User account control

[Allan]

http://www.computerhope.com/forum/index.php/topic,46313.0.html

[Salmon Trout]

lol im just saying coz i know im the one whos asking for help but i just think it funny that you were telling me to go to the user account setting even though the post is all me not being able to get into the user account settings

OK maybe you got a point there 

[BluerjB]

OK maybe you got a point there 

lol but sorry if i sounded too rude. 

[BluerjB]

ok im following all the instructions again..

[BluerjB]

This is the SAS log:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/30/2010 at 01:47 PM

Application Version : 4.35.1000

Core Rules Database Version : 4750
Trace Rules Database Version: 2562

Scan type       : Complete Scan
Total Scan Time : 00:29:17

Memory items scanned      : 590
Memory threats detected   : 0
Registry items scanned    : 5419
Registry threats detected : 0
File items scanned        : 62942
File threats detected     : 0

[BluerjB]

This is The Malwarebytes' Anti-Malware log:

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Database version: 3935

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

3/30/2010 1:55:27 PM
mbam-log-2010-03-30 (13-55-27).txt

Scan type: Quick scan
Objects scanned: 100370
Time elapsed: 2 minute(s), 11 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[BluerjB]

This is the Hijackthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:58:08 PM, on 3/30/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
B:\Windows\system32\Dwm.exe
B:\Windows\Explorer.EXE
B:\Windows\system32\taskhost.exe
B:\Program Files\Zune\ZuneLauncher.exe
B:\Program Files\AVG\AVG9\avgtray.exe
B:\Program Files\Mozilla Firefox\firefox.exe
B:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
B:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - B:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - B:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Zune Launcher] "b:\Program Files\Zune\ZuneLauncher.exe"
O4 - HKLM\..\Run: [AVG9_TRAY] B:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "B:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] B:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] B:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] B:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Clean Traces - B:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - B:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - B:\Program Files\DAP\dapextie2.htm
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - B:\Program Files\AVG\AVG9\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - B:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - B:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - B:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: @comres.dll,-947 (COMSysApp) - Unknown owner - B:\Windows\system32\dllhost.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - B:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - B:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - B:\Windows\System32\TuneUpDefragService.exe

--
End of file - 3816 bytes

[BluerjB]

Anything Guys?

[kpac]

Emm...wrong forum.

Post the logs in the Virus and spyware removal forum.

[Allan]

You need to post the logs in the appropriate forum and a CH malware specialist will evaluate them.

[BluerjB]

ok

[BluerjB]

I posted it in the Computer viruses and spyware section and im not getting any replys

[Allan]

This is a forum not a chat room. Someone will get to it eventually.

[BluerjB]

lol ok

[patio]

Legit Win7 ? ?

I forgot to bring that up earlier...