ComboFix 11-02-09.02 - Anders 09-02-2011 18:41:45.2.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.45.1030.18.2046.1578 [GMT 1:00]
Kører fra: d:\rensning\ComboFix.exe
Kommandoer benyttet :: d:\rensning\CFScript.txt
advarsel -DENNE MASKINE HAR IKKE GENOPRETTELSESKONSOL INSTALLERET !!
FILE ::
"c:\windows\system32\ConduitEngine.tmp"
.
((((((((((((((((((((((((((((((((((((((( Andet, der er slettet )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\programmer\ConduitEngine
c:\programmer\ConduitEngine\appContextMenu.xml
c:\programmer\ConduitEngine\ConduitEngine.dll
c:\programmer\ConduitEngine\ConduitEngineHelper.exe
c:\programmer\ConduitEngine\engineContextMenu.xml
c:\programmer\ConduitEngine\EngineSettings.json
c:\programmer\ConduitEngine\toolbar.cfg
c:\programmer\MySecurityCenter
c:\programmer\MySecurityCenter\Programs\checkinstall.exe
c:\programmer\MySecurityCenter\Programs\csetting.exe
c:\programmer\MySecurityCenter\Programs\forcemove.exe
c:\programmer\MySecurityCenter\Programs\registrationpopup.exe
c:\programmer\MySecurityCenter\Programs\selfupdate.exe
c:\programmer\MySecurityCenter\Programs\service.exe
c:\programmer\MySecurityCenter\Programs\setc.exe
c:\programmer\MySecurityCenter\Programs\setc2.exe
c:\programmer\MySecurityCenter\settings.xml
c:\programmer\Vuze
c:\programmer\Vuze\.install4j\_shfoldr.dll
c:\programmer\Vuze\.install4j\autoUninstall.0
c:\programmer\Vuze\.install4j\files.log
c:\programmer\Vuze\.install4j\i4j_extf_0_5p83tu.utf8
c:\programmer\Vuze\.install4j\i4j_extf_1_5p83tu.properties
c:\programmer\Vuze\.install4j\i4j_extf_10_5p83tu.utf8
c:\programmer\Vuze\.install4j\i4j_extf_11_5p83tu.properties
c:\programmer\Vuze\.install4j\i4j_extf_12_5p83tu.utf8
c:\programmer\Vuze\.install4j\i4j_extf_13_5p83tu.properties
c:\programmer\Vuze\.install4j\i4j_extf_14_5p83tu_1q2vg51.png
c:\programmer\Vuze\.install4j\i4j_extf_15_5p83tu_1rjd818.png
c:\programmer\Vuze\.install4j\i4j_extf_16_5p83tu_qin5kk.png
c:\programmer\Vuze\.install4j\i4j_extf_17_5p83tu.exe
c:\programmer\Vuze\.install4j\i4j_extf_18_5p83tu.exe
c:\programmer\Vuze\.install4j\i4j_extf_19_5p83tu_xza4ha.png
c:\programmer\Vuze\.install4j\i4j_extf_2_5p83tu.utf8
c:\programmer\Vuze\.install4j\i4j_extf_20_5p83tu_19c5po3.png
c:\programmer\Vuze\.install4j\i4j_extf_21_5p83tu_1dcx5tw.png
c:\programmer\Vuze\.install4j\i4j_extf_22_5p83tu.html
c:\programmer\Vuze\.install4j\i4j_extf_23_5p83tu_gxzxjb.png
c:\programmer\Vuze\.install4j\i4j_extf_24_5p83tu.html
c:\programmer\Vuze\.install4j\i4j_extf_25_5p83tu_rz1c2y.png
c:\programmer\Vuze\.install4j\i4j_extf_26_5p83tu_bm8amj.ico
c:\programmer\Vuze\.install4j\i4j_extf_27_5p83tu.exe
c:\programmer\Vuze\.install4j\i4j_extf_28_5p83tu.dll
c:\programmer\Vuze\.install4j\i4j_extf_29_5p83tu.dll
c:\programmer\Vuze\.install4j\i4j_extf_3_5p83tu.properties
c:\programmer\Vuze\.install4j\i4j_extf_30_5p83tu_1efhqvy.png
c:\programmer\Vuze\.install4j\i4j_extf_31_5p83tu_7o6cv2.png
c:\programmer\Vuze\.install4j\i4j_extf_32_5p83tu_luoufk.png
c:\programmer\Vuze\.install4j\i4j_extf_33_5p83tu.html
c:\programmer\Vuze\.install4j\i4j_extf_34_5p83tu.exe
c:\programmer\Vuze\.install4j\i4j_extf_35_5p83tu_1pn3dfg.png
c:\programmer\Vuze\.install4j\i4j_extf_36_5p83tu_z1x7tn.png
c:\programmer\Vuze\.install4j\i4j_extf_4_5p83tu.utf8
c:\programmer\Vuze\.install4j\i4j_extf_5_5p83tu.properties
c:\programmer\Vuze\.install4j\i4j_extf_6_5p83tu.utf8
c:\programmer\Vuze\.install4j\i4j_extf_7_5p83tu.properties
c:\programmer\Vuze\.install4j\i4j_extf_8_5p83tu.utf8
c:\programmer\Vuze\.install4j\i4j_extf_9_5p83tu.properties
c:\programmer\Vuze\.install4j\i4jdel.exe
c:\programmer\Vuze\.install4j\i4jinst.dll
c:\programmer\Vuze\.install4j\i4jparams.conf
c:\programmer\Vuze\.install4j\i4jruntime.jar
c:\programmer\Vuze\.install4j\inst_jre.cfg
c:\programmer\Vuze\.install4j\install.prop
c:\programmer\Vuze\.install4j\installation.log
c:\programmer\Vuze\.install4j\MessagesDefault
c:\programmer\Vuze\.install4j\response.varfile
c:\programmer\Vuze\.install4j\unicows.dll
c:\programmer\Vuze\.install4j\user.jar
c:\programmer\Vuze\aereg.dll
c:\programmer\Vuze\aereg64.dll
c:\programmer\Vuze\Azureus.exe
c:\programmer\Vuze\Azureus.exe.manifest
c:\programmer\Vuze\Azureus.exe.vmoptions
c:\programmer\Vuze\Azureus.properties
c:\programmer\Vuze\Azureus2.jar
c:\programmer\Vuze\AzureusUpdater.exe
c:\programmer\Vuze\hs_err_pid2708.log
c:\programmer\Vuze\installer.log
c:\programmer\Vuze\msvcr71.dll
c:\programmer\Vuze\plugins\azitunes\azitunes_0.2.3.jar
c:\programmer\Vuze\plugins\azitunes\azureus.sig
c:\programmer\Vuze\plugins\azitunes\jacob-1.14.3-x86.dll
c:\programmer\Vuze\plugins\azitunes\jacob_1.14.3.jar
c:\programmer\Vuze\plugins\azitunes\libProcessAccess.dll
c:\programmer\Vuze\plugins\azitunes\libProcessAccess_0.1.2.jar
c:\programmer\Vuze\plugins\azitunes\plugin.properties
c:\programmer\Vuze\plugins\azplugins\azplugins_2.1.6.jar
c:\programmer\Vuze\plugins\azrating\azrating_1.3.1.jar
c:\programmer\Vuze\plugins\azupdater\azupdaterpatcher_1.8.16.jar
c:\programmer\Vuze\plugins\azupdater\azureus.sig
c:\programmer\Vuze\plugins\azupdater\plugin.properties
c:\programmer\Vuze\plugins\azupdater\Updater.jar
c:\programmer\Vuze\plugins\azupnpav\azupnpav_0.2.29.2.jar
c:\programmer\Vuze\plugins\azupnpav\azupnpav_0.3.6.jar
c:\programmer\Vuze\plugins\azupnpav\azupnpav_0.3.6.zip
c:\programmer\Vuze\plugins\azupnpav\azureus.sig
c:\programmer\Vuze\plugins\azupnpav\plugin.properties
c:\programmer\Vuze\plugins\azupnpav\plugin.properties_0.3.6
c:\programmer\Vuze\swt.jar
c:\programmer\Vuze\uninstall.exe
c:\programmer\Vuze\Vuze.ico
c:\programmer\Vuze_Remote
c:\programmer\Vuze_Remote\INSTALL.LOG
c:\programmer\Vuze_Remote\tbVuz0.dll
c:\programmer\Vuze_Remote\tbVuz1.dll
c:\programmer\Vuze_Remote\tbVuz2.dll
c:\programmer\Vuze_Remote\tbVuze.dll
c:\programmer\Vuze_Remote\toolbar.cfg
c:\programmer\Vuze_Remote\UNWISE.EXE
c:\programmer\Vuze_Remote\Vuze_RemoteToolbarHelper.exe
c:\programmer\Vuze_Remote\Vuze_RemoteToolbarHelper1.exe
c:\windows\system32\ConduitEngine.tmp
e:\programmer\Limewire
e:\programmer\Limewire\.NetworkShare\LimeWireWin4.18.8.exe
e:\programmer\Limewire\.NetworkShare\LimeWireWin5.1.4.exe
e:\programmer\Limewire\Buy LimeWire PRO.url
e:\programmer\Limewire\COPYING
e:\programmer\Limewire\data.ser
e:\programmer\Limewire\hs_err_pid1756.log
e:\programmer\Limewire\hs_err_pid2764.log
e:\programmer\Limewire\hs_err_pid4420.log
e:\programmer\Limewire\hs_err_pid512.log
e:\programmer\Limewire\inspection.props
e:\programmer\Limewire\install.log
e:\programmer\Limewire\language.prop
e:\programmer\Limewire\lib\additional_resources.jar
e:\programmer\Limewire\lib\aopalliance.jar
e:\programmer\Limewire\lib\AppFramework.jar
e:\programmer\Limewire\lib\base64-2.2.2.jar
e:\programmer\Limewire\lib\clink.jar
e:\programmer\Limewire\lib\commons-codec-1.3.jar
e:\programmer\Limewire\lib\commons-logging.jar
e:\programmer\Limewire\lib\commons-math-1.2.jar
e:\programmer\Limewire\lib\commons-net.jar
e:\programmer\Limewire\lib\dnsjava-2.0.6.jar
e:\programmer\Limewire\lib\dnsjava.jar
e:\programmer\Limewire\lib\daap.jar
e:\programmer\Limewire\lib\EventBus-1.2b.jar
e:\programmer\Limewire\lib\forms.jar
e:\programmer\Limewire\lib\foxtrot.jar
e:\programmer\Limewire\lib\gettext-commons.jar
e:\programmer\Limewire\lib\glazedlists-1.7.0_java15.jar
e:\programmer\Limewire\lib\guice-1.0.jar
e:\programmer\Limewire\lib\guice-assistedinject-snapshot.jar
e:\programmer\Limewire\lib\guice-snapshot.jar
e:\programmer\Limewire\lib\hashes
e:\programmer\Limewire\lib\hsqldb.jar
e:\programmer\Limewire\lib\httpclient-4.0-alpha5-20080522.192134-5.jar
e:\programmer\Limewire\lib\httpclient-4.0-beta1.jar
e:\programmer\Limewire\lib\httpcore-4.0-beta2-20080510.140437-10.jar
e:\programmer\Limewire\lib\httpcore-4.0-beta2.jar
e:\programmer\Limewire\lib\httpcore-nio-4.0-beta2-20080510.140437-10.jar
e:\programmer\Limewire\lib\httpcore-nio-4.0-beta2.jar
e:\programmer\Limewire\lib\icu4j.jar
e:\programmer\Limewire\lib\iTunes-0.0.1.jar
e:\programmer\Limewire\lib\jacob-1.14.1-x64.dll
e:\programmer\Limewire\lib\jacob-1.14.1-x86.dll
e:\programmer\Limewire\lib\jacob-1.14.1.jar
e:\programmer\Limewire\lib\jaudiotagger.jar
e:\programmer\Limewire\lib\jcip-annotations.jar
e:\programmer\Limewire\lib\jcraft.jar
e:\programmer\Limewire\lib\jdic.dll
e:\programmer\Limewire\lib\jdic.jar
e:\programmer\Limewire\lib\jdic_stub.jar
e:\programmer\Limewire\lib\jflac.jar
e:\programmer\Limewire\lib\jl.jar
e:\programmer\Limewire\lib\jmdns.jar
e:\programmer\Limewire\lib\jna.jar
e:\programmer\Limewire\lib\jogg.jar
e:\programmer\Limewire\lib\jorbis.jar
e:\programmer\Limewire\lib\jxlayer.jar
e:\programmer\Limewire\lib\LimeWire.ico
e:\programmer\Limewire\lib\LimeWire.jar
e:\programmer\Limewire\lib\log4j.jar
e:\programmer\Limewire\lib\log4j.properties
e:\programmer\Limewire\lib\looks.jar
e:\programmer\Limewire\lib\messages.jar
e:\programmer\Limewire\lib\miglayout.jar
e:\programmer\Limewire\lib\mozdom4java.jar
e:\programmer\Limewire\lib\MozillaGlue-1.9.jar
e:\programmer\Limewire\lib\MozillaInterfaces-1.9.jar
e:\programmer\Limewire\lib\mozswing.jar
e:\programmer\Limewire\lib\mp3spi.jar
e:\programmer\Limewire\lib\onion-common.jar
e:\programmer\Limewire\lib\onion-fec.jar
e:\programmer\Limewire\lib\ProgressTabs.jar
e:\programmer\Limewire\lib\smack.jar
e:\programmer\Limewire\lib\smackx-debug.jar
e:\programmer\Limewire\lib\smackx.jar
e:\programmer\Limewire\lib\swing-worker-1.1.jar
e:\programmer\Limewire\lib\swingx-0.9.4.jar
e:\programmer\Limewire\lib\swt.jar
e:\programmer\Limewire\lib\SystemUtilities.dll
e:\programmer\Limewire\lib\SystemUtilitiesA.dll
e:\programmer\Limewire\lib\themes.jar
e:\programmer\Limewire\lib\tray.dll
e:\programmer\Limewire\lib\tritonus.jar
e:\programmer\Limewire\lib\vorbisspi.jar
e:\programmer\Limewire\LimeWire On Startup.lnk
e:\programmer\Limewire\LimeWire.exe
e:\programmer\Limewire\LimeWire.ico
e:\programmer\Limewire\pmf.ico
e:\programmer\Limewire\root\magnet10\badge.img
e:\programmer\Limewire\root\magnet10\canHandle.img
e:\programmer\Limewire\root\magnet10\limewire.gif
e:\programmer\Limewire\root\magnet10\options.js
e:\programmer\Limewire\root\magnet10\silentdetect.js
e:\programmer\Limewire\SOURCE
e:\programmer\Limewire\spacer.gif
e:\programmer\Limewire\uninstall.exe
e:\programmer\Limewire\unpack.log
.
((((((((((((((((((((((((((((((((((((((( Drivers/Tjenester )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_MYSECURITYCENTER_LICENSE_SERVICE
-------\Service_Avgfwdx
-------\Service_Avgfwfd
-------\Service_MySecurityCenter License Service
((((((((((((((((((((((((((((( Filer skabt fra 2011-01-09 til 2011-02-09 )))))))))))))))))))))))))))))))))))
.
2011-02-09 16:37 . 2011-02-09 16:37 -------- d-----w- C:\Program Files
2011-02-05 21:02 . 2011-02-05 21:02 -------- d--h--w- c:\windows\PIF
2011-02-03 11:32 . 2011-02-03 11:32 82469224 ----a-w- c:\programmer\Fælles filer\Windows Live\.cache\wlc11F.tmp
2011-01-21 18:07 . 2011-01-21 18:07 -------- d-----w- c:\programmer\TeamViewer
2011-01-20 13:00 . 2011-01-20 13:00 -------- d-----w- c:\documents and settings\Anders\Lokale indstillinger\Application Data\Octoshape
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-20 17:09 . 2010-09-27 11:18 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2010-09-27 11:18 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-18 18:15 . 2009-08-07 09:09 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-12 17:53 . 2010-04-20 16:02 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-11-12 15:34 . 2009-08-16 15:04 73728 ----a-w- c:\windows\system32\javacpl.cpl
.
((((((((((((((((((((((((((((((((((( Start steder i reg.basen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Bemærk* tomme linier & lovlige standard linier vises ikke
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="e:\programmer\steam\steam.exe" [2010-11-17 1242448]
"msnmsgr"="c:\programmer\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"="CTHELPER.EXE" [2008-02-20 19456]
"CTxfiHlp"="CTXFIHLP.EXE" [2008-02-20 19968]
"IntelliPoint"="c:\programmer\Microsoft IntelliPoint\ipoint.exe" [2007-08-31 1037736]
"QuickTime Task"="c:\programmer\QuickTime\qttask.exe" [2009-05-26 413696]
"iTunesHelper"="e:\programmer\iTunes\iTunesHelper.exe" [2009-07-13 292128]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 13666408]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-01-11 110696]
"SunJavaUpdateSched"="c:\programmer\Fælles filer\Java\Java Update\jusched.exe" [2010-05-14 248552]
"DivXUpdate"="c:\programmer\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Menuen Start\Programmer\Start\
Adobe Reader Hurtigstart.lnk - c:\programmer\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
Adobe Reader Synchronizer.lnk - c:\programmer\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-22 734872]
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmer\\Messenger\\msmsgs.exe"=
"e:\\Programmer\\mIRC\\mirc.exe"=
"e:\\Programmer\\Elma\\Elma Online\\belma.exe"=
"e:\\Programmer\\Steam\\steam.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"e:\\Programmer\\Call Of Duty 4\\iw3mp.exe"=
"c:\\Programmer\\Bonjour\\mDNSResponder.exe"=
"e:\\Programmer\\iTunes\\iTunes.exe"=
"e:\\Programmer\\Firefox\\firefox.exe"=
"c:\\Documents and Settings\\Anders\\Application Data\\Octoshape\\Octoshape Streaming Services\\OctoshapeClient.exe"=
"e:\\Programmer\\SopCast\\SopCast.exe"=
"e:\\Programmer\\HLSW\\hlsw.exe"=
"c:\\Programmer\\Skype\\Plugin Manager\\skypePM.exe"=
"e:\\Programmer\\HoN\\hon.exe"=
"e:\\Programmer\\Steam\\SteamApps\\lampeduskeren\\counter-strike\\hl.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"e:\\Programmer\\Heroes 3\\HEROES3.EXE"=
"e:\\Programmer\\Heroes 3\\Heroes3_C_crked.exe"=
"e:\\Programmer\\Maple\\jre\\bin\\maple.exe"=
"c:\\Programmer\\RayV\\RayV\\RayV.exe"=
"c:\\Programmer\\RayV\\RayV\\RayV.dll"=
"c:\\Programmer\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\Anders\\temp\\TeamViewer\\Version5\\TeamViewer.exe"=
"d:\\Install\\EasyAntiCheat.exe"=
"e:\\Programmer\\Steam\\SteamApps\\teh_master666\\half-life 2 deathmatch\\hl2.exe"=
"c:\\Programmer\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Programmer\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
"c:\\Programmer\\Windows Live\\Messenger\\msnmsgr.exe"=
"e:\\Programmer\\Steam\\SteamApps\\teh_master666\\counter-strike\\hl.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5432:TCP"= 5432:TCP:postgres
R1 prio;Prio;c:\windows\system32\drivers\prio.sys [12-09-2009 18:25 51448]
R2 postgresql-8.4;PostgreSQL Server 8.4;C:/Programmer/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Programmer/PostgreSQL/8.4/data" -w --> C:/Programmer/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N postgresql-8.4 [?]
R2 prio_svc;Prio Service;e:\programmer\Prio\prio_svc.exe [12-09-2009 18:25 5120]
R3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);c:\windows\system32\drivers\A3AB.sys [22-03-2005 02:17 450400]
S3 USBAAPL;Apple Mobile USB Driver;c:\windows\system32\drivers\usbaapl.sys [20-08-2009 23:06 39424]
.
Indhold af mappen 'Planlagte Opgaver'
2010-02-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programmer\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Yderligere scanning -------
.
uStart Page =
hxxp://www.google.dk/uInternet Settings,ProxyOverride = *.local
IE: E&ksporter til Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: danid.dk
Trusted Zone: danid.dk
FF - ProfilePath - c:\documents and settings\Anders\Application Data\Mozilla\Firefox\Profiles\mhvnbvvh.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - e:\programmer\Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - e:\programmer\Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - e:\programmer\Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} - e:\programmer\Firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - e:\programmer\Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - e:\programmer\Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - e:\programmer\Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - e:\programmer\Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\programmer\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - %profile%\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
.
- - - - TOMME GENVEJE FJERNET - - - -
AddRemove-8461-7759-5462-8226 - c:\programmer\Vuze\uninstall.exe
AddRemove-Vuze_Remote Toolbar - c:\progra~1\VUZE_R~1\UNWISE.EXE
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2011-02-09 18:49
Windows 5.1.2600 Service Pack 3 NTFS
scanner skjulte processer ...
scanner skjulte autostarter ...
scanner skjulte filer ...
c:\docume~1\Anders\LOKALE~1\Temp\RGI6.tmp 7096 bytes
scanning gennemført med succes
skjulte filer: 1
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\postgresql-8.4]
"ImagePath"="C:/Programmer/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Programmer/PostgreSQL/8.4/data\" -w"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\postgresql-8.4]
"ImagePath"="C:/Programmer/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Programmer/PostgreSQL/8.4/data\" -w"
.
--------------------- LÅSTE REGISTRERINGS NØGLER ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\software\Microsoft\Cryptography\RNG*]
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
.
--------------------- DLLs startet under kørende Processer ---------------------
- - - - - - - > 'explorer.exe'(3076)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Andre kørende processer ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\programmer\idt\intelxpv_v103\wdm\STacSV.exe
c:\programmer\Creative\Shared Files\CTAudSvc.exe
c:\programmer\Fælles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\programmer\Bonjour\mDNSResponder.exe
c:\programmer\Java\jre6\bin\jqs.exe
c:\programmer\Fælles filer\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\PnkBstrA.exe
c:\programmer\PostgreSQL\8.4\bin\pg_ctl.exe
c:\programmer\PostgreSQL\8.4\bin\postgres.exe
c:\programmer\PostgreSQL\8.4\bin\postgres.exe
c:\programmer\PostgreSQL\8.4\bin\postgres.exe
c:\programmer\PostgreSQL\8.4\bin\postgres.exe
c:\programmer\PostgreSQL\8.4\bin\postgres.exe
c:\windows\system32\RUNDLL32.EXE
c:\programmer\Microsoft IntelliPoint\dpupdchk.exe
c:\programmer\iPod\bin\iPodService.exe
.
**************************************************************************
.
Gennemført tid: 2011-02-09 18:54:46 - maskinen blev genstartet
ComboFix-quarantined-files.txt 2011-02-09 17:54
ComboFix2.txt 2011-02-09 16:36
Pre-Kørsel: 37.548.138.496 byte ledig
Post-Kørsel: 37.310.025.728 byte ledig
- - End Of File - - AD4CB04C94B0059506D1322B5160D7FE
Her er den nye logfil, nærmer vi os noget?
Ny bruger
Nybegynder
Opret
Preview
