ComboFix 11-12-05.04 - *** 06.12.2011 7:28.1.8 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.47.1033.18.8187.6181 [GMT 1:00] Kjører fra: c:\users\***\Desktop\ComboFix.exe AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7} AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116} SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A} SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Opprettet nytt gjenopprettingspunkt . . ((((((((((((((((((((((((((((((((((((((( Andre slettinger ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\***\AppData\Local\emp.exe G:\Autorun.inf . . ((((((((((((((((((((((((((( Filer Opprettet Fra 2011-11-06 til 2011-12-06 ))))))))))))))))))))))))))))))))) . . 2011-12-04 21:02 . 2011-12-04 21:02 -------- d-----w- c:\users\***\AppData\Roaming\Proxifier 2011-12-04 21:02 . 2011-12-04 21:02 -------- d-----w- c:\program files (x86)\Proxifier 2011-12-04 21:02 . 2011-05-01 00:32 88816 ----a-w- c:\windows\SysWow64\ProxifierShellExt.dll 2011-12-04 21:02 . 2011-05-01 00:32 73968 ----a-w- c:\windows\system32\PrxerDrv.dll 2011-12-04 21:02 . 2011-05-01 00:32 67824 ----a-w- c:\windows\SysWow64\PrxerDrv.dll 2011-12-04 21:02 . 2011-05-01 00:32 55024 ----a-w- c:\windows\system32\PrxerNsp.dll 2011-12-04 21:02 . 2011-05-01 00:32 54000 ----a-w- c:\windows\SysWow64\PrxerNsp.dll 2011-12-04 21:02 . 2011-05-01 00:32 100592 ----a-w- c:\windows\system32\ProxifierShellExt.dll 2011-12-04 21:02 . 1997-06-06 14:52 11264 ----a-w- c:\windows\SysWow64\SPORDER.DLL 2011-11-22 20:36 . 2011-11-22 20:36 -------- d-----w- c:\users\***\AppData\Local\wow-one.com 2011-11-19 22:14 . 2011-11-19 22:14 -------- d-----w- c:\program files (x86)\DivX 2011-11-18 23:14 . 2011-11-19 21:21 -------- d-sh--w- c:\users\***\wc 2011-11-18 23:13 . 2011-11-18 23:13 -------- d-----w- c:\users\***\AppData\Local\Universe Sandbox 2011-11-18 23:13 . 2011-11-18 23:14 -------- d-sh--w- c:\users\***\AppData\Roaming\wyUpdate AU 2011-11-18 23:13 . 2011-11-18 23:13 -------- d-----w- c:\program files (x86)\Universe Sandbox 2011-11-16 19:02 . 2011-11-16 19:02 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi 2011-11-11 10:06 . 2011-11-11 10:06 -------- d-----w- c:\users\***\AppData\Local\Skyrim . . . (((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-11-12 19:55 . 2011-09-28 11:30 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2011-11-12 19:55 . 2010-12-28 01:41 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2011-11-12 16:06 . 2011-09-28 11:30 280904 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2011-10-27 23:39 . 2010-12-28 01:41 75136 ----a-w- c:\windows\SysWow64\PnkBstrA.exe 2011-10-20 23:26 . 2011-10-20 23:26 94208 ----a-w- c:\windows\SysWow64\dpl100.dll 2011-10-01 03:25 . 2011-10-13 23:07 1638912 ----a-w- c:\windows\system32\mshtml.tlb 2011-10-01 02:42 . 2011-10-13 23:07 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb 2011-09-28 08:47 . 2011-09-28 08:47 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-09-24 02:58 . 2011-09-24 02:58 10207232 ----a-w- c:\windows\system32\drivers\atikmdag.sys 2011-09-24 02:12 . 2011-09-24 02:12 24604160 ----a-w- c:\windows\system32\atio6axx.dll 2011-09-24 02:03 . 2011-09-24 02:03 159744 ----a-w- c:\windows\system32\atiapfxx.exe 2011-09-24 02:03 . 2010-09-29 01:55 736768 ----a-w- c:\windows\SysWow64\aticfx32.dll 2011-09-24 02:01 . 2010-09-29 01:54 867328 ----a-w- c:\windows\system32\aticfx64.dll 2011-09-24 01:59 . 2011-09-24 01:59 466944 ----a-w- c:\windows\system32\ATIDEMGX.dll 2011-09-24 01:59 . 2011-09-24 01:59 487936 ----a-w- c:\windows\system32\atieclxx.exe 2011-09-24 01:58 . 2011-09-24 01:58 204288 ----a-w- c:\windows\system32\atiesrxx.exe 2011-09-24 01:57 . 2011-09-24 01:57 120320 ----a-w- c:\windows\system32\atitmm64.dll 2011-09-24 01:57 . 2011-09-24 01:57 423424 ----a-w- c:\windows\system32\atipdl64.dll 2011-09-24 01:56 . 2011-09-24 01:56 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll 2011-09-24 01:56 . 2011-09-24 01:56 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll 2011-09-24 01:56 . 2011-09-24 01:56 21504 ----a-w- c:\windows\system32\atimuixx.dll 2011-09-24 01:56 . 2011-09-24 01:56 59392 ----a-w- c:\windows\system32\atiedu64.dll 2011-09-24 01:56 . 2011-09-24 01:56 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll 2011-09-24 01:56 . 2011-09-24 01:56 18587648 ----a-w- c:\windows\SysWow64\atioglxx.dll 2011-09-24 01:53 . 2010-09-29 01:46 4231680 ----a-w- c:\windows\SysWow64\atidxx32.dll 2011-09-24 01:43 . 2010-09-29 01:37 4960768 ----a-w- c:\windows\system32\atidxx64.dll 2011-09-24 01:43 . 2011-09-24 01:43 1113088 ----a-w- c:\windows\system32\atiumd6v.dll 2011-09-24 01:42 . 2011-09-24 01:42 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll 2011-09-24 01:42 . 2011-09-24 01:42 4023296 ----a-w- c:\windows\system32\atiumd6a.dll 2011-09-24 01:35 . 2011-09-24 01:35 51200 ----a-w- c:\windows\system32\aticalrt64.dll 2011-09-24 01:34 . 2011-09-24 01:34 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll 2011-09-24 01:34 . 2011-09-24 01:34 44544 ----a-w- c:\windows\system32\aticalcl64.dll 2011-09-24 01:34 . 2011-09-24 01:34 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll 2011-09-24 01:34 . 2011-09-24 01:34 9809920 ----a-w- c:\windows\system32\aticaldd64.dll 2011-09-24 01:32 . 2010-09-29 01:28 4289024 ----a-w- c:\windows\SysWow64\atiumdag.dll 2011-09-24 01:32 . 2010-09-29 01:22 4174848 ----a-w- c:\windows\SysWow64\atiumdva.dll 2011-09-24 01:31 . 2011-09-24 01:31 8390656 ----a-w- c:\windows\SysWow64\aticaldd.dll 2011-09-24 01:27 . 2010-09-29 01:23 58880 ----a-w- c:\windows\system32\coinst.dll 2011-09-24 01:26 . 2011-09-24 01:26 5431808 ----a-w- c:\windows\system32\atiumd64.dll 2011-09-24 01:19 . 2011-09-24 01:19 479744 ----a-w- c:\windows\system32\atiadlxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 335872 ----a-w- c:\windows\SysWow64\atiadlxy.dll 2011-09-24 01:19 . 2011-09-24 01:19 17408 ----a-w- c:\windows\system32\atig6pxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 14336 ----a-w- c:\windows\SysWow64\atiglpxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 14336 ----a-w- c:\windows\system32\atiglpxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 39936 ----a-w- c:\windows\system32\atig6txx.dll 2011-09-24 01:19 . 2011-09-24 01:19 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll 2011-09-24 01:19 . 2011-09-24 01:19 317952 ----a-w- c:\windows\system32\drivers\atikmpag.sys 2011-09-24 01:18 . 2010-09-29 01:14 40960 ----a-w- c:\windows\system32\atiuxp64.dll 2011-09-24 01:18 . 2010-09-29 01:14 31744 ----a-w- c:\windows\SysWow64\atiuxpag.dll 2011-09-24 01:18 . 2010-09-29 01:13 38912 ----a-w- c:\windows\system32\atiu9p64.dll 2011-09-24 01:18 . 2010-09-29 01:13 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll 2011-09-24 01:17 . 2011-09-24 01:17 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll 2011-09-24 01:16 . 2011-09-24 01:16 54784 ----a-w- c:\windows\system32\atimpc64.dll 2011-09-24 01:16 . 2011-09-24 01:16 54784 ----a-w- c:\windows\system32\amdpcom64.dll 2011-09-24 01:16 . 2011-09-24 01:16 53760 ----a-w- c:\windows\SysWow64\atimpc32.dll 2011-09-24 01:16 . 2011-09-24 01:16 53760 ----a-w- c:\windows\SysWow64\amdpcom32.dll 2011-09-23 20:15 . 2011-09-23 20:15 66048 ----a-w- c:\windows\system32\OpenVideo64.dll 2011-09-23 20:15 . 2011-09-23 20:15 56832 ----a-w- c:\windows\SysWow64\OpenVideo.dll 2011-09-23 20:14 . 2011-09-23 20:14 16787456 ----a-w- c:\windows\system32\amdocl64.dll 2011-09-23 20:14 . 2011-09-23 20:14 13753856 ----a-w- c:\windows\SysWow64\amdocl.dll 2011-09-23 20:13 . 2011-09-23 20:13 51200 ----a-w- c:\windows\system32\OpenCL.dll 2011-09-23 20:13 . 2011-09-23 20:13 43520 ----a-w- c:\windows\SysWow64\OpenCL.dll 2011-09-13 00:26 . 2011-10-13 23:06 9049936 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C7F8AAD6-EAF3-4989-99EC-3FA2352339D6}\mpengine.dll 2011-09-07 13:59 . 2011-09-21 04:50 16432 ----a-w- c:\windows\system32\lsdelete.exe . . (((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret ))))))))))))))))))))))))))))))))))))))))))))) . . *Merk* tomme oppføringer & gyldige standardoppføringer vises ikke REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480] "Steam"="c:\program files (x86)\Steam\steam.exe" [2011-08-08 1242448] "MX Skype Recorder"="c:\programdata\MXSkypeRecorder\MXSkypeRecorder.exe" [2010-01-30 581272] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-10-13 17351304] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-08-02 281768] "Malwarebytes Anti-Malware (reboot)"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-12-13 421160] "amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824] "UnlockerAssistant"="c:\program files (x86)\Unlocker\UnlockerAssistant.exe" [2010-07-04 17408] "Logitech G930"="c:\program files (x86)\Logitech\G930\G930.exe" [2011-03-23 1516888] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-09-23 343168] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2011-08-15 1955208] "Malwarebytes' Anti-Malware (reboot)"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208] . c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-5-25 24176560] MagicDisc.lnk - c:\program files (x86)\MagicDisc\MagicDisc.exe [2010-11-25 576000] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) "EnableLUA"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2011-10-29 2152152] R2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [x] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2011-04-27 136360] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 2329480] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x] S3 LADF_BakerCOnly;BakerC Filter Driver;c:\windows\system32\DRIVERS\ladfBakerCamd64.sys [x] S3 LADF_BakerROnly;BakerR Filter Driver;c:\windows\system32\DRIVERS\ladfBakerRamd64.sys [x] S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys [x] S3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys [x] S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] . . --- Andre tjenester/drivere lastet i minnet --- . *Deregistered* - Lavasoft Kernexplorer . Innholdet i mappen 'Scheduled Tasks' (planlagte oppgaver) . 2011-12-06 c:\windows\Tasks\Ad-Aware Update (Weekly).job - c:\program files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-08-18 14:01] . 2011-12-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-424250019-403202694-4158348409-1000Core.job - c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-27 03:04] . 2011-12-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-424250019-403202694-4158348409-1000UA.job - c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-27 03:04] . . --------- x86-64 ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Launch LgDeviceAgent"="c:\program files\Logitech\GamePanel Software\LgDevAgt.exe" [2010-08-03 415816] "Launch LCDMon"="c:\program files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe" [2010-08-03 2412616] "Launch LGDCore"="c:\program files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" [2010-08-03 4725320] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ------- Tilleggsskanning ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com/ mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\OFFICE11\EXCEL.EXE/3000 LSP: %SystemRoot%\system32\PrxerDrv.dll Trusted Zone: clonewarsadventures.com Trusted Zone: freerealms.com Trusted Zone: soe.com Trusted Zone: sony.com FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\sfz7ovdk.default\ FF - prefs.js: browser.startup.homepage - hxxp://en-US.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official . - - - - TOMME PEKERE FJERNET - - - - . Wow6432Node-HKCU-Run-Mal Updater 2 - c:\program files (x86)\Mal Updater 2\MalUpdater.exe AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe AddRemove-Stellar Impact - d:\games\Stellar Impact\uninst.exe . . . --------------------- LÅSTE REGISTERNØKLER --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10x_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10x_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Tidspunkt ferdig: 2011-12-06 07:33:09 ComboFix-quarantined-files.txt 2011-12-06 06:33 . Pre-Run: 8 823 627 776 bytes free Post-Run: 8 537 812 992 bytes free . - - End Of File - - 79413C8F60B61A55A055AC5D34925B7F