Malware/Spyware/Reoccurring Virus Problem

Question

Every two weeks or so I get this virus that automatically reinstalls installs itself, bring with it all sorts of popups, icons on my desktop, and sometimes the 'your computer is infected with spyware on your desktop' background image. I use ComboFix to get rid of most things, and it works, until this happens all again one to two weeks later. I'm posting a Combofix log and a Hijack This log, hopefully someone can give me advice on what to do to get rid of this once and for all. Thanks a lot guys!   Hijack This Log   Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:46:46 AM, on 7/5/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: Normal Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\TGTSoft\StyleXP\StyleXPService.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exeC:\WINDOWS\Explorer.EXEC:\Program Files\CyberLink\Shared Files\RichVideo.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Symantec AntiVirus\Rtvscan.exeC:\Program Files\Viewpoint\Common\ViewpointService.exeC:\Program Files\Raxco\PerfectDisk\PDSched.exeC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\system32\WLTRAY.exeC:\Program Files\RocketDock\RocketDock.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Sakora\Sakora.exeC:\Program Files\GetPack\GetPack19.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\AIM6\aim6.exeC:\Program Files\AIM6\aolsoftware.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htmR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localR3 - URLSearchHook: AOLSearchHook Class - {54EB34EA-E6BE-4CFD-9F4F-C4A0C2EAFA22} - C:\Program Files\AOL Search\AOLSearch.dllR3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)O2 - BHO: (no name) - {48E813E7-2C72-4877-8397-7DD684005A32} - C:\WINDOWS\system32\urqQiFVn.dll (file missing)O2 - BHO: (no name) - {A53C9A3F-7B8D-2C23-FF3E-7DA2E6E91EB5} - C:\WINDOWS\system32\ama.dll (file missing)O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocxO3 - Toolbar: AIM Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dllO4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exeO4 - HKLM\..\Run: [QuickTime Task] 'C:\Program Files\QuickTime\qttask.exe' -atboottimeO4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -HideO4 - HKCU\..\Run: [RocketDock] 'C:\Program Files\RocketDock\RocketDock.exe'O4 - HKCU\..\Run: [msnmsgr] 'C:\Program Files\MSN Messenger\msnmsgr.exe' /backgroundO4 - HKCU\..\Run: [Zdnnt] 'C:\Program Files\?ssembly\iexplore.exe'O4 - HKCU\..\Run: [Ngml] 'C:\Program Files\Common Files\A?pPatchundll32.exe'O4 - HKCU\..\Run: [Acww] 'C:\Program Files\Common Files\??mbolsundll.exe'O4 - HKCU\..\Run: [Xfroyf] 'C:\Program Files\?ystem32\wowexec.exe'O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Vcoxq] C:\WINDOWS\??stem32	racert.exeO4 - HKCU\..\Run: [Ewljezu] C:\WINDOWS\system32\?racle\wowexec.exeO4 - HKCU\..\Run: [Nfnojk] 'C:\Program Files\?ymantecundll.exe'O4 - HKCU\..\Run: [Sakora] C:\Program Files\Sakora\Sakora.exeO4 - HKCU\..\Run: [GetPack19] 'C:\Program Files\GetPack\GetPack19.exe'O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aim toolbar 5.0esources\en-US\local\search.htmlO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dllO9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dllO9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dllO9 - Extra button: AIM Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLLO9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exeO9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dllO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cabO16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125198294296O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cabO16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cabO16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabO16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://mvnet.xlontech.net/qm/fox/06101102/qsp2ie06101001.cabO16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/RACtrl.cabO20 - Winlogon Notify: SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dllO23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeO23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exeO23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXEO23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exeO23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exeO23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exeO23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exeO23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exeO23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exeO23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcappcapd.exeO23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exeO23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exeO23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exeO23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exeO23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE --End of file - 9544 bytes

zman642001 · Answer

ComboFix 08-06-20.4 - Zman 2008-06-30 13:31:30.14 - NTFSx86Running from: C:\Documents and Settings\Zman\Desktop\ComboFixes.exe WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!. (((((((((((((((((((((((((((((((((((((((   Other Deletions   ))))))))))))))))))))))))))))))))))))))))))))))))). C:\Documents and Settings\Zman\Application Data\SSEMBL~1C:\Documents and Settings\Zman\Application Data\SSEMBL~1\?ssembly\C:\Documents and Settings\Zman\Application Data\SSEMBL~1\spool32.exeC:\Program Files\inetget2C:\Program Files\outerinfoC:\Program Files\outerinfo\FF\chrome.manifestC:\Program Files\outerinfo\FF\components\FF.dllC:\Program Files\outerinfo\FF\components\OuterinfoAds.xptC:\Program Files\outerinfo\FF\install.rdfC:\Program Files\SpcronC:\Program Files\TemporaryC:\WINDOWS\BM2f5afb98.xmlC:\WINDOWS\pskt.iniC:\WINDOWS\system32\cbXoNFUm.dllC:\WINDOWS\system32\clbdll.dllC:\WINDOWS\system32\clbinit.dllC:\WINDOWS\system32\drivers\clbdriver.sysC:\WINDOWS\system32\hlbnicmr.iniC:\WINDOWS\system32\hwx.dllC:\WINDOWS\system32\MSINET.ocaC:\WINDOWS\system32\mUFNoXbc.iniC:\WINDOWS\system32\mUFNoXbc.ini2C:\WINDOWS\system32\pac.txtC:\WINDOWS\system32acle~1C:\WINDOWS\system32acle~1\wowexec.exeC:\WINDOWS\system32	uvstSJC.dll .(((((((((((((((((((((((((   Files Created from 2008-05-28 to 2008-06-30  ))))))))))))))))))))))))))))))). 2008-06-30 13:11 . 2008-06-30 13:11   d-------- C:\Program Files\Sakora 2008-06-30 13:08 . 2008-06-30 13:08 81,920 --a------ C:\WINDOWS\system32mcinblh.dll 2008-06-30 13:06 . 2008-06-30 13:06 103,424 --a------ C:\WINDOWS\system32\wjprpm.dll 2008-06-30 13:05 . 2008-06-30 13:06 103,424 --a------ C:\WINDOWS\system32\hehqtvsk.dll 2008-06-30 13:03 . 2008-06-30 13:03 91,136 --a------ C:\WINDOWS\system32\leeytkeg.dll 2008-06-30 13:01 . 2008-06-30 13:01   d-------- C:\Program Files\mjc 2008-06-30 12:57 . 2008-06-30 12:57 41,984 --a------ C:\WINDOWS\mrofinu572.exe 2008-06-30 12:57 . 2008-06-30 12:57 41,723 ---hs---- C:\Program Files\Common Files\Yazzle1281OinUninstaller.exe 2008-06-27 22:24 . 2008-06-27 22:24 268 --ah----- C:\sqmdata05.sqm 2008-06-27 22:24 . 2008-06-27 22:24 244 --ah----- C:\sqmnoopt05.sqm 2008-06-26 21:57 . 2008-06-26 21:57   d-------- C:\Documents and Settings\Zman\Application Data\Snapfish 2008-06-25 17:35 . 2008-06-25 17:35 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-06-25 17:35 . 2008-06-25 17:35 1,409 --a------ C:\WINDOWS\QTFont.for 2008-06-25 11:47 . 2008-06-25 08:47 41,984 --a------ C:\WINDOWS\b156.exe 2008-06-25 11:33 . 2008-06-25 12:30   d-------- C:\yay 2008-06-25 11:31 . 2008-06-25 11:31   d-------- C:\sweetness 2008-06-25 11:16 . 2008-06-25 11:16 81,408 --a------ C:\WINDOWS\system32\fmhuacug.dll 2008-06-25 11:15 . 2008-06-25 11:15 105,984 --a------ C:\WINDOWS\system32\qvsbxiou.dll 2008-06-25 11:08 . 2008-06-25 11:08   d-------- C:\WINDOWS\system32\vec3 2008-06-25 11:08 . 2008-06-25 11:08   d-------- C:\WINDOWS\system32\modtrux01 2008-06-25 11:08 . 2008-06-25 11:08   d-------- C:\WINDOWS\system32\bam 2008-06-25 11:08 . 2008-06-25 11:08   d-------- C:\Temp\syschk3 2008-06-13 20:34 . 2008-06-13 20:34   d-------- C:\Program Files\MSXML 6.0 2008-06-13 20:28 . 2006-08-21 05:14 128,896 --------- C:\WINDOWS\system32\dllcache\fltmgr.sys 2008-06-13 20:28 . 2006-08-21 05:14 23,040 --------- C:\WINDOWS\system32\dllcache\fltmc.exe 2008-06-13 20:28 . 2006-08-21 08:21 16,896 --------- C:\WINDOWS\system32\dllcache\fltlib.dll 2008-06-13 20:26 . 2008-06-13 20:26   d-------- C:\Program Files\MSXML 4.0 2008-06-13 10:05 . 2008-06-13 07:05 95,232 --a------ C:\WINDOWS\b152.exe 2008-06-12 15:51 . 2008-06-12 15:51 99,024 --a------ C:\WINDOWS\MozillaUninstall.exe 2008-06-12 15:51 . 2008-06-12 15:51 98,512 --a------ C:\WINDOWS\GREUninstall.exe 2008-06-12 15:50 . 2008-06-12 15:50   d-------- C:\Program Files\Common Files\mozilla.org 2008-06-12 12:51 . 2008-06-12 13:15   d-------- C:\blahs 2008-06-12 11:47 . 2008-06-12 11:59   d-------- C:\blah 2008-06-12 11:25 . 2008-06-12 11:38   d-------- C:\fc 2008-06-12 02:09 . 2008-06-12 02:39   d-------- C:\ComboFix 2008-06-12 02:06 . 2008-06-12 02:06 2,238 --a------ C:\WINDOWS\system32\GClogo_32x32.ico 2008-06-12 01:51 . 2008-06-12 01:51 87,513 --a------ C:\WINDOWS\system32\iftuyszv.exe 2008-06-12 01:50 . 2008-06-12 01:50   d-------- C:\WINDOWS\system32\SGI 2008-06-12 01:50 . 2008-06-12 01:50   d-------- C:\WINDOWS\system32
etrax01 2008-06-12 01:50 . 2008-06-12 01:50   d-------- C:\WINDOWS\system32\GTK 2008-06-12 01:50 . 2008-06-12 01:50   d-------- C:\Temp\itmp4 2008-06-10 21:53 . 2008-06-13 09:10 272,128 --a------ C:\WINDOWS\system32\drivers\bthport.sys 2008-06-10 21:53 . 2008-06-13 09:10 272,128 --------- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-10 21:45 . 2007-07-09 09:09 584,192 --------- C:\WINDOWS\system32\dllcachepcrt4.dll 2008-06-10 21:26 . 2008-05-08 08:28 202,752 --------- C:\WINDOWS\system32\dllcachemcast.sys 2008-06-10 20:37 . 2007-07-30 19:18 34,136 --a------ C:\WINDOWS\system32\wucltui.dll.mui 2008-06-10 20:37 . 2007-07-30 19:19 25,944 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui 2008-06-10 20:37 . 2007-07-30 19:19 25,944 --a------ C:\WINDOWS\system32\wuapi.dll.mui 2008-06-10 20:37 . 2007-07-30 19:18 20,312 --a------ C:\WINDOWS\system32\wuaueng.dll.mui 2008-06-07 22:13 . 2008-06-07 22:13 32,768 --a------ C:\WINDOWS\system32
etrax01
etrax011065.exe 2008-06-05 14:14 . 2008-06-05 14:14   dr-h----- C:\MSOCache 2008-05-20 10:39 . 2008-05-20 10:39   d-------- C:\Documents and Settings\All Users\Application Data\LogMeIn 2008-05-20 10:38 . 2008-05-20 10:38 1,024 --a------ C:\.rnd 2008-05-19 01:25 . 2008-06-12 11:15   d-------- C:\cf 2008-05-18 13:58 . 2008-05-18 13:57 691,545 --a------ C:\WINDOWS\unins001.exe 2008-05-18 13:58 . 2008-05-18 13:58 2,542 --a------ C:\WINDOWS\unins001.dat 2008-05-18 13:56 . 2008-05-19 02:01   d-------- C:\Program Files\Spybot - Search & Destroy 2008-05-18 13:56 . 2008-05-19 02:01   d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-05-18 04:55 . 2008-05-18 04:55   d-------- C:\WINDOWS\fwkk 2008-05-18 04:55 . 2008-05-18 21:51   d-------- C:\Program Files\Common Files\fwkk 2008-05-18 04:26 . 2008-05-18 12:34 160,256 --a------ C:\WINDOWS\system32\blackster.scr 2008-05-18 04:25 . 2004-08-04 06:00 4,224 --a------ C:\WINDOWS\system32\beep.sys 2008-05-12 09:43 . 2008-05-12 06:43 68,096 --a------ C:\WINDOWS\b155.exe 2008-05-07 01:18 . 2008-05-07 01:18 1,287,680 --------- C:\WINDOWS\system32\dllcache\quartz.dll .((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))).2008-06-25 21:41 --------- d-----w C:\Program Files\PeerGuardian22008-06-18 20:09 --------- d-----w C:\Documents and Settings\Zman\Application Data\Vso2008-06-17 17:34 --------- d-----w C:\Program Files\FlashFXP2008-06-12 19:50 --------- d-----w C:\Program Files\mozilla.org2008-06-09 00:14 --------- d-----w C:\Documents and Settings\Zman\Application Data\dvdcss2008-06-01 07:51 --------- d-----w C:\Program Files\Twain2008-05-29 20:57 --------- d-----w C:\Documents and Settings\Zman\Application Data\Azureus2008-05-18 08:25 6,656 ----a-w C:\WINDOWS\system32\drivers\beep.sys2008-05-17 18:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\driversmcast.sys2008-04-14 15:08 46,592 ----a-w C:\WINDOWS\b157.exe2008-01-15 21:52 140,800 --sh--w C:\Program Files\Common Files\Yazzle1281OinAdmin.exe2007-04-17 00:10 87,608 ----a-w C:\Documents and Settings\Zman\Application Data\ezpinst.exe2007-04-17 00:10 47,360 ----a-w C:\Documents and Settings\Zman\Application Data\pcouffin.sys2006-09-06 18:13 96 ----a-w C:\Program Files\showdesktop.scf2006-06-05 21:17 24,192 ----a-w C:\Documents and Settings\Zman\usbsermptxp.sys2006-06-05 21:17 22,768 ----a-w C:\Documents and Settings\Zman\usbsermpt.sys2006-05-10 16:54 45,304 ----a-w C:\Documents and Settings\Zman\Application Data\GDIPFONTCACHEV1.DAT2005-10-15 21:18 6,423 ----a-w C:\Program Files\Warez P2P ClientIPGUARD.LOG2005-01-24 23:58 81,920 ----a-w C:\Program Files\SSAAD.exe2000-09-02 09:20 65,536 ----a-w C:\Program Files\NED.exe2000-09-02 09:20 1,803 ----a-w C:\Program Fileseadme.txt. (((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))..*Note* empty entries & legit default entries are not shownREGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]'STYLEXP'='C:\Program Files\TGTSoft\StyleXP\StyleXP.exe' [2005-01-17 21:05 1159168]'RocketDock'='C:\Program Files\RocketDock\RocketDock.exe' [2007-09-02 13:58 495616]'msnmsgr'='C:\Program Files\MSN Messenger\msnmsgr.exe' [2007-01-19 13:54 5674352]'Zdnnt'='C:\Program Files\?ssembly\iexplore.exe' [ ]'Ngml'='C:\Program Files\Common Files\A?pPatchundll32.exe' [ ]'Acww'='C:\Program Files\Common Files\??mbolsundll.exe' [ ]'QdrModule16'='C:\Program Files\QdrModule\QdrModule16.exe' [ ]'Xfroyf'='C:\Program Files\?ystem32\wowexec.exe' [ ]'ctfmon.exe'='C:\WINDOWS\system32\ctfmon.exe' [2004-08-04 06:00 15360]'Vcoxq'='C:\WINDOWS\??stem32	racert.exe' [2004-08-04 06:00 12288]'Ewljezu'='C:\WINDOWS\system32\?racle\wowexec.exe' [ ]'mjc'='C:\Program Files\mjc\mjc.exe' [2008-06-30 13:01 145408]'Sakora'='C:\Program Files\Sakora\Sakora.exe' [2008-06-30 13:11 26624]'Sen'='C:\DOCUME~1\Zman\APPLIC~1\SSEMBL~1\spool32.exe' [ ] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]'Broadcom Wireless Manager UI'='C:\WINDOWS\system32\WLTRAY.exe' [2005-12-19 09:08 1347584]'QuickTime Task'='C:\Program Files\QuickTime\qttask.exe' [2006-10-25 19:58 282624] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]'{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}'= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-02-16 17:51 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\efcAQKEx]efcAQKEx.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\efcdaxy]efcdaxy.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\iifdcde]iifdcde.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\SASWinLogon]C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2006-06-20 14:29 258048 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\yayabcb]yayabcb.dll

zman642001 · Answer

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, ntoskrnl.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^America Online 9.0 Tray Icon.lnk]path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\America Online 9.0 Tray Icon.lnkbackup=C:\WINDOWS\pss\America Online 9.0 Tray Icon.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnkbackup=C:\WINDOWS\pss\Digital Line Detect.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^dlbcserv.lnk]path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\dlbcserv.lnkbackup=C:\WINDOWS\pss\dlbcserv.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Logitech SetPoint.lnk]path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech SetPoint.lnkbackup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnkbackup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnkbackup=C:\WINDOWS\pss\QuickBooks Update Agent.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Zman^Start Menu^Programs^Startup^YouTube Uploader.lnk]path=C:\Documents and Settings\Zman\Start Menu\Programs\Startup\YouTube Uploader.lnkbackup=C:\WINDOWS\pss\YouTube Uploader.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AIM]--a------ 2005-06-02 01:34 67160 C:\Program Files\AIM\aim.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Aim6] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]--a------ 2007-02-24 12:43 342636 C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDMCon]C:\Program Files\Softwin\BitDefender8\bdmcon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDNewsAgent]C:\Program Files\Softwin\BitDefender8\bdnagent.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDOESRV]C:\Program Files\Softwin\BitDefender8\bdoesrv.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDSwitchAgent]C:\Program Files\Softwin\BitDefender8\bdswitch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BuildBU]--a------ 2005-05-30 17:34 61440 c:\dell\bldbubg.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]--a------ 2005-06-02 09:21 48752 C:\Program Files\Common Files\Symantec Shared\ccApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]--a------ 2004-08-04 06:00 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell QuickSet]C:\Program Files\Dell\QuickSet\quickset.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Wireless Manager UI]C:\WINDOWS\system32\WLTRAY [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]--a------ 2004-07-19 08:51 306688 C:\Program Files\Dell Support\DSAgnt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]--a------ 2004-12-06 02:05 127035 C:\WINDOWS\system32\dla	fswctrl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DMXLauncher]C:\Program Files\Dell\Media Experience\DMXLauncher.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eDonkey2000]C:\Program Files\eDonkey2000\eDonkey2000.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Effqcw]C:\WINDOWS\system32\?dobe\logonui.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]--a----t- 2007-11-06 12:16 19952 C:\Documents and Settings\Zman\Local Settings\Application Data\Google\Update\1.0.87.0\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]--a------ 2007-04-24 16:09 163840 C:\WINDOWS\system32\hkcmd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxhkcmd]--a------ 2007-04-24 16:09 163840 C:\WINDOWS\system32\hkcmd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxpers]--a------ 2007-04-24 16:09 135168 C:\WINDOWS\system32\igfxpers.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]--a------ 2007-04-24 16:09 131072 C:\WINDOWS\system32\igfxtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]--a------ 2004-07-27 17:50 81920 C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]--a------ 2006-10-30 10:36 256576 C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Koyxdp]C:\WINDOWS\a?sembly
opdb.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]--a------ 2007-02-07 16:21 54832 C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]--a------ 2004-06-08 12:31 29696 C:\WINDOWS\KHALMNPR.Exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCAgentExe]c:\PROGRA~1\mcafee.com\agent\McAgent.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCUpdateExe]c:\PROGRA~1\mcafee.com\agent\mcupdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MPFExe]C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]--a------ 2007-01-19 13:54 5674352 C:\Program Files\MSN Messenger\MsnMsgr.Exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]--a------ 2001-07-09 11:50 155648 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]--a------ 2001-07-09 11:50 155648 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OSCD_Creator]--a------ 2005-03-18 16:02 107520 c:\Dell\MediaExe\PreODM.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando]C:\Program Files\Pando Networks\Pando\Pando.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]--a------ 2007-04-24 16:09 135168 C:\WINDOWS\system32\igfxpers.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PRONoMgrWired]--a------ 2004-12-09 14:58 86016 C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PSD]C:\Program Files\Magic Network\Perfect Shutdown\PSD.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]--a------ 2007-01-20 03:09 200704 C:\Program Files\PowerISO\PWRISOVM.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QBReminderFlash]--a------ 2004-11-11 11:26 26112 C:\Program Files\Intuit\QuickBooks 2005\Atom\QBReminder.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]--a------ 2006-10-25 19:58 282624 C:\Program Files\QuickTime\qttask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]--a------ 2005-05-30 18:07 26112 C:\Program Files\Real\RealPlayer\RealPlay.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]--------- 2007-02-07 16:24 71216 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpyQuake2.com]C:\Program Files\SpyQuake2.com\Spy-Quake2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SsAAD.exe]--a------ 2005-01-24 19:58 81920 C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\stratas] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]--a------ 2003-11-19 18:48 32881 C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]--a------ 2006-07-20 10:24 1257472 C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]--a------ 2004-05-14 01:35 536576 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPLpr]--a------ 2004-05-13 11:23 98304 C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateManager]--a------ 2003-08-19 01:01 110592 C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirusScan Online]c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vptray]--a------ 2005-06-23 19:27 85696 C:\PROGRA~1\SYMANT~1\VPTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VSOCheckTask]c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]--a------ 2006-04-03 18:12 777424 C:\Program Files\Windows Defender\MSASCui.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\winshow]C:\WINDOWS\winshow.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\winupdates]C:\Program Files\winupdates\winupdates.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zango]c:\program files\zango\zango.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]'DisableMonitoring'=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]'EnableFirewall'= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]'C:\Program Files\America Online 9.0\waol.exe'= R0 Defrag32b;Defrag32Boot;C:\WINDOWS\system32\drivers\Defrag32b.sys [2004-10-23 09:01]R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B};C:\Program Files\CyberLink\PowerDVD\000.fcl [2006-11-02 16:51]R2 Defrag32;Defrag32;C:\WINDOWS\system32\drivers\Defrag32.sys [2004-10-23 09:01]R2 PDSched;PDScheduler;'C:\Program Files\Raxco\PerfectDisk\PDSched.exe' [2004-11-01 12:56]R2 Viewpoint Manager Service;Viewpoint Manager Service;'C:\Program Files\Viewpoint\Common\ViewpointService.exe' [2007-01-04 17:38]R3 EraserUtilDrv10741;EraserUtilDrv10741;C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv10741.sys [2008-02-13 14:21]S2 USBHSB;GeneLink File Transfer Driver;C:\WINDOWS\system32\Drivers\usbhsb.sys [2001-12-17 05:42]S3 MotDev;Motorola Inc. USB Device;C:\WINDOWS\system32\DRIVERS\motodrv.sys [2007-05-04 17:04]S3 PsSdk30;PsSdk30;C:\WINDOWS\system32\Drivers\PsSdk30.drv []S3 sonypvs1;Sony Digital Imaging Video2;C:\WINDOWS\system32\DRIVERS\sonypvs1.sys [2002-10-15 23:41]S3 xbreader;MaxDrive XBox Driver (xbreader.sys);C:\WINDOWS\system32\Drivers\xbreader.sys [2001-01-02 23:53] .Contents of the 'Scheduled Tasks' folder'2008-06-21 22:05:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job'- C:\Program Files\Apple Software Update\SoftwareUpdate.exe'2008-06-22 06:06:01 C:\WINDOWS\Tasks\MP Scheduled Scan.job'- C:\Program Files\Windows Defender\MpCmdRun.exe'2008-06-25 18:51:00 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC Nag.job'- C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe'2008-01-07 19:51:33 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC.job'- C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe.************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.netRootkit scan 2008-06-30 13:52:47Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... C:\WINDOWS\system32\clb.dll 10752 bytes executableC:\WINDOWS\system32\clbcatex.dll 110080 bytes executableC:\WINDOWS\system32\clbcatq.dll 498688 bytes executable scan completed successfullyhidden files: 3 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet003\Services\PsSdk30]'ImagePath'='\??\C:\WINDOWS\system32\Drivers\PsSdk30.drv' [HKEY_LOCAL_MACHINE\System\ControlSet003\Services\{95808DC4-FA4A-4c74-92FE-5B863F82066B}]'ImagePath'='\??\C:\Program Files\CyberLink\PowerDVD\000.fcl'.--------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\explorer.exe-> C:\Program Files\RocketDock\RocketDock.dll.------------------------ Other Running Processes ------------------------.C:\Program Files\TGTSoft\StyleXP\StyleXPService.exeC:\WINDOWS\system32\WLTRYSVC.EXEC:\WINDOWS\system32\BCMWLTRY.EXEC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\LEXPPS.EXEC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\Program Files\Dell\NicConfigSvc\NicConfigSvc.exeC:\Program Files\CyberLink\Shared Files\RichVideo.exeC:\Program Files\Symantec AntiVirus\Rtvscan.exeC:\WINDOWS\system32\wdfmgr.exeC:\WINDOWS\system32\wscntfy.exeC:\Program Files\MSN Messenger\usnsvc.exeC:\Program Files\AIM6\aim6.exeC:\Program Files\AIM6\aolsoftware.exe.**************************************************************************.Completion time: 2008-06-30 14:10:25 - machine was rebootedComboFix-quarantined-files.txt  2008-06-30 18:09:36ComboFix2.txt  2008-06-25 16:30:03ComboFix3.txt  2008-03-20 05:06:11ComboFix4.txt  2008-03-07 05:38:10ComboFix5.txt  2008-02-13 20:55:54 Pre-Run: 5,060,673,536 bytes freePost-Run: 5,060,747,264 bytes free 387 --- E O F --- 2008-06-27 12:58:05

Virus & Spyware

Was this post helpful?