Cat,
Ok - while it took some time to get thru these diagnostics (PC kept freezing up), I have all the logs you asked for and will include them below. Also I will need the files that the program put into quarantine. Do I just restore them (unquarantine) them?
Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org
Database version: v2012.07.14.08
Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Gayle :: GAYLE-PC [administrator]
Protection: Enabled
7/14/2012 8:48:26 PM
mbam-log-2012-07-14 (20-48-26).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 232007
Time elapsed: 6 minute(s), 25 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
********************************************************************************
************************************************************
ComboFix 12-07-14.01 - Gayle 07/14/2012 16:13:27.2.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2038.1290 [GMT -5:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Gayle\Favorites\2012 Flex Spending.xlsx
c:\users\Gayle\Favorites\Budget 2012.xlsx
c:\users\Gayle\Favorites\Flat Stanley Does Florida.docx
.
.
((((((((((((((((((((((((( Files Created from 2012-06-14 to 2012-07-14 )))))))))))))))))))))))))))))))
.
.
2012-07-14 21:20 . 2012-07-14 21:20 ——– d—–w- c:\users\IUSR_NMPR\AppData\Local\temp
2012-07-14 21:20 . 2012-07-14 21:20 ——– d—–w- c:\users\Default\AppData\Local\temp
2012-07-14 21:19 . 2012-07-14 21:19 56200 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3D4438A7-CE37-4CE4-A2AE-E46D10342FB2}\offreg.dll
2012-07-14 14:35 . 2012-07-14 14:35 ——– d—–w- c:\users\Gayle\AppData\Local\WinZip
2012-07-14 14:34 . 2012-07-14 14:35 ——– d—–w- c:\programdata\WinZip
2012-07-14 13:25 . 2012-07-14 13:25 ——– d—–w- c:\program files\Seagate
2012-07-14 02:25 . 2012-07-14 02:25 ——– d—–w- c:\programdata\PSC
2012-07-14 02:25 . 2012-07-14 02:25 ——– d—–w- c:\program files\Personal SmartCheck
2012-07-14 01:33 . 2012-07-14 01:33 ——– d—–w- c:\users\Gayle\AppData\Local\Zoom_Downloader
2012-07-14 01:33 . 2012-07-14 01:33 237 —-a-w- C:\user.js
2012-07-14 01:33 . 2012-07-14 01:33 ——– d—–w- c:\programdata\Babylon
2012-07-14 01:33 . 2012-07-14 01:33 ——– d—–w- c:\users\Gayle\AppData\Roaming\Babylon
2012-07-14 01:33 . 2012-07-14 01:33 ——– d—–w- c:\program files\Playbryte
2012-07-13 08:14 . 2012-06-18 08:14 6762896 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3D4438A7-CE37-4CE4-A2AE-E46D10342FB2}\mpengine.dll
2012-07-13 04:00 . 2012-07-13 04:00 2048 —-a-w- c:\windows\system32\msxml3r.dll
2012-07-13 04:00 . 2012-07-13 04:00 1390080 —-a-w- c:\windows\system32\msxml6.dll
2012-07-13 04:00 . 2012-07-13 04:00 1236992 —-a-w- c:\windows\system32\msxml3.dll
2012-07-13 04:00 . 2012-07-13 04:00 67440 —-a-w- c:\windows\system32\drivers\ksecdd.sys
2012-07-13 04:00 . 2012-07-13 04:00 369336 —-a-w- c:\windows\system32\drivers\cng.sys
2012-07-13 04:00 . 2012-07-13 04:00 225280 —-a-w- c:\windows\system32\schannel.dll
2012-07-13 04:00 . 2012-07-13 04:00 219136 —-a-w- c:\windows\system32\ncrypt.dll
2012-07-13 04:00 . 2012-07-13 04:00 134000 —-a-w- c:\windows\system32\drivers\ksecpkg.sys
2012-07-13 02:44 . 2012-06-12 02:40 2345984 —-a-w- c:\windows\system32\win32k.sys
2012-07-07 18:28 . 2012-07-07 18:28 ——– d—–w- c:\programdata\McAfee
2012-07-02 07:33 . 2012-07-02 07:33 514560 —-a-w- c:\windows\system32\qdvd.dll
2012-06-19 15:43 . 2012-06-02 22:19 53784 —-a-w- c:\windows\system32\wuauclt.exe
2012-06-19 15:43 . 2012-06-02 22:19 45080 —-a-w- c:\windows\system32\wups2.dll
2012-06-19 15:43 . 2012-06-02 22:19 1933848 —-a-w- c:\windows\system32\wuaueng.dll
2012-06-19 15:43 . 2012-06-02 22:12 2422272 —-a-w- c:\windows\system32\wucltux.dll
2012-06-19 15:43 . 2012-06-02 22:19 35864 —-a-w- c:\windows\system32\wups.dll
2012-06-19 15:43 . 2012-06-02 22:19 577048 —-a-w- c:\windows\system32\wuapi.dll
2012-06-19 15:43 . 2012-06-02 22:12 88576 —-a-w- c:\windows\system32\wudriver.dll
2012-06-19 15:43 . 2012-06-02 20:19 171904 —-a-w- c:\windows\system32\wuwebv.dll
2012-06-19 15:43 . 2012-06-02 20:12 33792 —-a-w- c:\windows\system32\wuapp.exe
2012-06-15 01:05 . 2012-06-15 01:05 ——– d—–w- c:\users\Gayle\AppData\Local\Macromedia
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-13 02:35 . 2012-04-01 16:53 426184 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-13 02:35 . 2011-05-28 01:40 70344 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-07 08:57 . 2012-07-07 08:57 9072 —-a-w- c:\windows\system32\drivers\30577
2012-05-31 17:25 . 2009-10-02 21:17 237072 ——w- c:\windows\system32\MpSigStub.exe
2012-05-12 20:37 . 2012-05-12 20:37 3968368 —-a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-12 20:37 . 2012-05-12 20:37 3913072 —-a-w- c:\windows\system32\ntoskrnl.exe
2012-05-12 20:33 . 2012-05-12 20:33 56176 —-a-w- c:\windows\system32\drivers\partmgr.sys
2012-05-12 20:33 . 2012-05-12 20:33 1291632 —-a-w- c:\windows\system32\drivers\tcpip.sys
2012-05-12 20:25 . 2012-05-12 20:25 1077248 —-a-w- c:\windows\system32\DWrite.dll
2012-05-08 23:35 . 2012-05-20 17:06 29528 —-a-w- c:\windows\system32\SmartDefragBootTime.exe
2012-05-01 04:44 . 2012-06-13 09:02 164352 —-a-w- c:\windows\system32\profsvc.dll
2012-04-28 03:17 . 2012-06-13 09:03 183808 —-a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-26 04:45 . 2012-06-13 09:02 58880 —-a-w- c:\windows\system32\rdpwsx.dll
2012-04-26 04:45 . 2012-06-13 09:02 129536 —-a-w- c:\windows\system32\rdpcorekmts.dll
2012-04-26 04:41 . 2012-06-13 09:02 8192 —-a-w- c:\windows\system32\rdrmemptylst.exe
2012-04-24 04:36 . 2012-06-13 09:02 140288 —-a-w- c:\windows\system32\cryptsvc.dll
2012-04-24 04:36 . 2012-06-13 09:02 1158656 —-a-w- c:\windows\system32\crypt32.dll
2012-04-24 04:36 . 2012-06-13 09:02 103936 —-a-w- c:\windows\system32\cryptnet.dll
2012-06-17 00:53 . 2011-05-01 14:34 85472 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 5"="c:\program files\IObit\Advanced SystemCare 5\ASCTray.exe" [2012-05-28 288128]
"Personal SmartCheck"="c:\program files\Personal SmartCheck\PSC.exe" [2008-10-07 1350656]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
"ConnectionCenter"="c:\program files\Citrix\ICA Client\concentr.exe" [2011-12-22 362432]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-27 30040]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2008-9-11 525664]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\UmxSbxExw.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0SmartDefragBootTime.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bomgar_Cleanup_ZD50052910479
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-01-02 16:07 843712 —-a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2012-03-27 12:41 37296 —-a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 5]
2012-05-28 20:56 288128 —-a-w- c:\program files\IObit\Advanced SystemCare 5\ASCTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCUTRAYICON]
2006-11-18 14:01 182744 —-a-w- c:\program files\Intel\IntelDH\CCU\CCU_TrayIcon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CHotkey]
2006-11-07 21:08 547840 —-a-w- c:\windows\zHotkey.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ConnectionCenter]
2011-12-22 17:36 362432 —-a-w- c:\program files\Citrix\ICA Client\concentr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]
2008-05-07 21:28 591696 ——w- c:\progra~1\EPSONS~1\EVENTM~1\EEventManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2010-11-20 21:29 144384 —-a-w- c:\windows\ehome\ehtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2009-02-27 00:36 30040 —-a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2009-09-24 00:30 173592 —-a-w- c:\windows\System32\hkcmd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
2006-09-29 18:39 151552 —-a-w- c:\program files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2009-09-24 00:30 141848 —-a-w- c:\windows\System32\igfxtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
2008-01-14 21:17 46368 —-a-w- c:\program files\ScanSoft\PaperPort\IndexSearch.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Iomega Home Storage Manager]
2009-10-27 20:06 152936 —-a-w- c:\program files\Iomega\Home Storage Manager\Iomega Discovery.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LELA]
2009-05-20 00:41 221184 —-a-w- c:\program files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ModPS2]
2006-11-07 21:34 53248 —-a-w- c:\windows\ModPS2Key.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nmctxth]
2008-12-12 23:06 642856 —-a-w- c:\program files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NMSSupport]
2006-09-26 17:56 423424 —-a-w- c:\program files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
2008-01-14 21:19 29984 —-a-w- c:\program files\ScanSoft\PaperPort\pptd40nt.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
2009-09-24 00:30 150552 —-a-w- c:\windows\System32\igfxpers.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PPort11reminder]
2007-08-31 15:01 328992 —-a-w- c:\program files\ScanSoft\PaperPort\Ereg\Ereg.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShowWnd]
2005-01-27 16:13 36864 —-a-w- c:\windows\ShowWnd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SigmatelSysTrayApp]
2006-11-02 18:38 303104 —-a-w- c:\windows\sttray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
2006-10-25 15:03 210472 —-a-w- c:\program files\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe
.
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R2 HIPS Firewall Helper;HIPS Firewall Helper; [x]
R2 LinksysUpdater;Linksys Updater;c:\program files\Linksys\Linksys Updater\bin\LinksysUpdater.exe [x]
R2 UmxEngine;TM Engine;c:\program files\CA\SharedComponents\TMEngine\UmxEngine.exe [x]
R2 WinExtManager;WinSock Extention Manager;c:\windows\System32\mdmcls32.exe [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [x]
S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [x]
S1 KmxAgent;KmxAgent;c:\windows\system32\DRIVERS\kmxagent.sys [x]
S1 KmxFile;KmxFile;c:\windows\system32\DRIVERS\KmxFile.sys [x]
S1 KmxFilter;HIPS Core Filter Driver;c:\windows\system32\DRIVERS\KmxFilter.sys [x]
S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files\IObit\Advanced SystemCare 5\ASCService.exe [x]
S2 DQLWinService;DQLWinService;c:\program files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe [x]
S2 IntuitUpdateServiceV4;Intuit Update Service v4;c:\program files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe [x]
S2 KmxCF;KmxCF;c:\windows\system32\DRIVERS\KmxCF.sys [x]
S2 KmxSbx;KmxSbx;c:\windows\system32\DRIVERS\KmxSbx.sys [x]
S2 nmsgopro;GoProto Protocol Driver for NMS;c:\windows\system32\DRIVERS\nmsgopro.sys [x]
S2 nmsunidr;UniDriver for NMS;c:\windows\system32\DRIVERS\nmsunidr.sys [x]
S2 SmartCheckSvc;SmartCheck service;c:\program files\Personal SmartCheck\SmCh_svc.exe [x]
S3 KmxCfg;KmxCfg;c:\windows\system32\DRIVERS\kmxcfg.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 02:35]
.
2012-07-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-26 13:56]
.
2012-07-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-26 13:56]
.
2012-07-14 c:\windows\Tasks\RegistryBooster.job
- c:\program files\Uniblue\RegistryBooster\rbmonitor.exe [2012-05-18 18:56]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://search.babylon.com/?affID=113959&babsrc=HP_ss&mntrId=6441f0fc0000000000000019d15d06fb
mStart Page = hxxp://www.gateway.com/g/startpage.html?Ch=Retail&Br=GTW&Loc=ENG_US&Sys=DTP&M=GT5404
uInternet Settings,ProxyOverride =
IE: E&xport to Microsoft Excel - c:\progra~1\MIF5BA~1\Office12\EXCEL.EXE/3000
Trusted Zone: intuit.com\ttlc
Trusted Zone: turbotax.com
TCP: DhcpNameServer = 192.168.1.1 75.75.75.75 75.75.76.76
TCP: Interfaces\{12BD656B-1335-4EEB-90D8-5995C2A813FD}: DhcpNameServer = 192.168.1.1 75.75.75.75 75.75.76.76
TCP: Interfaces\{62035DBA-9E53-4614-A704-374A9D3B8509}: DhcpNameServer = 192.168.1.1 [removed] [removed]
FF - ProfilePath - c:\users\Gayle\AppData\Roaming\Mozilla\Firefox\Profiles\2wpujy22.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=642886&p=
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: browser.xul.error_pages.enabled - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 3000000
FF - user.js: content.maxtextrun - 8191
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: network.http.max-connections - 32
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-proxy - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
FF - user.js: yahoo.homepage.dontask - true
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - 6441f0fc0000000000000019d15d06fb
FF - user.js: extensions.BabylonToolbar_i.hardId - 6441f0fc0000000000000019d15d06fb
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15535
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1720:33
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
FF - user.js: extensions.autoDisableScopes - 14);//iBryte.tlbrId, base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
- - - - ORPHANS REMOVED - - - -
.
Notify-PFW - (no file)
MSConfigStartUp-cctray - c:\program files\CA\CA Internet Security Suite\casc.exe
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,21,56,36,17,81,50,a1,4a,af,44,d2,\
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,21,56,36,17,81,50,a1,4a,af,44,d2,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-07-14 16:23:18
ComboFix-quarantined-files.txt 2012-07-14 21:23
ComboFix2.txt 2011-05-04 00:21
.
Pre-Run: 194,269,884,416 bytes free
Post-Run: 194,784,514,048 bytes free
.
- - End Of File - - 77DFB36584774FAE8A68D0B7D0B0C88C
