بحذفها الحين
وهذا التقرير اللي طلع من البرنامج الاول اللي اعطيتني
---
ComboFix 09-05-25.08 - winXP 05/26/2009 15:12.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1256.966.1025.18.1015.544 [GMT 3:00]
Running from: c:\documents and settings\winXP\سطح المكتب\ComboFix.exe
AV: Total Security 10.00 *On-access scanning disabled* (Outdated) {05C1329D-F0E0-4B19-9D15-54F9BC3ADE87}
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2009-04-26 to 2009-05-26 )))))))))))))))))))))))))))))))
.
2009-05-26 06:50 . 2009-05-26 06:50 -------- d-----w c:\program files\WinASO
2009-05-26 06:32 . 2009-05-22 02:07 89104 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090525.041\NAVENG.SYS
2009-05-26 06:32 . 2009-05-22 02:07 876144 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090525.041\NAVEX15.SYS
2009-05-26 06:32 . 2009-05-22 02:06 1181040 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090525.041\NAVEX32A.DLL
2009-05-26 06:32 . 2009-05-22 02:06 177520 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090525.041\NAVENG32.DLL
2009-05-26 06:32 . 2009-05-22 02:07 371248 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090525.041\EECTRL.SYS
2009-05-26 06:32 . 2009-05-22 02:07 101936 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090525.041\ERASER.SYS
2009-05-26 06:32 . 2009-05-22 02:06 259368 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090525.041\ECMSVR32.DLL
2009-05-26 06:32 . 2009-05-22 02:06 2414128 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090525.041\CCERASER.DLL
2009-05-22 10:49 . 2009-05-22 02:07 396848 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090513.001\IDSviA64.sys
2009-05-22 10:49 . 2009-05-22 02:07 292912 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090513.001\IDSvix86.sys
2009-05-22 10:49 . 2009-05-22 02:07 276344 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090513.001\IDSXpx86.sys
2009-05-22 10:49 . 2009-05-22 02:06 447864 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090513.001\IDSxpx86.dll
2009-05-22 10:49 . 2009-03-16 20:03 533880 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090513.001\Scxpx86.dll
2009-05-22 02:06 . 2009-05-22 02:06 1290592 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\SyKnAppS\SyKnAppS.dll
2009-05-21 09:28 . 2009-05-21 09:28 -------- d-----w c:\program files\Agnitum
2009-05-21 01:03 . 2009-05-21 01:03 390664 ----a-w c:\documents and settings\winXP\Application Data\Real\RealPlayer\Update\RealPlayer11.exe
2009-05-17 18:21 . 2009-05-17 18:21 7168 ----a-w c:\documents and settings\winXP\Application Data\Thinstall\Microsoft Text-to-Speech Engine 4.0 (English)\4000005e00002i\vcmd.exe
2009-05-17 18:21 . 2009-05-17 18:21 -------- d-----w c:\documents and settings\winXP\Application Data\Thinstall
2009-05-05 16:55 . 2004-03-29 12:23 90112 ----a-w c:\windows\unvise32.exe
2009-05-05 16:55 . 2009-05-05 16:55 -------- d-----w c:\program files\SWiSHmax
2009-05-04 11:47 . 2009-05-04 11:49 -------- d-----w c:\program files\Common Files\Justdo
2009-05-04 11:46 . 2009-05-04 11:46 -------- d-----w c:\program files\Justdo Software
2009-04-30 06:36 . 2008-04-14 18:29 53760 ----a-w c:\windows\system32\drivers\vfwwdm32.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-26 12:00 . 2008-08-08 17:35 63626 ----a-w c:\windows\system32\perfc001.dat
2009-05-26 12:00 . 2008-08-08 17:35 340138 ----a-w c:\windows\system32\perfh001.dat
2009-05-26 09:57 . 2009-04-08 21:17 -------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-05-26 05:59 . 2008-08-08 08:00 -------- d--h--w c:\program files\InstallShield Installation Information
2009-05-23 01:42 . 2009-05-22 02:06 -------- d-----w c:\documents and settings\All Users\Application Data\Symantec
2009-05-22 02:09 . 2009-05-22 02:07 -------- d-----w c:\program files\Common Files\Symantec Shared
2009-05-22 02:07 . 2009-05-22 02:06 -------- d-----w c:\documents and settings\All Users\Application Data\Norton
2009-05-22 02:06 . 2009-05-22 02:06 796016 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\CLT\cltLMSx.dll
2009-05-22 02:06 . 2009-05-22 02:06 254824 ----a-r c:\documents and settings\winXP\Application Data\Thinstall\Microsoft Text-to-Speech Engine 4.0 (English)\%ProgramFilesDir%\NORTON 360\ENGINE\3.0.0.135\CCSET.DLL
2009-05-22 02:06 . 2009-05-22 02:06 277864 ----a-r c:\documents and settings\winXP\Application Data\Thinstall\Microsoft Text-to-Speech Engine 4.0 (English)\%ProgramFilesDir%\NORTON 360\ENGINE\3.0.0.135\CCGEVT.DLL
2009-05-22 02:06 . 2009-05-22 02:06 147816 ----a-r c:\documents and settings\winXP\Application Data\Thinstall\Microsoft Text-to-Speech Engine 4.0 (English)\%ProgramFilesDir%\NORTON 360\ENGINE\3.0.0.135\CCIPC.DLL
2009-05-22 02:06 . 2009-05-22 02:06 -------- d-----w c:\program files\Norton 360
2009-05-22 02:06 . 2009-05-22 02:06 -------- d-----w c:\program files\Windows Sidebar
2009-05-22 02:06 . 2009-05-22 02:06 -------- d-----w c:\documents and settings\All Users\Application Data\NortonInstaller
2009-05-22 02:06 . 2009-05-22 02:06 -------- d-----w c:\program files\NortonInstaller
2009-05-21 09:11 . 2009-04-10 18:05 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-04-30 12:49 . 2009-04-08 21:12 191560 ----a-w c:\documents and settings\winXP\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-04-29 14:40 . 2009-04-08 21:12 -------- d-----w c:\documents and settings\winXP\Application Data\Skype
2009-04-29 14:37 . 2009-04-10 15:08 -------- d-----w c:\documents and settings\winXP\Application Data\skypePM
2009-04-18 10:45 . 2009-04-09 10:19 -------- d-----w c:\program files\Messenger Plus! Live
2009-04-17 06:24 . 2008-08-08 08:12 -------- d-----w c:\program files\Common Files\Adobe
2009-04-14 17:20 . 2008-08-08 08:12 -------- d-----w c:\program files\Windows Live
2009-04-14 17:14 . 2009-04-14 17:14 -------- d-----w c:\program files\Microsoft Sync Framework
2009-04-13 17:45 . 2009-04-09 18:44 -------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-04-11 13:35 . 2009-04-11 13:35 0 ----a-w c:\windows\nsreg.dat
2009-04-10 18:05 . 2009-04-10 18:02 -------- d-----w c:\program files\Google
2009-04-10 15:08 . 2009-04-10 15:08 32 ----a-w c:\documents and settings\All Users\Application Data\ezsid.dat
2009-04-10 10:14 . 2008-08-08 07:50 76487 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-04-09 10:20 . 2009-04-09 10:20 2232 ----a-w c:\windows\java\Packages\Data\9F5VNN7V.DAT
2009-04-09 10:20 . 2009-04-09 10:20 155995 ----a-w c:\windows\java\Packages\Q1R5VDF7.ZIP
2009-04-09 10:20 . 2009-04-09 10:20 2678 ----a-w c:\windows\java\Packages\Data\IJVTJ1FD.DAT
2009-04-09 10:20 . 2009-04-09 10:20 2678 ----a-w c:\windows\java\Packages\Data\U9713BTV.DAT
2009-04-09 10:20 . 2009-04-09 10:20 2678 ----a-w c:\windows\java\Packages\Data\80JDBF1Z.DAT
2009-04-09 10:20 . 2009-04-09 10:20 2678 ----a-w c:\windows\java\Packages\Data\6QOT3H7R.DAT
2009-04-09 10:20 . 2009-04-09 10:20 2678 ----a-w c:\windows\java\Packages\Data\4A8WEG97.DAT
2009-04-09 10:15 . 2009-04-09 10:15 -------- d-----w c:\documents and settings\All Users\Application Data\CyberLink
2009-04-09 10:11 . 2009-04-09 10:11 -------- d-----w c:\program files\Windows Live SkyDrive
2009-04-09 10:10 . 2009-04-09 10:10 -------- d-----w c:\program files\Microsoft
2009-04-09 09:23 . 2009-04-09 09:23 -------- d-----w c:\program files\Common Files\Windows Live
2009-04-09 09:17 . 2009-04-09 09:17 -------- d-----w c:\documents and settings\winXP\Application Data\InterVideo
2009-04-08 22:58 . 2009-04-08 22:58 -------- d-----w c:\program files\CyberLink
2009-04-08 22:50 . 2009-04-08 22:50 28664 ----a-w c:\windows\system32\drivers\EMLTDI.SYS
2009-04-08 22:50 . 2009-04-08 22:50 65024 ----a-w c:\windows\system32\drivers\catflt.sys
2009-04-08 22:50 . 2009-04-08 22:50 -------- d-----w c:\program files\Quick Heal
2009-04-08 21:35 . 2009-04-08 21:35 -------- d-----w c:\documents and settings\All Users\Application Data\GRETECH
2009-04-08 21:35 . 2009-04-08 21:35 -------- d-----w c:\documents and settings\winXP\Application Data\GRETECH
2009-04-08 21:35 . 2009-04-08 21:35 -------- d-----w c:\program files\GRETECH
2009-04-08 21:31 . 2009-04-08 21:31 -------- d-----w c:\program files\Common Files\xing shared
2009-04-08 21:31 . 2009-04-08 21:30 -------- d-----w c:\program files\Real
2009-04-08 21:31 . 2009-04-08 21:30 -------- d-----w c:\program files\Common Files\Real
2009-04-08 21:30 . 2009-04-08 21:30 499712 ----a-w c:\windows\system32\msvcp71.dll
2009-04-08 21:30 . 2009-04-08 21:30 348160 ----a-w c:\windows\system32\msvcr71.dll
2009-04-08 21:22 . 2009-04-08 21:22 -------- d-----w c:\program files\Microsoft Works
2009-04-08 21:22 . 2009-04-08 21:22 -------- d-----w c:\program files\MSBuild
2009-04-08 21:21 . 2009-04-08 21:21 -------- d-----w c:\program files\Microsoft.NET
2009-04-08 21:12 . 2009-04-08 21:12 128 ----a-w c:\documents and settings\winXP\Local Settings\Application Data\fusioncache.dat
2009-03-16 20:03 . 2009-03-16 20:03 533880 ----a-w c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\Scxpx86.dll
2008-05-07 13:34 . 2008-08-08 08:20 15523560 ----a-w c:\program files\U1 Setup.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-15 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-04-10 39408]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216]
"Email Protection"="c:\progra~1\QUICKH~1\QUICKH~1\EMLPROUI.EXE" [2009-04-08 267648]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-04-08 185896]
"Tau Monitor"="c:\program files\Agnitum\Tauscan 1.5\Taumon.exe" [2001-04-26 88576]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-15 15360]
c:\documents and settings\All Users\çںê، ں §ڑ\ںé ©ںê¤\ §ک ں颬نïé\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-4-17 113664]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]
@="FSFilter Activity Monitor"
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^Adobe Reader Synchronizer.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\Adobe Reader Synchronizer.lnk
backup=c:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^SuperHybridEngine.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\SuperHybridEngine.lnk
backup=c:\windows\pss\SuperHybridEngine.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^سرعة تشغيل Adobe Reader.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\سرعة تشغيل Adobe Reader.lnk
backup=c:\windows\pss\سرعة تشغيل Adobe Reader.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"4813:TCP"= 4813:TCP:vxqkmnxi
"56188:TCP"= 56188:TCP
ORT_56188
R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\
0300000.087\SymEFA.sys [22/05/2009 05:07 ص 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\N360\
0300000.087\BHDrvx86.sys [22/05/2009 05:07 ص 258608]
R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360\
0300000.087\cchpx86.sys [22/05/2009 05:07 ص 482352]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090513.001\IDSXpx86.sys [22/05/2009 01:49 م 276344]
R2 catflt;catflt;c:\windows\system32\drivers\catflt.sys [09/04/2009 01:50 ص 65024]
R2 EMLSS;EMLSS;c:\windows\system32\drivers\EMLTDI.SYS [09/04/2009 01:50 ص 28664]
R2 N360;Norton 360;c:\program files\Norton 360\Engine\3.0.0.135\ccSvcHst.exe [22/05/2009 05:06 ص 115560]
R2 Quick Heal Total Security Mail Protection;Quick Heal Total Security Mail Protection;c:\progra~1\QUICKH~1\QUICKH~1\EMLPROXY.EXE [09/04/2009 01:50 ص 50560]
R2 Quick Update Service;Quick Update Service;c:\progra~1\QUICKH~1\QUICKH~1\quhlpsvc.exe [09/04/2009 01:50 ص 58752]
R3 AsusACPI;ASUS ACPI Driver;c:\windows\system32\drivers\ASUSACPI.SYS [16/09/2008 12:02 ص 10752]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [22/05/2009 05:07 ص 101936]
R3 Ktp;Elantech Smart-Pad;c:\windows\system32\drivers\ETD.sys [07/08/2008 03:08 م 26112]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1e51x86.sys [07/08/2008 03:08 م 36864]
S2 Online Protection System;Online Protection System;c:\progra~1\QUICKH~1\QUICKH~1\opssvc.exe [09/04/2009 01:50 ص 17280]
S2 Startup Handler;Quick Heal Total Security Startup Handler;c:\progra~1\QUICKH~1\QUICKH~1\strtsvc.exe [09/04/2009 01:50 ص 54656]
S3 diyilxop;diyilxop;\??\c:\windows\system32\
015.tmp --> c:\windows\system32\
015.tmp [?]
S3 gfzlvhp;gfzlvhp;\??\c:\windows\system32\
01.tmp --> c:\windows\system32\
01.tmp [?]
S3 RT80x86;Ralink 802.11n Wireless Driver;c:\windows\system32\drivers\rt2860.sys [08/08/2008 11:01 ص 625024]
S3 sdlgsyet;sdlgsyet;\??\c:\windows\system32\
06.tmp --> c:\windows\system32\
06.tmp [?]
S3 twxojbjm;twxojbjm;\??\c:\windows\system32\
04.tmp --> c:\windows\system32\
04.tmp [?]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
hrrnt
acndsmq
dydanhnd
.
- - - - ORPHANS REMOVED - - - -
SafeBoot-procexp90.Sys
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.bntjazan.net/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://eeepc.asus.com/global
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Save Flash with Flash Catcher - c:\program files\Common Files\Justdo\IECatcher.DLL/FlashCatcher.htm
IE: ت&صدير إلى Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - res://c:\program files\Common Files\Justdo\IECatcher.DLL/FlashCatcher.htm
DPF: Microsoft XML Parser for Java -
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2009-05-26 15:15
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\N360]
"ImagePath"="\"c:\program files\Norton 360\Engine\3.0.0.135\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\3.0.0.135\diMaster.dll\" /prefetch:1"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\diyilxop]
"ImagePath"="\??\c:\windows\system32\
015.tmp"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\gfzlvhp]
"ImagePath"="\??\c:\windows\system32\
01.tmp"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\sdlgsyet]
"ImagePath"="\??\c:\windows\system32\
06.tmp"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\twxojbjm]
"ImagePath"="\??\c:\windows\system32\
04.tmp"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'explorer.exe'(2776)
c:\windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
c:\windows\system32\ieframe.dll
c:\program files\eee storage\xpclient.dll
c:\program files\eee storage\logicnp.eznamespaceextensions.dll
.
Completion time: 2009-05-26 15:17
ComboFix-quarantined-files.txt 2009-05-26 12:17
Pre-Run: 76,052,439,040 bytes free
Post-Run: 76,042,346,496 bytes free
211
