TechSpot

Internet is slow in LAN but fast in Wi-Fi

By sritce
Nov 15, 2010
Post New Reply
  1. Hi all,
    Internet is too slow when i try in my PC..but browsing speed is far better when i try in my LAP using wifi..There is no malware or virus..discussed in Malware forums.i already had this issue,then i reinstalled new os..all worked fine untill yesterday. when i download using IDM or any other download manager,speed is very good..only problem with my browsing sites..same problem in IE too..what could be the cause of this issue,

    thanks,
    sri
     
  2. sritce

    sritce TS Rookie Topic Starter Posts: 58

    Problem solved...

    after running combo fix..its fine now..i will post the log here.but what is cause of this problem


    ComboFix 10-11-14.04 - sri 11/15/2010 23:45:04.1.2 - x86
    Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.3070.2095 [GMT 5.5:30]
    Running from: c:\users\sri\Desktop\ComboFix.exe
    * Resident AV is active

    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\system32\secustat.dat

    .
    ((((((((((((((((((((((((( Files Created from 2010-10-15 to 2010-11-15 )))))))))))))))))))))))))))))))
    .

    2010-11-15 18:21 . 2010-11-15 18:21 -------- d-----w- c:\users\Default\AppData\Local\temp
    2010-11-15 18:03 . 2010-11-15 18:03 301568 ----a-w- c:\windows\system32\cmd.execf
    2010-11-15 05:27 . 2010-11-15 15:51 -------- d-----w- c:\users\sss
    2010-11-14 18:42 . 2010-11-14 18:42 -------- d-----w- c:\program files\Switch Off
    2010-11-13 05:18 . 2010-11-13 05:18 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
    2010-11-13 01:54 . 2010-11-13 01:54 -------- d-----w- c:\programdata\Office Genuine Advantage
    2010-11-12 15:12 . 2010-11-12 15:12 -------- d-----w- c:\program files\FlashGet Network
    2010-11-12 13:49 . 2010-11-12 13:49 -------- d-----w- c:\program files\WinPcap
    2010-11-12 13:49 . 2010-11-12 13:49 -------- d-----w- c:\program files\URLSnooper2
    2010-11-12 13:49 . 2010-11-12 13:49 -------- d-----w- c:\programdata\DonationCoder
    2010-11-12 12:58 . 2010-10-18 04:11 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{EE4859BC-26EC-443A-A815-66EC6FC04319}\mpengine.dll
    2010-11-11 04:24 . 2010-11-11 04:24 -------- d-----w- c:\programdata\PDF Writer
    2010-11-11 04:23 . 2009-07-14 01:15 90624 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\HPZPPWN7.DLL
    2010-11-11 04:21 . 2010-11-11 04:21 -------- d-----w- c:\program files\Common Files\Bullzip
    2010-11-11 04:21 . 2008-10-30 17:45 227840 ----a-w- c:\windows\system32\bzFlRdr.dll
    2010-11-11 04:21 . 2008-07-09 18:49 103424 ----a-w- c:\windows\system32\bzDCT.dll
    2010-11-11 04:21 . 2010-09-27 09:57 135168 ----a-w- c:\windows\system32\bzpdfc.dll
    2010-11-11 04:21 . 2010-09-27 09:58 196096 ----a-w- c:\windows\system32\bzpdf.dll
    2010-11-11 04:21 . 2010-11-11 04:21 -------- d-----w- c:\program files\Bullzip
    2010-11-11 04:21 . 1999-05-06 18:30 140288 ----a-w- c:\windows\system32\comdlg32.OCX
    2010-11-10 15:54 . 2010-11-10 15:54 -------- d-----w- c:\program files\TeamViewer
    2010-11-10 15:13 . 2010-11-14 15:31 -------- d-----w- c:\program files\Garena
    2010-11-10 14:58 . 2009-11-03 08:37 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
    2010-11-10 14:58 . 2009-11-03 08:37 1970176 ----a-w- c:\windows\system32\d3dx9.dll
    2010-11-09 17:34 . 2010-11-09 17:34 -------- d-----w- c:\program files\Conduit
    2010-11-09 17:34 . 2010-11-09 17:34 -------- d-----w- C:\extensions
    2010-11-09 17:33 . 2010-11-09 17:33 -------- d-----w- c:\program files\UseNeXT
    2010-11-09 17:32 . 2010-11-09 17:34 -------- d-----w- c:\program files\uTorrent
    2010-11-09 16:17 . 2010-11-14 13:31 -------- d-----w- c:\program files\Cheat Engine
    2010-10-31 08:11 . 2010-10-31 08:11 -------- d-----w- c:\program files\GRETECH
    2010-10-31 07:59 . 2010-10-31 07:59 -------- d-----w- c:\windows\Sun
    2010-10-30 09:15 . 2010-10-30 09:16 -------- d-----w- C:\Downloads
    2010-10-30 07:27 . 2010-01-25 21:18 13952 ----a-w- c:\windows\system32\drivers\urfltwlh.sys
    2010-10-29 16:45 . 2010-11-14 14:23 -------- d-----w- c:\program files\ESET
    2010-10-28 17:25 . 2010-10-28 17:25 -------- d-----w- c:\program files\VideoLAN
    2010-10-28 16:10 . 2010-10-28 16:10 -------- d-----w- c:\program files\EA GAMES
    2010-10-28 15:31 . 2010-10-28 15:31 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
    2010-10-28 14:54 . 2010-10-28 15:34 -------- d-----w- c:\program files\EA SPORTS
    2010-10-28 14:54 . 2010-10-28 14:54 -------- d-----w- c:\windows\system32\Macromed
    2010-10-28 14:22 . 2010-10-30 11:09 -------- d-----w- c:\program files\Internet Download Manager
    2010-10-28 14:21 . 2010-10-30 08:35 -------- d-----w- c:\program files\Ask.com
    2010-10-28 14:13 . 2010-10-28 14:13 -------- d-----w- c:\program files\Common Files\Adobe
    2010-10-28 14:08 . 2008-11-10 06:11 32656 ----a-w- c:\windows\system32\msonpmon.dll
    2010-10-28 14:08 . 2006-10-26 14:26 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
    2010-10-28 14:07 . 2010-11-14 18:45 -------- d-----w- c:\program files\Microsoft Works
    2010-10-28 14:06 . 2010-10-28 14:06 -------- d-----w- c:\windows\PCHEALTH
    2010-10-28 14:06 . 2010-10-28 14:06 -------- d-----w- c:\program files\Microsoft.NET
    2010-10-28 14:04 . 2010-10-28 14:04 -------- d-----w- c:\program files\Microsoft Visual Studio 8
    2010-10-28 14:04 . 2010-11-14 18:47 -------- d-----w- c:\programdata\Microsoft Help
    2010-10-28 14:02 . 2010-10-28 14:02 -------- d-----r- C:\MSOCache
    2010-10-28 13:57 . 2010-10-28 13:57 -------- d-----w- c:\program files\PowerISO
    2010-10-28 13:55 . 2010-10-28 13:55 -------- d-----w- c:\program files\CCleaner
    2010-10-28 13:18 . 2010-10-28 13:18 -------- d-----w- c:\program files\LogMeIn Hamachi
    2010-10-28 06:10 . 2010-10-27 16:57 -------- d-----w- c:\windows\Panther
    2010-10-27 18:34 . 2010-10-27 18:34 -------- d-----w- c:\windows\system32\Wat
    2010-10-27 18:30 . 2010-10-27 18:30 -------- d-----w- c:\program files\Common Files\Java
    2010-10-27 18:25 . 2010-10-27 18:25 472808 ----a-w- c:\windows\system32\deployJava1.dll
    2010-10-27 18:25 . 2010-10-27 18:25 -------- d-----w- c:\program files\Java
    2010-10-27 17:57 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll
    2010-10-27 17:56 . 2009-11-25 07:17 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
    2010-10-27 17:56 . 2009-11-25 07:17 49472 ----a-w- c:\windows\system32\netfxperf.dll
    2010-10-27 17:56 . 2009-11-25 07:17 297808 ----a-w- c:\windows\system32\mscoree.dll
    2010-10-27 17:56 . 2009-11-25 07:17 295264 ----a-w- c:\windows\system32\PresentationHost.exe
    2010-10-27 17:56 . 2009-11-25 07:17 1130824 ----a-w- c:\windows\system32\dfshim.dll
    2010-10-27 17:49 . 2010-03-04 03:57 190976 ----a-w- c:\windows\system32\drivers\ks.sys
    2010-10-27 17:49 . 2010-06-29 04:57 4247040 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
    2010-10-27 17:49 . 2010-06-29 05:02 1413632 ----a-w- c:\windows\system32\ole32.dll
    2010-10-27 17:47 . 2010-08-21 05:36 224256 ----a-w- c:\windows\system32\schannel.dll
    2010-10-27 17:47 . 2010-06-19 06:23 37376 ----a-w- c:\windows\system32\rtutils.dll
    2010-10-27 17:46 . 2010-02-27 07:32 221696 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
    2010-10-27 17:46 . 2010-02-27 07:32 95744 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
    2010-10-27 17:46 . 2010-02-27 07:32 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
    2010-10-27 17:46 . 2010-08-27 05:30 13312 ----a-w- c:\program files\Internet Explorer\iecompat.dll
    2010-10-27 17:43 . 2010-05-27 07:24 34304 ----a-w- c:\windows\system32\atmlib.dll
    2010-10-27 17:43 . 2010-05-27 03:49 293888 ----a-w- c:\windows\system32\atmfd.dll
    2010-10-27 17:43 . 2009-10-19 14:10 70656 ----a-w- c:\windows\system32\fontsub.dll
    2010-10-27 17:43 . 2010-01-09 06:52 132608 ----a-w- c:\windows\system32\cabview.dll
    2010-10-27 17:43 . 2010-04-29 10:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-10-27 17:43 . 2010-11-15 15:51 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-10-27 17:43 . 2010-11-15 15:50 -------- d-----w- c:\programdata\Malwarebytes
    2010-10-27 17:43 . 2010-04-29 10:09 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-10-27 17:35 . 2010-10-27 17:35 -------- d-----w- c:\program files\Show Desktop
    2010-10-27 17:27 . 2010-10-27 17:27 -------- d-----w- c:\programdata\SRS Labs
    2010-10-27 17:26 . 2010-10-27 17:26 -------- d-----w- c:\program files\SRS Labs
    2010-10-27 17:25 . 2010-10-27 17:25 -------- d-----w- c:\program files\NVIDIA Corporation
    2010-10-27 17:25 . 2010-11-15 15:57 -------- d-----w- c:\programdata\NVIDIA
    2010-10-27 17:24 . 2010-10-27 17:24 -------- d-----w- c:\program files\AGEIA Technologies
    2010-10-27 17:24 . 2010-10-27 17:24 -------- d-----w- c:\windows\system32\AGEIA
    2010-10-27 17:24 . 2010-10-27 17:24 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
    2010-10-27 17:23 . 2009-07-10 01:31 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
    2010-10-27 17:23 . 2009-07-14 18:54 485920 ----a-w- c:\windows\system32\nvudisp.exe
    2010-10-27 17:22 . 2009-07-14 18:54 795104 ----a-w- c:\windows\system32\dpinst.exe
    2010-10-27 17:22 . 2009-07-14 18:54 252448 ----a-w- c:\windows\system32\nvdecodemft.dll
    2010-10-27 17:22 . 2009-07-14 18:54 1919520 ----a-w- c:\windows\system32\nvencodemft.dll
    2010-10-27 17:22 . 2009-07-14 18:54 10854400 ----a-w- c:\windows\system32\nvoglv32.dll
    2010-10-27 17:22 . 2009-07-14 18:54 7565824 ----a-w- c:\windows\system32\nvd3dum.dll
    2010-10-27 17:22 . 2009-07-14 18:54 2169376 ----a-w- c:\windows\system32\nvcuvid.dll
    2010-10-27 17:22 . 2009-07-14 18:54 1983488 ----a-w- c:\windows\system32\nvcuda.dll
    2010-10-27 17:22 . 2009-07-14 18:54 1706528 ----a-w- c:\windows\system32\nvcuvenc.dll
    2010-10-27 17:22 . 2009-07-14 18:54 151552 ----a-w- c:\windows\system32\nvcod157.dll
    2010-10-27 17:22 . 2009-07-14 18:54 151552 ----a-w- c:\windows\system32\nvcod.dll
    2010-10-27 17:22 . 2009-07-14 18:54 1044992 ----a-w- c:\windows\system32\nvapi.dll
    2010-10-27 17:22 . 2010-10-27 17:22 -------- d-----w- C:\NVIDIA
    2010-10-27 17:16 . 2010-10-19 06:11 222080 ------w- c:\windows\system32\MpSigStub.exe
    2010-10-27 17:05 . 2006-11-11 08:32 274432 ----a-w- c:\windows\system32\IASDLL.dll
    2010-10-27 17:05 . 2005-11-18 08:27 40960 ----a-w- c:\windows\system32\SFIMLARK.dll
    2010-10-27 17:05 . 2005-07-21 13:58 53248 ----a-w- c:\windows\system32\IASBB.dll
    2010-10-27 17:05 . 2010-10-27 17:05 -------- d-----w- c:\program files\Intel Audio Studio 2.7
    2010-10-27 17:02 . 2010-10-27 17:02 -------- d-----w- c:\program files\Common Files\InstallShield
    2010-10-27 17:00 . 2010-11-15 15:59 -------- d-----w- c:\windows\system32\wbem\Performance
    2010-10-27 17:00 . 2010-11-14 18:47 -------- d-sh--w- c:\windows\Installer
    2010-10-27 16:57 . 2010-11-15 15:57 -------- d-----w- c:\users\sri
    2010-10-27 16:57 . 2010-10-27 16:57 -------- d-----w- C:\Recovery

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-09-29 20:53 . 2010-09-29 18:56 71336 ----a-w- c:\windows\system32\drivers\idmwfp.sys
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
    "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-10-10 3906656]

    [HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
    2010-10-10 10:21 3906656 ----a-w- c:\program files\ConduitEngine\ConduitEngine.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
    2010-10-10 10:21 3906656 ----a-w- c:\program files\uTorrentBar\tbuTor.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
    2010-09-28 17:14 1400712 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
    "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-10-10 3906656]
    "{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-10-10 3906656]

    [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
    [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
    [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
    [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

    [HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]

    [HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-09-28 1400712]
    "{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-10-10 3906656]

    [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
    [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
    [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
    [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

    [HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
    @="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
    [HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
    2010-09-29 20:53 72336 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SRS Audio Sandbox"="c:\program files\SRS Labs\Audio Sandbox\SRSSSC.exe" [2010-01-07 3216664]
    "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2010-10-28 3249504]
    "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-11-09 328056]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-04-29 437584]
    "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-14 2029640]
    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 0 (0x0)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableLUA"= 0 (0x0)
    "EnableUIADesktopToggle"= 0 (0x0)
    "PromptOnSecureDesktop"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "mixer1"=wdmaud.drv

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2010-09-20 17:37 932288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2010-09-22 23:17 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashGet 3]
    2009-12-22 08:48 2127408 ----a-w- c:\program files\FlashGet Network\FlashGet 3\Flashget3.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
    2010-10-27 17:01 136176 ----atw- c:\users\sri\AppData\Local\Google\Update\GoogleUpdate.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
    2008-10-25 06:14 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
    2010-10-28 15:28 3249504 ----a-w- c:\program files\Internet Download Manager\IDMan.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelAudioStudio]
    2008-05-27 03:40 8003584 ----a-w- c:\program files\Intel Audio Studio 2.7\IntelAudioStudio.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
    2010-03-30 05:46 1820040 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
    2008-01-20 07:05 217088 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2010-05-14 06:14 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

    R3 f5ipfw;F5 Networks StoneWall Filter;c:\windows\system32\drivers\urfltwlh.sys [2010-01-25 13952]
    R3 GGSAFERDriver;GGSAFER Driver;c:\program files\Garena\safedrv.sys [x]
    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-10-27 1343400]
    S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
    S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-05-14 731840]
    S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-05-14 93312]
    S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
    S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2010-09-29 71336]
    S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2010-04-29 304464]
    S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-10-20 50704]
    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-07-14 239648]
    S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-10-19 2011944]
    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-04-29 20952]
    S3 urvpndrv;F5 Networks VPN Adapter;c:\windows\system32\DRIVERS\covpnwlh.sys [2010-01-25 34944]

    .
    Contents of the 'Scheduled Tasks' folder

    2010-11-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4011064965-1581801092-1242194099-1000Core.job
    - c:\users\sri\AppData\Local\Google\Update\GoogleUpdate.exe [2010-10-27 17:01]

    2010-11-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4011064965-1581801092-1242194099-1000UA.job
    - c:\users\sri\AppData\Local\Google\Update\GoogleUpdate.exe [2010-10-27 17:01]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = about:blank
    IE: Download All By FlashGet3 - c:\users\sri\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
    IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
    IE: Download By FlashGet3 - c:\users\sri\AppData\Roaming\FlashGetBHO\GetUrl.htm
    IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
    IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    Trusted Zone: kuaiche.com\software
    FF - ProfilePath - c:\users\sri\AppData\Roaming\Mozilla\Firefox\Profiles\yd7m4oub.default\
    FF - prefs.js: network.proxy.type - 0
    FF - component: c:\users\sri\AppData\Roaming\IDM\idmmzcc3\components\idmmzcc.dll
    FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\users\sri\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll

    ---- FIREFOX POLICIES ----
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
    .
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"

    [HKEY_LOCAL_MACHINE\SOFTWARE\ESET\ESET Security\CurrentVersion\Info]
    @Denied: (2) (LocalSystem)
    "AppDataDir"="c:\\ProgramData\\ESET\\ESET NOD32 Antivirus\\"
    "DataDir"="ESET\\ESET NOD32 Antivirus\\"
    "EditionName"=" "
    "InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\"
    "LanguageId"=dword:00000409
    "PackageTag"=dword:6090e758
    "ProductBase"=dword:00000000
    "ProductCode"="{2EEBAC31-3EEF-4118-91CB-1A286A507DB2}"
    "ProductName"="ESET NOD32 Antivirus"
    "ProductType"="eav"
    "ProductVersion"="4.0.437.0"
    "UniqueId"="00CFC91C4CCAFA5B"
    "ScannerBuild"=dword:00001329
    "ScannerVersionId"=dword:00000feb
    "ScannerVersion"="Locked/open ESET for status."
    "FixId"=dword:00000007

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Completion time: 2010-11-15 23:55:09
    ComboFix-quarantined-files.txt 2010-11-15 18:25

    Pre-Run: 9,410,048,000 bytes free
    Post-Run: 9,343,971,328 bytes free

    - - End Of File - - EF18D597C0757CC086B7051A317C6071
     


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.