e hvala ti mnogo, izgleda da je rijesio problem, jer nema vise procesa iexplore.exe.
za svaki slucaj ev log od combofix-a
****************************************************************
ComboFix 09-01-16.02 - h@ri 2009-01-16 23:28:22.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.1.1033.18.1535.1156 [GMT 1:00]
Running from: c:\documents and settings\h@ri\Desktop\ComboFix.exe
AV: Eset NOD32 antivirus system 2.51 *On-access scanning enabled* (Updated)
* Resident AV is active
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\h@ri\Application Data\addon.dat
c:\documents and settings\h@ri\Application Data\FunWebProducts
c:\documents and settings\h@ri\Application Data\FunWebProducts\Data\h@ri\avatar.dat
c:\documents and settings\h@ri\Application Data\FunWebProducts\Data\h@ri\outfit.dat
c:\documents and settings\h@ri\Application Data\FunWebProducts\Data\h@ri\register.dat
c:\documents and settings\h@ri\Application Data\FunWebProducts\Data\h@ri\zbucks.dat
c:\windows\system32\mdm.exe
c:\windows\system32\twex.exe
c:\windows\system32\win32
c:\windows\system32\win32\errorlog.dat
c:\windows\system32\win32\svchost.exe
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_MYWEBSEARCHSERVICE
((((((((((((((((((((((((( Files Created from 2008-12-16 to 2009-01-16 )))))))))))))))))))))))))))))))
.
2009-01-16 22:48 . 2009-01-16 22:48 <DIR> d-------- c:\program files\Spybot - Search & Destroy
2009-01-16 22:48 . 2009-01-16 23:09 <DIR> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-16 20:53 . 2009-01-16 20:55 <DIR> d-------- c:\documents and settings\All Users\Application Data\SecTaskMan
2009-01-16 20:52 . 2009-01-16 21:01 <DIR> d-------- c:\program files\Security Task Manager
2009-01-16 19:59 . 2009-01-16 19:59 <DIR> d-------- c:\program files\Trend Micro
2009-01-16 19:28 . 2009-01-16 19:28 <DIR> d-------- c:\program files\GrabIt
2009-01-16 18:42 . 2009-01-16 18:42 <DIR> d-------- c:\program files\BIHnet
2009-01-12 18:02 . 2009-01-12 18:02 <DIR> d-------- c:\documents and settings\All Users\Application Data\SiComponents
2009-01-11 15:22 . 2009-01-11 15:32 <DIR> d-------- c:\documents and settings\h@ri\TopconTools
2009-01-11 15:17 . 2009-01-11 15:17 <DIR> d-------- c:\program files\Topcon
2009-01-11 15:17 . 2009-01-11 15:17 <DIR> d-------- c:\program files\Common Files\Topcon
2009-01-10 17:40 . 2009-01-16 22:08 <DIR> d-------- c:\program files\Mozilla Firefox 3.5
2009-01-10 13:25 . 2009-01-10 13:25 <DIR> d-------- c:\program files\IObit
2009-01-10 13:25 . 2009-01-10 14:24 <DIR> d-------- c:\documents and settings\h@ri\Application Data\IObit
2009-01-10 13:04 . 2009-01-10 13:05 <DIR> d-------- c:\documents and settings\h@ri\Application Data\ErrorFix
2009-01-10 12:28 . 2009-01-10 12:28 <DIR> d-------- c:\windows\system32\Futuremark
2009-01-10 12:28 . 2009-01-10 12:28 <DIR> d-------- c:\program files\Common Files\Futuremark Shared
2009-01-10 12:28 . 2008-05-29 12:33 27,672 -ra------ c:\windows\system32\drivers\Entech.sys
2009-01-07 22:01 . 2009-01-07 22:01 <DIR> d-------- c:\program files\Codemasters
2009-01-07 17:26 . 2009-01-07 17:26 <DIR> d-------- c:\windows\ie8updates
2009-01-07 13:44 . 2009-01-07 13:44 2,328,832 --a------ c:\windows\system32\TUKernel.exe
2009-01-07 11:25 . 2009-01-07 11:25 <DIR> d--hs---- c:\documents and settings\h@ri\PrivacIE
2009-01-07 11:20 . 2009-01-07 11:21 <DIR> d--h-c--- c:\windows\ie8
2009-01-06 21:12 . 2009-01-06 21:12 <DIR> d-------- c:\documents and settings\h@ri\Application Data\TuneUp Software
2009-01-06 21:12 . 2009-01-06 21:12 603,904 --a------ c:\windows\system32\TUProgSt.exe
2009-01-06 21:12 . 2009-01-06 21:12 360,192 --a------ c:\windows\system32\TuneUpDefragService.exe
2009-01-06 21:12 . 2008-12-11 13:31 27,904 --a------ c:\windows\system32\uxtuneup.dll
2009-01-06 21:11 . 2009-01-06 21:12 <DIR> d-------- c:\program files\TuneUp Utilities 2009
2009-01-06 21:11 . 2009-01-06 21:11 <DIR> d--hs---- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-01-05 19:25 . 2009-01-05 19:25 <DIR> d-------- c:\documents and settings\h@ri\WINDOWS
2009-01-05 16:44 . 2009-01-05 16:44 0 --a------ c:\windows\PowerReg.dat
2009-01-04 16:51 . 2009-01-04 16:51 <DIR> d-------- c:\documents and settings\h@ri\Application Data\Windows Live Writer
2009-01-04 16:40 . 2009-01-16 23:34 <DIR> d-------- c:\documents and settings\h@ri\Tracing
2009-01-04 16:38 . 2008-12-08 17:01 55,136 --a------ c:\windows\system32\drivers\fssfltr_tdi.sys
2009-01-04 16:37 . 2009-01-04 16:37 <DIR> d-------- c:\program files\Microsoft Sync Framework
2009-01-04 16:36 . 2009-01-04 16:36 <DIR> d-------- c:\program files\Microsoft SQL Server Compact Edition
2009-01-04 16:34 . 2009-01-04 16:34 <DIR> d-------- c:\program files\Windows Live SkyDrive
2009-01-03 17:18 . 2009-01-16 23:20 <DIR> d--hs---- c:\windows\system32\twain32
2008-12-25 14:13 . 2008-12-25 14:13 <DIR> d-------- c:\documents and settings\All Users\Application Data\Microgaming
2008-12-25 14:13 . 2008-12-25 14:13 <DIR> d-------- c:\documents and settings\All Users\Application Data\MGS
2008-12-24 21:25 . 2008-12-24 21:25 <DIR> d-------- c:\program files\PremierOpinion
2008-12-21 00:44 . 2008-12-21 00:46 <DIR> d-a------ C:\xampp
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-16 21:14 --------- d-----w c:\program files\ChrisTV Lite
2009-01-16 19:43 --------- d-----w c:\documents and settings\h@ri\Application Data\GrabIt
2009-01-15 12:15 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-01-14 10:44 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-14 10:44 --------- d-----w c:\program files\Rockstar Games
2009-01-12 18:29 --------- d-----w c:\program files\DVDVideoSoft
2009-01-12 18:21 --------- d-----w c:\program files\Common Files\DVDVideoSoft
2009-01-10 17:05 --------- d-----w c:\program files\Mozilla Firefox 3 Beta 4
2009-01-10 15:23 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-01-08 12:10 --------- d-----w c:\program files\KONAMI
2009-01-05 16:20 --------- d-----w c:\program files\Microsoft Calculator Plus
2009-01-05 12:30 --------- d-----w c:\program files\Windows Media Connect 2
2009-01-04 17:38 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-01-04 17:38 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-01-04 15:38 --------- d-----w c:\program files\Windows Live
2009-01-04 15:34 --------- d-----w c:\program files\Microsoft
2009-01-02 19:58 --------- d-----w c:\program files\mIRC
2008-12-14 10:34 --------- d-----w c:\program files\Java
2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys
2008-12-08 22:48 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2008-12-07 18:49 --------- d-----w c:\program files\iTunes
2008-12-07 18:49 --------- d-----w c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-12-07 18:48 --------- d-----w c:\program files\iPod
2008-12-07 18:47 --------- d-----w c:\program files\QuickTime
2008-12-07 18:47 --------- d-----w c:\program files\Bonjour
2008-12-06 22:33 --------- d-----w c:\documents and settings\h@ri\Application Data\BearShare
2008-12-06 16:57 --------- d-----w c:\program files\Common Files\Windows Live
2008-12-06 15:48 --------- d-----w c:\documents and settings\h@ri\Application Data\MSN6
2008-12-06 10:27 --------- d-----w c:\program files\Apple Software Update
2008-12-04 23:40 308,072 ----a-w c:\windows\WLXPGSS.SCR
2008-11-24 21:22 --------- d-----w c:\program files\Motherboard Monitor 5
2008-07-16 22:23 151 ----a-w c:\program files\setuplog.txt
2008-08-25 13:24 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008082520080826\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"NOD32 Control Center GUI"="c:\program files\ESET\nod32kui.exe" [2008-05-04 921600]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2008-12-02 3882312]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-24 136600]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2009-01-04 399504]
"MSConfig"="c:\windows\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2008-04-14 169984]
"RTHDCPL"="RTHDCPL.EXE" [2006-09-06 c:\windows\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.dvacm"= c:\progra~1\COMMON~1\ULEADS~1\Vio\Dvacm.acm
"msacm.MPEGacm"= c:\progra~1\COMMON~1\ULEADS~1\MPEG\MPEGacm.acm
"msacm.ulmp3acm"= c:\progra~1\COMMON~1\ULEADS~1\MPEG\ulmp3acm.acm
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
backup=c:\windows\pss\Adobe Gamma Loader.exe.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^TVR Schedule.lnk]
backup=c:\windows\pss\TVR Schedule.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^h@ri^Start Menu^Programs^Startup^GpsGate.lnk]
backup=c:\windows\pss\GpsGate.lnkStartup
[HKLM\~\startupfolder\C:^Documents and Settings^h@ri^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Real Desktop
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2008-04-14 01:12 15360 c:\windows\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X Configure]
-r------- 2006-08-14 03:51 352256 c:\windows\system32\JMRaidTool.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
--a------ 2007-02-08 19:43 95800 c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-11-04 10:30 413696 c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 2008-01-15 23:54 37376 c:\program files\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
-ra------ 2004-12-28 23:01 544768 c:\windows\sm56hlpr.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" /background
"MyWebSearch Email Plugin"=c:\progra~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
"MBM 5 Core EXE"=c:\program files\Motherboard Monitor 5\MBM5.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"UVS11 Preload"=c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe"
"MyWebSearch Email Plugin"=c:\progra~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
"My Web Search Bar Search Scope Monitor"="c:\progra~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\InterVideo\\DVD8\\WinDVD.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\xampp\\apache\\bin\\apache.exe"=
"c:\\xampp\\mysql\\bin\\mysqld.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Codemasters\\Worms 4 Mayhem Demo\\Worms 4 Mayhem Demo.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2008\\BIHPL.exe"=
"d:\\Halid-nesto\\DOTHA ALL-STARS\\Warcraft III.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2008\\PES2008.exe"=
R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [2008-02-28 11264]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2008-08-15 15504]
R3 PAC207;VideoCAM GF112;c:\windows\system32\drivers\PFC027.sys [2005-04-08 162176]
R4 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-01-04 55136]
R4 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2008-08-15 170640]
R4 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2008-12-04 226640]
R4 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [2009-01-06 603904]
S3 fsssvc;Windows Live Obiteljska sigurnost;c:\program files\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
S3 w200bus;Sony Ericsson W200 driver (WDM);c:\windows\system32\drivers\w200bus.sys [2008-08-16 61504]
S3 w200mdfl;Sony Ericsson W200 USB WMC Modem Filter;c:\windows\system32\drivers\w200mdfl.sys [2008-08-16 9328]
S3 w200mdm;Sony Ericsson W200 USB WMC Modem Driver;c:\windows\system32\drivers\w200mdm.sys [2008-08-16 97056]
S3 w200mgmt;Sony Ericsson W200 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\w200mgmt.sys [2008-08-16 88560]
S3 w200obex;Sony Ericsson W200 USB WMC OBEX Interface;c:\windows\system32\drivers\w200obex.sys [2008-08-16 86368]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7cfd29aa-2b2f-11dd-be28-0018f3fee7ff}]
\Shell\AutoRun\command - fooool.exe
\Shell\explore\Command - fooool.exe
\Shell\open\Command - fooool.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a1209f48-5c1b-11dd-beb4-0018f3fee7ff}]
\Shell\AutoRun\command - fooool.exe
\Shell\explore\Command - fooool.exe
\Shell\open\Command - fooool.exe
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{932088BC-4ABE-683D-9E28-461810380E09}]
c:\windows\system32\win32\svchost.exe s
.
Contents of the 'Scheduled Tasks' folder
2009-01-16 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 21:30]
2008-12-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
2009-01-16 c:\windows\Tasks\AWC AutoSweep.job
- c:\program files\IObit\Advanced SystemCare 3\AutoSweep.exe [2009-01-06 11:32]
2009-01-16 c:\windows\Tasks\AWC Update.job
- c:\program files\IObit\Advanced SystemCare 3\IObitUpdate.exe [2009-01-06 11:37]
2009-01-16 c:\windows\Tasks\AWC Update.job
- c:\program files\IObit\Advanced SystemCare 3\ [2009-01-14 15:11]
2009-01-15 c:\windows\Tasks\ErrorFix Scan.job
- c:\program files\ErrorFix\ErrorFix.exe []
2009-01-15 c:\windows\Tasks\ErrorFix Scan.job
- c:\program files\ErrorFix []
2009-01-16 c:\windows\Tasks\User_Feed_Synchronization-{1B23A143-8CD4-418C-90C1-92113FA8B05E}.job
- c:\windows\system32\msfeedssync.exe [2008-08-22 03:05]
.
.
------- Supplementary Scan -------
.
uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE: &Search
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\h@ri\Application Data\Mozilla\Firefox\Profiles\icot0y8d.default\
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
---- FIREFOX POLICIES ----
pref(dom.disable_open_during_load, true);
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2009-01-16 23:34:45
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(616)
c:\windows\system32\Ati2evxx.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\InterVideo\DeviceService\DevSvc.exe
c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\lvhidsvc.exe
c:\program files\ESET\nod32krn.exe
c:\windows\system32\PAStiSvc.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
.
**************************************************************************
.
Completion time: 2009-01-16 23:38:02 - machine was rebooted
ComboFix-quarantined-files.txt 2009-01-16 22:37:59
Pre-Run: 21,656,240,128 bytes free
Post-Run: 21,567,545,344 bytes free
280 --- E O F --- 2009-01-15 12:15:39