powolny internet
Kuponik na weekend... Pomocy!!
KupiÄ™ AmigÄ™
DJ Vocalz ft MC D - Hardcore Til I Die
Doświadczenie za odgrywanie - 24.08-06.09.2008
Gra wyglÄ…dajÄ…ca jak MS Word
moje typki
SPRZEDAM płyty D'n'B & Jungle !!!
Rzeszów - Przedszkole Publiczne Nr 13 - ul. Piastów 2
Koncentrator Aeroplus 600
Tanit diary
witam mam problem z kompem tyn bardzo wolno chodzi skanowalem go combofixem ale niewiem co zrobic prosze o pomocacha po skanowaniu wykazalo takie cos;ComboFix 10-03-11.06 - mama 12.03.2010 22:37:02.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.352.1033.18.511.178 [GMT -6:00]
Running from: c:\documents and settings\mama\My Documents\Pobieranie\ComboFix.exe
* Created a new restore point
* Resident AV is active
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Custom Settings\TaskBarCmd v1.1.exe
.
((((((((((((((((((((((((( Files Created from 2010-02-13 to 2010-03-13 )))))))))))))))))))))))))))))))
.
2010-03-13 04:37 . 2010-03-13 04:37 -------- d-----w- c:\documents and settings\mama\Local Settings\Application Data\ESET
2010-03-13 04:01 . 2010-03-13 04:01 -------- d-----w- c:\documents and settings\mama\Application Data\ESET
2010-03-13 04:00 . 2010-03-13 04:01 -------- d-----w- c:\windows\LastGood
2010-03-13 03:59 . 2010-03-13 03:59 -------- d-----w- c:\program files\ESET
2010-03-13 03:59 . 2010-03-13 03:59 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2010-03-12 17:07 . 2010-03-12 17:07 -------- d-----w- c:\documents and settings\mama\Local Settings\Application Data\Conduit
2010-03-12 17:07 . 2010-03-12 17:07 -------- d-----w- c:\documents and settings\mama\Local Settings\Application Data\MyPlayCity
2010-03-12 16:54 . 2010-03-12 16:55 -------- d-----w- c:\documents and settings\mama\Local Settings\Application Data\Adobe
2010-03-11 03:26 . 2006-12-28 19:12 40960 ----a-w- c:\windows\system32\Fish Tycoon.scr
2010-03-11 03:26 . 2010-03-11 03:36 -------- d-----w- c:\program files\Fish Tycoon
2010-03-11 03:26 . 2010-03-11 03:26 -------- d-----w- c:\program files\ReflexiveArcade
2010-03-11 03:20 . 2010-03-11 03:20 -------- d-----w- c:\program files\UTGame
2010-03-06 22:02 . 2000-01-01 01:01 92208 ----a-w- c:\windows\system\WING.DLL
2010-03-06 22:02 . 2000-01-01 01:01 72960 ----a-r- c:\windows\system\P3LIB250.DLL
2010-03-06 22:02 . 2000-01-01 01:01 6736 ----a-w- c:\windows\system\WINGDIB.DRV
2010-03-06 22:02 . 2000-01-01 01:01 26000 ----a-w- c:\windows\system\CTL3D.DLL
2010-03-06 22:02 . 2000-01-01 01:01 188960 ----a-w- c:\windows\system\WINGDE.DLL
2010-03-06 22:02 . 2000-01-01 01:01 12800 ----a-w- c:\windows\system\WING32.DLL
2010-03-06 03:30 . 2010-03-06 03:30 -------- d-----w- c:\program files\Tierra
2010-03-05 23:45 . 2010-03-05 23:45 -------- d-----w- c:\program files\Conduit
2010-03-05 23:45 . 2010-03-05 23:45 -------- d-----w- c:\program files\MyPlayCity
2010-03-05 23:11 . 2010-03-07 20:46 -------- d-----w- c:\program files\Gods
2010-03-05 23:02 . 2010-03-11 03:25 -------- d-----w- C:\cda
2010-03-05 04:33 . 2010-03-05 04:33 -------- d-----w- c:\program files\Common Files\YDP
2010-03-05 04:33 . 2010-03-07 20:45 -------- d-----w- c:\program files\Business_English
2010-03-04 01:31 . 2010-03-04 01:31 262144 ----a-w- c:\windows\system32\default_user_class.dat
2010-03-02 21:58 . 2010-03-02 21:58 -------- d-----w- c:\documents and settings\mama\Application Data\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
2010-03-02 21:58 . 2010-02-25 01:16 38784 ----a-w- c:\documents and settings\mama\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-03-02 00:05 . 2010-03-02 00:05 -------- d-----w- c:\program files\e-Deklaracje
2010-02-28 23:47 . 2010-02-28 23:47 -------- d-----w- c:\documents and settings\krotos\Local Settings\Application Data\Adobe
2010-02-27 05:23 . 2010-02-27 05:23 4 ----a-w- c:\windows\system32\proc-1461555143.bin
2010-02-25 01:36 . 2010-02-25 01:38 -------- d-----w- c:\program files\Common Files\Adobe
2010-02-25 01:21 . 2010-02-25 01:16 38784 ----a-w- c:\documents and settings\Default User\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-02-25 01:21 . 2010-02-25 01:21 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-02-24 22:59 . 2010-03-08 20:09 -------- d-----w- c:\program files\Pity 2009
2010-02-24 08:51 . 2008-04-14 12:00 26624 ----a-w- c:\documents and settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2010-02-22 19:13 . 2010-02-22 19:13 -------- d-----w- C:\New Folder
2010-02-18 10:51 . 2009-08-04 13:54 2145280 ------w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-02-18 10:51 . 2009-08-04 13:56 2189312 ------w- c:\windows\system32\dllcache\ntoskrnl.exe
2010-02-18 10:51 . 2009-08-04 13:17 2023936 ------w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-02-18 02:16 . 2010-02-18 02:16 -------- d-----w- c:\program files\Casino
2010-02-18 00:41 . 2010-02-18 00:41 -------- d-----w- c:\documents and settings\krotos\Gadu-Gadu
2010-02-18 00:35 . 2010-02-18 00:35 79488 ----a-w- c:\documents and settings\krotos\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-02-17 22:47 . 2010-02-17 22:48 -------- d-----w- c:\documents and settings\krotos\Application Data\Winamp
2010-02-17 21:35 . 2010-02-17 21:37 -------- d-----w- c:\documents and settings\mama\Application Data\GanymedeNet
2010-02-16 22:20 . 2009-10-21 05:38 75776 ------w- c:\windows\system32\dllcache\strmfilt.dll
2010-02-16 22:20 . 2009-10-21 05:38 25088 ------w- c:\windows\system32\dllcache\httpapi.dll
2010-02-16 22:20 . 2009-10-20 16:20 265728 ------w- c:\windows\system32\dllcache\http.sys
2010-02-16 22:20 . 2009-08-25 09:27 354816 ------w- c:\windows\system32\dllcache\winhttp.dll
2010-02-16 13:53 . 2010-02-16 13:56 -------- d-----w- C:\mama mp3
2010-02-16 13:49 . 2010-02-16 13:49 152576 ----a-w- c:\documents and settings\mama\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2010-02-16 13:49 . 2010-02-16 13:49 79488 ----a-w- c:\documents and settings\mama\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-02-16 13:45 . 2010-02-19 01:11 -------- d-----w- c:\documents and settings\mama\Gadu-Gadu
2010-02-16 13:45 . 2010-02-16 13:45 -------- d-----w- c:\program files\Gadu-Gadu
2010-02-16 13:42 . 2010-02-16 13:42 -------- d-----w- c:\documents and settings\mama\Local Settings\Application Data\Mozilla
2010-02-16 13:40 . 2010-02-16 00:36 -------- d-sh--w- c:\documents and settings\mama\IETldCache
2010-02-16 13:40 . 2010-02-16 13:45 -------- d-----w- c:\documents and settings\mama
2010-02-16 03:14 . 2010-03-07 20:46 -------- d-----w- c:\program files\Ganymede
2010-02-16 02:44 . 2010-02-16 02:44 -------- d-----w- c:\documents and settings\Guest\Local Settings\Application Data\Mozilla
2010-02-16 02:30 . 2010-02-16 02:30 -------- d-----w- c:\windows\ie8updates
2010-02-16 02:30 . 2010-02-25 10:30 -------- d--h--w- c:\windows\$hf_mig$
2010-02-16 01:39 . 2010-03-12 13:56 1744 ----a-w- c:\windows\system32\d3d9caps.dat
2010-02-16 01:39 . 2010-02-16 01:39 -------- d-----w- c:\windows\Sun
2010-02-16 01:29 . 2009-06-12 12:31 80896 ------w- c:\windows\system32\dllcache\tlntsess.exe
2010-02-16 01:29 . 2009-06-12 12:31 76288 ------w- c:\windows\system32\dllcache\telnet.exe
2010-02-16 01:29 . 2009-10-12 13:28 79872 ------w- c:\windows\system32\dllcache\raschap.dll
2010-02-16 01:29 . 2009-07-17 16:22 1435648 ------w- c:\windows\system32\dllcache\query.dll
2010-02-16 01:28 . 2009-12-14 07:08 33280 ------w- c:\windows\system32\dllcache\csrsrv.dll
2010-02-16 01:28 . 2009-12-08 09:01 474112 ------w- c:\windows\system32\dllcache\shlwapi.dll
2010-02-16 01:28 . 2009-06-10 06:17 134144 ------w- c:\windows\system32\dllcache\wkssvc.dll
2010-02-16 01:28 . 2009-08-26 08:03 247326 ------w- c:\windows\system32\dllcache\strmdll.dll
2010-02-16 01:28 . 2009-09-04 21:03 58880 ------w- c:\windows\system32\dllcache\msasn1.dll
2010-02-16 01:28 . 2009-11-27 17:23 1291776 ------w- c:\windows\system32\dllcache\quartz.dll
2010-02-16 01:28 . 2009-11-27 17:23 17920 ------w- c:\windows\system32\dllcache\msyuv.dll
2010-02-16 01:28 . 2009-07-17 19:01 58880 ------w- c:\windows\system32\dllcache\atl.dll
2010-02-16 01:28 . 2009-10-13 10:38 270336 ------w- c:\windows\system32\dllcache\oakley.dll
2010-02-16 01:27 . 2009-11-27 16:07 8704 ------w- c:\windows\system32\dllcache\tsbyuv.dll
2010-02-16 01:27 . 2009-11-27 16:07 28672 ------w- c:\windows\system32\dllcache\msvidc32.dll
2010-02-16 01:27 . 2009-11-27 16:07 84992 ------w- c:\windows\system32\dllcache\avifil32.dll
2010-02-16 01:27 . 2009-11-27 16:07 48128 ------w- c:\windows\system32\dllcache\iyuv_32.dll
2010-02-16 01:27 . 2009-11-27 16:07 11264 ------w- c:\windows\system32\dllcache\msrle32.dll
2010-02-16 01:27 . 2009-08-05 09:01 204800 ------w- c:\windows\system32\dllcache\mswebdvd.dll
2010-02-16 01:27 . 2009-09-11 14:13 136704 ------w- c:\windows\system32\dllcache\msv1_0.dll
2010-02-16 01:27 . 2009-06-25 08:41 56832 ------w- c:\windows\system32\dllcache\secur32.dll
2010-02-16 01:27 . 2009-06-25 08:41 54272 ------w- c:\windows\system32\dllcache\wdigest.dll
2010-02-16 01:27 . 2009-06-24 10:28 92928 ------w- c:\windows\system32\dllcache\ksecdd.sys
2010-02-16 01:27 . 2009-06-25 08:41 147456 ------w- c:\windows\system32\dllcache\schannel.dll
2010-02-16 01:27 . 2009-06-25 08:41 301568 ------w- c:\windows\system32\dllcache\kerberos.dll
2010-02-16 01:23 . 2010-01-01 07:58 353792 ------w- c:\windows\system32\dllcache\srv.sys
2010-02-16 01:21 . 2010-02-16 01:21 0 ----a-w- c:\windows\nsreg.dat
2010-02-16 01:21 . 2010-02-16 01:21 -------- d-----w- c:\documents and settings\krotos\Local Settings\Application Data\Mozilla
2010-02-16 01:17 . 2009-11-21 15:51 471552 ------w- c:\windows\system32\dllcache\aclayers.dll
2010-02-16 01:13 . 2009-10-15 16:39 81920 ------w- c:\windows\system32\dllcache\fontsub.dll
2010-02-16 01:13 . 2009-10-15 16:39 119808 ------w- c:\windows\system32\dllcache\t2embed.dll
2010-02-16 01:12 . 2009-06-21 21:49 153088 ------w- c:\windows\system32\dllcache\triedit.dll
2010-02-16 01:12 . 2009-12-04 17:25 456832 ------w- c:\windows\system32\dllcache\mrxsmb.sys
2010-02-16 01:10 . 2009-07-31 04:24 1447424 ------w- c:\windows\system32\dllcache\msxml6.dll
2010-02-16 01:10 . 2009-07-31 04:24 1172480 ------w- c:\windows\system32\dllcache\msxml3.dll
2010-02-16 01:08 . 2010-02-16 00:36 -------- d-sh--w- c:\documents and settings\krotos\IETldCache
2010-02-16 01:03 . 2009-12-09 05:53 726528 ------w- c:\windows\system32\dllcache\jscript.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-12 12:38 . 2010-02-16 13:51 -------- d-----w- c:\documents and settings\mama\Application Data\Winamp
2010-02-27 01:41 . 2010-02-16 00:48 94248 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-02-26 01:35 . 2010-02-16 00:34 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-02-16 13:51 . 2010-02-16 13:51 -------- d-----w- c:\program files\Winamp
2010-02-16 13:51 . 2010-02-16 13:51 -------- d-----w- c:\program files\Winamp Detect
2010-02-16 13:49 . 2010-02-16 00:54 -------- d-----w- c:\program files\Java
2010-02-16 02:53 . 2010-02-16 02:53 1744 ----a-w- c:\documents and settings\Guest\Local Settings\Application Data\d3d9caps.tmp
2010-02-16 00:56 . 2010-02-16 00:55 -------- d-----w- c:\program files\Unlocker
2010-02-16 00:56 . 2010-02-16 00:56 -------- d-----w- c:\program files\MediaLooks
2010-02-16 00:56 . 2010-02-16 00:56 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-02-16 00:56 . 2010-02-16 00:56 -------- d-----w- c:\program files\QuickTime Alternative
2010-02-16 00:56 . 2010-02-16 00:55 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-02-16 00:55 . 2010-02-16 00:55 -------- d-----w- c:\program files\7-Zip
2010-02-16 00:55 . 2010-02-16 00:55 -------- d-----w- c:\program files\Foxit Software
2010-02-16 00:55 . 2010-02-16 00:55 -------- d-----w- c:\program files\UPHClean
2010-02-16 00:55 . 2010-02-16 00:55 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2010-02-16 00:47 . 2010-02-16 00:47 -------- d-----w- c:\program files\MSBuild
2010-02-16 00:46 . 2010-02-16 00:46 -------- d-----w- c:\program files\Reference Assemblies
2010-02-16 00:33 . 2010-02-16 00:33 -------- d-----w- c:\program files\Windows Media Connect 2
2010-02-16 00:30 . 2010-02-16 00:30 21640 ----a-w- c:\windows\system32\emptyregdb.dat
2010-02-16 00:27 . 2010-02-16 00:27 -------- d-----w- c:\program files\MSXML 4.0
2010-02-16 00:26 . 2010-02-16 00:26 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-08 14:13 . 2010-01-08 14:13 33096 ----a-w- c:\windows\system32\drivers\epfwndis.sys
2010-01-01 07:58 . 2009-07-19 16:02 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-21 19:09 . 2009-07-19 16:02 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-18 21:02 . 2009-12-18 21:02 135048 ----a-w- c:\windows\system32\drivers\epfw.sys
2009-12-14 07:08 . 2008-04-14 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2008-07-02 16:00 . 2008-07-02 16:00 3929 ----a-w- c:\program files\readme.txt
.
------- Sigcheck -------
[-] 2009-07-19 . BA8C046D98345129723E6BCAA1E8AB99 . 361600 . . [5.1.2600.5649] . . c:\windows\system32\drivers\tcpip.sys
c:\windows\System32\wscntfy.exe ... is missing !!
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}]
2008-03-04 19:44 1470488 ----a-w- c:\program files\MyPlayCity\tbMyPl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}"= "c:\program files\MyPlayCity\tbMyPl.dll" [2008-03-04 1470488]
[HKEY_CLASSES_ROOT\clsid\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeUpdater6"="c:\program files\Common Files\Adobe\Updater6\Adobe_Updater.exe" [2009-01-08 2521464]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"CoolSwitch"="c:\windows\system32\taskswitch.exe" [2002-03-19 45632]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-12-18 39424]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-11-16 2054360]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2009-07-19 128512]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"MaxRecentDocs"= 18 (0x12)
"NoSMConfigurePrograms"= 1 (0x1)
"NoRecentDocsNetHood"= 1 (0x1)
"MemCheckBoxInRunDlg"= 1 (0x1)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 09:03 108792]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [16.11.2009 09:04 735960]
--- Other Services/Drivers In Memory ---
*NewlyCreated* - EAMON
*NewlyCreated* - EHDRV
*NewlyCreated* - EKRN
*NewlyCreated* - EPFW
*NewlyCreated* - EPFWTDI
*Deregistered* - uphcleanhlp
.
Contents of the 'Scheduled Tasks' folder
2010-03-13 c:\windows\Tasks\User_Feed_Synchronization-{02E8DA2F-C048-41CF-AA41-9CDB74E5CBEF}.job
- c:\windows\system32\msfeedssync.exe [2009-07-19 16:06]
2010-03-13 c:\windows\Tasks\User_Feed_Synchronization-{1D523BA2-A781-4711-921B-907F29BC8FB8}.job
- c:\windows\system32\msfeedssync.exe [2009-07-19 16:06]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
DPF: {2A781DED-4153-C22D-9812-CEA98A32981C} - hxxp://cached.gamedesire.com/g_bin/pl/cardsmakao_2_0_0_33.cab
FF - ProfilePath - c:\documents and settings\mama\Application Data\Mozilla\Firefox\Profiles\3c35w48m.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.onet.pl/
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npganymedenet.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npwachk.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-12 22:43
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2010-03-12 22:45:59
ComboFix-quarantined-files.txt 2010-03-13 04:45
Pre-Run: 13 053 521 920 bytes free
Post-Run: 13 047 590 912 bytes free
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
- - End Of File - - AB6092A261B1D24C8EBC3E2F81759FA0
