هذا تقرير ايضاء من برنامج ComboFix
اللي عليه صورة اسد
ComboFix 09-06-05.03 - Good 06/06/2009 0:44.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.966.1025.18.2550.2084 [GMT 3:00]
Running from: c:\documents and settings\Good\سطح المكتب\ComboFix.exe
AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Good\Application Data\addons.dat
c:\program files\Windows Live\Messenger\MsnMsgr.exe
c:\program files\Yahoo!\Messenger\YahooMessenger.exe
c:\windows\101.exe
c:\windows\IE4 Error Log.txt
c:\windows\system32\kakle.dll
.
((((((((((((((((((((((((( Files Created from 2009-05-05 to 2009-06-05 )))))))))))))))))))))))))))))))
.
2009-06-05 21:33 . 2009-06-05 21:33 -------- d-----w- c:\program files\Trend Micro
2009-06-05 21:18 . 2009-06-05 21:18 64000 ----a-w- C:\mspass.exe
2009-06-05 21:17 . 2009-06-05 21:17 33 ----a-w- C:\mspass.bat
2009-06-05 20:59 . 2009-06-05 21:00 294912 ----a-w- C:\kob.exe
2009-06-05 19:06 . 2009-06-05 19:06 -------- d-----w- c:\windows\system32\??
2009-06-05 05:25 . 2009-06-05 05:25 -------- d-----w- c:\documents and settings\Good\Local Settings\Application Data\Identities
2009-06-05 04:57 . 2009-06-05 04:57 -------- d-----w- c:\documents and settings\Good\Application Data\vlc
2009-06-05 02:53 . 2009-06-05 02:53 -------- d-----w- c:\program files\Hotspot Shield
2009-06-05 02:52 . 2009-06-05 02:52 -------- d-----w- c:\program files\AnchorFree
2009-06-04 21:58 . 2009-06-04 21:58 -------- d--h--w- c:\windows\system32\MsN
2009-06-04 21:55 . 2004-03-29 12:23 90112 ----a-w- c:\windows\unvise32.exe
2009-06-04 21:55 . 2009-06-04 21:55 -------- d-----w- c:\program files\SWiSHmax
2009-06-04 21:54 . 2009-06-04 21:54 120240 ----a-w- c:\documents and settings\Good\Application Data\IDM\idmmzcc2\components\idmmzcc.dll
2009-06-04 21:54 . 2009-06-05 03:54 -------- d-----w- c:\documents and settings\Good\Application Data\IDM
2009-06-04 21:54 . 2009-06-05 21:49 -------- d-----w- c:\documents and settings\Good\Application Data\DMCache
2009-06-04 21:54 . 2009-06-05 20:57 -------- d-----w- c:\program files\Internet Download Manager
2009-06-04 21:53 . 2009-06-04 21:53 -------- d-----w- c:\documents and settings\Good\Local Settings\Application Data\Help
2009-06-04 21:53 . 2009-06-04 21:53 -------- d-----w- c:\program files\GoldWave
2009-06-04 21:52 . 2009-06-04 21:52 -------- d-----w- c:\documents and settings\Good\Application Data\Ipswitch
2009-06-04 21:52 . 2009-06-04 21:52 -------- d-----w- c:\program files\Ipswitch
2009-06-04 21:51 . 2009-06-04 21:51 -------- d-----w- c:\program files\PHP Coder
2009-06-04 21:44 . 2002-10-25 02:17 65536 ----a-w- c:\windows\system32\Crypserv.exe
2009-06-04 21:44 . 1999-06-18 21:49 165888 ----a-w- c:\windows\Ckconfig.exe
2009-06-04 21:44 . 1996-05-03 17:21 27648 ----a-r- c:\windows\Setup_ck.exe
2009-06-04 21:44 . 1996-05-03 15:36 18432 ----a-w- c:\windows\Setup_ck.dll
2009-06-04 21:44 . 1995-07-04 18:33 11776 ----a-w- c:\windows\Ckrfresh.exe
2009-06-04 21:44 . 2002-10-25 02:17 29414 ----a-w- c:\windows\system32\CKLDRV.SYS
2009-06-04 21:44 . 2009-06-04 21:44 818688 ----a-w- c:\windows\system32\K2KLOC.dll
2009-06-04 21:44 . 2009-06-04 21:44 741888 ----a-w- c:\windows\system32\K2KRMT.dll
2009-06-04 21:43 . 2009-06-04 21:43 -------- d-----w- c:\documents and settings\Good\Application Data\Media Player Classic
2009-06-04 21:43 . 2009-06-04 21:51 -------- d-----w- c:\program files\Kelk 2000
2009-06-04 21:33 . 2009-06-05 00:29 -------- d-----w- c:\documents and settings\Good\Contacts
2009-06-04 21:30 . 2009-06-04 21:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-06-04 21:21 . 2009-06-04 21:23 -------- dcsh--w- c:\program files\Common Files\WindowsLiveInstaller
2009-06-04 21:20 . 2009-06-04 21:20 -------- d-----w- c:\documents and settings\All Users\Application Data\WLInstaller
2009-06-04 21:13 . 2005-02-25 03:34 22752 ----a-w- c:\windows\system32\spupdsvc.exe
2009-06-04 21:13 . 2009-06-04 21:13 -------- d--h--w- c:\windows\$hf_mig$
2009-06-04 21:08 . 2001-08-17 13:59 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2009-06-04 21:08 . 2004-08-04 00:55 21504 ----a-w- c:\windows\system32\hidserv.dll
2009-06-04 21:07 . 2004-08-04 00:41 57216 ----a-w- c:\windows\system32\drivers\redbook.sys
2009-06-04 21:07 . 2001-08-17 13:46 6400 ----a-w- c:\windows\system32\drivers\enum1394.sys
2009-06-04 21:06 . 2004-08-03 21:55 73728 -c--a-w- c:\windows\system32\dllcache\usbui.dll
2009-06-04 21:06 . 2004-08-03 21:55 73728 ----a-w- c:\windows\system32\usbui.dll
2009-06-04 21:06 . 2001-09-18 13:30 16256 ----a-w- c:\windows\system32\drivers\battc.sys
2009-06-04 21:06 . 2001-08-17 13:58 9344 ----a-w- c:\windows\system32\drivers\compbatt.sys
2009-06-04 21:06 . 2004-08-03 23:07 14080 ----a-w- c:\windows\system32\drivers\CmBatt.sys
2009-06-04 21:06 . 2004-08-03 23:07 8832 ----a-w- c:\windows\system32\drivers\wmiacpi.sys
2009-06-04 21:04 . 2002-08-29 06:30 5632 -c--a-w- c:\windows\system32\dllcache\kbdheb.dll
2009-06-04 21:03 . 2008-10-16 11:09 43544 ----a-w- c:\windows\system32\wups2.dll
2009-06-04 21:03 . 2009-06-05 21:44 -------- d--h--w- c:\documents and settings\Default User
2009-06-04 21:03 . 2009-06-04 18:23 -------- d-----w- C:\Documents and Settings
2009-06-04 21:03 . 2009-06-04 18:15 -------- d-----w- c:\documents and settings\All Users
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-05 21:49 . 2009-06-04 20:11 262176 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2009-06-05 21:49 . 2009-06-04 20:11 4072 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2009-06-05 21:49 . 2009-06-04 20:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-06-05 21:47 . 2009-06-04 20:11 2852896 --sha-w- c:\windows\system32\drivers\fidbox.dat
2009-06-05 21:47 . 2009-06-04 20:11 25464 --sha-w- c:\windows\system32\drivers\fidbox.idx
2009-06-05 20:58 . 2002-08-29 06:30 40316 ----a-w- c:\windows\system32\perfc001.dat
2009-06-05 20:58 . 2002-08-29 06:30 251946 ----a-w- c:\windows\system32\perfh001.dat
2009-06-05 06:41 . 2009-06-04 18:23 393880 ----a-w- c:\documents and settings\Good\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-06-04 21:52 . 2009-06-04 18:39 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-04 21:52 . 2009-06-04 18:15 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-04 21:32 . 2009-06-04 19:26 -------- d-----w- c:\program files\Windows Live
2009-06-04 20:52 . 2008-01-29 14:29 33808 ----a-w- c:\windows\system32\drivers\klbg.sys
2009-06-04 20:52 . 2009-06-04 20:12 105395 ----a-w- c:\windows\system32\drivers\klin.dat
2009-06-04 20:52 . 2009-06-04 20:12 94643 ----a-w- c:\windows\system32\drivers\klick.dat
2009-06-04 20:52 . 2009-06-04 20:52 33808 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\klbg.sys
2009-06-04 20:52 . 2009-06-04 20:52 206088 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\avp.exe
2009-06-04 20:52 . 2009-06-04 20:52 226832 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\XP\klif.sys
2009-06-04 20:11 . 2009-06-04 20:11 -------- d-----w- c:\program files\Kaspersky Lab
2009-06-04 20:10 . 2009-06-04 20:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-06-04 20:08 . 2009-06-04 20:08 720896 ----a-w- c:\windows\iun6002.exe
2009-06-04 20:08 . 2009-06-04 20:08 -------- d-----w- c:\program files\Macromedia
2009-06-04 20:06 . 2009-06-04 19:21 -------- d-----w- c:\program files\Common Files\Adobe
2009-06-04 20:04 . 2009-06-04 20:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Adobe Systems
2009-06-04 20:04 . 2009-06-04 20:04 -------- d-----w- c:\program files\Common Files\Adobe Systems Shared
2009-06-04 20:02 . 2009-06-04 20:02 -------- d-----w- c:\program files\Xilisoft
2009-06-04 20:01 . 2009-06-04 20:01 0 ----a-w- c:\windows\nsreg.dat
2009-06-04 19:53 . 2009-06-04 19:53 -------- d-----w- c:\documents and settings\Good\Application Data\ESET
2009-06-04 19:49 . 2009-06-04 19:49 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2009-06-04 19:42 . 2009-06-04 19:42 -------- d-----w- c:\program files\Golden Al-Wafi Translator
2009-06-04 19:42 . 2009-06-04 19:42 172032 ------w- c:\windows\Setup1.exe
2009-06-04 19:42 . 2009-06-04 19:42 73216 ----a-w- c:\windows\ST6UNST.EXE
2009-06-04 19:41 . 2009-06-04 19:41 -------- d-----w- c:\program files\Nero
2009-06-04 19:41 . 2009-06-04 19:41 -------- d-----w- c:\program files\Common Files\Ahead
2009-06-04 19:40 . 2009-06-04 19:40 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-06-04 19:40 . 2009-06-04 19:40 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-06-04 19:39 . 2009-06-04 19:39 -------- d-----w- c:\program files\VideoLAN
2009-06-04 19:38 . 2009-06-04 19:38 -------- d-----w- c:\program files\Common Files\xing shared
2009-06-04 19:38 . 2009-06-04 19:37 -------- d-----w- c:\program files\Real
2009-06-04 19:38 . 2009-06-04 19:37 -------- d-----w- c:\program files\Common Files\Real
2009-06-04 19:34 . 2009-06-04 19:34 -------- d-----w- c:\documents and settings\All Users\Application Data\CyberLink
2009-06-04 19:34 . 2009-06-04 19:34 -------- d-----w- c:\program files\CyberLink
2009-06-04 19:31 . 2009-06-04 19:31 196608 ----a-w- c:\windows\system32\maag.dll
2009-06-04 19:31 . 2009-06-04 19:31 1212416 ----a-w- c:\windows\system32\ckll.dll
2009-06-04 19:31 . 2009-06-04 19:31 90112 ----a-w- c:\windows\system32\agsaami.dll
2009-06-04 19:31 . 2009-06-04 19:31 610304 ----a-w- c:\windows\system32\agsaamg.dll
2009-06-04 19:31 . 2009-06-04 19:31 372736 ----a-w- c:\windows\system32\agsaamc.dll
2009-06-04 19:31 . 2009-06-04 19:31 2535424 ----a-w- c:\windows\system32\agsaamj.dll
2009-06-04 19:31 . 2009-06-04 19:31 1986560 ----a-w- c:\windows\system32\akll.dll
2009-06-04 19:31 . 2009-06-04 19:31 1245184 ----a-w- c:\windows\system32\bkll.dll
2009-06-04 19:31 . 2009-06-04 19:31 -------- d-----w- c:\program files\Real_SC
2009-06-04 19:29 . 2009-06-04 19:29 47104 ------w- c:\windows\AKDeInstall.exe
2009-06-04 19:29 . 2009-06-04 19:29 -------- d-----w- c:\program files\mpegable
2009-06-04 19:29 . 2009-06-04 19:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2009-06-04 19:28 . 2009-06-04 19:28 -------- d-----w- c:\program files\Yahoo!
2009-06-04 19:27 . 2009-06-04 19:27 -------- d-----w- c:\program files\Messenger Plus! Live
2009-06-04 19:24 . 2009-06-04 19:24 2232 ----a-w- c:\windows\java\Packages\Data\FBHVT335.DAT
2009-06-04 19:24 . 2009-06-04 19:24 155995 ----a-w- c:\windows\java\Packages\YKLB5V3X.ZIP
2009-06-04 19:24 . 2009-06-04 19:24 2678 ----a-w- c:\windows\java\Packages\Data\3TR3P77J.DAT
2009-06-04 19:24 . 2009-06-04 19:24 2678 ----a-w- c:\windows\java\Packages\Data\VPNV7TV5.DAT
2009-06-04 19:24 . 2009-06-04 19:24 2678 ----a-w- c:\windows\java\Packages\Data\YP7LZPN1.DAT
2009-06-04 19:24 . 2009-06-04 19:24 2678 ----a-w- c:\windows\java\Packages\Data\NFJRNTZ5.DAT
2009-06-04 19:24 . 2009-06-04 19:24 2678 ----a-w- c:\windows\java\Packages\Data\FDBD79JJ.DAT
2009-06-04 19:19 . 2009-06-04 19:19 -------- d-----w- c:\documents and settings\Good\Application Data\ACD Systems
2009-06-04 19:17 . 2009-06-04 19:17 -------- d-----w- c:\program files\Common Files\ACD Systems
2009-06-04 19:17 . 2009-06-04 19:17 -------- d-----w- c:\documents and settings\All Users\Application Data\ACD Systems
2009-06-04 19:17 . 2009-06-04 19:17 -------- d-----w- c:\program files\ACD Systems
2009-06-04 18:59 . 2009-06-04 18:48 -------- d-----w- c:\program files\Dell
2009-06-04 18:54 . 2009-06-04 18:54 -------- d-----w- c:\program files\WIDCOMM
2009-06-04 18:51 . 2009-06-04 18:38 -------- d-----w- c:\program files\Common Files\InstallShield
2009-06-04 18:47 . 2009-06-04 18:47 -------- d-----w- c:\program files\Broadcom
2009-06-04 18:46 . 2009-06-04 18:46 -------- d-----w- c:\program files\Synaptics
2009-06-04 18:45 . 2009-06-04 18:45 -------- d-----w- c:\program files\CONEXANT
2009-06-04 18:44 . 2009-06-04 18:44 -------- d-----w- c:\program files\DIFX
2009-06-04 18:42 . 2009-06-04 18:42 -------- d-----w- c:\program files\Intel
2009-06-04 18:40 . 2009-06-04 18:40 -------- d-----w- c:\program files\SigmaTel
2009-06-04 18:29 . 2009-06-04 18:29 -------- d-----w- c:\program files\Common Files\L&H
2009-06-04 18:29 . 2009-06-04 18:29 -------- d-----w- c:\program files\Microsoft.NET
2009-06-04 18:29 . 2009-06-04 18:29 -------- d-----w- c:\program files\Microsoft ActiveSync
2009-06-04 18:28 . 2009-06-04 18:28 -------- d-----w- c:\program files\Microsoft Works
2009-06-04 18:16 . 2009-06-04 18:16 -------- d-----w- c:\program files\microsoft frontpage
2009-06-04 18:12 . 2009-06-04 18:12 22144 ----a-w- c:\windows\system32\emptyregdb.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-03 15360]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2008-02-20 2594224]
"AFProg"="c:\program files\AnchorFree\bin\ctrl\AFController.exe" [2006-11-20 81920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-11-29 761947]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2005-12-19 1347584]
"Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2006-08-03 1032192]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" [2009-06-04 206088]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-06-04 185896]
"SigmatelSysTrayApp"="stsystra.exe" - c:\windows\stsystra.exe [2005-11-16 397312]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
c:\documents and settings\All Users\çںê، ں §ڑ\ںé ©ںê¤\ §ک ں颬نïé\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-5-24 622653]
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^Adobe Reader Synchronizer.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\Adobe Reader Synchronizer.lnk
backup=c:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^سرعة تشغيل Adobe Reader.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\سرعة تشغيل Adobe Reader.lnk
backup=c:\windows\pss\سرعة تشغيل Adobe Reader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^Good^قائمة ابدأ^البرامج^بدء التشغيل^Adobe Gamma.lnk]
path=c:\documents and settings\Good\قائمة ابدأ\البرامج\بدء التشغيل\Adobe Gamma.lnk
backup=c:\windows\pss\Adobe Gamma.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29/01/2008 05:29 م 33808]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30/04/2008 05:06 م 24592]
S2 ekrn;ESET Service;"c:\program files\ESET\ESET Smart Security\ekrn.exe" --> c:\program files\ESET\ESET Smart Security\ekrn.exe [?]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{474E2CC9-32D4-1DC8-6CB8-368E9F8E63F0}]
c:\windows\system32\MsN\msnmsgr.exe s
.
- - - - ORPHANS REMOVED - - - -
HKCU-Run-MsnMsgr - c:\program files\Windows Live\Messenger\MsnMsgr.Exe
SafeBoot-procexp90.Sys
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = hxxp://www.google.com/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: تحميل الكل بـ إنترنت داونلود مانيجر - c:\program files\Internet Download Manager\IEGetAll.htm
IE: تحميل بـ إنترنت داونلود مانيجر - c:\program files\Internet Download Manager\IEExt.htm
IE: تحميل محتوى فيديو (إف.إل.في) بـ إنترنت داونلود مانيجر - c:\program files\Internet Download Manager\IEGetVL.htm
DPF: Microsoft XML Parser for Java -
FF - ProfilePath - c:\documents and settings\Good\Application Data\Mozilla\Firefox\Profiles\tmnxar54.default\
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2009-06-06 00:49
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(1576)
c:\windows\System32\BCMLogon.dll
- - - - - - - > 'explorer.exe'(1440)
c:\windows\system32\msi.dll
c:\program files\Internet Download Manager\idmmkb.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\WLTRYSVC.EXE
c:\windows\system32\BCMWLTRY.EXE
c:\program files\WIDCOMM\Bluetooth Software\BTStackServer.exe
c:\program files\Internet Explorer\IEXPLORE.EXE
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\Crypserv.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Dell\QuickSet\NicConfigSvc.exe
c:\program files\CyberLink\Shared files\RichVideo.exe
c:\program files\Internet Download Manager\IEMonitor.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2009-06-05 0:51 - machine was rebooted
ComboFix-quarantined-files.txt 2009-06-05 21:51
Pre-Run: 18,254,282,752 bytes free
Post-Run: 18,572,955,648 bytes free
254
