Guest
Public paste!

Untitled

By: a guest | Mar 20th, 2010 | Syntax: None | Size: 6.98 KB | Hits: 146 | Expires: Never
Copy text to clipboard
  1. DDS (Ver_10-03-17.01) - NTFSx86  
  2. Run by mladen at 13:51:57.32 on Sat 03/20/2010
  3. Internet Explorer: 6.0.2900.2180
  4. Microsoft Windows XP Professional  5.1.2600.2.1252.1.1033.18.255.29 [GMT 1:00]
  5.  
  6. AV: avast! antivirus 4.8.1368 [VPS 100320-0] *On-access scanning enabled* (Updated)   {7591DB91-41F0-48A3-B128-1A293FD8233D}
  7.  
  8. ============== Running Processes ===============
  9.  
  10. C:\WINDOWS\system32\svchost -k DcomLaunch
  11. svchost.exe
  12. C:\WINDOWS\System32\svchost.exe -k netsvcs
  13. svchost.exe
  14. svchost.exe
  15. C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  16. C:\Program Files\Alwil Software\Avast4\ashServ.exe
  17. C:\WINDOWS\Explorer.EXE
  18. C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
  19. C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  20. C:\Program Files\Skype\Phone\Skype.exe
  21. C:\WINDOWS\system32\spoolsv.exe
  22. C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  23. C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  24. C:\Program Files\Skype\Plugin Manager\skypePM.exe
  25. C:\WINDOWS\system32\wscntfy.exe
  26. C:\Program Files\Opera\opera.exe
  27. C:\Documents and Settings\mladen\My Documents\Programi\dds.scr
  28.  
  29. ============== Pseudo HJT Report ===============
  30.  
  31. uStart Page = hxxp://www.google.rs/
  32. BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
  33. uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
  34. uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
  35. mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe
  36. mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
  37. mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
  38. StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
  39. IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe
  40. IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
  41. TCP: {AC775E57-2245-4E17-8E30-BE5791E0F543} = 194.106.162.2 194.106.162.10
  42. Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
  43.  
  44. ================= FIREFOX ===================
  45.  
  46. FF - ProfilePath - c:\docume~1\mladen\applic~1\mozilla\firefox\profiles\xukmwvyp.default\
  47. FF - prefs.js: browser.startup.homepage - hxxp://www.google.rs
  48.  
  49. ---- FIREFOX POLICIES ----
  50. c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
  51. c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
  52. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
  53. c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
  54. c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
  55. c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency",   1600);
  56. c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
  57. c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
  58. c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
  59. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug",            false);
  60. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight",       2);
  61. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize",       1);
  62. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
  63. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
  64. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight",   25);
  65. c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight",     5);
  66. c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
  67. c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
  68. c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
  69. c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
  70. c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
  71. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
  72. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
  73. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
  74. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
  75. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
  76. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
  77. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
  78. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
  79. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
  80. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
  81. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
  82. c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
  83.  
  84. ============= SERVICES / DRIVERS ===============
  85.  
  86. R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2010-3-4 114768]
  87. R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2010-3-4 20560]
  88. R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2010-3-1 138680]
  89. R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2010-3-1 254040]
  90. R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2010-3-1 352920]
  91. S2 smdqqzl;jnzezshb;c:\windows\system32\svchost.exe -k netsvcs [2004-8-3 14336]
  92. S3 veillct;veillct;\??\c:\windows\system32\01.tmp --> c:\windows\system32\01.tmp [?]
  93.  
  94. =============== Created Last 30 ================
  95.  
  96.  
  97. ==================== Find3M  ====================
  98.  
  99. 2010-03-01 16:25:36     2923    ----a-w-        c:\windows\system32\unins000.dat
  100. 2010-03-01 16:25:30     716153  ----a-w-        c:\windows\system32\unins000.exe
  101. 2010-03-01 15:47:42     21640   ----a-w-        c:\windows\system32\emptyregdb.dat
  102. 2004-08-03 22:56:44     165025  --sha-r-        c:\windows\system32\vkgqwr.dll
  103.  
  104. ============= FINISH: 13:52:29.26 ===============