After running combo fix a few weeks ago, Internet Explorer, the Steam Web Browser, Google Earth, and my MagicJack contacts list stopped working, citing connection problems. Steam chat still works, and my MagicJack can still make and receive calls. Firefox also still browses the web, but I can't use any upload sites. None of the other computers in my house have this problem, so I think ComboFix deleted some dll that was infected that's used by most of my internet-ready programs. It's really annoying not being able to upload files, so if anyone knows any free programs for detecting and fixing broken or missing internet-related files, I'd appreciate it.
I'd rather not reformat, thanks, I've already done that once less than 6 months ago, and I'm almost certain the problem I'm having is one missing file that could easily be replaced.
Quote:
Unable to connect to server. Server may be offline or you may not connected to the internet.-102
That's what I get from the Steam browser
Quote:
Internet Explorer cannot display the webpage
This problem can be caused by a variety of issues, including:
•Internet connectivity has been lost.
•The website is temporarily unavailable.
•The Domain Name Server (DNS) is not reachable.
•The Domain Name Server (DNS) does not have a listing for the website's domain.
•There might be a typing error in the address.
•If this is an HTTPS (secure) address, click Tools, click Internet Options, click Advanced, and check to be sure the SSL and TLS protocols are enabled under the security section.
This problem can be caused by a variety of issues, including:
•Internet connectivity has been lost.
•The website is temporarily unavailable.
•The Domain Name Server (DNS) is not reachable.
•The Domain Name Server (DNS) does not have a listing for the website's domain.
•There might be a typing error in the address.
•If this is an HTTPS (secure) address, click Tools, click Internet Options, click Advanced, and check to be sure the SSL and TLS protocols are enabled under the security section.
That, obviously, is IE.
Quote:
Error while uploading. : IO Error
That is what mediafire gives me as it's reason for failure.
I'd go with a system restore or reinstall. Your problem sounds more like broken settings (check proxy servers?) than missing files, but if you're convinced it's a file problem try entering sfc /scannow into an elevated command prompt (you may be prompted for your installation media).
By undoing whatever ComboFix apparently did. If you don't know what that was, use a backup (e.g. system restore). If you don't have a backup, reinstall Windows.
Maybe this will shed some light:
That's what the steam update window gives me.
Oh hey, I found the log ComboFix made:
Anything jump out at you?
Quote:
Unable to connect to HTTP Proxy. Your proxy may be misconfigured or offline.-336
Unable to connect to HTTP Proxy. Your proxy may be misconfigured or offline.
Unable to connect to HTTP Proxy. Your proxy may be misconfigured or offline.
That's what the steam update window gives me.
Oh hey, I found the log ComboFix made:
Quote:
ComboFix 10-03-25.04 - Administrator 03/25/2010 22:32:00.4.2 - x86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1015.765 [GMT -4:00]
Running from: D:\ComboFizzle.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\wswsoq
c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\wswsoq\trfdsftav.exe
.
((((((((((((((((((((((((( Files Created from 2010-02-26 to 2010-03-26 )))))))))))))))))))))))))))))))
.
2010-03-26 02:08 . 2010-03-26 02:08 -------- d-sh--w- c:\documents and settings\Administrator\PrivacIE
2010-03-25 10:58 . 2008-03-05 19:56 1420824 ----a-w- c:\windows\system32\D3DCompiler_37.dll
2010-03-25 10:57 . 2010-03-25 10:57 -------- d-----w- c:\windows\Logs
2010-03-25 10:56 . 2010-03-25 11:03 -------- d-----w- c:\program files\Drum Machine
2010-03-24 18:37 . 2010-02-26 23:51 6870864 ---ha-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\in00000\setup.exe
2010-03-24 18:37 . 2010-02-26 23:45 743872 ---ha-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ar00000\install.exe
2010-03-23 10:22 . 2010-03-23 10:22 -------- d-----w- c:\program files\LithUnwrap
2010-03-20 00:39 . 2010-02-26 23:51 6870864 ---ha-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\Upgrade\setup2.exe
2010-03-20 00:39 . 2010-02-26 23:45 743872 ---ha-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\Upgrade\install2.exe
2010-03-20 00:38 . 2010-03-20 00:38 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\magicJack
2010-03-18 08:17 . 2010-03-18 08:17 -------- d-----w- c:\program files\LEGO Media
2010-03-14 17:58 . 2010-03-18 06:55 -------- d-----w- c:\program files\LEGO Island
2010-03-14 00:06 . 2010-03-14 00:06 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-12 06:10 . 2010-03-12 07:06 -------- d-----w- c:\program files\Narbacular Drop
2010-03-07 00:30 . 2010-03-07 00:40 -------- d-----w- C:\ComboFizzle21353C
2010-03-07 00:25 . 2010-03-26 02:06 -------- d-----w- C:\ComboFizzle
2010-03-03 06:18 . 2010-03-03 06:18 -------- d--h--w- c:\windows\PIF
2010-03-03 06:13 . 2010-03-03 06:13 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2010-03-01 01:02 . 2010-03-04 21:34 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Application Data\Petroglyph
2010-02-28 21:29 . 2005-05-26 20:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2010-02-28 00:25 . 2010-02-28 00:25 -------- d-----w- c:\program files\14 Degrees East
2010-02-26 23:51 . 2010-02-26 23:51 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ug00000\magicJack.dll
2010-02-26 23:51 . 2010-02-26 23:51 6870864 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ug00000\setup.exe
2010-02-26 23:51 . 2010-02-26 23:51 705936 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\magicJackLoader.exe
2010-02-26 23:51 . 2010-02-26 23:51 480608 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\octvqe1_apiw.dll
2010-02-26 23:51 . 2010-02-26 23:51 214360 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\TjVista.dll
2010-02-26 23:50 . 2010-02-26 23:50 324952 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\TjIpSys.dll
2010-02-26 23:50 . 2010-02-26 23:50 615792 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\SJHandsetMagicJack.dll
2010-02-26 23:50 . 2010-02-26 23:50 87384 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\st00000\mjsetup.exe
2010-02-26 23:50 . 2010-02-26 23:50 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\st00000\magicJack.dll
2010-02-26 23:50 . 2010-02-26 23:50 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\magicJack.dll
2010-02-26 23:46 . 2010-02-26 23:46 12526424 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\magicJack.exe
2010-02-26 23:45 . 2010-02-26 23:45 743872 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ug00000\install.exe
2010-02-26 23:45 . 2010-02-26 23:45 87384 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\in00000\mjsetup.exe
2010-02-26 23:45 . 2010-02-26 23:45 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\in00000\magicJack.dll
2010-02-26 23:44 . 2010-02-26 23:44 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\lr00000\magicJack.dll
2010-02-26 23:43 . 2010-02-26 23:43 441704 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ug00000\magicJackSplash.exe
2010-02-26 23:43 . 2010-02-26 23:43 441704 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\st00000\magicJackSplash.exe
2010-02-26 23:43 . 2010-02-26 23:43 441704 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\magicJackSplash.exe
2010-02-26 23:43 . 2010-02-26 23:43 441704 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\in00000\magicJackSplash.exe
2010-02-26 23:43 . 2010-02-26 23:43 50520 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\cdloader2.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-26 02:01 . 2009-11-30 03:47 -------- d-----w- c:\program files\Steam
2010-03-26 02:00 . 2009-11-30 23:37 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Application Data\uTorrent
2010-03-24 18:37 . 2010-01-26 14:03 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp
2010-03-15 15:19 . 2009-11-30 23:39 -------- d-----w- c:\program files\uTorrent
2010-03-14 00:06 . 2009-11-30 03:38 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-14 00:06 . 2009-11-30 03:29 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-14 00:06 . 2009-11-30 03:29 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-10 10:49 . 2009-11-30 23:23 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Application Data\LimeWire
2010-03-02 14:14 . 2009-12-02 01:42 -------- d-----w- c:\program files\Paint.NET
2010-02-28 22:55 . 2009-12-23 02:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-28 21:57 . 2010-02-28 21:57 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2010-02-28 21:38 . 2009-12-02 01:18 -------- d-----w- c:\program files\LucasArts
2010-02-28 21:38 . 2009-05-05 16:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-22 20:12 . 2009-12-10 13:20 0 ----a-w- c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\prvlcl.dat
2010-02-22 17:14 . 2009-11-30 01:26 75680 ----a-w- c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-02-17 00:37 . 2010-02-17 00:36 -------- d-----w- c:\program files\Google
2010-02-10 21:05 . 2010-02-10 18:27 -------- d-----w- c:\program files\QuArK 6.6.0 Beta 3
2010-02-08 18:37 . 2010-01-08 16:01 -------- d-----w- c:\program files\Common Files\TortoiseOverlays
2010-02-08 18:36 . 2010-01-08 16:01 -------- d-----w- c:\program files\TortoiseSVN
2010-02-08 00:50 . 2010-02-08 00:50 -------- d-----w- c:\program files\AviSynth 2.5
2010-02-08 00:48 . 2010-02-08 00:48 -------- d-----w- c:\program files\eRightSoft
2010-02-05 02:40 . 2009-12-02 01:44 -------- d-----w- c:\program files\Warcraft III
2010-02-04 14:01 . 2010-03-25 10:59 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-02-04 14:01 . 2010-03-25 10:59 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-02-04 14:01 . 2010-03-25 10:59 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-02-04 14:01 . 2010-03-25 10:59 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-01-31 01:10 . 2010-01-31 01:10 52224 ----a-w- c:\windows\ipuninst.exe
2010-01-31 01:09 . 2010-01-31 01:09 -------- d-----w- c:\program files\Interplay
2010-01-28 16:56 . 2009-11-30 23:19 -------- d-----w- c:\program files\LimeWire
2010-01-27 16:16 . 2010-01-27 16:16 -------- d-----w- c:\program files\YouTube Downloader
2010-01-25 15:54 . 2009-12-13 05:26 -------- d-----w- c:\program files\MSO
2010-01-17 20:14 . 2010-01-17 20:09 123135 ----a-w- c:\windows\HPHins12.dat
2010-01-10 12:04 . 2010-01-10 12:04 1078 ----a-r- c:\documents and settings\Gilbert Martinelli V\Application Data\Microsoft\Installer\{F0DC7928-1B40-465A-A4AE-EEDE8F159098}\_4ae13d6c.exe
2010-01-03 19:39 . 2010-01-03 19:38 1147865 ----a-w- C:\ldraw027.exe
2010-01-03 19:20 . 2010-01-03 19:20 125495 ----a-w- C:\LdrDat2Obj.zip
2009-12-31 16:50 . 2009-04-28 04:51 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-30 23:41 . 2009-12-30 23:41 4096 ----a-w- c:\windows\d3dx.dat
2006-05-03 10:06 . 2010-02-08 00:48 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2010-02-08 00:48 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2010-02-08 00:48 216064 --sh--r- c:\windows\system32\nbDX.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-03-01_00.31.28 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-03-25 10:58 . 2007-04-04 22:53 81768 c:\windows\system32\xinput1_3.dll
+ 2010-03-25 10:58 . 2006-07-28 13:30 62744 c:\windows\system32\xinput1_2.dll
+ 2010-03-25 10:59 . 2009-09-04 21:44 69464 c:\windows\system32\XAPOFX1_3.dll
+ 2010-03-25 10:59 . 2008-10-27 14:04 70992 c:\windows\system32\XAPOFX1_2.dll
+ 2010-03-25 10:59 . 2008-07-31 14:41 68616 c:\windows\system32\XAPOFX1_1.dll
+ 2010-03-25 10:59 . 2008-05-30 18:17 65032 c:\windows\system32\XAPOFX1_0.dll
+ 2010-03-25 10:59 . 2009-03-16 18:18 22360 c:\windows\system32\X3DAudio1_6.dll
+ 2010-03-25 10:59 . 2008-10-27 14:04 23376 c:\windows\system32\X3DAudio1_5.dll
+ 2010-03-25 10:59 . 2008-05-30 18:17 25608 c:\windows\system32\X3DAudio1_4.dll
+ 2010-03-25 10:59 . 2008-03-05 20:00 25608 c:\windows\system32\X3DAudio1_3.dll
+ 2010-03-25 10:58 . 2007-10-22 07:37 17928 c:\windows\system32\X3DAudio1_2.dll
+ 2010-03-25 10:58 . 2007-03-05 16:42 15128 c:\windows\system32\x3daudio1_1.dll
+ 2010-03-25 15:25 . 2008-04-14 05:15 15104 c:\windows\system32\ReinstallBackups\0012\DriverFiles\i386\usbscan.sys
+ 2009-04-28 04:51 . 2010-03-25 15:37 71810 c:\windows\system32\perfc009.dat
- 2009-04-28 04:51 . 2010-03-01 00:24 71810 c:\windows\system32\perfc009.dat
+ 2009-03-16 21:27 . 2009-06-25 06:34 39296 c:\windows\system32\drivers\uvclf.sys
+ 2010-03-18 01:47 . 2010-03-18 01:47 22528 c:\windows\Installer\144faa8.msi
+ 2010-03-02 14:14 . 2010-03-02 14:14 77610 c:\windows\Installer\{053B3DA8-91B5-4682-A130-715412A1A252}\_6FEFF9B68218417F98F549.exe
+ 2010-03-02 14:15 . 2010-03-02 14:15 24576 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\c0c5b929b8817230363f3a4f0e8895e2\WiaProxy32.ni.exe
- 2010-02-09 05:58 . 2010-02-09 05:58 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\3567e9f972165d48ab1ca52739705122\Interop.WIA.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\3567e9f972165d48ab1ca52739705122\Interop.WIA.ni.dll
+ 2010-03-25 15:25 . 2001-08-18 03:36 5632 c:\windows\system32\ReinstallBackups\0012\DriverFiles\i386\ptpusb.dll
+ 2010-03-25 10:59 . 2009-09-04 21:44 515416 c:\windows\system32\XAudio2_5.dll
+ 2010-03-25 10:59 . 2009-03-16 18:18 517448 c:\windows\system32\XAudio2_4.dll
+ 2010-03-25 10:59 . 2008-10-27 14:04 514384 c:\windows\system32\XAudio2_3.dll
+ 2010-03-25 10:59 . 2008-07-31 14:40 509448 c:\windows\system32\XAudio2_2.dll
+ 2010-03-25 10:59 . 2008-05-30 18:19 507400 c:\windows\system32\XAudio2_1.dll
+ 2010-03-25 10:59 . 2008-03-05 20:03 479752 c:\windows\system32\XAudio2_0.dll
+ 2010-03-25 10:59 . 2009-09-04 21:44 238936 c:\windows\system32\xactengine3_5.dll
+ 2010-03-25 10:59 . 2009-03-16 18:18 235352 c:\windows\system32\xactengine3_4.dll
+ 2010-03-25 10:59 . 2008-10-27 14:04 235856 c:\windows\system32\xactengine3_3.dll
+ 2010-03-25 10:59 . 2008-07-31 14:41 238088 c:\windows\system32\xactengine3_2.dll
+ 2010-03-25 10:59 . 2008-05-30 18:18 238088 c:\windows\system32\xactengine3_1.dll
+ 2010-03-25 10:59 . 2008-03-05 20:03 238088 c:\windows\system32\xactengine3_0.dll
+ 2010-03-25 10:58 . 2007-07-20 04:57 267112 c:\windows\system32\xactengine2_9.dll
+ 2010-03-25 10:58 . 2007-06-21 00:46 266088 c:\windows\system32\xactengine2_8.dll
+ 2010-03-25 10:58 . 2007-04-04 22:55 261480 c:\windows\system32\xactengine2_7.dll
+ 2010-03-25 10:58 . 2007-01-24 19:27 255848 c:\windows\system32\xactengine2_6.dll
+ 2010-03-25 10:58 . 2006-12-08 16:02 251672 c:\windows\system32\xactengine2_5.dll
+ 2010-03-25 10:58 . 2006-09-28 20:05 237848 c:\windows\system32\xactengine2_4.dll
+ 2010-03-25 10:58 . 2006-07-28 13:30 236824 c:\windows\system32\xactengine2_3.dll
+ 2010-03-25 10:58 . 2006-05-31 11:24 230168 c:\windows\system32\xactengine2_2.dll
+ 2010-03-25 10:58 . 2007-10-22 07:39 267272 c:\windows\system32\xactengine2_10.dll
+ 2010-03-25 15:25 . 2008-04-14 10:42 159232 c:\windows\system32\ReinstallBackups\0012\DriverFiles\i386\ptpusd.dll
- 2009-04-28 04:51 . 2010-03-01 00:24 442024 c:\windows\system32\perfh009.dat
+ 2009-04-28 04:51 . 2010-03-25 15:37 442024 c:\windows\system32\perfh009.dat
+ 2010-03-25 10:59 . 2009-09-04 21:29 235344 c:\windows\system32\d3dx11_42.dll
+ 2010-03-25 10:59 . 2009-09-04 21:29 453456 c:\windows\system32\d3dx10_42.dll
+ 2010-03-25 10:59 . 2009-03-09 19:27 453456 c:\windows\system32\d3dx10_41.dll
+ 2010-03-25 10:59 . 2008-10-10 08:52 452440 c:\windows\system32\d3dx10_40.dll
+ 2010-03-25 10:59 . 2008-07-10 15:01 467984 c:\windows\system32\d3dx10_39.dll
+ 2010-03-25 10:59 . 2008-05-30 18:11 467984 c:\windows\system32\d3dx10_38.dll
+ 2010-03-25 10:58 . 2008-02-06 03:07 462864 c:\windows\system32\d3dx10_37.dll
+ 2010-03-25 10:58 . 2007-10-02 13:56 444776 c:\windows\system32\d3dx10_36.dll
+ 2010-03-25 10:58 . 2007-07-19 22:14 444776 c:\windows\system32\d3dx10_35.dll
+ 2010-03-25 10:58 . 2007-05-16 20:45 443752 c:\windows\system32\d3dx10_34.dll
+ 2010-03-25 10:58 . 2007-03-15 20:57 443752 c:\windows\system32\d3dx10_33.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 480256 c:\windows\Installer\360c5e.msi
+ 2010-03-02 14:14 . 2010-03-02 14:14 804864 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\fff7b833f363c9d92db041a2319fa8f3\PaintDotNet.SystemLayer.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 158720 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\72dc72c53c0d7833ab59dfc57e3f5bc9\PaintDotNet.SystemLayer.Native.x86.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 388608 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Resourc#\b4e71b51b5467d21e10a239a43d9c25b\PaintDotNet.Resources.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 801280 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Effects\08768b9b3a3009a926f3abb7f121e407\PaintDotNet.Effects.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 657408 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Data\ef689cdabd866e8da74f108fd8fd0cd5\PaintDotNet.Data.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 770560 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\a90856177cb02cde6f065d1f698b0440\PaintDotNet.Base.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 518656 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\f73e92fa544b940a6f1849227fc33c54\ICSharpCode.SharpZipLib.ni.dll
- 2010-02-09 05:58 . 2010-02-09 05:58 518656 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\f73e92fa544b940a6f1849227fc33c54\ICSharpCode.SharpZipLib.ni.dll
- 2009-04-28 05:02 . 2008-04-14 12:00 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2009-04-28 05:02 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2010-03-25 10:59 . 2009-09-04 21:29 1892184 c:\windows\system32\D3DX9_42.dll
+ 2010-03-25 10:59 . 2009-03-09 19:27 4178264 c:\windows\system32\D3DX9_41.dll
+ 2010-03-25 10:59 . 2008-10-10 08:52 4379984 c:\windows\system32\D3DX9_40.dll
+ 2010-03-25 10:59 . 2008-07-10 15:00 3851784 c:\windows\system32\D3DX9_39.dll
+ 2010-03-25 10:59 . 2008-05-30 18:11 3850760 c:\windows\system32\D3DX9_38.dll
+ 2010-03-25 10:58 . 2008-03-05 19:56 3786760 c:\windows\system32\D3DX9_37.dll
+ 2010-03-25 10:58 . 2007-10-12 19:14 3734536 c:\windows\system32\d3dx9_36.dll
+ 2010-03-25 10:58 . 2007-07-19 22:14 3727720 c:\windows\system32\d3dx9_35.dll
+ 2010-03-25 10:58 . 2007-05-16 20:45 3497832 c:\windows\system32\d3dx9_34.dll
+ 2010-03-25 10:58 . 2007-03-12 20:42 3495784 c:\windows\system32\d3dx9_33.dll
+ 2010-03-25 10:58 . 2006-09-28 20:05 2414360 c:\windows\system32\d3dx9_31.dll
+ 2010-03-25 10:59 . 2009-09-04 21:29 5501792 c:\windows\system32\d3dcsx_42.dll
+ 2010-03-25 10:59 . 2009-09-04 21:29 1974616 c:\windows\system32\D3DCompiler_42.dll
+ 2010-03-25 10:59 . 2009-03-09 19:27 1846632 c:\windows\system32\D3DCompiler_41.dll
+ 2010-03-25 10:59 . 2008-10-10 08:52 2036576 c:\windows\system32\D3DCompiler_40.dll
+ 2010-03-25 10:59 . 2008-07-10 15:00 1493528 c:\windows\system32\D3DCompiler_39.dll
+ 2010-03-25 10:59 . 2008-05-30 18:11 1491992 c:\windows\system32\D3DCompiler_38.dll
+ 2010-03-25 10:58 . 2007-10-12 19:14 1374232 c:\windows\system32\D3DCompiler_36.dll
+ 2010-03-25 10:58 . 2007-07-19 22:14 1358192 c:\windows\system32\D3DCompiler_35.dll
+ 2010-03-25 10:58 . 2007-05-16 20:45 1124720 c:\windows\system32\D3DCompiler_34.dll
+ 2010-03-25 10:58 . 2007-03-12 20:42 1123696 c:\windows\system32\D3DCompiler_33.dll
+ 2010-03-02 14:15 . 2010-03-02 14:15 3110400 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet\7f25e2453b91e9cd7d0151c23f052bba\PaintDotNet.ni.exe
+ 2010-03-02 14:14 . 2010-03-02 14:14 1866752 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Core\632519839011ed828d305fd159685eaa\PaintDotNet.Core.ni.dll
+ 2009-11-30 08:59 . 2010-03-02 05:30 31648712 c:\windows\system32\MRT.exe
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Eee Docking"="c:\program files\ASUS\Eee Docking\Eee Docking.exe" [2009-05-08 395776]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-12-19 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-12-19 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-12-19 131072]
"RTHDCPL"="RTHDCPL.EXE" [2009-04-27 17881088]
"AsusACPIServer"="c:\program files\EeePC\ACPI\AsAcpiSvr.exe" [2009-04-16 630784]
"AsusEPCMonitor"="c:\program files\EeePC\ACPI\AsEPCMon.exe" [2009-03-13 98304]
"AsusTray"="c:\program files\EeePC\ACPI\AsTray.exe" [2009-04-16 118784]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-03-06 1434920]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2009-03-06 79144]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
SuperHybridEngine.lnk - c:\program files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe [2009-5-5 376832]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-14 00:06 12464 ----a-w- c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-15 06:04 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2009-02-06 22:51 3885408 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\Valve\\Half-Life\\hl.exe"=
"c:\\Michael Jackson's Stunt Child\\TBG.exe"=
"c:\\Documents and Settings\\Gilbert Martinelli V\\My Documents\\Downloads\\Demo\\F3.exe"=
"c:\\Documents and Settings\\Gilbert Martinelli V\\My Documents\\FreeBuild\\FreeBuild.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Documents and Settings\\Gilbert Martinelli V\\My Documents\\FreeBuild2\\FreeBuild.exe"=
"c:\\Program Files\\LucasArts\\Star Wars Empire at War\\GameData\\sweaw.exe"=
"c:\\Program Files\\LucasArts\\Star Wars Empire at War Forces of Corruption\\swfoc.exe"=
"c:\\Documents and Settings\\Gilbert Martinelli V\\Application Data\\mjusbsp\\magicJack.exe"=
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [12/22/2009 1:57 AM 691696]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [11/29/2009 11:29 PM 216200]
S1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [11/29/2009 11:38 PM 242696]
S2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [3/13/2010 8:06 PM 916760]
S2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [3/13/2010 8:06 PM 308064]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/16/2010 8:36 PM 135664]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [5/5/2009 12:00 PM 1684736]
S3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [4/27/2009 9:59 PM 38912]
S3 SRS_PremiumSound_Service;SRS Labs Premium Sound;c:\windows\system32\drivers\SRS_PremiumSound_i386.sys [5/5/2009 1:16 PM 232872]
S3 uvclf;uvclf;c:\windows\system32\drivers\uvclf.sys [3/16/2009 5:27 PM 39296]
.
Contents of the 'Scheduled Tasks' folder
2010-03-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 00:36]
2010-03-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 00:36]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://eeepc.asus.com/global
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath -
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - ORPHANS REMOVED - - - -
HKLM-Run-fdnqkfif - c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\wswsoq\trfdsftav.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-25 22:38
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_USERS\S-1-5-21-3636924437-2937731601-1044953268-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,63,d9,16,81,e7,10,59,49,ab,32,91,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,63,d9,16,81,e7,10,59,49,ab,32,91,\
.
Completion time: 2010-03-25 22:40:55
ComboFix-quarantined-files.txt 2010-03-26 02:40
ComboFix2.txt 2010-03-07 00:40
ComboFix3.txt 2010-03-03 07:04
ComboFix4.txt 2010-03-01 00:35
Pre-Run: 16,011,132,928 bytes free
Post-Run: 16,028,344,320 bytes free
- - End Of File - - 4B6ADF190ADD304B18F5BF2D0B059548
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1015.765 [GMT -4:00]
Running from: D:\ComboFizzle.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\wswsoq
c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\wswsoq\trfdsftav.exe
.
((((((((((((((((((((((((( Files Created from 2010-02-26 to 2010-03-26 )))))))))))))))))))))))))))))))
.
2010-03-26 02:08 . 2010-03-26 02:08 -------- d-sh--w- c:\documents and settings\Administrator\PrivacIE
2010-03-25 10:58 . 2008-03-05 19:56 1420824 ----a-w- c:\windows\system32\D3DCompiler_37.dll
2010-03-25 10:57 . 2010-03-25 10:57 -------- d-----w- c:\windows\Logs
2010-03-25 10:56 . 2010-03-25 11:03 -------- d-----w- c:\program files\Drum Machine
2010-03-24 18:37 . 2010-02-26 23:51 6870864 ---ha-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\in00000\setup.exe
2010-03-24 18:37 . 2010-02-26 23:45 743872 ---ha-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ar00000\install.exe
2010-03-23 10:22 . 2010-03-23 10:22 -------- d-----w- c:\program files\LithUnwrap
2010-03-20 00:39 . 2010-02-26 23:51 6870864 ---ha-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\Upgrade\setup2.exe
2010-03-20 00:39 . 2010-02-26 23:45 743872 ---ha-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\Upgrade\install2.exe
2010-03-20 00:38 . 2010-03-20 00:38 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\magicJack
2010-03-18 08:17 . 2010-03-18 08:17 -------- d-----w- c:\program files\LEGO Media
2010-03-14 17:58 . 2010-03-18 06:55 -------- d-----w- c:\program files\LEGO Island
2010-03-14 00:06 . 2010-03-14 00:06 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-12 06:10 . 2010-03-12 07:06 -------- d-----w- c:\program files\Narbacular Drop
2010-03-07 00:30 . 2010-03-07 00:40 -------- d-----w- C:\ComboFizzle21353C
2010-03-07 00:25 . 2010-03-26 02:06 -------- d-----w- C:\ComboFizzle
2010-03-03 06:18 . 2010-03-03 06:18 -------- d--h--w- c:\windows\PIF
2010-03-03 06:13 . 2010-03-03 06:13 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2010-03-01 01:02 . 2010-03-04 21:34 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Application Data\Petroglyph
2010-02-28 21:29 . 2005-05-26 20:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2010-02-28 00:25 . 2010-02-28 00:25 -------- d-----w- c:\program files\14 Degrees East
2010-02-26 23:51 . 2010-02-26 23:51 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ug00000\magicJack.dll
2010-02-26 23:51 . 2010-02-26 23:51 6870864 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ug00000\setup.exe
2010-02-26 23:51 . 2010-02-26 23:51 705936 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\magicJackLoader.exe
2010-02-26 23:51 . 2010-02-26 23:51 480608 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\octvqe1_apiw.dll
2010-02-26 23:51 . 2010-02-26 23:51 214360 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\TjVista.dll
2010-02-26 23:50 . 2010-02-26 23:50 324952 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\TjIpSys.dll
2010-02-26 23:50 . 2010-02-26 23:50 615792 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\SJHandsetMagicJack.dll
2010-02-26 23:50 . 2010-02-26 23:50 87384 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\st00000\mjsetup.exe
2010-02-26 23:50 . 2010-02-26 23:50 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\st00000\magicJack.dll
2010-02-26 23:50 . 2010-02-26 23:50 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\magicJack.dll
2010-02-26 23:46 . 2010-02-26 23:46 12526424 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\magicJack.exe
2010-02-26 23:45 . 2010-02-26 23:45 743872 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ug00000\install.exe
2010-02-26 23:45 . 2010-02-26 23:45 87384 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\in00000\mjsetup.exe
2010-02-26 23:45 . 2010-02-26 23:45 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\in00000\magicJack.dll
2010-02-26 23:44 . 2010-02-26 23:44 138584 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\lr00000\magicJack.dll
2010-02-26 23:43 . 2010-02-26 23:43 441704 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\ug00000\magicJackSplash.exe
2010-02-26 23:43 . 2010-02-26 23:43 441704 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\st00000\magicJackSplash.exe
2010-02-26 23:43 . 2010-02-26 23:43 441704 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\magicJackSplash.exe
2010-02-26 23:43 . 2010-02-26 23:43 441704 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\in00000\magicJackSplash.exe
2010-02-26 23:43 . 2010-02-26 23:43 50520 ----a-w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp\cdloader2.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-26 02:01 . 2009-11-30 03:47 -------- d-----w- c:\program files\Steam
2010-03-26 02:00 . 2009-11-30 23:37 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Application Data\uTorrent
2010-03-24 18:37 . 2010-01-26 14:03 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Application Data\mjusbsp
2010-03-15 15:19 . 2009-11-30 23:39 -------- d-----w- c:\program files\uTorrent
2010-03-14 00:06 . 2009-11-30 03:38 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-14 00:06 . 2009-11-30 03:29 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-14 00:06 . 2009-11-30 03:29 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-10 10:49 . 2009-11-30 23:23 -------- d-----w- c:\documents and settings\Gilbert Martinelli V\Application Data\LimeWire
2010-03-02 14:14 . 2009-12-02 01:42 -------- d-----w- c:\program files\Paint.NET
2010-02-28 22:55 . 2009-12-23 02:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-28 21:57 . 2010-02-28 21:57 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2010-02-28 21:38 . 2009-12-02 01:18 -------- d-----w- c:\program files\LucasArts
2010-02-28 21:38 . 2009-05-05 16:00 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-22 20:12 . 2009-12-10 13:20 0 ----a-w- c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\prvlcl.dat
2010-02-22 17:14 . 2009-11-30 01:26 75680 ----a-w- c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-02-17 00:37 . 2010-02-17 00:36 -------- d-----w- c:\program files\Google
2010-02-10 21:05 . 2010-02-10 18:27 -------- d-----w- c:\program files\QuArK 6.6.0 Beta 3
2010-02-08 18:37 . 2010-01-08 16:01 -------- d-----w- c:\program files\Common Files\TortoiseOverlays
2010-02-08 18:36 . 2010-01-08 16:01 -------- d-----w- c:\program files\TortoiseSVN
2010-02-08 00:50 . 2010-02-08 00:50 -------- d-----w- c:\program files\AviSynth 2.5
2010-02-08 00:48 . 2010-02-08 00:48 -------- d-----w- c:\program files\eRightSoft
2010-02-05 02:40 . 2009-12-02 01:44 -------- d-----w- c:\program files\Warcraft III
2010-02-04 14:01 . 2010-03-25 10:59 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-02-04 14:01 . 2010-03-25 10:59 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-02-04 14:01 . 2010-03-25 10:59 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-02-04 14:01 . 2010-03-25 10:59 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-01-31 01:10 . 2010-01-31 01:10 52224 ----a-w- c:\windows\ipuninst.exe
2010-01-31 01:09 . 2010-01-31 01:09 -------- d-----w- c:\program files\Interplay
2010-01-28 16:56 . 2009-11-30 23:19 -------- d-----w- c:\program files\LimeWire
2010-01-27 16:16 . 2010-01-27 16:16 -------- d-----w- c:\program files\YouTube Downloader
2010-01-25 15:54 . 2009-12-13 05:26 -------- d-----w- c:\program files\MSO
2010-01-17 20:14 . 2010-01-17 20:09 123135 ----a-w- c:\windows\HPHins12.dat
2010-01-10 12:04 . 2010-01-10 12:04 1078 ----a-r- c:\documents and settings\Gilbert Martinelli V\Application Data\Microsoft\Installer\{F0DC7928-1B40-465A-A4AE-EEDE8F159098}\_4ae13d6c.exe
2010-01-03 19:39 . 2010-01-03 19:38 1147865 ----a-w- C:\ldraw027.exe
2010-01-03 19:20 . 2010-01-03 19:20 125495 ----a-w- C:\LdrDat2Obj.zip
2009-12-31 16:50 . 2009-04-28 04:51 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-30 23:41 . 2009-12-30 23:41 4096 ----a-w- c:\windows\d3dx.dat
2006-05-03 10:06 . 2010-02-08 00:48 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2010-02-08 00:48 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2010-02-08 00:48 216064 --sh--r- c:\windows\system32\nbDX.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-03-01_00.31.28 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-03-25 10:58 . 2007-04-04 22:53 81768 c:\windows\system32\xinput1_3.dll
+ 2010-03-25 10:58 . 2006-07-28 13:30 62744 c:\windows\system32\xinput1_2.dll
+ 2010-03-25 10:59 . 2009-09-04 21:44 69464 c:\windows\system32\XAPOFX1_3.dll
+ 2010-03-25 10:59 . 2008-10-27 14:04 70992 c:\windows\system32\XAPOFX1_2.dll
+ 2010-03-25 10:59 . 2008-07-31 14:41 68616 c:\windows\system32\XAPOFX1_1.dll
+ 2010-03-25 10:59 . 2008-05-30 18:17 65032 c:\windows\system32\XAPOFX1_0.dll
+ 2010-03-25 10:59 . 2009-03-16 18:18 22360 c:\windows\system32\X3DAudio1_6.dll
+ 2010-03-25 10:59 . 2008-10-27 14:04 23376 c:\windows\system32\X3DAudio1_5.dll
+ 2010-03-25 10:59 . 2008-05-30 18:17 25608 c:\windows\system32\X3DAudio1_4.dll
+ 2010-03-25 10:59 . 2008-03-05 20:00 25608 c:\windows\system32\X3DAudio1_3.dll
+ 2010-03-25 10:58 . 2007-10-22 07:37 17928 c:\windows\system32\X3DAudio1_2.dll
+ 2010-03-25 10:58 . 2007-03-05 16:42 15128 c:\windows\system32\x3daudio1_1.dll
+ 2010-03-25 15:25 . 2008-04-14 05:15 15104 c:\windows\system32\ReinstallBackups\0012\DriverFiles\i386\usbscan.sys
+ 2009-04-28 04:51 . 2010-03-25 15:37 71810 c:\windows\system32\perfc009.dat
- 2009-04-28 04:51 . 2010-03-01 00:24 71810 c:\windows\system32\perfc009.dat
+ 2009-03-16 21:27 . 2009-06-25 06:34 39296 c:\windows\system32\drivers\uvclf.sys
+ 2010-03-18 01:47 . 2010-03-18 01:47 22528 c:\windows\Installer\144faa8.msi
+ 2010-03-02 14:14 . 2010-03-02 14:14 77610 c:\windows\Installer\{053B3DA8-91B5-4682-A130-715412A1A252}\_6FEFF9B68218417F98F549.exe
+ 2010-03-02 14:15 . 2010-03-02 14:15 24576 c:\windows\assembly\NativeImages_v2.0.50727_32\WiaProxy32\c0c5b929b8817230363f3a4f0e8895e2\WiaProxy32.ni.exe
- 2010-02-09 05:58 . 2010-02-09 05:58 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\3567e9f972165d48ab1ca52739705122\Interop.WIA.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WIA\3567e9f972165d48ab1ca52739705122\Interop.WIA.ni.dll
+ 2010-03-25 15:25 . 2001-08-18 03:36 5632 c:\windows\system32\ReinstallBackups\0012\DriverFiles\i386\ptpusb.dll
+ 2010-03-25 10:59 . 2009-09-04 21:44 515416 c:\windows\system32\XAudio2_5.dll
+ 2010-03-25 10:59 . 2009-03-16 18:18 517448 c:\windows\system32\XAudio2_4.dll
+ 2010-03-25 10:59 . 2008-10-27 14:04 514384 c:\windows\system32\XAudio2_3.dll
+ 2010-03-25 10:59 . 2008-07-31 14:40 509448 c:\windows\system32\XAudio2_2.dll
+ 2010-03-25 10:59 . 2008-05-30 18:19 507400 c:\windows\system32\XAudio2_1.dll
+ 2010-03-25 10:59 . 2008-03-05 20:03 479752 c:\windows\system32\XAudio2_0.dll
+ 2010-03-25 10:59 . 2009-09-04 21:44 238936 c:\windows\system32\xactengine3_5.dll
+ 2010-03-25 10:59 . 2009-03-16 18:18 235352 c:\windows\system32\xactengine3_4.dll
+ 2010-03-25 10:59 . 2008-10-27 14:04 235856 c:\windows\system32\xactengine3_3.dll
+ 2010-03-25 10:59 . 2008-07-31 14:41 238088 c:\windows\system32\xactengine3_2.dll
+ 2010-03-25 10:59 . 2008-05-30 18:18 238088 c:\windows\system32\xactengine3_1.dll
+ 2010-03-25 10:59 . 2008-03-05 20:03 238088 c:\windows\system32\xactengine3_0.dll
+ 2010-03-25 10:58 . 2007-07-20 04:57 267112 c:\windows\system32\xactengine2_9.dll
+ 2010-03-25 10:58 . 2007-06-21 00:46 266088 c:\windows\system32\xactengine2_8.dll
+ 2010-03-25 10:58 . 2007-04-04 22:55 261480 c:\windows\system32\xactengine2_7.dll
+ 2010-03-25 10:58 . 2007-01-24 19:27 255848 c:\windows\system32\xactengine2_6.dll
+ 2010-03-25 10:58 . 2006-12-08 16:02 251672 c:\windows\system32\xactengine2_5.dll
+ 2010-03-25 10:58 . 2006-09-28 20:05 237848 c:\windows\system32\xactengine2_4.dll
+ 2010-03-25 10:58 . 2006-07-28 13:30 236824 c:\windows\system32\xactengine2_3.dll
+ 2010-03-25 10:58 . 2006-05-31 11:24 230168 c:\windows\system32\xactengine2_2.dll
+ 2010-03-25 10:58 . 2007-10-22 07:39 267272 c:\windows\system32\xactengine2_10.dll
+ 2010-03-25 15:25 . 2008-04-14 10:42 159232 c:\windows\system32\ReinstallBackups\0012\DriverFiles\i386\ptpusd.dll
- 2009-04-28 04:51 . 2010-03-01 00:24 442024 c:\windows\system32\perfh009.dat
+ 2009-04-28 04:51 . 2010-03-25 15:37 442024 c:\windows\system32\perfh009.dat
+ 2010-03-25 10:59 . 2009-09-04 21:29 235344 c:\windows\system32\d3dx11_42.dll
+ 2010-03-25 10:59 . 2009-09-04 21:29 453456 c:\windows\system32\d3dx10_42.dll
+ 2010-03-25 10:59 . 2009-03-09 19:27 453456 c:\windows\system32\d3dx10_41.dll
+ 2010-03-25 10:59 . 2008-10-10 08:52 452440 c:\windows\system32\d3dx10_40.dll
+ 2010-03-25 10:59 . 2008-07-10 15:01 467984 c:\windows\system32\d3dx10_39.dll
+ 2010-03-25 10:59 . 2008-05-30 18:11 467984 c:\windows\system32\d3dx10_38.dll
+ 2010-03-25 10:58 . 2008-02-06 03:07 462864 c:\windows\system32\d3dx10_37.dll
+ 2010-03-25 10:58 . 2007-10-02 13:56 444776 c:\windows\system32\d3dx10_36.dll
+ 2010-03-25 10:58 . 2007-07-19 22:14 444776 c:\windows\system32\d3dx10_35.dll
+ 2010-03-25 10:58 . 2007-05-16 20:45 443752 c:\windows\system32\d3dx10_34.dll
+ 2010-03-25 10:58 . 2007-03-15 20:57 443752 c:\windows\system32\d3dx10_33.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 480256 c:\windows\Installer\360c5e.msi
+ 2010-03-02 14:14 . 2010-03-02 14:14 804864 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\fff7b833f363c9d92db041a2319fa8f3\PaintDotNet.SystemLayer.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 158720 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.SystemL#\72dc72c53c0d7833ab59dfc57e3f5bc9\PaintDotNet.SystemLayer.Native.x86.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 388608 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Resourc#\b4e71b51b5467d21e10a239a43d9c25b\PaintDotNet.Resources.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 801280 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Effects\08768b9b3a3009a926f3abb7f121e407\PaintDotNet.Effects.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 657408 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Data\ef689cdabd866e8da74f108fd8fd0cd5\PaintDotNet.Data.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 770560 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Base\a90856177cb02cde6f065d1f698b0440\PaintDotNet.Base.ni.dll
+ 2010-03-02 14:14 . 2010-03-02 14:14 518656 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\f73e92fa544b940a6f1849227fc33c54\ICSharpCode.SharpZipLib.ni.dll
- 2010-02-09 05:58 . 2010-02-09 05:58 518656 c:\windows\assembly\NativeImages_v2.0.50727_32\ICSharpCode.SharpZi#\f73e92fa544b940a6f1849227fc33c54\ICSharpCode.SharpZipLib.ni.dll
- 2009-04-28 05:02 . 2008-04-14 12:00 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2009-04-28 05:02 . 2009-10-23 15:28 3558912 c:\windows\system32\dllcache\moviemk.exe
+ 2010-03-25 10:59 . 2009-09-04 21:29 1892184 c:\windows\system32\D3DX9_42.dll
+ 2010-03-25 10:59 . 2009-03-09 19:27 4178264 c:\windows\system32\D3DX9_41.dll
+ 2010-03-25 10:59 . 2008-10-10 08:52 4379984 c:\windows\system32\D3DX9_40.dll
+ 2010-03-25 10:59 . 2008-07-10 15:00 3851784 c:\windows\system32\D3DX9_39.dll
+ 2010-03-25 10:59 . 2008-05-30 18:11 3850760 c:\windows\system32\D3DX9_38.dll
+ 2010-03-25 10:58 . 2008-03-05 19:56 3786760 c:\windows\system32\D3DX9_37.dll
+ 2010-03-25 10:58 . 2007-10-12 19:14 3734536 c:\windows\system32\d3dx9_36.dll
+ 2010-03-25 10:58 . 2007-07-19 22:14 3727720 c:\windows\system32\d3dx9_35.dll
+ 2010-03-25 10:58 . 2007-05-16 20:45 3497832 c:\windows\system32\d3dx9_34.dll
+ 2010-03-25 10:58 . 2007-03-12 20:42 3495784 c:\windows\system32\d3dx9_33.dll
+ 2010-03-25 10:58 . 2006-09-28 20:05 2414360 c:\windows\system32\d3dx9_31.dll
+ 2010-03-25 10:59 . 2009-09-04 21:29 5501792 c:\windows\system32\d3dcsx_42.dll
+ 2010-03-25 10:59 . 2009-09-04 21:29 1974616 c:\windows\system32\D3DCompiler_42.dll
+ 2010-03-25 10:59 . 2009-03-09 19:27 1846632 c:\windows\system32\D3DCompiler_41.dll
+ 2010-03-25 10:59 . 2008-10-10 08:52 2036576 c:\windows\system32\D3DCompiler_40.dll
+ 2010-03-25 10:59 . 2008-07-10 15:00 1493528 c:\windows\system32\D3DCompiler_39.dll
+ 2010-03-25 10:59 . 2008-05-30 18:11 1491992 c:\windows\system32\D3DCompiler_38.dll
+ 2010-03-25 10:58 . 2007-10-12 19:14 1374232 c:\windows\system32\D3DCompiler_36.dll
+ 2010-03-25 10:58 . 2007-07-19 22:14 1358192 c:\windows\system32\D3DCompiler_35.dll
+ 2010-03-25 10:58 . 2007-05-16 20:45 1124720 c:\windows\system32\D3DCompiler_34.dll
+ 2010-03-25 10:58 . 2007-03-12 20:42 1123696 c:\windows\system32\D3DCompiler_33.dll
+ 2010-03-02 14:15 . 2010-03-02 14:15 3110400 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet\7f25e2453b91e9cd7d0151c23f052bba\PaintDotNet.ni.exe
+ 2010-03-02 14:14 . 2010-03-02 14:14 1866752 c:\windows\assembly\NativeImages_v2.0.50727_32\PaintDotNet.Core\632519839011ed828d305fd159685eaa\PaintDotNet.Core.ni.dll
+ 2009-11-30 08:59 . 2010-03-02 05:30 31648712 c:\windows\system32\MRT.exe
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080]
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-01-19 00:12 86280 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Eee Docking"="c:\program files\ASUS\Eee Docking\Eee Docking.exe" [2009-05-08 395776]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-12-19 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-12-19 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-12-19 131072]
"RTHDCPL"="RTHDCPL.EXE" [2009-04-27 17881088]
"AsusACPIServer"="c:\program files\EeePC\ACPI\AsAcpiSvr.exe" [2009-04-16 630784]
"AsusEPCMonitor"="c:\program files\EeePC\ACPI\AsEPCMon.exe" [2009-03-13 98304]
"AsusTray"="c:\program files\EeePC\ACPI\AsTray.exe" [2009-04-16 118784]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-03-06 1434920]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2009-03-06 79144]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
SuperHybridEngine.lnk - c:\program files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe [2009-5-5 376832]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-14 00:06 12464 ----a-w- c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-15 06:04 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2009-02-06 22:51 3885408 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\Valve\\Half-Life\\hl.exe"=
"c:\\Michael Jackson's Stunt Child\\TBG.exe"=
"c:\\Documents and Settings\\Gilbert Martinelli V\\My Documents\\Downloads\\Demo\\F3.exe"=
"c:\\Documents and Settings\\Gilbert Martinelli V\\My Documents\\FreeBuild\\FreeBuild.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Documents and Settings\\Gilbert Martinelli V\\My Documents\\FreeBuild2\\FreeBuild.exe"=
"c:\\Program Files\\LucasArts\\Star Wars Empire at War\\GameData\\sweaw.exe"=
"c:\\Program Files\\LucasArts\\Star Wars Empire at War Forces of Corruption\\swfoc.exe"=
"c:\\Documents and Settings\\Gilbert Martinelli V\\Application Data\\mjusbsp\\magicJack.exe"=
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [12/22/2009 1:57 AM 691696]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [11/29/2009 11:29 PM 216200]
S1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [11/29/2009 11:38 PM 242696]
S2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [3/13/2010 8:06 PM 916760]
S2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [3/13/2010 8:06 PM 308064]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/16/2010 8:36 PM 135664]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [5/5/2009 12:00 PM 1684736]
S3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [4/27/2009 9:59 PM 38912]
S3 SRS_PremiumSound_Service;SRS Labs Premium Sound;c:\windows\system32\drivers\SRS_PremiumSound_i386.sys [5/5/2009 1:16 PM 232872]
S3 uvclf;uvclf;c:\windows\system32\drivers\uvclf.sys [3/16/2009 5:27 PM 39296]
.
Contents of the 'Scheduled Tasks' folder
2010-03-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 00:36]
2010-03-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 00:36]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://eeepc.asus.com/global
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath -
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - ORPHANS REMOVED - - - -
HKLM-Run-fdnqkfif - c:\documents and settings\Gilbert Martinelli V\Local Settings\Application Data\wswsoq\trfdsftav.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-25 22:38
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_USERS\S-1-5-21-3636924437-2937731601-1044953268-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,63,d9,16,81,e7,10,59,49,ab,32,91,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,63,d9,16,81,e7,10,59,49,ab,32,91,\
.
Completion time: 2010-03-25 22:40:55
ComboFix-quarantined-files.txt 2010-03-26 02:40
ComboFix2.txt 2010-03-07 00:40
ComboFix3.txt 2010-03-03 07:04
ComboFix4.txt 2010-03-01 00:35
Pre-Run: 16,011,132,928 bytes free
Post-Run: 16,028,344,320 bytes free
- - End Of File - - 4B6ADF190ADD304B18F5BF2D0B059548
Anything jump out at you?
Reading around google, the only thing that stands out is to NOT use that program. =/
People report random errors and random behaviors on the programs part, some losing printers, others losing their OS completely.
Can you access a restore point to before when you ran that program?
People report random errors and random behaviors on the programs part, some losing printers, others losing their OS completely.
Can you access a restore point to before when you ran that program?
yeah, I suppose... I'd much rather fix what it broke though. But if I do a system restore, I'll restore the malware Combofix got rid of in the first place...
DShiznit wrote:
yeah, I suppose... I'd much rather fix what it broke though. But if I do a system restore, I'll restore the malware Combofix got rid of in the first place...
Yeah, and then you can use a real malware removal tool like SpyBot S&D or any of numerous legitimate alternatives to remove it. And don't download more shady programs. 
Lucas W wrote:
And stop using Utorrent for *cough*
uTorrent rocks
...for downloading Linux distros, of course.
You can't get malware from TPB unless you're an idiot. And I've used spybot before. I suppose I should install it again. But the only reason I used ComboFix was because I had a serious infection that even AVG and Malwarebyte's couldn't get rid of. Anyway, is there anything in that log that indicates what I need to fix?
AVG isn't a very good choice in antivirus software, go to Avast instead. I would also recommend checking out Super Antispyware, one of the best programs I have seen for malware removal.
Register to Join the Conversation
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Advertisement