Elaiinee
Legacy Member
Elaine - 06-09-23 14:20:35,85 Service Pack 2
ComboFix 06.09.23.2 - Running from: "C:\Documents and Settings\Elaine\Bureaublad"
((((((((((((((((((((((((((((((((((((((((((( E-Give / Ssk's Log )))))))))))))))))))))))))))))))))))))))))))))))))
C:\Documents and Settings\Elaine\Application Data\Dxcknwrd.dll
* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\WINDOWS\drsmartload2.dat
C:\WINDOWS\teller2.chk
C:\dfndrff_e10.exe
C:\dfndrff_e11.exe
C:\dfndrff_e12.exe
C:\drsmartload.exe
C:\drsmartload1.exe
C:\drsmartload45a45a45c.exe
C:\drsmartload45a45a45d.exe
C:\drsmartload45a45a45e.exe
C:\deskbar.exe
C:\kybrdff_e11.exe
C:\kybrdff_e12.exe
C:\MTE3NDI6ODoxNg.exe
C:\nwnmff_e10.exe
C:\nwnmff_e11.exe
C:\nwnmff_e12.exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\5XW2VBXT\dfndrff_e[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\K9Y3W5QZ\dfndrff_e[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\75HBAEEH\drsmartload[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\C1MV81MN\drsmartload45a[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\KXI70HYN\kybrdff_e[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\O5YN8PMR\MTE3NDI6ODoxNg[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\0PSP2NWL\nwnmff_e[1].exe
C:\ac3_0010.exe
C:\mte3ndi6odoxng.exe
C:\ucmoreiex.exe
C:\Program Files\ToolBar888
C:\Program Files\Common Files\{181A8434-0642-1043-0930-051018040020}
C:\Program Files\Deskbar
((((((((((((((((((((((((((((((( Files Created from 2006-08-23 to 2006-09-23 ))))))))))))))))))))))))))))))))))
2006-09-23 13:10 667,889 --a------ C:\deskbar_e12.exe
2006-09-23 00:29 578,560 --a------ C:\Installer4.exe
2006-09-23 00:05 676,081 --a------ C:\deskbar_e11.exe
2006-09-18 19:57 49,152 --a------ C:\WINDOWS\system32\redboxsd.dll
2006-09-18 19:57 27,648 --a------ C:\WINDOWS\system32\redboxun.exe
2006-09-04 09:59 89,088 --a------ C:\WINDOWS\system32\atl71.dll
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-09-23 14:25 -------- d-------- C:\Program Files\Common Files
2006-09-23 14:05 -------- d-------- C:\Program Files\MSN Messenger
2006-09-23 14:05 -------- d-------- C:\Program Files\Common Files\Microsoft Shared
2006-09-22 21:13 -------- d-------- C:\Program Files\LimeWire
2006-09-21 19:13 -------- d-------- C:\Program Files\Incomplete
2006-09-19 14:25 -------- d-------- C:\Program Files\Hitman Pro
2006-09-18 19:57 -------- d-------- C:\Program Files\Windows Media Player
2006-09-17 18:26 -------- d-------- C:\Documents and Settings\Elaine\Application Data\LimeWire
2006-08-21 14:28 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-08-21 11:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-08-21 11:14 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2006-08-20 18:14 -------- d-------- C:\Program Files\Picasa2
2006-08-15 00:36 -------- d-------- C:\Program Files\Internet Explorer
2006-08-08 18:53 635520 --a------ C:\WINDOWS\system32\aswBoot.exe
2006-08-05 17:25 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2006-08-05 17:24 16352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2006-08-05 17:22 36176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2006-08-05 17:20 24304 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2006-08-05 08:18 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2006-07-27 15:26 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-07-21 10:29 72704 --a------ C:\WINDOWS\system32\hlink.dll
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"googletalk"="\"C:\\Program Files\\Google\\Google Talk\\googletalk.exe\" /autostart"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"SetIcon"="C:\\Program Files\\Icons\\Seticon.exe"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
"Telemeter 3.0"="\"C:\\Program Files\\Telemeter 3.0\\telemeter3.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,e2,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,d2,03,00,00,23,00,00,00,1c,01,00,00,27,01,\
00,00,01,00,00,00
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
securityproviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1137619293.job
Completion time: Sat 23/09/2006 14:27:56.12
ComboFix.txt
ComboFix 06.09.23.2 - Running from: "C:\Documents and Settings\Elaine\Bureaublad"
((((((((((((((((((((((((((((((((((((((((((( E-Give / Ssk's Log )))))))))))))))))))))))))))))))))))))))))))))))))
C:\Documents and Settings\Elaine\Application Data\Dxcknwrd.dll
* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\WINDOWS\drsmartload2.dat
C:\WINDOWS\teller2.chk
C:\dfndrff_e10.exe
C:\dfndrff_e11.exe
C:\dfndrff_e12.exe
C:\drsmartload.exe
C:\drsmartload1.exe
C:\drsmartload45a45a45c.exe
C:\drsmartload45a45a45d.exe
C:\drsmartload45a45a45e.exe
C:\deskbar.exe
C:\kybrdff_e11.exe
C:\kybrdff_e12.exe
C:\MTE3NDI6ODoxNg.exe
C:\nwnmff_e10.exe
C:\nwnmff_e11.exe
C:\nwnmff_e12.exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\5XW2VBXT\dfndrff_e[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\K9Y3W5QZ\dfndrff_e[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\75HBAEEH\drsmartload[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\C1MV81MN\drsmartload45a[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\KXI70HYN\kybrdff_e[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\O5YN8PMR\MTE3NDI6ODoxNg[1].exe
C:\Documents and Settings\Elaine\Local Settings\Temporary Internet Files\Content.IE5\0PSP2NWL\nwnmff_e[1].exe
C:\ac3_0010.exe
C:\mte3ndi6odoxng.exe
C:\ucmoreiex.exe
C:\Program Files\ToolBar888
C:\Program Files\Common Files\{181A8434-0642-1043-0930-051018040020}
C:\Program Files\Deskbar
((((((((((((((((((((((((((((((( Files Created from 2006-08-23 to 2006-09-23 ))))))))))))))))))))))))))))))))))
2006-09-23 13:10 667,889 --a------ C:\deskbar_e12.exe
2006-09-23 00:29 578,560 --a------ C:\Installer4.exe
2006-09-23 00:05 676,081 --a------ C:\deskbar_e11.exe
2006-09-18 19:57 49,152 --a------ C:\WINDOWS\system32\redboxsd.dll
2006-09-18 19:57 27,648 --a------ C:\WINDOWS\system32\redboxun.exe
2006-09-04 09:59 89,088 --a------ C:\WINDOWS\system32\atl71.dll
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-09-23 14:25 -------- d-------- C:\Program Files\Common Files
2006-09-23 14:05 -------- d-------- C:\Program Files\MSN Messenger
2006-09-23 14:05 -------- d-------- C:\Program Files\Common Files\Microsoft Shared
2006-09-22 21:13 -------- d-------- C:\Program Files\LimeWire
2006-09-21 19:13 -------- d-------- C:\Program Files\Incomplete
2006-09-19 14:25 -------- d-------- C:\Program Files\Hitman Pro
2006-09-18 19:57 -------- d-------- C:\Program Files\Windows Media Player
2006-09-17 18:26 -------- d-------- C:\Documents and Settings\Elaine\Application Data\LimeWire
2006-08-21 14:28 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-08-21 11:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-08-21 11:14 128896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2006-08-20 18:14 -------- d-------- C:\Program Files\Picasa2
2006-08-15 00:36 -------- d-------- C:\Program Files\Internet Explorer
2006-08-08 18:53 635520 --a------ C:\WINDOWS\system32\aswBoot.exe
2006-08-05 17:25 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2006-08-05 17:24 16352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2006-08-05 17:22 36176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2006-08-05 17:20 24304 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2006-08-05 08:18 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2006-07-27 15:26 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-07-21 10:29 72704 --a------ C:\WINDOWS\system32\hlink.dll
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"googletalk"="\"C:\\Program Files\\Google\\Google Talk\\googletalk.exe\" /autostart"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"SetIcon"="C:\\Program Files\\Icons\\Seticon.exe"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
"Telemeter 3.0"="\"C:\\Program Files\\Telemeter 3.0\\telemeter3.exe\""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,e2,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,d2,03,00,00,23,00,00,00,1c,01,00,00,27,01,\
00,00,01,00,00,00
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
securityproviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1137619293.job
Completion time: Sat 23/09/2006 14:27:56.12
ComboFix.txt