Hey John
Here is the comboxfix.exe
ComboFix 11-03-22.09 - Chris 24/03/2011 0:02.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.61.1033.18.3066.1856 [GMT 11:00]
Running from: D:\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
D:\resycled
.
.
((((((((((((((((((((((((( Files Created from 2011-02-23 to 2011-03-23 )))))))))))))))))))))))))))))))
.
.
2011-03-23 13:10 . 2011-03-23 13:10 -------- d-----w- c:\users\Joel\AppData\Local\temp
2011-03-23 13:10 . 2011-03-23 13:11 -------- d-----w- c:\users\Chris\AppData\Local\temp
2011-03-23 13:10 . 2011-03-23 13:10 -------- d-----w- c:\users\Random\AppData\Local\temp
2011-03-23 13:10 . 2011-03-23 13:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-03-23 12:32 . 2011-02-11 06:54 5943120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D5B1C68D-887E-4D7D-8D89-666257EF6FD7}\mpengine.dll
2011-03-22 16:54 . 2011-03-22 16:54 388096 ----a-r- c:\users\Chris\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-03-22 16:54 . 2011-03-22 16:54 -------- d-----w- c:\program files\Trend Micro
2011-03-22 16:46 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{25B833FF-11A4-4BD1-909F-1ED3A3F844A2}\mpengine.dll
2011-03-22 16:46 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{C78B4F74-66B4-44EF-A619-99B1AE2F775D}\mpengine.dll
2011-03-22 16:45 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{345E094A-A19D-4FAE-BA5A-0D7FA9638A7E}\mpengine.dll
2011-03-22 16:45 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{7122D0CE-47AE-4DD6-BD03-2D7683EBE61C}\mpengine.dll
2011-03-22 15:43 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{67666841-20E2-48B3-A9D3-079BC233FE99}\mpengine.dll
2011-03-22 15:43 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{2847514D-EA41-4FD9-A158-C287B4735A24}\mpengine.dll
2011-03-22 15:42 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{2B388CD7-78FA-4C5C-98D1-DD117E633BF2}\mpengine.dll
2011-03-22 15:42 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{2BB0916A-E40D-4E85-937D-54DFA7352D8C}\mpengine.dll
2011-03-22 15:20 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{7AFE87C5-A3FB-4752-AC73-43310A647F4F}\mpengine.dll
2011-03-22 15:19 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{159BB9B4-FA9A-4169-92B5-23BFAA932946}\mpengine.dll
2011-03-22 15:18 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{8D39032B-7E46-43A1-AF1C-A0C3AF47EF86}\mpengine.dll
2011-03-22 15:18 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{CCE68094-168A-47A0-9BBF-5440C3C51837}\mpengine.dll
2011-03-22 15:07 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{E8D8073E-6A17-49C7-A0A8-026CB7199D5F}\mpengine.dll
2011-03-22 15:07 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{B9B43537-F335-4A40-A8DA-FF39188AFA82}\mpengine.dll
2011-03-22 15:07 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{1783EB2B-E627-47EC-B27B-10B1F12A6A2E}\mpengine.dll
2011-03-22 15:06 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{54FF20B5-BF4C-4256-9754-AD41F05E4EF2}\mpengine.dll
2011-03-19 07:14 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{5CD76324-D24C-425E-8660-C429468663A1}\mpengine.dll
2011-03-19 07:13 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{C7D5073C-2257-482A-8292-01E4DCC62B5E}\mpengine.dll
2011-03-19 07:13 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{D8B92366-31CB-4A32-81E0-396FC16DA6AB}\mpengine.dll
2011-03-19 07:13 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{05DDA942-C128-44CD-AFAC-140F6CE18693}\mpengine.dll
2011-03-17 07:53 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{1B22B66B-EA56-433B-B1A4-1827503761E2}\mpengine.dll
2011-03-17 07:53 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{1AFA4F9F-B832-415E-B0BC-61E7A0AD6319}\mpengine.dll
2011-03-17 07:53 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{185E9F8F-3934-4491-A04A-F05A8B6BF15B}\mpengine.dll
2011-03-17 07:53 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{EE6DB036-7E28-456D-8073-717FACBA62F0}\mpengine.dll
2011-03-16 16:18 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{744E665B-C796-4880-A90F-36FD0341A9EA}\mpengine.dll
2011-03-16 16:18 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{75A05A5D-965A-4AD1-A390-F80664AC7D31}\mpengine.dll
2011-03-16 16:18 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{D0393250-3C80-4671-B709-D6E243AD71DA}\mpengine.dll
2011-03-16 16:18 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{A0B2084E-FC45-49F8-935F-2E0641935643}\mpengine.dll
2011-03-16 11:55 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{BD911DBF-172E-4AB9-917D-CA33756266FE}\mpengine.dll
2011-03-16 11:55 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{C4A8C240-F226-4CB3-AB4E-F82F912C5486}\mpengine.dll
2011-03-16 11:55 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{655D8C9A-7DD4-4D84-8C56-630BD8085691}\mpengine.dll
2011-03-16 11:55 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{D75B7FC2-B0B3-4821-B08F-1113CE12C369}\mpengine.dll
2011-03-10 08:15 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{995965E6-5359-43C5-9638-5D04842F1239}\mpengine.dll
2011-03-10 08:14 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{29F94A09-C1F5-4A80-BF76-EC8C05D2C7D0}\mpengine.dll
2011-03-10 08:14 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{88F08254-1A4C-475C-92A0-FA903FF01BDF}\mpengine.dll
2011-03-10 08:14 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{81B3E228-F5A9-4B19-8020-5E983C59905F}\mpengine.dll
2011-03-09 16:22 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{2B6C0FDB-99A6-494E-B324-E1124B1E27FE}\mpengine.dll
2011-03-09 16:22 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{3EA60FE9-EFBC-44B3-BFDD-7D7289194FB5}\mpengine.dll
2011-03-09 16:22 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{A273F378-3162-4FAD-BB62-CB4A056CF178}\mpengine.dll
2011-03-09 16:22 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{C7F5424B-6AC1-45F8-91C2-5A7935F86369}\mpengine.dll
2011-03-09 01:49 . 2010-12-29 17:41 323072 ----a-w- c:\windows\system32\sbe.dll
2011-03-09 01:49 . 2010-12-29 17:41 153088 ----a-w- c:\windows\system32\sbeio.dll
2011-03-09 01:49 . 2010-12-29 17:41 429056 ----a-w- c:\windows\system32\EncDec.dll
2011-03-09 01:49 . 2010-12-29 17:39 177664 ----a-w- c:\windows\system32\mpg2splt.ax
2011-03-09 01:48 . 2010-12-17 16:43 2067456 ----a-w- c:\windows\system32\mstscax.dll
2011-03-09 01:48 . 2010-12-17 15:06 677888 ----a-w- c:\windows\system32\mstsc.exe
2011-03-03 03:22 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{04B5C4A1-BEAE-48BC-ABDE-4B4550A14A83}\mpengine.dll
2011-03-03 03:22 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{07AD9627-680B-4042-B1AA-52F50715F029}\mpengine.dll
2011-03-03 03:22 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{00E72D2F-012D-425D-8EF5-3547F5A8C174}\mpengine.dll
2011-03-03 03:22 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{01321FC5-790D-4372-B9C4-51E58B82ED8E}\mpengine.dll
2011-03-02 12:00 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{4EABD2EF-221C-4B3C-8E56-B141B65FFC83}\mpengine.dll
2011-03-02 11:59 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{9F039DA2-3825-4A51-852D-18FDA6A9F132}\mpengine.dll
2011-03-02 11:59 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{570CFD2F-6842-4EE5-B583-973A6C3EF08F}\mpengine.dll
2011-03-02 11:59 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{BB7014AC-C154-4E42-9BAF-D5CD0665F3F2}\mpengine.dll
2011-02-25 14:01 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{03ED94DB-A881-4C44-B339-0E71355B603D}\mpengine.dll
2011-02-25 14:01 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{9A8C16E6-BDE2-47BF-8815-09537F0DF289}\mpengine.dll
2011-02-25 14:01 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{73BD216C-D303-4DEF-9150-255023AFC185}\mpengine.dll
2011-02-25 14:00 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{C72E0C2D-C3DE-4912-A6EC-EA6C5A3E744B}\mpengine.dll
2011-02-24 11:46 . 2011-02-24 14:16 -------- d--h--w- c:\users\Chris\AppData\Roaming\vlc
2011-02-24 11:45 . 2011-02-24 11:45 -------- d-----w- c:\program files\VideoLAN
2011-02-24 02:53 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{6BE800D1-DFEA-4E7C-913C-396D9A0455ED}\mpengine.dll
2011-02-24 02:53 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{9A22F591-90A1-48A5-9F50-01BB489C3B1B}\mpengine.dll
2011-02-24 02:53 . 2007-02-01 06:26 2443144 ------w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{7099BF90-7237-4B03-A93C-E5DCEF57229A}\mpengine.dll
2011-02-24 02:53 . 2007-02-01 06:26 2443144 ----a-w- c:\programdata\Microsoft\OneCare Protection\Definition Updates\{E32F61B9-3A37-4690-8DDD-B80DDC2AF75B}\mpengine.dll
2011-02-23 16:02 . 2009-10-09 21:56 2048 ----a-w- c:\windows\system32\winrsmgr.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-02 06:11 . 2009-10-02 15:59 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-08 07:50 . 2011-02-10 16:04 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-01-08 05:57 . 2011-02-10 16:04 292352 ----a-w- c:\windows\system32\atmfd.dll
2010-12-31 13:25 . 2011-02-10 16:24 2038784 ----a-w- c:\windows\system32\win32k.sys
2010-12-28 14:57 . 2011-01-12 14:37 409600 ----a-w- c:\windows\system32\odbc32.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7c5c0f58-e061-457d-9033-77307f5ed00c}]
2008-05-20 14:43 1526296 ----a-w- c:\program files\TorrentMan\tbTorr.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{7c5c0f58-e061-457d-9033-77307f5ed00c}"= "c:\program files\TorrentMan\tbTorr.dll" [2008-05-20 1526296]
.
[HKEY_CLASSES_ROOT\clsid\{7c5c0f58-e061-457d-9033-77307f5ed00c}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{7C5C0F58-E061-457D-9033-77307F5ED00C}"= "c:\program files\TorrentMan\tbTorr.dll" [2008-05-20 1526296]
.
[HKEY_CLASSES_ROOT\clsid\{7c5c0f58-e061-457d-9033-77307f5ed00c}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IconOvrly1]
@="{A4EEBF66-92EB-4F2A-9F1E-2F6D14B30DA6}"
[HKEY_CLASSES_ROOT\CLSID\{A4EEBF66-92EB-4F2A-9F1E-2F6D14B30DA6}]
2008-07-25 04:41 118784 ----a-w- c:\program files\TrueSuite Access Manager\IconOvrly.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2008-01-21 2153472]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-06 39408]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
"AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2008-09-26 2356088]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NDSTray.exe"="NDSTray.exe" [BU]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-12-15 184320]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2008-04-29 417792]
"HDMICtrlMan"="c:\program files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe" [2008-04-26 716800]
"OneCareUI"="c:\program files\Microsoft Windows OneCare Live\winssnotify.exe" [2007-09-30 66600]
"FingerPrintNotifer"="c:\program files\TrueSuite Access Manager\FpNotifier.exe" [2008-09-28 704512]
"UsbMonitor"="c:\program files\TrueSuite Access Manager\usbnotify.exe" [2008-07-25 94208]
"PwdBank"="c:\program files\TrueSuite Access Manager\PwdBank.exe" [2008-09-03 3152384]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-06-30 1447168]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"="oobefldr.dll" [2008-01-21 2153472]
"TOSCDSPD"="c:\program files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2008-04-24 430080]
.
c:\users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-9-18 113664]
Patch.cmd [2008-7-20 9615]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
2008-09-11 11:14 29744 ----a-w- c:\program files\Google\Google Desktop Search\GoogleDesktop.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-12-13 06:16 421160 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2009-01-05 17:37 1410296 ---ha-w- c:\program files\Steam\Steam.exe
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\magix\Common\Database\bin\fbserver.exe [2005-11-17 1527900]
R3 GPU-Z;GPU-Z;c:\users\Joel\AppData\Local\Temp\GPU-Z.sys [x]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 Nlaceten;Nlaceten; [x]
S0 AlfaFF;AlfaFF mini-filter driver;c:\windows\system32\Drivers\AlfaFF.sys [2008-07-25 42608]
S1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2008-06-30 34312]
S2 Authentec memory manager;Authentec memory manager service;c:\windows\system32\TAMSvr.exe [2008-09-01 49152]
S2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2008-04-17 40960]
S2 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2007-12-20 468224]
S2 OpenLibSys;OpenLibSys;c:\program files\NXP\FM Radio\OpenLibSys.sys [2007-10-19 14672]
S2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service;c:\program files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-04 126976]
S3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752]
S3 O2MDRDR;O2MDRDR;c:\windows\system32\DRIVERS\o2media.sys [2008-04-15 51160]
S3 QIOMem;Generic IO & Memory Access;c:\windows\system32\DRIVERS\QIOMem.sys [2007-04-10 8192]
S3 SmartFaceVWatchSrv;SmartFaceVWatchSrv;c:\program files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe [2008-04-25 73728]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
.
Contents of the 'Scheduled Tasks' folder
.
2011-03-23 c:\windows\Tasks\User_Feed_Synchronization-{6C6B2973-2FCD-4930-A446-57CDBB80F5A5}.job
- c:\windows\system32\msfeedssync.exe [2008-01-21 02:24]
.
.
------- Supplementary Scan -------
.
mStart Page = hxxp://au.yahoo.com
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
TCP: {411AF379-4033-4CD0-B11D-CCA9967E933B} = 10.0.0.138
FF - ProfilePath -
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
HKCU-Run-TOSCDSPD - TOSCDSPD.EXE
HKLM-Run-cfFncEnabler.exe - cfFncEnabler.exe
HKLM-Run-ITSecMng - %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
HKLM-Run-TPwrMain - %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
HKLM-Run-HSON - %ProgramFiles%\TOSHIBA\TBS\HSON.exe
HKLM-Run-SmoothView - %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
HKLM-Run-00TCrdMain - %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
MSConfigStartUp-AVG8_TRAY - c:\progra~1\AVG\AVG8\avgtray.exe
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2011-03-24 00:11
Windows 6.0.6001 Service Pack 1 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'Explorer.exe'(4744)
c:\program files\ESET\ESET NOD32 Antivirus\eplgHooks.dll
c:\program files\TrueSuite Access Manager\IconOvrly.dll
.
Completion time: 2011-03-24 00:13:36
ComboFix-quarantined-files.txt 2011-03-23 13:13
.
Pre-Run: 13,967,032,320 bytes free
Post-Run: 18,154,258,432 bytes free
.
- - End Of File - - 892C76352EA75B6B91DB5FDD5B16F449