- DDS (Ver_10-03-17.01) - NTFSx86
- Run by mladen at 13:51:57.32 on Sat 03/20/2010
- Internet Explorer: 6.0.2900.2180
- Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.255.29 [GMT 1:00]
- AV: avast! antivirus 4.8.1368 [VPS 100320-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
- ============== Running Processes ===============
- C:\WINDOWS\system32\svchost -k DcomLaunch
- svchost.exe
- C:\WINDOWS\System32\svchost.exe -k netsvcs
- svchost.exe
- svchost.exe
- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
- C:\Program Files\Alwil Software\Avast4\ashServ.exe
- C:\WINDOWS\Explorer.EXE
- C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
- C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
- C:\Program Files\Skype\Phone\Skype.exe
- C:\WINDOWS\system32\spoolsv.exe
- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
- C:\Program Files\Skype\Plugin Manager\skypePM.exe
- C:\WINDOWS\system32\wscntfy.exe
- C:\Program Files\Opera\opera.exe
- C:\Documents and Settings\mladen\My Documents\Programi\dds.scr
- ============== Pseudo HJT Report ===============
- uStart Page = hxxp://www.google.rs/
- BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
- uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
- uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
- mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe
- mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
- mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
- StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
- IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe
- IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
- TCP: {AC775E57-2245-4E17-8E30-BE5791E0F543} = 194.106.162.2 194.106.162.10
- Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
- ================= FIREFOX ===================
- FF - ProfilePath - c:\docume~1\mladen\applic~1\mozilla\firefox\profiles\xukmwvyp.default\
- FF - prefs.js: browser.startup.homepage - hxxp://www.google.rs
- ---- FIREFOX POLICIES ----
- c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
- c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
- c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
- c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
- c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
- c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
- c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
- c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
- c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
- c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
- c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
- c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
- c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
- c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
- c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
- c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
- c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
- c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
- c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
- c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
- c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
- c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
- ============= SERVICES / DRIVERS ===============
- R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2010-3-4 114768]
- R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2010-3-4 20560]
- R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2010-3-1 138680]
- R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2010-3-1 254040]
- R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2010-3-1 352920]
- S2 smdqqzl;jnzezshb;c:\windows\system32\svchost.exe -k netsvcs [2004-8-3 14336]
- S3 veillct;veillct;\??\c:\windows\system32\01.tmp --> c:\windows\system32\01.tmp [?]
- =============== Created Last 30 ================
- ==================== Find3M ====================
- 2010-03-01 16:25:36 2923 ----a-w- c:\windows\system32\unins000.dat
- 2010-03-01 16:25:30 716153 ----a-w- c:\windows\system32\unins000.exe
- 2010-03-01 15:47:42 21640 ----a-w- c:\windows\system32\emptyregdb.dat
- 2004-08-03 22:56:44 165025 --sha-r- c:\windows\system32\vkgqwr.dll
- ============= FINISH: 13:52:29.26 ===============
