API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Sep 21st, 2017
95
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 21.53 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 11-07-03.04 - user 07/04/2011 9:18.1.4 - x64
  2. Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3894.2261 [GMT -4:00]
  3. Running from: c:\users\user\Downloads\ComboFix.exe
  4. SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  5. .
  6. .
  7. ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
  8. .
  9. .
  10. c:\users\user\AppData\Roaming\SQLite3.dll
  11. c:\users\user\AppData\Roaming\TSRqwlBdAY.exe
  12. c:\users\user\AppData\Roaming\userlog.dat
  13. c:\windows\SysWow64\NTVBSvcW.tlb
  14. c:\windows\SysWow64\windir
  15. c:\windows\SysWow64\windir\Svchost.exe
  16. .
  17. .
  18. ((((((((((((((((((((((((( Files Created from 2011-06-04 to 2011-07-04 )))))))))))))))))))))))))))))))
  19. .
  20. .
  21. 2011-07-04 13:24 . 2011-07-04 13:24 -------- d-----w- c:\users\Guest\AppData\Local\temp
  22. 2011-07-04 13:24 . 2011-07-04 13:24 -------- d-----w- c:\users\Default\AppData\Local\temp
  23. 2011-07-04 05:51 . 2011-07-04 05:51 -------- d-----w- C:\_OTL
  24. 2011-07-04 02:58 . 2011-07-04 02:58 -------- d-----w- c:\users\user\AppData\Local\{591CDD15-A45D-48F7-A5BB-75695ACC9663}
  25. 2011-07-03 15:17 . 2011-07-03 15:17 -------- d-----w- c:\program files (x86)\Common Files\Java
  26. 2011-07-03 14:58 . 2011-07-03 14:58 -------- d-----w- c:\users\user\AppData\Local\{519E8B05-A52E-461F-8E40-45289A174775}
  27. 2011-07-01 18:23 . 2011-06-07 17:10 8873296 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{15FBE592-CD28-4F2B-AF1E-6B6C2037F2B1}\mpengine.dll
  28. 2011-06-27 18:21 . 2011-06-27 18:21 -------- d-----w- c:\users\TEMP
  29. 2011-06-27 01:17 . 2011-06-27 01:17 -------- d-----w- c:\program files\CCleaner
  30. 2011-06-26 16:19 . 2011-06-26 16:19 -------- d-----w- c:\windows\system32\SPReview
  31. 2011-06-26 16:18 . 2011-06-26 16:18 -------- d-----w- c:\windows\system32\EventProviders
  32. 2011-06-26 14:21 . 2011-06-26 14:21 -------- d-----w- c:\users\user\AppData\Local\{BF2C6C2E-B11C-4054-81F5-B7F210395BA1}
  33. 2011-06-25 16:07 . 2011-06-25 16:07 -------- d-----w- c:\users\user\AppData\Local\{954DB421-74F1-4618-B1B4-7B78BF17F699}
  34. 2011-06-25 01:56 . 2011-06-25 01:56 -------- d-----w- c:\users\user\AppData\Local\{CC1D75F7-6B79-4D0C-BB9F-6060DEF42BDE}
  35. 2011-06-24 15:22 . 2010-11-20 13:33 951680 ----a-w- c:\windows\system32\drivers\ndis.sys
  36. 2011-06-24 15:21 . 2010-11-20 13:27 182784 ----a-w- c:\windows\system32\WUDFPlatform.dll
  37. 2011-06-24 15:18 . 2010-11-20 13:27 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll
  38. 2011-06-24 15:18 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
  39. 2011-06-24 15:18 . 2010-11-20 13:27 1225216 ----a-w- c:\windows\system32\wbem\wbemcore.dll
  40. 2011-06-24 15:18 . 2010-11-20 13:27 933376 ----a-w- c:\windows\system32\SmiEngine.dll
  41. 2011-06-24 15:18 . 2010-11-20 13:25 199168 ----a-w- c:\windows\system32\PkgMgr.exe
  42. 2011-06-24 15:18 . 2010-11-20 13:26 422912 ----a-w- c:\windows\system32\drvstore.dll
  43. 2011-06-24 15:18 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll
  44. 2011-06-21 01:51 . 2011-06-21 01:51 539968 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
  45. 2011-06-17 23:00 . 2011-06-17 23:00 -------- d-----w- c:\programdata\{E91883C8-8CDC-46A4-A45F-CB40EB82ED60}
  46. 2011-06-17 22:47 . 2011-05-28 03:30 1638912 ----a-w- c:\windows\system32\mshtml.tlb
  47. 2011-06-10 23:12 . 2011-06-10 23:13 -------- d-----w- c:\program files\iTunes
  48. 2011-06-10 23:12 . 2011-06-10 23:12 -------- d-----w- c:\program files\iPod
  49. 2011-06-08 03:24 . 2011-06-08 03:24 -------- d-----w- c:\users\user\AppData\Local\{7885564D-02BC-4FE7-B0F7-769DB9DF967A}
  50. 2011-06-05 22:24 . 2011-06-05 22:24 -------- d-----w- c:\program files (x86)\MSXML 4.0
  51. 2011-06-04 18:17 . 2011-06-04 18:17 -------- d-----w- c:\users\user\AppData\Local\HP
  52. 2011-06-04 18:16 . 2011-06-04 18:17 -------- d-----w- c:\users\user\AppData\Roaming\HP
  53. 2011-06-04 18:16 . 2011-06-04 18:16 -------- d-----w- c:\programdata\WEBREG
  54. 2011-06-04 18:15 . 2011-06-04 18:15 -------- d-----w- c:\users\user\AppData\Roaming\Yahoo!
  55. 2011-06-04 18:15 . 2011-07-04 05:08 -------- d-----w- c:\program files (x86)\Yahoo!
  56. 2011-06-04 18:14 . 2011-06-04 18:14 -------- d-----w- c:\programdata\HP Product Assistant
  57. 2011-06-04 18:13 . 2011-06-04 18:13 -------- d-----w- c:\windows\SysWow64\spool
  58. 2011-06-04 18:12 . 2011-06-04 18:12 -------- d-----w- c:\program files (x86)\Common Files\Hewlett-Packard
  59. 2011-06-04 18:12 . 2011-06-04 18:12 -------- d-----w- c:\program files (x86)\Common Files\HP
  60. 2011-06-04 18:10 . 2011-06-04 18:10 -------- d-----w- c:\program files\HP
  61. 2011-06-04 18:09 . 2011-06-04 18:16 -------- d-----w- c:\programdata\HP
  62. 2011-06-04 18:09 . 2009-07-08 10:51 642360 ----a-w- c:\windows\system32\hpzids40.dll
  63. 2011-06-04 17:54 . 2007-05-24 01:26 100352 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HPZPPLHN.DLL
  64. .
  65. .
  66. .
  67. (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
  68. .
  69. 2011-06-26 16:27 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
  70. 2011-06-26 16:27 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
  71. 2011-06-21 01:52 . 2011-05-29 22:31 737072 ----a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll
  72. 2011-06-21 01:51 . 2011-05-29 22:31 4283672 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
  73. 2011-06-21 01:51 . 2011-05-29 22:31 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
  74. 2011-05-30 01:31 . 2011-05-30 01:31 737072 ----a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-2\Microsoft.MediaCenter.Sports.UI.dll
  75. 2011-05-30 01:21 . 2011-05-30 01:21 4283672 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
  76. 2011-05-30 01:20 . 2011-05-30 01:20 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
  77. 2011-05-29 22:30 . 2011-05-29 22:30 539968 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
  78. 2011-05-29 13:11 . 2010-10-18 02:59 39984 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
  79. 2011-05-29 13:11 . 2010-10-18 02:59 25912 ----a-w- c:\windows\system32\drivers\mbam.sys
  80. 2011-05-24 23:14 . 2010-10-15 21:55 270720 ------w- c:\windows\system32\MpSigStub.exe
  81. 2011-05-10 12:06 . 2011-05-10 12:06 51712 ----a-w- c:\windows\system32\drivers\usbaapl64.sys
  82. 2011-05-10 12:06 . 2011-05-10 12:06 4517664 ----a-w- c:\windows\system32\usbaaplrc.dll
  83. 2011-05-04 08:52 . 2010-10-16 01:17 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
  84. 2011-04-25 13:34 . 2011-04-25 13:34 159080 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10138.bin
  85. 2011-04-22 22:15 . 2011-05-24 23:57 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
  86. 2011-04-09 22:55 . 2011-04-09 22:55 15453336 ----a-w- c:\windows\SysWow64\xlive.dll
  87. 2011-04-09 22:55 . 2011-04-09 22:55 13642904 ----a-w- c:\windows\SysWow64\xlivefnt.dll
  88. 2011-04-09 07:02 . 2011-05-10 19:59 5562240 ----a-w- c:\windows\system32\ntoskrnl.exe
  89. 2011-04-09 06:58 . 2011-05-17 07:00 142336 ----a-w- c:\windows\system32\poqexec.exe
  90. 2011-04-09 06:02 . 2011-05-10 19:58 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
  91. 2011-04-09 06:02 . 2011-05-10 19:58 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
  92. 2011-04-09 05:56 . 2011-05-17 07:00 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
  93. 2011-04-06 20:26 . 2011-04-06 20:26 96544 ----a-w- c:\windows\system32\dnssd.dll
  94. 2011-04-06 20:26 . 2011-04-06 20:26 69408 ----a-w- c:\windows\system32\jdns_sd.dll
  95. 2011-04-06 20:26 . 2011-04-06 20:26 237856 ----a-w- c:\windows\system32\dnssdX.dll
  96. 2011-04-06 20:26 . 2011-04-06 20:26 119584 ----a-w- c:\windows\system32\dns-sd.exe
  97. 2011-04-06 20:20 . 2011-04-06 20:20 91424 ----a-w- c:\windows\SysWow64\dnssd.dll
  98. 2011-04-06 20:20 . 2011-04-06 20:20 75040 ----a-w- c:\windows\SysWow64\jdns_sd.dll
  99. 2011-04-06 20:20 . 2011-04-06 20:20 197920 ----a-w- c:\windows\SysWow64\dnssdX.dll
  100. 2011-04-06 20:20 . 2011-04-06 20:20 107808 ----a-w- c:\windows\SysWow64\dns-sd.exe
  101. .
  102. .
  103. ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
  104. .
  105. .
  106. *Note* empty entries & legit default entries are not shown
  107. REGEDIT4
  108. .
  109. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  110. "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-06-07 421160]
  111. "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
  112. .
  113. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  114. "ConsentPromptBehaviorAdmin"= 5 (0x5)
  115. "ConsentPromptBehaviorUser"= 3 (0x3)
  116. "EnableUIADesktopToggle"= 0 (0x0)
  117. .
  118. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
  119. "AppInit_DLLs"=c:\progra~2\Google\GOOGLE~4\GoogleDesktopNetwork3.dll
  120. .
  121. [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
  122. Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
  123. .
  124. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
  125. @="Driver"
  126. .
  127. R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
  128. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  129. R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 136176]
  130. R2 RtVOsdService;RtVOsdService Installer;c:\program files\Realtek\RtVOsd\RtVOsdService.exe [2010-06-24 315392]
  131. R3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-02-25 227896]
  132. R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2010-11-03 30192]
  133. R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 136176]
  134. R3 iscFlash;iscFlash;c:\users\user\AppData\Local\Temp\7zS9814.tmp\iscflashx64.sys [x]
  135. R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
  136. R3 NPF;WinPcap Packet Driver (NPF);c:\windows\system32\drivers\NPF.sys [x]
  137. R3 OXYGEN;Service for M-Audio Oxygen;c:\windows\system32\DRIVERS\MAudioOxygen.sys [x]
  138. R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-09-23 225280]
  139. R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
  140. R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
  141. R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
  142. R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
  143. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
  144. R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
  145. R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
  146. R3 WMZuneComm;Zune Windows Mobile Connectivity Service;c:\program files\Zune\WMZuneComm.exe [2010-11-11 306416]
  147. R3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x]
  148. R3 WSDScan;WSD Scan Support via UMB;c:\windows\system32\DRIVERS\WSDScan.sys [x]
  149. R3 X6va003;X6va003;c:\users\user\AppData\Local\Temp\003B7F1.tmp [x]
  150. R3 ysusb64;Yamaha Steinberg USB Audio;c:\windows\system32\drivers\ysusb64.sys [x]
  151. R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
  152. R4 SureThing Labelflash service;SureThing Labelflash service;c:\program files (x86)\Common Files\SureThing Shared\stllssvr.exe [2009-01-30 74392]
  153. R4 TeamViewer5;TeamViewer 5;c:\program files (x86)\TeamViewer\Version5\TeamViewer_Service.exe [2010-10-19 2011944]
  154. S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
  155. S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
  156. S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x]
  157. S2 DigiNet;Digidesign Ethernet Support;c:\windows\system32\DRIVERS\diginet.sys [x]
  158. S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-01-25 92216]
  159. S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640]
  160. S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2009-12-08 5009920]
  161. S2 OxygenAudioDevMon;Oxygen Audio Device Monitor;c:\program files (x86)\M-Audio\Oxygen\AudioDevMon.exe [2010-03-04 1632776]
  162. S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-04-01 2271608]
  163. S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2320920]
  164. S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
  165. S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
  166. S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
  167. S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
  168. S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
  169. .
  170. .
  171. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
  172. hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
  173. .
  174. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
  175. 2010-09-16 18:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
  176. .
  177. Contents of the 'Scheduled Tasks' folder
  178. .
  179. 2011-07-04 c:\windows\Tasks\Google Software Updater.job
  180. - c:\program files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-11-03 03:52]
  181. .
  182. 2011-07-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  183. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 17:44]
  184. .
  185. 2011-07-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  186. - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 17:44]
  187. .
  188. 2011-07-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3104123279-3791109592-1775583593-1000Core.job
  189. - c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2010-10-15 21:50]
  190. .
  191. 2011-07-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3104123279-3791109592-1775583593-1000UA.job
  192. - c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2010-10-15 21:50]
  193. .
  194. 2011-07-04 c:\windows\Tasks\HPCeeScheduleForuser.job
  195. - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07 12:22]
  196. .
  197. .
  198. --------- x86-64 -----------
  199. .
  200. .
  201. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  202. "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-11 162328]
  203. "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-11 386584]
  204. "Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-11 417304]
  205. .
  206. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
  207. "LoadAppInit_DLLs"=0x0
  208. .
  209. ------- Supplementary Scan -------
  210. .
  211. uLocal Page = c:\windows\system32\blank.htm
  212. mLocal Page = c:\windows\SysWOW64\blank.htm
  213. uInternet Settings,ProxyOverride = *.local
  214. IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000
  215. TCP: DhcpNameServer = 10.0.0.1
  216. FF - ProfilePath - c:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\j8sutrtr.default\
  217. FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
  218. FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
  219. FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
  220. FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
  221. FF - Ext: DownThemAll!: {DDC359D1-844A-42a7-9AA1-88A850A938A8} - %profile%\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
  222. FF - Ext: FlashGot: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} - %profile%\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
  223. FF - Ext: FacePAD: Facebook Photo Album Downloader: facepad@lazyrussian.com - %profile%\extensions\facepad@lazyrussian.com
  224. FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com
  225. FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
  226. FF - user.js: network.protocol-handler.warn-external.dnupdate - false
  227. .
  228. - - - - ORPHANS REMOVED - - - -
  229. .
  230. URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
  231. Wow6432Node-HKCU-Run-StartUp Name - c:\users\user\AppData\Roaming\TSRqwlBdAY.exe
  232. HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
  233. AddRemove-{2AAC4085-DCBF-417B-AEBD-182197839240} - c:\programdata\{849DD083-B349-4E44-A4E6-B8E8DCED3B0A}\Traktor Setup PC.exe
  234. AddRemove-{E92D47A1-D27D-430A-8368-0BAFD956507D} - c:\program files (x86)\InstallShield Installation Information\{E92D47A1-D27D-430A-8368-0BAFD956507D}\setup.exe
  235. .
  236. .
  237. .
  238. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va003]
  239. "ImagePath"="\??\c:\users\user\AppData\Local\Temp\003B7F1.tmp"
  240. .
  241. --------------------- LOCKED REGISTRY KEYS ---------------------
  242. .
  243. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
  244. @Denied: (A 2) (Everyone)
  245. @="FlashBroker"
  246. "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
  247. .
  248. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
  249. "Enabled"=dword:00000001
  250. .
  251. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
  252. @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
  253. .
  254. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
  255. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  256. .
  257. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  258. @Denied: (A 2) (Everyone)
  259. @="Shockwave Flash Object"
  260. .
  261. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  262. @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
  263. "ThreadingModel"="Apartment"
  264. .
  265. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  266. @="0"
  267. .
  268. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  269. @="ShockwaveFlash.ShockwaveFlash.10"
  270. .
  271. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  272. @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
  273. .
  274. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  275. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  276. .
  277. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  278. @="1.0"
  279. .
  280. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  281. @="ShockwaveFlash.ShockwaveFlash"
  282. .
  283. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  284. @Denied: (A 2) (Everyone)
  285. @="Macromedia Flash Factory Object"
  286. .
  287. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  288. @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
  289. "ThreadingModel"="Apartment"
  290. .
  291. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  292. @="FlashFactory.FlashFactory.1"
  293. .
  294. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  295. @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
  296. .
  297. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  298. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  299. .
  300. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  301. @="1.0"
  302. .
  303. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  304. @="FlashFactory.FlashFactory"
  305. .
  306. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
  307. @Denied: (A 2) (Everyone)
  308. @="IFlashBroker3"
  309. .
  310. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
  311. @="{00020424-0000-0000-C000-000000000046}"
  312. .
  313. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
  314. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  315. "Version"="1.0"
  316. .
  317. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  318. @Denied: (Full) (Everyone)
  319. .
  320. ------------------------ Other Running Processes ------------------------
  321. .
  322. c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  323. c:\program files (x86)\Bonjour\mDNSResponder.exe
  324. c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
  325. c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  326. .
  327. **************************************************************************
  328. .
  329. Completion time: 2011-07-04 09:31:42 - machine was rebooted
  330. ComboFix-quarantined-files.txt 2011-07-04 13:31
  331. .
  332. Pre-Run: 167,217,143,808 bytes free
  333. Post-Run: 167,078,739,968 bytes free
  334. .
  335. - - End Of File - - 18ADE53F0C6242BDDDDA606408A75289
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!