Thanks so much! Here are the logs:
Results of screen317's Security Check version 0.99.5
Windows XP Service Pack 3
Internet Explorer 6
Out of date! ``````````````````````````````
Antivirus/Firewall Check: Windows Firewall Enabled!
AVG 2011
AVG PC Tuneup 2011
AVG 2011
PC Tools Firewall Plus 6.0
Antivirus up to date!
```````````````````````````````
Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware
AVG PC Tuneup 2011
CCleaner
Java(TM) 6 Update 22
Out of date Java installed! Adobe Flash Player 10.1.85.3
Adobe Reader 9.3.3
Mozilla Firefox (3.6.12)
Firefox Out of Date! ````````````````````````````````
Process Check:
objlist.exe by Laurent AVG avgwdsvc.exe
AVG avgtray.exe
AVG avgrsx.exe
AVG avgnsx.exe
AVG avgemc.exe
PC Tools Firewall Plus FirewallGUI.exe
PC Tools Firewall Plus FWService.exe
````````````````````````````````
DNS Vulnerability Check: Unknown. This method cannot test your vulnerability to DNS cache poisoning. (Wireless connection?) ``````````End of Log```````````` ComboFix 10-11-27.01 - Elizabeth 11/27/2010 16:03:25.2.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1521 [GMT -5:00]
Running from: c:\documents and settings\Elizabeth\Desktop\commy.exe
FW: PC Tools Firewall Plus *disabled* {ABBD5028-5A95-4B6D-996E-98D64AE88D52}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\TEMP\logishrd\LVPrcInj02.dll
.
---- Previous Run -------
.
c:\documents and settings\Elizabeth\Application Data\Microsoft\~DFK3336489a.tmp
c:\documents and settings\Elizabeth\Application Data\Microsoft\1eaadjc.dll
c:\documents and settings\Elizabeth\Application Data\Microsoft\bass.dll
c:\documents and settings\Elizabeth\Application Data\Microsoft\kfgresk.dll
c:\documents and settings\Elizabeth\Application Data\Microsoft\mjcriu.dll
c:\documents and settings\Elizabeth\Application Data\Microsoft\peaadje.dll
c:\documents and settings\Elizabeth\Application Data\Microsoft\qwadjb.dll
c:\documents and settings\Elizabeth\Application Data\Microsoft\rsaadjd.dll
c:\documents and settings\Elizabeth\Application Data\sdhkryu.bat
c:\windows\Tasks\At1.job
c:\windows\Tasks\At10.job
c:\windows\Tasks\At11.job
c:\windows\Tasks\At12.job
c:\windows\Tasks\At13.job
c:\windows\Tasks\At14.job
c:\windows\Tasks\At15.job
c:\windows\Tasks\At16.job
c:\windows\Tasks\At17.job
c:\windows\Tasks\At18.job
c:\windows\Tasks\At19.job
c:\windows\Tasks\At2.job
c:\windows\Tasks\At20.job
c:\windows\Tasks\At21.job
c:\windows\Tasks\At22.job
c:\windows\Tasks\At23.job
c:\windows\Tasks\At24.job
c:\windows\Tasks\At3.job
c:\windows\Tasks\At4.job
c:\windows\Tasks\At5.job
c:\windows\Tasks\At6.job
c:\windows\Tasks\At7.job
c:\windows\Tasks\At8.job
c:\windows\Tasks\At9.job
c:\windows\TEMP\logishrd\LVPrcInj01.dll
.
((((((((((((((((((((((((( Files Created from 2010-10-27 to 2010-11-27 )))))))))))))))))))))))))))))))
.
2010-11-27 21:00 . 2010-11-27 21:00 -------- d-----w- c:\program files\Common Files\Adobe
2010-11-27 20:08 . 2010-11-27 20:08 388096 ----a-r- c:\documents and settings\Elizabeth\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-11-26 21:17 . 2010-11-26 21:17 -------- d-----w- c:\documents and settings\Elizabeth\Application Data\SUPERAntiSpyware.com
2010-11-26 21:17 . 2010-11-26 21:17 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-11-26 21:17 . 2010-11-26 21:18 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-11-26 21:15 . 2010-11-26 21:15 -------- d-----w- c:\program files\CCleaner
2010-11-26 21:14 . 2010-11-26 21:14 -------- d-----w- c:\program files\Common Files\Java
2010-11-26 21:13 . 2010-09-15 09:50 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
2010-11-26 21:13 . 2010-09-15 09:50 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-11-26 21:04 . 2010-11-26 21:07 -------- d-----w- c:\documents and settings\Elizabeth\Application Data\PCToolsFirewallPlus
2010-11-26 21:03 . 2009-11-23 18:54 88040 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2010-11-26 21:03 . 2009-11-09 16:20 207792 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2010-11-26 21:03 . 2010-01-07 17:40 233136 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2010-11-26 21:02 . 2010-11-26 21:03 -------- d-----w- c:\program files\Common Files\PC Tools
2010-11-26 21:02 . 2010-01-12 14:34 70664 ----a-w- c:\windows\system32\drivers\pctNdis-PacketFilter.sys
2010-11-26 21:02 . 2010-01-07 16:35 58816 ----a-w- c:\windows\system32\drivers\pctNdis.sys
2010-11-26 21:02 . 2010-01-07 16:35 32680 ----a-w- c:\windows\system32\drivers\pctNdis-DNS.sys
2010-11-26 21:02 . 2010-01-13 13:59 115216 ----a-w- c:\windows\system32\drivers\pctplfw.sys
2010-11-26 21:02 . 2010-11-26 21:07 -------- d-----w- c:\program files\PC Tools Firewall Plus
2010-11-26 20:34 . 2010-11-26 20:34 -------- d-----w- c:\program files\Trend Micro
2010-11-26 05:31 . 2010-11-26 05:31 -------- d-----w- c:\program files\iPod
2010-11-26 05:31 . 2010-11-26 05:32 -------- d-----w- c:\program files\iTunes
2010-11-21 20:15 . 2010-11-21 20:15 -------- d-----w- c:\documents and settings\Elizabeth\Application Data\Malwarebytes
2010-11-21 20:14 . 2010-04-29 20:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-21 20:14 . 2010-11-21 20:14 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-11-21 20:14 . 2010-04-29 20:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-21 20:14 . 2010-11-21 20:14 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-11-21 19:43 . 2010-11-21 19:43 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Tools
2010-11-16 17:24 . 2010-11-16 17:24 -------- d-----w- c:\documents and settings\Elizabeth\Local Settings\Application Data\Tracker Software
2010-11-16 16:10 . 1999-12-31 22:00 166680 ----a-w- c:\program files\Mozilla Firefox\plugins\npPDFXCviewNPPlugin.dll
2010-11-16 16:09 . 2010-11-16 16:10 -------- d-----w- c:\program files\Tracker Software
2010-11-15 18:41 . 2010-11-15 18:41 -------- d-----w- c:\documents and settings\Elizabeth\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2010-11-15 18:38 . 2010-11-15 18:38 -------- d-----w- c:\program files\gs
2010-11-06 16:37 . 2010-11-06 16:37 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2010-11-06 16:37 . 2010-11-06 16:37 103864 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
2010-11-04 23:04 . 2010-11-27 21:10 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2010-11-04 21:51 . 2010-11-04 21:51 -------- d-----w- c:\documents and settings\Elizabeth\Application Data\AVG10
2010-11-04 21:48 . 2010-11-04 21:48 -------- d--h--w- c:\documents and settings\All Users\Application Data\Common Files
2010-11-04 21:46 . 2010-11-27 20:28 -------- d-----w- c:\documents and settings\All Users\Application Data\AVG10
2010-11-04 21:15 . 2010-11-04 21:36 -------- d-----w- c:\documents and settings\All Users\Application Data\MFAData
2010-10-30 05:07 . 2010-10-30 05:07 -------- d-----w- c:\documents and settings\LocalService\Application Data\McAfee
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-18 16:23 . 2002-09-03 19:44 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2002-09-03 19:44 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2002-09-03 19:44 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2002-09-03 19:44 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-15 07:29 . 2010-06-08 03:25 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-09-09 14:16 . 2002-09-03 20:03 667136 ----a-w- c:\windows\system32\wininet.dll
2010-09-09 14:16 . 2002-09-03 19:58 61952 ----a-w- c:\windows\system32\tdc.ocx
2010-09-09 14:16 . 2010-01-23 20:57 81920 ------w- c:\windows\system32\ieencode.dll
2010-09-08 16:49 . 2010-01-23 20:57 369664 ------w- c:\windows\system32\html.iec
2010-09-08 15:17 . 2010-09-08 15:17 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-09-08 15:17 . 2010-09-08 15:17 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-09-01 11:51 . 2002-09-03 19:33 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-08-31 13:42 . 2002-09-03 20:03 1852800 ----a-w- c:\windows\system32\win32k.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Aim"="c:\program files\AIM\aim.exe" [2010-03-08 3972440]
"Logitech Vid"="c:\program files\Logitech\Logitech Vid\vid.exe" [2009-07-16 5458704]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\System32\igfxtray.exe" [2007-03-31 138008]
"HotKeysCmds"="c:\windows\System32\hkcmd.exe" [2007-03-31 162584]
"Persistence"="c:\windows\System32\igfxpers.exe" [2007-03-31 138008]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2007-07-02 159744]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"IntelZeroConfig"="c:\program files\Intel\WiFi\bin\ZCfgSvc.exe" [2009-05-21 1372160]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2009-05-21 1202448]
"{0228e555-4f9c-4e35-a3ec-b109a192b4c2}"="c:\program files\Google\Gmail Notifier\gnotify.exe" [2005-07-15 479232]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-10-08 47904]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-11-18 421160]
"00PCTFW"="c:\program files\PC Tools Firewall Plus\FirewallGUI.exe" [2010-01-12 3168216]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2010-1-23 24576]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableNotifications"= 1 (0x1)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AIM\\aim.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Logitech\\Logitech Vid\\Vid.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
R1 pctgntdi;pctgntdi;c:\windows\system32\drivers\pctgntdi.sys [11/26/2010 4:03 PM 233136]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/17/2010 1:25 PM 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/10/2010 1:41 PM 67656]
R2 ASFIPmon;Broadcom ASF IP Monitor;c:\program files\Broadcom\ASFIPMon\AsfIpMon.exe -service --> c:\program files\Broadcom\ASFIPMon\AsfIpMon.exe -service [?]
R2 PCTAppEvent;PCTAppEvent Driver;c:\windows\system32\drivers\PCTAppEvent.sys [11/26/2010 4:03 PM 88040]
R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver;c:\windows\system32\drivers\pctNdis-PacketFilter.sys [11/26/2010 4:02 PM 70664]
R3 pctNDIS;PC Tools Driver;c:\windows\system32\drivers\pctNdis.sys [11/26/2010 4:02 PM 58816]
R3 pctplfw;pctplfw;c:\windows\system32\drivers\pctplfw.sys [11/26/2010 4:02 PM 115216]
S2 gupdate1cacb1a38140aca;Google Update Service (gupdate1cacb1a38140aca);c:\program files\Google\Update\GoogleUpdate.exe [3/24/2010 1:21 AM 133104]
.
Contents of the 'Scheduled Tasks' folder
2010-11-25 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]
2010-11-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-24 06:21]
2010-11-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-24 06:21]
2010-06-02 c:\windows\Tasks\Install_NSS.job
- c:\program files\DivX\Symantec\scstubinstaller.exe [2010-03-08 18:00]
2010-11-27 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1547161642-73586283-682003330-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-25 03:09]
2010-11-27 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1547161642-73586283-682003330-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-25 03:09]
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Elizabeth\Application Data\Mozilla\Firefox\Profiles\i8so9c0b.default\
FF - prefs.js: browser.search.selectedEngine - AVG Secure Search
FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p=
FF - component: c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component: c:\documents and settings\Elizabeth\Application Data\Mozilla\Firefox\Profiles\i8so9c0b.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Elizabeth\Application Data\Mozilla\Firefox\Profiles\i8so9c0b.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\documents and settings\Elizabeth\Application Data\Mozilla\Firefox\Profiles\i8so9c0b.default\extensions\
[email protected]\plugins\npLogitechDeviceDetection.dll
FF - plugin: c:\documents and settings\Elizabeth\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdnupdater2.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npPDFXCviewNPPlugin.dll
FF - plugin: c:\program files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll
FF - Extension: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Extension: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Extension: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - Extension: FireGestures:
[email protected] - c:\documents and settings\Elizabeth\Application Data\Mozilla\Firefox\Profiles\i8so9c0b.default\extensions\
[email protected]FF - Extension: Zynga Toolbar: {7b13ec3e-999a-4b70-b9cb-2617b8323822} - c:\documents and settings\Elizabeth\Application Data\Mozilla\Firefox\Profiles\i8so9c0b.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
FF - Extension: Media Converter: {6e764c17-863a-450f-bdd0-6772bd5aaa18} - c:\documents and settings\Elizabeth\Application Data\Mozilla\Firefox\Profiles\i8so9c0b.default\extensions\{6e764c17-863a-450f-bdd0-6772bd5aaa18}
---- FIREFOX POLICIES ----
FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false
.
- - - - ORPHANS REMOVED - - - -
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
HKLM-Run-SigmatelSysTrayApp - %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2010-11-27 16:11
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_USERS\S-1-5-21-1547161642-73586283-682003330-1003\Software\SecuROM\License information*]
"datasecu"=hex:9e,0c,b6,8f,ab,ab,3f,79,6e,50,2d,e9,07,d4,d0,05,5b,03,79,d3,22,
92,ce,56,f8,0c,35,1b,ce,42,1a,2f,85,8d,75,26,30,31,40,bf,20,aa,f8,38,cf,0f,\
"rkeysecu"=hex:de,b6,88,f1,4a,ef,9e,a7,7b,a7,e0,ef,c4,ac,6c,b4
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(1264)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\netprovcredman.dll
- - - - - - - > 'explorer.exe'(2476)
c:\windows\TEMP\logishrd\LVPrcInj01.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Intel\WiFi\bin\S24EvMon.exe
c:\windows\System32\SCardSvr.exe
c:\program files\Google\Update\1.2.183.39\GoogleCrashHandler.exe
c:\windows\System32\igfxsrvc.exe
c:\program files\SigmaTel\C-Major Audio\WDM\stsystra.exe
c:\program files\DellTPad\ApMsgFwd.exe
c:\program files\DellTPad\Apntex.exe
c:\program files\DellTPad\HidFind.exe
c:\program files\Common Files\Logishrd\LQCVFX\COCIManager.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Broadcom\ASFIPMon\AsfIpMon.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Intel\WiFi\bin\EvtEng.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\program files\PC Tools Firewall Plus\FWService.exe
c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe
c:\program files\Intel\WiFi\bin\WLKeeper.exe
c:\windows\System32\wbem\unsecapp.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2010-11-27 16:16:12 - machine was rebooted
ComboFix-quarantined-files.txt 2010-11-27 21:16
Pre-Run: 27,126,910,976 bytes free
Post-Run: 27,083,415,552 bytes free
- - End Of File - - 6AB117A52EB137FF1EF1D178FD6065A3