offline
- nellasa
- Novi MyCity građanin
- Pridružio: 31 Okt 2007
- Poruke: 16
- Gde živiš: Wien
|
Evo me sa drugog kompa posto na mom ne funkcionise Mozila kako treba... ComboFix 08-01-23.1C - sladjan 2008-01-26 18:27:59.3 - NTFSx86 NETWORK
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1151 [GMT 1:00]
Running from: C:\Documents and Settings\sladjan\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\sladjan\Desktop\CFScript
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
C:\WINDOWS\dat.txt
----- BITS: Possible infected sites -----
hxxp://softworldnetwork.com
hxxp://softworldnetwork2.com
.
((((((((((((((((((((((((( Files Created from 2007-12-26 to 2008-01-26 )))))))))))))))))))))))))))))))
.
2008-01-26 16:29 . 2008-01-26 16:29 9,216 --ahs---- C:\WINDOWS\system32\Thumbs.db
2008-01-26 14:35 . 2008-01-26 14:35 <DIR> d-------- C:\WINDOWS\LastGood
2008-01-26 12:08 . 2008-01-26 12:08 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2008-01-25 23:00 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\Nircmd.exe
2008-01-24 21:20 . 2008-01-24 17:59 253,952 --a------ C:\WINDOWS\dpvtporrfd.dll
2008-01-24 21:20 . 2008-01-24 17:59 196,608 --a------ C:\WINDOWS\aswmklt.dll
2008-01-24 21:19 . 2008-01-24 17:59 172,032 --------- C:\WINDOWS\elfwgps.dll
2008-01-24 21:19 . 2008-01-24 17:59 81,920 --a------ C:\WINDOWS\fvqkfsp.exe
2008-01-24 20:39 . 2008-01-24 20:39 <DIR> d-------- C:\Program Files\Giganology
2008-01-24 20:39 . 2006-01-09 15:01 86,016 --a------ C:\WINDOWS\system32\gigagetbho_v10.dll
2008-01-24 15:19 . 2008-01-24 17:45 <DIR> d-------- C:\WINDOWS\VCP_TEMP
2008-01-24 15:19 . 2008-01-26 16:29 <DIR> d-------- C:\WINDOWS\VCP_SAVE
2008-01-24 15:19 . 2008-01-24 15:19 <DIR> d-------- C:\Program Files\Wallpapers
2008-01-24 15:19 . 2008-01-24 15:19 <DIR> d-------- C:\Program Files\Fonts
2008-01-24 15:19 . 2005-09-28 02:31 49,152 --a------ C:\WINDOWS\system32\icon.exe
2008-01-24 11:07 . 2008-01-25 19:55 <DIR> d-------- C:\Program Files\MegauploadToolbar
2008-01-22 23:49 . 2008-01-22 23:49 <DIR> d-------- C:\Program Files\Common Files\Download Manager
2008-01-22 23:49 . 2008-01-24 02:27 <DIR> d-------- C:\Program Files\BitTorrent Acceleration Patch
2008-01-22 23:31 . 2008-01-22 23:31 <DIR> d-------- C:\Program Files\DNA
2008-01-22 23:31 . 2008-01-22 23:31 <DIR> d-------- C:\Program Files\BitTorrent
2008-01-19 15:56 . 2008-01-19 15:56 0 --a------ C:\WINDOWS\ativpsrm.bin
2008-01-19 12:34 . 2008-01-19 12:34 <DIR> d-------- C:\Program Files\IDM Computer Solutions
2008-01-19 11:50 . 2008-01-19 12:38 <DIR> d-------- C:\Program Files\HHD Software
2008-01-18 21:56 . 2008-01-18 21:56 <DIR> d-------- C:\Program Files\GameSpy Arcade
2008-01-17 22:06 . 2008-01-18 17:13 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe
2008-01-17 22:06 . 2008-01-18 17:13 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
2008-01-17 22:06 . 2008-01-18 17:13 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-01-17 21:32 . 2007-03-12 16:42 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll
2008-01-17 21:32 . 2007-03-12 16:42 1,123,696 --a------ C:\WINDOWS\system32\D3DCompiler_33.dll
2008-01-17 21:32 . 2007-03-15 16:57 443,752 --a------ C:\WINDOWS\system32\d3dx10_33.dll
2008-01-17 21:32 . 2007-06-20 20:46 266,088 --a------ C:\WINDOWS\system32\xactengine2_8.dll
2008-01-17 21:32 . 2007-04-04 18:55 261,480 --a------ C:\WINDOWS\system32\xactengine2_7.dll
2008-01-17 21:32 . 2007-01-24 15:27 255,848 --a------ C:\WINDOWS\system32\xactengine2_6.dll
2008-01-17 21:32 . 2007-06-20 20:45 18,280 --a------ C:\WINDOWS\system32\x3daudio1_2.dll
2008-01-17 21:32 . 2007-03-05 12:42 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2008-01-17 13:20 . 2008-01-17 13:20 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2008-01-17 13:18 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
2008-01-17 13:18 . 2007-05-16 16:45 3,497,832 --a------ C:\WINDOWS\system32\d3dx9_34.dll
2008-01-17 13:18 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
2008-01-17 13:18 . 2007-05-16 16:45 1,124,720 --a------ C:\WINDOWS\system32\D3DCompiler_34.dll
2008-01-17 13:18 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
2008-01-17 13:18 . 2007-05-16 16:45 443,752 --a------ C:\WINDOWS\system32\d3dx10_34.dll
2008-01-16 23:59 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2008-01-16 23:59 . 2007-04-04 18:53 81,768 --a------ C:\WINDOWS\system32\xinput1_3.dll
2008-01-16 23:57 . 2008-01-16 23:57 <DIR> d-------- C:\WINDOWS\system32\AGEIA
2008-01-16 23:57 . 2008-01-16 23:57 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-01-16 23:57 . 2008-01-16 23:58 <DIR> d-------- C:\Program Files\AGEIA Technologies
2008-01-15 18:39 . 2008-01-19 12:35 <DIR> d-------- C:\Program Files\MP3 Recorder
2008-01-15 18:39 . 2008-01-25 11:28 <DIR> d-------- C:\Program Files\Guitartab.co.uk MP3 Recorder
2008-01-14 21:39 . 2005-01-09 03:24 246 --a------ C:\WINDOWS\regkey.reg
2008-01-14 21:26 . 2008-01-14 21:26 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-01-14 21:26 . 2008-01-14 21:26 1,409 --a------ C:\WINDOWS\QTFont.for
2008-01-14 14:41 . 2008-01-14 14:41 <DIR> d-------- C:\Program Files\Ahead
2008-01-10 01:24 . 2008-01-10 01:24 <DIR> d-------- C:\Program Files\Electronic Arts
2008-01-04 12:32 . 2008-01-04 12:32 0 --a------ C:\WINDOWS\rkkey.lock
2008-01-04 00:07 . 2008-01-04 00:07 244 --ah----- C:\sqmnoopt06.sqm
2008-01-04 00:07 . 2008-01-04 00:07 232 --ah----- C:\sqmdata06.sqm
2008-01-03 00:16 . 2008-01-03 00:16 <DIR> d-------- C:\Program Files\Common Files\Axara
2008-01-03 00:16 . 2007-12-07 15:34 77,824 --a------ C:\WINDOWS\system32\mslvddsfilter.ax
2008-01-02 19:29 . 2008-01-02 19:41 <DIR> d-------- C:\Program Files\YouTube Downloader
2008-01-01 06:08 . 2008-01-17 13:12 <DIR> d-------- C:\Program Files\Mozilla Thunderbird
2007-12-30 11:38 . 2007-12-30 11:38 <DIR> d-------- C:\Program Files\Eltima Software
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-26 13:34 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-24 14:18 --------- d-----w C:\Program Files\PowerArchiver
2008-01-20 11:13 --------- d-----w C:\Program Files\Di recnik
2008-01-10 23:52 --------- d-----w C:\Program Files\Mozilla Sunbird
2008-01-05 23:21 --------- d-----w C:\Program Files\Metacafe
2008-01-04 17:36 --------- d-----w C:\Program Files\MSN Messenger
2007-12-25 22:19 --------- d-----w C:\Program Files\FlashSlider
2007-12-24 23:35 --------- d-----w C:\Program Files\Net-FM Radio&TV
2007-12-22 11:13 --------- d-----w C:\Program Files\JetAudio
2007-12-21 03:53 2,843,136 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-12-21 03:09 368,640 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll
2007-12-21 03:08 272,384 ----a-w C:\WINDOWS\system32\ati2dvag.dll
2007-12-21 03:02 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll
2007-12-21 02:59 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll
2007-12-21 02:59 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe
2007-12-21 02:59 147,456 ----a-w C:\WINDOWS\system32\atipdlxx.dll
2007-12-21 02:59 122,880 ----a-w C:\WINDOWS\system32\Oemdspif.dll
2007-12-21 02:58 122,880 ----a-w C:\WINDOWS\system32\ati2evxx.dll
2007-12-21 02:57 512,000 ----a-w C:\WINDOWS\system32\ati2evxx.exe
2007-12-21 02:56 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL
2007-12-21 02:53 9,826,304 ----a-w C:\WINDOWS\system32\atioglx2.dll
2007-12-21 02:47 3,120,640 ----a-w C:\WINDOWS\system32\ati3duag.dll
2007-12-21 02:36 1,661,696 ----a-w C:\WINDOWS\system32\ativvaxx.dll
2007-12-21 02:24 46,080 ----a-w C:\WINDOWS\system32\amdpcom32.dll
2007-12-21 02:20 5,435,392 ----a-w C:\WINDOWS\system32\atioglxx.dll
2007-12-21 02:20 385,024 ----a-w C:\WINDOWS\system32\atikvmag.dll
2007-12-21 02:18 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll
2007-12-21 02:17 49,152 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll
2007-12-21 02:15 159,744 ----a-w C:\WINDOWS\system32\atiok3x2.dll
2007-12-21 02:11 499,712 ----a-w C:\WINDOWS\system32\ati2cqag.dll
2007-12-20 20:05 593,920 ------w C:\WINDOWS\system32\ati2sgag.exe
2007-12-19 22:42 --------- d-----w C:\Program Files\DAP
2007-12-19 22:13 --------- d-----w C:\Program Files\AskPBar
2007-12-19 21:28 --------- d-----w C:\Program Files\XviD
2007-12-18 23:29 --------- d-----w C:\Program Files\Apex
2007-12-18 21:38 --------- d-----w C:\Program Files\Google
2007-12-18 18:43 --------- d-----w C:\Program Files\Ashampoo
2007-12-17 17:10 --------- d-----w C:\Program Files\WinAVI Video Converter
2007-12-16 23:14 --------- d-----w C:\Program Files\New Folder
2007-12-14 19:36 --------- d-----w C:\Program Files\DVDx
2007-12-10 21:15 --------- d-----w C:\Program Files\TeamViewer3
2007-12-10 21:10 --------- d-----w C:\Program Files\BPS
2007-12-09 16:09 --------- d-----w C:\Program Files\GameSpy
2007-12-02 21:12 --------- d-----w C:\Program Files\Winamp
2007-12-02 19:47 --------- d-----w C:\Program Files\Common Files\Acronis
2007-12-02 16:29 441,760 ----a-w C:\WINDOWS\system32\drivers\timntr.sys
2007-12-02 16:29 44,384 ----a-w C:\WINDOWS\system32\drivers\tifsfilt.sys
2007-12-02 16:29 368,736 ----a-w C:\WINDOWS\system32\drivers\tdrpman.sys
2007-12-02 16:29 129,248 ----a-w C:\WINDOWS\system32\drivers\snapman.sys
2007-12-02 16:22 --------- d-----w C:\Program Files\Eraser
2007-12-02 16:22 --------- d-----w C:\Program Files\ChrisTV
2007-12-02 16:22 --------- d-----w C:\Program Files\Chicken Invaders 2
2007-12-02 16:22 --------- d-----w C:\Program Files\CDlyse
2007-12-01 19:30 --------- d-----w C:\Program Files\Common Files\COWON
2007-12-01 19:27 --------- d-----w C:\Program Files\Common Files\AVSMedia
2007-12-01 19:10 23,616 ----a-w C:\WINDOWS\system32\drivers\nchssvad.sys
2007-11-30 16:42 --------- d-----w C:\Program Files\Windows Live Toolbar
2007-11-28 17:50 25,280 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys
2007-11-28 17:36 --------- d-----w C:\Program Files\CCleaner
2007-11-15 17:46 87,352 ----a-w C:\WINDOWS\system32\LMIinit.dll
2007-11-15 17:46 83,288 ----a-w C:\WINDOWS\system32\LMIRfsClientNP.dll
2007-11-15 17:46 23,736 ----a-w C:\WINDOWS\system32\lmimirr.dll
2007-11-15 17:46 21,496 ----a-w C:\WINDOWS\system32\LMIport.dll
2007-11-15 17:46 10,040 ----a-w C:\WINDOWS\system32\lmimirr2.dll
2007-11-07 09:26 721,920 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
2007-10-27 16:40 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll
1998-04-26 23:00 570,128 ----a-w C:\Program Files\DAO350.DLL
.
((((((((((((((((((((((((((((( snapshot@2008-01-25_23.15.39.06 )))))))))))))))))))))))))))))))))))))))))
.
- 2007-12-09 16:11:27 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2008-01-26 13:35:44 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2007-12-09 16:11:27 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2008-01-26 13:35:44 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2007-12-09 16:11:28 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2008-01-26 13:35:44 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2007-12-09 16:11:21 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-01-26 13:35:44 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2007-12-09 16:11:29 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2008-01-26 13:35:44 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2007-12-09 16:11:30 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2008-01-26 13:35:44 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2007-12-09 16:11:30 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2008-01-26 13:35:44 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2007-12-09 16:11:31 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2008-01-26 13:35:44 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2007-12-09 16:11:26 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2008-01-26 13:35:43 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2008-01-25 22:00:59 1,269,760 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
+ 2008-01-26 17:27:54 1,269,760 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000001\NTUSER.DAT
- 2008-01-25 22:00:59 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
+ 2008-01-26 17:27:54 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000002\UsrClass.dat
- 2008-01-25 22:01:00 1,269,760 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
+ 2008-01-26 17:27:54 1,269,760 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000003\NTUSER.DAT
- 2008-01-25 22:01:00 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
+ 2008-01-26 17:27:54 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000004\UsrClass.dat
- 2008-01-25 22:01:00 7,925,760 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\NTUSER.DAT
+ 2008-01-26 17:27:55 421,888 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000005\NTUSER.DAT
- 2008-01-25 22:01:00 528,384 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
+ 2008-01-26 17:27:55 8,192 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000006\UsrClass.dat
+ 2008-01-26 17:27:55 7,925,760 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000007\NTUSER.DAT
+ 2008-01-26 17:27:55 528,384 ----a-w C:\WINDOWS\erdnt\Hiv-backup\Users\00000008\UsrClass.dat
+ 2005-05-26 23:34:52 2,297,552 ----a-w C:\WINDOWS\LastGood\system32\d3dx9_26.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{61E61BA1-45ED-4835-B504-BBB9C96CB9CD}]
2008-01-24 17:59 253952 --a------ C:\WINDOWS\dpvtporrfd.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
{F4D76F09-7896-458A-890F-E1F05C46069F}
{CF4C34FE-2275-45EC-8C7E-2594CC1811A5}
{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}
[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]
[HKEY_CLASSES_ROOT\clsid\{cf4c34fe-2275-45ec-8c7e-2594cc1811a5}]
[HKEY_CLASSES_ROOT\elfwgps.ToolBar.1]
[HKEY_CLASSES_ROOT\TypeLib\{624AB37D-0196-44D1-8EB1-19D9EC09BF80}]
[HKEY_CLASSES_ROOT\elfwgps.ToolBar]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}"= C:\Program Files\Winamp Toolbar\winamptb.dll [2007-10-04 21:06 1135968]
[HKEY_CLASSES_ROOT\clsid\{ebf2ba02-9094-4c5a-858b-bb198f3d8de2}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand.1]
[HKEY_CLASSES_ROOT\TypeLib\{538CD77C-BFDD-49b0-9562-77419CAB89D1}]
[HKEY_CLASSES_ROOT\WINAMPTB.AOLToolBand]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-03 23:56 15360]
"CursorXP"="C:\Program Files\CursorXP\CursorXP.exe" [2003-03-02 01:40 125440]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 15:46 1460560]
"Steam"="C:\Program Files\Steam\Steam.exe" [ ]
"BitTorrent DNA"="C:\Program Files\DNA\btdna.exe" [2008-01-22 23:31 286528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MBM 5"="C:\Program Files\Motherboard Monitor 5\MBM5.EXE" [2004-06-12 17:40 594944]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-10-04 22:36 949376]
"{0228e555-4f9c-4e35-a3ec-b109a192b4c2}"="C:\Program Files\Google\Gmail Notifier\gnotify.exe" [2005-07-15 22:48 479232]
"iconcache"="" []
"SpeedOptimizer"="C:\Program Files\SpeedOptimizer\SPO.exe" [ ]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:56 15360]
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source= file:///C:\WINDOWS\privacy_danger\index.htm
FriendlyName= Privacy Protection
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"bqxomdo"= {CAA96999-62B1-4DA3-A8C2-3C73B6C595B8} - C:\WINDOWS\bqxomdo.dll [ ]
"aswmklt"= {FFF79A08-2593-463F-ADC9-A49D3CB3FBEE} - C:\WINDOWS\aswmklt.dll [2008-01-24 17:59 196608]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
LMIinit.dll 2007-11-15 18:46 87352 C:\WINDOWS\system32\LMIinit.dll
[HKLM\~\startupfolder\C:^Documents and Settings^sladjan^Start Menu^Programs^Startup^OpenOffice.org 2.0.lnk]
path=C:\Documents and Settings\sladjan\Start Menu\Programs\Startup\OpenOffice.org 2.0.lnk
backup=C:\WINDOWS\pss\OpenOffice.org 2.0.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtiTrayTools]
--a------ 2005-07-18 07:45 435712 C:\Program Files\Ray Adams\ATI Tray Tools\atitray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
--a------ 2005-12-10 15:57 133016 C:\Program Files\DAEMON Tools\daemon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2001-07-09 19:50 155648 C:\WINDOWS\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NVMixerTray]
--a------ 2004-06-04 05:51 131072 C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerArchiver Tray]
--a------ 2007-03-13 19:06 140840 C:\Program Files\PowerArchiver\PASTARTER.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--a------ 2004-11-03 04:24 32768 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a--c--- 2005-11-10 22:03 36975 C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector]
--------- 2003-11-19 01:20 45056 C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead Photo Express Calendar Checker]
--a------ 2004-01-13 04:40 69632 C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"UleadBurningHelper"=2 (0x2)
"winvnc"=2 (0x2)
"LogMeIn"=2 (0x2)
"LMIMaint"=2 (0x2)
S1 atitray;atitray;C:\Program Files\Ray Adams\ATI Tray Tools\atitray.sys [2005-06-22 10:15]
S1 cpuidlep;CpuIdle Pro System Driver;C:\WINDOWS\system32\drivers\cpuidlep.sys [2007-04-04 10:14]
S2 BT848;WinFast TV2000 XP WDM Video Capture;C:\WINDOWS\system32\drivers\wf2kvcap.sys [2004-10-04 21:34]
S2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files\LogMeIn\x86\RaInfo.sys []
S2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\WINDOWS\system32\drivers\LMIRfsDriver.sys [2007-09-12 10:20]
S2 tv2ktunr;WinFast TV2000 XP WDM TVTuner;C:\WINDOWS\system32\drivers\wf2ktunr.sys [2004-10-04 21:34]
S2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar;C:\WINDOWS\system32\drivers\wf2kxbar.sys [2004-10-04 21:34]
S3 Memctl;Memctl;C:\Program Files\ABIT\FlashMenu\Memctl.sys []
S3 snpstd2;Trek 310;C:\WINDOWS\system32\DRIVERS\snpstd2.sys []
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-31 02:57]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-31 02:58]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-31 02:59]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service;"C:\Program Files\MSN Messenger\usnsvc.exe" [2007-01-19 20:54]
S3 WFIOCTL;WFIOCTL;C:\Program Files\WinFast\WFTVFM\WFIOCTL.SYS [2005-01-07 01:55]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{02e21076-937e-11db-b1d8-806d6172696f}]
\Shell\AutoRun\command - F:\Autorun.exe root.ini
.
Contents of the 'Scheduled Tasks' folder
"2007-11-30 22:32:00 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net
Rootkit scan 2008-01-26 18:29:37
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-01-26 18:30:22
ComboFix-quarantined-files.txt 2008-01-26 17:30:07
ComboFix2.txt 2008-01-26 09:50:29
ComboFix3.txt 2008-01-25 22:15:57
.
2008-01-09 12:17:30 --- E O F ---
---------------------------------------------------
Moram da naglasim da nakon svakog skeniranja pojavi mi se ikonica IE,a mozila se modifikuje...ovo se desilo i danas kada su mi izleteli i oni prozori sa IE,pa sam bukvalno iscupao kabal za internet konekciju da bih prekinu tu navalu... pa ni sad ne mogu da postujem ovaj log zato sto je nesto zbrkano oko browsera
|