هذا التقرير الاول
ComboFix 08-10-07.06 - ????????? 10/08/2008 14:41:53.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.1.1025.18.634 [GMT 3:00]
Running from: C:\Documents and Settings\?????????\??? ??????\ComboFix.exe
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Program Files\IEToolbar
C:\Program Files\IEToolbar\Maktoob ToolBar\as7ab.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\basis.xml
C:\Program Files\IEToolbar\Maktoob ToolBar\bent-el7alal.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\blogs.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\business.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\cars.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\chat.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\clippat.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\description.jpg
C:\Program Files\IEToolbar\Maktoob ToolBar\email.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\favorites.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\flash-games.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\games-main.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\girls-games.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\icons.bmp
C:\Program Files\IEToolbar\Maktoob ToolBar\icons.bmp_16.bmp
C:\Program Files\IEToolbar\Maktoob ToolBar\icons.bmp_24.bmp
C:\Program Files\IEToolbar\Maktoob ToolBar\info.txt
C:\Program Files\IEToolbar\Maktoob ToolBar\jokes.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\logo.bmp
C:\Program Files\IEToolbar\Maktoob ToolBar\Maktoob-channels.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\Maktoob-logo.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\maktoobToolBar_RC2.crc
C:\Program Files\IEToolbar\Maktoob ToolBar\maktoobToolBar_RC2.dll
C:\Program Files\IEToolbar\Maktoob ToolBar\Master.bmp
C:\Program Files\IEToolbar\Maktoob ToolBar\new-game.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\news.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\sports.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\stub.xml
C:\Program Files\IEToolbar\Maktoob ToolBar\tbhelper.dll
C:\Program Files\IEToolbar\Maktoob ToolBar\tbs_include_script_001578.js
C:\Program Files\IEToolbar\Maktoob ToolBar\uninstall.exe
C:\Program Files\IEToolbar\Maktoob ToolBar\update.exe
C:\Program Files\IEToolbar\Maktoob ToolBar\version.txt
C:\Program Files\IEToolbar\Maktoob ToolBar\women.ico
C:\Program Files\IEToolbar\Maktoob ToolBar\your_logo.png
C:\WINDOWS\IE4 Error Log.txt
C:\WINDOWS\?????????.exe . . . . failed to delete
.
((((((((((((((((((((((((( Files Created from 2008-09-08 to 2008-10-08 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-08 11:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-10-08 11:44 40,712 ----a-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-10-08 11:44 4,938,784 ----a-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-10-08 11:44 376,864 ----a-w C:\WINDOWS\system32\drivers\fidbox2.dat
2008-10-08 11:44 2,368 ----a-w C:\WINDOWS\system32\drivers\fidbox2.idx
2008-09-15 22:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-09-15 20:21 --------- d-----w C:\Program Files\Windows Live
2008-09-15 20:21 --------- d-----w C:\Program Files\MSN Messenger
2008-09-15 20:21 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-09-14 23:25 96,976 ----a-w C:\WINDOWS\system32\drivers\klin.dat
2008-09-14 22:46 87,855 ----a-w C:\WINDOWS\system32\drivers\klick.dat
2008-09-14 22:45 --------- d-----w C:\Program Files\Kaspersky Lab
2008-09-14 01:47 --------- d-----w C:\Program Files\Your Uninstaller 2008
2008-09-13 22:45 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-09-12 18:31 --------- d-----w C:\Program Files\Google
2008-07-29 17:21 218,376 ----a-w C:\WINDOWS\system32\klogon.dll
2008-07-18 19:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 19:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 19:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 19:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 19:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 19:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 19:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 19:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
.
------- Sigcheck -------
08/04/2004 01:56 AM 14336 0ecd0853cadb84ae5df7da9bd1731cc7 C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\svchost.exe
08/04/2004 01:56 AM 14336 0ecd0853cadb84ae5df7da9bd1731cc7 C:\WINDOWS\system32\svchost.exe
08/04/2004 01:56 AM 14336 0ecd0853cadb84ae5df7da9bd1731cc7 C:\WINDOWS\system32\dllcache\svchost.exe
08/04/2004 01:56 AM 82944 c3b9fd7b0d0824fc224684b73302a0fd C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\ws2_32.dll
08/04/2004 01:56 AM 82944 c3b9fd7b0d0824fc224684b73302a0fd C:\WINDOWS\system32\ws2_32.dll
08/04/2004 01:56 AM 82944 c3b9fd7b0d0824fc224684b73302a0fd C:\WINDOWS\system32\dllcache\ws2_32.dll
08/04/2004 12:14 AM 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\tcpip.sys
06/20/2008 01:45 PM 360320 2a5554fc5b1e04e131230e3ce035c3f9 C:\WINDOWS\SoftwareDistribution\Download\77d40fc9473e388a3d9833a56a4d281f\SP2GDR\tcpip.sys
06/20/2008 01:44 PM 360960 744e57c99232201ae98c49168b918f48 C:\WINDOWS\SoftwareDistribution\Download\77d40fc9473e388a3d9833a56a4d281f\SP2QFE\tcpip.sys
06/20/2008 02:51 PM 361600 9aefa14bd6b182d61e3119fa5f436d3d C:\WINDOWS\SoftwareDistribution\Download\77d40fc9473e388a3d9833a56a4d281f\SP3GDR\tcpip.sys
06/20/2008 02:59 PM 361600 ad978a1b783b5719720cff204b666c8e C:\WINDOWS\SoftwareDistribution\Download\77d40fc9473e388a3d9833a56a4d281f\SP3QFE\tcpip.sys
10/30/2007 08:20 PM 360064 90caff4b094573449a0872a0f919b178 C:\WINDOWS\SoftwareDistribution\Download\a1c8b8d6896ab783c320f2b6e9fdb4e3\SP2GDR\tcpip.sys
10/30/2007 07:53 PM 360832 64798ecfa43d78c7178375fcdd16d8c8 C:\WINDOWS\SoftwareDistribution\Download\a1c8b8d6896ab783c320f2b6e9fdb4e3\SP2QFE\tcpip.sys
08/04/2004 12:14 AM 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\system32\dllcache\tcpip.sys
08/04/2004 12:14 AM 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\system32\drivers\tcpip.sys
08/04/2004 01:56 AM 501248 ba4e08425b62be257ae4557da058f1aa C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\winlogon.exe
08/04/2004 01:56 AM 501248 ba4e08425b62be257ae4557da058f1aa C:\WINDOWS\system32\winlogon.exe
08/04/2004 01:56 AM 501248 ba4e08425b62be257ae4557da058f1aa C:\WINDOWS\system32\dllcache\winlogon.exe
08/04/2004 12:14 AM 182912 558635d3af1c7546d26067d5d9b6959e C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\ndis.sys
08/04/2004 12:14 AM 182912 558635d3af1c7546d26067d5d9b6959e C:\WINDOWS\system32\dllcache\ndis.sys
08/04/2004 12:14 AM 182912 558635d3af1c7546d26067d5d9b6959e C:\WINDOWS\system32\drivers\ndis.sys
08/04/2004 12:00 AM 29056 4448006b6bc60e6c027932cfc38d6855 C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\ip6fw.sys
08/04/2004 12:00 AM 29056 4448006b6bc60e6c027932cfc38d6855 C:\WINDOWS\system32\dllcache\ip6fw.sys
08/04/2004 12:00 AM 29056 4448006b6bc60e6c027932cfc38d6855 C:\WINDOWS\system32\drivers\ip6fw.sys
08/04/2004 01:56 AM 1029632 932f97b77f2625f7ff7dfc97552548f8 C:\WINDOWS\explorer.exe
06/13/2007 04:22 PM 1030656 4e877303248a09847fb303ee173fbd70 C:\WINDOWS\SoftwareDistribution\Download\3a3a1b0e39ca29cf149573255dab4592\SP2GDR\explorer.exe
06/13/2007 04:10 PM 1030656 d0dc9258122f39129966649085f45880 C:\WINDOWS\SoftwareDistribution\Download\3a3a1b0e39ca29cf149573255dab4592\SP2QFE\explorer.exe
08/04/2004 01:56 AM 1029632 932f97b77f2625f7ff7dfc97552548f8 C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\explorer.exe
08/04/2004 01:56 AM 1029632 932f97b77f2625f7ff7dfc97552548f8 C:\WINDOWS\system32\dllcache\explorer.exe
08/04/2004 01:56 AM 108032 706b1ed77d90dfafc71ac86afcc1cc03 C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\services.exe
08/04/2004 01:56 AM 108032 706b1ed77d90dfafc71ac86afcc1cc03 C:\WINDOWS\system32\services.exe
08/04/2004 01:56 AM 108032 706b1ed77d90dfafc71ac86afcc1cc03 C:\WINDOWS\system32\dllcache\services.exe
08/04/2004 01:56 AM 13312 e0c58b25fa2a8ac9ea18a0a5abb8a932 C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\lsass.exe
08/04/2004 01:56 AM 13312 e0c58b25fa2a8ac9ea18a0a5abb8a932 C:\WINDOWS\system32\lsass.exe
08/04/2004 01:56 AM 13312 e0c58b25fa2a8ac9ea18a0a5abb8a932 C:\WINDOWS\system32\dllcache\lsass.exe
08/04/2004 01:56 AM 15360 b87d2319441038f62bddaeeb6bce156d C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\ctfmon.exe
08/04/2004 01:56 AM 15360 b87d2319441038f62bddaeeb6bce156d C:\WINDOWS\system32\ctfmon.exe
08/04/2004 01:56 AM 15360 b87d2319441038f62bddaeeb6bce156d C:\WINDOWS\system32\dllcache\ctfmon.exe
08/04/2004 01:56 AM 24576 e5b1bafac265460493b1a12b65c1cf52 C:\WINDOWS\SoftwareDistribution\Download\612c685f7203138e99f59f28a80d6c3d\backup\userinit.exe
08/04/2004 01:56 AM 24576 e5b1bafac265460493b1a12b65c1cf52 C:\WINDOWS\system32\userinit.exe
08/04/2004 01:56 AM 24576 e5b1bafac265460493b1a12b65c1cf52 C:\WINDOWS\system32\dllcache\userinit.exe
.
(((((((((((((((((((((((((((((
snapshot@Sun 09-14-2008_ 4.41.35.43 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-30 12:39:01 17,784 ----a-w C:\WINDOWS\$hf_mig$\KB938464\spmsg.dll
+ 2007-11-30 12:39:01 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB938464\spuninst.exe
+ 2007-11-30 12:39:01 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB938464\update\spcustom.dll
+ 2007-11-30 11:18:13 752,504 ----a-w C:\WINDOWS\$hf_mig$\KB938464\update\update.exe
+ 2007-11-30 12:39:04 380,792 ----a-w C:\WINDOWS\$hf_mig$\KB938464\update\updspapi.dll
+ 2008-05-01 15:04:03 331,776 ----a-w C:\WINDOWS\$hf_mig$\KB952287\SP2QFE\msadce.dll
+ 2008-05-01 14:34:51 331,776 ----a-w C:\WINDOWS\$hf_mig$\KB952287\SP3GDR\msadce.dll
+ 2008-05-01 14:38:27 331,776 ----a-w C:\WINDOWS\$hf_mig$\KB952287\SP3QFE\msadce.dll
+ 2007-11-30 11:18:09 17,784 ----a-w C:\WINDOWS\$hf_mig$\KB952287\spmsg.dll
+ 2007-11-30 11:18:09 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB952287\spuninst.exe
+ 2007-11-30 11:18:09 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB952287\update\spcustom.dll
+ 2007-11-30 11:18:13 752,504 ----a-w C:\WINDOWS\$hf_mig$\KB952287\update\update.exe
+ 2007-11-30 11:18:13 380,792 ----a-w C:\WINDOWS\$hf_mig$\KB952287\update\updspapi.dll
+ 2008-06-23 16:13:43 1,024,000 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\browseui.dll
+ 2008-06-23 16:13:43 151,040 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\cdfview.dll
+ 2008-06-23 16:13:43 1,053,696 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\danim.dll
+ 2008-06-23 16:13:43 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\dxtmsft.dll
+ 2008-06-23 16:13:43 205,312 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\dxtrans.dll
+ 2008-06-23 16:13:43 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\extmgr.dll
+ 2008-06-23 09:53:58 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\iedw.exe
+ 2008-06-23 16:13:50 251,392 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\iepeers.dll
+ 2008-06-23 16:13:50 96,256 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\inseng.dll
+ 2008-06-23 16:13:50 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\jsproxy.dll
+ 2008-06-23 16:13:51 3,088,384 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mshtml.dll
+ 2008-06-23 16:13:51 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mshtmled.dll
+ 2008-06-23 16:13:51 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\msrating.dll
+ 2008-06-23 16:13:52 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mstime.dll
+ 2008-06-23 16:13:52 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\pngfilt.dll
+ 2008-06-23 16:13:52 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\shdocvw.dll
+ 2008-06-23 16:13:53 474,112 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\shlwapi.dll
+ 2008-07-03 12:12:30 690,176 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\spru0401.dll
+ 2008-06-23 16:13:53 617,472 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\urlmon.dll
+ 2008-06-23 16:13:53 665,600 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\wininet.dll
+ 2008-06-23 15:10:48 3,088,384 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\mshtml.dll
+ 2008-06-26 08:13:22 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\shdocvw.dll
+ 2008-06-26 08:13:23 617,472 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\urlmon.dll
+ 2008-06-23 15:10:48 664,576 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\wininet.dll
+ 2008-06-25 06:54:54 3,088,896 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\mshtml.dll
+ 2008-06-26 08:00:21 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\shdocvw.dll
+ 2008-06-26 08:00:21 617,472 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\urlmon.dll
+ 2008-06-23 14:54:52 665,088 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\wininet.dll
+ 2007-11-30 12:39:01 17,784 ----a-w C:\WINDOWS\$hf_mig$\KB953838\spmsg.dll
+ 2007-11-30 12:39:01 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB953838\spuninst.exe
+ 2007-11-30 12:39:01 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\spcustom.dll
+ 2007-11-30 11:18:13 752,504 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\update.exe
+ 2007-12-03 15:25:13 380,792 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\updspapi.dll
+ 2007-11-30 12:39:01 231,288 -c----w C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe
+ 2007-11-30 12:39:04 380,792 -c----w C:\WINDOWS\$NtUninstallKB938464$\spuninst\updspapi.dll
+ 2004-08-03 22:55:40 331,776 -c----w C:\WINDOWS\$NtUninstallKB952287$\msadce.dll
+ 2007-11-30 11:18:09 231,288 -c----w C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe
+ 2007-11-30 11:18:13 380,792 -c----w C:\WINDOWS\$NtUninstallKB952287$\spuninst\updspapi.dll
+ 2004-08-03 22:55:32 1,016,832 -c----w C:\WINDOWS\$NtUninstallKB953838$\browseui.dll
+ 2004-08-03 22:55:32 150,528 -c----w C:\WINDOWS\$NtUninstallKB953838$\cdfview.dll
+ 2004-08-03 22:55:34 1,053,184 -c----w C:\WINDOWS\$NtUninstallKB953838$\danim.dll
+ 2004-08-03 22:55:36 357,888 -c----w C:\WINDOWS\$NtUninstallKB953838$\dxtmsft.dll
+ 2004-08-03 22:55:36 201,728 -c----w C:\WINDOWS\$NtUninstallKB953838$\dxtrans.dll
+ 2004-08-03 22:55:36 55,808 -c----w C:\WINDOWS\$NtUninstallKB953838$\extmgr.dll
+ 2004-08-03 22:56:16 18,432 -c----w C:\WINDOWS\$NtUninstallKB953838$\iedw.exe
+ 2004-08-03 22:55:38 248,832 -c----w C:\WINDOWS\$NtUninstallKB953838$\iepeers.dll
+ 2004-08-03 22:55:38 96,256 -c----w C:\WINDOWS\$NtUninstallKB953838$\inseng.dll
+ 2004-08-03 22:55:40 15,872 -c----w C:\WINDOWS\$NtUninstallKB953838$\jsproxy.dll
+ 2004-08-03 22:55:42 3,003,392 -c----w C:\WINDOWS\$NtUninstallKB953838$\mshtml.dll
+ 2004-08-03 22:55:42 448,512 -c----w C:\WINDOWS\$NtUninstallKB953838$\mshtmled.dll
+ 2004-08-03 22:55:44 146,432 -c----w C:\WINDOWS\$NtUninstallKB953838$\msrating.dll
+ 2004-08-03 22:55:46 530,432 -c----w C:\WINDOWS\$NtUninstallKB953838$\mstime.dll
+ 2004-08-03 22:55:48 39,424 -c----w C:\WINDOWS\$NtUninstallKB953838$\pngfilt.dll
+ 2004-08-03 22:55:52 1,483,264 -c----w C:\WINDOWS\$NtUninstallKB953838$\shdocvw.dll
+ 2005-09-02 23:52:51 473,600 -c----w C:\WINDOWS\$NtUninstallKB953838$\shlwapi.dll
+ 2007-11-30 12:39:01 231,288 -c----w C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe
+ 2007-12-03 15:25:13 380,792 -c----w C:\WINDOWS\$NtUninstallKB953838$\spuninst\updspapi.dll
+ 2004-08-03 22:55:54 600,064 -c----w C:\WINDOWS\$NtUninstallKB953838$\urlmon.dll
+ 2004-08-03 22:55:58 654,848 -c----w C:\WINDOWS\$NtUninstallKB953838$\wininet.dll
+ 2007-03-08 23:23:58 253,440 -c----w C:\WINDOWS\$NtUninstallKB953838$\xpsp3res.dll
- 2004-08-03 22:55:32 1,016,832 ----a-w C:\WINDOWS\system32\browseui.dll
+ 2008-06-23 15:40:00 1,023,488 ----a-w C:\WINDOWS\system32\browseui.dll
- 2004-08-03 22:55:32 150,528 ----a-w C:\WINDOWS\system32\cdfview.dll
+ 2008-06-23 15:40:00 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll
- 2008-04-27 15:11:20 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\s\index.dat
+ 2008-09-24 14:52:16 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\s\index.dat
- 2008-04-27 15:11:20 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-09-24 14:52:16 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2008-04-27 15:11:20 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\.IE5\index.dat
+ 2008-09-24 14:52:16 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\.IE5\index.dat
- 2004-08-03 22:55:34 1,053,184 ----a-w C:\WINDOWS\system32\danim.dll
+ 2008-06-23 15:40:00 1,053,696 ----a-w C:\WINDOWS\system32\danim.dll
- 2004-08-03 22:55:32 1,016,832 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll
+ 2008-06-23 15:40:00 1,023,488 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll
- 2004-08-03 22:55:32 150,528 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll
+ 2008-06-23 15:40:00 151,040 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll
- 2007-07-30 16:19:20 92,504 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll
+ 2008-07-18 19:10:48 94,920 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll
- 2004-08-03 22:55:34 1,053,184 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll
+ 2008-06-23 15:40:00 1,053,696 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll
- 2004-08-03 22:55:36 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-06-23 15:40:01 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2004-08-03 22:55:36 201,728 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-06-23 15:40:01 205,312 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2004-08-03 22:55:36 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2008-06-23 15:40:01 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
- 2004-08-03 22:56:16 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
+ 2008-06-23 09:49:29 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
- 2004-08-03 22:55:38 248,832 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
+ 2008-06-23 15:40:01 250,880 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
- 2004-08-03 22:55:38 96,256 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
+ 2008-06-23 15:40:01 96,256 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
- 2004-08-03 22:55:40 15,872 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-06-23 15:40:01 16,384 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
- 2004-08-03 22:55:40 331,776 -c--a-w C:\WINDOWS\system32\dllcache\msadce.dll
+ 2008-05-01 14:30:35 331,776 -c--a-w C:\WINDOWS\system32\dllcache\msadce.dll
- 2004-08-03 22:55:42 3,003,392 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-06-23 15:40:06 3,080,704 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
- 2004-08-03 22:55:42 448,512 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-06-23 15:40:06 449,024 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2004-08-03 22:55:44 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-06-23 15:40:06 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
- 2004-08-03 22:55:46 530,432 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-06-23 15:40:07 532,480 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
- 2004-08-03 22:55:48 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-06-23 15:40:07 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2004-08-03 22:55:52 1,483,264 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
+ 2008-06-23 15:40:09 1,494,528 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
- 2005-09-02 23:52:51 473,600 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2008-06-23 15:40:09 474,112 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
- 2004-08-03 22:55:54 600,064 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-06-23 15:40:10 614,912 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
- 2004-08-03 22:55:58 654,848 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-06-23 15:40:10 657,920 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
- 2007-07-30 16:19:36 549,720 -c--a-w C:\WINDOWS\system32\dllcache\wuapi.dll
+ 2008-07-18 19:09:44 563,912 -c--a-w C:\WINDOWS\system32\dllcache\wuapi.dll
- 2007-07-30 16:19:16 53,080 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
+ 2008-07-18 19:10:42 53,448 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
- 2007-07-30 16:19:42 1,712,984 -c--a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
+ 2008-07-18 19:09:42 1,811,656 -c--a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
- 2007-07-30 16:19:32 325,976 -c--a-w C:\WINDOWS\system32\dllcache\wucltui.dll
+ 2008-07-18 19:09:46 325,832 -c--a-w C:\WINDOWS\system32\dllcache\wucltui.dll
- 2007-07-30 16:18:40 33,624 -c--a-w C:\WINDOWS\system32\dllcache\wups.dll
+ 2008-07-18 19:10:20 36,552 -c--a-w C:\WINDOWS\system32\dllcache\wups.dll
- 2007-07-30 16:19:28 203,096 -c--a-w C:\WINDOWS\system32\dllcache\wuweb.dll
+ 2008-07-18 19:09:44 205,000 -c--a-w C:\WINDOWS\system32\dllcache\wuweb.dll
+ 2004-08-03 20:10:40 17,024 ----a-w C:\WINDOWS\system32\drivers\bthenum.sys
+ 2004-08-03 21:40:14 273,792 ----a-w C:\WINDOWS\system32\drivers\bthport.sys
+ 2004-08-03 20:10:36 18,944 ----a-w C:\WINDOWS\system32\drivers\BTHUSB.SYS
- 2006-02-13 13:24:10 20,699 ----a-w C:\WINDOWS\system32\drivers\kl1.sys
+ 2008-07-21 15:34:36 121,872 ----a-w C:\WINDOWS\system32\drivers\kl1.sys
+ 2008-01-29 15:29:38 32,784 ----a-w C:\WINDOWS\system32\drivers\klbg.sys
+ 2008-03-13 16:02:46 26,640 ----a-w C:\WINDOWS\system32\drivers\klfltdev.sys
- 2007-12-07 20:56:34 162,064 ----a-w C:\WINDOWS\system32\drivers\klif.sys
+ 2008-09-14 22:45:36 213,008 ----a-w C:\WINDOWS\system32\drivers\klif.sys
+ 2008-04-30 15:06:48 24,592 ----a-w C:\WINDOWS\system32\drivers\klim5.sys
+ 2008-07-29 17:20:00 24,774 ----a-w C:\WINDOWS\system32\drivers\klopp.dat
+ 2004-08-03 20:10:40 59,648 ----a-w C:\WINDOWS\system32\drivers\rfcomm.sys
- 2004-08-03 22:55:36 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
+ 2008-06-23 15:40:01 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
- 2004-08-03 22:55:36 201,728 ----a-w C:\WINDOWS\system32\dxtrans.dll
+ 2008-06-23 15:40:01 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll
- 2004-08-03 22:55:36 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
+ 2008-06-23 15:40:01 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
- 2004-08-03 22:56:14 193,024 ----a-w C:\WINDOWS\system32\fsquirt.exe
+ 2004-08-03 21:56:14 193,024 ----a-w C:\WINDOWS\system32\fsquirt.exe
- 2004-08-03 22:55:38 248,832 ----a-w C:\WINDOWS\system32\iepeers.dll
+ 2008-06-23 15:40:01 250,880 ----a-w C:\WINDOWS\system32\iepeers.dll
- 2004-08-03 22:55:38 96,256 ----a-w C:\WINDOWS\system32\inseng.dll
+ 2008-06-23 15:40:01 96,256 ----a-w C:\WINDOWS\system32\inseng.dll
+ 2004-08-03 21:56:18 152,064 ----a-w C:\WINDOWS\system32\irftp.exe
+ 2004-08-03 21:55:40 26,624 ----a-w C:\WINDOWS\system32\irmon.dll
- 2004-08-03 22:55:40 15,872 ----a-w C:\WINDOWS\system32\jsproxy.dll
+ 2008-06-23 15:40:01 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll
- 2004-08-03 22:55:42 3,003,392 ----a-w C:\WINDOWS\system32\mshtml.dll
+ 2008-06-23 15:40:06 3,080,704 ----a-w C:\WINDOWS\system32\mshtml.dll
- 2004-08-03 22:55:42 448,512 ----a-w C:\WINDOWS\system32\mshtmled.dll
+ 2008-06-23 15:40:06 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll
- 2004-08-03 22:55:44 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
+ 2008-06-23 15:40:06 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
- 2004-08-03 22:55:46 530,432 ----a-w C:\WINDOWS\system32\mstime.dll
+ 2008-06-23 15:40:07 532,480 ----a-w C:\WINDOWS\system32\mstime.dll
- 2004-08-03 22:55:48 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
+ 2008-06-23 15:40:07 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
- 2004-08-03 22:55:52 1,483,264 ----a-w C:\WINDOWS\system32\shdocvw.dll
+ 2008-06-23 15:40:09 1,494,528 ----a-w C:\WINDOWS\system32\shdocvw.dll
- 2005-09-02 23:52:51 473,600 ----a-w C:\WINDOWS\system32\shlwapi.dll
+ 2008-06-23 15:40:09 474,112 ----a-w C:\WINDOWS\system32\shlwapi.dll
+ 2008-07-18 19:10:20 36,552 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
+ 2008-07-18 19:10:40 45,768 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
- 2007-11-30 12:39:01 17,784 ------w C:\WINDOWS\system32\spmsg.dll
+ 2007-11-30 11:18:09 17,784 ------w C:\WINDOWS\system32\spmsg.dll
- 2004-08-03 22:55:54 600,064 ----a-w C:\WINDOWS\system32\urlmon.dll
+ 2008-06-23 15:40:10 614,912 ----a-w C:\WINDOWS\system32\urlmon.dll
- 2004-08-03 22:55:58 654,848 ----a-w C:\WINDOWS\system32\wininet.dll
+ 2008-06-23 15:40:10 657,920 ----a-w C:\WINDOWS\system32\wininet.dll
- 2004-08-03 22:56:00 108,032 ----a-w C:\WINDOWS\system32\wshbth.dll
+ 2004-08-03 21:56:00 108,032 ----a-w C:\WINDOWS\system32\wshBth.dll
+ 2004-08-03 21:56:00 8,192 ----a-w C:\WINDOWS\system32\wshirda.dll
- 2007-03-08 23:23:58 253,440 ----a-w C:\WINDOWS\system32\xpsp3res.dll
+ 2008-07-03 12:12:30 690,176 ----a-w C:\WINDOWS\system32\xpsp3res.dll
+ 2008-04-15 17:55:17 1,724,416 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\GdiPlus.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [01/19/2007 12:55 PM 5674352]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 07:24 PM 1694208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [07/29/2008 08:20 PM 206088]
"BluetoothAuthenticationAgent"="bthprops.cpl" [08/04/2004 12:56 AM 110592 C:\WINDOWS\system32\bthprops.cpl]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [08/04/2004 01:56 AM 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^السيناتور^قائمة ابدأ^البرامج^بدء التشغيل^Y'z ToolBar.lnk]
path=C:\Documents and Settings\السيناتور\قائمة ابدأ\البرامج\بدء التشغيل\Y'z ToolBar.lnk
backup=C:\WINDOWS\pss\Y'z ToolBar.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\kis
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VModes]
VModes AttachToDesktop [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ClocX]
--a------ 04/13/2004 05:12 PM 103936 C:\Program Files\ClocX\ClocX.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 08/04/2004 01:56 AM 15360 C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
--a------ 07/26/2002 08:45 AM 114688 C:\WINDOWS\system32\hkcmd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
--a------ 07/26/2002 09:05 AM 155648 C:\WINDOWS\system32\igfxtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
--a------ 05/18/2006 11:29 AM 49152 C:\Program Files\CyberLink\PowerDVD\Language\Language.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--a------ 10/13/2004 07:24 PM 1694208 C:\Program Files\Messenger\msmsgs.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 01/19/2007 12:55 PM 5674352 C:\Program Files\MSN Messenger\msnmsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 07/09/2001 10:50 AM 155648 C:\WINDOWS\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 01/30/2006 11:00 PM 155648 C:\Program Files\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--a------ 12/07/2005 10:57 PM 30208 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\S3Trayp]
-ra------ 02/06/2007 02:30 AM 176128 C:\WINDOWS\system32\S3Trayp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
--------- 06/06/2005 12:40 PM 544768 C:\WINDOWS\sm56hlpr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
--------- 11/11/2005 09:07 AM 90112 C:\WINDOWS\SOUNDMAN.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]
-ra------ 09/21/2006 11:36 AM 53248 C:\WINDOWS\system32\VTTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTrayp]
-ra------ 10/31/2005 11:15 PM 163840 C:\WINDOWS\system32\VTTrayp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
R0 klbg;Kaspersky Lab Boot Guard Driver;C:\WINDOWS\system32\drivers\klbg.sys [01/29/2008 06:29 PM 32784]
R0 ViBus;ViBus;C:\WINDOWS\system32\DRIVERS\ViBus.sys [03/26/2007 10:26 AM 16896]
R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys [03/29/2007 06:36 AM 9216]
R0 ViPrt;VIA SATA IDE Device Driver;C:\WINDOWS\system32\DRIVERS\ViPrt.sys [03/26/2007 10:26 AM 52224]
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service;C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [04/17/2007 06:58 AM 42496]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;C:\WINDOWS\system32\DRIVERS\klfltdev.sys [03/13/2008 07:02 PM 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [04/30/2008 06:06 PM 24592]
R3 S3GIGP;S3GIGP;C:\WINDOWS\system32\DRIVERS\S3gIGPm.sys [03/05/2007 04:54 AM 709632]
S3 yqfprhqr;yqfprhqr;C:\WINDOWS\system32\drivers\yqfprhqr.sys [ ]
.
- - - - ORPHANS REMOVED - - - -
BHO-{E8D2C90E-C25C-4DFE-8681-F4DDF9190547} - C:\Program Files\IEToolbar\Maktoob ToolBar\maktoobToolBar_RC2.dll
Toolbar-{2105CE2D-249D-4B0E-9619-CB91B00101F0} - C:\Program Files\IEToolbar\Maktoob ToolBar\maktoobToolBar_RC2.dll
WebBrowser-{2105CE2D-249D-4B0E-9619-CB91B00101F0} - C:\Program Files\IEToolbar\Maktoob ToolBar\maktoobToolBar_RC2.dll
HKLM-Run-kis - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.com.sa/
R1 -: HKCU-Internet Connection Wizard,ShellNext = hxxp://www.yahoo.com/
O8 -: "إضافة إلى حاجب الدعايات" - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 -: &تصدير إلى Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O16 -: Microsoft XML Parser for Java -
C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2008-10-08 14:45:56
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\rundll32.exe
.
**************************************************************************
.
Completion time: 10/08/2008 14:51:19 - machine was rebooted
ComboFix-quarantined-files.txt 2008-10-08 11:51:13
ComboFix2.txt 2008-09-14 01:58:45
ComboFix3.txt 2008-09-14 01:42:01
Pre-Run: 70,922,956,800 bytes free
Post-Run: 70,902,112,256 bytes free
436 --- E O F --- 2008-10-08 00:00:31
k:
