsoft Office 2007 System (KB2539530)
    Update for Microsoft Visual Studio 2008 Professional Edition - ENU (KB972221)
    Update for Microsoft Visual Studio Web Authoring Component (KB945140)
    Update for Windows Internet Explorer 8 (KB976662)
    Update for Windows Internet Explorer 8 (KB982664)
    Update for Windows XP (KB2141007)
    Update for Windows XP (KB2345886)
    Update for Windows XP (KB2467659)
    Update for Windows XP (KB2541763)
    Update for Windows XP (KB2607712)
    Update for Windows XP (KB2616676)
    Update for Windows XP (KB2641690)
    Update for Windows XP (KB2718704)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB961503)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971029)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    Visual C# .NET Standard 2003 - English
    Visual C++ 2008 IA64 Runtime - (v9.0.30729)
    Visual C++ 2008 IA64 Runtime - v9.0.30729.01
    Visual C++ 2008 x64 Runtime - (v9.0.30729)
    Visual C++ 2008 x64 Runtime - (v9.0.30729.4148)
    Visual C++ 2008 x64 Runtime - (v9.0.30729.6161)
    Visual C++ 2008 x64 Runtime - KB2465361 - (v9.0.30729.5570)
    Visual C++ 2008 x64 Runtime - v9.0.30729.01
    Visual C++ 2008 x64 Runtime - v9.0.30729.4148
    Visual C++ 2008 x64 Runtime - v9.0.30729.5570
    Visual C++ 2008 x64 Runtime - v9.0.30729.6161
    Visual C++ 2008 x86 Runtime - (v9.0.30729)
    Visual C++ 2008 x86 Runtime - (v9.0.30729.4148)
    Visual C++ 2008 x86 Runtime - (v9.0.30729.6161)
    Visual C++ 2008 x86 Runtime - KB2465361 - (v9.0.30729.5570)
    Visual C++ 2008 x86 Runtime - v9.0.30729.01
    Visual C++ 2008 x86 Runtime - v9.0.30729.4148
    Visual C++ 2008 x86 Runtime - v9.0.30729.5570
    Visual C++ 2008 x86 Runtime - v9.0.30729.6161
    Visual Studio 2005 Tools for Office Second Edition Runtime
    Visual Studio Tools for the Office system 3.0 Runtime
    Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258)
    Visual Studio.NET Baseline - English
    WebFldrs XP
    Windows Genuine Advantage Notifications (KB905474)
    Windows Internet Explorer 8
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Mail
    Windows Live Messenger
    Windows Live Photo Gallery
    Windows Live Sign-in Assistant
    Windows Live Sync
    Windows Live Upload Tool
    Windows Live Writer
    Windows Management Framework Core
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows Mobile 5.0 SDK R2 for Pocket PC
    Windows Mobile 5.0 SDK R2 for Smartphone
    Windows Presentation Foundation
    Windows SDK Intellidocs
    Windows SDK IntellisenseNFX
    WinRAR archiver
    WinZip
    WOT for Internet Explorer
    WX_Lib Version 0_2.01
    XML Marker version 1.1
    XML Notepad 2007
    XML Paper Specification Shared Components Pack 1.0
    Yahoo! Detect
    .
    ==== Event Viewer Messages From Past Week ========
    .
    27/06/2012 00:26:53, error: Windows Update Agent [20]  - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for SQL Server 2005 Service Pack 2 (KB948109).
    27/06/2012 00:26:50, error: Service Control Manager [7024]  - The SQL Server (SQLEXPRESS) service terminated with service-specific error 3417 (0xD59).
    27/06/2012 00:00:10, error: NetBT [4321]  - The name "LAPTOP1        :0" could not be registered on the Interface with IP address 192.168.0.53. The machine with the IP address 192.168.0.50 did not allow the name to be claimed by this machine.
    26/06/2012 10:54:57, error: Srv [2020]  - The server was unable to allocate from the system paged pool because the pool was empty.
    26/06/2012 10:21:40, error: Service Control Manager [7023]  - The Intel(R) Matrix Storage Event Monitor service terminated with the following error:  An internal error occurred.
    26/06/2012 10:21:40, error: Service Control Manager [7023]  - The Human Interface Device Access service terminated with the following error:  The specified module could not be found.
    26/06/2012 10:21:40, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the Advanced Networking Service service to connect.
    24/06/2012 22:10:25, error: Dhcp [1002]  - The IP address lease 192.168.0.53 for the Network Card with network address 0025648C504F has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
    24/06/2012 21:47:42, error: NetBT [4321]  - The name "LAPTOP1        :0" could not be registered on the Interface with IP address 192.168.0.53. The machine with the IP address 192.168.0.51 did not allow the name to be claimed by this machine.
    .
    ==== End Of File ===========================





    SuperDave

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Thanked: 1020
    • Certifications: List
    • Experience: Expert
    • OS: Windows 10
    Re: Possible Infection related to Google Chrome
    « Reply #1 on: July 01, 2012, 04:23:07 PM »
    Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

    1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
    2. The fixes are specific to your problem and should only be used for this issue on this machine.
    3. If you don't know or understand something, please don't hesitate to ask.
    4. Please DO NOT run any other tools or scans while I am helping you.
    5. It is important that you reply to this thread. Do not start a new topic.
    6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
    7. Absence of symptoms does not mean that everything is clear.

    If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
    *************************************************************************
    You created a new profile which works well. Can you delete your old profile? It appears that when you boot your computer, the old profile gets loaded. Is the laptop operating off the same modem/router?
    Windows 8 and Windows 10 dual boot with two SSD's

    whathim

      Topic Starter


      Beginner

      Re: Possible Infection related to Google Chrome
      « Reply #2 on: July 01, 2012, 05:28:03 PM »
      Hi SuperDave.  Thank you for replying.

      I haven’t tried deleting the old profile.  I create a new profile exactly as per http://support.google.com/chrome/bin/answer.py?hl=en&answer=142059.  That is, I close all Google Chrome instances and then rename the existing profile (the folder “Default”) as “Backup Default” in the “…\chrome\user data” directory.  Then I restart Google Chrome and it starts ok with no message popping up.  It creates a new “…\chrome\user data\Default” folder as it should.  It remains ok until I reboot and then when I start Chrome I again get the message, “Your profile could not be opened correctly. …”.

      Ok, I just tried something slightly different.  I moved the “Backup Default” folder to my desktop (because I don’t want to permanently lose my bookmarks) and deleted the “Default” folder.  Then rebooted and opened Chrome – it still gives the same message.

      Both the Laptop and the Desktop PC are operating off my wired home Ethernet from a common router, a Netgear ADSL Firewall Router DG834.

      Also I note that today (both machines have been on) my Logitech Media Server (on the Desktop) has several times given a Windows message, “SQUEEV~3.EXE has encountered a problem and needs to close”.  It says that but continues to operate ok until I dismiss the message, when it shuts itself down.  Then I restart it and it runs trouble free for some time but eventually again shows the same message.  This is not its normal behaviour.

      whathim

        Topic Starter


        Beginner

        Re: Possible Infection related to Google Chrome
        « Reply #3 on: July 02, 2012, 10:28:53 AM »
        SuperDave - I thought I’d better post this for when you come back.

        I tried an experiment on my Laptop (I’ve left my Desktop unchanged awaiting your instructions).  First I tried uninstalling Google Chrome and manually deleting the whole “\google\chrome\user data” branch under “…\application data”.  After reinstall the problem still persisted.

        Then I tried observing file sizes etc. over reboot and copying files between a working and non-working profile.  I tracked the problem to the “Web Data” file in the Google “Default” folder.  Looks like this file gets corrupted on reboot.  Its size doesn’t change but Beyond Compare shows there are changes.  My fix is to have a shortcut to the “Default” folder on my desktop.  When I start the computer I can delete “Web Data” and thus leave all my bookmarks intact.  I don’t know what “Web Data” holds - maybe remembered passwords.

        I don’t know if I was wrong in suspecting a lingering infection.  Would appreciate your opinion on this SuperDave.

        SuperDave

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Thanked: 1020
        • Certifications: List
        • Experience: Expert
        • OS: Windows 10
        Re: Possible Infection related to Google Chrome
        « Reply #4 on: July 02, 2012, 01:38:11 PM »
        Quote
        I don’t know if I was wrong in suspecting a lingering infection.  Would appreciate your opinion on this SuperDave.
        I seriously doubt that your computer is infected. The whole problem seems to be with Google Chrome. Do you have any problems with Internet Explorer?
        Windows 8 and Windows 10 dual boot with two SSD's

        whathim

          Topic Starter


          Beginner

          Re: Possible Infection related to Google Chrome
          « Reply #5 on: July 02, 2012, 02:21:51 PM »
          Both Internet Explorer and Firefox seem to be behaving ok so I suppose it must be Google Chrome specific.  Will just have to hope it clears with their next update.  I see on various user forums that other people are having similar problems but no one seems to have a proper solution.

          Anyway, thanks for your support and reassurance that I have no lingering infection.

          SuperDave

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Thanked: 1020
          • Certifications: List
          • Experience: Expert
          • OS: Windows 10
          Re: Possible Infection related to Google Chrome
          « Reply #6 on: July 02, 2012, 04:28:33 PM »
          Quote
          Anyway, thanks for your support and reassurance that I have no lingering infection.
          I said that I seriously doubt that any malware is causing your problem with Google Chrome. I have no way of knowing if your computer is infected without running some scans. If your computer is not displaying any other symptoms it's safe to say it's clean. Anyway, you're welcome and good luck with that. You could try going to a Google Chrome forum here.I think it has something to do with the fact that both computers are connected to a common router but I really don't know why.
          Windows 8 and Windows 10 dual boot with two SSD's