Gå til innhold

[Løst] Hjelp til Combofix og Mbam logger.


Anbefalte innlegg

Skrevet

Har slitt med sinnsykt treig pc i det siste, og mye rar oppførsel; Plutselige endringer på skrivebordet, mister bakgrunnen og får bare svart bakgrunn, hender seg også at den endrer fargen på verktøylinja.

 

Mbam logg: Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

 

Databaseversjon: 5396

 

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

 

26.12.2010 04:53:28

mbam-log-2010-12-26 (04-53-28).txt

 

Skanntype: Hurtigsøk

Objekter skannet: 143472

Tid tilbakelagt: 3 minutt(er), 1 sekund(er)

 

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registernøkler infisert: 0

Registerverdier infisert: 0

Registerfiler infisert: 0

Mapper infisert: 0

Filer infisert 0

 

Minneprosesser infisert:

(Ingen skadelige objekter funnet)

 

Minnemoduler infisert:

(Ingen skadelige objekter funnet)

 

Registernøkler infisert:

(Ingen skadelige objekter funnet)

 

Registerverdier infisert:

(Ingen skadelige objekter funnet)

 

Registerfiler infisert:

(Ingen skadelige objekter funnet)

 

Mapper infisert:

(Ingen skadelige objekter funnet)

 

Filer infisert

(Ingen skadelige objekter funnet)

 

Combofix logg:

 

ComboFix 10-12-25.02 - Markus 26.12.2010 5:02.1.4 - x86

Microsoft Windows 7 Ultimate 6.1.7600.0.1252.47.1044.18.3327.2269 [GMT 1:00]

Kjører fra: c:\users\Markus\Desktop\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}

SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

 

((((((((((((((((((((((((((((((((((((((( Andre slettinger )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\Install.exe

c:\programdata\Microsoft\Windows\Start Menu\Programs\USB PC Camera

c:\programdata\Microsoft\Windows\Start Menu\Programs\USB PC Camera \AMCap.lnk

c:\programdata\Microsoft\Windows\Start Menu\Programs\USB PC Camera \Uninstall.lnk

 

.

((((((((((((((((((((((((((( Filer Opprettet Fra 2010-11-26 til 2010-12-26 )))))))))))))))))))))))))))))))))

.

 

2010-12-26 04:07 . 2010-12-26 04:08 -------- d-----w- c:\users\Markus\AppData\Local\temp

2010-12-26 04:07 . 2010-12-26 04:07 -------- d-----w- c:\users\Default\AppData\Local\temp

2010-12-26 03:49 . 2010-12-26 03:49 -------- d-----w- c:\users\Markus\AppData\Roaming\Malwarebytes

2010-12-26 03:48 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-12-26 03:48 . 2010-12-26 03:48 -------- d-----w- c:\programdata\Malwarebytes

2010-12-26 03:48 . 2010-12-26 03:48 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-12-26 03:48 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-12-25 20:15 . 2010-12-25 20:16 -------- d-----w- c:\program files\Dirt 2

2010-12-25 20:11 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll

2010-12-25 20:06 . 2010-12-25 20:06 -------- d-----w- c:\program files\OpenAL

2010-12-25 20:06 . 2009-07-13 18:04 839680 ----a-w- c:\windows\system32\mkl_vml_p4.dll

2010-12-25 20:06 . 2009-07-13 18:04 532480 ----a-w- c:\windows\system32\mkl_vml_p3.dll

2010-12-25 20:06 . 2009-07-13 18:04 512000 ----a-w- c:\windows\system32\mkl_vml_def.dll

2010-12-25 20:06 . 2009-10-16 10:19 872448 ----a-w- c:\windows\system32\rapture3d_oal.dll

2010-12-25 20:06 . 2009-07-13 18:04 3485696 ----a-w- c:\windows\system32\mkl_p4.dll

2010-12-25 20:06 . 2009-07-13 18:04 2793472 ----a-w- c:\windows\system32\mkl_p3.dll

2010-12-25 20:06 . 2009-07-13 18:04 2441216 ----a-w- c:\windows\system32\mkl_def.dll

2010-12-25 20:06 . 2009-07-13 18:04 2174976 ----a-w- c:\windows\system32\mkl_lapack32.dll

2010-12-25 20:06 . 2009-07-13 18:04 2125824 ----a-w- c:\windows\system32\mkl_lapack64.dll

2010-12-25 20:06 . 2009-07-13 18:04 184320 ----a-w- c:\windows\system32\libguide40.dll

2010-12-25 20:06 . 2010-12-25 20:06 -------- d-----w- c:\program files\BRS

2010-12-25 02:29 . 2010-12-25 02:29 -------- d-----w- c:\programdata\ATI

2010-12-25 02:26 . 2010-12-25 02:26 -------- d-----w- c:\program files\Common Files\ATI Technologies

2010-12-25 02:25 . 2010-11-18 10:27 450560 ----a-w- c:\windows\system32\ATIDEMGX.dll

2010-12-25 02:25 . 2010-12-25 02:27 -------- d-----w- c:\program files\ATI Technologies

2010-12-25 01:57 . 2010-12-25 01:57 -------- d-----w- C:\AMD

2010-12-24 01:58 . 2010-12-24 01:58 -------- d-----w- c:\users\Markus\AppData\Local\Codemasters

2010-12-24 01:46 . 2010-12-24 01:46 -------- d-----w- c:\program files\Codemasters

2010-12-24 01:46 . 2004-04-18 22:39 172032 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iuser.dll

2010-12-24 01:46 . 2004-04-18 22:42 733184 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iKernel.dll

2010-12-24 01:46 . 2004-04-18 22:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\ctor.dll

2010-12-24 01:46 . 2004-04-18 22:39 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iscript.dll

2010-12-24 01:46 . 2004-04-18 22:39 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\DotNetInstaller.exe

2010-12-24 01:45 . 2010-12-24 01:45 303236 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\setup.dll

2010-12-24 01:45 . 2010-12-24 01:45 180356 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\00\Intel32\iGdi.dll

2010-12-24 01:36 . 2010-12-24 01:36 -------- d-----w- c:\program files\Valve

2010-12-24 01:23 . 2010-12-26 03:40 -------- d-----w- c:\program files\Common Files\Steam

2010-12-24 01:23 . 2010-12-26 03:41 -------- d-----w- c:\program files\Steam

2010-12-24 01:10 . 2010-12-24 01:10 -------- d-----w- c:\programdata\UAB

2010-12-24 01:10 . 2010-12-24 01:10 -------- d-----w- c:\users\Markus\AppData\Local\PC_Drivers_Headquarters

2010-12-24 01:10 . 2010-12-24 01:10 -------- d-----w- c:\programdata\PC Drivers HeadQuarters

2010-12-24 01:09 . 2010-12-24 01:09 -------- d-----w- c:\program files\PC Drivers HeadQuarters

2010-12-24 01:05 . 2010-12-25 20:06 445016 ----a-w- c:\windows\system32\wrap_oal.dll

2010-12-24 01:05 . 2010-12-25 20:06 109144 ----a-w- c:\windows\system32\OpenAL32.dll

2010-12-24 01:03 . 2004-06-22 14:44 5632 ----a-w- c:\windows\system32\drivers\Entech64.sys

2010-12-24 01:03 . 2001-11-19 18:05 3972 ----a-w- c:\windows\system32\drivers\PciBus.sys

2010-12-24 01:03 . 2010-12-24 01:03 -------- d-----w- c:\windows\system32\Futuremark

2010-12-24 01:03 . 2004-10-25 19:02 21664 ----a-w- c:\windows\system32\drivers\Entech.sys

2010-12-24 01:03 . 2010-12-24 01:03 -------- d-----w- c:\program files\Futuremark

2010-12-24 01:03 . 2010-12-24 01:03 303236 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\setup.dll

2010-12-24 01:03 . 2010-12-24 01:03 180356 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iGdi.dll

2010-12-24 01:03 . 2005-03-22 16:50 733184 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll

2010-12-24 01:03 . 2004-07-15 23:20 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll

2010-12-24 01:03 . 2004-07-15 23:19 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll

2010-12-24 01:03 . 2004-07-15 23:18 172032 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll

2010-12-24 01:03 . 2004-07-15 23:18 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe

2010-12-24 00:54 . 2010-11-18 09:59 52736 ----a-w- c:\windows\system32\coinst.dll

2010-12-24 00:53 . 2010-12-25 02:22 -------- d-----w- c:\program files\ATI

2010-12-21 11:37 . 2010-12-21 11:37 -------- d-----w- c:\program files\iPod

2010-12-21 11:37 . 2010-12-21 11:37 -------- d-----w- c:\program files\iTunes

2010-12-21 11:33 . 2010-12-21 11:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll

2010-12-21 11:33 . 2010-12-21 11:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll

2010-12-21 11:33 . 2010-12-21 11:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll

2010-12-21 11:33 . 2010-12-21 11:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll

2010-12-21 11:33 . 2010-12-21 11:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll

2010-12-21 11:33 . 2010-12-21 11:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll

2010-12-21 11:33 . 2010-12-21 11:33 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll

2010-12-21 11:33 . 2010-12-21 11:33 -------- d-----w- c:\program files\QuickTime

2010-12-20 14:32 . 2010-12-20 14:32 -------- d-----w- c:\programdata\Razer

2010-12-20 14:32 . 2007-09-27 18:44 65536 ----a-w- c:\windows\system32\Lycosa.cpl

2010-12-13 11:50 . 2007-06-26 07:40 823296 ----a-w- c:\windows\j3dcore-d3d.dll

2010-12-13 11:50 . 2007-06-26 07:40 49152 ----a-w- c:\windows\j3dcore-ogl-chk.dll

2010-12-13 11:50 . 2007-06-26 07:40 40960 ----a-w- c:\windows\j3dcore-ogl-cg.dll

2010-12-13 11:50 . 2007-06-26 07:40 163840 ----a-w- c:\windows\j3dcore-ogl.dll

2010-12-13 11:50 . 2010-12-13 11:50 -------- d-----w- c:\users\Markus\AppData\Local\{3225C812-5FB8-41CE-B15F-997F80151000}

2010-12-12 02:30 . 2010-12-25 23:01 -------- d-----w- c:\users\Markus\AppData\Roaming\.minecraft

2010-12-06 20:24 . 2010-12-06 21:06 -------- d-----w- c:\users\Markus\AppData\Roaming\TS3Client

2010-12-06 20:23 . 2010-12-06 20:23 -------- d-----w- c:\program files\TeamSpeak 3 Client

2010-12-04 12:03 . 2010-12-04 12:04 -------- d-----w- c:\users\Markus\AppData\Roaming\mIRC

2010-12-04 12:03 . 2010-12-04 12:03 -------- d-----w- c:\program files\mIRC

2010-11-29 16:38 . 2010-11-29 16:38 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx

2010-11-29 16:38 . 2010-11-29 16:38 69632 ----a-w- c:\windows\system32\QuickTime.qts

2010-11-28 16:19 . 2010-11-28 16:19 -------- d-----w- c:\program files\Common Files\Java

2010-11-28 03:20 . 2010-11-12 17:53 472808 ----a-w- c:\windows\system32\deployJava1.dll

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-12-14 20:12 . 2010-11-09 21:58 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll

2010-12-14 20:12 . 2010-11-09 21:58 53632 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll

2010-12-14 20:12 . 2010-11-09 21:58 29568 ----a-w- c:\windows\system32\LMIport.dll

2010-12-14 20:12 . 2010-11-09 21:58 87424 ----a-w- c:\windows\system32\LMIinit.dll

2010-11-18 11:56 . 2010-11-18 11:56 6568960 ----a-w- c:\windows\system32\drivers\atikmdag.sys

2010-11-18 10:30 . 2010-11-18 10:30 143360 ----a-w- c:\windows\system32\atiapfxx.exe

2010-11-18 10:30 . 2010-11-18 10:30 547328 ----a-w- c:\windows\system32\aticfx32.dll

2010-11-18 10:29 . 2010-11-18 10:29 16283136 ----a-w- c:\windows\system32\atioglxx.dll

2010-11-18 10:27 . 2010-11-18 10:27 393216 ----a-w- c:\windows\system32\atieclxx.exe

2010-11-18 10:26 . 2010-11-18 10:26 176128 ----a-w- c:\windows\system32\atiesrxx.exe

2010-11-18 10:25 . 2010-11-18 10:25 159744 ----a-w- c:\windows\system32\atitmmxx.dll

2010-11-18 10:25 . 2010-11-18 10:25 356352 ----a-w- c:\windows\system32\atipdlxx.dll

2010-11-18 10:25 . 2010-11-18 10:25 278528 ----a-w- c:\windows\system32\Oemdspif.dll

2010-11-18 10:25 . 2010-11-18 10:25 15872 ----a-w- c:\windows\system32\atimuixx.dll

2010-11-18 10:25 . 2010-11-18 10:25 43520 ----a-w- c:\windows\system32\ati2edxx.dll

2010-11-18 10:22 . 2010-11-18 10:22 4061696 ----a-w- c:\windows\system32\atidxx32.dll

2010-11-18 10:06 . 2010-11-18 10:06 46080 ----a-w- c:\windows\system32\aticalrt.dll

2010-11-18 10:06 . 2010-11-18 10:06 44032 ----a-w- c:\windows\system32\aticalcl.dll

2010-11-18 10:04 . 2010-11-18 10:04 4120064 ----a-w- c:\windows\system32\atiumdag.dll

2010-11-18 10:04 . 2010-11-18 10:04 5438976 ----a-w- c:\windows\system32\aticaldd.dll

2010-11-18 09:52 . 2010-11-18 09:52 249856 ----a-w- c:\windows\system32\atiadlxx.dll

2010-11-18 09:51 . 2010-11-18 09:51 12800 ----a-w- c:\windows\system32\atiglpxx.dll

2010-11-18 09:51 . 2010-11-18 09:51 27136 ----a-w- c:\windows\system32\atigktxx.dll

2010-11-18 09:51 . 2010-11-18 09:51 229888 ----a-w- c:\windows\system32\drivers\atikmpag.sys

2010-11-18 09:50 . 2010-11-18 09:50 30720 ----a-w- c:\windows\system32\atiuxpag.dll

2010-11-18 09:50 . 2010-11-18 09:50 28672 ----a-w- c:\windows\system32\atiu9pag.dll

2010-11-18 09:50 . 2010-11-18 09:50 3462144 ----a-w- c:\windows\system32\atiumdva.dll

2010-11-18 09:48 . 2010-11-18 09:48 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll

2010-11-18 09:38 . 2010-11-18 09:38 52736 ----a-w- c:\windows\system32\atimpc32.dll

2010-11-18 09:38 . 2010-11-18 09:38 52736 ----a-w- c:\windows\system32\amdpcom32.dll

2010-09-28 14:44 . 2010-09-28 14:44 41984 ----a-w- c:\windows\system32\drivers\usbaapl.sys

2010-09-28 14:44 . 2010-09-28 14:44 4184352 ----a-w- c:\windows\system32\usbaaplrc.dll

2010-09-27 13:50 . 2010-11-09 21:58 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll.000.bak

.

 

(((((((((((((((((((((((((((((((( Oppstartspunkter I Registeret )))))))))))))))))))))))))))))))))))))))))))))

.

.

*Merk* tomme oppføringer & gyldige standardoppføringer vises ikke

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]

"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2010-03-09 26100520]

"Steam"="c:\program files\Steam\Steam.exe" [2010-12-26 1242448]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-02-02 36864]

"DeathAdder"="c:\program files\Razer\DeathAdder\razerhid.exe" [2009-12-15 244224]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-01-19 8452640]

"snpstd3"="c:\windows\vsnpstd3.exe" [2005-09-05 339968]

"FixCamera"="c:\windows\FixCamera.exe" [2007-02-12 20480]

"tsnp325"="c:\windows\tsnp325.exe" [2007-04-21 270336]

"snp325"="c:\windows\vsnp325.exe" [2007-05-10 835584]

"VoddlerNet Manager"="c:\program files\Voddler\service\VNetManager.exe" [2010-05-19 579784]

"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-09-21 47904]

"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-05-31 63048]

"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

"Lycosa"="c:\program files\Razer\Lycosa\razerhid.exe" [2007-11-20 147456]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]

"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-18 98304]

 

c:\users\Markus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

 

R3 SNP325;USB PC Camera (SNPSTD325);c:\windows\system32\DRIVERS\snp325.sys [2007-05-07 10343168]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-23 1343400]

S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-02-12 691696]

S1 aswSP;aswSP; [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-11-18 176128]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]

S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [2010-12-14 374152]

S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\RaInfo.sys [2010-05-31 12856]

S2 VoddlerNet;VoddlerNet;c:\program files\Voddler\service\voddler.exe [2010-05-19 873680]

S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-11-18 6568960]

S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-11-18 229888]

S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\l160x86.sys [2009-06-22 48128]

S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2010-09-24 102416]

S3 DAdderFltr;DeathAdder Mouse;c:\windows\system32\drivers\dadder.sys [2009-12-16 10752]

S3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\DRIVERS\ManyCam.sys [2008-01-14 21632]

 

.

.

------- Tilleggsskanning -------

.

uStart Page = hxxp://apps.facebook.com/cartown/?ref=bookmarks&count=0

uInternet Settings,ProxyOverride = *.local

.

.

--------------------- LÅSTE REGISTERNØKLER ---------------------

 

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

 

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

 

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

 

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

 

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

 

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

 

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

 

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Tidspunkt ferdig: 2010-12-26 05:09:17

ComboFix-quarantined-files.txt 2010-12-26 04:09

 

Pre-Run: 389 235 212 288 byte ledig

Post-Run: 389 827 145 728 byte ledig

 

- - End Of File - - 7F148846E39B12C0544956F61E1DB670

Videoannonse
Annonse
Skrevet

Hei,

du skriver at du sliter med diverse problemer.

Slik det kan se ut fra symtomene er det nok en trojansk hest løpsk.

 

SIden jeg ikke er i malware teamet til diskusjon.no, er jeg litt usikker på om jeg får lov til å svare deg.

 

Følg lenken i signaturen min, og instruksjonene!

Skrevet

@ Datasmurfen:

Det finnes ikke noe "Malware team".

Alle har lov til å svare, men da burde man i det minste vite hva man ber brukeren om og hva man diver med :)

 

~ Submit :xmas:

har ikke sett igjennom loggen siden jeg er borte og siter atm på verdens tregeste laptop :thumbdown:

  • 2 uker senere...

Opprett en konto eller logg inn for å kommentere

Du må være et medlem for å kunne skrive en kommentar

Opprett konto

Det er enkelt å melde seg inn for å starte en ny konto!

Start en konto

Logg inn

Har du allerede en konto? Logg inn her.

Logg inn nå
×
×
  • Opprett ny...