Hi Belahzur.
This is the combo-fix log.
ComboFix 10-01-22.01 - Chris 23/01/2010 11:45:49.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.767.375 [GMT 4:00]
Running from: c:\documents and settings\Chris\Desktop\Combo-Fix.exe
AV: avast! antivirus 4.8.1368 [VPS 100123-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\autorun.inf
c:\documents and settings\Chris\Application Data\alot
c:\documents and settings\Chris\Application Data\alot\BrowserSearch\BrowserSearch.xml
c:\documents and settings\Chris\Application Data\alot\BrowserSearch\BrowserSearch.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_0\Button_0.xml
c:\documents and settings\Chris\Application Data\alot\Button_0\Button_0.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_1\Button_1.xml
c:\documents and settings\Chris\Application Data\alot\Button_1\Button_1.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_2\Button_2.xml
c:\documents and settings\Chris\Application Data\alot\Button_2\Button_2.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_3\Button_3.xml
c:\documents and settings\Chris\Application Data\alot\Button_3\Button_3.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_4\Button_4.xml
c:\documents and settings\Chris\Application Data\alot\Button_4\Button_4.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_5\Button_5.xml
c:\documents and settings\Chris\Application Data\alot\Button_5\Button_5.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_6\Button_6.xml
c:\documents and settings\Chris\Application Data\alot\Button_6\Button_6.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_7\Button_7.xml
c:\documents and settings\Chris\Application Data\alot\Button_7\Button_7.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_8\Button_8.xml
c:\documents and settings\Chris\Application Data\alot\Button_8\Button_8.xml.backup
c:\documents and settings\Chris\Application Data\alot\Button_9\Button_9.xml
c:\documents and settings\Chris\Application Data\alot\Button_9\Button_9.xml.backup
c:\documents and settings\Chris\Application Data\alot\configurator\configurator.xml
c:\documents and settings\Chris\Application Data\alot\configurator\configurator.xml.backup
c:\documents and settings\Chris\Application Data\alot\contextMenu\contextMenu.xml
c:\documents and settings\Chris\Application Data\alot\contextMenu\contextMenu.xml.backup
c:\documents and settings\Chris\Application Data\alot\ErrorSearch\ErrorSearch.xml
c:\documents and settings\Chris\Application Data\alot\ErrorSearch\ErrorSearch.xml.backup
c:\documents and settings\Chris\Application Data\alot\products\products.xml
c:\documents and settings\Chris\Application Data\alot\products\products.xml.backup
c:\documents and settings\Chris\Application Data\alot\Resources\BrowserSearch\alot_search_defend.html
c:\documents and settings\Chris\Application Data\alot\Resources\BrowserSearch\images\favicon.ico
c:\documents and settings\Chris\Application Data\alot\Resources\Button_0\images\alot_logo_button.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Button_0\images\alot_logo_button.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_1\images\alot_search_button.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Button_1\images\alot_search_button.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_2\images\default_1795_default_1795_alot_configure.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Button_2\images\default_1795_default_1795_alot_configure.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_3\images\default_1008_alot_map_widget_default.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Button_3\images\default_1008_alot_map_widget_default.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_4\images\2363_icon.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_5\images\default_2018_compass.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Button_5\images\default_2018_compass.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_6\images\default_1182_alot_map_guides.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Button_6\images\default_1182_alot_map_guides.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_7\images\clear.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_7\images\default_1007_alot_weather_widget.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Button_7\images\default_1007_alot_weather_widget.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_7\images\mixed.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_7\images\nclear.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_7\images\nmcloud.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_8\images\default_1272_alot_map_travel.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Button_8\images\default_1272_alot_map_travel.png
c:\documents and settings\Chris\Application Data\alot\Resources\Button_9\images\1600_icon.png
c:\documents and settings\Chris\Application Data\alot\Resources\contextMenu\images\alot_icon.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\contextMenu\images\alot_icon.png
c:\documents and settings\Chris\Application Data\alot\Resources\contextMenu\images\alot_logo_button.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\contextMenu\images\alot_logo_button.png
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\domains.dat
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\alot_brand.png
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\alot_splitter.png
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\spinner.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_bottom.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_btnclose0.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_btnclose1.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_btnconfig0.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_btnconfig1.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_btnrefresh0.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_btnrefresh1.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_caption.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_error_bg.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_error_close.bmp
c:\documents and settings\Chris\Application Data\alot\Resources\Shared\images\widget_error_icon.bmp
c:\documents and settings\Chris\Application Data\alot\TimerManager\TimerManager.xml
c:\documents and settings\Chris\Application Data\alot\TimerManager\TimerManager.xml.backup
c:\documents and settings\Chris\Application Data\alot\toolbar.xml
c:\documents and settings\Chris\Application Data\alot\toolbar.xml.backup
c:\documents and settings\Chris\Application Data\alot\toolbarContextMenu\toolbarContextMenu.xml
c:\documents and settings\Chris\Application Data\alot\toolbarContextMenu\toolbarContextMenu.xml.backup
c:\documents and settings\Chris\Application Data\alot\ToolbarSearch\ToolbarSearch.xml
c:\documents and settings\Chris\Application Data\alot\Updater\Updater.xml
c:\documents and settings\Chris\Application Data\alot\Updater\Updater.xml.backup
c:\documents and settings\Rebecca\Application Data\alot
c:\program files\alot
c:\program files\alot\alotUninst.exe
c:\program files\alot\bin\alot.dll
c:\program files\Common Files\Uninstall
C:\setup.exe
c:\windows\kb913800.exe
c:\windows\system32\drivers\ndisrd.sys
c:\windows\system32\ndisapi.dll
D:\Autorun.inf
L:\Autorun.inf
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_NDISRD
-------\Service_NDISRD
((((((((((((((((((((((((( Files Created from 2009-12-23 to 2010-01-23 )))))))))))))))))))))))))))))))
.
2010-01-22 12:54 . 2010-01-22 12:54 -------- d-----w- c:\program files\TrendMicro
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-23 08:03 . 2008-06-14 15:56 -------- d-----w- c:\program files\DNA
2010-01-23 08:03 . 2008-06-14 15:56 -------- d-----w- c:\documents and settings\Chris\Application Data\DNA
2010-01-22 23:07 . 2008-06-14 15:56 -------- d-----w- c:\documents and settings\Chris\Application Data\BitTorrent
2010-01-22 12:54 . 2010-01-22 12:54 388096 ----a-r- c:\documents and settings\Chris\Application Data\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2010-01-21 11:19 . 2008-11-13 10:54 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-14 07:12 . 2009-10-02 20:51 181120 ------w- c:\windows\system32\MpSigStub.exe
2010-01-14 03:07 . 2009-09-27 21:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-01-13 05:15 . 2007-07-31 12:08 60 ----a-w- c:\windows\wpd99.drv
2010-01-13 05:15 . 2007-07-31 12:08 -------- d-----w- c:\documents and settings\All Users\Application Data\pdf995
2010-01-12 11:24 . 2009-07-26 14:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
2010-01-12 11:24 . 2008-04-15 13:49 -------- d-----w- c:\program files\Norton Security Scan
2010-01-12 11:24 . 2007-01-23 00:55 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-12-26 22:09 . 2007-07-08 08:13 -------- d-----w- c:\program files\Google
2009-12-21 19:14 . 2006-03-04 03:58 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-14 10:17 . 2007-10-02 19:37 -------- d-----w- c:\program files\DivX
2009-12-14 10:16 . 2009-06-17 06:10 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-12-01 10:52 . 2009-12-01 10:52 -------- d-----w- c:\program files\Microsoft ActiveSync
2009-12-01 10:01 . 2009-07-31 09:47 -------- d-----w- c:\program files\MSBuild
2009-12-01 09:53 . 2007-01-23 00:51 104528 ----a-w- c:\documents and settings\Chris\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-12-01 09:51 . 2009-12-01 09:51 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-11-24 23:54 . 2006-08-16 08:18 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-24 23:51 . 2006-08-16 08:19 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-11-24 23:50 . 2006-08-16 08:19 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-11-24 23:50 . 2006-08-16 08:19 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-11-24 23:50 . 2006-08-16 08:19 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-11-24 23:49 . 2006-08-16 08:19 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-24 23:48 . 2006-08-16 08:19 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-24 23:47 . 2006-08-16 08:19 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-11-24 23:47 . 2006-08-16 08:19 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-23 05:25 . 2009-11-23 05:25 79144 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 5.31.21.10\SetupAdmin.exe
2009-11-21 15:51 . 2004-08-10 20:00 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2009-11-14 00:47 . 2009-11-14 00:47 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-11-14 00:47 . 2009-11-14 00:47 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2009-11-14 00:47 . 2009-11-14 00:47 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2009-11-14 00:47 . 2009-11-14 00:47 696320 ----a-w- c:\windows\system32\DivX.dll
2009-11-02 06:37 . 2009-11-02 06:37 79144 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.0.2.25\SetupAdmin.exe
2008-05-08 11:24 . 2004-08-10 20:00 155648 --sha-r- c:\windows\system32\wscript.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-13 68856]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"BitTorrent DNA"="c:\program files\DNA\btdna.exe" [2009-10-09 323392]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"RTHDCPL"="RTHDCPL.EXE" [2006-06-01 16208384]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"SMSERIAL"="sm56hlpr.exe" [2005-06-07 544768]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 63712]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"mxomssmenu"="c:\program files\Maxtor\OneTouch Status\maxmenumgr.exe" [2007-09-06 169264]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2007-08-31 988584]
"NokiaMusic FastStart"="c:\program files\Nokia\Nokia Music\NokiaMusic.exe" [2009-07-02 2327840]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-09-23 198160]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-10-28 141600]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-03 435096]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-22 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-09-10 04:32 352256 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\EA GAMES\\Medal of Honor Pacific Assault(tm)\\mohpa.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\Wings of War\\wow.exe"=
"c:\\Program Files\\Ubisoft\\Blazing Angels Squadrons of WWII\\bin\\MainR.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Nokia\\Nokia Home Media Server\\Media Server\\twonkymedia.exe"=
"c:\\Program Files\\Nokia\\Nokia Home Media Server\\Media Server\\twonkymediaserver.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [06/12/2005 19:11 35328]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [16/08/2006 12:19 114768]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [10/10/2006 13:53 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [27/02/2007 12:39 55024]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [16/08/2006 12:19 20560]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [06/10/2009 13:35 54752]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [03/11/2006 18:19 13592]
S2 gupdate1c9ef125171f3e4;Google Update Service (gupdate1c9ef125171f3e4);c:\program files\Google\Update\GoogleUpdate.exe [17/06/2009 10:10 133104]
S2 TwonkyMedia;TwonkyMedia;c:\program files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe -serviceversion 0 --> c:\program files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe -serviceversion 0 [?]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 22:48 704864]
S3 ICDUSB2;Sony IC Recorder (P);c:\windows\system32\drivers\ICDUSB2.sys [28/11/2002 21:23 39048]
S3 krdpdre;krdpdre;\??\c:\docume~1\Chris\LOCALS~1\Temp\krdpdre.sys --> c:\docume~1\Chris\LOCALS~1\Temp\krdpdre.sys [?]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [16/02/2006 17:51 4096]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Contents of the 'Scheduled Tasks' folder
2010-01-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 08:34]
2010-01-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-17 06:10]
2010-01-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-17 06:10]
2010-01-23 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 14:20]
2010-01-22 c:\windows\Tasks\OGADaily.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 13:04]
2010-01-23 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 13:04]
2010-01-23 c:\windows\Tasks\User_Feed_Synchronization-{8CBDF3E5-7F50-46C7-981A-0D63E96B0A58}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 00:31]
.
.
------- Supplementary Scan -------
.
uStart Page =
hxxp://www.bbcnews.com/uSearchMigratedDefaultURL =
hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8uInternet Settings,ProxyServer = proxy1.emirates.net.ae:8080
uInternet Settings,ProxyOverride = *.local
uSearchAssistant =
hxxp://www.google.com/ieuSearchURL,(Default) =
hxxp://www.google.com/search?q=%sIE: Add to Windows &Live Favorites -
http://favorites.live.com/quickadd.aspxIE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\Chris\Application Data\Mozilla\Firefox\Profiles\73i9yevi.default\
FF - prefs.js: browser.startup.homepage -
hxxp://www.google.co.uk/FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - hȋdden: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHANS REMOVED - - - -
Toolbar-SITEguard - (no file)
HKLM-Run-9xadiras - 9xadiras.exe
HKLM-Run-DXDllRegExe - dxdllreg.exe
AddRemove-alotToolbar - c:\program files\alot\alotUninst.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2010-01-23 12:03
Windows 5.1.2600 Service Pack 3 NTFS
scanning hȋdden processes ...
scanning hȋdden autostart entries ...
scanning hȋdden files ...
scan completed successfully
hȋdden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(760)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
c:\windows\system32\Ati2evxx.dll
- - - - - - - > 'explorer.exe'(1012)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
c:\program files\Bonjour\mdnsNSP.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\windows\system32\Ati2evxx.exe
c:\acer\Empowering Technology\ePerformance\MemCheck.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
c:\program files\Maxtor\Sync\SyncServices.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
c:\windows\system32\UTSCSI.EXE
c:\windows\ehome\mcrdsvc.exe
c:\acer\Empowering Technology\eRecovery\eRAgent.exe
c:\windows\RTHDCPL.EXE
c:\windows\sm56hlpr.exe
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Microsoft IntelliType Pro\dpupdchk.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Completion time: 2010-01-23 12:10:08 - machine was rebooted
ComboFix-quarantined-files.txt 2010-01-23 08:10
Pre-Run: 43,317,600,256 bytes free
Post-Run: 44,436,570,112 bytes free
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect
- - End Of File - - 1181DB9FBAEEF4A36EBB01E6B54AD8F0
Thank you for your help.