Avira AntiVir the antivirus software from German company Avira. There are two types of the Avira AntiVir software freeware and premium. The free version includes basic virus protection, anti-spyware/ad-ware and web guard with the premium version providing more advanced features making it a complete software security package.The engine used in the Avira AntiVir program was developed way back in 1988 and has gone on to be one of the most widely used antivirus programs to date. Avira AntiVir is designed like most antivirus software on the market, to run as a background process scanning and checking files on the hard drive and any new additions of files download or copied to the hard disk. Over the years new updates to the program include a web guard checking websites for any malicious content which could harm your PC. An important root kit detection and removal feature was included with the release of version 7.0.x in 2007 preventing certain detrimental effects to the hard disk. Avira AntiVir 8.1.x saw enhancements to the user interface along with a new and improved engine producing faster scanning and detection times.For compatibility Avira AntiVir 7.0.x was the last version supported for Windows NT/98/SE, later versions are supported on Windows 2000/XP/Vista/7. Avira has ended support for version 9.x as of June 2011; however the version is still functional as are all older versions of Avira AntiVir.Pros: Light on PC resources, simple UI, automatic updates, fast, anti-spyware/ad-ware, rootkit protection.Cons: Free version doesnOther Internet SoftwareAd aware
Avast Free Antivirus
AVG Anti Virus
CatSpy
CCleaner
ClamWin Free Antivirus
Comodo Internet Security
Eset NOD32
HijackThis
HomeGuard Activity Monitor
KeePass Password Safe
Lockmydrive
Malwarebytes
Microsoft Security Essentials
Norton AntiVirus
Avira AntiVir Commentsvar disqus_shortname = 'oldversion';var disqus_identifier = 'windows/avira-antivir';var disqus_url = ' -antivir/';(function() document.getElementsByTagName('body')[0]).appendChild(dsq);)();Please enable JavaScript to view the comments powered by Disqus.blog comments powered by Disqus Top 5 Contributorssofiane41,005 PointsPKO1716,000 Pointssafarisilver13,345 Pointsalpha110,985 PointsMatrixisme9,755 PointsSee More Users Upload SoftwareGet points for uploading software and use them to redeem prizes!
avira internet security 2010 download
Some software is harmful and can cause problems for your Mac. Frequently, harmful apps are disguised as a movie or graphics file. These apps, called trojans, are most often spread by internet downloads and email attachments.
ComboFix 10-07-18.05 - Paul 07/19/2010 21:25:37.3.2 - x86Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1918.1367 [GMT -4:00]Running from: c:\documents and settings\Paul\Desktop\ComboFix.exeCommand switches used :: c:\documents and settings\Paul\Desktop\CFScript.txtAV: AntiVir Desktop *On-access scanning disabled* (Updated) AD166499-45F9-482A-A743-FDD3350758C7FW: ZoneAlarm Firewall *disabled* 829BDA32-94B3-44F4-8446-F8FCFF809F8B.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\documents and settings\All Users\Application Data\Lavasoftc:\documents and settings\All Users\Application Data\Lavasoft\License\adaware.da2c:\documents and settings\All Users\Application Data\Lavasoft\License\guid.datc:\documents and settings\All Users\Application Data\Spybot - Search & Destroyc:\documents and settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.100702-1728.logc:\documents and settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.100702-1742.txtc:\documents and settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.100713-0706.logc:\documents and settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.100713-0720.txtc:\documents and settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Fixes.100702-1745.txtc:\documents and settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Fixes.100713-0730.txtc:\documents and settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Resident.logc:\documents and settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Update downloads.logc:\documents and settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbcc:\program files\Ask.comc:\program files\Ask.com\cobrand.icoc:\program files\Ask.com\config.xmlc:\program files\Ask.com\favicon.icoc:\program files\Ask.com\GenericAskToolbar.dllc:\program files\Ask.com\mupcfg.xmlc:\program files\Ask.com\SaUpdate.exec:\program files\Ask.com\UpdateTask.exec:\program files\Spybot - Search & Destroyc:\program files\Spybot - Search & Destroy\advcheck.dllc:\program files\Spybot - Search & Destroy\TeaTimer.exe.((((((((((((((((((((((((( Files Created from 2010-06-20 to 2010-07-20 ))))))))))))))))))))))))))))))).2010-07-17 22:47 . 2010-07-17 22:47 388096 ----a-r- c:\documents and settings\Paul\Application Data\Microsoft\Installer\45A66726-69BC-466B-A7A4-12FCBA4883D7\HiJackThis.exe2010-07-17 11:13 . 2010-06-01 17:37 221568 ------w- c:\windows\system32\MpSigStub.exe2010-07-14 12:45 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe2010-07-13 11:39 . 2010-07-13 11:39 -------- d-----w- c:\documents and settings\Paul\Local Settings\Application Data\Sunbelt Software2010-07-11 03:41 . 2010-07-11 03:41 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\Softland2010-07-09 17:14 . 2010-07-19 08:47 -------- d-----w- c:\program files\Common Files\Adobe2010-07-09 16:40 . 2010-07-09 16:40 -------- d-----w- c:\program files\Common Files\Adobe AIR2010-07-09 16:39 . 2010-07-09 16:39 71680 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\arh.exe2010-07-03 06:07 . 2010-07-03 06:07 -------- d-----w- c:\documents and settings\Paul\Application Data\Auslogics2010-07-02 21:06 . 2010-07-02 21:06 -------- d-----w- c:\program files\CodeStuff2010-07-02 20:52 . 2010-07-02 20:52 -------- d-----w- c:\program files\Auslogics2010-06-28 23:07 . 2010-06-28 23:07 53319 ----a-w- c:\documents and settings\All Users\Application Data\TEMP\1FBF6C24-C1FD-4101-A42B-0C564F9E8E79\PostBuild.exe2010-06-28 23:07 . 2010-06-28 23:07 53319 ----a-w- c:\documents and settings\All Users\Application Data\TEMP\D36DD326-7280-11D8-97C8-000129760CBE\PostBuild.exe2010-06-28 23:05 . 2010-06-28 23:05 36864 ----a-w- c:\documents and settings\All Users\Application Data\TEMP\B7A0CE06-068E-11D6-97FD-0050BACBF861\PostBuild.exe2010-06-28 23:04 . 2010-06-28 23:04 -------- d-----w- c:\program files\Common Files\CyberLink2010-06-28 23:03 . 2010-06-28 23:03 29480 ----a-w- c:\windows\system32\msxml3a.dll2010-06-28 23:03 . 2010-06-28 23:03 53319 ----a-w- c:\documents and settings\All Users\Application Data\TEMP\2BF2E31F-B8BB-40A7-B650-98D28E0F7D47\PostBuild.exe2010-06-28 22:59 . 2010-06-28 22:59 36864 ----a-w- c:\documents and settings\All Users\Application Data\TEMP\CB099890-1D5F-11D5-9EA9-0050BAE317E1\PostBuild.exe2010-06-28 22:59 . 2010-06-28 22:59 -------- d-----w- C:\MyWorks2010-06-28 22:58 . 2010-06-28 22:58 36864 ----a-w- c:\documents and settings\All Users\Application Data\TEMP\40BF1E83-20EB-11D8-97C5-0009C5020658\PostBuild.exe2010-06-28 22:57 . 2010-06-28 22:59 -------- d-----w- c:\documents and settings\Paul\Application Data\CyberLink2010-06-28 22:57 . 2010-06-28 22:57 -------- d-----w- c:\documents and settings\Paul\Local Settings\Application Data\Cyberlink2010-06-28 22:55 . 2010-06-28 22:55 36864 ----a-w- c:\documents and settings\All Users\Application Data\TEMP\80E158EA-7181-40FE-A701-301CE6BE64AB\PostBuild.exe2010-06-28 22:54 . 2010-06-28 22:54 1053232 ----a-w- c:\windows\system32\MFC71u.dll2010-06-28 22:54 . 2010-06-28 22:54 53319 ----a-w- c:\documents and settings\All Users\Application Data\TEMP\C59C179C-668D-49A9-B6EA-0121CCFC1243\PostBuild.exe2010-06-28 22:53 . 2007-10-26 14:55 15784 ------w- c:\windows\system32\drivers\CLBStor.sys2010-06-28 22:53 . 2007-10-26 14:55 162344 ------w- c:\windows\system32\drivers\CLBUDF.sys2010-06-28 22:53 . 2007-10-26 14:55 131072 ----a-w- c:\windows\IBUnInst.exe2010-06-28 22:53 . 2010-06-28 23:08 -------- d-----w- c:\program files\CyberLink2010-06-28 22:53 . 2010-06-28 22:53 -------- d-----w- c:\documents and settings\All Users\Application Data\CyberLink2010-06-28 22:51 . 2010-06-28 22:51 53319 ----a-w- c:\documents and settings\All Users\Application Data\TEMP\5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41\PostBuild.exe2010-06-22 14:30 . 2010-06-22 14:30 -------- d-----w- c:\program files\iPod2010-06-22 14:30 . 2010-06-22 14:30 -------- d-----w- c:\program files\iTunes2010-06-22 14:26 . 2010-06-22 14:26 -------- d-----w- c:\program files\QuickTime2010-06-22 14:24 . 2010-06-22 14:24 -------- d-----w- c:\program files\Apple Software Update2010-06-22 14:23 . 2010-06-22 14:23 -------- d-----w- c:\program files\Bonjour.(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))).2010-07-19 08:53 . 2010-04-20 04:49 79488 ----a-w- c:\documents and settings\Paul\Application Data\Sun\Java\jre1.6.0_20\gtapi.dll2010-07-19 08:53 . 2010-04-20 04:49 152576 ----a-w- c:\documents and settings\Paul\Application Data\Sun\Java\jre1.6.0_20\lzma.dll2010-07-15 23:52 . 2010-04-13 16:03 -------- d-----w- c:\program files\CamStudio2010-07-14 10:20 . 2009-05-29 18:39 28913650 ----a-w- c:\windows\Internet Logs\tvDebug.Zip2010-07-13 11:46 . 2009-11-13 22:49 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys2010-07-13 03:51 . 2009-11-14 07:12 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP2010-07-09 16:39 . 2009-09-24 16:33 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS2010-07-02 21:22 . 2010-05-25 00:27 -------- d-----w- c:\documents and settings\Paul\Application Data\Media Player Classic2010-07-02 20:56 . 2009-11-02 21:48 -------- d-----w- c:\program files\CCleaner2010-06-28 23:12 . 2008-01-29 18:49 25168 ----a-w- c:\documents and settings\Paul\Local Settings\Application Data\GDIPFONTCACHEV1.DAT2010-06-28 23:08 . 2008-01-29 17:52 -------- d--h--w- c:\program files\InstallShield Installation Information2010-06-28 23:03 . 2008-01-29 19:01 353576 ----a-w- c:\windows\system32\msvcr71.dll2010-06-28 23:03 . 2008-01-29 19:01 505128 ----a-w- c:\windows\system32\msvcp71.dll2010-06-28 22:54 . 2008-01-29 19:01 1066544 ----a-w- c:\windows\system32\MFC71.dll2010-06-24 16:34 . 2010-06-24 16:35 3014656 ----a-w- c:\windows\Internet Logs\xDB2.tmp2010-06-22 14:30 . 2010-02-22 22:27 -------- d-----w- c:\program files\Common Files\Apple2010-06-16 13:43 . 2010-06-16 13:43 61440 ----a-w- c:\documents and settings\Paul\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-44825e10-n\decora-sse.dll2010-06-16 13:43 . 2010-06-16 13:43 503808 ----a-w- c:\documents and settings\Paul\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-6fbf1cb7-n\msvcp71.dll2010-06-16 13:43 . 2010-06-16 13:43 499712 ----a-w- c:\documents and settings\Paul\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-6fbf1cb7-n\jmc.dll2010-06-16 13:43 . 2010-06-16 13:43 348160 ----a-w- c:\documents and settings\Paul\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-6fbf1cb7-n\msvcr71.dll2010-06-16 13:43 . 2010-06-16 13:43 12800 ----a-w- c:\documents and settings\Paul\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-44825e10-n\decora-d3d.dll2010-06-16 00:01 . 2010-06-16 00:01 72504 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe2010-06-14 14:31 . 2008-01-29 17:10 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe2010-06-12 15:52 . 2010-06-12 15:52 -------- d-----w- c:\program files\JRE2010-06-12 15:52 . 2010-04-20 05:05 -------- d-----w- c:\program files\OpenOffice.org 32010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\30295\AdobeARM.exe2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\30295\AdobeExtractFiles.dll2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\30295\ReaderUpdater.exe2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\30295\AcrobatUpdater.exe2010-06-03 02:41 . 2010-06-03 02:41 3600384 ----a-w- c:\windows\system32\GPhotos.scr2010-05-31 20:34 . 2010-06-01 12:10 702120 ----a-w- c:\documents and settings\Paul\Application Data\Mozilla\Firefox\Profiles\gyydsbit.default\extensions\e001c731-5e37-4538-a5cb-8168736a2360\components\qscanff.dll2010-05-31 20:34 . 2010-06-01 12:10 868456 ----a-w- c:\documents and settings\Paul\Application Data\Mozilla\Firefox\Profiles\gyydsbit.default\extensions\e001c731-5e37-4538-a5cb-8168736a2360\plugins\npqscan.dll2010-05-29 12:42 . 2010-05-29 12:42 -------- d-----w- c:\program files\Secunia2010-05-28 21:22 . 2010-05-28 21:22 -------- d-----w- c:\documents and settings\Paul\Application Data\CheckPoint2010-05-28 21:22 . 2010-05-28 21:22 -------- d-----w- c:\program files\ZoneAlarm2010-05-28 21:22 . 2010-05-28 21:22 -------- d-----w- c:\program files\CheckPoint2010-05-28 21:22 . 2008-01-29 19:48 4212 ---ha-w- c:\windows\system32\zllictbl.dat2010-05-28 11:04 . 2010-05-28 11:04 14896 ----a-w- c:\windows\system32\drivers\psi_mf.sys2010-05-27 00:21 . 2009-05-09 14:38 -------- d-----w- c:\program files\Ricochet Lost Worlds Recharged2010-05-26 17:03 . 2008-12-05 20:25 1238528 ----a-w- c:\windows\system32\zpeng25.dll2010-05-26 17:03 . 2009-03-27 13:28 69120 ----a-w- c:\windows\system32\zlcomm.dll2010-05-26 17:03 . 2009-03-27 13:28 103936 ----a-w- c:\windows\system32\zlcommdb.dll2010-05-24 23:51 . 2010-05-24 23:51 -------- d-----w- c:\program files\Essentials Codec Pack2010-05-24 05:55 . 2010-05-24 05:59 227 ----a-w- C:\autoexectest.bat2010-05-24 04:59 . 2010-05-24 03:51 -------- d-----w- c:\program files\GNU2010-05-18 20:35 . 2010-05-18 20:35 91424 ----a-w- c:\windows\system32\dnssd.dll2010-05-18 20:35 . 2010-05-18 20:35 107808 ----a-w- c:\windows\system32\dns-sd.exe2010-05-13 20:46 . 2010-04-21 02:39 1 ----a-w- c:\documents and settings\Paul\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys2010-05-13 19:55 . 2010-05-13 19:56 2649600 ----a-w- c:\windows\Internet Logs\xDB1.tmp2010-05-06 10:41 . 2006-03-04 03:33 916480 ----a-w- c:\windows\system32\wininet.dll2010-05-02 05:22 . 2004-08-04 10:00 1851264 ----a-w- c:\windows\system32\win32k.sys2010-04-29 19:39 . 2009-11-08 18:05 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys2010-04-29 19:39 . 2009-11-08 18:05 20952 ----a-w- c:\windows\system32\drivers\mbam.sys.((((((((((((((((((((((((((((( SnapShot@2010-07-19_20.14.02 ))))))))))))))))))))))))))))))))))))))))).- 2004-08-04 10:00 . 2010-07-19 19:49 67714 c:\windows\system32\perfc009.dat+ 2004-08-04 10:00 . 2010-07-19 20:42 67714 c:\windows\system32\perfc009.dat+ 2004-08-04 10:00 . 2010-07-19 20:42 432924 c:\windows\system32\perfh009.dat- 2004-08-04 10:00 . 2010-07-19 19:49 432924 c:\windows\system32\perfh009.dat.((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))..*Note* empty entries & legit default entries are not shown REGEDIT4[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]"66f2e20d-0da8-4c11-a9c8-dd8477b88acd"= "c:\program files\ZoneAlarm\tbZone.dll" [2010-05-09 2517088][HKEY_CLASSES_ROOT\clsid\66f2e20d-0da8-4c11-a9c8-dd8477b88acd][HKEY_LOCAL_MACHINE\\Browser Helper Objects\66f2e20d-0da8-4c11-a9c8-dd8477b88acd]2010-05-09 15:50 2517088 ----a-w- c:\program files\ZoneAlarm\tbZone.dll[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]"66f2e20d-0da8-4c11-a9c8-dd8477b88acd"= "c:\program files\ZoneAlarm\tbZone.dll" [2010-05-09 2517088][HKEY_CLASSES_ROOT\clsid\66f2e20d-0da8-4c11-a9c8-dd8477b88acd][HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]"66F2E20D-0DA8-4C11-A9C8-DD8477B88ACD"= "c:\program files\ZoneAlarm\tbZone.dll" [2010-05-09 2517088][HKEY_CLASSES_ROOT\clsid\66f2e20d-0da8-4c11-a9c8-dd8477b88acd][HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"AnVir Task Manager"="c:\program files\AnVir Task Manager\AnVir.exe" [2009-10-13 3102944][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-10-10 2183168]"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-04-27 851968]"PMX Daemon"="ICO.EXE" [2007-03-08 49152]"SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\stsystra.exe" [2007-05-10 405504]"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2010-05-26 1043968]"ISW"="c:\program files\CheckPoint\ZAForceField\ForceField.exe" [2010-05-26 730600]"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]c:\documents and settings\Paul\Start Menu\Programs\Startup\Secunia PSI.lnk - c:\program files\Secunia\PSI\psi.exe [2010-5-28 911920][HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AmazonGSDownloaderTray]2009-04-06 20:35 247296 ----a-w- c:\program files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderTray.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]2008-12-20 11:50 2656528 ----a-w- c:\program files\Logitech\QuickCam\Quickcam.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]2010-04-29 19:39 1090952 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]"Amazon Download Agent"=2 (0x2)"AcrSch2Svc"=2 (0x2)"TryAndDecideService"=3 (0x3)"Lavasoft Ad-Aware Service"=2 (0x2)[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]"DisableMonitoring"=dword:00000001[HKLM\\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]"%windir%\\system32\\sessmgr.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe"="c:\\Program Files\\Steam\\Steam.exe"="c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"="c:\\Program Files\\Bonjour\\mDNSResponder.exe"="c:\\Program Files\\iTunes\\iTunes.exe"=R1 CLBStor;InstantBurn Storage Helper Driver;c:\windows\system32\drivers\CLBStor.sys [6/28/2010 6:53 PM 15784]R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [12/3/2009 4:48 PM 108289]R2 CLBUDF;CyberLink InstantBurn UDF Filesystem;c:\windows\system32\drivers\CLBUDF.sys [6/28/2010 6:53 PM 162344]R2 ISWKL;ZoneAlarm Toolbar ISWKL;c:\program files\CheckPoint\ZAForceField\ISWKL.sys [5/26/2010 9:35 AM 26352]R2 IswSvc;ZoneAlarm Toolbar IswSvc;c:\program files\CheckPoint\ZAForceField\ISWSVC.exe [5/26/2010 9:35 AM 493032]S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [5/17/2010 2:57 PM 136176]S3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [5/28/2010 7:04 AM 14896]S4 Amazon Download Agent;Amazon Download Agent;c:\program files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe [5/9/2009 10:37 AM 319488][HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]getPlusHelper REG_MULTI_SZ getPlusHelper.Contents of the 'Scheduled Tasks' folder2010-07-14 c:\windows\Tasks\AppleSoftwareUpdate.job- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 15:50]2010-07-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-17 18:57]2010-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-17 18:57]..------- Supplementary Scan -------.uStart Page = hxxp://www.bing.com/uInternet Settings,ProxyOverride = *.localIE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200FF - ProfilePath - c:\documents and settings\Paul\Application Data\Mozilla\Firefox\Profiles\gyydsbit.default\FF - prefs.js: browser.startup.homepage - hxxp://us.mg2.mail.yahoo.com/dc/launch?.gx=1&.rand=2q7c5tkfrafdrFF - component: c:\documents and settings\Paul\Application Data\Mozilla\Firefox\Profiles\gyydsbit.default\extensions\e001c731-5e37-4538-a5cb-8168736a2360\components\qscanff.dllFF - plugin: c:\documents and settings\Paul\Application Data\Mozilla\Firefox\Profiles\gyydsbit.default\extensions\e001c731-5e37-4538-a5cb-8168736a2360\plugins\npqscan.dllFF - plugin: c:\documents and settings\Paul\Application Data\Mozilla\Firefox\Profiles\gyydsbit.default\extensions\E2883E8F-472F-4fb0-9522-AC9BF37916A7\plugins\np_gp.dllFF - plugin: c:\program files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dllFF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dllFF - plugin: c:\program files\Google\Picasa3\npPicasa3.dllFF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dllFF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dllFF - plugin: c:\program files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dllFF - plugin: c:\program files\Mozilla Firefox\plugins\npigl.dllFF - HiddenExtension: Microsoft .NET Framework Assistant: 20a82645-c095-46ed-80e3-08825760534b - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\---- FIREFOX POLICIES ----FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.972ce4c6-7e08-4474-a285-3208198ce6fd.name", "chrome://browser/locale/browser.properties");c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.972ce4c6-7e08-4474-a285-3208198ce6fd.description", "chrome://browser/locale/browser.properties");c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);.**************************************************************************catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, Rootkit scan 2010-07-19 21:31Windows 5.1.2600 Service Pack 3 NTFSscanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfullyhidden files: 0**************************************************************************.--------------------- DLLs Loaded Under Running Processes ---------------------- - - - - - - > 'winlogon.exe'(952)c:\windows\system32\Ati2evxx.dllc:\windows\System32\BCMLogon.dllc:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll- - - - - - - > 'lsass.exe'(1008)c:\windows\system32\relog_ap.dllc:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll.Completion time: 2010-07-19 21:33:31ComboFix-quarantined-files.txt 2010-07-20 01:33ComboFix2.txt 2009-11-23 15:09Pre-Run: 43,362,095,104 bytes freePost-Run: 43,347,107,840 bytes free- - End Of File - - 6C6B1FCCBF70D334E61C931BA41B1649----------------------------------------------------------------------------------------------------------------------------- 2ff7e9595c
Comments