Elestin
Topic Starter
Heya guys, im having some problems with Win32:TratBHO [trj], i ran a ComboFix, and it seems to have stopped now, i'd just like further assistance, if needed.
here is my log:
ComboFix 08-02.05.3 - Elestin 2008-02-06 22:37:22.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1253.1.1032.18.1128 [GMT 2:00]
Running from: C:\Users\[removed]\Desktop\ComboFix.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Acer\Empowering Technology\eRecovery\Autorun\SW1\Tuner\Liteon\Resources\_desktop.ini
C:\DRV\Tuner\Yuan\Resources\_desktop.ini
C:\Windows\system32\x64
C:\Windows\system32\x64\csnp2uvc.dll
C:\Windows\system32\x64\rsnpvc64.dll
C:\Windows\system32\x64\sncduvc.sys
C:\Windows\system32\x64\snp2uvc.sys
C:\Windows\system32\x64\vsnpvc64.dll
.
((((((((((((((((((((((((( Files Created from 2008-01-06 to 2008-02-06 )))))))))))))))))))))))))))))))
.
2008-02-06 15:14 . 2008-02-06 15:45 d——– C:\Program Files\Puzzle Quest Challenge of the Warlords DeLEGiON
2008-02-06 15:14 . 2008-02-06 15:14 d——– C:\Program Files\OpenAL
2008-02-06 15:14 . 2008-02-06 15:14 409,600 –a—— C:\Windows\System32\wrap_oal.dll
2008-02-06 15:14 . 2008-02-06 15:14 114,688 –a—— C:\Windows\System32\OpenAL32.dll
2008-02-06 13:00 . 2008-02-06 13:00 0 ——— C:\Windows\SPInstall.etl
2008-02-05 18:20 . 2008-02-05 18:21 d——– C:\Program Files\Luxor 3
2008-02-05 18:06 . 2008-02-05 18:06 d——– C:\Program Files\Luxor III
2008-02-05 13:51 . 2008-02-05 13:51 d——– C:\Program Files\PopCap Games
2008-02-05 13:51 . 2008-02-05 13:53 10 –a—— C:\Windows\popcinfo.dat
2008-02-04 17:23 . 2008-02-04 17:23 d——– C:\Program Files\Belarc
2008-02-04 17:23 . 2005-04-07 16:18 3,840 –a—— C:\Windows\System32\drivers\BANTExt.sys
2008-02-04 12:08 . 2008-02-04 12:08 d——– C:\Program Files\Mayoko
2008-02-03 14:16 . 2008-02-03 14:16 d——– C:\Users\Elestin\AppData\Roaming\fretsonfire
2008-02-03 07:22 . 2008-02-05 18:26 d——– C:\Users\All Users\MumboJumbo
2008-02-03 07:22 . 2008-02-05 18:26 d——– C:\ProgramData\MumboJumbo
2008-02-03 07:21 . 2008-02-03 07:27 d-a—— C:\Users\All Users\TEMP
2008-02-03 07:21 . 2008-02-03 07:27 d-a—— C:\ProgramData\TEMP
2008-02-03 04:51 . 2007-09-24 23:31 69,632 –a—— C:\Windows\System32\javacpl.cpl
2008-02-03 04:50 . 2008-02-03 04:51 d——– C:\Program Files\Java
2008-02-03 04:50 . 2008-02-03 04:50 d——– C:\Program Files\Common Files\Java
2008-02-03 02:59 . 2008-02-03 02:59 d——– C:\Program Files\Alwil Software
2008-02-03 02:59 . 2007-12-04 15:04 837,496 –a—— C:\Windows\System32\aswBoot.exe
2008-02-03 02:59 . 2004-01-09 11:13 380,928 –a—— C:\Windows\System32\actskin4.ocx
2008-02-03 02:59 . 2007-12-04 14:54 95,608 –a—— C:\Windows\System32\AvastSS.scr
2008-02-03 02:59 . 2007-12-04 16:52 45,648 –a—— C:\Windows\System32\drivers\aswMonFlt.sys
2008-02-03 02:59 . 2007-12-04 16:51 42,912 –a—— C:\Windows\System32\drivers\aswTdi.sys
2008-02-03 02:59 . 2007-12-04 16:53 23,152 –a—— C:\Windows\System32\drivers\aswRdr.sys
2008-02-03 02:49 . 2008-02-03 02:49 d——– C:\Users\Elestin\AppData\Roaming\FlashGet
2008-02-03 02:49 . 2008-02-03 02:49 d——– C:\Program Files\FlashGet
2008-02-03 01:34 . 2008-02-03 01:34 d——– C:\Users\Elestin\AppData\Roaming\PeerNetworking
2008-02-03 00:26 . 2008-02-03 00:26 d——– C:\Users\All Users\Messenger Plus!
2008-02-03 00:26 . 2008-02-03 00:26 d——– C:\ProgramData\Messenger Plus!
2008-02-03 00:19 . 2008-02-03 00:19 d——– C:\Program Files\Messenger Plus! Live
2008-02-02 19:07 . 2008-02-02 19:07 802,816 –a—— C:\Windows\System32\drivers\tcpip.sys
2008-02-02 19:07 . 2008-02-02 19:07 216,760 –a—— C:\Windows\System32\drivers\netio.sys
2008-02-02 19:07 . 2008-02-02 19:07 167,424 –a—— C:\Windows\System32\tcpipcfg.dll
2008-02-02 19:07 . 2008-02-02 19:07 24,064 –a—— C:\Windows\System32\netcfg.exe
2008-02-02 19:07 . 2008-02-02 19:07 22,016 –a—— C:\Windows\System32\netiougc.exe
2008-02-02 19:06 . 2008-02-02 19:06 d——– C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-02-02 19:06 . 2008-02-02 19:06 8,147,968 –a—— C:\Windows\System32\wmploc.DLL
2008-02-02 19:06 . 2008-02-02 19:06 1,191,936 –a—— C:\Windows\System32\msxml3.dll
2008-02-02 19:06 . 2008-02-02 19:06 7,680 –a—— C:\Windows\System32\spwmp.dll
2008-02-02 19:06 . 2008-02-02 19:06 4,096 –a—— C:\Windows\System32\msdxm.ocx
2008-02-02 19:06 . 2008-02-02 19:06 4,096 –a—— C:\Windows\System32\dxmasf.dll
2008-02-02 19:06 . 2008-02-02 19:06 2,048 –a—— C:\Windows\System32\msxml3r.dll
2008-02-02 19:05 . 2008-02-02 19:05 1,335,296 –a—— C:\Windows\System32\msxml6.dll
2008-02-02 19:05 . 2008-02-02 19:05 1,327,104 –a—— C:\Windows\System32\quartz.dll
2008-02-02 19:05 . 2008-02-02 19:05 737,792 –a—— C:\Windows\System32\inetcomm.dll
2008-02-02 19:05 . 2008-02-02 19:05 223,232 –a—— C:\Windows\System32\WMASF.DLL
2008-02-02 19:05 . 2008-02-02 19:05 84,480 –a—— C:\Windows\System32\INETRES.dll
2008-02-02 19:05 . 2008-02-02 19:05 11,776 –a—— C:\Windows\System32\sbunattend.exe
2008-02-02 19:05 . 2008-02-02 19:05 9,728 –a—— C:\Windows\System32\LAPRXY.DLL
2008-02-02 19:05 . 2008-02-02 19:05 2,048 –a—— C:\Windows\System32\msxml6r.dll
2008-02-02 19:05 . 2008-02-02 19:05 2,048 –a—— C:\Windows\System32\asferror.dll
2008-02-02 19:03 . 2008-02-02 19:03 d——– C:\Program Files\MSXML 4.0
2008-02-02 19:03 . 2008-02-02 19:03 3,504,824 –a—— C:\Windows\System32\ntkrnlpa.exe
2008-02-02 19:03 . 2008-02-02 19:03 3,470,520 –a—— C:\Windows\System32\ntoskrnl.exe
2008-02-02 19:03 . 2008-02-02 19:03 750,080 –a—— C:\Windows\System32\qmgr.dll
2008-02-02 19:03 . 2008-02-02 19:03 2,048 –a—— C:\Windows\System32\tzres.dll
2008-02-02 18:37 . 2008-02-03 14:36 d——– C:\Users\Elestin\AppData\Roaming\Winamp
2008-02-02 18:37 . 2008-02-02 18:38 d——– C:\Program Files\Winamp
2008-02-02 18:37 . 2007-03-08 01:51 129,784 ——— C:\Windows\System32\pxafs.dll
2008-02-02 18:33 . 2008-02-02 18:33 d——– C:\Users\Elestin\AppData\Roaming\Media Player Classic
2008-02-02 18:32 . 2008-02-02 18:32 d——– C:\Program Files\K-Lite Codec Pack
2008-02-02 15:56 . 2008-02-02 15:56 d——– C:\Users\Elestin\Bluetooth Software
2008-02-02 15:53 . 2008-02-02 15:53 1,712,984 –a—— C:\Windows\System32\wuaueng.dll
2008-02-02 15:53 . 2008-02-02 15:53 1,524,224 –a—— C:\Windows\System32\wucltux.dll
2008-02-02 15:53 . 2008-02-02 15:53 163,000 –a—— C:\Windows\System32\wuwebv.dll
2008-02-02 15:53 . 2008-02-02 15:53 53,080 –a—— C:\Windows\System32\wuauclt.exe
2008-02-02 15:53 . 2008-02-02 15:53 43,352 –a—— C:\Windows\System32\wups2.dll
2008-02-02 15:53 . 2008-02-02 15:53 31,232 –a—— C:\Windows\System32\wuapp.exe
2008-02-02 15:42 . 2008-02-02 15:49 d——– C:\Program Files\Windows Live
2008-02-02 15:42 . 2008-02-02 15:49 d–hsc— C:\Program Files\Common Files\WindowsLiveInstaller
2008-02-02 15:41 . 2008-02-02 15:41 d——– C:\Users\All Users\WLInstaller
2008-02-02 15:41 . 2008-02-02 15:41 d——– C:\ProgramData\WLInstaller
2008-02-02 15:39 . 2008-02-02 15:39 0 –a—— C:\Windows\nsreg.dat
2008-02-02 14:57 . 2008-02-02 14:57 27,525 –a—— C:\Users\Elestin\AppData\Roaming\nvModes.dat
2008-02-02 13:01 . 2008-02-03 08:40 d——– C:\Users\Elestin\AppData\Roaming\CyberLink
2008-02-02 13:00 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Searches
2008-02-02 13:00 . 2008-02-02 16:06 dr——- C:\Users\Elestin\Contacts
2008-02-02 12:59 . 2008-02-03 08:41 dr——- C:\Users\Elestin\Videos
2008-02-02 12:59 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Saved Games
2008-02-02 12:59 . 2008-02-06 12:53 dr——- C:\Users\Elestin\Pictures
2008-02-02 12:59 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Music
2008-02-02 12:59 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Links
2008-02-02 12:59 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Downloads
2008-02-02 12:59 . 2008-02-06 15:45 dr——- C:\Users\Elestin\Documents
2008-02-02 12:59 . 2006-11-02 14:37 d——– C:\Users\Elestin\AppData\Roaming\Media Center Programs
2008-02-02 12:59 . 2008-02-02 12:59 d–h—– C:\Users\Elestin\AppData
2008-02-02 12:59 . 2008-02-03 00:33 d——– C:\Program Files\Yahoo!
2008-02-02 12:56 . 2008-02-02 12:56 dr——- C:\Windows\System32\config\systemprofile\Contacts
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-02 22:52 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-02-02 22:42 ——— d—–w C:\ProgramData\Microsoft Help
2008-02-02 22:42 ——— d—–w C:\Program Files\Microsoft Works
2008-02-02 22:41 ——— d—–w C:\Program Files\NewTech Infosystems
2008-02-02 22:40 ——— d—–w C:\ProgramData\Symantec
2008-02-02 22:40 ——— d—–w C:\Program Files\Common Files\Symantec Shared
2008-02-02 22:33 ——— d—–w C:\Program Files\Acer GameZone
2008-02-02 19:56 ——— d—–w C:\Program Files\Windows Sidebar
2008-02-02 17:04 84,992 —-a-w C:\Windows\system32\drivers\srvnet.sys
2008-02-02 17:04 824,832 —-a-w C:\Windows\System32\wininet.dll
2008-02-02 17:04 788,992 —-a-w C:\Windows\System32\rpcrt4.dll
2008-02-02 17:04 58,368 —-a-w C:\Windows\system32\drivers\mrxsmb20.sys
2008-02-02 17:04 56,320 —-a-w C:\Windows\System32\iesetup.dll
2008-02-02 17:04 52,736 —-a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-02 17:04 26,624 —-a-w C:\Windows\System32\ieUnatt.exe
2008-02-02 17:04 130,048 —-a-w C:\Windows\system32\drivers\srv2.sys
2008-02-02 17:04 101,888 —-a-w C:\Windows\system32\drivers\mrxsmb.sys
2008-02-02 11:03 ——— d—–w C:\ProgramData\CyberLink
2008-02-02 10:56 ——— d-sh–w C:\ProgramData\Επιφάνεια εργασίας
2008-01-18 19:19 607,744 —-a-w C:\Windows\System32\x264vfw.dll
2007-12-24 11:49 7,680 —-a-w C:\Windows\System32\ff_vfw.dll
2007-12-04 00:33 682,496 —-a-w C:\Windows\System32\divx.dll
2007-11-29 21:30 3,596,288 —-a-w C:\Windows\System32\qt-dx331.dll
2007-11-29 21:28 81,920 —-a-w C:\Windows\System32\dpl100.dll
2006-11-02 12:50 174 –sha-w C:\Program Files\desktop.ini
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-02-02 19:05 1232896]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [ ]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [ ]
"Persistence"="C:\Windows\system32\igfxpers.exe" [ ]
"ALaunch"="C:\Acer\ALaunch\AlaunchClient.exe" [ ]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 05:06 4669440 C:\Windows\RtHDVCpl.exe]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-25 15:33 457216]
"Acer Tour"="" []
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-07-25 17:39 8470528]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-07-25 17:39 81920]
"PLFSetL"="C:\Windows\PLFSetL.exe" [2007-07-05 11:35 94208]
"LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2007-06-27 11:15 752136]
"MSPService"="C:\Program Files\Acer Arcade Deluxe\SportsCap\Kernel\MagicSports\MSPMirage.exe" [2007-02-13 18:47 102400]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2007-06-06 10:06 159744]
"eRecoveryService"="" []
"SetPanel"="C:\Acer\APanel\APanel.cmd" [ ]
"eAudio"="C:\Acer\Empowering Technology\eAudio\eAudio.exe" [2007-06-11 14:54 1286144]
"MSConfig"="C:\Windows\system32\msconfig.exe" [2006-11-02 11:45 222208]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-03-29 12:11:50 719664]
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe [2007-09-05 20:17:27 535336]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=eNetHook.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer Tour Reminder]
–a—— 2007-05-22 14:49 151552 C:\Acer\AcerTour\Reminder.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
–a—— 2007-03-08 03:38 40048 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
–a—— 2007-03-21 12:00 174872 C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IS CfgWiz]
C:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
–a—— 2008-02-03 00:26 5724184 C:\Program Files\Windows Live\Messenger\MsnMsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvSvc]
–a—— 2007-07-25 17:39 86016 C:\Windows\system32\nvsvc.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\osCheck]
C:\Program Files\Norton Internet Security\osCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie]
——— 2007-05-24 12:38 206952 C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TVEService]
——— 2007-07-27 14:30 151552 C:\Program Files\Acer Arcade Deluxe\TV Joy\TVEService.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WarReg_PopUp]
–a—— 2006-11-05 21:48 57344 C:\Acer\WR_PopUp\WarReg_PopUp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
–a—— 2008-01-16 00:54 37376 C:\Program Files\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
–a—— 2007-09-05 19:47 1006264 C:\Program Files\Windows Defender\MSASCui.exe
R0 PSDFilter;PSDFilter;C:\Windows\system32\DRIVERS\psdfilter.sys [2007-04-25 15:34]
R0 PSDNServ;PSDNSERVER;C:\Windows\system32\drivers\PSDNServ.sys [2007-04-25 15:34]
R0 psdvdisk;psdvdisk;C:\Windows\system32\drivers\psdvdisk.sys [2007-04-25 15:34]
R1 DritekPortIO;Dritek General Port I/O;C:\PROGRA~1\LAUNCH~1\DPortIO.sys [2006-11-02 15:27]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl [2006-11-02 15:51]
R2 ALaunchService;ALaunch Service;C:\Acer\ALaunch\ALaunchSvc.exe [2007-01-26 13:24]
R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 16:52]
R2 eDataSecurity Service;eDSService.exe;"C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe" [2007-04-25 15:34]
R2 eNet Service;eNet Service;C:\Acer\Empowering Technology\eNet\eNet Service.exe [2007-05-22 14:00]
R2 eSettingsService;eSettings Service;C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [2007-05-10 13:05]
R2 int15;int15;C:\Acer\Empowering Technology\eRecovery\int15.sys [2006-12-07 17:12]
R2 MobilityService;MobilityService;C:\Acer\Mobility Center\MobilityService.exe [2006-11-24 11:57]
R2 TVECapSvc;TVEnhance Background Capture Service (TBCS);"C:\Program Files\Acer Arcade Deluxe\TV Joy\Kernel\TV\TVECapSvc.exe" [2007-07-27 14:30]
R2 TVESched;TVEnhance Task Scheduler (TTS));"C:\Program Files\Acer Arcade Deluxe\TV Joy\Kernel\TV\TVESched.exe" [2007-07-27 14:30]
R2 WMIService;ePower Service;C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [2007-09-14 14:32]
R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2007-01-30 07:23]
R3 A310;AVerMedia A310 DVB-T;C:\Windows\system32\DRIVERS\AVerA310USB.sys [2007-07-10 04:16]
R3 BDASwCap;AVerMedia A310 BDA DVBT Capture Device;C:\Windows\system32\drivers\AVerA310Cap.sys [2007-07-10 04:16]
R3 enecir;ENE CIR Receiver;C:\Windows\system32\DRIVERS\enecir.sys [2007-03-07 10:26]
R3 NETw4v32;Πρόγραμμα οδήγησης προσαρμογέα Intel® Wireless WiFi Link για Windows Vista 32 Bit;C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-08-08 02:26]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC);C:\Windows\system32\DRIVERS\snp2uvc.sys [2007-08-02 14:17]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-06-05 10:57]
S3 btwaudio;Bluetooth Audio Device Service;C:\Windows\system32\drivers\btwaudio.sys [2007-03-29 21:46]
S3 btwavdt;Bluetooth AVDT Service;C:\Windows\system32\drivers\btwavdt.sys [2007-02-27 08:20]
S3 btwrchid;btwrchid;C:\Windows\system32\DRIVERS\btwrchid.sys [2007-02-27 08:20]
S3 NETw3v32;Πρόγραμμα οδήγησης προσαρμογέα Intel® PRO/Wireless 3945ABG για Windows Vista 32 Bit;C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 09:30]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-06 22:39:54
Windows 6.0.6000 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
**************************************************************************
.
Completion time: 2008-02-06 22:41:36
ComboFix-quarantined-files.txt 2008-02-06 20:40:43
.
2008-02-06 04:22:47 — E O F —
here is my log:
ComboFix 08-02.05.3 - Elestin 2008-02-06 22:37:22.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1253.1.1032.18.1128 [GMT 2:00]
Running from: C:\Users\[removed]\Desktop\ComboFix.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Acer\Empowering Technology\eRecovery\Autorun\SW1\Tuner\Liteon\Resources\_desktop.ini
C:\DRV\Tuner\Yuan\Resources\_desktop.ini
C:\Windows\system32\x64
C:\Windows\system32\x64\csnp2uvc.dll
C:\Windows\system32\x64\rsnpvc64.dll
C:\Windows\system32\x64\sncduvc.sys
C:\Windows\system32\x64\snp2uvc.sys
C:\Windows\system32\x64\vsnpvc64.dll
.
((((((((((((((((((((((((( Files Created from 2008-01-06 to 2008-02-06 )))))))))))))))))))))))))))))))
.
2008-02-06 15:14 . 2008-02-06 15:45 d——– C:\Program Files\Puzzle Quest Challenge of the Warlords DeLEGiON
2008-02-06 15:14 . 2008-02-06 15:14 d——– C:\Program Files\OpenAL
2008-02-06 15:14 . 2008-02-06 15:14 409,600 –a—— C:\Windows\System32\wrap_oal.dll
2008-02-06 15:14 . 2008-02-06 15:14 114,688 –a—— C:\Windows\System32\OpenAL32.dll
2008-02-06 13:00 . 2008-02-06 13:00 0 ——— C:\Windows\SPInstall.etl
2008-02-05 18:20 . 2008-02-05 18:21 d——– C:\Program Files\Luxor 3
2008-02-05 18:06 . 2008-02-05 18:06 d——– C:\Program Files\Luxor III
2008-02-05 13:51 . 2008-02-05 13:51 d——– C:\Program Files\PopCap Games
2008-02-05 13:51 . 2008-02-05 13:53 10 –a—— C:\Windows\popcinfo.dat
2008-02-04 17:23 . 2008-02-04 17:23 d——– C:\Program Files\Belarc
2008-02-04 17:23 . 2005-04-07 16:18 3,840 –a—— C:\Windows\System32\drivers\BANTExt.sys
2008-02-04 12:08 . 2008-02-04 12:08 d——– C:\Program Files\Mayoko
2008-02-03 14:16 . 2008-02-03 14:16 d——– C:\Users\Elestin\AppData\Roaming\fretsonfire
2008-02-03 07:22 . 2008-02-05 18:26 d——– C:\Users\All Users\MumboJumbo
2008-02-03 07:22 . 2008-02-05 18:26 d——– C:\ProgramData\MumboJumbo
2008-02-03 07:21 . 2008-02-03 07:27 d-a—— C:\Users\All Users\TEMP
2008-02-03 07:21 . 2008-02-03 07:27 d-a—— C:\ProgramData\TEMP
2008-02-03 04:51 . 2007-09-24 23:31 69,632 –a—— C:\Windows\System32\javacpl.cpl
2008-02-03 04:50 . 2008-02-03 04:51 d——– C:\Program Files\Java
2008-02-03 04:50 . 2008-02-03 04:50 d——– C:\Program Files\Common Files\Java
2008-02-03 02:59 . 2008-02-03 02:59 d——– C:\Program Files\Alwil Software
2008-02-03 02:59 . 2007-12-04 15:04 837,496 –a—— C:\Windows\System32\aswBoot.exe
2008-02-03 02:59 . 2004-01-09 11:13 380,928 –a—— C:\Windows\System32\actskin4.ocx
2008-02-03 02:59 . 2007-12-04 14:54 95,608 –a—— C:\Windows\System32\AvastSS.scr
2008-02-03 02:59 . 2007-12-04 16:52 45,648 –a—— C:\Windows\System32\drivers\aswMonFlt.sys
2008-02-03 02:59 . 2007-12-04 16:51 42,912 –a—— C:\Windows\System32\drivers\aswTdi.sys
2008-02-03 02:59 . 2007-12-04 16:53 23,152 –a—— C:\Windows\System32\drivers\aswRdr.sys
2008-02-03 02:49 . 2008-02-03 02:49 d——– C:\Users\Elestin\AppData\Roaming\FlashGet
2008-02-03 02:49 . 2008-02-03 02:49 d——– C:\Program Files\FlashGet
2008-02-03 01:34 . 2008-02-03 01:34 d——– C:\Users\Elestin\AppData\Roaming\PeerNetworking
2008-02-03 00:26 . 2008-02-03 00:26 d——– C:\Users\All Users\Messenger Plus!
2008-02-03 00:26 . 2008-02-03 00:26 d——– C:\ProgramData\Messenger Plus!
2008-02-03 00:19 . 2008-02-03 00:19 d——– C:\Program Files\Messenger Plus! Live
2008-02-02 19:07 . 2008-02-02 19:07 802,816 –a—— C:\Windows\System32\drivers\tcpip.sys
2008-02-02 19:07 . 2008-02-02 19:07 216,760 –a—— C:\Windows\System32\drivers\netio.sys
2008-02-02 19:07 . 2008-02-02 19:07 167,424 –a—— C:\Windows\System32\tcpipcfg.dll
2008-02-02 19:07 . 2008-02-02 19:07 24,064 –a—— C:\Windows\System32\netcfg.exe
2008-02-02 19:07 . 2008-02-02 19:07 22,016 –a—— C:\Windows\System32\netiougc.exe
2008-02-02 19:06 . 2008-02-02 19:06 d——– C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-02-02 19:06 . 2008-02-02 19:06 8,147,968 –a—— C:\Windows\System32\wmploc.DLL
2008-02-02 19:06 . 2008-02-02 19:06 1,191,936 –a—— C:\Windows\System32\msxml3.dll
2008-02-02 19:06 . 2008-02-02 19:06 7,680 –a—— C:\Windows\System32\spwmp.dll
2008-02-02 19:06 . 2008-02-02 19:06 4,096 –a—— C:\Windows\System32\msdxm.ocx
2008-02-02 19:06 . 2008-02-02 19:06 4,096 –a—— C:\Windows\System32\dxmasf.dll
2008-02-02 19:06 . 2008-02-02 19:06 2,048 –a—— C:\Windows\System32\msxml3r.dll
2008-02-02 19:05 . 2008-02-02 19:05 1,335,296 –a—— C:\Windows\System32\msxml6.dll
2008-02-02 19:05 . 2008-02-02 19:05 1,327,104 –a—— C:\Windows\System32\quartz.dll
2008-02-02 19:05 . 2008-02-02 19:05 737,792 –a—— C:\Windows\System32\inetcomm.dll
2008-02-02 19:05 . 2008-02-02 19:05 223,232 –a—— C:\Windows\System32\WMASF.DLL
2008-02-02 19:05 . 2008-02-02 19:05 84,480 –a—— C:\Windows\System32\INETRES.dll
2008-02-02 19:05 . 2008-02-02 19:05 11,776 –a—— C:\Windows\System32\sbunattend.exe
2008-02-02 19:05 . 2008-02-02 19:05 9,728 –a—— C:\Windows\System32\LAPRXY.DLL
2008-02-02 19:05 . 2008-02-02 19:05 2,048 –a—— C:\Windows\System32\msxml6r.dll
2008-02-02 19:05 . 2008-02-02 19:05 2,048 –a—— C:\Windows\System32\asferror.dll
2008-02-02 19:03 . 2008-02-02 19:03 d——– C:\Program Files\MSXML 4.0
2008-02-02 19:03 . 2008-02-02 19:03 3,504,824 –a—— C:\Windows\System32\ntkrnlpa.exe
2008-02-02 19:03 . 2008-02-02 19:03 3,470,520 –a—— C:\Windows\System32\ntoskrnl.exe
2008-02-02 19:03 . 2008-02-02 19:03 750,080 –a—— C:\Windows\System32\qmgr.dll
2008-02-02 19:03 . 2008-02-02 19:03 2,048 –a—— C:\Windows\System32\tzres.dll
2008-02-02 18:37 . 2008-02-03 14:36 d——– C:\Users\Elestin\AppData\Roaming\Winamp
2008-02-02 18:37 . 2008-02-02 18:38 d——– C:\Program Files\Winamp
2008-02-02 18:37 . 2007-03-08 01:51 129,784 ——— C:\Windows\System32\pxafs.dll
2008-02-02 18:33 . 2008-02-02 18:33 d——– C:\Users\Elestin\AppData\Roaming\Media Player Classic
2008-02-02 18:32 . 2008-02-02 18:32 d——– C:\Program Files\K-Lite Codec Pack
2008-02-02 15:56 . 2008-02-02 15:56 d——– C:\Users\Elestin\Bluetooth Software
2008-02-02 15:53 . 2008-02-02 15:53 1,712,984 –a—— C:\Windows\System32\wuaueng.dll
2008-02-02 15:53 . 2008-02-02 15:53 1,524,224 –a—— C:\Windows\System32\wucltux.dll
2008-02-02 15:53 . 2008-02-02 15:53 163,000 –a—— C:\Windows\System32\wuwebv.dll
2008-02-02 15:53 . 2008-02-02 15:53 53,080 –a—— C:\Windows\System32\wuauclt.exe
2008-02-02 15:53 . 2008-02-02 15:53 43,352 –a—— C:\Windows\System32\wups2.dll
2008-02-02 15:53 . 2008-02-02 15:53 31,232 –a—— C:\Windows\System32\wuapp.exe
2008-02-02 15:42 . 2008-02-02 15:49 d——– C:\Program Files\Windows Live
2008-02-02 15:42 . 2008-02-02 15:49 d–hsc— C:\Program Files\Common Files\WindowsLiveInstaller
2008-02-02 15:41 . 2008-02-02 15:41 d——– C:\Users\All Users\WLInstaller
2008-02-02 15:41 . 2008-02-02 15:41 d——– C:\ProgramData\WLInstaller
2008-02-02 15:39 . 2008-02-02 15:39 0 –a—— C:\Windows\nsreg.dat
2008-02-02 14:57 . 2008-02-02 14:57 27,525 –a—— C:\Users\Elestin\AppData\Roaming\nvModes.dat
2008-02-02 13:01 . 2008-02-03 08:40 d——– C:\Users\Elestin\AppData\Roaming\CyberLink
2008-02-02 13:00 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Searches
2008-02-02 13:00 . 2008-02-02 16:06 dr——- C:\Users\Elestin\Contacts
2008-02-02 12:59 . 2008-02-03 08:41 dr——- C:\Users\Elestin\Videos
2008-02-02 12:59 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Saved Games
2008-02-02 12:59 . 2008-02-06 12:53 dr——- C:\Users\Elestin\Pictures
2008-02-02 12:59 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Music
2008-02-02 12:59 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Links
2008-02-02 12:59 . 2008-02-02 13:00 dr——- C:\Users\Elestin\Downloads
2008-02-02 12:59 . 2008-02-06 15:45 dr——- C:\Users\Elestin\Documents
2008-02-02 12:59 . 2006-11-02 14:37 d——– C:\Users\Elestin\AppData\Roaming\Media Center Programs
2008-02-02 12:59 . 2008-02-02 12:59 d–h—– C:\Users\Elestin\AppData
2008-02-02 12:59 . 2008-02-03 00:33 d——– C:\Program Files\Yahoo!
2008-02-02 12:56 . 2008-02-02 12:56 dr——- C:\Windows\System32\config\systemprofile\Contacts
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-02 22:52 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-02-02 22:42 ——— d—–w C:\ProgramData\Microsoft Help
2008-02-02 22:42 ——— d—–w C:\Program Files\Microsoft Works
2008-02-02 22:41 ——— d—–w C:\Program Files\NewTech Infosystems
2008-02-02 22:40 ——— d—–w C:\ProgramData\Symantec
2008-02-02 22:40 ——— d—–w C:\Program Files\Common Files\Symantec Shared
2008-02-02 22:33 ——— d—–w C:\Program Files\Acer GameZone
2008-02-02 19:56 ——— d—–w C:\Program Files\Windows Sidebar
2008-02-02 17:04 84,992 —-a-w C:\Windows\system32\drivers\srvnet.sys
2008-02-02 17:04 824,832 —-a-w C:\Windows\System32\wininet.dll
2008-02-02 17:04 788,992 —-a-w C:\Windows\System32\rpcrt4.dll
2008-02-02 17:04 58,368 —-a-w C:\Windows\system32\drivers\mrxsmb20.sys
2008-02-02 17:04 56,320 —-a-w C:\Windows\System32\iesetup.dll
2008-02-02 17:04 52,736 —-a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-02 17:04 26,624 —-a-w C:\Windows\System32\ieUnatt.exe
2008-02-02 17:04 130,048 —-a-w C:\Windows\system32\drivers\srv2.sys
2008-02-02 17:04 101,888 —-a-w C:\Windows\system32\drivers\mrxsmb.sys
2008-02-02 11:03 ——— d—–w C:\ProgramData\CyberLink
2008-02-02 10:56 ——— d-sh–w C:\ProgramData\Επιφάνεια εργασίας
2008-01-18 19:19 607,744 —-a-w C:\Windows\System32\x264vfw.dll
2007-12-24 11:49 7,680 —-a-w C:\Windows\System32\ff_vfw.dll
2007-12-04 00:33 682,496 —-a-w C:\Windows\System32\divx.dll
2007-11-29 21:30 3,596,288 —-a-w C:\Windows\System32\qt-dx331.dll
2007-11-29 21:28 81,920 —-a-w C:\Windows\System32\dpl100.dll
2006-11-02 12:50 174 –sha-w C:\Program Files\desktop.ini
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-02-02 19:05 1232896]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\Windows\system32\igfxtray.exe" [ ]
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [ ]
"Persistence"="C:\Windows\system32\igfxpers.exe" [ ]
"ALaunch"="C:\Acer\ALaunch\AlaunchClient.exe" [ ]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 05:06 4669440 C:\Windows\RtHDVCpl.exe]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-25 15:33 457216]
"Acer Tour"="" []
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-07-25 17:39 8470528]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-07-25 17:39 81920]
"PLFSetL"="C:\Windows\PLFSetL.exe" [2007-07-05 11:35 94208]
"LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2007-06-27 11:15 752136]
"MSPService"="C:\Program Files\Acer Arcade Deluxe\SportsCap\Kernel\MagicSports\MSPMirage.exe" [2007-02-13 18:47 102400]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2007-06-06 10:06 159744]
"eRecoveryService"="" []
"SetPanel"="C:\Acer\APanel\APanel.cmd" [ ]
"eAudio"="C:\Acer\Empowering Technology\eAudio\eAudio.exe" [2007-06-11 14:54 1286144]
"MSConfig"="C:\Windows\system32\msconfig.exe" [2006-11-02 11:45 222208]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-03-29 12:11:50 719664]
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe [2007-09-05 20:17:27 535336]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=eNetHook.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer Tour Reminder]
–a—— 2007-05-22 14:49 151552 C:\Acer\AcerTour\Reminder.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
–a—— 2007-03-08 03:38 40048 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
–a—— 2007-03-21 12:00 174872 C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IS CfgWiz]
C:\Program Files\Common Files\Symantec Shared\OPC\{31011D49-D90C-4da0-878B-78D28AD507AF}\cltUIStb.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
–a—— 2008-02-03 00:26 5724184 C:\Program Files\Windows Live\Messenger\MsnMsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvSvc]
–a—— 2007-07-25 17:39 86016 C:\Windows\system32\nvsvc.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\osCheck]
C:\Program Files\Norton Internet Security\osCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie]
——— 2007-05-24 12:38 206952 C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TVEService]
——— 2007-07-27 14:30 151552 C:\Program Files\Acer Arcade Deluxe\TV Joy\TVEService.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WarReg_PopUp]
–a—— 2006-11-05 21:48 57344 C:\Acer\WR_PopUp\WarReg_PopUp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
–a—— 2008-01-16 00:54 37376 C:\Program Files\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
–a—— 2007-09-05 19:47 1006264 C:\Program Files\Windows Defender\MSASCui.exe
R0 PSDFilter;PSDFilter;C:\Windows\system32\DRIVERS\psdfilter.sys [2007-04-25 15:34]
R0 PSDNServ;PSDNSERVER;C:\Windows\system32\drivers\PSDNServ.sys [2007-04-25 15:34]
R0 psdvdisk;psdvdisk;C:\Windows\system32\drivers\psdvdisk.sys [2007-04-25 15:34]
R1 DritekPortIO;Dritek General Port I/O;C:\PROGRA~1\LAUNCH~1\DPortIO.sys [2006-11-02 15:27]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};C:\Program Files\Acer Arcade Deluxe\Play Movie\000.fcl [2006-11-02 15:51]
R2 ALaunchService;ALaunch Service;C:\Acer\ALaunch\ALaunchSvc.exe [2007-01-26 13:24]
R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 16:52]
R2 eDataSecurity Service;eDSService.exe;"C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe" [2007-04-25 15:34]
R2 eNet Service;eNet Service;C:\Acer\Empowering Technology\eNet\eNet Service.exe [2007-05-22 14:00]
R2 eSettingsService;eSettings Service;C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [2007-05-10 13:05]
R2 int15;int15;C:\Acer\Empowering Technology\eRecovery\int15.sys [2006-12-07 17:12]
R2 MobilityService;MobilityService;C:\Acer\Mobility Center\MobilityService.exe [2006-11-24 11:57]
R2 TVECapSvc;TVEnhance Background Capture Service (TBCS);"C:\Program Files\Acer Arcade Deluxe\TV Joy\Kernel\TV\TVECapSvc.exe" [2007-07-27 14:30]
R2 TVESched;TVEnhance Task Scheduler (TTS));"C:\Program Files\Acer Arcade Deluxe\TV Joy\Kernel\TV\TVESched.exe" [2007-07-27 14:30]
R2 WMIService;ePower Service;C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [2007-09-14 14:32]
R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2007-01-30 07:23]
R3 A310;AVerMedia A310 DVB-T;C:\Windows\system32\DRIVERS\AVerA310USB.sys [2007-07-10 04:16]
R3 BDASwCap;AVerMedia A310 BDA DVBT Capture Device;C:\Windows\system32\drivers\AVerA310Cap.sys [2007-07-10 04:16]
R3 enecir;ENE CIR Receiver;C:\Windows\system32\DRIVERS\enecir.sys [2007-03-07 10:26]
R3 NETw4v32;Πρόγραμμα οδήγησης προσαρμογέα Intel® Wireless WiFi Link για Windows Vista 32 Bit;C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-08-08 02:26]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC);C:\Windows\system32\DRIVERS\snp2uvc.sys [2007-08-02 14:17]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-06-05 10:57]
S3 btwaudio;Bluetooth Audio Device Service;C:\Windows\system32\drivers\btwaudio.sys [2007-03-29 21:46]
S3 btwavdt;Bluetooth AVDT Service;C:\Windows\system32\drivers\btwavdt.sys [2007-02-27 08:20]
S3 btwrchid;btwrchid;C:\Windows\system32\DRIVERS\btwrchid.sys [2007-02-27 08:20]
S3 NETw3v32;Πρόγραμμα οδήγησης προσαρμογέα Intel® PRO/Wireless 3945ABG για Windows Vista 32 Bit;C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 09:30]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-06 22:39:54
Windows 6.0.6000 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
**************************************************************************
.
Completion time: 2008-02-06 22:41:36
ComboFix-quarantined-files.txt 2008-02-06 20:40:43
.
2008-02-06 04:22:47 — E O F —