Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

My computer is under virus offensive!!


  • This topic is locked This topic is locked
2 replies to this topic

#1 vanik91

vanik91

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:08:29 AM

Posted 08 September 2012 - 04:48 AM

Mod EDit:MOVED to Virus,Trojan and Malware Removal Logs ~~boopme



Hello guys!!

First of all Sorry for my bad english language, i'am 13 and still learning.

I got a problem with my computer, i cant install any programs, or delete anything.
I can't watch films with Kaza codec pack, and i can't use safe mode in my computer.
I can't copy and paste files, and move them.
Sometimes i got problem with self shoutdowning my computer, and i must fast open Start>run and write shutdown -a.

I got also Microsoft Visual c++ eror Runtime libery
Runtime Error!
Program C;//Program files/Common files/Java/Java update/justchesk.exe
R6002
-floating point support not loaded


Could you check for me Combofic log, becouse i dont know whats wrong.


ComboFix 12-09-07.03 - Łukasz 2012-09-08 11:16:12.5.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.48.1045.18.3326.2837 [GMT 2:00]
Uruchomiony z: c:\documents and settings\úukasz\Pulpit\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Autorun.inf
C:\tspv.pif
c:\windows\system32\muzapp.exe
c:\windows\system32\SET312.tmp
c:\windows\system32\SET31E.tmp
D:\Autorun.inf
D:\njfqby.exe
E:\autorun.inf
E:\ykcrdx.exe
F:\Autorun.inf
F:\galfko.pif
G:\autorun.inf
H:\Autorun.inf
H:\qlml.pif
.
.
((((((((((((((((((((((((((((((((((((((( Sterowniki/Usługi )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_AMSINT32
-------\Service_amsint32
.
.
((((((((((((((((((((((((( Pliki utworzone od 2012-08-08 do 2012-09-08 )))))))))))))))))))))))))))))))
.
.
2012-08-13 12:30 . 2012-08-13 12:30 -------- d-----w- C:\NVIDIA
2012-08-13 11:53 . 2012-08-13 11:53 99328 --sh--r- C:\yuuqf.exe
2012-08-12 23:22 . 2012-08-12 23:22 99328 --sh--r- C:\qiveh.exe
2012-08-12 23:07 . 2012-08-12 23:07 -------- d-----r- C:\MSOCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-08 09:26 . 2012-09-08 09:26 99328 --sh--r- C:\poxq.exe
2012-07-06 13:58 . 2008-04-15 12:00 78336 ----a-w- c:\windows\system32\browser.dll
2012-07-03 18:22 . 2008-04-15 12:00 1866368 ----a-w- c:\windows\system32\win32k.sys
2012-07-02 17:38 . 2008-04-15 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-07-02 17:38 . 2008-04-15 12:00 43520 ------w- c:\windows\system32\licmgr10.dll
2012-07-02 17:38 . 2008-04-15 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-07-02 12:05 . 2008-04-15 12:00 385024 ------w- c:\windows\system32\html.iec
.
.
((((((((((((((((((((((((((((( SnapShot_2012-09-04_23.13.52 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-11 22:02 . 2009-07-11 22:02 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
+ 2012-09-08 09:25 . 2012-09-08 09:25 16384 c:\windows\temp\Perflib_Perfdata_268.dat
+ 2006-09-28 16:56 . 2006-09-28 16:56 55808 c:\windows\system32\WudfSvc.dll
+ 2006-09-28 18:13 . 2006-09-28 18:13 95344 c:\windows\system32\WUDFCoinstaller.dll
+ 2006-11-02 09:52 . 2006-11-02 09:52 42496 c:\windows\system32\wpdshextres.dll
+ 2006-10-18 18:00 . 2006-10-18 18:00 17408 c:\windows\system32\wpdshextautoplay.exe
+ 2005-01-28 11:44 . 2006-10-18 19:47 63488 c:\windows\system32\wpdmtpus.dll
+ 2005-01-28 11:44 . 2006-10-18 19:47 35840 c:\windows\system32\wpdconns.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 37376 c:\windows\system32\wmdmps.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 33792 c:\windows\system32\wmdmlog.dll
+ 2012-09-06 22:12 . 2007-07-27 07:41 16760 c:\windows\system32\spmsg.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 57344 c:\windows\system32\MTXSYNCICON.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 40960 c:\windows\system32\MTTELECHIP.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 27136 c:\windows\system32\mspmsnsv.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 57344 c:\windows\system32\MK_Lyric.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 45056 c:\windows\system32\MaXMLProto.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 24576 c:\windows\system32\MASetupCleaner.exe
+ 2012-03-28 20:11 . 2012-03-28 20:11 45320 c:\windows\system32\MAMACExtract.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 49152 c:\windows\system32\MaJGUILib.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 45056 c:\windows\system32\MACXMLProto.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 11264 c:\windows\system32\LAPRXY.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 57344 c:\windows\system32\issacapi_se-2.3.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 65536 c:\windows\system32\issacapi_pe-2.3.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 81920 c:\windows\system32\issacapi_bs-2.3.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 21504 c:\windows\system32\DRVSTORE\VIA_USB_MO_44F1A6D1FE2F1AF723962B0E72B35EBD82086CBC\VIA_USB_MODEM.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 16128 c:\windows\system32\DRVSTORE\VIA_USB_ET_A38AFFFB1BF77B37A2CB35D84B15A8BA7CDA99B1\VIA_USB_ETS.sys
+ 2012-09-06 22:14 . 2012-02-24 09:14 81208 c:\windows\system32\DRVSTORE\ssudrmnetm_255E5FCE84422FA1F205A33217EE8180DE04CE33\i386\ssudrmnetmp.sys
+ 2012-09-06 22:14 . 2012-02-24 09:14 58680 c:\windows\system32\DRVSTORE\ssudrmnet_D39417BF98726FF3123C177A78BDA6CAF5BDA5C3\i386\ssudrmnet.sys
+ 2012-09-06 22:14 . 2012-02-24 09:14 44856 c:\windows\system32\DRVSTORE\ssudnd5_AD70A6E29EA865E63DADEDA7961E6AE2B19AF6B5\i386\ssudnd5.sys
+ 2012-09-06 22:14 . 2012-02-24 09:14 32696 c:\windows\system32\DRVSTORE\ssudeadb_18A6AC5E6C4EBB3EF293BC9FF5C1AA76203CD1D9\i386\ssudeadb.sys
+ 2012-09-06 22:14 . 2012-02-24 09:14 80824 c:\windows\system32\DRVSTORE\ssudbus_6A8D9649351F2CABCFFD6809A45A0B39F8092020\i386\ssudbus.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14280 c:\windows\system32\DRVSTORE\sssdsdm2_3E9910A3892EA86C28F4763C7315EC7B73E4415A\i386\sssdcmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14280 c:\windows\system32\DRVSTORE\sssdobx2_D9FBD11376E2281804762C56AB8E278DF856564D\i386\sssdcmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 16712 c:\windows\system32\DRVSTORE\sssdmdm2_79766EB379327D1A4E454E957676346722FA1E71\i386\sssdmdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14280 c:\windows\system32\DRVSTORE\sssdmdm2_79766EB379327D1A4E454E957676346722FA1E71\i386\sssdcmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14152 c:\windows\system32\DRVSTORE\sssdbus_DCADABF0391F3233BD35664D34CDB5D18B4A92EA\i386\sssdwhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12544 c:\windows\system32\DRVSTORE\ssm_ser2_53F3D224B432100E2DE0FA124810CB8E06580477\i386\ssm_cmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14848 c:\windows\system32\DRVSTORE\ssm_mdm2_53F3D224B432100E2DE0FA124810CB8E06580477\i386\ssm_mdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12544 c:\windows\system32\DRVSTORE\ssm_mdm2_53F3D224B432100E2DE0FA124810CB8E06580477\i386\ssm_cmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12416 c:\windows\system32\DRVSTORE\ssm_bus_95AA2419C5D388E462430C22E7B02579DD7F6677\i386\ssm_whnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12160 c:\windows\system32\DRVSTORE\ssecunic_A24B1C89EAA29049770A027B837B79C454C2BE7F\i386\ssecwhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 10624 c:\windows\system32\DRVSTORE\ssecunic_A24B1C89EAA29049770A027B837B79C454C2BE7F\i386\sseccrnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12160 c:\windows\system32\DRVSTORE\ssecsdm2_6084F8D8AAAC4998F190285B0975591A9E522F47\i386\sseccmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12160 c:\windows\system32\DRVSTORE\ssecobx2_0E3C23A2AF7322625D7CB5A230D402C8D622EC9B\i386\sseccmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 25856 c:\windows\system32\DRVSTORE\ssecndis_A24B1C89EAA29049770A027B837B79C454C2BE7F\i386\ssecnd5.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14976 c:\windows\system32\DRVSTORE\ssecmdm2_E671AB05B6ECA67B0DD4FA29746FD625F717E338\i386\ssecmdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12160 c:\windows\system32\DRVSTORE\ssecmdm2_E671AB05B6ECA67B0DD4FA29746FD625F717E338\i386\sseccmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12160 c:\windows\system32\DRVSTORE\ssecbus_7E9D79E81F4A1719CED202B2FB04E7C48E5B8945\i386\ssecwhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 86528 c:\windows\system32\DRVSTORE\ssecbus_7E9D79E81F4A1719CED202B2FB04E7C48E5B8945\i386\ssecbus.sys
+ 2012-09-06 22:14 . 2011-07-13 08:21 12616 c:\windows\system32\DRVSTORE\ssdudfu_574BD7177B890D867B1197717EDBE5D152BA0EE1\i386\ssduwhnt.sys
+ 2012-09-06 22:14 . 2011-07-13 08:21 80968 c:\windows\system32\DRVSTORE\ssdudfu_574BD7177B890D867B1197717EDBE5D152BA0EE1\i386\ssdudfu.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12416 c:\windows\system32\DRVSTORE\sscesdm2_7AD4829229782EAD7A14A10BC5E01E956779886D\i386\sscecmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14848 c:\windows\system32\DRVSTORE\sscemdm2_34771A624205C079100D51ABFD3F0EFDC377F971\i386\sscemdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12416 c:\windows\system32\DRVSTORE\sscemdm2_34771A624205C079100D51ABFD3F0EFDC377F971\i386\sscecmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12288 c:\windows\system32\DRVSTORE\sscebus_659A3532090130C12253E064E99D5D4049A341E9\i386\sscewhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 98560 c:\windows\system32\DRVSTORE\sscebus_659A3532090130C12253E064E99D5D4049A341E9\i386\sscebus.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14920 c:\windows\system32\DRVSTORE\sscdw2k_C833F1412DB0171B8840782A43AA24F668608CB7\i386\sscdmdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12616 c:\windows\system32\DRVSTORE\sscdw2k_C833F1412DB0171B8840782A43AA24F668608CB7\i386\sscdcmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12616 c:\windows\system32\DRVSTORE\sscdsdm2_7603A16BDC6AEC71028353A67D30D6F9F311DD0C\i386\sscdcmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12488 c:\windows\system32\DRVSTORE\sscdbus_B653065950D06847C32293776FB04B48F46BC5CD\i386\sscdwhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14848 c:\windows\system32\DRVSTORE\ssbcmdm2_F2EF6576367AE6776D13B98FC966C6BCD4F0D491\i386\ssbcmdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12160 c:\windows\system32\DRVSTORE\ssbcmdm2_F2EF6576367AE6776D13B98FC966C6BCD4F0D491\i386\ssbccmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12160 c:\windows\system32\DRVSTORE\ssbcbus_09FD4DE73F8551B17CF8A69A9B05AE73894A4BEB\i386\ssbcwhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 83328 c:\windows\system32\DRVSTORE\ssbcbus_09FD4DE73F8551B17CF8A69A9B05AE73894A4BEB\i386\ssbcbus.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12488 c:\windows\system32\DRVSTORE\ssaeunic_4EF43FFBEF3858F432E98BFB295E4D1C41DBAD8A\i386\ssaewhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 10952 c:\windows\system32\DRVSTORE\ssaeunic_4EF43FFBEF3858F432E98BFB295E4D1C41DBAD8A\i386\ssaecrnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 25544 c:\windows\system32\DRVSTORE\ssaendis_4EF43FFBEF3858F432E98BFB295E4D1C41DBAD8A\i386\ssaend5.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14920 c:\windows\system32\DRVSTORE\ssaemdm2_DAC10E35CBE981C0DDF1C8AC4E0E74398B711B45\i386\ssaemdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12616 c:\windows\system32\DRVSTORE\ssaemdm2_DAC10E35CBE981C0DDF1C8AC4E0E74398B711B45\i386\ssaecmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12488 c:\windows\system32\DRVSTORE\ssaebus_5FD285D8B2F3DEA923C8233CEFA6A5E08E56C154\i386\ssaewhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 30240 c:\windows\system32\DRVSTORE\ssaeadb2_264166A109343CFD020BBBA726EA185932392EEC\i386\ssaeadb.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 10472 c:\windows\system32\DRVSTORE\ssadsdm2_2DD7009EDB47AEF210DB5FD143FD179E8F61799B\i386\ssadcmnt.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 12776 c:\windows\system32\DRVSTORE\ssadmdm2_84177DBA8F6802A838F32D995893C845AB0A9FCC\i386\ssadmdfl.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 10472 c:\windows\system32\DRVSTORE\ssadmdm2_84177DBA8F6802A838F32D995893C845AB0A9FCC\i386\ssadcmnt.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 10344 c:\windows\system32\DRVSTORE\ssadbus_7600FC90D261576E7B3D5C72A73844AE3BEDEB6C\i386\ssadwhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 30312 c:\windows\system32\DRVSTORE\ssadadb2_A9637B1C6D28374F470C1F40CA594F19EF259236\i386\ssadadb.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14848 c:\windows\system32\DRVSTORE\ss_mdm2_EB81822238EB1929C978C1DB6FCDA34F8D43341D\i386\ss_mdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12416 c:\windows\system32\DRVSTORE\ss_mdm2_EB81822238EB1929C978C1DB6FCDA34F8D43341D\i386\ss_cmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12288 c:\windows\system32\DRVSTORE\ss_bus_7406BFDDA6E4A90AE547DA7E2665EFD972F6B38A\i386\ss_whnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 98560 c:\windows\system32\DRVSTORE\ss_bus_7406BFDDA6E4A90AE547DA7E2665EFD972F6B38A\i386\ss_bus.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12416 c:\windows\system32\DRVSTORE\ss_bsdm2_10B17303D78CD94FDDF50F961E3454D4DD5E1A7A\i386\ss_bcmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14848 c:\windows\system32\DRVSTORE\ss_bmdm2_25CD552B0C6354F58CE1CF1AC1C75967943356E3\i386\ss_bmdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12416 c:\windows\system32\DRVSTORE\ss_bmdm2_25CD552B0C6354F58CE1CF1AC1C75967943356E3\i386\ss_bcmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12288 c:\windows\system32\DRVSTORE\ss_bbus_12BC85144F8D71EFF2F5EFF4FD945E30B2447D45\i386\ss_bwhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 98432 c:\windows\system32\DRVSTORE\ss_bbus_12BC85144F8D71EFF2F5EFF4FD945E30B2447D45\i386\ss_bbus.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 14976 c:\windows\system32\DRVSTORE\secumdm2_21FF5684E98669C9B39E4796838D25CA46361B20\i386\secumdfl.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12160 c:\windows\system32\DRVSTORE\secumdm2_21FF5684E98669C9B39E4796838D25CA46361B20\i386\secucmnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 12160 c:\windows\system32\DRVSTORE\secubus_7DBB97B87CEA0C2F58C49DDF174AA7213736B763\i386\secuwhnt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 91904 c:\windows\system32\DRVSTORE\secubus_7DBB97B87CEA0C2F58C49DDF174AA7213736B763\i386\secubus.sys
+ 2012-09-06 22:14 . 2011-03-10 06:36 74752 c:\windows\system32\DRVSTORE\mbtmdm_3229A2AA426C7B42BE118BA79D4A213EA10E29F8\i386\mbtusbser.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 17408 c:\windows\system32\DRVSTORE\HSPUSB_66BEF421612C6C2CB007247E73D9A13E8F319FFA\i386\HSPUSB.sys
+ 2012-09-06 22:14 . 2012-02-24 09:14 16384 c:\windows\system32\DRVSTORE\FlashUSB_842AED4D6BD61FBB03EE2E669877923C1BE29A2D\flashusb.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 49664 c:\windows\system32\DRVSTORE\C7xxPhone_8F7F6E8FBABDCBC58B89235C4B721CE545960BB0\XP64\C7xPHNX6.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 48640 c:\windows\system32\DRVSTORE\C7xxPhone_8F7F6E8FBABDCBC58B89235C4B721CE545960BB0\W764\C7xPHN76.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 37888 c:\windows\system32\DRVSTORE\C7xxPhone_8F7F6E8FBABDCBC58B89235C4B721CE545960BB0\W732\C7xPHN73.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 49664 c:\windows\system32\DRVSTORE\C7xxPhone_8F7F6E8FBABDCBC58B89235C4B721CE545960BB0\VT64\C7xPHNV6.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 37888 c:\windows\system32\DRVSTORE\C7xxPhone_8F7F6E8FBABDCBC58B89235C4B721CE545960BB0\VT32\C7xPHNV3.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 37632 c:\windows\system32\DRVSTORE\C7xxPhone_8F7F6E8FBABDCBC58B89235C4B721CE545960BB0\NT32\C7xPHNX3.sys
+ 2006-09-28 17:00 . 2006-09-28 17:00 82944 c:\windows\system32\drivers\WudfRd.sys
+ 2006-09-28 16:55 . 2006-09-28 16:55 77568 c:\windows\system32\drivers\WudfPf.sys
+ 2005-01-28 11:44 . 2006-10-18 18:00 38528 c:\windows\system32\drivers\wpdusb.sys
+ 2006-11-02 05:22 . 2006-11-02 05:22 32224 c:\windows\system32\drivers\wdfldr.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 10344 c:\windows\system32\drivers\ssadwhnt.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 10344 c:\windows\system32\drivers\ssadwh.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 12776 c:\windows\system32\drivers\ssadmdfl.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 10472 c:\windows\system32\drivers\ssadcmnt.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 10472 c:\windows\system32\drivers\ssadcm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 30312 c:\windows\system32\drivers\ssadadb.sys
+ 2012-09-06 22:13 . 2012-03-28 20:11 20032 c:\windows\system32\drivers\dgderdrv.sys
+ 2008-04-15 12:00 . 2006-10-18 19:47 37376 c:\windows\system32\dllcache\wmdmps.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 33792 c:\windows\system32\dllcache\wmdmlog.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 27136 c:\windows\system32\dllcache\mspmsnsv.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 11264 c:\windows\system32\dllcache\LAPRXY.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 14336 c:\windows\system32\avrt.dll
+ 2012-09-07 23:12 . 2012-09-07 23:13 87925 c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
+ 2012-08-08 16:15 . 2012-08-08 16:15 86016 c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll
+ 2012-08-08 15:58 . 2012-08-08 15:58 73408 c:\windows\system32\Adobe\Shockwave 11\gtapi.dll
+ 2012-08-08 15:58 . 2012-08-08 15:58 64512 c:\windows\system32\Adobe\Shockwave 11\gcapi_dll.dll
+ 2012-08-08 16:15 . 2012-08-08 16:15 12800 c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 30568 c:\windows\MusiccityDownload.exe
+ 2012-09-07 23:12 . 2012-09-07 23:12 10134 c:\windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}\ARPPRODUCTICON.exe
+ 2012-08-19 19:25 . 2010-06-28 20:57 38848 c:\windows\avastSS.scr
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmvdmoe2.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmvdmod.dll
+ 2005-01-28 11:44 . 2006-10-18 19:47 4096 c:\windows\system32\WMVADVE.DLL
+ 2005-01-28 11:44 . 2006-10-18 19:47 4096 c:\windows\system32\WMVADVD.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmsdmoe2.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmsdmod.dll
+ 2005-01-28 11:44 . 2006-10-18 19:58 8704 c:\windows\system32\wdfmgr.exe
+ 2005-01-28 11:44 . 2006-10-18 19:47 4096 c:\windows\system32\wdfapi.dll
+ 2005-01-28 11:44 . 2006-10-18 19:58 8704 c:\windows\system32\uwdf.exe
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\MPG4DMOD.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\MP4SDMOD.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\MP43DMOD.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmvdmoe2.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmvdmod.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmsdmoe2.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmsdmod.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MPG4DMOD.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MP4SDMOD.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MP43DMOD.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 653120 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 569664 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
+ 2008-07-29 06:05 . 2008-07-29 06:05 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll
+ 2008-07-29 06:05 . 2008-07-29 06:05 572928 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcp90.dll
+ 2008-07-29 01:54 . 2008-07-29 01:54 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcm90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 159032 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 316416 c:\windows\system32\WUDFx.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 165376 c:\windows\system32\WudfPlatform.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 146432 c:\windows\system32\WudfHost.exe
+ 2005-01-28 11:44 . 2006-10-18 19:47 356352 c:\windows\system32\wpdsp.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 133632 c:\windows\system32\WPDShServiceObj.dll
+ 2005-01-28 11:44 . 2006-10-18 19:47 154624 c:\windows\system32\wpdmtp.dll
+ 2005-01-28 11:44 . 2006-10-18 19:47 629760 c:\windows\system32\wpd_ci.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 656896 c:\windows\system32\WMVXENCD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 767488 c:\windows\system32\WMVSENCD.dll
+ 2008-04-15 12:00 . 2009-04-01 21:02 604160 c:\windows\system32\wmspdmod.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 937984 c:\windows\system32\WMNetMgr.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 157184 c:\windows\system32\wmidx.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 535040 c:\windows\system32\wmdrmsdk.dll
+ 2005-01-28 11:44 . 2006-10-18 19:47 348672 c:\windows\system32\wmdrmnet.dll
+ 2005-01-28 11:44 . 2006-10-18 19:47 429056 c:\windows\system32\wmdrmdev.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 757248 c:\windows\system32\WMADMOD.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 211456 c:\windows\system32\qasf.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 199168 c:\windows\system32\PortableDeviceWMDRM.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 132096 c:\windows\system32\PortableDeviceWiaCompat.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 166912 c:\windows\system32\PortableDeviceTypes.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 101888 c:\windows\system32\PortableDeviceClassExtension.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 284160 c:\windows\system32\PortableDeviceApi.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 200704 c:\windows\system32\muzwmts.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 491520 c:\windows\system32\muzapp.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 135168 c:\windows\system32\muzaf1.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 321536 c:\windows\system32\mswmdm.dll
+ 2008-04-15 12:00 . 2006-12-04 14:21 414720 c:\windows\system32\msscp.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 175616 c:\windows\system32\mspmsp.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 179712 c:\windows\system32\msnetobj.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 352256 c:\windows\system32\MSLUR71.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 155648 c:\windows\system32\MSFLib.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 245760 c:\windows\system32\MSCLib.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 259072 c:\windows\system32\MPG4DECD.dll
+ 2006-10-18 19:47 . 2010-03-30 10:24 317440 c:\windows\system32\mp4sdecd.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 259072 c:\windows\system32\MP43DECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 212992 c:\windows\system32\MFPLAT.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 118784 c:\windows\system32\MaDRM.dll
+ 2008-04-15 12:00 . 2006-10-18 18:03 100864 c:\windows\system32\logagent.exe
+ 2012-09-06 22:14 . 2012-02-24 09:14 181432 c:\windows\system32\DRVSTORE\ssudserd_2D0AB9AC94F0C7FF5AF6EBAF9D882CD5284F3256\i386\ssudserd.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 581192 c:\windows\system32\DRVSTORE\ssudsdb_72E1B8F9671900CF66EF0165B7127C7CED78387B\i386\WinUSBCoInstaller.dll
+ 2012-09-06 22:14 . 2012-02-24 09:14 181432 c:\windows\system32\DRVSTORE\ssudobex_64D1EE643D5CC47DDD7D921535E85F2AB236B21E\i386\ssudobex.sys
+ 2012-09-06 22:14 . 2012-02-24 09:14 181432 c:\windows\system32\DRVSTORE\ssudmdm_0754D7338D42CDB64EACF67E0AFECBDCDFB7B6F0\i386\ssudmdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 581192 c:\windows\system32\DRVSTORE\ssudmarv_43DACCFA45DE15AC75E216E4D6521F843AF377D3\i386\WinUSBCoInstaller.dll
+ 2012-09-06 22:14 . 2012-02-24 09:14 181432 c:\windows\system32\DRVSTORE\ssuddmgr_6CE9B0AFD997D39B714A978058DFCAC49BC98B38\i386\ssuddmgr.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 581192 c:\windows\system32\DRVSTORE\ssudadb_6E75B48986A438BAF8BECA50B1A7B44EA32BF17D\i386\WinUSBCoInstaller.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 119496 c:\windows\system32\DRVSTORE\sssdsdm2_3E9910A3892EA86C28F4763C7315EC7B73E4415A\i386\sssdmgmt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 115272 c:\windows\system32\DRVSTORE\sssdobx2_D9FBD11376E2281804762C56AB8E278DF856564D\i386\sssdobex.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 125512 c:\windows\system32\DRVSTORE\sssdmdm2_79766EB379327D1A4E454E957676346722FA1E71\i386\sssdmdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 100424 c:\windows\system32\DRVSTORE\sssdbus_DCADABF0391F3233BD35664D34CDB5D18B4A92EA\i386\sssdbus.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 132608 c:\windows\system32\DRVSTORE\ssm_ser2_53F3D224B432100E2DE0FA124810CB8E06580477\i386\ssm_mdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 132608 c:\windows\system32\DRVSTORE\ssm_mdm2_53F3D224B432100E2DE0FA124810CB8E06580477\i386\ssm_mdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 104448 c:\windows\system32\DRVSTORE\ssm_bus_95AA2419C5D388E462430C22E7B02579DD7F6677\i386\ssm_bus.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 109312 c:\windows\system32\DRVSTORE\ssecunic_A24B1C89EAA29049770A027B837B79C454C2BE7F\i386\ssecunic.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 108032 c:\windows\system32\DRVSTORE\ssecsdm2_6084F8D8AAAC4998F190285B0975591A9E522F47\i386\ssecmgmt.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 104192 c:\windows\system32\DRVSTORE\ssecobx2_0E3C23A2AF7322625D7CB5A230D402C8D622EC9B\i386\ssecobex.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 114304 c:\windows\system32\DRVSTORE\ssecmdm2_E671AB05B6ECA67B0DD4FA29746FD625F717E338\i386\ssecmdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 100352 c:\windows\system32\DRVSTORE\sscesdm2_7AD4829229782EAD7A14A10BC5E01E956779886D\i386\ssceserd.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 123648 c:\windows\system32\DRVSTORE\sscemdm2_34771A624205C079100D51ABFD3F0EFDC377F971\i386\sscemdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 132424 c:\windows\system32\DRVSTORE\sscdw2k_C833F1412DB0171B8840782A43AA24F668608CB7\i386\sscdmdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 110280 c:\windows\system32\DRVSTORE\sscdsdm2_7603A16BDC6AEC71028353A67D30D6F9F311DD0C\i386\sscdserd.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 104648 c:\windows\system32\DRVSTORE\sscdbus_B653065950D06847C32293776FB04B48F46BC5CD\i386\sscdbus.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 109696 c:\windows\system32\DRVSTORE\ssbcmdm2_F2EF6576367AE6776D13B98FC966C6BCD4F0D491\i386\ssbcmdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 139080 c:\windows\system32\DRVSTORE\ssaeunic_4EF43FFBEF3858F432E98BFB295E4D1C41DBAD8A\i386\ssaeunic.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 132296 c:\windows\system32\DRVSTORE\ssaemdm2_DAC10E35CBE981C0DDF1C8AC4E0E74398B711B45\i386\ssaemdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 104648 c:\windows\system32\DRVSTORE\ssaebus_5FD285D8B2F3DEA923C8233CEFA6A5E08E56C154\i386\ssaebus.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 114280 c:\windows\system32\DRVSTORE\ssadsdm2_2DD7009EDB47AEF210DB5FD143FD179E8F61799B\i386\ssadserd.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 136808 c:\windows\system32\DRVSTORE\ssadmdm2_84177DBA8F6802A838F32D995893C845AB0A9FCC\i386\ssadmdm.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 121064 c:\windows\system32\DRVSTORE\ssadbus_7600FC90D261576E7B3D5C72A73844AE3BEDEB6C\i386\ssadbus.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 123776 c:\windows\system32\DRVSTORE\ss_mdm2_EB81822238EB1929C978C1DB6FCDA34F8D43341D\i386\ss_mdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 100224 c:\windows\system32\DRVSTORE\ss_bsdm2_10B17303D78CD94FDDF50F961E3454D4DD5E1A7A\i386\ss_bserd.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 123648 c:\windows\system32\DRVSTORE\ss_bmdm2_25CD552B0C6354F58CE1CF1AC1C75967943356E3\i386\ss_bmdm.sys
+ 2012-09-06 22:14 . 2010-12-21 05:55 124032 c:\windows\system32\DRVSTORE\secumdm2_21FF5684E98669C9B39E4796838D25CA46361B20\i386\secumdm.sys
+ 2008-04-15 12:00 . 2006-10-18 19:47 991744 c:\windows\system32\drmv2clt.dll
+ 2006-10-18 18:00 . 2006-10-18 18:00 249856 c:\windows\system32\drmupgds.exe
+ 2006-11-02 05:22 . 2006-11-02 05:22 492000 c:\windows\system32\drivers\wdf01000.sys
+ 2006-10-18 19:47 . 2006-10-18 19:47 671232 c:\windows\system32\drivers\umdf\wpdmtpdr.dll
+ 2012-09-06 22:14 . 2011-06-02 05:47 114280 c:\windows\system32\drivers\ssadserd.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 136808 c:\windows\system32\drivers\ssadmdm.sys
+ 2012-09-06 22:14 . 2011-06-02 05:47 121064 c:\windows\system32\drivers\ssadbus.sys
- 2012-08-12 21:06 . 2012-09-04 23:03 196608 c:\windows\system32\drivers\nStandard.bin
+ 2012-08-12 21:06 . 2012-09-07 23:56 196608 c:\windows\system32\drivers\nStandard.bin
+ 2008-04-15 12:00 . 2009-04-01 21:02 604160 c:\windows\system32\dllcache\wmspdmod.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 937984 c:\windows\system32\dllcache\WMNetMgr.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 157184 c:\windows\system32\dllcache\wmidx.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 222208 c:\windows\system32\dllcache\WMASF.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 757248 c:\windows\system32\dllcache\WMADMOD.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 211456 c:\windows\system32\dllcache\qasf.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 321536 c:\windows\system32\dllcache\mswmdm.dll
+ 2008-04-15 12:00 . 2006-12-04 14:21 414720 c:\windows\system32\dllcache\msscp.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 175616 c:\windows\system32\dllcache\mspmsp.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 179712 c:\windows\system32\dllcache\msnetobj.dll
+ 2010-03-30 10:24 . 2010-03-30 10:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll
+ 2008-04-15 12:00 . 2006-10-18 18:03 100864 c:\windows\system32\dllcache\logagent.exe
+ 2008-04-15 12:00 . 2006-10-18 19:47 991744 c:\windows\system32\dllcache\drmv2clt.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 229376 c:\windows\system32\dllcache\cewmdm.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 542720 c:\windows\system32\dllcache\blackbox.dll
+ 2012-09-06 22:13 . 2012-03-28 20:11 319456 c:\windows\system32\DIFxAPI.dll
+ 2012-09-06 22:13 . 2012-03-28 20:11 821824 c:\windows\system32\dgderapi.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 974848 c:\windows\system32\cis-2.4.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 229376 c:\windows\system32\cewmdm.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 542720 c:\windows\system32\blackbox.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 276992 c:\windows\system32\audiodev.dll
+ 2012-08-19 19:25 . 2010-06-28 20:57 165032 c:\windows\system32\aswBoot.exe
+ 2012-08-08 15:58 . 2012-08-08 15:58 284600 c:\windows\system32\Adobe\Shockwave 11\SymCCIS.dll
+ 2012-08-08 16:15 . 2012-08-08 16:15 114176 c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
+ 2012-08-08 16:16 . 2012-08-08 16:16 434176 c:\windows\system32\Adobe\Shockwave 11\Proj.dll
+ 2012-08-08 16:15 . 2012-08-08 16:15 366592 c:\windows\system32\Adobe\Shockwave 11\Plugin.dll
+ 2012-08-08 16:02 . 2012-08-08 16:02 990208 c:\windows\system32\Adobe\Shockwave 11\iml32.dll
+ 2012-08-08 16:14 . 2012-08-08 16:14 544256 c:\windows\system32\Adobe\Shockwave 11\Control.dll
+ 2012-08-08 16:22 . 2012-08-08 16:22 143840 c:\windows\system32\Adobe\Director\SWDNLD.EXE
+ 2012-08-08 16:22 . 2012-08-08 16:22 323552 c:\windows\system32\Adobe\Director\SwDir_1166636.dll
+ 2012-08-08 16:15 . 2012-08-08 16:15 195584 c:\windows\system32\Adobe\Director\np32dsw_1166636.dll
+ 2012-03-28 20:11 . 2012-03-28 20:11 325552 c:\windows\MASetupCaller.dll
+ 2012-09-07 23:12 . 2012-09-07 23:12 430592 c:\windows\Installer\57d207.msi
+ 2012-09-08 08:54 . 2012-09-08 08:54 219648 c:\windows\Installer\213b6.msi
+ 2012-09-06 22:13 . 2012-09-06 22:13 290816 c:\windows\Installer\{758C8301-2696-4855-AF45-534B1200980A}\ARPPRODUCTICON.exe
+ 2009-07-11 22:02 . 2009-07-11 22:02 3780424 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 3765048 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 2603008 c:\windows\system32\WpdShext.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1382912 c:\windows\system32\WMVSDECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1574912 c:\windows\system32\WMVENCOD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1543680 c:\windows\system32\WMVDECOD.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 1329152 c:\windows\system32\WMSPDMOE.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 1117696 c:\windows\system32\WMADMOE.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1416680 c:\windows\system32\WdfCoInstaller01005.dll
+ 2012-09-06 22:13 . 2012-03-28 20:11 4659712 c:\windows\system32\Redemption.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1112288 c:\windows\system32\DRVSTORE\ssudsdb_72E1B8F9671900CF66EF0165B7127C7CED78387B\i386\WdfCoInstaller01007.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1112288 c:\windows\system32\DRVSTORE\ssudrmnetm_255E5FCE84422FA1F205A33217EE8180DE04CE33\i386\WdfCoInstaller01007.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1112288 c:\windows\system32\DRVSTORE\ssudrmnet_D39417BF98726FF3123C177A78BDA6CAF5BDA5C3\i386\WdfCoInstaller01007.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1112288 c:\windows\system32\DRVSTORE\ssudnd5_AD70A6E29EA865E63DADEDA7961E6AE2B19AF6B5\i386\WdfCoInstaller01007.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1112288 c:\windows\system32\DRVSTORE\ssudmarv_43DACCFA45DE15AC75E216E4D6521F843AF377D3\i386\WdfCoInstaller01007.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1112288 c:\windows\system32\DRVSTORE\ssudeadb_18A6AC5E6C4EBB3EF293BC9FF5C1AA76203CD1D9\i386\WdfCoInstaller01007.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1112288 c:\windows\system32\DRVSTORE\ssudadb_6E75B48986A438BAF8BECA50B1A7B44EA32BF17D\i386\WdfCoInstaller01007.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1416608 c:\windows\system32\DRVSTORE\ssaeadb2_264166A109343CFD020BBBA726EA185932392EEC\i386\ssaeCoInstaller01005.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1416680 c:\windows\system32\DRVSTORE\ssadadb2_A9637B1C6D28374F470C1F40CA594F19EF259236\i386\WdfCoInstaller01005.dll
+ 2012-09-06 22:14 . 2010-12-21 05:55 1416680 c:\windows\system32\drivers\WdfCoInstaller01005.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 2450944 c:\windows\system32\dllcache\wmvcore.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 1329152 c:\windows\system32\dllcache\WMSPDMOE.dll
+ 2008-04-15 12:00 . 2006-10-18 19:47 1117696 c:\windows\system32\dllcache\WMADMOE.dll
+ 2012-08-08 16:21 . 2012-08-08 16:21 1040864 c:\windows\system32\Adobe\Shockwave 11\SwHelper_1166636.exe
+ 2012-08-08 15:58 . 2012-08-08 15:58 2376368 c:\windows\system32\Adobe\Shockwave 11\gt.exe
+ 2012-08-08 15:58 . 2012-08-08 15:58 1295872 c:\windows\system32\Adobe\Shockwave 11\gi.dll
+ 2012-08-08 16:04 . 2012-08-08 16:04 1742848 c:\windows\system32\Adobe\Shockwave 11\dirapi.dll
+ 2012-04-25 17:32 . 2012-04-25 17:32 7069184 c:\windows\Installer\294f3.msp
+ 2012-04-25 17:32 . 2012-04-25 17:32 7069184 c:\windows\Installer\27c8a48.msp
+ 2012-04-25 17:32 . 2012-04-25 17:32 7069184 c:\windows\Installer\21468.msp
+ 2012-09-08 08:58 . 2012-09-08 08:58 1094656 c:\windows\Installer\213ba.msi
+ 2012-09-06 22:13 . 2012-09-06 22:13 6699008 c:\windows\Installer\1e34fad.msi
+ 2011-12-26 07:02 . 2011-12-26 07:02 19677184 c:\windows\Installer\294fd.msp
+ 2011-12-26 07:02 . 2011-12-26 07:02 19677184 c:\windows\Installer\21472.msp
.
-- Migawka wyzerowana --
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-05-15 1699648]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 322480]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2012-05-15 15504192]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-15 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-07-11 19:00 988640 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2012-07-31 11:20 104408 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2011-09-27 05:22 59240 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUSGamerOSD]
2008-05-28 13:36 450560 ----a-w- c:\program files\ASUS\GamerOSD\GamerOSD.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-04-17 15:19 3749696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DWQueuedReporting]
2006-10-26 17:48 508256 ----a-w- c:\progra~1\COMMON~1\MICROS~1\DW\DWTRIG20.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu 10]
2011-07-04 17:45 13443680 ----a-w- c:\program files\Gadu-Gadu 10\gg.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 22:47 96552 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
2012-03-31 02:38 954256 ----a-w- c:\program files\Samsung\Kies\KiesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
2012-03-31 02:38 21392 ----a-w- c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2012-03-31 02:38 3521424 ----a-w- c:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2012-05-15 09:40 15504192 ----a-w- c:\windows\system32\nvcpl.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2012-05-15 09:40 108352 ----a-w- c:\windows\system32\nvmctray.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-10-24 12:28 491520 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchSettings]
2012-07-26 17:52 1165192 ----a-w- c:\program files\Common Files\Spigot\Search Settings\SearchSettings.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"UacDisableNotify"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Winamp\\winamp.exe"=
"c:\\Program Files\\Gadu-Gadu 10\\gg.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"d:\\Instalki\\Programy\\IE8-WindowsXP-x86-PLK.exe"=
"c:\\Program Files\\ASUS\\GamerOSD\\GamerOSD.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe"=
"c:\\Program Files\\Google\\Update\\GoogleUpdate.exe"=
"c:\\WINDOWS\\system32\\nwiz.exe"=
"c:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe"=
"c:\\Program Files\\Adobe\\Reader 9.0\\Reader\\Reader_sl.exe"=
"c:\\PROGRA~1\\COMMON~1\\MICROS~1\\DW\\DW20.EXE"=
"c:\\Documents and Settings\\Łukasz\\Ustawienia lokalne\\Dane aplikacji\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\WINDOWS\\system32\\wuauclt.exe"=
"c:\\WINDOWS\\system32\\SNDVOL32.EXE"=
"c:\\Documents and Settings\\Łukasz\\Pulpit\\ComboFix.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Google\\Update\\1.3.21.115\\GoogleCrashHandler.exe"=
"c:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\Samsung\\Kies\\KiesTrayAgent.exe"=
.
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-08-13 242240]
R3 c65013264;C-Media CM6501 Like Sound UDAX Interface;c:\windows\system32\drivers\c6501.sys [2012-08-14 1310720]
S2 gupdate;Usługa Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2012-08-13 182184]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-08-13 1340224]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-20 250056]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [2012-09-07 30312]
S3 gupdatem;Usługa Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2012-08-13 182184]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [2012-09-07 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [2012-09-07 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [2012-09-07 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [2012-09-07 114280]
S4 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [2012-07-26 794560]
.
--- Inne Usługi/Sterowniki w Pamięci ---
.
*NewlyCreated* - AMSINT32
.
Zawartość folderu 'Zaplanowane zadania'
.
2012-09-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-20 09:01]
.
2012-09-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-13 21:27]
.
2012-09-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-08-13 21:27]
.
2012-09-07 c:\windows\Tasks\Norton Security Scan for Łukasz.job
- c:\progra~1\NORTON~2\Engine\372~1.5\Nss.exe [2012-09-07 09:45]
.
.
------- Skan uzupełniający -------
.
uStart Page = hxxp://www.bigseekpro.com/webscout/{4CC7D913-CFEB-4FA2-943A-1DB9FFD4F8AD}
mStart Page = hxxp://www.bigseekpro.com/webscout/{4CC7D913-CFEB-4FA2-943A-1DB9FFD4F8AD}
IE: E&ksportuj do programu Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
.
- - - - USUNIĘTO PUSTE WPISY - - - -
.
Toolbar-{7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-21_Searsburg - c:\program files\Samsung\USB Drivers\21_Searsburg\Uninstall.exe
AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-09-08 11:27
Windows 5.1.2600 Dodatek Service Pack 3 NTFS
.
skanowanie ukrytych procesów ...
.
skanowanie ukrytych wpisów autostartu ...
.
skanowanie ukrytych plików ...
.
skanowanie pomyślnie ukończone
ukryte pliki: 0
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: ST3320613AS rev.SD22 -> Harddisk0\DR0 -> \Device\0000006b
.
device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user != kernel MBR !!!
.
**************************************************************************
.
--------------------- ZABLOKOWANE KLUCZE REJESTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
--------------------- Pliki DLL ładowane pod uruchomionymi procesami ---------------------
.
- - - - - - - > 'explorer.exe'(3936)
c:\windows\system32\WININET.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Microsoft Office\Office12\1045\GrooveIntlResource.dll
.
------------------------ Pozostałe uruchomione procesy ------------------------
.
c:\windows\ATKKBService.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\windows\system32\nvsvc32.exe
.
**************************************************************************
.
Czas ukończenia: 2012-09-08 11:31:38 - komputer został uruchomiony ponownie
ComboFix-quarantined-files.txt 2012-09-08 09:31
ComboFix2.txt 2012-09-04 23:19
ComboFix3.txt 2012-08-12 22:11
.
Przed: 32 701 583 360 bajtów wolnych
Po: 33 033 846 784 bajtów wolnych
.
- - End Of File - - F49D158299C9E3043C608E622C776698




Thx for help.

Edited by boopme, 08 September 2012 - 10:06 AM.


BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 39,947 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:29 AM

Posted 11 September 2012 - 08:33 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===

Open notepad and copy/paste the text in the quote box below into it:

File::
C:\yuuqf.exe
C:\qiveh.exe
C:\poxq.exe

Folder::
c:\program files\Application Updater

Driver::
Application Updater

ClearJavaCache::


Save this as CFScript.txt on your desktop.

Posted Image

Referring to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log.
===

Remove the AdWare, PUP (Potentially Unwanted Program) found.

  • Please close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Delete.
  • Confirm each time with OK.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile in your reply.
  • You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.
===

Third party programs if not up to date can be an open door for an infection.

Please run this security check for my review.

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
===

Please download and run this DDS Scanning Tool. Nothing will be deleted. It will just give me some additional information about your system.

  • Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.
    • DDS.scr <- not recommended if you use Chrome to download this .scr file. Use the other options.
    • DDS.pif
    • DDS.COM
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
Please note: You may have to disable any script protection running if the scan fails to run.

Please just paste the contents of the DDS.txt log in your next post. DO NOT attach the log.

Please post the logs and let me know what problem persists.

#3 nasdaq

nasdaq

  • Malware Response Team
  • 39,947 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:08:29 AM

Posted 17 September 2012 - 08:20 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users