WiredWX Hobby Weather ToolsLog in

 


descriptionlaptop Internet going where I did not click - Page 2 Empty1st half combo-fix

more_horiz
ComboFix 09-05-29.01 - Owner 05/29/2009 7:43.2 - NTFSx86
Microsoft®️ Windows Vista™️ Home Premium 6.0.6001.1.1252.1.1033.18.3070.1634 [GMT -5:00]
Running from: c:\users\Owner\Desktop\Combo-Fix.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: MalwareRemovalBot *disabled* (Updated) {1C903D86-9D58-4622-BD6C-FCF502C03615}
SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Files Created from 2009-04-28 to 2009-05-29 )))))))))))))))))))))))))))))))
.

2009-05-27 16:16 . 2009-05-27 16:16 -------- d-----w c:\program files\Sun
2009-05-27 16:16 . 2009-05-27 16:15 410984 ----a-w c:\windows\system32\deploytk.dll
2009-05-27 16:14 . 2009-05-27 16:15 -------- d-----w c:\program files\Java
2009-05-27 16:12 . 2009-05-27 16:12 -------- d-----w c:\program files\Common Files\Adobe AIR
2009-05-27 15:57 . 2009-05-28 04:26 -------- d-----w c:\progra~2\NOS
2009-05-27 15:57 . 2009-05-28 04:26 -------- d-----w c:\program files\NOS
2009-05-27 15:46 . 2009-05-27 15:48 -------- d-----w c:\users\Owner\.SunDownloadManager
2009-05-27 15:14 . 2009-05-27 15:14 -------- d-----w c:\users\Owner\AppData\Local\Mozilla
2009-05-26 18:09 . 2009-05-26 18:10 -------- d-----w c:\program files\The Enchanting Islands
2009-05-26 16:36 . 2009-05-26 16:36 -------- d-----w c:\users\Owner\AppData\Local\Slapdash Games
2009-05-26 16:36 . 2009-05-26 16:36 -------- d-----w c:\progra~2\Slapdash Games
2009-05-26 16:32 . 2009-05-26 16:33 -------- d-----w c:\program files\Yard Sale Hidden Treasures - Lucky Junction
2009-05-26 09:33 . 2008-06-19 22:24 28544 ----a-w c:\windows\system32\drivers\pavboot.sys
2009-05-26 09:33 . 2009-05-26 09:33 -------- d-----w c:\program files\Panda Security
2009-05-25 02:06 . 2009-05-24 23:47 15688 ----a-w c:\windows\system32\lsdelete.exe
2009-05-25 01:15 . 2008-06-20 01:14 97800 ----a-w c:\windows\system32\infocardapi.dll
2009-05-25 01:15 . 2008-06-20 01:14 105016 ----a-w c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-05-25 01:15 . 2008-06-20 01:14 43544 ----a-w c:\windows\system32\PresentationHostProxy.dll
2009-05-25 01:15 . 2008-06-20 01:14 11264 ----a-w c:\windows\system32\icardres.dll
2009-05-25 01:15 . 2008-06-20 01:14 622080 ----a-w c:\windows\system32\icardagt.exe
2009-05-25 01:15 . 2008-06-20 01:14 781344 ----a-w c:\windows\system32\PresentationNative_v0300.dll
2009-05-25 01:15 . 2008-06-20 01:14 326160 ----a-w c:\windows\system32\PresentationHost.exe
2009-05-25 01:05 . 2008-07-27 18:03 96760 ----a-w c:\windows\system32\dfshim.dll
2009-05-25 01:05 . 2008-07-27 18:03 282112 ----a-w c:\windows\system32\mscoree.dll
2009-05-25 01:05 . 2008-07-27 18:03 41984 ----a-w c:\windows\system32\netfxperf.dll
2009-05-25 01:04 . 2008-07-27 18:03 158720 ----a-w c:\windows\system32\mscorier.dll
2009-05-25 01:04 . 2008-07-27 18:03 83968 ----a-w c:\windows\system32\mscories.dll
2009-05-25 00:15 . 2009-05-25 00:15 -------- d-----w c:\program files\FileASSASSIN
2009-05-24 23:47 . 2009-05-24 23:47 -------- dc----w c:\windows\system32\DRVSTORE
2009-05-24 23:47 . 2009-05-24 23:47 64160 ----a-w c:\windows\system32\drivers\Lbd.sys
2009-05-24 23:29 . 2009-05-24 23:29 -------- dc-h--w c:\progra~2\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-05-24 23:29 . 2009-05-27 14:44 -------- d-----w c:\users\Owner\AppData\Roaming\MailWasherFree
2009-05-24 23:29 . 2009-05-24 23:29 -------- d-----w c:\program files\FireTrust
2009-05-24 20:11 . 2007-10-23 14:27 110592 ----a-w c:\users\Owner\AppData\Roaming\U3\temp\cleanup.exe
2009-05-24 20:09 . 2009-05-28 12:20 117760 ----a-w c:\users\Owner\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2009-05-24 20:09 . 2009-05-24 20:09 -------- d-----w c:\users\Owner\AppData\Roaming\SUPERAntiSpyware.com
2009-05-24 20:09 . 2009-05-24 20:09 -------- d-----w c:\progra~2\SUPERAntiSpyware.com
2009-05-24 20:05 . 2009-05-28 11:59 -------- d-----w c:\program files\SpywareBlaster
2009-05-24 20:04 . 2007-10-23 14:22 3350528 ---ha-w c:\users\Owner\AppData\Roaming\U3\temp\Launchpad Removal.exe
2009-05-24 20:04 . 2009-05-24 22:34 -------- d-----w c:\users\Owner\AppData\Roaming\U3
2009-05-23 06:19 . 2009-05-23 06:19 -------- d-----w c:\users\Owner\AppData\Roaming\Malwarebytes
2009-05-23 06:19 . 2009-04-06 20:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-05-23 06:18 . 2009-04-06 20:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-23 06:18 . 2009-05-23 06:19 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-05-23 06:18 . 2009-05-23 06:18 -------- d-----w c:\progra~2\Malwarebytes
2009-05-22 20:57 . 2009-05-28 12:23 -------- d-----w c:\progra~2\Spybot - Search & Destroy
2009-05-22 20:57 . 2009-05-24 23:58 -------- d-----w c:\program files\Spybot - Search & Destroy
2009-05-22 20:35 . 2009-05-22 20:35 -------- d-----w c:\progra~2\Fashion Finder
2009-05-22 20:32 . 2009-05-22 20:32 -------- d-----w c:\program files\Fashion Finder - Secrets of Fashion NYC Edition
2009-05-18 03:56 . 2009-05-18 03:56 14846 ----a-r c:\users\Owner\AppData\Roaming\Microsoft\Installer\{329A3C81-7884-4A64-B8F6-078795C31506}\EPA_Icon.914326BE_BDF9_4068_A4AF_AF1B75093799.exe
2009-05-18 03:56 . 2009-05-18 03:56 -------- d-----w c:\users\Owner\AppData\Roaming\Netscape
2009-05-17 14:56 . 2009-05-17 14:56 -------- d-----w c:\users\Owner\AppData\Local\GestaltGames
2009-05-12 23:39 . 2009-05-12 23:39 -------- d-----w c:\program files\Virtual Families
2009-05-10 13:51 . 2009-05-10 13:51 -------- d-----w c:\users\Owner\AppData\Roaming\Enchanted Katya
2009-05-10 02:24 . 2009-05-10 02:24 -------- d-----w c:\progra~2\AdventureChronicles1
2009-05-09 13:36 . 2009-05-09 13:38 -------- d-----w c:\users\Owner\AppData\Roaming\Bigfish 3 Days Zoo Mystery
2009-05-02 14:27 . 2009-05-02 14:27 -------- d-----w c:\program files\Westward III

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-28 15:54 . 2007-12-14 08:57 12 ----a-w c:\windows\bthservsdp.dat
2009-05-27 17:19 . 2008-03-22 13:04 27839 ----a-w c:\users\Owner\AppData\Roaming\nvModes.dat
2009-05-27 16:12 . 2008-04-05 14:14 -------- d-----w c:\program files\Common Files\Adobe
2009-05-26 16:20 . 2008-09-10 23:27 -------- d-----w c:\program files\bfgclient
2009-05-26 15:16 . 2008-06-06 02:12 -------- d-----w c:\progra~2\Fugazo
2009-05-25 02:06 . 2008-09-17 00:33 -------- d-----w c:\program files\Cake Mania 3
2009-05-24 23:29 . 2008-05-11 20:51 -------- d-----w c:\program files\Lavasoft
2009-05-24 22:14 . 2008-10-03 02:47 -------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-05-24 21:58 . 2008-11-10 06:59 -------- d-----w c:\program files\Windows Live Toolbar
2009-05-23 03:10 . 2009-01-26 22:55 -------- d-----w c:\program files\Citrix
2009-05-23 03:09 . 2008-12-28 17:20 -------- d-----w c:\program files\RealArcade
2009-05-18 03:56 . 2009-01-31 09:06 -------- d-----w c:\users\Owner\AppData\Roaming\Citrix
2009-05-13 03:50 . 2007-12-14 09:31 -------- d-----w c:\progra~2\Microsoft Help
2009-05-13 03:45 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail
2009-05-08 23:48 . 2008-12-28 18:50 -------- d-----w c:\progra~2\GameHouse
2009-05-02 21:50 . 2009-01-30 23:15 108552 ----a-w c:\windows\system32\drivers\avgtdix.sys
2009-05-02 21:50 . 2008-05-11 19:04 325896 ----a-w c:\windows\system32\drivers\avgldx86.sys
2009-05-02 21:50 . 2008-05-11 19:04 27784 ----a-w c:\windows\system32\drivers\avgmfx86.sys
2009-05-02 21:50 . 2008-05-11 19:04 11952 ----a-w c:\windows\system32\avgrsstx.dll
2009-05-02 21:50 . 2008-05-11 19:04 -------- d-----w c:\progra~2\avg8
2009-04-25 02:52 . 2009-04-23 00:16 -------- d-----w c:\users\Owner\AppData\Roaming\Ventrilo
2009-04-23 00:15 . 2009-04-23 00:15 -------- d-----w c:\program files\Ventrilo
2009-04-21 23:32 . 2008-05-23 23:21 -------- d-----w c:\progra~2\PlayFirst
2009-04-21 23:32 . 2008-04-08 13:18 -------- d-----w c:\users\Owner\AppData\Roaming\PlayFirst
2009-04-21 13:33 . 2008-05-28 17:10 -------- d-----w c:\program files\EA GAMES
2009-04-19 14:03 . 2009-04-19 14:03 -------- d-----w c:\users\Owner\AppData\Roaming\TikGames
2009-04-19 14:03 . 2009-04-19 14:03 -------- d-----w c:\progra~2\TikGames
2009-04-14 02:54 . 2009-04-14 00:50 -------- d-----w c:\users\Owner\AppData\Roaming\Be a King
2009-04-14 00:31 . 2009-04-14 00:30 -------- d-----w c:\program files\Be a King
2009-04-07 01:34 . 2009-04-07 01:34 -------- d-----w c:\users\Owner\AppData\Roaming\ShinyTales
2009-04-07 00:55 . 2009-04-07 00:55 -------- d-----w c:\program files\Wonderburg
2009-04-06 23:33 . 2009-04-06 23:33 -------- d-----w c:\users\Owner\AppData\Roaming\Shape games
2009-04-06 23:32 . 2009-04-06 23:32 -------- d-----w c:\program files\Success Story
2009-03-21 22:18 . 2009-01-16 23:14 130424 ----a-w c:\windows\system32\drivers\PCTCore.sys
2009-03-17 03:38 . 2009-04-14 22:49 13824 ----a-w c:\windows\system32\apilogen.dll
2009-03-17 03:38 . 2009-04-14 22:49 24064 ----a-w c:\windows\system32\amxread.dll
2009-03-03 04:46 . 2009-04-14 22:49 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-03-03 04:46 . 2009-04-14 22:49 3547632 ----a-w c:\windows\system32\ntoskrnl.exe
2009-03-03 04:40 . 2009-04-14 22:49 827392 ----a-w c:\windows\system32\wininet.dll
2009-03-03 04:39 . 2009-04-14 22:49 183296 ----a-w c:\windows\system32\sdohlp.dll
2009-03-03 04:39 . 2009-04-14 22:49 551424 ----a-w c:\windows\system32\rpcss.dll
2009-03-03 04:39 . 2009-04-14 22:49 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll
2009-03-03 04:37 . 2009-04-14 22:49 78336 ----a-w c:\windows\system32\ieencode.dll
2009-03-03 04:37 . 2009-04-14 22:49 98304 ----a-w c:\windows\system32\iasrecst.dll
2009-03-03 04:37 . 2009-04-14 22:49 54784 ----a-w c:\windows\system32\iasads.dll
2009-03-03 04:37 . 2009-04-14 22:49 44032 ----a-w c:\windows\system32\iasdatastore.dll
2009-03-03 03:04 . 2009-04-14 22:49 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe
2009-03-03 02:38 . 2009-04-14 22:49 17408 ----a-w c:\windows\system32\iashost.exe
2009-03-03 02:28 . 2009-04-14 22:49 26624 ----a-w c:\windows\system32\ieUnatt.exe
.

descriptionlaptop Internet going where I did not click - Page 2 Empty2nd half

more_horiz
(((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"Utopia Angel"="c:\utopia\Angel\Angel.exe" [2009-05-18 3594240]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-02-15 857648]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Gateway\traybar.exe" [2007-09-13 638976]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2007-11-09 409600]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-11-15 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-15 8534560]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-15 81920]
"00PCTFW"="c:\program files\PC Tools Firewall Plus\FirewallGUI.exe" [2009-02-26 2652056]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-05-02 1947928]
"TrueImageMonitor.exe"="c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe" [2006-10-17 1164912]
"AcronisTimounterMonitor"="c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe" [2006-10-17 1941784]
"Acronis Scheduler2 Service"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2006-10-17 87584]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-05-24 516440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-27 148888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\windows\SMINST\launcher.exe" [2007-07-13 40072]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-3-29 719664]
Citrix XenApp.lnk - c:\windows\Installer\{388C130B-0079-46B4-A0D5-DC2DD7A89A7B}\pnaico.exe.20FBBF0A_A7E5_4BDE_9798_9811C3D135AC.exe [2009-1-26 73728]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BigFix.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\BigFix.lnk
backup=c:\windows\pss\BigFix.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{B1AB1ED7-7DD6-4AAA-94C3-23E9C1064E8D}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{6FCDA6AF-DDBF-44B5-AA47-3C69429EAE67}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{33D22029-2788-47B2-85BA-CCD347D5194D}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
"{6E6EF01B-BA76-4336-950E-6892F7CA5DDA}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe
"{01AF5E37-B956-422F-8F49-4EE32689EC37}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{DFA28032-31CD-451D-B6F5-6660CB4B502B}"= UDP:c:\program files\Ventrilo\Ventrilo.exe:Ventrilo.exe
"{898320A1-5984-4E05-96C0-C16116105A9F}"= TCP:c:\program files\Ventrilo\Ventrilo.exe:Ventrilo.exe
"{E0F01021-3BF3-4B23-A3FB-A702281F7E47}"= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R0 Lbd;Lbd;c:\windows\System32\drivers\Lbd.sys [5/24/2009 18:47 64160]
R0 pavboot;pavboot;c:\windows\System32\drivers\pavboot.sys [5/26/2009 04:33 28544]
R0 Si3531;SiI-3531 SATA Controller;c:\windows\System32\drivers\Si3531.sys [6/1/2007 13:29 210736]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [5/11/2008 14:04 325896]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [1/30/2009 18:15 108552]
R1 pctgntdi;pctgntdi;c:\windows\System32\drivers\pctgntdi.sys [1/16/2009 18:14 159600]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [5/11/2008 14:04 908568]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [5/11/2008 14:04 298776]
R2 PCTAppEvent;PCTAppEvent Driver;c:\windows\System32\drivers\PCTAppEvent.sys [1/16/2009 18:14 73840]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [5/22/2009 16:08 1153368]
R3 pctplfw;pctplfw;c:\windows\System32\drivers\pctplfw.sys [1/16/2009 18:13 95640]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [3/9/2009 14:06 953168]
S3 NETw2v32;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows Vista;c:\windows\System32\drivers\NETw2v32.sys [11/2/2006 05:25 2589184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
.
Contents of the 'Scheduled Tasks' folder

2009-05-25 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-09 23:46]
.
.
------- Supplementary Scan -------
.
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Trusted Zone: geekpolice.net\www
Trusted Zone: pandasoftware.com\www
DPF: {EC0403E0-9158-4CF8-A2B6-3C62C3B9B6B7} - hxxps://vpn.spiritaero.com/CitrixLogonPoint/SpiritUsers/EPAClient/EPAClient.exe
FF - ProfilePath - c:\users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\vot62qtq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\users\Owner\AppData\Roaming\Mozilla\plugins\npCtxCAO.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-29 07:47
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-2857160768-3149739328-402376366-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
"datasecu"=hex:82,8f,8f,82,1c,6d,87,b5,f6,d8,5f,59,24,af,01,7b,03,86,e1,a6,55,
75,ed,f9,4e,5f,6c,21,2f,e0,a3,5d,ca,30,ee,dc,16,77,04,77,39,7f,65,ae,95,8f,\
"rkeysecu"=hex:03,87,f5,2e,a9,b3,50,bc,64,95,b8,98,c9,b8,9b,51

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'lsass.exe'(796)
c:\windows\system32\relog_ap.dll

- - - - - - - > 'Explorer.exe'(4904)
c:\windows\system32\btmmhook.dll
.
Completion time: 2009-05-29 7:48
ComboFix-quarantined-files.txt 2009-05-29 12:48
ComboFix2.txt 2009-05-29 10:28

Pre-Run: 157,184,094,208 bytes free
Post-Run: 157,168,672,768 bytes free

253 --- E O F --- 2009-05-28 04:31

descriptionlaptop Internet going where I did not click - Page 2 EmptyRe: laptop Internet going where I did not click

more_horiz
Click Start > Run and copy/paste the following bolded text into the Run box and click OK:

ComboFix /u

laptop Internet going where I did not click - Page 2 CF_Cleanup

This will also reset your restore points.

How is the machine running now?

descriptionlaptop Internet going where I did not click - Page 2 EmptyRunning vey well=goes where send it now!!!!

more_horiz
The internet is faster. It goes where I click now. Will see if the time stays right, the Desktop picutue too and screensaver too. They were changing before. Sure is responding faster. Bow or Thanks Thank You! You guys at geekpolice ae number 1 in my book. I am so grateful.

descriptionlaptop Internet going where I did not click - Page 2 EmptyRe: laptop Internet going where I did not click

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum