API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 11th, 2013
57
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 20.59 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 13-07-11.03 - ivo_kat 1.07.2013. 18:44:45.1.2 - x86
  2. Microsoft Windows 7 Ultimate 6.1.7601.1.1250.385.1033.18.2036.918 [GMT 2:00]
  3. Running from: c:\users\ivo_kat\Downloads\ComboFix.exe
  4. AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
  5. SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
  6. .
  7. .
  8. ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
  9. .
  10. .
  11. c:\program files\BasicServe
  12. c:\program files\BasicServe\basicserve.dll
  13. c:\program files\BasicServe\basicserve.exe
  14. c:\program files\BasicServe\uninstall.exe
  15. c:\programdata\hpe873F.dll
  16. c:\users\ivo_kat\Desktop\ImENik.exe
  17. .
  18. .
  19. ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
  20. .
  21. .
  22. -------\Service_BasicServe Service
  23. -------\Service_BasicServe Service
  24. .
  25. .
  26. ((((((((((((((((((((((((( Files Created from 2013-06-11 to 2013-07-11 )))))))))))))))))))))))))))))))
  27. .
  28. .
  29. 2013-07-11 16:56 . 2013-07-11 16:56 -------- d-----w- c:\users\Default\AppData\Local\temp
  30. 2013-07-11 15:59 . 2013-06-12 04:18 7068072 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1E87F9F4-4AE6-4C9F-AC2B-49330AC086C2}\mpengine.dll
  31. 2013-07-11 15:34 . 2013-06-12 04:18 7068072 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
  32. 2013-06-22 18:52 . 2013-06-22 18:52 -------- d-----w- c:\users\Default\AppData\Local\Google
  33. 2013-06-21 20:45 . 2013-06-21 20:45 724464 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{79F2F046-4851-459E-AA21-4BE18089C2B5}\gapaengine.dll
  34. 2013-06-19 06:37 . 2013-06-19 06:37 -------- d-----w- C:\Upload
  35. 2013-06-19 06:36 . 2013-06-19 06:36 -------- d-----w- c:\users\ivo_kat\.swt
  36. 2013-06-19 06:36 . 2013-07-11 16:13 -------- d-----w- C:\Samsung Link
  37. 2013-06-12 07:44 . 2013-06-08 11:13 2706432 ----a-w- c:\windows\system32\mshtml.tlb
  38. 2013-06-12 07:44 . 2013-06-08 11:41 218112 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
  39. 2013-06-12 05:45 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\system32\d3d11.dll
  40. 2013-06-12 05:45 . 2013-05-10 03:20 24576 ----a-w- c:\windows\system32\cryptdlg.dll
  41. 2013-06-12 05:45 . 2013-04-26 04:55 492544 ----a-w- c:\windows\system32\win32spl.dll
  42. 2013-06-12 05:45 . 2013-05-13 03:08 903168 ----a-w- c:\windows\system32\certutil.exe
  43. 2013-06-12 05:45 . 2013-05-13 04:45 140288 ----a-w- c:\windows\system32\cryptsvc.dll
  44. 2013-06-12 05:45 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\system32\crypt32.dll
  45. 2013-06-12 05:45 . 2013-05-13 04:45 103936 ----a-w- c:\windows\system32\cryptnet.dll
  46. 2013-06-12 05:45 . 2013-05-13 03:08 43008 ----a-w- c:\windows\system32\certenc.dll
  47. 2013-06-12 05:45 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
  48. 2013-06-12 05:44 . 2013-05-06 05:06 3968872 ----a-w- c:\windows\system32\ntkrnlpa.exe
  49. 2013-06-12 05:44 . 2013-05-06 05:06 3913576 ----a-w- c:\windows\system32\ntoskrnl.exe
  50. 2013-06-12 05:44 . 2013-05-08 05:38 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys
  51. .
  52. .
  53. .
  54. (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
  55. .
  56. 2013-07-11 15:58 . 2013-03-25 12:23 1235 ----a-w- c:\windows\DeleteOnReboot.bat
  57. 2013-06-11 18:55 . 2012-04-03 17:10 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
  58. 2013-06-11 18:55 . 2011-08-01 08:12 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
  59. 2013-06-08 19:30 . 2011-02-04 10:59 86888 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
  60. 2013-06-08 19:30 . 2011-02-04 10:59 53064 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
  61. 2013-06-08 19:30 . 2011-02-04 10:59 31560 ----a-w- c:\windows\system32\LMIport.dll
  62. 2013-06-08 19:30 . 2011-02-04 10:59 92488 ----a-w- c:\windows\system32\LMIinit.dll
  63. 2013-05-30 07:17 . 2011-02-04 10:59 86888 ----a-w- c:\windows\system32\LMIRfsClientNP.dll.000.bak
  64. 2013-05-21 12:21 . 2011-03-26 08:17 724464 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
  65. 2013-05-02 15:28 . 2011-02-01 08:41 238872 ------w- c:\windows\system32\MpSigStub.exe
  66. 2013-04-15 16:53 . 2013-04-15 16:53 46592 ----a-w- c:\windows\system32\boost_thread-vc90-mt-1_47.dll
  67. 2013-04-15 16:53 . 2013-04-15 16:53 38912 ----a-w- c:\windows\system32\boost_date_time-vc90-mt-1_47.dll
  68. 2013-04-15 16:52 . 2013-04-15 16:52 227840 ----a-w- c:\windows\system32\boost_serialization-vc90-mt-1_47.dll
  69. 2013-04-15 16:52 . 2013-04-15 16:52 704000 ----a-w- c:\windows\system32\boost_regex-vc90-mt-1_47.dll
  70. 2013-04-15 16:52 . 2013-04-15 16:52 12800 ----a-w- c:\windows\system32\boost_system-vc90-mt-1_47.dll
  71. 2013-04-15 16:52 . 2013-04-15 16:52 130048 ----a-w- c:\windows\system32\boost_filesystem-vc90-mt-1_47.dll
  72. 2013-04-13 04:45 . 2013-05-15 05:53 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
  73. 2013-04-13 04:45 . 2013-05-15 05:53 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
  74. .
  75. .
  76. ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
  77. .
  78. .
  79. *Note* empty entries & legit default entries are not shown
  80. REGEDIT4
  81. .
  82. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
  83. @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
  84. [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
  85. 2013-05-25 00:36 130736 ----a-w- c:\users\ivo_kat\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
  86. .
  87. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
  88. @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
  89. [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
  90. 2013-05-25 00:36 130736 ----a-w- c:\users\ivo_kat\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
  91. .
  92. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
  93. @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
  94. [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
  95. 2013-05-25 00:36 130736 ----a-w- c:\users\ivo_kat\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
  96. .
  97. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
  98. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
  99. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
  100. 2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
  101. .
  102. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
  103. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
  104. .
  105. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
  106. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
  107. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
  108. 2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
  109. .
  110. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
  111. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
  112. .
  113. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
  114. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
  115. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
  116. 2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
  117. .
  118. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
  119. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
  120. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
  121. 2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
  122. .
  123. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
  124. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
  125. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
  126. 2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
  127. .
  128. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
  129. @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
  130. [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
  131. 2013-06-06 21:57 578512 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
  132. .
  133. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  134. "MCShield Monitor"="c:\program files\MCShield\mcshieldrtm.exe" [2013-07-07 607744]
  135. "GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2013-06-06 19676256]
  136. "GoogleChromeAutoLaunch_080F0C3054E3F9CE6EB1F6907EE40820"="c:\users\ivo_kat\AppData\Local\Google\Chrome\Application\chrome.exe" [2013-06-15 825808]
  137. .
  138. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  139. "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
  140. "LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-09-17 63048]
  141. "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
  142. "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-11 59280]
  143. "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 947152]
  144. "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-10-25 421888]
  145. "Mouse Suite 98 Daemon"="ICO.EXE" [2004-07-14 57344]
  146. "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 141848]
  147. "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592]
  148. "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 150552]
  149. "Samsung Link"="c:\program files\Samsung\Samsung Link\utils\Samsung Link Launcher.exe" [2013-05-09 407384]
  150. .
  151. c:\users\ivo_kat\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  152. Dropbox.lnk - c:\users\ivo_kat\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968]
  153. OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680]
  154. .
  155. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  156. "ConsentPromptBehaviorAdmin"= 5 (0x5)
  157. "ConsentPromptBehaviorUser"= 3 (0x3)
  158. "EnableUIADesktopToggle"= 0 (0x0)
  159. .
  160. [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
  161. "aux"=wdmaud.drv
  162. .
  163. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
  164. @="Service"
  165. .
  166. R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-01-08 161536]
  167. R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-02-06 83864]
  168. R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2008-12-13 36608]
  169. R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2011-04-05 13224]
  170. R3 netr28u;D-Link dnetr28u USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\Dnetr28u.sys [2009-08-06 750592]
  171. R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
  172. R3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
  173. R3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
  174. R3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
  175. R3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
  176. R3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
  177. R3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
  178. R3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
  179. R3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\system32\DRIVERS\s0017bus.sys [2008-10-21 86824]
  180. R3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0017mdfl.sys [2008-10-21 15016]
  181. R3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0017mdm.sys [2008-10-21 114600]
  182. R3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0017mgmt.sys [2008-10-21 108328]
  183. R3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0017obex.sys [2008-10-21 104616]
  184. R3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\system32\DRIVERS\s0017unic.sys [2008-10-21 109736]
  185. R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-02-06 181784]
  186. R3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudserd.sys [2013-02-06 181912]
  187. R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
  188. R3 TsUsbFlt;TsUsbFlt; [x]
  189. S1 MpKsl390b897e;MpKsl390b897e;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{1E87F9F4-4AE6-4C9F-AC2B-49330AC086C2}\MpKsl390b897e.sys [2013-07-11 29904]
  190. S2 AllShare Framework DMS;AllShare Framework DMS;c:\program files\Samsung\AllShare Framework DMS\1.3.09\AllShareFrameworkManagerDMS.exe [2013-05-03 404360]
  191. S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [2013-06-08 375120]
  192. S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\RaInfo.sys [2013-05-30 13624]
  193. S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 100328]
  194. S3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 295232]
  195. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
  196. S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
  197. .
  198. .
  199. --- Other Services/Drivers In Memory ---
  200. .
  201. *NewlyCreated* - MBAMPROTECTOR
  202. *NewlyCreated* - WS2IFSL
  203. .
  204. Contents of the 'Scheduled Tasks' folder
  205. .
  206. 2013-07-11 c:\windows\Tasks\Adobe Flash Player Updater.job
  207. - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 18:55]
  208. .
  209. 2013-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  210. - c:\program files\Google\Update\GoogleUpdate.exe [2011-02-04 10:49]
  211. .
  212. 2013-07-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  213. - c:\program files\Google\Update\GoogleUpdate.exe [2011-02-04 10:49]
  214. .
  215. 2013-07-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-560992438-1326281723-2405471699-1000Core.job
  216. - c:\users\ivo_kat\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-01 06:15]
  217. .
  218. 2013-07-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-560992438-1326281723-2405471699-1000UA.job
  219. - c:\users\ivo_kat\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-01 06:15]
  220. .
  221. .
  222. ------- Supplementary Scan -------
  223. .
  224. uStart Page = hxxp://www.google.com
  225. uDefault_Search_URL = hxxp://www.google.com
  226. mSearch Bar = hxxp://www.google.com
  227. IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
  228. IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
  229. TCP: DhcpNameServer = 212.39.98.164 212.39.98.163
  230. DPF: {304171C0-65EA-4B51-B5D9-93A311E26EB1} - hxxp://212.39.127.254:8010/cgi-bin/MxPEG_ActiveX.cab?dummy=787669
  231. DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://212.92.202.121/activex/AMC.cab
  232. FF - ProfilePath - c:\users\ivo_kat\AppData\Roaming\Mozilla\Firefox\Profiles\humrmflq.default\
  233. .
  234. - - - - ORPHANS REMOVED - - - -
  235. .
  236. ShellIconOverlayIdentifiers-{2012DE06-50C0-48BD-ACDE-88F95D4CAD1F} - (no file)
  237. ShellIconOverlayIdentifiers-{C72C6188-BEF2-46E5-A89A-52F0ED75219E} - (no file)
  238. ShellIconOverlayIdentifiers-{C92F6BC2-AF61-4C0E-80E0-939B8282DDB7} - (no file)
  239. ShellIconOverlayIdentifiers-{CB1EFEF8-D5E0-49D1-B768-41B48B1D7803} - (no file)
  240. AddRemove-BasicServe - c:\program files\BasicServe\uninstall.exe
  241. AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
  242. AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
  243. AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
  244. AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
  245. AddRemove-05_Sloan - c:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe
  246. AddRemove-06_Spencer - c:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe
  247. AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
  248. AddRemove-08_EMPChipset - c:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe
  249. AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
  250. AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
  251. AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
  252. AddRemove-17_EMP_Chipset2 - c:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe
  253. AddRemove-18_Zinia_Serial_Driver - c:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
  254. AddRemove-19_VIA_driver - c:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe
  255. AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
  256. AddRemove-21_Searsburg - c:\program files\Samsung\USB Drivers\21_Searsburg\Uninstall.exe
  257. AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe
  258. AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
  259. AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
  260. .
  261. .
  262. .
  263. --------------------- LOCKED REGISTRY KEYS ---------------------
  264. .
  265. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  266. @Denied: (A) (Users)
  267. @Denied: (A) (Everyone)
  268. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  269. "BlindDial"=dword:00000000
  270. .
  271. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
  272. @Denied: (A) (Users)
  273. @Denied: (A) (Everyone)
  274. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  275. "BlindDial"=dword:00000000
  276. .
  277. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
  278. @Denied: (A) (Users)
  279. @Denied: (A) (Everyone)
  280. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  281. "BlindDial"=dword:00000000
  282. .
  283. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
  284. @Denied: (A) (Users)
  285. @Denied: (A) (Everyone)
  286. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  287. "BlindDial"=dword:00000000
  288. .
  289. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
  290. @Denied: (A) (Users)
  291. @Denied: (A) (Everyone)
  292. @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  293. "BlindDial"=dword:00000000
  294. .
  295. [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
  296. @Denied: (Full) (Everyone)
  297. .
  298. --------------------- DLLs Loaded Under Running Processes ---------------------
  299. .
  300. - - - - - - - > 'Explorer.exe'(5760)
  301. c:\users\ivo_kat\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
  302. c:\windows\System32\pelscrll.dll
  303. c:\windows\System32\PELCOMM.dll
  304. c:\windows\System32\PELHOOKS.dll
  305. .
  306. ------------------------ Other Running Processes ------------------------
  307. .
  308. c:\windows\system32\nvvsvc.exe
  309. c:\program files\Microsoft Security Client\MsMpEng.exe
  310. c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
  311. c:\program files\Samsung\AllShare Framework DMS\1.3.09\AllShareFrameworkDMS.exe
  312. c:\windows\system32\conhost.exe
  313. c:\program files\LogMeIn\x86\RaMaint.exe
  314. c:\program files\LogMeIn\x86\LogMeIn.exe
  315. c:\windows\system32\taskhost.exe
  316. c:\windows\servicing\TrustedInstaller.exe
  317. c:\windows\system32\conhost.exe
  318. c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe
  319. c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe
  320. c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
  321. c:\windows\System32\ico.exe
  322. c:\windows\System32\FSRremoS.EXE
  323. c:\windows\system32\igfxsrvc.exe
  324. c:\windows\System32\Pelmiced.exe
  325. c:\program files\Samsung\Samsung Link\Samsung Link.exe
  326. c:\users\ivo_kat\AppData\Roaming\Dropbox\bin\Dropbox.exe
  327. c:\program files\Microsoft Office\Office12\ONENOTEM.EXE
  328. c:\program files\Windows Media Player\wmpnetwk.exe
  329. c:\program files\Microsoft Security Client\MpCmdRun.exe
  330. .
  331. **************************************************************************
  332. .
  333. Completion time: 2013-07-11 19:06:33 - machine was rebooted
  334. ComboFix-quarantined-files.txt 2013-07-11 17:06
  335. .
  336. Pre-Run: 100.395.077.632 bytes free
  337. Post-Run: 100.927.139.840 bytes free
  338. .
  339. - - End Of File - - 73C2FE689080F56868621BD95CD9CCF5
  340. A36C5E4F47E84449FF07ED3517B43A31
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!