This is my Combo-fix log:It looks clear to me, but I have highlighted the paths that looks 'suspect'due to their small size. Please check and advise what needs deleting and the next steps.
Thanking you in advance.
ComboFix 09-08-07.07 - user 08/08/2009 3:17.1.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.1534.1074 [GMT 1:00]
Running from: c:\documents and settings\user\Desktop\Combo-Fix.exe
AV: Norton Internet Security *On-access scanning disabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\jestertb.dll
c:\windows\kb913800.exe
c:\windows\system32\config\systemprofile\Start Menu\Programs\Startup\ChkDisk.lnk
c:\windows\system32\sblog.txt
D:\Autorun.inf
.
((((((((((((((((((((((((( Files Created from 2009-07-08 to 2009-08-08 )))))))))))))))))))))))))))))))
.
2009-08-08 00:10 . 2009-08-08 00:10 -------- d-----w- c:\documents and settings\user\Application Data\Malwarebytes
2009-08-08 00:10 . 2009-08-03 12:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-08 00:10 . 2009-08-08 00:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-08-08 00:10 . 2009-08-08 00:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-08-08 00:10 . 2009-08-03 12:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-08-05 14:52 . 2009-08-05 14:52 47248 ---ha-w- c:\windows\system32\mlfcache.dat
2009-08-05 13:43 . 2009-08-05 13:44 -------- d-----w- c:\program files\Safari
2009-08-04 20:31 . 2009-08-04 20:31 -------- d-sh--w- c:\documents and settings\user\PrivacIE
2009-08-01 08:11 . 2009-08-01 08:11 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2009-08-01 08:10 . 2009-08-01 08:10 -------- d-sh--w- c:\documents and settings\user\IETldCache
2009-08-01 02:17 . 2009-08-01 02:17 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-07-31 22:21 . 2009-07-03 17:09 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2009-07-31 22:21 . 2009-07-03 17:09 246272 ------w- c:\windows\system32\dllcache\ieproxy.dll
2009-07-31 22:21 . 2009-07-31 22:21 -------- d-----w- c:\windows\ie8updates
2009-07-31 22:21 . 2009-07-01 07:08 101376 ------w- c:\windows\system32\dllcache\iecompat.dll
2009-07-31 22:19 . 2009-07-31 22:20 -------- dc-h--w- c:\windows\ie8
2009-07-25 23:16 . 2009-07-25 23:18 -------- d--h--w- C:\winnt_
2009-07-21 05:30 . 2009-07-21 05:30 34304 ----a-r- c:\documents and settings\user\Application Data\Microsoft\Installer\{AEEB3643-71DE-414d-9E3F-1159177FE211}\misc.exe.D0DF3458_A845_11D3_8D0A_0050046416B9.exe
2009-07-19 02:00 . 2009-07-19 02:00 -------- d-----w- C:\aa6d33163e12d09b7e009c
2009-07-15 23:24 . 2009-07-18 13:32 -------- d-----w- c:\documents and settings\Admin\Application Data\BitTorrent
2009-07-15 23:23 . 2009-07-15 23:23 -------- d-----w- c:\documents and settings\Admin\Local Settings\Application Data\QuickPlay
2009-07-15 23:23 . 2009-07-15 23:23 -------- d-----w- c:\documents and settings\Admin\Application Data\HP
2009-07-15 23:22 . 2009-07-15 23:22 -------- d-----w- c:\documents and settings\Admin\Local Settings\Application Data\DNA
2009-07-15 23:21 . 2009-07-21 05:15 -------- d-----w- c:\documents and settings\Admin\Application Data\DNA
2009-07-15 23:21 . 2009-07-15 23:22 -------- d-----w- c:\program files\BitTorrent
2009-07-11 10:53 . 2009-07-11 10:53 -------- d-----w- c:\documents and settings\Admin\Local Settings\Application Data\Apple
2009-07-09 06:11 . 2009-07-09 06:11 193913 ----a-w- c:\windows\CFA Level 1 2007 Uninstaller.exe
2009-07-09 06:11 . 2009-07-09 06:11 -------- d-----w- c:\program files\CFA Level 1 2007
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-08 02:13 . 2008-10-15 22:44 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
2009-08-07 23:35 . 2008-03-20 20:33 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-08-07 21:14 . 2006-04-21 14:07 -------- d-----w- c:\program files\Google
2009-08-07 09:42 . 2009-06-27 10:18 -------- d-----w- c:\documents and settings\All Users\Application Data\SlySoft
2009-08-07 09:42 . 2009-06-27 09:52 -------- d-----w- c:\program files\SlySoft
2009-08-06 05:31 . 2008-02-28 13:07 7760 ----a-w- c:\documents and settings\user\Application Data\wklnhst.dat
2009-07-15 22:32 . 2008-10-20 07:05 -------- d-----w- c:\documents and settings\user\Application Data\Apple Computer
2009-07-11 14:56 . 2008-07-12 23:45 -------- d-----w- c:\program files\Microsoft ActiveSync
2009-07-11 13:04 . 2009-07-03 02:19 280 ----a-w- c:\documents and settings\Admin\Application Data\wklnhst.dat
2009-07-08 06:22 . 2009-07-08 06:21 -------- d-----w- c:\program files\Common Files\Adobe
2009-07-08 05:15 . 2009-07-08 05:15 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-07-08 05:13 . 2009-07-08 05:13 86016 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\arh.exe
2009-07-08 05:03 . 2009-07-01 04:34 -------- d-----w- c:\documents and settings\Admin\Application Data\Apple Computer
2009-07-06 00:09 . 2009-07-06 00:01 -------- d-----w- c:\documents and settings\Admin\Application Data\Nero
2009-07-06 00:09 . 2006-04-21 14:22 -------- d-----w- c:\program files\Common Files\LightScribe
2009-07-05 23:22 . 2009-07-05 22:53 -------- d-----w- c:\program files\Common Files\Nero
2009-07-05 23:12 . 2009-07-05 22:53 -------- d-----w- c:\program files\Nero
2009-07-05 23:11 . 2009-07-05 23:11 -------- d-----w- c:\program files\Windows Sidebar
2009-07-05 22:59 . 2009-07-05 22:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero
2009-07-03 17:09 . 2006-03-16 11:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-03 02:19 . 2009-07-03 02:19 -------- d-----w- c:\documents and settings\Admin\Application Data\Template
2009-07-01 05:23 . 2009-07-01 05:23 -------- d-----w- c:\documents and settings\Admin\Application Data\AdobeUM
2009-07-01 03:49 . 2006-04-21 20:22 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-29 22:41 . 2009-06-29 22:41 -------- d-----w- c:\program files\Schweser2009
2009-06-28 21:10 . 2009-06-27 12:07 -------- d-----w- c:\documents and settings\All Users\Application Data\NCH Swift Sound
2009-06-28 20:42 . 2009-06-28 20:37 -------- d-----w- c:\program files\nrg2iso
2009-06-27 12:09 . 2009-06-27 12:06 -------- d-----w- c:\program files\NCH Swift Sound
2009-06-27 12:09 . 2009-06-27 12:09 27136 ----a-w- c:\windows\system32\drivers\nchssvad.sys
2009-06-27 12:09 . 2009-06-09 21:00 -------- d-----w- c:\documents and settings\user\Application Data\NCH Swift Sound
2009-06-27 10:58 . 2009-06-27 10:58 -------- d-----w- c:\documents and settings\All Users\Application Data\NCH Software
2009-06-27 10:58 . 2009-06-09 21:00 -------- d-----w- c:\program files\NCH Software
2009-06-27 08:31 . 2009-06-27 08:31 -------- d-----w- c:\program files\Elaborate Bytes
2009-06-26 06:07 . 2009-06-26 06:07 -------- d-----w- c:\documents and settings\user\Application Data\Sonic
2009-06-16 14:36 . 2005-10-18 12:14 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:36 . 2005-10-18 12:14 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-16 08:08 . 2009-06-16 08:08 390664 ----a-w- c:\documents and settings\user\Application Data\Real\RealPlayer\Update\realplayer11gold.exe
2009-06-13 17:48 . 2009-06-13 17:48 -------- d-----w- c:\program files\Gabest
2009-06-09 21:14 . 2006-04-21 13:36 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-06-07 06:58 . 2009-06-07 06:58 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe
2009-06-03 19:09 . 2005-08-30 19:13 1291264 ----a-w- c:\windows\system32\quartz.dll
2009-05-29 12:36 . 2009-05-17 14:09 2060288 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-05-29 12:36 . 2008-10-20 07:03 39424 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-05-25 12:16 . 2009-05-25 12:16 134312 ----a-w- c:\windows\system32\ElbyVCD.dll
2009-05-25 12:01 . 2009-05-25 12:01 89256 ----a-w- c:\windows\system32\ElbyCDIO.dll
2009-05-22 23:08 . 2009-05-22 23:08 29696 ----a-w- c:\windows\system32\drivers\VClone.sys
2008-05-01 20:54 . 2008-05-01 20:54 251 ----a-w- c:\program files\wt3d.ini
2008-03-14 21:27 . 2008-03-14 21:24 25755448 ----a-w- c:\program files\wmp11-windowsxp-x86-enu.exe
2008-03-13 19:10 . 2008-03-13 06:41 29657696 ----a-w- c:\program files\camtasiaf.exe
2008-03-12 20:06 . 2008-03-12 20:06 1766 ----a-w- c:\program files\Hedge_Funds___Transparency_and_Conflicts_of_Interest.ics
2008-03-12 20:05 . 2008-03-12 20:05 1006 ----a-w- c:\program files\CFA_UK_Annual_Conference.ics
2008-03-08 21:02 . 2008-03-08 21:02 5829600 ----a-w- c:\program files\Firefox Setup 2.0.0.12.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Veoh"="c:\program files\Veoh Networks\Veoh\VeohClient.exe" [2008-08-28 3660848]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 1289000]
"VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2009-03-07 3558136]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 204288]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-06 64512]
"SunJavaUpdateSched"="c:\program files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-11 36975]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-04-27 7561216]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-06-17 794713]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2006-07-11 102400]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2006-06-19 163840]
"Cpqset"="c:\program files\HPQ\Default Settings\cpqset.exe" [2006-01-26 40960]
"RecGuard"="c:\windows\SMINST\RecGuard.exe" [2005-10-11 1187840]
"Reminder"="c:\windows\CREATOR\Remind_XP.exe" [2006-02-09 643072]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-01-17 58728]
"Symantec NetDriver Monitor"="c:\progra~1\SYMNET~1\SNDMon.exe" [2008-02-19 100056]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-05-13 177472]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-05-30 292136]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-06-08 198160]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-05-26 85160]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe" - c:\windows\system32\CHDAudPropShortcut.exe [2006-06-23 61952]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder
2009-07-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
2009-08-07 c:\windows\Tasks\Norton AntiVirus - Scan my computer - user.job
- c:\progra~1\NORTON~1\NORTON~1\Navw32.exe [2004-08-30 12:20]
.
- - - - ORPHANS REMOVED - - - -
BHO-{201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\AskBarDis\bar\bin\askBar.dll
Toolbar-{3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\AskBarDis\bar\bin\askBar.dll
HKLM-RunOnce-Uninstall Adobe Download Manager - c:\docume~1\user\LOCALS~1\Temp\nos_uninstall_Adobe.exe
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uDefault_Search_URL = 687474703a2f2f7777772e476f6f676c652e636f6d2f
uSearchMigratedDefaultURL = 687474703a2f2f7777772e476f6f676c652e636f6d2f
mSearch Bar = 687474703a2f2f7777772e476f6f676c652e636f6d2f
mSearchMigratedDefaultURL = 687474703a2f2f7777772e476f6f676c652e636f6d2f
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchURL = 687474703a2f2f7777772e476f6f676c652e636f6d2f
Trusted Zone: google.co.uk\www
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
FF - ProfilePath - c:\documents and settings\user\Application Data\Mozilla\Firefox\Profiles\uy82jxp3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJPI150_06.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPOJI610.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\Veoh Networks\Veoh\Plugins\noreg\NPVeohVersion.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-08 03:20
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = c:\program files\HPQ\Default Settings\cpqset.exe?????? [email protected][email protected]? ???([email protected][email protected]
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2009-08-08 3:29
ComboFix-quarantined-files.txt 2009-08-08 02:29
Pre-Run: 5,774,389,248 bytes free
Post-Run: 10,697,285,632 bytes free
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect
265 --- E O F --- 2009-07-31 22:22
Edited by delightP, 08 August 2009 - 02:07 AM.
Sign In
Create Account
