Here is the log
ComboFix 15-02-16.01 - c.oliveira 19/02/2015 15:16:45.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3326.2197 [GMT 0:00]
Running from: c:\documents and settings\c.oliveira\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\ntuser.pol
c:\documents and settings\c.oliveira\Local Settings\Application Data\assembly\tmp
c:\documents and settings\supportbpcc\Local Settings\Application Data\assembly\tmp
.
.
((((((((((((((((((((((((( Files Created from 2015-01-19 to 2015-02-19 )))))))))))))))))))))))))))))))
.
.
2015-02-18 16:10 . 2015-01-29 09:49 9041640 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{64908506-462A-4A3F-AE05-9CB74F73768D}\mpengine.dll
2015-02-17 16:11 . 2015-01-29 09:49 9041640 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2015-02-13 10:01 . 2015-02-13 10:01 -------- d-----w- c:\program files\MSSOAP
2015-02-13 09:49 . 2015-02-13 09:50 -------- d-----w- c:\program files\Chilkat Software Inc
2015-02-10 11:41 . 2015-02-10 12:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes' Anti-Malware (portable)
2015-02-09 11:04 . 2001-08-17 13:53 6784 -c--a-w- c:\windows\system32\dllcache\serscan.sys
2015-02-09 11:04 . 2001-08-17 13:53 6784 ----a-w- c:\windows\system32\drivers\serscan.sys
2015-02-09 09:57 . 2015-02-09 09:57 35064 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2015-02-09 09:57 . 2015-02-09 09:57 -------- d-----w- c:\documents and settings\All Users\Application Data\RogueKiller
2015-02-06 09:49 . 2008-11-07 18:55 16928 ------w- c:\windows\system32\spmsgXP_2k3.dll
2015-02-06 09:48 . 2015-02-06 09:48 -------- d-----w- c:\windows\system32\pt-PT
2015-02-06 09:48 . 2015-02-06 09:48 -------- d-----w- c:\windows\system32\pt-BR
2015-02-06 09:48 . 2015-02-06 09:48 -------- d-----w- c:\windows\system32\nl-NL
2015-02-06 09:48 . 2015-02-06 09:48 -------- d-----w- c:\windows\system32\it-IT
2015-02-06 09:48 . 2015-02-06 09:48 -------- d-----w- c:\windows\system32\fr-FR
2015-02-06 09:48 . 2015-02-06 09:48 -------- d-----w- c:\windows\system32\es-ES
2015-02-06 09:48 . 2015-02-06 09:48 -------- d-----w- c:\windows\system32\de-DE
2015-02-05 14:05 . 2015-02-05 14:05 -------- d-----w- c:\documents and settings\All Users\Application Data\HP Product Assistant
2015-02-05 14:00 . 2015-02-05 14:00 -------- d-----w- c:\windows\hpojp8500a909
2015-02-05 13:59 . 2008-08-12 10:58 118272 ----a-w- c:\windows\system32\hpf3l082.dll
2015-02-05 13:59 . 2008-08-12 10:58 314880 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpfpp082.dll
2015-02-05 13:57 . 2015-02-05 13:57 -------- d-----w- c:\program files\Common Files\HP
2015-02-05 13:57 . 2015-02-05 13:57 -------- d-----w- c:\program files\Hewlett-Packard
2015-02-05 13:57 . 2008-08-22 04:24 271704 ----a-w- c:\windows\system32\hpzids01.dll
2015-02-05 12:59 . 2015-02-05 12:59 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\PCHealth
2015-02-03 10:26 . 2015-02-03 10:26 -------- d-----w- c:\documents and settings\c.oliveira\Local Settings\Application Data\Microsoft Help
2015-02-02 12:27 . 2015-02-19 13:47 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-02-02 11:59 . 2015-02-10 11:39 108632 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-02-02 11:59 . 2015-02-02 11:59 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2015-02-02 11:59 . 2015-02-02 11:59 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2015-02-02 11:59 . 2014-11-21 06:14 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-02-02 11:37 . 2015-02-02 11:37 -------- d-----w- c:\documents and settings\c.oliveira\Local Settings\Application Data\Google
2015-02-02 11:35 . 2015-02-02 11:35 -------- d-----w- c:\program files\Google
2015-01-30 13:20 . 2015-01-30 13:20 -------- d-----w- c:\documents and settings\c.oliveira\Local Settings\Application Data\PDFCreator
2015-01-30 12:35 . 2015-01-30 12:35 -------- d-----w- c:\windows\system32\SupportAppPBMEO Internet Movel-ZTE
2015-01-30 12:35 . 2015-01-30 12:35 -------- d-----w- c:\program files\MEO Internet Movel-ZTE
2015-01-30 11:55 . 2015-01-30 11:55 -------- d-----w- c:\documents and settings\c.oliveira\Local Settings\Application Data\VS Revo Group
2015-01-30 11:55 . 2015-01-30 11:55 -------- d-----w- c:\documents and settings\All Users\Application Data\VS Revo Group
2015-01-30 11:55 . 2009-12-30 10:20 27064 ----a-w- c:\windows\system32\drivers\revoflt.sys
2015-01-30 11:55 . 2015-01-30 11:55 -------- d-----w- c:\program files\VS Revo Group
2015-01-28 11:02 . 2015-01-28 11:02 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2015-01-28 11:02 . 2008-04-14 00:26 30592 -c--a-w- c:\windows\system32\dllcache\rndismpx.sys
2015-01-28 11:02 . 2008-04-14 00:26 30592 ----a-w- c:\windows\system32\drivers\rndismpx.sys
2015-01-27 12:14 . 2015-01-27 12:14 -------- d-----w- c:\documents and settings\c.oliveira\Application Data\Windows Search
2015-01-23 09:01 . 2015-01-23 09:01 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-01-23 09:01 . 2015-01-23 09:01 701616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-01-22 14:30 . 2015-01-22 14:30 -------- d-----w- c:\program files\PHC
2015-01-22 14:30 . 1999-07-23 13:32 137728 ----a-w- c:\windows\system32\msmapi32.ocx
2015-01-22 14:30 . 2004-03-09 16:45 440352 ----a-w- c:\windows\system32\mshflxgd.ocx
2015-01-22 14:30 . 2004-03-09 16:45 260880 ----a-w- c:\windows\system32\msflxgrd.ocx
2015-01-22 14:29 . 2015-02-19 13:31 -------- d-----w- C:\PHC16
2015-01-21 12:47 . 2015-01-21 12:47 -------- d-----w- c:\documents and settings\supportbpcc\Application Data\HP
2015-01-21 12:47 . 2015-01-21 12:47 -------- d-----w- c:\documents and settings\supportbpcc\Local Settings\Application Data\Identities
2015-01-21 12:47 . 2015-01-21 12:47 -------- d-----w- c:\documents and settings\supportbpcc\Application Data\Windows Desktop Search
2015-01-21 10:44 . 2015-01-28 09:57 -------- d-----w- c:\documents and settings\c.oliveira\Application Data\TeamViewer
2015-01-21 10:44 . 2015-01-21 10:46 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Adobe
2015-01-21 10:42 . 2015-01-21 10:42 -------- d-----w- c:\documents and settings\c.oliveira\Local Settings\Application Data\Identities
2015-01-21 10:42 . 2015-01-21 10:42 -------- d-----w- c:\documents and settings\c.oliveira\Application Data\Windows Desktop Search
2015-01-21 10:41 . 2015-01-21 10:41 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2015-01-21 10:01 . 2015-01-21 10:01 -------- d-----w- c:\program files\Windows Desktop Search
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-01-19 11:08 . 2015-01-19 11:08 58200 ----a-r- c:\documents and settings\c.oliveira\Application Data\Microsoft\Installer\{F08E87FD-F62B-4BAC-A2D6-A94755653F30}\ARPPRODUCTICON.exe
2015-01-16 00:43 . 2015-01-16 00:43 315392 ----a-w- c:\windows\HideWin.exe
2015-01-15 17:14 . 2015-01-15 17:14 98488 ----a-w- c:\windows\system32\pdfcmon.dll
2014-12-31 11:13 . 2015-01-15 18:01 249488 ------w- c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\documents and settings\c.oliveira\Application Data\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\documents and settings\c.oliveira\Application Data\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\documents and settings\c.oliveira\Application Data\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\documents and settings\c.oliveira\Application Data\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\documents and settings\c.oliveira\Application Data\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\documents and settings\c.oliveira\Application Data\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\documents and settings\c.oliveira\Application Data\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-02-11 01:12 152544 ----a-w- c:\documents and settings\c.oliveira\Application Data\Dropbox\bin\DropboxExt.25.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\WebDrive]
@="{37D70BD3-073C-4180-ADD9-C032EA5A7204}"
[HKEY_CLASSES_ROOT\CLSID\{37D70BD3-073C-4180-ADD9-C032EA5A7204}]
2013-12-30 03:55 3063808 ----a-w- c:\windows\system32\wdShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WebDriveTray"="c:\program files\WebDrive\webdrive.exe" [2014-07-08 3636952]
"BitTorrent"="c:\documents and settings\c.oliveira\Application Data\BitTorrent\BitTorrent.exe" [2015-01-19 1680984]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"RTHDCPL"="RTHDCPL.EXE" [2008-04-10 16861184]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 948440]
"Synchronization Manager"="c:\windows\system32\mobsync.exe" [2008-04-14 143360]
"CheckNDISPortF1ac59"="c:\program files\MEO Internet Movel-ZTE\CheckNDISPort_df.exe" [2014-07-10 468224]
"CancelAutoPlay_df"="c:\program files\MEO Internet Movel-ZTE\CancelAutoPlay_df.exe" [2014-05-16 448256]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2011-07-27 434080]
.
c:\documents and settings\c.oliveira\Start Menu\Programs\Startup\
Dropbox.lnk - c:\documents and settings\c.oliveira\Application Data\Dropbox\bin\Dropbox.exe /systemstartup [2015-2-11 42555824]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-10-16 214360]
Snagit 11.lnk - c:\program files\TechSmith\Snagit 11\Snagit32.exe [2013-5-29 9479536]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe /startup [2008-5-26 123904]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-1333942904-1058549214-2093110682-1165\Scripts\Logon\0\0]
"Script"=\\srvmain\NETLOGON\Login.bat
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-1333942904-1058549214-2093110682-1188\Scripts\Logon\0\0]
"Script"=\\srvmain\NETLOGON\Login.bat
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Documents and Settings\\c.oliveira\\Application Data\\Dropbox\\bin\\Dropbox.exe"=
"c:\\Program Files\\WebDrive\\webdrive.exe"=
"c:\\Program Files\\WebDrive\\wdService.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxs08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqfxt08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Documents and Settings\\c.oliveira\\Application Data\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\{624E7452-BA43-4f55-B9D5-FC75EEA0808B}\\setup\\hpznui01.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*
isabled:Windows Remote Management
"3389:TCP"= 3389:TCP
xpsp2res.dll,-22009
.
R1 MpKsl9cb6f5d2;MpKsl9cb6f5d2;c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{64908506-462A-4A3F-AE05-9CB74F73768D}\MpKsl9cb6f5d2.sys [19/02/2015 13:33 39464]
R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe [02/02/2015 11:59 1871160]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [02/02/2015 11:59 969016]
R2 WebDriveFSD;WebDrive Filesystem Driver;c:\program files\WebDrive\wdfsd.sys [30/12/2013 03:59 150232]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [02/02/2015 11:59 23256]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [02/02/2015 12:27 114904]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [30/01/2015 11:55 27064]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - MBAMSWISSARMY
*NewlyCreated* - MPKSL9CB6F5D2
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2015-02-19 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2013-10-23 15:01]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://companyweb
uInternet Connection Wizard,ShellNext = ftp://ftp.factisportugal.com/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.11
FF - ProfilePath - c:\documents and settings\c.oliveira\Application Data\Mozilla\Firefox\Profiles\jjkug5kj.default\
.
- - - - ORPHANS REMOVED - - - -
.
SafeBoot-mbamchameleon
SafeBoot-WudfPf
SafeBoot-WudfRd
MSConfigStartUp-Bing Bar - c:\program files\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2015-02-19 15:19
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(740)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
c:\windows\system32\wdnp32.dll
c:\windows\system32\wdHelper.dll
c:\windows\system32\WININET.dll
c:\windows\system32\wdResDll.dll
c:\windows\system32\wdUIResDll.dll
.
Completion time: 2015-02-19 15:20:57
ComboFix-quarantined-files.txt 2015-02-19 15:20
.
Pre-Run: 92,616,646,656 bytes free
Post-Run: 93,579,427,840 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - F9A34D4EE035E6425427F058F98EDE49
8F558EB6672622401DA993E1E865C861