هذا تقرير الآداء الاولى ، لكن طلعت لي في نفس النافذة انه لا يمكن العثور على الآدة الرجاء الانتظار
ComboFix 09-04-18.05 - azooz 04/18/2009 16:49.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1256.966.1033.18.2038.1537 [GMT 3:00]
Running from: c:\users\azooz\Documents\Downloads\Programs\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated)
FW: Kaspersky Internet Security *disabled*
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\azooz\Application Data\BITS
c:\documents and settings\azooz\Application Data\BITS\BITS.ini
c:\documents and settings\azooz\Application Data\BITS\DHTTable.dat
c:\documents and settings\azooz\Application Data\BITS\ProxyList.ini
c:\documents and settings\azooz\Application Data\BITS\UPnP.ini
c:\program files\FlashGet Network
c:\windows\system32\pthreadGC2.dll
G:\Autorun.inf
H:\Autorun.inf
J:\Autorun.inf
.
((((((((((((((((((((((((( Files Created from 2009-03-18 to 2009-04-18 )))))))))))))))))))))))))))))))
.
2009-04-18 13:53 . 2009-04-18 13:53 -------- d-----w c:\windows\system32\xircom
2009-04-18 13:53 . 2009-04-18 13:53 -------- d-----w c:\program files\microsoft frontpage
2009-04-18 13:07 . 2009-04-18 13:07 -------- d-----w c:\program files\CodeStuff
2009-04-18 01:08 . 2009-04-18 01:08 -------- d-----w c:\documents and settings\azooz\Application Data\Avant Profiles
2009-04-18 01:07 . 2009-04-18 01:08 -------- d-----w c:\program files\Avant Browser
2009-04-18 00:43 . 2009-04-18 01:07 -------- d-----w c:\program files\Your Uninstaller 2008
2009-04-18 00:00 . 2009-04-18 00:04 1374 ----a-w c:\windows\imsins.BAK
2009-04-17 14:06 . 2009-04-17 14:06 -------- d-----w c:\documents and settings\azooz\Local Settings\Application Data\Yahoo
2009-04-17 14:06 . 2009-04-17 14:06 -------- d-----w c:\documents and settings\All Users\Application Data\Yahoo!
2009-04-17 13:58 . 2009-04-17 13:58 -------- d-----w c:\documents and settings\azooz\Application Data\URSoft
2009-04-17 13:58 . 2009-04-18 11:02 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-04-17 02:12 . 2009-03-06 14:22 284160 ------w c:\windows\system32\dllcache\pdh.dll
2009-04-17 02:12 . 2009-02-09 12:10 473600 ------w c:\windows\system32\dllcache\fastprox.dll
2009-04-17 02:12 . 2009-02-09 12:10 453120 ------w c:\windows\system32\dllcache\wmiprvsd.dll
2009-04-17 02:12 . 2009-02-09 12:10 401408 ------w c:\windows\system32\dllcache\rpcss.dll
2009-04-17 02:12 . 2009-02-06 11:11 110592 ------w c:\windows\system32\dllcache\services.exe
2009-04-17 02:12 . 2009-02-06 10:39 35328 ------w c:\windows\system32\dllcache\sc.exe
2009-04-17 02:12 . 2009-02-06 10:10 227840 ------w c:\windows\system32\dllcache\wmiprvse.exe
2009-04-17 02:12 . 2009-02-09 12:10 729088 ------w c:\windows\system32\dllcache\lsasrv.dll
2009-04-17 02:12 . 2009-02-09 12:10 714752 ------w c:\windows\system32\dllcache\ntdll.dll
2009-04-17 02:12 . 2009-02-09 12:10 617472 ------w c:\windows\system32\dllcache\advapi32.dll
2009-04-17 02:10 . 2009-03-27 06:58 1203922 ------w c:\windows\system32\dllcache\sysmain.sdb
2009-04-17 02:10 . 2008-05-03 11:55 2560 ------w c:\windows\system32\xpsp4res.dll
2009-04-17 02:10 . 2008-04-21 12:08 215552 ------w c:\windows\system32\dllcache\wordpad.exe
2009-04-17 02:03 . 2009-04-17 02:11 -------- d-----w c:\documents and settings\azooz\Application Data\TeamViewer
2009-04-17 02:01 . 2009-04-17 02:01 -------- d-----w c:\program files\TeamViewer
2009-04-17 01:58 . 2009-04-17 01:58 -------- d-----w c:\documents and settings\azooz\temp
2009-04-16 12:17 . 2009-04-16 12:17 -------- d-----w C:\Temp
2009-04-16 02:27 . 2005-01-12 08:19 456536 ----a-w c:\windows\system32\XCEEDZIP.DLL
2009-04-16 02:27 . 2004-03-08 21:00 224016 ----a-w c:\windows\system32\Tabctl32.ocx
2009-04-16 02:27 . 2004-03-08 21:00 152848 ----a-w c:\windows\system32\Comdlg32.ocx
2009-04-16 02:27 . 2004-03-08 21:00 132880 ----a-w c:\windows\system32\Msinet.ocx
2009-04-16 02:27 . 2009-04-16 16:40 -------- d-----w c:\program files\Driver Magician
2009-04-16 01:19 . 2009-04-16 01:43 -------- d-----w c:\documents and settings\All Users\Application Data\NOS
2009-04-16 01:19 . 2009-04-16 01:19 -------- d-----w c:\program files\NOS
2009-04-16 01:11 . 2009-04-17 14:05 -------- d-----w c:\documents and settings\azooz\Application Data\Thinstall
2009-04-16 01:11 . 2009-04-16 01:11 -------- d-----w c:\documents and settings\azooz\Local Settings\Application Data\Thinstall
2009-04-15 14:26 . 2006-12-12 08:13 32768 ----a-w c:\windows\system32\EBLib.DLL
2009-04-15 14:26 . 2006-06-22 13:27 11264 ----a-w c:\windows\system32\drivers\TPwSav.sys
2009-04-15 14:26 . 2009-04-15 14:28 -------- d-----w c:\documents and settings\All Users\Application Data\XP
2009-04-15 14:26 . 2009-04-15 14:26 -------- d-----w c:\documents and settings\All Users\Application Data\Vista64
2009-04-14 15:21 . 2009-04-14 15:21 -------- d-----w C:\profiles
2009-04-13 21:30 . 2009-04-18 13:43 -------- d-----w C:\Downloads
2009-04-13 21:12 . 2009-04-18 13:47 -------- d-----w c:\program files\FlashGet
2009-04-12 16:02 . 2009-04-12 16:02 -------- d-----w c:\program files\Alcohol Soft
2009-04-12 15:02 . 2009-04-12 15:02 717296 ----a-w c:\windows\system32\drivers\sptd.sys
2009-04-12 06:39 . 2009-04-12 06:39 -------- d-----w c:\windows\Sun
2009-04-11 14:46 . 2009-04-11 14:45 73728 ----a-w c:\windows\system32\javacpl.cpl
2009-04-11 14:46 . 2009-04-11 14:45 410984 ----a-w c:\windows\system32\deploytk.dll
2009-04-11 14:45 . 2009-04-11 14:45 -------- d-----w c:\program files\Java
2009-04-11 14:38 . 2008-07-10 10:56 107864 ----a-w c:\windows\system32\tsccvid.dll
2009-04-11 14:38 . 2009-04-18 00:41 -------- d-----w c:\windows\system32\QuickTime
2009-04-11 00:36 . 2009-04-11 00:36 -------- d-----w c:\program files\VideoLAN
2009-04-10 00:28 . 2009-04-10 00:28 -------- d-----w c:\documents and settings\azooz\Local Settings\Application Data\SYSTRAN
2009-04-10 00:28 . 2009-04-10 00:28 -------- d-----w c:\documents and settings\azooz\Application Data\SYSTRAN
2009-04-10 00:28 . 2009-04-10 00:28 -------- d-----w c:\documents and settings\All Users\Application Data\SYSTRAN
2009-04-10 00:16 . 2009-04-10 00:16 -------- d-----w c:\program files\Gadget Extractor
2009-04-09 15:46 . 2009-04-18 00:46 -------- d-----w c:\documents and settings\All Users\Application Data\TechSmith
2009-04-09 15:46 . 2009-04-18 00:46 -------- d-----w c:\program files\TechSmith
2009-04-09 15:46 . 2009-04-09 15:46 -------- d-----w c:\documents and settings\azooz\Local Settings\Application Data\TechSmith
2009-04-09 15:46 . 2009-04-09 15:46 -------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-04-09 15:40 . 2009-04-09 15:40 -------- d-----w c:\documents and settings\azooz\Application Data\Talkback
2009-04-09 15:40 . 2009-04-09 15:40 -------- d-----w c:\documents and settings\azooz\Local Settings\Application Data\Mozilla
2009-04-09 11:48 . 2009-04-09 11:48 -------- d-----w c:\program files\Microsoft Works
2009-04-09 11:47 . 2009-04-09 11:47 -------- d-----w c:\program files\Microsoft.NET
2009-04-09 11:45 . 2009-04-09 11:46 -------- d-----w c:\windows\SHELLNEW
2009-04-09 11:45 . 2009-04-09 11:45 -------- d-----w c:\documents and settings\azooz\Local Settings\Application Data\Microsoft Help
2009-04-09 11:45 . 2009-04-18 00:01 -------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-04-09 11:44 . 2009-04-09 11:44 -------- d--h--r C:\MSOCache
2009-04-09 11:27 . 2009-04-09 11:27 -------- d-----w c:\program files\MSBuild
2009-04-09 11:27 . 2009-04-09 11:27 97920 ----a-w c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-04-09 11:25 . 2009-04-09 11:25 -------- d-----w c:\windows\system32\XPSViewer
2009-04-09 11:24 . 2009-04-09 11:24 -------- d-----w c:\program files\Reference Assemblies
2009-04-09 11:24 . 2006-06-29 10:07 14048 ------w c:\windows\system32\spmsg2.dll
2009-04-09 00:13 . 2008-06-13 11:05 272128 ------w c:\windows\system32\dllcache\bthport.sys
2009-04-09 00:10 . 2009-02-06 11:08 2189056 ------w c:\windows\system32\dllcache\ntoskrnl.exe
2009-04-09 00:10 . 2009-02-06 11:06 2145280 ------w c:\windows\system32\dllcache\ntkrnlmp.exe
2009-04-09 00:10 . 2009-02-07 16:02 2066048 ------w c:\windows\system32\dllcache\ntkrnlpa.exe
2009-04-09 00:10 . 2009-02-06 10:32 2023936 ------w c:\windows\system32\dllcache\ntkrpamp.exe
2009-04-09 00:09 . 2008-10-24 11:21 455296 ------w c:\windows\system32\dllcache\mrxsmb.sys
2009-04-09 00:09 . 2008-12-11 10:57 333952 ------w c:\windows\system32\dllcache\srv.sys
2009-04-09 00:09 . 2008-05-01 14:33 331776 ------w c:\windows\system32\dllcache\msadce.dll
2009-04-09 00:08 . 2008-04-11 19:04 691712 ------w c:\windows\system32\dllcache\inetcomm.dll
2009-04-09 00:08 . 2009-02-09 11:13 1846784 ------w c:\windows\system32\dllcache\win32k.sys
2009-04-09 00:02 . 2008-10-03 10:02 247326 ------w c:\windows\system32\dllcache\strmdll.dll
2009-04-09 00:02 . 2008-10-15 16:34 337408 ------w c:\windows\system32\dllcache\netapi32.dll
2009-04-09 00:02 . 2008-09-04 17:15 1106944 ------w c:\windows\system32\dllcache\msxml3.dll
2009-04-09 00:00 . 2009-04-18 00:01 -------- d--h--w c:\windows\$hf_mig$
2009-04-08 20:46 . 2008-05-08 14:02 203136 ------w c:\windows\system32\dllcache\rmcast.sys
2009-04-08 18:35 . 2008-12-05 06:54 144896 ------w c:\windows\system32\dllcache\schannel.dll
2009-04-08 17:04 . 2008-10-16 11:06 27496 ----a-w c:\windows\system32\mucltui.dll.mui
2009-04-08 17:04 . 2008-10-16 11:06 268648 ----a-w c:\windows\system32\mucltui.dll
2009-04-08 17:04 . 2008-10-16 11:06 208744 ----a-w c:\windows\system32\muweb.dll
2009-04-08 00:33 . 2009-04-08 00:33 603904 ----a-w c:\windows\system32\TUProgSt.exe
2009-04-08 00:33 . 2008-12-11 07:31 27904 ----a-w c:\windows\system32\uxtuneup.dll
2009-04-08 00:33 . 2009-04-08 00:33 360192 ----a-w c:\windows\system32\TuneUpDefragService.exe
2009-04-08 00:33 . 2009-04-08 00:33 -------- d-----w c:\documents and settings\azooz\Application Data\TuneUp Software
2009-04-08 00:32 . 2009-04-08 00:32 -------- d-----w c:\documents and settings\All Users\Application Data\TuneUp Software
2009-04-08 00:32 . 2009-04-15 12:25 -------- d-----w c:\program files\TuneUp Utilities 2009
2009-04-08 00:32 . 2009-04-08 00:32 -------- d-sh--w c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-04-08 00:11 . 2007-07-26 11:18 172032 ----a-w c:\windows\system32\igfxres.dll
2009-04-08 00:01 . 2009-04-08 00:01 -------- d-----w C:\Users
2009-04-07 23:53 . 2009-04-07 23:53 -------- d-----w c:\program files\Windows Sidebar
2009-04-07 23:50 . 2009-04-07 23:50 -------- d-----w c:\documents and settings\azooz\Application Data\Media Player Classic
2009-04-07 23:48 . 2009-04-08 10:17 -------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-18 13:57 . 2009-04-07 20:42 -------- d-----w c:\documents and settings\azooz\Application Data\uTorrent
2009-04-18 13:57 . 2009-04-07 20:40 -------- d-----w c:\documents and settings\azooz\Application Data\DMCache
2009-04-18 13:56 . 2009-04-07 20:26 -------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-04-18 12:30 . 2009-04-07 20:26 4520 --sha-w c:\windows\system32\drivers\fidbox2.idx
2009-04-18 12:30 . 2009-04-07 20:26 393248 --sha-w c:\windows\system32\drivers\fidbox2.dat
2009-04-18 12:30 . 2009-04-07 20:26 28892 --sha-w c:\windows\system32\drivers\fidbox.idx
2009-04-18 12:30 . 2009-04-07 20:26 2218528 --sha-w c:\windows\system32\drivers\fidbox.dat
2009-04-17 14:04 . 2009-04-07 20:39 -------- d-----w c:\program files\Internet Download Manager
2009-04-17 13:11 . 2009-04-11 14:40 266 ----a-w C:\RecorderSDKLog.txt
2009-04-16 01:49 . 2009-04-07 20:33 -------- d-----w c:\program files\Common Files\Adobe
2009-04-15 14:26 . 2009-04-07 21:16 -------- d--h--w c:\program files\InstallShield Installation Information
2009-04-15 14:26 . 2009-04-07 21:16 -------- d-----w c:\program files\TOSHIBA
2009-04-15 14:26 . 2009-04-07 21:15 -------- d-----w c:\program files\Common Files\InstallShield
2009-04-15 12:58 . 2009-04-07 20:41 -------- d-----w c:\program files\K-Lite Codec Pack
2009-04-13 20:39 . 2009-04-07 20:40 -------- d-----w c:\documents and settings\azooz\Application Data\IDM
2009-04-12 10:08 . 2009-04-07 20:45 109528 ----a-w c:\documents and settings\azooz\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-04-09 14:42 . 2009-04-07 21:49 -------- d-----w c:\program files\Alky for Applications
2009-04-07 23:56 . 2009-04-07 15:35 86327 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-04-07 21:08 . 2009-04-07 21:08 -------- d-----w c:\program files\Messenger Plus! Live
2009-04-07 20:49 . 2009-04-07 20:49 -------- d-----w c:\program files\Microsoft
2009-04-07 20:49 . 2009-04-07 20:48 -------- d-----w c:\program files\Windows Live
2009-04-07 20:48 . 2009-04-07 20:48 -------- d-----w c:\program files\Windows Live SkyDrive
2009-04-07 20:45 . 2009-04-07 20:45 -------- d-----w c:\program files\Common Files\Windows Live
2009-04-07 20:42 . 2009-04-07 20:42 -------- d-----w c:\program files\uTorrent
2009-04-07 20:35 . 2008-01-29 10:29 33808 ----a-w c:\windows\system32\drivers\klbg.sys
2009-04-07 20:35 . 2009-04-07 20:26 89601 ----a-w c:\windows\system32\drivers\klick.dat
2009-04-07 20:35 . 2009-04-07 20:26 101287 ----a-w c:\windows\system32\drivers\klin.dat
2009-04-07 20:34 . 2009-04-07 20:34 -------- d-----w c:\documents and settings\All Users\Application Data\Adobe Systems
2009-04-07 20:33 . 2009-04-07 20:33 -------- d-----w c:\program files\Common Files\Adobe Systems Shared
2009-04-07 20:26 . 2009-04-07 20:26 -------- d-----w c:\program files\Kaspersky Lab
2009-04-07 20:25 . 2009-04-07 20:25 -------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-04-07 15:37 . 2009-04-07 15:37 -------- d-----w c:\program files\Windows Media Connect 2
2009-04-07 15:32 . 2009-04-07 15:32 21640 ----a-w c:\windows\system32\emptyregdb.dat
2009-03-26 15:35 . 2009-04-03 13:24 210352 ----a-w c:\windows\system32\idmmbc.dll
2009-03-21 14:06 . 2009-03-21 14:06 989696 ------w c:\windows\system32\dllcache\kernel32.dll
2009-03-06 14:22 . 2008-04-14 11:00 284160 ----a-w c:\windows\system32\pdh.dll
2009-03-03 00:17 . 2009-04-09 00:04 828416 ------w c:\windows\system32\dllcache\wininet.dll
2009-03-03 00:17 . 2008-05-20 05:56 828416 ----a-w c:\windows\system32\wininet.dll
2009-02-28 04:54 . 2009-04-09 00:04 636088 ------w c:\windows\system32\dllcache\iexplore.exe
2009-02-21 07:39 . 2009-04-09 00:04 3596800 ------w c:\windows\system32\dllcache\mshtml.dll
2009-02-20 10:24 . 2009-04-09 00:04 13824 ------w c:\windows\system32\dllcache\ieudinit.exe
2009-02-20 10:24 . 2009-04-09 00:04 70656 ------w c:\windows\system32\dllcache\ie4uinit.exe
2009-02-20 05:14 . 2009-04-09 00:04 161792 ------w c:\windows\system32\dllcache\ieakui.dll
2009-02-09 18:56 . 2009-04-07 20:41 67584 ----a-w c:\windows\system32\ff_vfw.dll
2009-02-09 12:10 . 2008-04-14 11:00 729088 ----a-w c:\windows\system32\lsasrv.dll
2009-02-09 12:10 . 2008-04-14 11:00 714752 ----a-w c:\windows\system32\ntdll.dll
2009-02-09 12:10 . 2008-04-14 11:00 617472 ----a-w c:\windows\system32\advapi32.dll
2009-02-09 12:10 . 2008-04-14 11:00 401408 ----a-w c:\windows\system32\rpcss.dll
2009-02-09 11:13 . 2008-04-14 11:00 1846784 ----a-w c:\windows\system32\win32k.sys
2009-02-06 11:52 . 2009-02-06 11:52 49504 ----a-w c:\windows\system32\sirenacm.dll
2009-02-06 11:11 . 2008-04-14 11:00 110592 ----a-w c:\windows\system32\services.exe
2009-02-06 11:06 . 2008-04-14 11:00 2145280 ----a-w c:\windows\system32\ntoskrnl.exe
2009-02-06 10:39 . 2008-04-14 11:00 35328 ----a-w c:\windows\system32\sc.exe
2009-02-06 10:32 . 2008-04-14 00:01 2023936 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-02-03 19:59 . 2009-02-03 19:59 56832 ------w c:\windows\system32\dllcache\secur32.dll
2009-02-03 19:59 . 2008-04-14 11:00 56832 ----a-w c:\windows\system32\secur32.dll
2006-12-12 08:13 . 2006-12-12 08:13 32768 ----a-w c:\documents and settings\All Users\Application Data\EBLib.dll
2006-07-28 13:25 . 2006-07-28 13:25 19456 ----a-w c:\documents and settings\All Users\Application Data\LPCFilter.sys
2008-07-25 08:2009-04-14 15:35 31:48 . c:\program files\mozilla firefox\components\flashgetXpi.dll
2008-04-07 06:2009-04-07 15:36 59:01 . c:\program files\mozilla firefox\components\jar50.dll
2008-04-07 06:2009-04-07 15:36 59:02 . c:\program files\mozilla firefox\components\jsd3250.dll
2008-04-07 06:2009-04-07 15:36 59:03 . c:\program files\mozilla firefox\components\myspell.dll
2008-04-07 06:2009-04-07 15:36 59:03 . c:\program files\mozilla firefox\components\spellchk.dll
2008-04-07 06:2009-04-07 15:36 59:04 . c:\program files\mozilla firefox\components\xpinstal.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2009-04-07 2794928]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2009-04-07 270128]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2007-07-28 1230848]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-04-02 203928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-04-07 206088]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-07-26 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-07-26 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-07-26 138008]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-04-11 148888]
"CeEKEY"="c:\program files\TOSHIBA\E-KEY\CeEKey.exe" [2007-07-06 651264]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"Flashget"="c:\program files\FlashGet\flashget.exe" [2007-09-25 2007088]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2007-07-26 16377344]
"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2008-04-13 110592]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2009-02-20 124928]
c:\documents and settings\azooz\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Bluetooth Monitor.lnk - c:\program files\TOSHIBA\Bluetooth Monitor\BtMon2.exe [2009-4-8 69632]
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\FlashGet\\FlashGet.exe"=
"c:\\Program Files\\TeamViewer\\Version4\\TeamViewer.exe"=
"d:\\My Laptop\\Portable\\Yahoo! Messenger\\Yahoo! Messenger.exe"=
R3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2009-03-03 33176]
S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2009-04-07 33808]
S2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\System32\TUProgSt.exe [2009-04-08 603904]
S3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\DRIVERS\klfltdev.sys [2008-03-13 26640]
S3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys [2008-04-30 24592]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
\Shell\AutoRun\command - G:\lain19.ico
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
\Shell\AutoRun\command - H:\joojjojo.ico
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
"c:\program files\Windows Sidebar\sidebar.exe" /RegServer
.
Contents of the 'Scheduled Tasks' folder
2009-04-18 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 15:36]
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = hxxp://www.internetdownloadmanager.com/welcome.html
IE: &تحميل الكل باستعمال فلاش-جت - c:\program files\FlashGet\jc_all.htm
IE: &تحميل باستعمال فلاش-جت - c:\program files\FlashGet\jc_link.htm
IE: Add to Banner Ad Blocker - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: FlashGet ت&حميل بواسطة - c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm
IE: FlashGet تحميل ال&كل بواسطة - c:\program files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm
IE: ت&صدير إلى Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\azooz\Application Data\Mozilla\Firefox\Profiles\ma5oyo8e.default\
FF - component: c:\documents and settings\azooz\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
FF - component: c:\program files\Mozilla Firefox\components\flashgetXpi.dll
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - component: c:\program files\Mozilla Firefox\extensions\talkback@mozilla.org\components\qfaservices.dll
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2009-04-18 16:57
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):8e,35,1f,a5,2f,73,c0,2d,68,07,76,f2,e3,5b,c9,c3,e6,cd,73,4b,69,
fd,2f,9c,fc,4b,39,ec,ed,9b,a2,5f,16,2e,f4,06,00,f8,fa,86,00,00,00,00,00,00,\
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{80295584-d0a7-454a-a9af-1432a7962566}]
@Denied: (Full) (Everyone)
"Model"=dword:00000061
"Therad"=dword:00000002
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,99,97,56,7c,e9,
24,e0,b8,05,98,32,02,34,2b,da,61,bf,2c,d2,27,d3,f7,90,db,e0,35,84,97,48,c2,\
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'explorer.exe'(2896)
c:\program files\FlashGet\fgmgr.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\agrsmsvc.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Windows Live\Contacts\wlcomm.exe
.
**************************************************************************
.
Completion time: 2009-04-18 16:59 - machine was rebooted
ComboFix-quarantined-files.txt 2009-04-18 13:59
Pre-Run: 75,364,057,088 bytes free
Post-Run: 75,419,586,560 bytes free
325 --- E O F --- 2009-04-18 00:04
