No Combofix.txt anywhere on the hard drive, I'm afraid.
Here's a fresh RSIT log.
Best Regards,
Tomas
---
Logfile of random's system information tool 1.04 (written by random/random)
Run by Per Andréasson at 2008-11-03 21:50:19
Microsoft Windows XP Professional Service Pack 2
System drive C: has 7 GB (18%) free of 38 GB
Total RAM: 1024 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:50, on 2008-11-03
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Windows Desktop Search\WindowsSearchIndexer.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Per Andréasson\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Per Andréasson.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about
:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live inloggningshjälpen - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Windows Skrivbordssökning.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder -
http://kiw.imgag.com/imgag/kiw/toolb...lerControl.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) -
http://appldnld.apple.com.edgesuite....x/qtplugin.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) -
http://game10.zylom.com/activex/zylomgamesplayer.cab
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 6496 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Kontrollera uppdateringar för Windows Live Toolbar.job
C:\WINDOWS\tasks\Norton Security Scan.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F85D76C-0569-466F-A488-493E6BD0E955}]
dsWebAllowBHO Class - C:\Program Files\Windows Desktop Search\dsWebAllow.dll [2006-03-26 265432]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live inloggningshjälpen - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2007-07-03 2403392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2008-10-22 737776]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2002-06-18 46592]
"CTHelper"=C:\WINDOWS\system32\CTHELPER.EXE [2003-08-28 24576]
"UpdReg"=C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]
"Jet Detection"=C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe [2001-11-29 28672]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2007-01-15 108160]
"D-Link AirPlus XtremeG"=C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe [2006-06-16 1323008]
"ANIWZCS2Service"=C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [2006-06-01 49152]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-02-25 385024]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-08-05 68856]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2006-02-28 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Windows Skrivbordssökning.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2006-03-13 233472]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoDrives"=
"NoDriveAutoRun"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Ground Control II\gcii.exe"="C:\Program Files\Ground Control II\gcii.exe:*:Enabled:Ground Control II"
"C:\Program Files\Microsoft Games\Freelancer\EXE\Freelancer.exe"="C:\Program Files\Microsoft Games\Freelancer\EXE\Freelancer.exe:*:Enabled:Freelancer"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\Microsoft Games\Age of Empires III\age3.exe"="C:\Program Files\Microsoft Games\Age of Empires III\age3.exe:*:Enabled:Age of Empires III"
"C:\Soldat\Soldat.exe"="C:\Soldat\Soldat.exe:*:Enabled:Soldat"
"C:\Documents and Settings\Per Andréasson\My Documents\Download\DE_Full-Client_Downloader.exe"="C:\Documents and Settings\Per Andréasson\My Documents\Download\DE_Full-Client_Downloader.exe:*:Enabled:Full-Client Downloader"
"C:\Program Files\Joymax\Darkeden\darkeden.exe"="C:\Program Files\Joymax\Darkeden\darkeden.exe:*:Enabled:DarkEden"
"C:\World of Warcraft\BackgroundDownloader.exe"="C:\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\VResLab\VResLab.exe"="C:\Program Files\VResLab\VResLab.exe:*:Enabled:VirusResponse Lab 2009"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
======List of files/folders created in the last 3 months======
2008-11-02 20:16:11 ----D---- C:\WINDOWS\temp
2008-11-02 20:12:49 ----A---- C:\WINDOWS\zip.exe
2008-11-02 20:12:49 ----A---- C:\WINDOWS\VFIND.exe
2008-11-02 20:12:49 ----A---- C:\WINDOWS\SWXCACLS.exe
2008-11-02 20:12:49 ----A---- C:\WINDOWS\SWSC.exe
2008-11-02 20:12:49 ----A---- C:\WINDOWS\SWREG.exe
2008-11-02 20:12:49 ----A---- C:\WINDOWS\sed.exe
2008-11-02 20:12:49 ----A---- C:\WINDOWS\NIRCMD.exe
2008-11-02 20:12:49 ----A---- C:\WINDOWS\grep.exe
2008-11-02 20:12:49 ----A---- C:\WINDOWS\fdsv.exe
2008-11-02 20:12:45 ----D---- C:\Qoobox
2008-11-02 20:12:45 ----D---- C:\ComboFix
2008-11-02 20:12:44 ----A---- C:\WINDOWS\system32\CF20183.exe
2008-11-02 18:52:50 ----D---- C:\Documents and Settings\Per Andréasson\Application Data\Malwarebytes
2008-11-02 18:52:45 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-11-02 18:52:45 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-10-30 11:47:07 ----D---- C:\rsit
2008-10-30 11:27:36 ----A---- C:\WINDOWS\gmer.ini
2008-10-30 11:27:35 ----A---- C:\WINDOWS\gmer_uninstall.cmd
2008-10-30 11:27:35 ----A---- C:\WINDOWS\gmer.exe
2008-10-30 11:27:35 ----A---- C:\WINDOWS\gmer.dll
2008-10-28 12:46:15 ----D---- C:\Program Files\Applications
2008-10-24 20:59:21 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-10-16 20:07:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-10-16 20:07:21 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-16 20:07:14 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-10-16 20
35 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-10-16 20
18 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-10-16 18:15:32 ----D---- C:\Program Files\Freelancer Companion
2008-10-16 12:35:45 ----D---- C:\Documents and Settings\All Users\Application Data\Blizzard
2008-10-06 10:31:57 ----D---- C:\WINDOWS\Ubisoft
2008-09-25 20:32:29 ----D---- C:\WINDOWS\system32\CatRoot_bak
2008-09-13 13:35:38 ----D---- C:\Logs
2008-09-12 21:01:51 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-12 18:09:31 ----D---- C:\World of Warcraft
2008-09-12 18:09:31 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2008-08-25 17:01:10 ----D---- C:\Program Files\Sun
2008-08-25 17:00:54 ----A---- C:\WINDOWS\system32\javaws.exe
2008-08-25 17:00:54 ----A---- C:\WINDOWS\system32\javaw.exe
2008-08-25 17:00:54 ----A---- C:\WINDOWS\system32\java.exe
2008-08-22 15:05:58 ----D---- C:\Program Files\Joymax
2008-08-22 06:40:03 ----D---- C:\Runescape
2008-08-15 20:02:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-08-15 20:02:52 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-08-15 20:02:46 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$
2008-08-15 20:02:41 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-08-15 20:02:36 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-08-15 20:02:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-08-15 20:01:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-08-08 11:42:08 ----D---- C:\Program Files\Three Rings Design
======List of files/folders modified in the last 3 months======
2008-11-03 21:43:19 ----D---- C:\WINDOWS
2008-11-02 20:36:49 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-11-02 20:15:13 ----D---- C:\WINDOWS\system32\drivers
2008-11-02 20:15:13 ----D---- C:\WINDOWS\system32
2008-11-02 20:15:11 ----D---- C:\WINDOWS\AppPatch
2008-11-02 20:15:11 ----D---- C:\Program Files\Common Files
2008-11-02 20:13:45 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-11-02 20:12:45 ----D---- C:\WINDOWS\Prefetch
2008-11-02 20:12:45 ----D---- C:\WINDOWS\ERDNT
2008-11-02 20:01:25 ----RD---- C:\Program Files
2008-11-02 19:09:43 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-10-26 10:23:56 ----SHD---- C:\WINDOWS\Installer
2008-10-26 10:23:52 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-10-26 10:22:47 ----D---- C:\WINDOWS\system32\CatRoot2
2008-10-26 09:35:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-24 20:59:28 ----HD---- C:\WINDOWS\inf
2008-10-24 20:59:24 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-10-24 20:58:49 ----HD---- C:\WINDOWS\$hf_mig$
2008-10-19 14:55:02 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2008-10-16 20:07:30 ----A---- C:\WINDOWS\imsins.BAK
2008-10-16 20:07:03 ----D---- C:\Program Files\Internet Explorer
2008-10-16 18:29:41 ----D---- C:\Program Files\EA GAMES
2008-10-16 18:29:40 ----HD---- C:\Program Files\InstallShield Installation Information
2008-10-15 17:57:55 ----A---- C:\WINDOWS\system32\netapi32.dll
2008-10-10 14:00:03 ----D---- C:\Program Files\Norton Security Scan
2008-10-03 18:41:15 ----A---- C:\WINDOWS\system32\ieframe.dll
2008-09-29 18:55:14 ----D---- C:\WINDOWS\system32\CatRoot
2008-09-25 18:40:12 ----D---- C:\WINDOWS\Help
2008-09-12 21:01:51 ----D---- C:\WINDOWS\WinSxS
2008-08-27 09:24:32 ----A---- C:\WINDOWS\system32\mshtml.dll
2008-08-26 08:24:31 ----A---- C:\WINDOWS\system32\wininet.dll
2008-08-26 08:24:31 ----A---- C:\WINDOWS\system32\webcheck.dll
2008-08-26 08:24:31 ----A---- C:\WINDOWS\system32\urlmon.dll
2008-08-26 08:24:30 ----A---- C:\WINDOWS\system32\url.dll
2008-08-26 08:24:30 ----A---- C:\WINDOWS\system32\pngfilt.dll
2008-08-26 08:24:30 ----A---- C:\WINDOWS\system32\occache.dll
2008-08-26 08:24:30 ----A---- C:\WINDOWS\system32\mstime.dll
2008-08-26 08:24:30 ----A---- C:\WINDOWS\system32\msrating.dll
2008-08-26 08:24:30 ----A---- C:\WINDOWS\system32\mshtmled.dll
2008-08-26 08:24:30 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2008-08-26 08:24:30 ----A---- C:\WINDOWS\system32\msfeeds.dll
2008-08-26 08:24:30 ----A---- C:\WINDOWS\system32\jsproxy.dll
2008-08-26 08:24:29 ----A---- C:\WINDOWS\system32\iertutil.dll
2008-08-26 08:24:29 ----A---- C:\WINDOWS\system32\iernonce.dll
2008-08-26 08:24:29 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2008-08-26 08:24:28 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2008-08-26 08:24:28 ----A---- C:\WINDOWS\system32\ieaksie.dll
2008-08-26 08:24:28 ----A---- C:\WINDOWS\system32\ieakeng.dll
2008-08-26 08:24:28 ----A---- C:\WINDOWS\system32\icardie.dll
2008-08-26 08:24:28 ----A---- C:\WINDOWS\system32\extmgr.dll
2008-08-26 08:24:28 ----A---- C:\WINDOWS\system32\dxtrans.dll
2008-08-26 08:24:28 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2008-08-26 08:24:28 ----A---- C:\WINDOWS\system32\advpack.dll
2008-08-25 17:00:53 ----D---- C:\Program Files\Java
2008-08-25 09:38:00 ----A---- C:\WINDOWS\system32\ieudinit.exe
2008-08-25 09:37:59 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2008-08-23 06:54:51 ----A---- C:\WINDOWS\system32\ieakui.dll
2008-08-22 15:00:31 ----D---- C:\Program Files\LEGO Company
2008-08-21 16:32:26 ----D---- C:\WINDOWS\system32\Restore
2008-08-15 20:02:54 ----D---- C:\Program Files\Messenger
2008-08-14 11:00:45 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2008-08-14 10:22:13 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2008-08-09 10:38:14 ----D---- C:\Documents and Settings\Per Andréasson\Application Data\bang
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2006-12-21 31560]
R1 AmdK7;AMD K7 Processor Driver; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2006-02-28 37376]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2007-01-15 43176]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2006-02-28 14848]
R2 ANIO;ANIO Service; \??\C:\WINDOWS\system32\ANIO.SYS []
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2006-12-21 94424]
R2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\drivers\PfModNT.sys []
R3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB); C:\WINDOWS\system32\DRIVERS\A3AB.sys [2006-05-11 472096]
R3 ALCXWDM;Service for Avance AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2002-07-23 659356]
R3 bcm4sbxp;ASUSTeK/Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2002-08-22 41600]
R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\System32\drivers\ctac32k.sys [2003-08-28 186068]
R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2003-09-19 496800]
R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\System32\drivers\ctprxy2k.sys [2003-08-28 6144]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\System32\drivers\ctsfm2k.sys [2003-08-28 136448]
R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\System32\drivers\emupia2k.sys [2003-08-28 145504]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2003-08-28 823456]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2006-02-28 9600]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2003-08-28 113840]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2006-02-28 31616]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2006-02-28 26624]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2006-02-28 57600]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2006-02-28 20480]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2006-02-28 60800]
S3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2007-01-15 23352]
S3 bDMusicb;bDMusicb; \??\C:\DOCUME~1\PERAND~1\LOCALS~1\Temp\bDMusicb.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\System32\drivers\ctdvda2k.sys []
S3 ctljystk;Creative SBLive! Gameport; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
S3 gmer;gmer; C:\WINDOWS\System32\DRIVERS\gmer.sys [2008-10-30 85969]
S3 hap16v2k;Creative P16V HAL Driver; C:\WINDOWS\System32\drivers\hap16v2k.sys [2003-08-28 135696]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2006-02-28 61824]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2007-01-15 59008]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2000-06-26 53520]
S2 ANIWZCSdService;ANIWZCSd Service; C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe [2005-10-19 49152]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2007-01-15 132736]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2007-01-15 255616]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2007-01-15 370304]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-07-03 138168]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader Service; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
-----------------EOF-----------------