Subai
Legacy Member
ComboFix 06.09.23 - Running from: "C:\Program Files\Mozilla Firefox"
((((((((((((((((((((((((((((((( Files Created from 2006-08-23 to 2006-09-23 ))))))))))))))))))))))))))))))))))
2006-09-10 15:55 665,424 --a------ C:\WINDOWS\system32\wmv8dmoe.dll
2006-09-10 15:55 566,272 --a------ C:\WINDOWS\system32\wmvdmoe.dll
2006-09-10 15:55 438,608 --a------ C:\WINDOWS\system32\wmv8dmod.dll
2006-09-10 15:55 117,072 --a------ C:\WINDOWS\system32\wmsdmoe.dll
2006-09-10 15:55 1,683,792 --a------ C:\WINDOWS\system32\wmvcore2.dll
2006-09-10 12:49 69,632 --a------ C:\WINDOWS\system32\lfgif13n.dll
2006-09-10 12:49 57,344 --a------ C:\WINDOWS\system32\lfbmp13n.dll
2006-09-10 12:49 55,808 --a------ C:\WINDOWS\system32\lfpsd13n.dll
2006-09-10 12:49 462,848 --a------ C:\WINDOWS\system32\ltkrn13n.dll
2006-09-10 12:49 450,560 --a------ C:\WINDOWS\system32\ltimg13n.dll
2006-09-10 12:49 401,408 --a------ C:\WINDOWS\system32\lfcmp13n.dll
2006-09-10 12:49 299,008 --a------ C:\WINDOWS\system32\ltdis13n.dll
2006-09-10 12:49 206,336 --a------ C:\WINDOWS\system32\ltefx13n.dll
2006-09-10 12:49 163,840 --a------ C:\WINDOWS\system32\ltfil13n.dll
2006-09-01 16:19 524,288 --a------ C:\WINDOWS\system32\xvidcore.dll
2006-09-01 16:19 413,760 --a------ C:\WINDOWS\system32\mpg4c32.dll
2006-09-01 16:19 261,632 --a------ C:\WINDOWS\system32\mcdvd_32.dll
2006-09-01 16:19 24,576 --a------ C:\WINDOWS\system32\msxml3a.dll
2006-09-01 16:19 139,264 --a------ C:\WINDOWS\system32\xvidvfw.dll
2006-09-01 16:19 1,700,352 --a------ C:\WINDOWS\system32\GdiPlus.dll
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-09-23 01:10 -------- d-------- C:\Program Files\Mozilla Firefox
2006-09-23 01:10 -------- d-------- C:\Program Files\Common Files
2006-09-22 16:41 -------- d---s---- C:\Program Files\Xfire
2006-09-22 08:08 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Xfire
2006-09-21 21:12 -------- d-------- C:\Program Files\Kaspersky Lab
2006-09-21 21:08 -------- d---s---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2006-09-20 23:31 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Alien Skin
2006-09-17 21:01 -------- d-------- C:\Program Files\Xxersonal files
2006-09-14 19:10 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Macromedia
2006-09-14 19:07 -------- d-------- C:\Program Files\Macromedia
2006-09-14 19:06 -------- d-------- C:\Program Files\Common Files\Macromedia
2006-09-11 17:10 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Sonic Foundry
2006-09-11 16:46 -------- d-------- C:\Documents and Settings\Administrator\Application Data\BSplayer Pro
2006-09-10 15:59 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Publish Providers
2006-09-10 15:59 -------- d-------- C:\Documents and Settings\Administrator\Application Data\NetMedia Providers
2006-09-10 15:55 -------- d-------- C:\Program Files\Sonic Foundry
2006-09-10 15:39 -------- d-------- C:\Program Files\Common Files\AVSMedia
2006-09-10 15:39 -------- d-------- C:\Program Files\AVSMedia
2006-09-10 15:37 -------- d-------- C:\Program Files\Webteh
2006-09-10 13:26 -------- d-------- C:\Program Files\BearShare
2006-09-06 19:04 -------- d-------- C:\Program Files\Adobe
2006-09-06 19:04 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Leadertech
2006-09-06 14:09 -------- d-------- C:\Documents and Settings\Administrator\Application Data\AdobeUM
2006-09-06 14:08 -------- d-------- C:\Program Files\Common Files\Adobe
2006-09-06 14:08 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Adobe
2006-09-06 14:07 1212 --a------ C:\Documents and Settings\Administrator\Application Data\AdobeDLM.log
2006-09-06 14:07 0 --a------ C:\Documents and Settings\Administrator\Application Data\dm.ini
2006-09-03 12:42 17640 --a------ C:\Documents and Settings\Administrator\Application Data\GDIPFONTCACHEV1.DAT
2006-08-31 16:36 -------- d-------- C:\Program Files\Ventrilo
2006-08-31 16:36 -------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2006-08-30 00:39 -------- d-------- C:\Program Files\DivX
2006-08-29 10:52 -------- d-------- C:\Program Files\Lavasoft
2006-08-29 10:52 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Lavasoft
2006-08-25 13:58 -------- d-------- C:\Program Files\Java
2006-08-24 18:18 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Sun
2006-08-24 18:16 -------- d-------- C:\Program Files\Common Files\Java
2006-08-20 22:52 -------- d-------- C:\Program Files\Teamspeak2_RC2
2006-08-20 22:52 -------- d-------- C:\Documents and Settings\Administrator\Application Data\teamspeak2
2006-08-19 18:02 -------- d-------- C:\Program Files\MyGlobalSearch
2006-08-13 19:58 -------- d-------- C:\Documents and Settings\Administrator\Application Data\GlobalSCAPE
2006-08-13 19:57 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-08-13 19:57 -------- d-------- C:\Program Files\GlobalSCAPE
2006-08-13 19:57 -------- d-------- C:\Program Files\Common Files\InstallShield
2006-08-13 19:56 -------- d-------- C:\Program Files\WinRAR
2006-08-13 12:26 -------- d-------- C:\Program Files\Windows Media Player
2006-08-13 12:17 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Image Zone Express
2006-08-13 12:14 -------- d-------- C:\Program Files\HP PhotoSmart
2006-08-13 12:07 -------- d-------- C:\Program Files\SPYC@M 100
2006-08-12 19:10 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Ventrilo
2006-08-11 22:24 -------- d-------- C:\Program Files\NetMeeting
2006-08-11 16:54 -------- d-------- C:\Program Files\Creative
2006-08-10 15:36 -------- d-------- C:\Program Files\Common Files\Blizzard Entertainment
2006-08-10 14:27 -------- d-------- C:\Program Files\Common Files\Microsoft Shared
2006-08-10 14:19 -------- d-------- C:\Program Files\Norton AntiVirus
2006-08-10 14:19 -------- d-------- C:\Program Files\Common Files\Symantec Shared
2006-08-10 05:33 -------- d-------- C:\Program Files\Symantec
2006-08-10 05:29 -------- d-------- C:\Program Files\SymNetDrv
2006-08-10 05:25 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Symantec
2006-08-09 22:53 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Talkback
2006-08-09 22:53 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Mozilla
2006-08-09 22:46 62 --ahs---- C:\Documents and Settings\Administrator\Application Data\desktop.ini
2006-08-09 22:46 -------- d-------- C:\Program Files\Common Files\SpeechEngines
2006-08-09 22:46 -------- d-------- C:\Program Files\Common Files\ODBC
2006-08-09 21:47 -------- d-------- C:\Program Files\Microsoft Office
2006-08-09 21:47 -------- d-------- C:\Program Files\Common Files\System
2006-08-09 21:47 -------- d-------- C:\Program Files\Common Files\Designer
2006-08-09 21:31 -------- d--h----- C:\Program Files\WindowsUpdate
2006-08-09 21:24 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Creative
2006-08-09 21:03 -------- d--h----- C:\Program Files\Uninstall Information
2006-08-09 21:03 -------- d-------- C:\Program Files\Messenger
2006-08-09 21:03 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Identities
2006-08-09 20:58 0 -rahs---- C:\MSDOS.SYS
2006-08-09 20:58 0 -rahs---- C:\IO.SYS
2006-08-09 20:58 0 --a------ C:\CONFIG.SYS
2006-08-09 20:58 0 --a------ C:\AUTOEXEC.BAT
2006-08-09 20:58 -------- d-------- C:\Program Files\xerox
2006-08-09 20:58 -------- d-------- C:\Program Files\Online Services
2006-08-09 20:58 -------- d-------- C:\Program Files\microsoft frontpage
2006-08-09 20:58 -------- d-------- C:\Program Files\Internet Explorer
2006-08-09 20:57 -------- d-------- C:\Program Files\Outlook Express
2006-08-09 20:57 -------- d-------- C:\Program Files\Movie Maker
2006-08-09 20:57 -------- d-------- C:\Program Files\Common Files\Services
2006-08-09 20:57 -------- d-------- C:\Program Files\Common Files\MSSoap
2006-08-09 20:56 -------- d-------- C:\Program Files\Windows NT
2006-08-09 20:56 -------- d-------- C:\Program Files\MSN Gaming Zone
2006-08-09 20:56 -------- d-------- C:\Program Files\MSN
2006-08-09 20:56 -------- d-------- C:\Program Files\ComPlus Applications
2006-08-04 17:37 73728 --a------ C:\WINDOWS\system32\dpl100.dll
2006-08-04 17:37 196608 --a------ C:\WINDOWS\system32\dtu100.dll
2006-07-27 04:05 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2006-07-03 23:40 778240 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2006-07-03 23:40 778240 --a------ C:\WINDOWS\system32\divx_xx07.dll
2006-07-03 23:40 761856 --a------ C:\WINDOWS\system32\divx_xx11.dll
2006-07-03 23:40 620180 --a------ C:\WINDOWS\system32\DivX.dll
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\ctfmon.exe"
"Fraps"="C:\\FRAPS\\FRAPS.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTSysVol"="C:\\Program Files\\Creative\\SB Live! 24-bit\\Surround Mixer\\CTSysVol.exe /r"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RunDLL32.exe NvMCTray.dll,NvTaskbarInit"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe /Consumer"
"SSC_UserPrompt"="C:\\Program Files\\Common Files\\Symantec Shared\\Security Center\\UsrPrmpt.exe"
"Nosign_JL2005"="nosign TRUST"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_08\\bin\\jusched.exe\""
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,e6,00,00,00,00,00,00,00,9a,03,00,00,42,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
securityproviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Norton AntiVirus - Mijn computer scannen.job
C:\WINDOWS\tasks\Symantec NetDetect.job
Completion time: Sat 23/09/2006 1:11:26.78
ComboFix.txt
((((((((((((((((((((((((((((((( Files Created from 2006-08-23 to 2006-09-23 ))))))))))))))))))))))))))))))))))
2006-09-10 15:55 665,424 --a------ C:\WINDOWS\system32\wmv8dmoe.dll
2006-09-10 15:55 566,272 --a------ C:\WINDOWS\system32\wmvdmoe.dll
2006-09-10 15:55 438,608 --a------ C:\WINDOWS\system32\wmv8dmod.dll
2006-09-10 15:55 117,072 --a------ C:\WINDOWS\system32\wmsdmoe.dll
2006-09-10 15:55 1,683,792 --a------ C:\WINDOWS\system32\wmvcore2.dll
2006-09-10 12:49 69,632 --a------ C:\WINDOWS\system32\lfgif13n.dll
2006-09-10 12:49 57,344 --a------ C:\WINDOWS\system32\lfbmp13n.dll
2006-09-10 12:49 55,808 --a------ C:\WINDOWS\system32\lfpsd13n.dll
2006-09-10 12:49 462,848 --a------ C:\WINDOWS\system32\ltkrn13n.dll
2006-09-10 12:49 450,560 --a------ C:\WINDOWS\system32\ltimg13n.dll
2006-09-10 12:49 401,408 --a------ C:\WINDOWS\system32\lfcmp13n.dll
2006-09-10 12:49 299,008 --a------ C:\WINDOWS\system32\ltdis13n.dll
2006-09-10 12:49 206,336 --a------ C:\WINDOWS\system32\ltefx13n.dll
2006-09-10 12:49 163,840 --a------ C:\WINDOWS\system32\ltfil13n.dll
2006-09-01 16:19 524,288 --a------ C:\WINDOWS\system32\xvidcore.dll
2006-09-01 16:19 413,760 --a------ C:\WINDOWS\system32\mpg4c32.dll
2006-09-01 16:19 261,632 --a------ C:\WINDOWS\system32\mcdvd_32.dll
2006-09-01 16:19 24,576 --a------ C:\WINDOWS\system32\msxml3a.dll
2006-09-01 16:19 139,264 --a------ C:\WINDOWS\system32\xvidvfw.dll
2006-09-01 16:19 1,700,352 --a------ C:\WINDOWS\system32\GdiPlus.dll
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-09-23 01:10 -------- d-------- C:\Program Files\Mozilla Firefox
2006-09-23 01:10 -------- d-------- C:\Program Files\Common Files
2006-09-22 16:41 -------- d---s---- C:\Program Files\Xfire
2006-09-22 08:08 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Xfire
2006-09-21 21:12 -------- d-------- C:\Program Files\Kaspersky Lab
2006-09-21 21:08 -------- d---s---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2006-09-20 23:31 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Alien Skin
2006-09-17 21:01 -------- d-------- C:\Program Files\Xxersonal files
2006-09-14 19:10 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Macromedia
2006-09-14 19:07 -------- d-------- C:\Program Files\Macromedia
2006-09-14 19:06 -------- d-------- C:\Program Files\Common Files\Macromedia
2006-09-11 17:10 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Sonic Foundry
2006-09-11 16:46 -------- d-------- C:\Documents and Settings\Administrator\Application Data\BSplayer Pro
2006-09-10 15:59 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Publish Providers
2006-09-10 15:59 -------- d-------- C:\Documents and Settings\Administrator\Application Data\NetMedia Providers
2006-09-10 15:55 -------- d-------- C:\Program Files\Sonic Foundry
2006-09-10 15:39 -------- d-------- C:\Program Files\Common Files\AVSMedia
2006-09-10 15:39 -------- d-------- C:\Program Files\AVSMedia
2006-09-10 15:37 -------- d-------- C:\Program Files\Webteh
2006-09-10 13:26 -------- d-------- C:\Program Files\BearShare
2006-09-06 19:04 -------- d-------- C:\Program Files\Adobe
2006-09-06 19:04 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Leadertech
2006-09-06 14:09 -------- d-------- C:\Documents and Settings\Administrator\Application Data\AdobeUM
2006-09-06 14:08 -------- d-------- C:\Program Files\Common Files\Adobe
2006-09-06 14:08 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Adobe
2006-09-06 14:07 1212 --a------ C:\Documents and Settings\Administrator\Application Data\AdobeDLM.log
2006-09-06 14:07 0 --a------ C:\Documents and Settings\Administrator\Application Data\dm.ini
2006-09-03 12:42 17640 --a------ C:\Documents and Settings\Administrator\Application Data\GDIPFONTCACHEV1.DAT
2006-08-31 16:36 -------- d-------- C:\Program Files\Ventrilo
2006-08-31 16:36 -------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2006-08-30 00:39 -------- d-------- C:\Program Files\DivX
2006-08-29 10:52 -------- d-------- C:\Program Files\Lavasoft
2006-08-29 10:52 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Lavasoft
2006-08-25 13:58 -------- d-------- C:\Program Files\Java
2006-08-24 18:18 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Sun
2006-08-24 18:16 -------- d-------- C:\Program Files\Common Files\Java
2006-08-20 22:52 -------- d-------- C:\Program Files\Teamspeak2_RC2
2006-08-20 22:52 -------- d-------- C:\Documents and Settings\Administrator\Application Data\teamspeak2
2006-08-19 18:02 -------- d-------- C:\Program Files\MyGlobalSearch
2006-08-13 19:58 -------- d-------- C:\Documents and Settings\Administrator\Application Data\GlobalSCAPE
2006-08-13 19:57 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-08-13 19:57 -------- d-------- C:\Program Files\GlobalSCAPE
2006-08-13 19:57 -------- d-------- C:\Program Files\Common Files\InstallShield
2006-08-13 19:56 -------- d-------- C:\Program Files\WinRAR
2006-08-13 12:26 -------- d-------- C:\Program Files\Windows Media Player
2006-08-13 12:17 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Image Zone Express
2006-08-13 12:14 -------- d-------- C:\Program Files\HP PhotoSmart
2006-08-13 12:07 -------- d-------- C:\Program Files\SPYC@M 100
2006-08-12 19:10 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Ventrilo
2006-08-11 22:24 -------- d-------- C:\Program Files\NetMeeting
2006-08-11 16:54 -------- d-------- C:\Program Files\Creative
2006-08-10 15:36 -------- d-------- C:\Program Files\Common Files\Blizzard Entertainment
2006-08-10 14:27 -------- d-------- C:\Program Files\Common Files\Microsoft Shared
2006-08-10 14:19 -------- d-------- C:\Program Files\Norton AntiVirus
2006-08-10 14:19 -------- d-------- C:\Program Files\Common Files\Symantec Shared
2006-08-10 05:33 -------- d-------- C:\Program Files\Symantec
2006-08-10 05:29 -------- d-------- C:\Program Files\SymNetDrv
2006-08-10 05:25 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Symantec
2006-08-09 22:53 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Talkback
2006-08-09 22:53 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Mozilla
2006-08-09 22:46 62 --ahs---- C:\Documents and Settings\Administrator\Application Data\desktop.ini
2006-08-09 22:46 -------- d-------- C:\Program Files\Common Files\SpeechEngines
2006-08-09 22:46 -------- d-------- C:\Program Files\Common Files\ODBC
2006-08-09 21:47 -------- d-------- C:\Program Files\Microsoft Office
2006-08-09 21:47 -------- d-------- C:\Program Files\Common Files\System
2006-08-09 21:47 -------- d-------- C:\Program Files\Common Files\Designer
2006-08-09 21:31 -------- d--h----- C:\Program Files\WindowsUpdate
2006-08-09 21:24 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Creative
2006-08-09 21:03 -------- d--h----- C:\Program Files\Uninstall Information
2006-08-09 21:03 -------- d-------- C:\Program Files\Messenger
2006-08-09 21:03 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Identities
2006-08-09 20:58 0 -rahs---- C:\MSDOS.SYS
2006-08-09 20:58 0 -rahs---- C:\IO.SYS
2006-08-09 20:58 0 --a------ C:\CONFIG.SYS
2006-08-09 20:58 0 --a------ C:\AUTOEXEC.BAT
2006-08-09 20:58 -------- d-------- C:\Program Files\xerox
2006-08-09 20:58 -------- d-------- C:\Program Files\Online Services
2006-08-09 20:58 -------- d-------- C:\Program Files\microsoft frontpage
2006-08-09 20:58 -------- d-------- C:\Program Files\Internet Explorer
2006-08-09 20:57 -------- d-------- C:\Program Files\Outlook Express
2006-08-09 20:57 -------- d-------- C:\Program Files\Movie Maker
2006-08-09 20:57 -------- d-------- C:\Program Files\Common Files\Services
2006-08-09 20:57 -------- d-------- C:\Program Files\Common Files\MSSoap
2006-08-09 20:56 -------- d-------- C:\Program Files\Windows NT
2006-08-09 20:56 -------- d-------- C:\Program Files\MSN Gaming Zone
2006-08-09 20:56 -------- d-------- C:\Program Files\MSN
2006-08-09 20:56 -------- d-------- C:\Program Files\ComPlus Applications
2006-08-04 17:37 73728 --a------ C:\WINDOWS\system32\dpl100.dll
2006-08-04 17:37 196608 --a------ C:\WINDOWS\system32\dtu100.dll
2006-07-27 04:05 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2006-07-03 23:40 778240 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2006-07-03 23:40 778240 --a------ C:\WINDOWS\system32\divx_xx07.dll
2006-07-03 23:40 761856 --a------ C:\WINDOWS\system32\divx_xx11.dll
2006-07-03 23:40 620180 --a------ C:\WINDOWS\system32\DivX.dll
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\ctfmon.exe"
"Fraps"="C:\\FRAPS\\FRAPS.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTSysVol"="C:\\Program Files\\Creative\\SB Live! 24-bit\\Surround Mixer\\CTSysVol.exe /r"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RunDLL32.exe NvMCTray.dll,NvTaskbarInit"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe /Consumer"
"SSC_UserPrompt"="C:\\Program Files\\Common Files\\Symantec Shared\\Security Center\\UsrPrmpt.exe"
"Nosign_JL2005"="nosign TRUST"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_08\\bin\\jusched.exe\""
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.0\\Apps\\apdproxy.exe\""
@=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,e6,00,00,00,00,00,00,00,9a,03,00,00,42,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
securityproviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Norton AntiVirus - Mijn computer scannen.job
C:\WINDOWS\tasks\Symantec NetDetect.job
Completion time: Sat 23/09/2006 1:11:26.78
ComboFix.txt