ComboFix 08-04-22.5 - Owner 2008-04-24 17:59:17.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.110 [GMT -7:00] Running from: C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Desktop\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\LocalService\Application Data\WinIFixer.com C:\Program Files\MyWay C:\Program Files\MyWay\myBar\Settings\prevcfg.htm C:\WINDOWS\base64.tmp C:\WINDOWS\braviax.exe C:\WINDOWS\Help\oqtxde.chm C:\WINDOWS\nivavir.config C:\WINDOWS\pskt.ini C:\WINDOWS\system32\dllcache\figaro.sys C:\WINDOWS\system32\n.ini C:\WINDOWS\system32\uFhiQqss.ini C:\WINDOWS\system32\uFhiQqss.ini2 C:\WINDOWS\system32\univrs32.dat C:\WINDOWS\system32\vx.tll C:\WINDOWS\system32\wind32.exe C:\WINDOWS\system32\winivstr.exe C:\WINDOWS\Web\def.htm C:\WINDOWS\zip1.tmp C:\WINDOWS\zip2.tmp C:\WINDOWS\zip3.tmp C:\WINDOWS\zipped.tmp . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_asc3550p -------\Service_oqtxde ((((((((((((((((((((((((( Files Created from 2008-03-25 to 2008-04-25 ))))))))))))))))))))))))))))))) . 2008-04-24 17:32 . 2008-04-24 17:32 10,752 --a------ C:\exefix_xp.com 2008-04-24 17:31 . 2008-04-24 17:30 69,696 --a------ C:\FixSirc.com 2008-04-24 17:15 . 2008-04-24 17:17 d-------- C:\Program Files\SUPERAntiSpyware 2008-04-24 17:15 . 2008-04-24 17:15 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\SUPERAntiSpyware.com 2008-04-24 17:15 . 2008-04-24 17:15 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2008-04-24 17:15 . 2008-04-24 17:21 1,509,211 ---hs---- C:\WINDOWS\system32\krdkkjha.ini 2008-04-24 17:14 . 2008-04-24 17:14 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-04-24 17:13 . 2008-04-24 17:13 109,738 --a------ C:\WINDOWS\BM4794470a.xml 2008-04-23 08:27 . 2008-04-23 08:27 67,072 --a------ C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\win.exe 2008-04-23 07:28 . 2008-04-23 07:28 1,086,376 --a------ C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Install.dat 2008-04-23 07:28 . 2008-04-23 07:28 13,824 --a------ C:\WINDOWS\system32\maxpaynowti.exe 2008-04-23 07:27 . 2008-04-23 07:27 29,136 --a------ C:\sysrlez.exe 2008-04-23 06:34 . 2008-04-24 17:56 206 --a------ C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\delself.bat 2008-04-23 05:15 . 2008-04-23 05:18 115,000 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2008-04-23 05:15 . 2008-04-23 05:18 48,776 --a------ C:\WINDOWS\system32\S32EVNT1.DLL 2008-04-23 05:15 . 2008-04-23 05:18 8,014 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT 2008-04-23 05:15 . 2008-04-23 05:18 806 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF 2008-04-23 05:13 . 2006-11-04 10:06 d-------- C:\Program Files\Common Files\Symantec Shared 2008-04-22 18:56 . 2008-04-22 18:56 d-------- C:\Program Files\Norton Security Scan 2008-04-22 18:38 . 2008-04-22 19:06 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2008-04-22 18:38 . 2008-04-22 18:38 827,392 --a------ C:\WINDOWS\system32\FLASH.OCX 2008-04-22 11:15 . 2002-08-29 02:01 56,832 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2008-04-22 11:15 . 2001-08-17 14:00 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2008-04-22 11:15 . 2001-08-17 13:59 50,048 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2008-04-22 11:15 . 2002-08-29 01:50 24,960 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2008-04-22 11:15 . 2002-08-29 03:40 20,480 --a------ C:\WINDOWS\system32\hidserv.dll 2008-04-22 11:15 . 2001-08-17 13:48 13,952 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys 2008-04-22 11:15 . 2001-08-17 13:48 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys 2008-04-22 11:15 . 2001-08-17 14:02 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys 2008-04-22 11:15 . 2002-08-29 01:32 2,816 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2008-04-22 11:14 . 2002-08-29 01:33 55,680 --a------ C:\WINDOWS\system32\drivers\ohci1394.sys 2008-04-22 11:14 . 2001-08-17 13:46 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys 2008-04-22 09:59 . 2008-04-22 09:59 d-------- C:\Program Files\ErrorSmart 2008-04-22 09:59 . 2008-04-22 09:59 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\ErrorSmart 2008-04-22 09:52 . 2008-04-24 18:09 dr-hsc--- C:\WINDOWS\system32\dllcache 2008-04-22 08:29 . 2002-12-12 01:34 208,896 --a------ C:\WINDOWS\system32\wmpns.dll 2008-04-22 08:28 . 2003-08-25 18:06 182,880 --a------ C:\WINDOWS\system32\iuenginenew.dll 2008-04-22 08:28 . 2008-04-22 08:28 4,094 -rahs---- C:\WINDOWS\system32\drivers\HP_PC032A-ABA A527X_YC_Pavi_QMXK423_E42NAheBLU4_4_IKelut_SASUSTek Computer INC._V2.02_B3.03_T040209_WXH1_L409_M448_J120_7AMD_8Athlon XP 3000+_92.1_111063044_N11063065_P_Z11C1048C_K_A11063059_U11063038_G11067205.MRK 2008-04-22 08:27 . 2005-06-01 12:54 175,712 --a------ C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\GDIPFONTCACHEV1.DAT 2008-04-22 08:26 . 2008-04-17 15:01 7,160 --a------ C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\NMM-MetaData.db 2008-04-22 08:14 . 2008-03-25 08:46 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Incomplete 2008-04-22 08:14 . 2005-03-18 16:27 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Yahoo! Messenger 2008-04-22 08:14 . 2006-05-01 14:24 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Yahoo! 2008-04-22 08:14 . 2006-12-22 09:38 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\WildTangent 2008-04-22 08:14 . 2007-08-26 12:40 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Webshots 2008-04-22 08:14 . 2007-11-25 13:25 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Viewpoint 2008-04-22 08:14 . 2008-04-22 06:13 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\TmpRecentIcons 2008-04-22 08:14 . 2006-11-02 08:01 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Template 2008-04-22 08:14 . 2004-01-21 02:48 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Symantec 2008-04-22 08:14 . 2004-01-20 20:21 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Sonic 2008-04-22 08:14 . 2004-06-28 10:32 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Share-to-Web Upload Folder 2008-04-22 08:14 . 2007-05-11 10:30 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\ScamBlocker 2008-04-22 08:14 . 2004-01-20 21:29 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\SampleView 2008-04-22 08:14 . 2008-04-17 14:48 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\PC Suite 2008-04-22 08:14 . 2008-04-18 14:16 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Nokia Multimedia Player 2008-04-22 08:14 . 2008-04-17 11:19 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Nokia 2008-04-22 08:14 . 2005-10-31 13:10 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Musicmatch 2008-04-22 08:14 . 2007-09-26 12:17 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\MSN6 2008-04-22 08:14 . 2004-07-14 09:29 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Motive 2008-04-22 08:14 . 2008-03-31 13:05 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\LimeWire 2008-04-22 08:14 . 2004-06-28 08:20 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Leadertech 2008-04-22 08:14 . 2004-12-23 14:46 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\j2 Global 2008-04-22 08:14 . 2004-12-06 07:40 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\InterVideo 2008-04-22 08:14 . 2004-01-21 02:52 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\interMute 2008-04-22 08:14 . 2005-07-22 11:20 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\HP 2008-04-22 08:14 . 2006-07-09 13:54 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\funkitron 2008-04-22 08:14 . 2004-09-20 18:01 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\FUJIFILM 2008-04-22 08:14 . 2005-05-29 16:27 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\EarthLink Toolbar 2008-04-22 08:14 . 2007-05-11 10:24 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Earthlink 2008-04-22 08:14 . 2008-04-17 17:15 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Datalayer 2008-04-22 08:14 . 2008-02-02 09:07 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\Aim 2008-04-22 08:14 . 2007-10-20 10:41 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Application Data\AdobeUM 2008-04-22 08:13 . 2004-01-20 20:48 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\WINDOWS 2008-04-22 08:13 . 2004-06-27 16:13 d---s---- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\UserData 2008-04-22 08:13 . 2008-03-25 08:45 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Shared 2008-04-22 08:13 . 2008-04-17 17:15 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\Phone Browser 2008-04-22 08:13 . 2008-04-24 17:07 d-------- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z 2008-04-22 08:13 . 2008-04-24 18:09 192,512 --ah----- C:\Documents and Settings\Owner.YOUR-AT5QGAAC3Z\ntuser.dat.LOG 2008-04-22 07:57 . 2004-01-20 20:48 d-------- C:\WINDOWS\system32\config\systemprofile\WINDOWS 2008-04-22 07:57 . 2004-06-27 16:13 d--hs---- C:\WINDOWS\system32\config\systemprofile\UserData 2008-04-22 07:57 . 2008-03-25 08:45 d-------- C:\WINDOWS\system32\config\systemprofile\Shared 2008-04-22 07:57 . 2008-04-17 17:15 d-------- C:\WINDOWS\system32\config\systemprofile\Phone Browser 2008-04-22 07:57 . 2008-03-25 08:46 d-------- C:\WINDOWS\system32\config\systemprofile\Incomplete 2008-04-22 07:55 . 2003-09-19 01:47 10,368 --------- C:\WINDOWS\system32\drivers\pfc.sys 2008-04-22 07:54 . 2001-12-10 17:42 204,800 --a------ C:\WINDOWS\system32\IVIresizeW7.dll 2008-04-22 07:54 . 2001-12-10 17:42 200,704 --a------ C:\WINDOWS\system32\IVIresizeA6.dll 2008-04-22 07:54 . 2001-12-10 17:42 192,512 --a------ C:\WINDOWS\system32\IVIresizeP6.dll 2008-04-22 07:54 . 2001-12-10 17:42 192,512 --a------ C:\WINDOWS\system32\IVIresizeM6.dll 2008-04-22 07:54 . 2001-12-10 17:42 188,416 --a------ C:\WINDOWS\system32\IVIresizePX.dll 2008-04-22 07:54 . 2001-12-10 17:42 20,480 --a------ C:\WINDOWS\system32\IVIresize.dll 2008-04-22 07:53 . 2001-08-17 22:37 22,016 --a------ C:\WINDOWS\system32\wdmaud.drv 2008-04-22 07:52 . 2002-08-29 02:01 134,272 --a------ C:\WINDOWS\system32\drivers\portcls.sys 2008-04-22 07:52 . 2002-08-29 01:32 57,856 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2008-04-22 07:20 . 2004-06-27 16:13 d--hs---- C:\Documents and Settings\Default User\UserData 2008-04-22 07:20 . 2008-03-25 08:45 d-------- C:\Documents and Settings\Default User\Shared 2008-04-22 07:20 . 2008-04-17 17:15 d-------- C:\Documents and Settings\Default User\Phone Browser 2008-04-22 07:20 . 2008-03-25 08:46 d-------- C:\Documents and Settings\Default User\Incomplete 2008-04-21 22:12 . 2008-04-21 22:12 d-------- C:\Program Files\Windows Sidebar 2008-04-21 19:40 . 2008-04-21 19:40 d-------- C:\Documents and Settings\Guest\Application Data\PC Suite 2008-04-17 11:14 . 2008-04-17 11:14 d-------- C:\Program Files\Common Files\PCSuite 2008-04-17 11:14 . 2008-04-17 11:14 d-------- C:\Program Files\Common Files\Nokia 2008-04-01 13:54 . 2008-04-01 13:54 d-------- C:\Program Files\Cablenut 2008-03-30 06:02 . 2008-03-30 06:02 190,464 --a------ C:\WINDOWS\system32\actvtalk.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) .