cambofix şu sonuçları verdi
ComboFix 09-05-04.A3 - ^^ali rıza^^ 05.05.2009 22:16.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1254.90.1055.18.1023.636 [GMT 3:00]
Running from: c:\documents and settings\^^ali rıza^^\Desktop\ComboFix.exe
AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated)
FW: ESET Kişisel güvenlik duvarı *enabled*
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2009-04-05 to 2009-05-05 )))))))))))))))))))))))))))))))
.
2009-05-05 19:03 . 2009-05-05 19:03 -------- d--h--r c:\documents and settings\^^ali rıza^^\Recent
2009-05-05 19:03 . 2009-05-05 19:03 -------- d--h--r c:\documents and settings\^^ali rıza^^\Recent
2009-05-05 19:02 . 2009-05-05 19:02 -------- d-----w c:\documents and settings\^^ali rıza^^\WINDOWS
2009-05-05 19:02 . 2009-05-05 19:02 -------- d-----w c:\documents and settings\^^ali rıza^^\WINDOWS
2009-05-05 19:02 . 2009-05-05 19:02 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\GameHouse
2009-05-05 18:57 . 2009-05-05 18:57 -------- d-----w c:\windows\Logs
2009-05-05 18:56 . 2009-05-05 18:56 -------- d-sh--w c:\windows\ftpcache
2009-05-05 18:56 . 2009-05-05 18:56 -------- d-----w c:\program files\DAEMON Tools Toolbar
2009-05-05 18:56 . 2009-05-05 18:56 -------- d-----w c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2009-05-05 18:49 . 2009-05-05 18:49 -------- d-----w c:\program files\MSXML 4.0
2009-05-05 18:45 . 2009-05-05 18:45 -------- d-----w c:\documents and settings\^ali rıza^
2009-05-05 18:45 . 2009-05-05 18:45 -------- d-----w c:\documents and settings\^ali rıza^\Belgelerim
2009-05-05 18:44 . 2009-05-05 18:44 -------- d-----w c:\program files\Microsoft
2009-05-05 18:44 . 2009-05-05 18:44 -------- d-----w c:\program files\Windows Live SkyDrive
2009-05-05 18:43 . 2009-05-05 18:43 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\GRETECH
2009-05-05 18:43 . 2009-05-05 18:43 -------- d-----w c:\documents and settings\All Users\Application Data\Readon
2009-05-05 18:43 . 2009-05-05 18:43 -------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-05-05 18:42 . 2009-05-05 18:43 -------- d-----w c:\documents and settings\^^ali rıza^^\Local Settings\Application Data\Readon_Technology
2009-05-05 17:15 . 2003-02-09 17:54 1150976 ----a-w c:\windows\system32\vfp8renu.dll
2009-05-05 17:15 . 2003-02-09 17:54 4292608 ----a-w c:\windows\system32\vfp8r.dll
2009-05-05 17:15 . 2003-02-09 16:50 536576 ----a-w c:\windows\system32\msvcr70d.dll
2009-05-05 17:15 . 2003-02-09 16:50 344064 ----a-w c:\windows\system32\msvcr70.dll
2009-05-05 17:15 . 2009-05-05 17:15 -------- d-----w c:\program files\teknosinav
2009-05-05 15:00 . 2009-05-05 18:12 -------- d-----w c:\program files\Ninja
2009-05-05 14:21 . 2009-05-05 19:02 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\Winamp
2009-05-03 13:10 . 2009-05-05 19:02 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\Winamp(2)
2009-05-03 12:35 . 2009-05-05 19:15 4194304 ----a-w c:\documents and settings\^^ali rıza^^\ntuser.dat
2009-05-03 12:35 . 2009-05-05 19:15 4194304 ----a-w c:\documents and settings\^^ali rıza^^\ntuser.dat
2009-05-02 15:24 . 1996-11-05 13:13 299008 ----a-w c:\windows\uninst.exe
2009-04-30 19:38 . 2009-05-05 14:48 -------- d-----w c:\documents and settings\^^ali rıza^^\DoctorWeb
2009-04-30 19:38 . 2009-05-05 14:48 -------- d-----w c:\documents and settings\^^ali rıza^^\DoctorWeb
2009-04-30 05:41 . 2009-04-30 05:41 -------- d-----w c:\windows\system32\msmq
2009-04-24 09:18 . 2009-04-24 09:18 -------- d-----w c:\documents and settings\^^ali rıza^^\Local Settings\Application Data\Activision
2009-04-24 09:17 . 2009-04-24 09:17 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\Leadertech
2009-04-24 09:14 . 2009-05-05 16:03 138464 ----a-w c:\windows\system32\drivers\PnkBstrK.sys
2009-04-24 09:14 . 2009-04-24 09:14 22328 ----a-w c:\documents and settings\^^ali rıza^^\Application Data\PnkBstrK.sys
2009-04-24 09:13 . 2009-05-05 16:02 111928 ----a-w c:\windows\system32\PnkBstrB.exe
2009-04-24 09:13 . 2009-04-24 09:13 66872 ----a-w c:\windows\system32\PnkBstrA.exe
2009-04-24 09:13 . 2009-04-24 09:13 682280 ----a-w c:\windows\system32\pbsvc.exe
2009-04-24 09:13 . 2009-04-24 09:13 -------- d-----w c:\windows\system32\LogFiles
2009-04-24 08:10 . 2009-05-05 18:56 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\LimeWire
2009-04-23 22:11 . 2006-06-29 10:07 14048 ------w c:\windows\system32\spmsg2.dll
2009-04-23 22:07 . 2009-05-05 18:31 -------- d-----w c:\windows\system32\XPSViewer
2009-04-23 22:07 . 2009-04-23 22:07 -------- d-----w c:\program files\MSBuild
2009-04-23 22:07 . 2009-04-23 22:07 -------- d-----w c:\program files\Reference Assemblies
2009-04-23 22:07 . 2008-07-06 12:06 117760 ------w c:\windows\system32\prntvpt.dll
2009-04-23 22:07 . 2008-07-06 12:06 89088 -c----w c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-04-23 22:07 . 2008-07-06 10:50 597504 -c----w c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-04-23 22:07 . 2008-07-06 12:06 575488 -c----w c:\windows\system32\dllcache\xpsshhdr.dll
2009-04-23 22:07 . 2008-07-06 12:06 575488 ------w c:\windows\system32\xpsshhdr.dll
2009-04-23 22:07 . 2008-07-06 12:06 1676288 -c----w c:\windows\system32\dllcache\xpssvcs.dll
2009-04-23 22:07 . 2008-07-06 12:06 1676288 ------w c:\windows\system32\xpssvcs.dll
2009-04-23 20:26 . 2009-05-05 18:45 -------- d-----w c:\program files\XP Codec Pack
2009-04-23 20:14 . 2009-04-23 20:14 -------- d-----w c:\documents and settings\LocalService\Local Settings\Application Data\ESET
2009-04-23 19:16 . 2009-04-23 19:16 -------- d-----w c:\documents and settings\^^ali rıza^^\Local Settings\Application Data\Supremus Corporation
2009-04-23 18:34 . 2009-05-05 18:36 -------- d-----w c:\program files\Hotspot Shield
2009-04-23 18:08 . 2009-04-23 18:08 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\Thinstall
2009-04-23 18:07 . 2009-04-23 18:07 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\KC Softwares
2009-04-23 18:00 . 2009-04-23 18:05 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\GlarySoft
2009-04-22 22:59 . 2009-05-05 19:09 -------- d-----w c:\documents and settings\^^ali rıza^^\Tracing
2009-04-22 22:59 . 2009-05-05 19:09 -------- d-----w c:\documents and settings\^^ali rıza^^\Tracing
2009-04-22 21:20 . 2009-04-22 21:20 -------- d-----w c:\documents and settings\^^ali rıza^^\Application Data\vlc
2009-04-22 20:32 . 2009-04-22 20:37 -------- d-----w c:\documents and settings\^^ali rıza^^\Contacts
2009-04-22 20:32 . 2009-04-22 20:37 -------- d-----w c:\documents and settings\^^ali rıza^^\Contacts
2009-04-22 20:08 . 2008-04-14 05:39 5504 -c--a-w c:\windows\system32\dllcache\intelide.sys
2009-04-22 20:08 . 2008-04-14 05:39 5504 ----a-w c:\windows\system32\drivers\intelide.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-05 19:02 . 2009-04-22 16:38 -------- d-----w c:\program files\Common Files\Adobe
2009-05-05 19:00 . 2009-04-22 16:27 -------- d--h--w c:\program files\InstallShield Installation Information
2009-05-05 18:45 . 2009-04-22 16:47 -------- d-----w c:\program files\ATI
2009-05-05 18:45 . 2009-04-22 17:40 -------- d-----w c:\program files\MSN Messenger
2009-05-05 18:44 . 2009-04-22 18:58 -------- d-----w c:\program files\Messenger Plus! Live
2009-05-05 18:44 . 2009-04-22 16:41 -------- d-----w c:\program files\a-squared Free
2009-05-05 18:37 . 2009-04-22 18:59 -------- d-----w c:\program files\MessengerDiscovery
2009-05-05 18:35 . 2009-04-22 19:16 -------- d-----w c:\program files\Spybot - Search & Destroy
2009-04-30 05:43 . 2009-04-22 16:57 -------- d-----w c:\program files\LimeWire
2009-04-28 19:22 . 2009-04-22 16:27 -------- d-----w c:\program files\Common Files\InstallShield
2009-04-24 10:48 . 2009-04-22 18:58 47416 ----a-w c:\documents and settings\^^ali rıza^^\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-04-24 10:35 . 2009-04-22 17:53 -------- d-----w c:\program files\MSECache
2009-04-24 07:50 . 2009-04-22 17:45 721904 ----a-w c:\windows\system32\drivers\sptd.sys
2009-04-23 22:16 . 2008-04-15 12:00 81266 ----a-w c:\windows\system32\perfc01F.dat
2009-04-23 22:16 . 2008-04-15 12:00 428400 ----a-w c:\windows\system32\perfh01F.dat
2009-04-22 21:33 . 2009-04-22 18:58 -------- d-----w c:\program files\Windows Live
2009-04-22 19:04 . 2009-04-22 19:04 -------- d-----w c:\program files\Common Files\Windows Live
2009-04-22 18:50 . 2009-04-22 18:50 0 ----a-w c:\windows\ativpsrm.bin
2009-04-22 18:36 . 2009-04-22 18:36 410984 ----a-w c:\windows\system32\deploytk.dll
2009-04-22 18:35 . 2009-04-22 18:35 -------- d-----w c:\program files\Java
2009-04-22 18:10 . 2009-04-22 18:10 -------- d-----w c:\program files\AC3Filter
2009-04-22 18:09 . 2009-04-22 18:09 -------- d-----w c:\program files\K-Lite Codec Pack
2009-04-22 18:08 . 2009-04-22 18:08 -------- d-----w c:\program files\Microsoft.NET
2009-04-22 18:04 . 2009-04-22 18:02 -------- d-----w c:\program files\Common Files\Nero
2009-04-22 17:55 . 2009-04-22 17:55 -------- d-----w c:\program files\IEPro
2009-04-22 17:52 . 2009-04-22 16:18 86327 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-04-22 17:38 . 2009-04-22 17:38 -------- d-----w c:\program files\HighMAT CD Writing Wizard
2009-04-22 17:13 . 2009-04-22 17:13 135 ----a-w c:\documents and settings\^^ali rıza^^\Local Settings\Application Data\fusioncache.dat
2009-04-22 17:03 . 2009-04-22 17:03 -------- d-----w c:\program files\IObit
2009-04-22 17:03 . 2009-04-22 17:03 -------- d-----w c:\program files\CCleaner
2009-04-22 17:02 . 2009-04-22 17:02 -------- d-----w c:\program files\HLPSOFT
2009-04-22 17:00 . 2009-04-22 17:00 -------- d-----w c:\program files\Glary Utilities
2009-04-22 16:58 . 2009-04-22 16:58 -------- d-----w c:\program files\SRS Labs
2009-04-22 16:53 . 2009-04-22 16:53 -------- d-----w c:\program files\Real Alternative
2009-04-22 16:53 . 2009-04-22 16:53 -------- d-----w c:\program files\GNU
2009-04-22 16:48 . 2009-04-22 16:48 -------- d-----w c:\program files\ESET
2009-04-22 16:47 . 2009-04-22 16:46 -------- d-----w c:\program files\ATI Technologies
2009-04-22 16:45 . 2009-04-22 16:45 2162 ----a-w c:\windows\system32\unins000.dat
2009-04-22 16:45 . 2009-04-22 16:45 728858 ----a-w c:\windows\system32\unins000.exe
2009-04-22 16:43 . 2009-04-22 16:43 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-04-22 16:40 . 2009-04-22 16:40 -------- d-----w c:\program files\Common Files\Adobe AIR
2009-04-22 16:34 . 2009-04-22 16:34 0 ----a-w c:\windows\nsreg.dat
2009-04-22 16:31 . 2009-04-22 16:31 -------- d-----w c:\program files\Internet keyboard driver
2009-04-22 16:28 . 2009-04-22 16:27 -------- d-----w c:\program files\Realtek
2009-04-22 16:27 . 2009-04-22 16:27 315392 ----a-w c:\windows\HideWin.exe
2009-04-22 16:26 . 2009-04-22 16:26 -------- d-----w c:\program files\Intel
2009-04-22 16:25 . 2009-04-22 16:25 16608 ----a-w c:\windows\gdrv.sys
2009-04-22 16:18 . 2009-04-22 16:18 -------- d-----w c:\program files\microsoft frontpage
2009-04-22 16:18 . 2008-04-15 12:00 67 --sha-w c:\windows\Fonts\desktop.ini
2009-04-22 16:15 . 2009-04-22 16:15 21736 ----a-w c:\windows\system32\emptyregdb.dat
2009-04-09 12:21 . 2009-04-09 12:21 55768 ----a-w c:\windows\system32\drivers\epfwtdi.sys
2009-04-09 12:21 . 2009-04-09 12:21 33096 ----a-w c:\windows\system32\drivers\epfwndis.sys
2009-04-09 12:21 . 2009-04-09 12:21 133000 ----a-w c:\windows\system32\drivers\epfw.sys
2009-04-09 12:18 . 2009-04-09 12:18 107256 ----a-w c:\windows\system32\drivers\ehdrv.sys
2009-04-09 12:10 . 2009-04-09 12:10 113960 ----a-w c:\windows\system32\drivers\eamon.sys
2009-04-06 12:32 . 2009-04-22 16:43 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-04-06 12:32 . 2009-04-22 16:43 15504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-04-03 18:18 . 2009-04-03 18:18 33256 ----a-w c:\windows\system32\drivers\HssDrv.sys
2009-03-30 17:01 . 2009-04-22 18:10 60273 ----a-w c:\windows\system32\pthreadGC2.dll
2009-03-19 15:08 . 2009-03-19 15:08 499712 ----a-w c:\windows\system32\msvcp71.dll
2009-03-19 15:08 . 2009-03-19 15:08 348160 ----a-w c:\windows\system32\msvcr71.dll
2009-03-06 14:20 . 2008-04-15 12:00 283136 ----a-w c:\windows\system32\pdh.dll
2009-03-03 00:05 . 2008-04-15 12:00 826368 ----a-w c:\windows\system32\wininet.dll
2009-02-25 22:58 . 2009-02-25 22:58 3565568 ----a-w c:\windows\system32\drivers\ati2mtag.sys
2009-02-25 21:42 . 2009-02-25 21:42 442368 ----a-w c:\windows\system32\ATIDEMGX.dll
2009-02-25 21:41 . 2009-02-25 21:41 325120 ----a-w c:\windows\system32\ati2dvag.dll
2009-02-25 21:30 . 2009-02-25 21:30 11841536 ----a-w c:\windows\system32\atioglxx.dll
2009-02-25 21:30 . 2009-02-25 21:30 204800 ----a-w c:\windows\system32\atipdlxx.dll
2009-02-25 21:29 . 2009-02-25 21:29 155648 ----a-w c:\windows\system32\Oemdspif.dll
2009-02-25 21:29 . 2009-02-25 21:29 26112 ----a-w c:\windows\system32\Ati2mdxx.exe
2009-02-25 21:29 . 2009-02-25 21:29 43520 ----a-w c:\windows\system32\ati2edxx.dll
2009-02-25 21:29 . 2009-02-25 21:29 155648 ----a-w c:\windows\system32\ati2evxx.dll
2009-02-25 21:27 . 2009-02-25 21:27 602112 ----a-w c:\windows\system32\ati2evxx.exe
2009-02-25 21:26 . 2009-02-25 21:26 53248 ----a-w c:\windows\system32\ATIDDC.DLL
2009-02-25 21:16 . 2009-02-25 21:16 3817984 ----a-w c:\windows\system32\ati3duag.dll
2009-02-25 21:09 . 2009-02-25 21:09 307200 ----a-w c:\windows\system32\atiiiexx.dll
2009-02-25 20:59 . 2009-02-25 20:59 2670080 ----a-w c:\windows\system32\ativvaxx.dll
2009-02-25 20:58 . 2009-02-25 20:58 887724 ----a-w c:\windows\system32\ativva6x.dat
2009-02-25 20:58 . 2009-02-25 20:58 3107788 ----a-w c:\windows\system32\ativva5x.dat
2009-02-25 20:44 . 2009-02-25 20:44 49664 ----a-w c:\windows\system32\amdpcom32.dll
2009-02-25 20:40 . 2009-02-25 20:40 475136 ----a-w c:\windows\system32\atikvmag.dll
2009-02-25 20:38 . 2009-02-25 20:38 126976 ----a-w c:\windows\system32\atiadlxx.dll
2009-02-25 20:38 . 2009-02-25 20:38 17408 ----a-w c:\windows\system32\atitvo32.dll
2009-02-25 20:37 . 2009-02-25 20:37 53248 ----a-w c:\windows\system32\drivers\ati2erec.dll
2009-02-25 20:35 . 2009-02-25 20:35 290816 ----a-w c:\windows\system32\atiok3x2.dll
2009-02-25 20:32 . 2009-02-25 20:32 45056 ----a-w c:\windows\system32\aticalrt.dll
2009-02-25 20:32 . 2009-02-25 20:32 45056 ----a-w c:\windows\system32\aticalcl.dll
2009-02-25 20:32 . 2009-02-25 20:32 626688 ----a-w c:\windows\system32\ati2cqag.dll
2009-02-25 20:30 . 2009-02-25 20:30 3227648 ----a-w c:\windows\system32\aticaldd.dll
2009-02-25 12:15 . 2009-04-22 16:46 593920 ------w c:\windows\system32\ati2sgag.exe
2009-02-20 17:08 . 2008-04-15 12:00 78336 ----a-w c:\windows\system32\ieencode.dll
2009-02-09 14:05 . 2008-04-15 12:00 1846784 ----a-w c:\windows\system32\win32k.sys
2009-02-09 11:23 . 2008-04-14 08:43 2025984 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-02-09 11:23 . 2008-04-15 12:00 2147328 ----a-w c:\windows\system32\ntoskrnl.exe
2009-02-09 11:23 . 2008-04-15 12:00 111104 ----a-w c:\windows\system32\services.exe
2009-02-09 10:52 . 2008-04-15 12:00 728576 ----a-w c:\windows\system32\lsasrv.dll
2009-02-09 10:52 . 2008-04-15 12:00 710144 ----a-w c:\windows\system32\ntdll.dll
2009-02-09 10:52 . 2008-04-15 12:00 682496 ----a-w c:\windows\system32\advapi32.dll
2009-02-09 10:52 . 2008-04-15 12:00 401408 ----a-w c:\windows\system32\rpcss.dll
2009-02-06 15:52 . 2009-02-06 15:52 49504 ----a-w c:\windows\system32\sirenacm.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2009-05-01 12:20 218160 ----a-w c:\program files\Hotspot Shield\hssie\HssIE.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SRS Audio Sandbox"="c:\program files\SRS Labs\Audio Sandbox\SRSSSC.exe" [2009-04-22 3215360]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-15 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Hotkey"="c:\program files\Internet keyboard driver\Hotkey.exe" [2007-05-20 221184]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-04-09 2029640]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-15 15360]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\IEPro\\MiniDM.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"e:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"e:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"e:\\Program Files\\NovaLogic\\Delta Force Xtreme 2 BETA\\DFX2BETA.EXE"=
"e:\\Program Files\\NovaLogic\\Delta Force Xtreme 2 BETA\\UPDATE.EXE"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [09.04.2009 15:18 107256]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [09.04.2009 15:19 731840]
R2 HssSrv;Hotspot Shield Helper Service;c:\program files\Hotspot Shield\HssWPR\hsssrv.exe [22.04.2009 04:12 328752]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [22.04.2009 19:43 179856]
R3 HssDrv;Hotspot Shield Helper Miniport;c:\windows\system32\drivers\HssDrv.sys [03.04.2009 21:18 33256]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [22.04.2009 19:43 15504]
S3 HssTrayService;Hotspot Shield Tray Service;c:\program files\Hotspot Shield\bin\HssTrayService.exe [23.04.2009 00:34 34352]
.
Contents of the 'Scheduled Tasks' folder
2009-05-05 c:\windows\Tasks\AWC AutoSweep.job
- c:\program files\IObit\Advanced SystemCare 3\AutoSweep.exe [2009-04-28 12:35]
2009-05-05 c:\windows\Tasks\AWC Update.job
- c:\program files\IObit\Advanced SystemCare 3\IObitUpdate.exe [2009-04-28 07:15]
2009-05-05 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-04-22 06:49]
2009-04-22 c:\windows\Tasks\GlaryUpdate.job
- c:\program files\Glary Utilities\webupdate.exe [2009-04-22 06:51]
2009-05-03 c:\windows\Tasks\SmartDefrag.job
- c:\program files\IObit\IObit SmartDefrag\IObit SmartDefrag.exe [2009-04-22 15:15]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.doctus.net
uInternet Connection Wizard,ShellNext = hxxp://www.winamp.com/player
IE: Microsoft Excel'e Gö&nder - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{000002a3-84fe-43f1-b958-f2c3ca804f1a} - {CD275D4E-791A-4993-9D4D-6A071EDD2709} - c:\program files\IEPro\iepro.dll
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-05 22:18
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(1616)
c:\windows\system32\Ati2evxx.dll
.
Completion time: 2009-05-05 22:19
ComboFix-quarantined-files.txt 2009-05-05 19:19
Pre-Run: 17.281.380.352 bayt boş
Post-Run: 17.266.507.776 bayt boş
260 --- E O F --- 2009-04-22 20:31
