ComboFix 09-12-06.A3 - Todd 12/07/2009 10:39.3.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3063.2063 [GMT -7:00] Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\TEMP\logishrd\LVPrcInj01.dll . ((((((((((((((((((((((((( Files Created from 2009-11-07 to 2009-12-07 ))))))))))))))))))))))))))))))) . 2009-12-06 03:21 . 2009-12-06 03:22 -------- dc-h--w- c:\windows\ie8 2009-12-01 18:34 . 2009-12-01 06:54 15880 ----a-w- c:\windows\system32\lsdelete.exe 2009-12-01 15:37 . 2009-12-07 17:59 -------- d-----w- c:\windows\system32\CatRoot2 2009-12-01 06:52 . 2009-12-01 06:52 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6} 2009-12-01 06:52 . 2009-10-03 08:15 2924848 -c--a-w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe 2009-12-01 06:51 . 2009-12-01 06:51 -------- d-----w- c:\program files\Lavasoft 2009-12-01 05:53 . 2009-12-01 06:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2009-12-01 05:53 . 2009-12-01 05:59 -------- d-----w- c:\program files\Spybot - Search & Destroy 2009-12-01 04:28 . 2009-12-01 04:28 -------- d-----w- c:\windows\system32\wbem\Repository 2009-12-01 04:13 . 2009-12-01 04:13 -------- d--h--w- c:\documents and settings\All Users\Application Data\{EF63305C-BAD7-4144-9208-D65528260864} 2009-12-01 04:12 . 2009-12-01 04:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion 2009-11-25 01:20 . 2009-11-25 01:20 -------- d-----w- c:\program files\Enigma Software Group 2009-11-23 23:20 . 2009-11-23 23:20 -------- d-----w- c:\program files\Trend Micro 2009-11-23 19:36 . 2009-11-23 21:07 358432 --sha-w- c:\windows\system32\drivers\fidbox.dat 2009-11-23 19:36 . 2009-11-23 21:07 22048 --sha-w- c:\windows\system32\drivers\fidbox2.dat 2009-11-20 12:29 . 2009-11-20 12:29 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache 2009-11-11 05:12 . 2009-11-11 05:12 -------- d-----w- c:\documents and settings\Todd\Local Settings\Application Data\PSU 2009-11-11 03:42 . 2009-09-10 12:46 482408 ----a-w- c:\windows\ssndii.exe 2009-11-11 03:42 . 2009-11-18 05:40 -------- d-----w- c:\program files\SamsungPrinterLiveUpdate 2009-11-11 03:42 . 2009-11-11 03:42 -------- d-----w- c:\windows\Samsung 2009-11-11 03:42 . 2009-11-11 03:42 -------- d-----w- c:\temp\ML-2850_SP 2009-11-11 03:23 . 2009-11-11 03:23 -------- d-----w- c:\temp\ML-2850_Win7_Print 2009-11-10 14:22 . 2009-11-10 14:22 -------- d-----w- c:\program files\Common Files\Skype . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-12-07 17:58 . 2009-09-09 21:43 -------- d-----w- c:\documents and settings\Todd\Application Data\Skype 2009-12-07 17:56 . 2008-08-28 04:35 0 ----a-w- c:\windows\system32\drivers\lvuvc.hs 2009-12-07 17:56 . 2008-08-28 04:35 0 ----a-w- c:\windows\system32\drivers\logiflt.iad 2009-12-07 16:48 . 2009-03-26 23:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater 2009-12-05 22:57 . 2009-09-10 21:00 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-12-05 22:57 . 2009-09-10 21:01 4844296 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2009-12-03 23:14 . 2009-09-10 21:00 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-12-03 23:13 . 2009-09-10 21:00 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-12-01 06:51 . 2008-04-23 20:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft 2009-12-01 04:23 . 2009-09-29 10:43 -------- d-----w- c:\documents and settings\Todd\Application Data\HPAppData 2009-11-29 08:44 . 2008-07-14 23:30 -------- d-----w- c:\program files\Sprint Instinct Applications 2009-11-25 01:43 . 2009-09-29 04:13 -------- d-----w- c:\program files\Yahoo! 2009-11-23 21:07 . 2009-11-23 19:36 6920 --sha-w- c:\windows\system32\drivers\fidbox.idx 2009-11-23 21:07 . 2009-11-23 19:36 3140 --sha-w- c:\windows\system32\drivers\fidbox2.idx 2009-11-21 22:18 . 2005-05-26 01:55 -------- d-----w- c:\program files\Google 2009-11-20 22:51 . 2005-03-09 06:38 -------- d-----w- c:\program files\vb2000 2009-11-20 02:41 . 2007-03-14 16:49 -------- d-----w- c:\program files\McAfee 2009-11-18 15:08 . 2009-09-30 04:36 -------- d-----w- c:\documents and settings\Todd\Application Data\HpUpdate 2009-11-11 03:23 . 2008-07-14 23:45 -------- d-----w- c:\program files\Samsung 2009-11-10 14:22 . 2009-09-10 05:23 -------- d-----r- c:\program files\Skype 2009-11-10 14:22 . 2008-08-28 04:41 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype 2009-11-09 00:03 . 2009-09-13 02:49 -------- d-----w- c:\documents and settings\Todd\Application Data\vlc 2009-11-04 20:10 . 2009-10-04 23:58 16384 ----a-w- c:\windows\system32\lgfwunis.exe 2009-11-04 05:40 . 2005-01-12 21:53 -------- d-----w- c:\program files\Java 2009-11-04 05:39 . 2009-11-04 05:39 152576 ----a-w- c:\documents and settings\Todd\Application Data\Sun\Java\jre1.6.0_17\lzma.dll 2009-11-03 03:42 . 2009-10-02 20:41 195456 ------w- c:\windows\system32\MpSigStub.exe 2009-10-14 14:41 . 2005-03-09 03:08 -------- d-----w- c:\program files\Common Files\Adobe 2009-10-12 17:33 . 2007-09-19 17:41 -------- d-----w- c:\documents and settings\Todd\Application Data\LimeWire 2009-10-11 11:17 . 2009-03-07 04:03 411368 ----a-w- c:\windows\system32\deploytk.dll 2009-10-07 03:53 . 2009-10-07 03:49 68027 ----a-w- c:\windows\hpqins13.dat 2009-10-06 10:51 . 2009-10-06 10:51 26624 ----a-w- c:\windows\system32\ml285pl3.dll 2009-09-29 04:16 . 2009-09-29 04:01 188864 ----a-w- c:\windows\hpwins22.dat 2009-09-23 12:55 . 2009-12-01 06:54 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys 2009-09-16 16:22 . 2007-03-14 17:23 40552 ----a-w- c:\windows\system32\drivers\mfesmfk.sys 2009-09-16 16:22 . 2007-03-14 17:23 35272 ----a-w- c:\windows\system32\drivers\mfebopk.sys 2009-09-16 16:22 . 2007-03-14 17:23 214664 ----a-w- c:\windows\system32\drivers\mfehidk.sys 2009-09-16 16:22 . 2007-03-14 17:23 79816 ----a-w- c:\windows\system32\drivers\mfeavfk.sys 2009-09-16 16:22 . 2007-03-14 17:23 34248 ----a-w- c:\windows\system32\drivers\mferkdk.sys 2009-09-11 15:59 . 2009-09-11 15:59 1925024 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player.exe 2009-09-11 14:18 . 2004-08-04 07:56 136192 ----a-w- c:\windows\system32\msv1_0.dll 2009-09-11 09:50 . 2009-09-11 09:50 81920 ----a-w- c:\windows\system32\ssdevm.dll . ((((((((((((((((((((((((((((( SnapShot@2009-12-05_04.50.40 ))))))))))))))))))))))))))))))))))))))))) . + 2009-12-07 17:57 . 2009-12-07 17:57 16384 c:\windows\Temp\Perflib_Perfdata_dcc.dat + 2005-06-29 13:23 . 2009-01-08 01:21 26144 c:\windows\system32\spupdsvc.exe - 2005-06-29 13:23 . 2009-01-08 00:21 26144 c:\windows\system32\spupdsvc.exe + 2007-09-05 20:54 . 2009-01-08 01:20 16928 c:\windows\system32\spmsg.dll - 2007-09-05 20:54 . 2009-01-08 00:20 16928 c:\windows\system32\spmsg.dll + 2004-08-04 07:56 . 2009-03-08 11:31 46592 c:\windows\system32\pngfilt.dll - 2004-08-04 07:56 . 2009-03-08 10:31 46592 c:\windows\system32\pngfilt.dll - 2004-08-09 20:44 . 2009-12-05 04:53 71904 c:\windows\system32\perfc009.dat + 2004-08-09 20:44 . 2009-12-07 18:01 71904 c:\windows\system32\perfc009.dat + 2006-06-29 14:05 . 2009-01-08 01:20 23552 c:\windows\system32\normaliz.dll - 2006-06-29 14:05 . 2009-01-08 00:20 23552 c:\windows\system32\normaliz.dll + 2006-06-28 23:59 . 2009-01-08 01:20 24576 c:\windows\system32\nlsdl.dll - 2006-06-28 23:59 . 2009-01-08 00:20 24576 c:\windows\system32\nlsdl.dll + 2004-08-04 07:56 . 2009-03-08 11:31 48128 c:\windows\system32\mshtmler.dll - 2004-08-04 07:56 . 2009-03-08 10:31 48128 c:\windows\system32\mshtmler.dll - 2004-08-04 07:56 . 2009-03-08 10:31 66560 c:\windows\system32\mshtmled.dll + 2004-08-04 07:56 . 2009-03-08 11:31 66560 c:\windows\system32\mshtmled.dll + 2004-08-04 07:56 . 2009-03-08 11:31 45568 c:\windows\system32\mshta.exe - 2004-08-04 07:56 . 2009-03-08 10:31 45568 c:\windows\system32\mshta.exe - 2006-10-17 18:58 . 2009-03-08 10:31 13312 c:\windows\system32\msfeedssync.exe + 2006-10-17 18:58 . 2009-03-08 11:31 13312 c:\windows\system32\msfeedssync.exe - 2004-08-04 07:56 . 2009-03-08 10:34 43008 c:\windows\system32\licmgr10.dll + 2004-08-04 07:56 . 2009-03-08 11:34 43008 c:\windows\system32\licmgr10.dll - 2004-08-04 07:56 . 2009-03-08 10:32 94720 c:\windows\system32\inseng.dll + 2004-08-04 07:56 . 2009-03-08 11:32 94720 c:\windows\system32\inseng.dll - 2004-08-04 07:56 . 2009-03-08 10:31 34816 c:\windows\system32\imgutil.dll + 2004-08-04 07:56 . 2009-03-08 11:31 34816 c:\windows\system32\imgutil.dll + 2006-08-23 06:13 . 2009-03-08 11:32 36864 c:\windows\system32\ieudinit.exe - 2006-08-23 06:13 . 2009-03-08 10:32 36864 c:\windows\system32\ieudinit.exe + 2004-08-04 07:56 . 2009-03-08 11:32 71680 c:\windows\system32\iesetup.dll - 2004-08-04 07:56 . 2009-03-08 10:32 71680 c:\windows\system32\iesetup.dll + 2004-08-04 07:56 . 2009-03-08 11:32 55808 c:\windows\system32\iernonce.dll - 2004-08-04 07:56 . 2009-03-08 10:32 55808 c:\windows\system32\iernonce.dll + 2009-08-29 07:36 . 2009-08-29 07:36 78336 c:\windows\system32\ieencode.dll + 2006-06-29 14:05 . 2009-01-08 01:20 26112 c:\windows\system32\idndl.dll - 2006-06-29 14:05 . 2009-01-08 00:20 26112 c:\windows\system32\idndl.dll - 2006-10-17 18:58 . 2009-03-08 10:31 59904 c:\windows\system32\icardie.dll + 2006-10-17 18:58 . 2009-03-08 11:31 59904 c:\windows\system32\icardie.dll - 2006-05-10 05:25 . 2009-03-08 10:31 46592 c:\windows\system32\dllcache\pngfilt.dll + 2006-05-10 05:25 . 2009-03-08 11:31 46592 c:\windows\system32\dllcache\pngfilt.dll - 2006-10-17 18:28 . 2009-03-08 10:31 48128 c:\windows\system32\dllcache\mshtmler.dll + 2006-10-17 18:28 . 2009-03-08 11:31 48128 c:\windows\system32\dllcache\mshtmler.dll - 2006-05-10 05:25 . 2009-03-08 10:31 66560 c:\windows\system32\dllcache\mshtmled.dll + 2006-05-10 05:25 . 2009-03-08 11:31 66560 c:\windows\system32\dllcache\mshtmled.dll - 2006-10-17 18:56 . 2009-03-08 10:31 45568 c:\windows\system32\dllcache\mshta.exe + 2006-10-17 18:56 . 2009-03-08 11:31 45568 c:\windows\system32\dllcache\mshta.exe + 2006-10-17 19:05 . 2009-03-08 11:34 43008 c:\windows\system32\dllcache\licmgr10.dll - 2006-10-17 19:05 . 2009-03-08 10:34 43008 c:\windows\system32\dllcache\licmgr10.dll - 2006-05-10 05:25 . 2009-03-08 10:32 94720 c:\windows\system32\dllcache\inseng.dll + 2006-05-10 05:25 . 2009-03-08 11:32 94720 c:\windows\system32\dllcache\inseng.dll - 2006-10-17 18:57 . 2009-03-08 10:31 34816 c:\windows\system32\dllcache\imgutil.dll + 2006-10-17 18:57 . 2009-03-08 11:31 34816 c:\windows\system32\dllcache\imgutil.dll + 2007-05-09 20:30 . 2009-08-28 10:28 13824 c:\windows\system32\dllcache\ieudinit.exe - 2007-05-09 20:30 . 2009-04-28 09:05 13824 c:\windows\system32\dllcache\ieudinit.exe + 2006-11-07 10:26 . 2009-03-08 11:32 71680 c:\windows\system32\dllcache\iesetup.dll - 2006-11-07 10:26 . 2009-03-08 10:32 71680 c:\windows\system32\dllcache\iesetup.dll + 2006-11-07 10:26 . 2009-03-08 11:32 55808 c:\windows\system32\dllcache\iernonce.dll - 2006-11-07 10:26 . 2009-03-08 10:32 55808 c:\windows\system32\dllcache\iernonce.dll + 2009-08-29 07:36 . 2009-08-29 07:36 78336 c:\windows\system32\dllcache\ieencode.dll + 2009-07-02 15:12 . 2009-10-02 04:44 92160 c:\windows\system32\dllcache\iecompat.dll + 2007-08-20 10:04 . 2009-03-08 11:31 59904 c:\windows\system32\dllcache\icardie.dll - 2007-08-20 10:04 . 2009-03-08 10:31 59904 c:\windows\system32\dllcache\icardie.dll - 2004-08-04 07:56 . 2009-03-08 10:24 68608 c:\windows\system32\dllcache\hmmapi.dll + 2004-08-04 07:56 . 2009-03-08 11:24 68608 c:\windows\system32\dllcache\hmmapi.dll - 2009-03-08 10:33 . 2009-03-08 10:33 18944 c:\windows\system32\dllcache\corpol.dll + 2009-03-08 11:33 . 2009-03-08 11:33 18944 c:\windows\system32\dllcache\corpol.dll + 2006-11-07 10:26 . 2009-03-08 11:32 72704 c:\windows\system32\dllcache\admparse.dll - 2006-11-07 10:26 . 2009-03-08 10:32 72704 c:\windows\system32\dllcache\admparse.dll - 2004-08-04 07:56 . 2009-03-08 10:33 18944 c:\windows\system32\corpol.dll + 2004-08-04 07:56 . 2009-03-08 11:33 18944 c:\windows\system32\corpol.dll + 2005-01-12 22:00 . 2009-12-07 17:56 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat - 2005-01-12 22:00 . 2009-12-05 04:48 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat - 2005-01-12 22:00 . 2009-12-05 04:48 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2005-01-12 22:00 . 2009-12-07 17:56 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2005-01-12 22:00 . 2009-12-07 17:56 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat - 2005-01-12 22:00 . 2009-12-05 04:48 32768 c:\windows\system32\config\systemprofile\Cookies\index.dat - 2004-08-04 07:56 . 2009-03-08 10:32 72704 c:\windows\system32\admparse.dll + 2004-08-04 07:56 . 2009-03-08 11:32 72704 c:\windows\system32\admparse.dll + 2009-12-07 10:01 . 2008-07-08 13:02 17272 c:\windows\ie8updates\KB976749-IE8\spmsg.dll + 2009-12-07 10:01 . 2008-07-08 13:02 26488 c:\windows\ie8updates\KB976749-IE8\spcustom.dll + 2009-12-06 03:24 . 2009-03-08 11:33 12288 c:\windows\ie8updates\KB974455-IE8\xpshims.dll + 2009-12-06 03:24 . 2008-07-08 13:02 17272 c:\windows\ie8updates\KB974455-IE8\spmsg.dll + 2009-12-06 03:24 . 2008-07-08 13:02 26488 c:\windows\ie8updates\KB974455-IE8\spcustom.dll + 2009-12-06 03:23 . 2009-03-08 11:31 55296 c:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll - 2009-10-14 09:11 . 2009-07-03 17:09 55296 c:\windows\ie8updates\KB974455-IE8\msfeedsbs.dll + 2009-12-06 03:23 . 2009-03-08 11:33 25600 c:\windows\ie8updates\KB974455-IE8\jsproxy.dll - 2009-10-14 09:11 . 2009-07-03 17:09 25600 c:\windows\ie8updates\KB974455-IE8\jsproxy.dll + 2009-12-07 10:01 . 2008-07-08 13:02 17272 c:\windows\ie8updates\KB971961-IE8\spmsg.dll + 2009-12-07 10:01 . 2008-07-08 13:02 26488 c:\windows\ie8updates\KB971961-IE8\spcustom.dll - 2009-07-02 15:09 . 2009-03-08 20:23 58464 c:\windows\ie8\spuninst\iecustom.dll + 2009-12-06 03:22 . 2009-03-08 21:23 58464 c:\windows\ie8\spuninst\iecustom.dll + 2009-12-06 03:21 . 2009-04-29 04:56 44544 c:\windows\ie8\pngfilt.dll - 2009-07-02 15:07 . 2009-04-29 04:56 44544 c:\windows\ie8\pngfilt.dll + 2009-12-06 03:21 . 2006-10-17 18:28 48128 c:\windows\ie8\mshtmler.dll - 2009-07-02 15:07 . 2006-10-17 18:28 48128 c:\windows\ie8\mshtmler.dll - 2009-07-02 15:07 . 2006-10-17 18:56 45568 c:\windows\ie8\mshta.exe + 2009-12-06 03:21 . 2006-10-17 18:56 45568 c:\windows\ie8\mshta.exe - 2009-07-02 15:07 . 2006-10-17 18:58 12288 c:\windows\ie8\msfeedssync.exe + 2009-12-06 03:21 . 2006-10-17 18:58 12288 c:\windows\ie8\msfeedssync.exe + 2009-12-06 03:21 . 2009-04-29 04:55 52224 c:\windows\ie8\msfeedsbs.dll - 2009-07-02 15:07 . 2009-04-29 04:55 52224 c:\windows\ie8\msfeedsbs.dll + 2009-12-06 03:21 . 2006-10-17 19:05 40960 c:\windows\ie8\licmgr10.dll - 2009-07-02 15:07 . 2006-10-17 19:05 40960 c:\windows\ie8\licmgr10.dll - 2009-07-02 15:07 . 2009-04-29 04:55 27648 c:\windows\ie8\jsproxy.dll + 2009-12-06 03:21 . 2009-04-29 04:55 27648 c:\windows\ie8\jsproxy.dll + 2009-12-06 03:21 . 2006-11-07 10:26 92672 c:\windows\ie8\inseng.dll - 2009-07-02 15:07 . 2006-11-07 10:26 92672 c:\windows\ie8\inseng.dll - 2009-07-02 15:07 . 2006-10-17 18:57 36352 c:\windows\ie8\imgutil.dll + 2009-12-06 03:21 . 2006-10-17 18:57 36352 c:\windows\ie8\imgutil.dll - 2009-07-02 15:07 . 2006-11-07 10:26 55296 c:\windows\ie8\iesetup.dll + 2009-12-06 03:21 . 2006-11-07 10:26 55296 c:\windows\ie8\iesetup.dll + 2009-12-06 03:21 . 2009-04-29 04:55 44544 c:\windows\ie8\iernonce.dll - 2009-07-02 15:07 . 2009-04-29 04:55 44544 c:\windows\ie8\iernonce.dll - 2009-07-02 15:07 . 2009-04-29 04:55 78336 c:\windows\ie8\ieencode.dll + 2009-12-06 03:21 . 2009-04-29 04:55 78336 c:\windows\ie8\ieencode.dll - 2009-07-02 15:07 . 2009-04-28 09:05 70656 c:\windows\ie8\ie4uinit.exe + 2009-12-06 03:21 . 2009-04-28 09:05 70656 c:\windows\ie8\ie4uinit.exe - 2009-07-02 15:07 . 2009-04-29 04:55 63488 c:\windows\ie8\icardie.dll + 2009-12-06 03:21 . 2009-04-29 04:55 63488 c:\windows\ie8\icardie.dll - 2009-07-02 15:07 . 2006-10-17 18:44 60416 c:\windows\ie8\hmmapi.dll + 2009-12-06 03:21 . 2006-10-17 18:44 60416 c:\windows\ie8\hmmapi.dll - 2009-07-02 15:07 . 2008-04-14 00:11 35328 c:\windows\ie8\corpol.dll + 2009-12-06 03:21 . 2008-04-14 00:11 35328 c:\windows\ie8\corpol.dll - 2009-07-02 15:07 . 2006-11-07 10:26 71680 c:\windows\ie8\admparse.dll + 2009-12-06 03:21 . 2006-11-07 10:26 71680 c:\windows\ie8\admparse.dll + 2009-12-06 03:25 . 2009-04-28 09:05 13824 c:\windows\ie7updates\KB974455-IE7\ieudinit.exe + 2009-12-06 03:24 . 2009-03-08 11:35 2048 c:\windows\ie8updates\KB975364-IE8\iecompat.dll + 2006-09-07 21:25 . 2009-01-08 01:21 121856 c:\windows\system32\xmllite.dll - 2006-09-07 21:25 . 2009-01-08 00:21 121856 c:\windows\system32\xmllite.dll - 2006-10-17 19:05 . 2009-03-08 10:34 208384 c:\windows\system32\WinFXDocObj.exe + 2006-10-17 19:05 . 2009-03-08 11:34 208384 c:\windows\system32\WinFXDocObj.exe - 2004-08-04 07:56 . 2009-03-08 10:34 236544 c:\windows\system32\webcheck.dll + 2004-08-04 07:56 . 2009-03-08 11:34 236544 c:\windows\system32\webcheck.dll - 2004-08-04 07:56 . 2009-03-08 10:33 420352 c:\windows\system32\vbscript.dll + 2004-08-04 07:56 . 2009-03-08 11:33 420352 c:\windows\system32\vbscript.dll - 2004-08-04 07:56 . 2009-03-08 10:34 105984 c:\windows\system32\url.dll + 2004-08-04 07:56 . 2009-03-08 11:34 105984 c:\windows\system32\url.dll - 2004-08-09 20:44 . 2009-12-05 04:53 444028 c:\windows\system32\perfh009.dat + 2004-08-09 20:44 . 2009-12-07 18:01 444028 c:\windows\system32\perfh009.dat - 2004-08-04 07:56 . 2009-03-08 10:32 611840 c:\windows\system32\mstime.dll + 2004-08-04 07:56 . 2009-03-08 11:32 611840 c:\windows\system32\mstime.dll - 2004-08-04 07:56 . 2009-03-08 10:34 193536 c:\windows\system32\msrating.dll + 2004-08-04 07:56 . 2009-03-08 11:34 193536 c:\windows\system32\msrating.dll - 2001-08-18 05:33 . 2009-03-08 10:22 156160 c:\windows\system32\msls31.dll + 2001-08-18 05:33 . 2009-03-08 11:22 156160 c:\windows\system32\msls31.dll - 2009-01-08 00:20 . 2009-01-08 00:20 265720 c:\windows\system32\msdbg2.dll + 2009-01-08 00:20 . 2009-01-08 01:20 265720 c:\windows\system32\msdbg2.dll + 2006-11-08 04:03 . 2009-03-08 11:22 164352 c:\windows\system32\ieui.dll - 2006-11-08 04:03 . 2009-03-08 10:22 164352 c:\windows\system32\ieui.dll + 2006-10-17 18:27 . 2009-03-08 11:11 445952 c:\windows\system32\ieapfltr.dll - 2006-10-17 18:27 . 2009-03-08 10:11 445952 c:\windows\system32\ieapfltr.dll - 2001-08-18 05:34 . 2009-03-08 10:32 163840 c:\windows\system32\ieakui.dll + 2001-08-18 05:34 . 2009-03-08 11:32 163840 c:\windows\system32\ieakui.dll + 2004-08-04 07:56 . 2009-03-08 11:33 229376 c:\windows\system32\ieaksie.dll - 2004-08-04 07:56 . 2009-03-08 10:33 229376 c:\windows\system32\ieaksie.dll - 2004-08-04 07:56 . 2009-03-08 10:33 125952 c:\windows\system32\ieakeng.dll + 2004-08-04 07:56 . 2009-03-08 11:33 125952 c:\windows\system32\ieakeng.dll + 2004-08-04 07:56 . 2009-08-29 07:36 133120 c:\windows\system32\extmgr.dll - 2004-08-04 07:56 . 2009-04-29 04:55 133120 c:\windows\system32\extmgr.dll + 2004-08-04 07:56 . 2009-03-08 11:31 216064 c:\windows\system32\dxtrans.dll - 2004-08-04 07:56 . 2009-03-08 10:31 216064 c:\windows\system32\dxtrans.dll + 2004-08-04 07:56 . 2009-03-08 11:31 348160 c:\windows\system32\dxtmsft.dll - 2004-08-04 07:56 . 2009-03-08 10:31 348160 c:\windows\system32\dxtmsft.dll + 2006-11-08 04:03 . 2009-03-08 11:34 236544 c:\windows\system32\dllcache\webcheck.dll - 2006-11-08 04:03 . 2009-03-08 10:34 236544 c:\windows\system32\dllcache\webcheck.dll + 2006-09-18 14:15 . 2009-03-08 11:33 759296 c:\windows\system32\dllcache\VGX.dll - 2006-09-18 14:15 . 2009-03-08 10:33 759296 c:\windows\system32\dllcache\VGX.dll + 2008-05-09 10:53 . 2009-03-08 11:33 420352 c:\windows\system32\dllcache\vbscript.dll - 2008-05-09 10:53 . 2009-03-08 10:33 420352 c:\windows\system32\dllcache\vbscript.dll - 2006-10-17 19:05 . 2009-03-08 10:34 105984 c:\windows\system32\dllcache\url.dll + 2006-10-17 19:05 . 2009-03-08 11:34 105984 c:\windows\system32\dllcache\url.dll - 2009-01-08 00:20 . 2009-01-08 00:20 134144 c:\windows\system32\dllcache\sqmapi.dll + 2009-01-08 01:20 . 2009-01-08 01:20 134144 c:\windows\system32\dllcache\sqmapi.dll + 2009-01-08 01:20 . 2009-01-08 01:20 474112 c:\windows\system32\dllcache\shlwapi.dll - 2009-01-08 00:20 . 2009-01-08 00:20 474112 c:\windows\system32\dllcache\shlwapi.dll - 2006-05-10 05:25 . 2009-03-08 10:32 611840 c:\windows\system32\dllcache\mstime.dll + 2006-05-10 05:25 . 2009-03-08 11:32 611840 c:\windows\system32\dllcache\mstime.dll - 2006-05-10 05:25 . 2009-03-08 10:34 193536 c:\windows\system32\dllcache\msrating.dll + 2006-05-10 05:25 . 2009-03-08 11:34 193536 c:\windows\system32\dllcache\msrating.dll - 2006-11-08 04:03 . 2009-03-08 10:22 156160 c:\windows\system32\dllcache\msls31.dll + 2006-11-08 04:03 . 2009-03-08 11:22 156160 c:\windows\system32\dllcache\msls31.dll - 2006-10-17 19:04 . 2009-03-08 20:09 638816 c:\windows\system32\dllcache\iexplore.exe + 2006-10-17 19:04 . 2009-03-08 21:09 638816 c:\windows\system32\dllcache\iexplore.exe + 2007-05-09 20:30 . 2009-03-08 11:11 445952 c:\windows\system32\dllcache\ieapfltr.dll - 2007-05-09 20:30 . 2009-03-08 10:11 445952 c:\windows\system32\dllcache\ieapfltr.dll + 2006-11-07 10:25 . 2009-03-08 11:32 163840 c:\windows\system32\dllcache\ieakui.dll - 2006-11-07 10:25 . 2009-03-08 10:32 163840 c:\windows\system32\dllcache\ieakui.dll - 2006-11-07 10:27 . 2009-03-08 10:33 229376 c:\windows\system32\dllcache\ieaksie.dll + 2006-11-07 10:27 . 2009-03-08 11:33 229376 c:\windows\system32\dllcache\ieaksie.dll + 2006-11-07 10:26 . 2009-03-08 11:33 125952 c:\windows\system32\dllcache\ieakeng.dll - 2006-11-07 10:26 . 2009-03-08 10:33 125952 c:\windows\system32\dllcache\ieakeng.dll - 2006-05-10 05:25 . 2009-04-29 04:55 133120 c:\windows\system32\dllcache\extmgr.dll + 2006-05-10 05:25 . 2009-08-29 07:36 133120 c:\windows\system32\dllcache\extmgr.dll + 2006-05-10 05:25 . 2009-03-08 11:31 216064 c:\windows\system32\dllcache\dxtrans.dll - 2006-05-10 05:25 . 2009-03-08 10:31 216064 c:\windows\system32\dllcache\dxtrans.dll - 2006-05-10 05:25 . 2009-03-08 10:31 348160 c:\windows\system32\dllcache\dxtmsft.dll + 2006-05-10 05:25 . 2009-03-08 11:31 348160 c:\windows\system32\dllcache\dxtmsft.dll + 2006-11-07 10:26 . 2009-03-08 11:32 128512 c:\windows\system32\dllcache\advpack.dll - 2006-11-07 10:26 . 2009-03-08 10:32 128512 c:\windows\system32\dllcache\advpack.dll + 2009-07-02 16:18 . 2009-12-07 17:56 245760 c:\windows\system32\config\systemprofile\IETldCache\index.dat - 2009-07-02 16:18 . 2009-12-05 04:48 245760 c:\windows\system32\config\systemprofile\IETldCache\index.dat - 2004-08-04 07:56 . 2009-03-08 10:32 128512 c:\windows\system32\advpack.dll + 2004-08-04 07:56 . 2009-03-08 11:32 128512 c:\windows\system32\advpack.dll + 2009-12-07 10:01 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB976749-IE8\updspapi.dll + 2009-12-07 10:01 . 2008-07-08 13:02 755576 c:\windows\ie8updates\KB976749-IE8\update.exe - 2009-11-04 10:01 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB976749-IE8\spuninst\updspapi.dll + 2009-12-07 10:01 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB976749-IE8\spuninst\updspapi.dll + 2009-12-07 10:01 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB976749-IE8\spuninst\spuninst.exe - 2009-11-04 10:01 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB976749-IE8\spuninst\spuninst.exe + 2009-12-07 10:01 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB976749-IE8\spuninst.exe + 2009-12-06 03:24 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB975364-IE8\spuninst\updspapi.dll + 2009-12-06 03:24 . 2009-05-26 11:40 231288 c:\windows\ie8updates\KB975364-IE8\spuninst\spuninst.exe + 2009-12-06 03:23 . 2009-03-08 11:34 914944 c:\windows\ie8updates\KB974455-IE8\wininet.dll + 2009-12-06 03:24 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB974455-IE8\updspapi.dll + 2009-12-06 03:24 . 2008-07-08 13:02 755576 c:\windows\ie8updates\KB974455-IE8\update.exe + 2009-12-06 03:24 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB974455-IE8\spuninst\updspapi.dll - 2009-10-14 09:11 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB974455-IE8\spuninst\updspapi.dll + 2009-12-06 03:24 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB974455-IE8\spuninst\spuninst.exe - 2009-10-14 09:11 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB974455-IE8\spuninst\spuninst.exe + 2009-12-06 03:24 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB974455-IE8\spuninst.exe + 2009-12-06 03:23 . 2009-03-08 11:34 109568 c:\windows\ie8updates\KB974455-IE8\occache.dll + 2009-12-06 03:23 . 2009-03-08 11:32 594432 c:\windows\ie8updates\KB974455-IE8\msfeeds.dll - 2009-10-14 09:11 . 2009-07-03 17:09 594432 c:\windows\ie8updates\KB974455-IE8\msfeeds.dll + 2009-12-06 03:24 . 2009-03-08 11:33 246784 c:\windows\ie8updates\KB974455-IE8\ieproxy.dll + 2009-12-06 03:23 . 2009-03-08 11:31 183808 c:\windows\ie8updates\KB974455-IE8\iepeers.dll + 2009-12-06 03:24 . 2009-03-08 21:09 391536 c:\windows\ie8updates\KB974455-IE8\iedkcs32.dll - 2009-10-14 09:11 . 2009-07-03 11:01 173056 c:\windows\ie8updates\KB974455-IE8\ie4uinit.exe + 2009-12-06 03:24 . 2009-03-08 11:32 173056 c:\windows\ie8updates\KB974455-IE8\ie4uinit.exe + 2009-12-07 10:01 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\updspapi.dll + 2009-12-07 10:01 . 2008-07-08 13:02 755576 c:\windows\ie8updates\KB971961-IE8\update.exe + 2009-12-07 10:01 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll - 2009-09-09 09:01 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll + 2009-12-07 10:01 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe - 2009-09-09 09:01 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe + 2009-12-07 10:01 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst.exe - 2009-09-09 09:01 . 2009-03-08 10:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll + 2009-12-07 10:01 . 2009-03-08 11:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll + 2009-12-06 03:21 . 2009-04-29 04:56 827392 c:\windows\ie8\wininet.dll - 2009-07-02 15:07 . 2009-04-29 04:56 827392 c:\windows\ie8\wininet.dll - 2009-07-02 15:07 . 2006-10-17 19:05 206336 c:\windows\ie8\winfxdocobj.exe + 2009-12-06 03:21 . 2006-10-17 19:05 206336 c:\windows\ie8\winfxdocobj.exe + 2009-12-06 03:21 . 2009-04-29 04:56 233472 c:\windows\ie8\webcheck.dll - 2009-07-02 15:07 . 2009-04-29 04:56 233472 c:\windows\ie8\webcheck.dll + 2009-12-06 03:21 . 2007-07-12 23:31 765952 c:\windows\ie8\vgx.dll - 2009-07-02 15:07 . 2007-07-12 23:31 765952 c:\windows\ie8\vgx.dll - 2009-07-02 15:07 . 2008-05-09 10:53 430080 c:\windows\ie8\vbscript.dll + 2009-12-06 03:21 . 2008-05-09 10:53 430080 c:\windows\ie8\vbscript.dll - 2009-07-02 15:07 . 2009-04-29 04:56 105984 c:\windows\ie8\url.dll + 2009-12-06 03:21 . 2009-04-29 04:56 105984 c:\windows\ie8\url.dll + 2009-12-06 03:22 . 2009-01-08 01:21 382496 c:\windows\ie8\spuninst\updspapi.dll - 2009-07-02 15:09 . 2009-01-08 00:21 382496 c:\windows\ie8\spuninst\updspapi.dll + 2009-12-06 03:22 . 2009-01-08 01:20 231456 c:\windows\ie8\spuninst\spuninst.exe - 2009-07-02 15:09 . 2009-01-08 00:20 231456 c:\windows\ie8\spuninst\spuninst.exe + 2009-12-06 03:21 . 2006-09-06 23:43 213216 c:\windows\ie8\spuninst.exe - 2009-07-02 15:07 . 2006-09-06 23:43 213216 c:\windows\ie8\spuninst.exe + 2009-12-06 03:21 . 2009-04-29 04:56 102912 c:\windows\ie8\occache.dll - 2009-07-02 15:07 . 2009-04-29 04:56 102912 c:\windows\ie8\occache.dll + 2009-12-06 03:21 . 2009-04-29 04:56 671232 c:\windows\ie8\mstime.dll - 2009-07-02 15:07 . 2009-04-29 04:56 671232 c:\windows\ie8\mstime.dll - 2009-07-02 15:07 . 2009-04-29 04:56 193024 c:\windows\ie8\msrating.dll + 2009-12-06 03:21 . 2009-04-29 04:56 193024 c:\windows\ie8\msrating.dll - 2009-07-02 15:07 . 2006-11-08 04:03 156160 c:\windows\ie8\msls31.dll + 2009-12-06 03:21 . 2006-11-08 04:03 156160 c:\windows\ie8\msls31.dll - 2009-07-02 15:07 . 2009-04-29 04:56 477696 c:\windows\ie8\mshtmled.dll + 2009-12-06 03:21 . 2009-04-29 04:56 477696 c:\windows\ie8\mshtmled.dll - 2009-07-02 15:07 . 2009-04-29 04:55 459264 c:\windows\ie8\msfeeds.dll + 2009-12-06 03:21 . 2009-04-29 04:55 459264 c:\windows\ie8\msfeeds.dll + 2009-12-06 03:21 . 2008-05-09 10:53 512000 c:\windows\ie8\jscript.dll - 2009-07-02 15:07 . 2008-05-09 10:53 512000 c:\windows\ie8\jscript.dll + 2009-12-06 03:21 . 2009-04-25 05:27 636088 c:\windows\ie8\iexplore.exe - 2009-07-02 15:07 . 2009-04-25 05:27 636088 c:\windows\ie8\iexplore.exe + 2009-12-06 03:21 . 2006-11-08 04:03 180736 c:\windows\ie8\ieui.dll - 2009-07-02 15:07 . 2006-11-08 04:03 180736 c:\windows\ie8\ieui.dll - 2009-07-02 15:07 . 2009-04-29 04:55 268288 c:\windows\ie8\iertutil.dll + 2009-12-06 03:21 . 2009-04-29 04:55 268288 c:\windows\ie8\iertutil.dll + 2009-12-06 03:21 . 2006-11-08 04:03 287744 c:\windows\ie8\ieproxy.dll - 2009-07-02 15:07 . 2006-11-08 04:03 287744 c:\windows\ie8\ieproxy.dll - 2009-07-02 15:07 . 2006-11-08 04:03 191488 c:\windows\ie8\iepeers.dll + 2009-12-06 03:21 . 2006-11-08 04:03 191488 c:\windows\ie8\iepeers.dll + 2009-12-06 03:21 . 2009-04-29 04:55 385024 c:\windows\ie8\iedkcs32.dll - 2009-07-02 15:07 . 2009-04-29 04:55 385024 c:\windows\ie8\iedkcs32.dll - 2009-07-02 15:07 . 2009-04-29 04:55 383488 c:\windows\ie8\ieapfltr.dll + 2009-12-06 03:21 . 2009-04-29 04:55 383488 c:\windows\ie8\ieapfltr.dll + 2009-12-06 03:21 . 2009-04-25 05:26 161792 c:\windows\ie8\ieakui.dll - 2009-07-02 15:07 . 2009-04-25 05:26 161792 c:\windows\ie8\ieakui.dll + 2009-12-06 03:21 . 2009-04-29 04:55 230400 c:\windows\ie8\ieaksie.dll - 2009-07-02 15:07 . 2009-04-29 04:55 230400 c:\windows\ie8\ieaksie.dll + 2009-12-06 03:21 . 2009-04-29 04:55 153088 c:\windows\ie8\ieakeng.dll - 2009-07-02 15:07 . 2009-04-29 04:55 153088 c:\windows\ie8\ieakeng.dll - 2009-07-02 15:07 . 2009-04-29 04:55 214528 c:\windows\ie8\dxtrans.dll + 2009-12-06 03:21 . 2009-04-29 04:55 214528 c:\windows\ie8\dxtrans.dll + 2009-12-06 03:21 . 2009-04-29 04:55 347136 c:\windows\ie8\dxtmsft.dll - 2009-07-02 15:07 . 2009-04-29 04:55 347136 c:\windows\ie8\dxtmsft.dll + 2009-12-06 03:21 . 2009-04-29 04:55 124928 c:\windows\ie8\advpack.dll - 2009-07-02 15:07 . 2009-04-29 04:55 124928 c:\windows\ie8\advpack.dll + 2009-12-06 03:25 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB974455-IE7\spuninst\updspapi.dll + 2009-12-06 03:25 . 2009-05-26 11:40 231288 c:\windows\ie7updates\KB974455-IE7\spuninst\spuninst.exe + 2009-12-06 03:25 . 2009-04-29 04:55 133120 c:\windows\ie7updates\KB974455-IE7\extmgr.dll - 2006-09-06 06:01 . 2009-02-07 03:07 3698584 c:\windows\system32\ieapfltr.dat + 2006-09-06 06:01 . 2009-02-07 04:07 3698584 c:\windows\system32\ieapfltr.dat + 2009-01-08 01:20 . 2009-01-08 01:20 1497088 c:\windows\system32\dllcache\shdocvw.dll - 2009-01-08 00:20 . 2009-01-08 00:20 1497088 c:\windows\system32\dllcache\shdocvw.dll - 2007-05-09 20:30 . 2009-02-07 03:07 3698584 c:\windows\system32\dllcache\ieapfltr.dat + 2007-05-09 20:30 . 2009-02-07 04:07 3698584 c:\windows\system32\dllcache\ieapfltr.dat + 2009-01-08 01:20 . 2009-01-08 01:20 1022976 c:\windows\system32\dllcache\browseui.dll - 2009-01-08 00:20 . 2009-01-08 00:20 1022976 c:\windows\system32\dllcache\browseui.dll - 2009-11-04 10:01 . 2009-08-29 08:08 5940224 c:\windows\ie8updates\KB976749-IE8\mshtml.dll + 2009-12-07 10:01 . 2009-08-29 08:08 5940224 c:\windows\ie8updates\KB976749-IE8\mshtml.dll + 2009-12-06 03:23 . 2009-03-08 11:34 1206784 c:\windows\ie8updates\KB974455-IE8\urlmon.dll - 2009-10-14 09:11 . 2009-07-19 13:18 5937152 c:\windows\ie8updates\KB974455-IE8\mshtml.dll + 2009-12-06 03:23 . 2009-03-08 11:41 5937152 c:\windows\ie8updates\KB974455-IE8\mshtml.dll + 2009-12-06 03:23 . 2009-03-08 11:32 1985024 c:\windows\ie8updates\KB974455-IE8\iertutil.dll + 2009-12-06 03:21 . 2009-04-29 04:56 1159680 c:\windows\ie8\urlmon.dll - 2009-07-02 15:07 . 2009-04-29 04:56 1159680 c:\windows\ie8\urlmon.dll - 2009-07-02 15:07 . 2009-04-29 04:56 3596288 c:\windows\ie8\mshtml.dll + 2009-12-06 03:21 . 2009-04-29 04:56 3596288 c:\windows\ie8\mshtml.dll - 2009-07-02 15:07 . 2009-04-29 04:55 6066176 c:\windows\ie8\ieframe.dll + 2009-12-06 03:21 . 2009-04-29 04:55 6066176 c:\windows\ie8\ieframe.dll + 2009-12-06 03:21 . 2008-07-09 14:25 2455488 c:\windows\ie8\ieapfltr.dat - 2009-07-02 15:07 . 2008-07-09 14:25 2455488 c:\windows\ie8\ieapfltr.dat + 2009-12-06 03:23 . 2009-03-08 11:39 11063808 c:\windows\ie8updates\KB974455-IE8\ieframe.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files\Skype\\Phone\Skype.exe" [2009-10-09 25623336] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-29 68856] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "type32"="c:\program files\Microsoft IntelliType Pro\type32.exe" [2004-06-03 172032] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\point32.exe" [2004-06-03 204800] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-04 866584] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-07 57344] "mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2009-09-17 645328] "Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2009-09-12 614400] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696] c:\documents and settings\All Users\Start Menu\Programs\Startup\ APC UPS Status.lnk - c:\program files\APC\APC PowerChute Personal Edition\Display.exe [2005-3-25 209016] Google Calendar Sync.lnk - c:\program files\Google\Google Calendar Sync\GoogleCalendarSync.exe [2008-10-2 546288] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mferkdk.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk] path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Todd^Start Menu^Programs^Startup^HotSync Manager.lnk] path=c:\documents and settings\Todd\Start Menu\Programs\Startup\HotSync Manager.lnk backup=c:\windows\pss\HotSync Manager.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Todd^Start Menu^Programs^Startup^Sprint media monitor.lnk] path=c:\documents and settings\Todd\Start Menu\Programs\Startup\Sprint media monitor.lnk backup=c:\windows\pss\Sprint media monitor.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2009-09-04 18:08 935288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader] 2005-06-07 06:46 57344 ----a-w- c:\program files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] 2009-10-03 10:08 35696 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] 2007-09-12 20:50 1838592 ----a-w- c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds] 2004-09-30 22:37 126976 ----a-w- c:\windows\system32\hkcmd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] 2008-12-08 21:50 54576 ----a-w- c:\program files\HP\HP Software Update\hpwuschd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon] 2008-08-20 16:54 150016 ----a-w- c:\program files\HP\Digital Imaging\bin\HpqSRmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray] 2004-09-30 22:41 155648 ----a-w- c:\windows\system32\igfxtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD] 2007-11-26 20:54 1057064 ----a-w- c:\program files\Nero\Nero 7\InCD\InCD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] 2009-01-06 20:06 290088 ----a-w- c:\program files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut] 2007-01-09 04:17 52256 -c--a-w- e:\program files\CyberLink\PowerDVD\Language\Language.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LGODDFU] 2009-11-04 20:09 557056 -c--a-w- e:\program files\lg_fwupdate\fwupdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel] 2007-12-05 18:30 2295072 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] 2008-08-14 23:11 565008 ----a-w- c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] 2008-08-14 23:15 2407184 ----a-w- c:\program files\Logitech\QuickCam\Quickcam.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 00:12 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2007-03-01 20:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF Complete] 2006-01-04 05:30 219648 -c--a-w- c:\program files\PDF Complete\pdfsty.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2009-01-05 22:18 413696 ----a-w- c:\program files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] 2007-03-15 03:01 71216 -c----w- e:\program files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SecurDisc] 2007-11-26 20:54 1629480 ----a-w- c:\program files\Nero\Nero 7\InCD\NBHGui.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SetRefresh] 2003-11-20 20:01 525824 ----a-w- c:\program files\Compaq\SetRefresh\SetRefresh.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2009-10-11 11:17 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] 2007-06-29 20:00 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] 2005-05-26 01:53 180269 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector v2] 2005-05-23 15:57 90112 ----a-w- c:\program files\Common Files\Ulead Systems\AutoDetector\Monitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS10 Preload] 2006-03-07 06:52 36864 -c----w- c:\program files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG] 2006-10-19 02:05 204288 ------w- c:\program files\Windows Media Player\wmpnscfg.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Palm\\HOTSYNC.EXE"= "c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"= "c:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxs08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqfxt08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= R0 $sys$cor;$sys$cor;c:\windows\system32\drivers\$sys$cor.sys [10/6/2004 7:11 AM 18432] R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [11/30/2009 11:54 PM 64288] R1 $sys$crater;$sys$crater;c:\windows\system32\$sys$filesystem\crater.sys [10/7/2004 12:57 AM 11904] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [9/24/2009 4:17 AM 1184912] R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 6:19 PM 13592] S2 gupdate1c9ae6a9168b1b6;Google Update Service (gupdate1c9ae6a9168b1b6);c:\program files\Google\Update\GoogleUpdate.exe [3/26/2009 4:28 PM 133104] S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys --> c:\windows\system32\Drivers\SSPORT.sys [?] S3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [1/12/2005 3:28 PM 32640] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 HPService REG_MULTI_SZ HPSLPSVC hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2007-12-05 18:27 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . ------- Supplementary Scan ------- . uStart Page = hxxp://www.google.com/ uSearchMigratedDefaultURL = hxxp://sidesearch.lycos.com/?query={searchTerms}&npl=& mSearch Bar = hxxp://go.compaq.com/1Q00CDT/0409/bl8.asp uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = *.local uSearchURL,(Default) = hxxp://www.google.com/keyword/%s IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 Trusted Zone: turbotax.com DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab FF - ProfilePath - c:\documents and settings\Todd\Application Data\Mozilla\Firefox\Profiles\woi89l2r.default\ FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\NPMGWRAP.DLL FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); . - - - - ORPHANS REMOVED - - - - MSConfigStartUp-AppleSyncNotifier - c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe MSConfigStartUp-DVDTray - c:\program files\Ahead\ODD Toolkit\DVDTray.exe MSConfigStartUp-Norton SystemWorks - c:\program files\Norton SystemWorks\cfgwiz.exe MSConfigStartUp-Picasa Media Detector - c:\program files\Picasa2\PicasaMediaDetector.exe MSConfigStartUp-updateMgr - c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AddRemove-Adobe Photoshop Elements 1.0 - c:\windows\ISUNINST.EXE -fc:\program files\Adobe\Photoshop Elements\Uninst.isu -cc:\program files\Adobe\Photoshop Elements\Uninst.dll AddRemove-Adobe SVG Viewer - c:\windows\IsUninst.exe -fc:\windows\System32\Adobe\SVG Viewer\Uninst.isu AddRemove-American Greetings� Art & More Store - c:\windows\IsUninst.exe -fc:\program files\Mindscape\Art & More Store\Uninst.isu AddRemove-ArcSoft PhotoBase - c:\windows\IsUninst.exe -fc:\program files\ArcSoft\PhotoBase\Uninst.isu AddRemove-ArcSoft PhotoStudio 2000 - c:\windows\IsUninst.exe -fc:\program files\ArcSoft\PhotoStudio 2000\Uninst.isu AddRemove-ArcSoft Software Suite - c:\windows\IsUninst.exe -fc:\program files\ArcSoft\Software Suite\Uninst.isu AddRemove-Canon ScanGear Toolbox 3.0 - c:\windows\IsUninst.exe -fc:\program files\Canon\ScanGear Toolbox Ver3\Uninst.isu -cc:\program files\Canon\ScanGear Toolbox Ver3\uninst.dll AddRemove-lvdrivers_11.80 - c:\program files\Common Files\LogiShrd\LogiDriverStore\lvdrivers\11.80.1048\LgDrvInst.exe -remove -instdirc:\program files\Common Files\LogiShrd\LogiDriverStore\lvdrivers -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkeylvdrivers_11.80 AddRemove-Serif DrawPlus 3.0 - c:\windows\IsUninst.exe -fc:\program files\Serif\dp30\DrawPlus_uninst.isu AddRemove-Sierra Home Architect - c:\windows\IsUninst.exe -fc:\sierra\SHA\Uninst.isu AddRemove-Software Setup - c:\windows\IsUninst.exe -fc:\program files\COMPAQ\Software Setup\Uninst.isu -cc:\program files\COMPAQ\Software Setup\CPQUNST.DLL ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-12-07 10:58 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... c:\windows\TEMP\TMP0000004C559A12DAD46CE805 524288 bytes executable scan completed successfully hidden files: 1 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(696) c:\windows\system32\WININET.dll - - - - - - - > 'lsass.exe'(760) c:\windows\system32\WININET.dll - - - - - - - > 'explorer.exe'(4468) c:\windows\system32\WININET.dll c:\windows\system32\ieframe.dll c:\windows\system32\mshtml.dll c:\windows\system32\msls31.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Other Running Processes ------------------------ . c:\program files\APC\APC PowerChute Personal Edition\mainserv.exe c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Nero\Nero 7\InCD\InCDsrv.exe c:\program files\Skype\Phone\Skype.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Common Files\LightScribe\LSSrvc.exe c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe c:\program files\APC\APC PowerChute Personal Edition\apcsystray.exe c:\progra~1\McAfee\MSC\mcmscsvc.exe c:\program files\common files\mcafee\mna\mcnasvc.exe c:\progra~1\COMMON~1\mcafee\mcproxy\mcproxy.exe c:\progra~1\McAfee\VIRUSS~1\mcshield.exe c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\program files\McAfee\MPF\MPFSrv.exe c:\program files\CyberLink\Shared Files\RichVideo.exe c:\program files\Windows Media Player\WMPNetwk.exe c:\program files\Canon\CAL\CALMAIN.exe c:\windows\system32\wbem\unsecapp.exe c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe c:\program files\Lavasoft\Ad-Aware\AAWTray.exe . ************************************************************************** . Completion time: 2009-12-07 11:10 - machine was rebooted ComboFix-quarantined-files.txt 2009-12-07 18:10 ComboFix2.txt 2009-12-05 05:02 Pre-Run: 26,809,958,400 bytes free Post-Run: 26,840,346,624 bytes free - - End Of File - - D30AD4299AEBD5D92B368DB6F7DBCB6F