Tak.
ComboFix 10-01-29.07 - Marlene 30-01-2010 9:25.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.45.1030.18.895.233 [GMT 1:00]
Kører fra: c:\users\Marlene\Downloads\Banan.exe
AV: avast! antivirus 4.7.1098 [VPS 090403-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((((( Andet, der er slettet )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\$recycle.bin\S-1-5-21-2798595349-4001939752-1694952834-500
.
((((((((((((((((((((((((((((( Filer skabt fra 2009-12-28 til 2010-01-30 )))))))))))))))))))))))))))))))))))
.
2010-01-30 08:35 . 2010-01-30 08:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-27 11:00 . 2010-01-27 11:00 15880 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\lsdelete.exe
2010-01-27 11:00 . 2010-01-27 11:00 163728 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\ShellExt.dll
2010-01-27 11:00 . 2010-01-27 11:00 327000 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\RPAPI.dll
2010-01-27 11:00 . 2010-01-27 11:00 87496 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\PrivacyClean.dll
2010-01-23 23:00 . 2010-01-27 11:00 3803208 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\AutoLaunch.exe
2010-01-23 23:00 . 2010-01-27 11:00 823928 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe
2010-01-23 23:00 . 2010-01-27 11:00 1643272 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\Ad-Aware.exe
2010-01-23 23:00 . 2010-01-27 11:00 788880 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\AAWTray.exe
2010-01-23 22:59 . 2010-01-27 11:00 1181328 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\AAWService.exe
2010-01-13 10:57 . 2009-10-19 13:38 156672 ----a-w- c:\windows\system32\t2embed.dll
2010-01-13 10:57 . 2009-10-19 13:35 72704 ----a-w- c:\windows\system32\fontsub.dll
2010-01-05 18:19 . 2010-01-05 18:19 -------- d-----w- c:\program files\CCleaner
2010-01-02 23:15 . 2010-01-27 11:00 862040 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\threatwork.exe
2010-01-02 23:14 . 2010-01-27 11:00 206944 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\lavamessage.dll
2010-01-02 23:14 . 2010-01-27 11:00 390288 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\lavalicense.dll
2010-01-02 23:14 . 2010-01-27 11:00 537576 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\aawapi.dll
2010-01-02 23:14 . 2010-01-27 11:00 389272 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\UpdateManager.dll
2010-01-02 23:14 . 2010-01-27 11:00 8 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\Savapibridge.dll
2010-01-02 23:07 . 2010-01-27 11:00 6296864 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\Resources.dll
2010-01-02 23:07 . 2010-01-27 11:00 933120 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\CEAPI.dll
2010-01-02 23:07 . 2010-01-27 11:00 816784 ----a-w- c:\programdata\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe
2010-01-01 09:19 . 2010-01-01 09:19 5061519 ----a-w- c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-01-01 09:17 . 2010-01-01 09:17 -------- d-----w- c:\users\Marlene\AppData\Roaming\Malwarebytes
2010-01-01 09:16 . 2009-12-30 13:54 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-01 09:16 . 2009-12-30 13:55 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-01 09:16 . 2010-01-01 09:16 -------- d-----w- c:\programdata\Malwarebytes
2010-01-01 09:16 . 2010-01-01 09:22 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-29 12:47 . 2007-06-18 23:48 81790 ----a-w- c:\windows\system32\perfc006.dat
2010-01-29 12:47 . 2007-06-18 23:48 471658 ----a-w- c:\windows\system32\perfh006.dat
2010-01-23 08:32 . 2007-08-06 17:29 -------- d-----w- c:\users\Marlene\AppData\Roaming\Apple Computer
2010-01-17 16:08 . 2007-08-11 14:47 -------- d-----w- c:\users\Marlene\AppData\Roaming\XnView
2010-01-14 10:12 . 2009-12-31 07:49 181120 ------w- c:\windows\system32\MpSigStub.exe
2010-01-14 09:43 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-01-08 16:30 . 2007-08-06 17:24 -------- d-----w- c:\program files\Common Files\Apple
2010-01-03 00:53 . 2007-06-18 14:27 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-01-03 00:49 . 2007-06-18 14:27 -------- d-----w- c:\programdata\Symantec
2010-01-02 06:38 . 2010-01-22 11:01 916480 ----a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32 . 2010-01-22 11:01 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-01-02 06:32 . 2010-01-22 11:01 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-01-02 04:57 . 2010-01-22 11:01 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-12-20 22:15 . 2009-12-20 22:13 -------- d-----w- c:\programdata\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-12-20 22:15 . 2009-12-20 22:13 -------- d-----w- c:\program files\iTunes
2009-12-20 22:14 . 2009-12-20 22:14 -------- d-----w- c:\program files\iPod
2009-12-20 22:10 . 2009-12-20 22:09 -------- d-----w- c:\program files\QuickTime
2009-12-20 22:00 . 2009-12-20 22:00 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe
2009-12-20 21:57 . 2008-03-23 20:50 -------- d-----w- c:\program files\Safari
2009-12-20 21:52 . 2009-12-20 21:52 79144 ----a-w- c:\programdata\Apple Computer\Installer Cache\Safari 5.31.21.10\SetupAdmin.exe
2009-12-12 23:21 . 2007-08-06 17:09 -------- d-----w- c:\program files\Java
2009-12-12 22:58 . 2009-12-12 22:53 -------- d-----w- c:\programdata\Lavasoft
2009-12-12 22:56 . 2009-12-12 22:56 -------- dc-h--w- c:\programdata\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
2009-12-12 22:53 . 2009-12-12 22:53 -------- d-----w- c:\program files\Lavasoft
2009-12-12 22:53 . 2009-11-07 13:22 -------- d-----w- c:\programdata\Telenor
2009-12-12 22:34 . 2009-09-07 16:11 -------- d-----w- c:\program files\NOVA INTERNET
2009-12-11 23:00 . 2009-12-10 18:59 -------- d-----w- c:\program files\PokerStars
2009-12-11 20:28 . 2009-12-11 20:28 -------- d-----w- c:\programdata\McAfee
2009-12-09 20:28 . 2009-12-09 20:28 -------- d-----w- c:\programdata\McAfee Security Scan
2009-12-07 14:10 . 2009-12-12 22:56 2953352 -c--a-w- c:\programdata\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}\Ad-AwareInstallation.exe
2009-12-02 13:19 . 2009-12-12 22:58 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-12-02 13:19 . 2009-12-13 02:02 15880 ----a-w- c:\windows\system32\lsdelete.exe
2009-11-30 06:58 . 2009-11-23 11:37 439816 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\setup.exe
2009-11-23 19:39 . 2009-11-23 19:38 17241584 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\rp\RealPlayerSPGold.exe
2009-11-23 19:38 . 2009-11-23 19:38 8405312 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\gtb\GOOGLE_TOOLBAR\GoogleToolbarInstaller.exe
2009-11-23 19:38 . 2009-11-23 19:38 149000 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\chr_helper\LaunchHelper.exe
2009-11-23 19:38 . 2009-11-23 19:38 10309448 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\chr\ChromeInstaller.exe
2009-11-23 19:37 . 2009-11-23 19:37 79368 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\RUP\vista.exe
2009-11-23 19:37 . 2009-11-23 19:37 52288 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\RUP\inst_config\gtapi.dll
2009-11-23 19:37 . 2009-11-23 19:37 64000 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\RUP\inst_config\gcapi_dll.dll
2009-11-23 19:37 . 2009-11-23 19:37 50688 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\RUP\inst_config\fftbapi.dll
2009-11-23 19:37 . 2009-11-23 19:37 118784 ----a-w- c:\users\Marlene\AppData\Roaming\Real\Update\setup3.09\RUP\inst_config\compat.dll
2009-11-18 15:11 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-09 12:31 . 2009-12-10 08:58 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-11-09 12:30 . 2009-12-10 08:58 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-11-09 10:36 . 2009-12-10 08:58 411648 ----a-w- c:\windows\system32\drivers\http.sys
2007-06-18 23:53 . 2007-06-18 23:53 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.
((((((((((((((((((((((((((((((((((( Start steder i reg.basen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Bemærk* tomme linier & lovlige standard linier vises ikke
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"SmpcSys"="c:\program files\Packard Bell\SetUpMyPC\SmpSys.exe" [2006-10-23 1092152]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-11-22 815104]
"RtHDVCpl"="RtHDVCpl.exe" [2006-12-01 4186112]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-01-11 232184]
"toolbar_eula_launcher"="c:\program files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-01-10 18944]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2006-11-22 842584]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-11-30 198160]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Device Detector 3.lnk - c:\program files\Olympus\DeviceDetector\DevDtct2.exe [2007-10-10 118784]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnk.CommonStartup
backupExtension=.CommonStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-15 01:04 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-11-12 15:33 141600 ----a-w- c:\program files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-11-10 22:08 417792 ----a-w- c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):79,ec,d2,8c,3d,59,ca,01
R0 Lbd;Lbd;c:\windows\System32\drivers\Lbd.sys [12-12-2009 23:58 64288]
R0 pavboot;pavboot;c:\windows\System32\drivers\pavboot.sys [05-04-2009 20:38 28544]
R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [04-04-2009 00:46 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [04-04-2009 00:46 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [01-01-2008 19:15 51792]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [02-12-2009 14:19 1181328]
S3 FontCache;Tjenesten Windows-skrifttypecache;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [06-06-2008 10:01 21504]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Indhold af mappen 'Planlagte Opgaver'
2010-01-30 c:\windows\Tasks\Ad-Aware Update (Daily 1).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 11:00]
2010-01-30 c:\windows\Tasks\Ad-Aware Update (Daily 2).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 11:00]
2010-01-30 c:\windows\Tasks\Ad-Aware Update (Daily 3).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 11:00]
2010-01-30 c:\windows\Tasks\Ad-Aware Update (Daily 4).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 11:00]
2010-01-30 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 11:00]
2007-08-13 c:\windows\Tasks\PBReg.job
- c:\program files\HDReg\HDRegApp.exe [2005-06-21 11:05]
2010-01-30 c:\windows\Tasks\Udvidet garanti.job
- c:\program files\Packard Bell\SetupmyPC\PBCarNot.exe [2007-06-18 16:38]
.
.
------- Yderligere scanning -------
.
uStart Page =
hxxp://www.online.nouSearchURL,(Default) =
hxxp://www.google.com/keyword/%sIE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&ksporter til Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
DPF: {25C29129-E95F-4564-BFE3-000000006400} -
hxxp://www.123hjemmeside.dk/builder/pages/KvikVideo-6-4-0-0.CABFF - ProfilePath - c:\users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\7ez3fswj.default\
FF - prefs.js: browser.search.defaulturl -
hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=FF - prefs.js: browser.startup.homepage -
www.db.dkFF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- FIREFOX POLITIKKER ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".dk");
.
- - - - TOMME GENVEJE FJERNET - - - -
ActiveSetup-ccc-core-static - msiexec
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2010-01-30 09:36
Windows 6.0.6002 Service Pack 2 NTFS
scanner skjulte processer ...
scanner skjulte autostarter ...
scanner skjulte filer ...
scanning gennemført med succes
skjulte filer: 0
**************************************************************************
.
Gennemført tid: 2010-01-30 09:41:47
ComboFix-quarantined-files.txt 2010-01-30 08:41
Pre-Kørsel: 92.561.473.536 byte ledig
Post-Kørsel: 92.646.871.040 byte ledig
- - End Of File - - D6AF0208067609879E8DD0EDF9A8FD78
