Noen som kan sjekke loggene mine?

Ethernet · 3. april 2009

Har nå kjørt ComboFix og HijackThis, noen som kan sjekke loggene mine?

ComboFix

Klikk for å se/fjerne innholdet nedenfor

ComboFix 09-04-01.01 - HP_Administrator 2009-04-03 14:38:42.1 - NTFSx86

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1266 [GMT 2:00]

Running from: c:\documents and settings\HP_Administrator\Desktop\ComboFix.exe

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

FW: Ventelo Anti-Virus 7.00 *disabled*

* Created a new restore point

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\HP_Administrator\Cookies\azujuzi.lib

c:\documents and settings\HP_Administrator\Cookies\fywoxyxeze.bin

c:\documents and settings\HP_Administrator\Cookies\oqywidoxij.scr

c:\documents and settings\HP_Administrator\Cookies\sohuno.vbs

c:\documents and settings\HP_Administrator\Desktopblackbird.jpg

c:\documents and settings\HP_Administrator\DesktopEditorFKWP1.5.exe

c:\documents and settings\HP_Administrator\DesktopEditorFKWP2.0.exe

c:\documents and settings\HP_Administrator\Desktopfilemanagerclient.exe

c:\documents and settings\HP_Administrator\Desktopfkwp1.5.exe

c:\documents and settings\HP_Administrator\Desktopfkwp2.0.exe

c:\documents and settings\HP_Administrator\Desktopfwebd.exe

c:\documents and settings\HP_Administrator\DesktopFWebdEditor.exe

c:\documents and settings\HP_Administrator\DesktopTrojan.Win32.BlackBird.exe

c:\documents and settings\HP_Administrator\Desktopvirii

c:\documents and settings\HP_Administrator\Desktopvirii\Trojan-Downloader.Win32.Agent.bl.exe

c:\documents and settings\HP_Administrator\Desktopvirii\Trojan-Downloader.Win32.Agent.p.exe

c:\documents and settings\HP_Administrator\Desktopvirii\Trojan-Downloader.Win32.Agent.r.exe

c:\documents and settings\HP_Administrator\Desktopvirii\Trojan-Downloader.Win32.Agent.t.exe

c:\documents and settings\HP_Administrator\Desktopvirii\Trojan-Downloader.Win32.Agent.v.exe

c:\documents and settings\HP_Administrator\Local Settings\Temporary Internet Files\badyp.inf

c:\documents and settings\HP_Administrator\Local Settings\Temporary Internet Files\efaci.pif

c:\documents and settings\HP_Administrator\Local Settings\Temporary Internet Files\gyzugu.scr

c:\documents and settings\HP_Administrator\Local Settings\Temporary Internet Files\wyzuwo.bat

c:\program files\SpywareIsolator

c:\windows\a.bat

c:\windows\base64.tmp

c:\windows\bdn.com

c:\windows\BMbf8d75f3.txt

c:\windows\BMbf8d75f3.xml

c:\windows\cookies.ini

c:\windows\FVProtect.exe

c:\windows\Installer\{5615919b-eef9-4a3c-bd45-6d7d4bd81878}\zip.dll

c:\windows\iTunesMusic.exe

c:\windows\mssecu.exe

c:\windows\pskt.ini

c:\windows\system32\aurxdkhp.ini

c:\windows\system32\bxyuxnop.ini

c:\windows\system32\CcIRYcfe.ini

c:\windows\system32\CcIRYcfe.ini2

c:\windows\system32\dqoikqyl.ini

c:\windows\system32\drivers\ati3raxx.sys

c:\windows\system32\GNpVvyxx.ini

c:\windows\system32\GNpVvyxx.ini2

c:\windows\system32\icf.exe.exe

c:\windows\system32\jvsjgxdi.ini

c:\windows\system32\mcrh.tmp

c:\windows\system32\nqjglmii.ini

c:\windows\system32\qqxxsxod.ini

c:\windows\system32\uthuxfhf.ini

c:\windows\system32\wHgiknpo.ini

c:\windows\system32\wHgiknpo.ini2

c:\windows\system32\wvkpwlph.ini

c:\windows\system32\xjtjiyhg.ini

c:\windows\system32\YbdgNXyb.ini

c:\windows\system32\YbdgNXyb.ini2

c:\windows\system32\yidouayg.ini

c:\windows\system32akttzn.exe

c:\windows\system32anticipator.dll

c:\windows\system32awtoolb.dll

c:\windows\system32bdn.com

c:\windows\system32bsva-egihsg52.exe

c:\windows\system32dpcproxy.exe

c:\windows\system32emesx.dll

c:\windows\system32h@tkeysh@@k.dll

c:\windows\system32hoproxy.dll

c:\windows\system32hxiwlgpm.dat

c:\windows\system32hxiwlgpm.exe

c:\windows\system32medup012.dll

c:\windows\system32medup020.dll

c:\windows\system32msgp.exe

c:\windows\system32msnbho.dll

c:\windows\system32mssecu.exe

c:\windows\system32msvchost.exe

c:\windows\system32mtr2.exe

c:\windows\system32mwin32.exe

c:\windows\system32netode.exe

c:\windows\system32newsd32.exe

c:\windows\system32ps1.exe

c:\windows\system32psof1.exe

c:\windows\system32psoft1.exe

c:\windows\system32regc64.dll

c:\windows\system32regm64.dll

c:\windows\system32Rundl1.exe

c:\windows\system32smp

c:\windows\system32smp\msrc.exe

c:\windows\system32sncntr.exe

c:\windows\system32ssurf022.dll

c:\windows\system32ssvchost.com

c:\windows\system32ssvchost.exe

c:\windows\system32sysreq.exe

c:\windows\system32temp#01.exe

c:\windows\system32thun.dll

c:\windows\system32thun32.dll

c:\windows\system32taack.dat

c:\windows\system32taack.exe

c:\windows\system32VBIEWER.OCX

c:\windows\system32vbsys2.dll

c:\windows\system32vcatchpi.dll

c:\windows\system32winlogonpc.exe

c:\windows\system32winsystem.exe

c:\windows\system32WINWGPX.EXE

c:\windows\Temp\517122667.exe

c:\windows\userconfig9x.dll

c:\windows\wiaserviv.log

c:\windows\winsystem.exe

c:\windows\zip1.tmp

c:\windows\zip2.tmp

c:\windows\zip3.tmp

c:\windows\zipped.tmp

D:\Autorun.inf

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Legacy_ATI3RAXX

-------\Legacy_EVENTLOGAUDIOSRV

-------\Legacy_ICF

-------\Legacy_TCPSR

-------\Service_ati3raxx

-------\Service_EventlogAudioSrv

-------\Service_ICF

-------\Service_tcpsr

((((((((((((((((((((((((( Files Created from 2009-03-03 to 2009-04-03 )))))))))))))))))))))))))))))))

.

2009-04-03 14:36 . 2006-03-03 00:42 73,728 --a------ C:\pv.exe

2009-04-03 14:34 . 2009-04-03 14:34 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-04-03 14:34 . 2009-04-03 14:34 <DIR> d-------- c:\documents and settings\HP_Administrator\Application Data\Malwarebytes

2009-04-03 14:34 . 2009-04-03 14:34 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes

2009-04-03 14:34 . 2009-03-26 16:49 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys

2009-04-03 14:34 . 2009-03-26 16:49 15,504 --a------ c:\windows\system32\drivers\mbam.sys

2009-04-02 21:25 . 2009-04-02 21:25 21,664 --a------ c:\windows\system32\drivers\jls3f5d.sys

2009-04-02 21:22 . 2009-04-02 21:22 21,664 --a------ c:\windows\system32\drivers\ign6d20.sys

2009-04-02 21:11 . 2009-04-02 21:11 21,664 --a------ c:\windows\system32\drivers\acr3630.sys

2009-04-02 21:04 . 2009-04-02 21:04 21,664 --a------ c:\windows\system32\drivers\tsj28ff.sys

2009-04-02 17:38 . 2009-04-02 17:38 21,664 --a------ c:\windows\system32\drivers\sfp4332.sys

2009-03-29 01:29 . 2009-03-29 01:29 <DIR> d----c--- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}

2009-03-28 19:32 . 2009-03-28 19:32 <DIR> d-------- c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP

2009-03-13 10:21 . 2009-03-13 10:21 <DIR> d-------- c:\program files\AskBarDis

2009-03-12 22:58 . 2009-03-12 22:58 <DIR> d-------- c:\program files\WinPcap

2009-03-12 15:10 . 2009-03-12 15:10 <DIR> d-------- c:\documents and settings\HP_Administrator\Application Data\Windows Search

2009-03-12 12:48 . 2009-03-12 12:48 <DIR> d-------- c:\program files\Microsoft Silverlight

2009-03-12 12:48 . 2009-03-12 12:48 <DIR> d-------- c:\program files\Microsoft

2009-03-12 12:47 . 2009-03-12 12:47 <DIR> d-------- c:\windows\system32\GroupPolicy

2009-03-12 12:47 . 2009-03-12 12:47 <DIR> d-------- c:\program files\Windows Desktop Search

2009-03-12 12:47 . 2009-03-12 12:47 <DIR> d-------- c:\documents and settings\HP_Administrator\Application Data\Windows Desktop Search

2009-03-12 12:46 . 2008-03-07 19:02 192,000 --------- c:\windows\system32\dllcache\offfilt.dll

2009-03-12 12:46 . 2008-03-07 19:02 98,304 --------- c:\windows\system32\dllcache\nlhtml.dll

2009-03-12 12:46 . 2008-03-07 19:02 29,696 --------- c:\windows\system32\dllcache\mimefilt.dll

2009-03-12 12:44 . 2009-03-12 12:44 <DIR> d-------- c:\windows\system32\zh-tw

2009-03-12 12:44 . 2009-03-12 12:44 <DIR> d-------- c:\windows\system32\zh-cn

2009-03-12 12:44 . 2009-03-12 12:45 <DIR> d-------- c:\windows\system32\da-dk

2009-03-12 12:44 . 2009-03-12 12:44 <DIR> d-------- c:\windows\system32\cs-cz

2009-03-12 12:44 . 2009-03-12 12:44 <DIR> d-------- c:\windows\system32\bg-bg

2009-03-12 12:44 . 2009-03-12 12:44 <DIR> d-------- c:\windows\system32\ar-sa

2009-03-12 12:44 . 2009-01-09 21:19 1,089,593 --------- c:\windows\system32\dllcache\ntprint.cat

2009-03-12 12:06 . 2009-03-12 12:06 <DIR> d-------- c:\windows\system32\MpEngineStore

2009-03-12 11:52 . 2009-03-12 12:29 <DIR> d-------- c:\windows\SxsCaPendDel

2009-03-12 11:52 . 2009-03-12 11:53 <DIR> d-------- C:\b993329fbc071381f922

2009-03-10 11:38 . 2009-03-17 13:50 145 --a-s---- c:\windows\system32\879285418.dat

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-04-03 12:58 --------- d-----w c:\program files\DNA

2009-04-03 12:58 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\DNA

2009-03-28 23:30 --------- d-----w c:\program files\FlashGet

2009-03-27 17:59 --------- d-----w c:\documents and settings\All Users\Application Data\avg8

2009-03-20 08:08 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\BitTorrent

2009-03-10 08:51 --------- d-----w c:\program files\The_Pirate_Bay

2009-02-11 22:32 --------- d-----w c:\program files\Java

2009-02-07 16:58 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\LimeWire

2009-02-06 20:47 --------- d-----w c:\documents and settings\HP_Administrator\Application Data\dvdcss

2009-02-06 19:01 --------- d-----w c:\program files\Super_DVD_Creator_9.8

2009-02-03 22:25 325,128 ----a-w c:\windows\system32\drivers\avgldx86.sys

2008-11-13 16:50 18,062 ----a-w c:\documents and settings\HP_Administrator\Application Data\cybozo.exe

2008-11-13 16:50 14,894 ----a-w c:\program files\Common Files\sugyc.bat

2008-11-13 16:50 11,928 ----a-w c:\documents and settings\All Users\Application Data\paryvefy.bin

2008-11-13 16:50 11,342 ----a-w c:\documents and settings\HP_Administrator\Application Data\fobyxyqace.reg

2008-11-13 16:50 10,618 ----a-w c:\documents and settings\HP_Administrator\Application Data\qerylerifu.scr

2008-11-13 16:50 10,560 ----a-w c:\documents and settings\All Users\Application Data\qepu.scr

2008-11-13 16:50 10,134 ----a-w c:\program files\Common Files\synosekyk.com

.

------- Sigcheck -------

2005-03-14 10:17 359936 6129e70f3d2f1e60860c930ebeaf92c2 c:\windows\$hf_mig$\KB893066\SP2QFE\tcpip.sys

2007-10-30 18:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys

2008-06-20 12:44 360960 744e57c99232201ae98c49168b918f48 c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys

2008-06-20 13:51 361600 9aefa14bd6b182d61e3119fa5f436d3d c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys

2008-06-20 13:59 361600 ad978a1b783b5719720cff204b666c8e c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys

2008-06-20 12:45 360320 2a5554fc5b1e04e131230e3ce035c3f9 c:\windows\$NtServicePackUninstall$\tcpip.sys

2008-04-13 21:20 361344 93ea8d04ec73a85db02eb8805988f733 c:\windows\$NtUninstallKB951748$\tcpip.sys

2007-10-30 19:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\$NtUninstallKB951748_0$\tcpip.sys

2008-04-13 21:20 361344 accf5a9a1ffaa490f33dba1c632b95e1 c:\windows\ServicePackFiles\i386\tcpip.sys

2008-06-20 13:51 361600 9425b72f40257b45d45d24773273dad0 c:\windows\system32\dllcache\tcpip.sys

2008-06-20 13:51 361600 9425b72f40257b45d45d24773273dad0 c:\windows\system32\drivers\tcpip.sys

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

"{a33fa729-d155-4b23-842b-2c665ecabdb6}"= "c:\program files\The_Pirate_Bay\tbThe_.dll" [2009-03-08 2079256]

[HKEY_CLASSES_ROOT\clsid\{a33fa729-d155-4b23-842b-2c665ecabdb6}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]

2008-08-06 16:20 279944 --a------ c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{a33fa729-d155-4b23-842b-2c665ecabdb6}]

2009-03-08 14:28 2079256 --a------ c:\program files\The_Pirate_Bay\tbThe_.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

"{a33fa729-d155-4b23-842b-2c665ecabdb6}"= "c:\program files\The_Pirate_Bay\tbThe_.dll" [2009-03-08 2079256]

"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-08-06 279944]

[HKEY_CLASSES_ROOT\clsid\{a33fa729-d155-4b23-842b-2c665ecabdb6}]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]

[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]

"{A33FA729-D155-4B23-842B-2C665ECABDB6}"= "c:\program files\The_Pirate_Bay\tbThe_.dll" [2009-03-08 2079256]

"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-08-06 279944]

[HKEY_CLASSES_ROOT\clsid\{a33fa729-d155-4b23-842b-2c665ecabdb6}]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]

[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-06-18 68856]

"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]

"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2008-12-16 342848]

"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X]

"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-28 221184]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-03-21 98304]

"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-04 1601304]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]

"Flashget"="c:\program files\FlashGet\flashget.exe" [2007-09-25 2007088]

c:\documents and settings\HP_Administrator\Start Menu\Programs\Startup\

Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 113664]

c:\documents and settings\All Users\Start Menu\Programs\Startup\

Hurtigstart for Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-04-23 29696]

Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-05-26 123904]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"ForceClassicControlPanel"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]

2009-02-04 00:25 10520 c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"VIDC.PIXL"= pclepixl.dll

"VIDC.NTN1"= NUVision.ax

"VIDC.PIM2"= RALCodec.dll

"VIDC.MJPG"= Pvmjpg30.dll

"VIDC.I420"= vdrcodec.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ati2kfxx.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ati6lvxx.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusDisableNotify"=dword:00000001

"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"c:\\Program Files\\FlashGet\\flashget.exe"=

"c:\\Program Files\\LimeWire\\LimeWire.exe"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\RM.exe"=

"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\Studio.exe"=

"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\PMSRegisterFile.exe"=

"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\umi.exe"=

"c:\\Program Files\\DNA\\btdna.exe"=

"c:\\Program Files\\BitTorrent\\bittorrent.exe"=

"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\BitLord\\BitLord.exe"=

R0 dontgo;Promise Removable Disk Control Driver;c:\windows\system32\drivers\dontgo.sys [2004-06-30 7680]

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-09-04 325128]

R1 DCxxMJPG;Pinnacle DC10plus, Motion-JPEG VideoIO Board;c:\windows\system32\drivers\DCxxMJPG.sys [2008-03-18 132940]

R1 MemAlloc;MemAlloc;c:\windows\system32\drivers\MemAlloc.sys [2008-03-19 5543]

R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-02-04 298264]

R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [2005-01-03 2799488]

S0 ati2kfxx;ati2kfxx;c:\windows\system32\Drivers\ati2kfxx.sys --> c:\windows\system32\Drivers\ati2kfxx.sys [?]

S0 ati6lvxx;ati6lvxx;c:\windows\system32\Drivers\ati6lvxx.sys --> c:\windows\system32\Drivers\ati6lvxx.sys [?]

S1 LStone;Pinnacle Systems Studio AV/DV Overlay;c:\windows\system32\DRIVERS\lstone2k.sys --> c:\windows\system32\DRIVERS\lstone2k.sys [?]

S3 acr3630;acr3630;c:\windows\system32\drivers\acr3630.sys [2009-04-02 21664]

S3 F-Secure BlackLight Sensor;F-Secure BlackLight Sensor;c:\windows\TEMP\F-Secure\Anti-Virus\fsblsrv.exe --> c:\windows\TEMP\F-Secure\Anti-Virus\fsblsrv.exe [?]

S3 ign6d20;ign6d20;c:\windows\system32\drivers\ign6d20.sys [2009-04-02 21664]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2009-04-03 38496]

S3 NUVision;Pinnacle LINX;c:\windows\system32\DRIVERS\NUVision.sys --> c:\windows\system32\DRIVERS\NUVision.sys [?]

S3 sfp4332;sfp4332;c:\windows\system32\drivers\sfp4332.sys [2009-04-02 21664]

S3 tsj28ff;tsj28ff;c:\windows\system32\drivers\tsj28ff.sys [2009-04-02 21664]

S3 WN5301;LIteon Wireless PCI Network Adapter Service;c:\windows\system32\drivers\wn5301.sys [2005-01-03 468768]

.

Contents of the 'Scheduled Tasks' folder

2009-03-12 c:\windows\Tasks\Internett-tjenester.job

- c:\program files\Hewlett-Packard\SDP\HPSdpApp.exe [2005-09-08 20:23]

.

- - - - ORPHANS REMOVED - - - -

HKCU-Run-rs32net - c:\windows\System32\rs32net.exe

HKLM-Run-BMbf8d75f3 - c:\windows\system32\oerxthdi.dll

HKLM-Run-Antivirus Pro 2009 - c:\program files\AntivirusPro2009\AntivirusPro2009.exe

HKLM-Run-NWEReboot - (no file)

Notify-__c00CB279 - c:\windows\system32\__c00CB279.dat

Notify-__c00CBB67 - c:\windows\system32\__c00CBB67.dat

Notify-__c00FBE58 - c:\windows\system32\__c00FBE58.dat

Notify-wvUoMdEW - wvUoMdEW.dll

Notify-zlnvudq - zlnvudq32.dll

SafeBoot-ati3bqxx.sys

SafeBoot-ati7lqxx.sys

.

------- Supplementary Scan -------

.

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uStart Page = hxxp://www.google.com

mStart Page = hxxp://www.google.com

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: &Download All with FlashGet - c:\program files\FlashGet\jc_all.htm

IE: &Download with FlashGet - c:\program files\FlashGet\jc_link.htm

.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-04-03 15:00:33

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]

"ThreadingModel"="Apartment"