Jump to content

Computer shuts down during scan HELP

YeonJunCho
 Share

Recommended Posts

YeonJunCho

YeonJunCho

Posted
  • Author
Posted
ComboFix 14-07-21.01 - new user 07/21/2014  16:56:10.1.2 - x86 NETWORK

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.2812.1722 [GMT -7:00]

Running from: c:\users\new user\Downloads\ComboFix.exe

AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}

SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Created a new restore point

.

.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\uninstaller.exe

c:\users\new user\g2mdlhlpx.exe

c:\windows\s.bat

.

.

(((((((((((((((((((((((((   Files Created from 2014-06-22 to 2014-07-22  )))))))))))))))))))))))))))))))

.

.

2014-07-21 01:32 . 2014-07-21 01:37 62576 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B836C11D-9E65-4581-A62F-90E0779D2C37}\offreg.dll

2014-07-21 01:26 . 2014-07-21 01:27 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)

2014-07-21 00:28 . 2014-07-21 01:20 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys

2014-07-21 00:24 . 2014-07-21 01:25 75480 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys

2014-07-21 00:24 . 2014-07-21 00:24 -------- d-----w- c:\program files\Malwarebytes Anti-Malware

2014-07-21 00:24 . 2014-07-21 00:24 -------- d-----w- c:\programdata\Malwarebytes

2014-07-21 00:24 . 2014-05-12 14:26 51928 ----a-w- c:\windows\system32\drivers\mwac.sys

2014-07-21 00:24 . 2014-05-12 14:25 23256 ----a-w- c:\windows\system32\drivers\mbam.sys

2014-07-20 23:56 . 2014-07-20 23:56 -------- d-----w- c:\users\Guest\AppData\Roaming\Malwarebytes

2014-07-20 23:50 . 2014-06-05 10:54 8140904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B836C11D-9E65-4581-A62F-90E0779D2C37}\mpengine.dll

2014-07-20 22:45 . 2014-07-20 22:48 -------- d-----w- c:\programdata\Malwarebytes Anti-Exploit

2014-07-20 22:45 . 2014-07-21 01:24 -------- d-----w- c:\program files\Malwarebytes Anti-Exploit

2014-07-19 17:48 . 2014-07-19 17:48 -------- d-----w- c:\users\new user\AppData\Local\AMD

2014-07-19 17:48 . 2014-07-19 17:48 -------- d-----w- c:\programdata\ATI

2014-07-19 17:48 . 2014-07-19 17:48 -------- d-----w- c:\program files\AMD AVT

2014-07-19 17:44 . 2014-07-19 17:48 -------- d-----w- c:\programdata\AMD

2014-07-19 17:34 . 2014-07-19 17:34 -------- d-----w- C:\AMD

2014-07-19 07:41 . 2014-07-20 20:41 -------- d-----w- c:\program files\StarCraft II

2014-07-19 07:26 . 2014-07-19 07:26 -------- d-----w- c:\users\new user\AppData\Local\Blizzard Entertainment

2014-07-19 07:25 . 2014-07-20 19:55 -------- d-----w- c:\users\new user\AppData\Local\Battle.net

2014-07-19 07:23 . 2014-07-20 20:42 -------- d-----w- c:\program files\Battle.net

2014-07-19 07:23 . 2014-07-19 08:04 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment

2014-07-19 07:23 . 2014-07-19 08:02 -------- d-----w- c:\programdata\Blizzard Entertainment

2014-07-19 07:21 . 2014-07-19 07:21 -------- d-----w- c:\programdata\Battle.net

2014-07-16 22:53 . 2014-07-20 20:41 -------- d-----w- c:\users\new user\AppData\Local\ArcadeGiant

2014-07-16 22:46 . 2014-07-16 22:46 -------- d-----w- c:\users\new user\AppData\Local\globalUpdate

2014-07-16 22:46 . 2014-07-16 22:46 -------- d-----w- c:\programdata\Reimage Protector

2014-07-16 22:45 . 2014-07-20 20:41 -------- d-----w- C:\rei

2014-07-16 22:41 . 2014-07-20 20:41 -------- d-----w- c:\users\new user\AppData\Roaming\dvdcss

2014-07-16 22:41 . 2014-07-16 22:41 -------- d-----w- c:\users\new user\AppData\Local\ZJMedia

2014-07-16 22:40 . 2014-07-16 22:40 -------- d-----w- c:\users\new user\AppData\Local\SearchProtect

2014-07-16 22:34 . 2014-07-16 22:34 -------- d-----w- c:\users\Guest\AppData\Local\Apple Computer

2014-07-11 07:28 . 2014-05-01 21:14 765968 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E382F236-9455-4939-8336-1D15BBB4530F}\gapaengine.dll

2014-07-11 07:28 . 2014-06-05 10:54 8140904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2014-07-06 22:46 . 2014-07-06 22:46 -------- d-----w- c:\users\new user\AppData\Local\Adobe

2014-06-22 18:13 . 2014-07-20 20:38 -------- d-----w- c:\program files\iPod

2014-06-22 18:13 . 2014-07-20 20:42 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1

2014-06-22 18:13 . 2014-07-20 20:42 -------- d-----w- c:\program files\iTunes

.

.

.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-07-08 19:32 . 2012-03-29 16:13 699056 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2014-07-08 19:32 . 2011-05-21 06:03 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2014-05-01 21:14 . 2012-10-03 14:17 765968 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

2013-07-22 04:54 . 2013-07-22 04:49 4188160 ----a-w- c:\program files\GUT9B26.tmp

2010-09-02 22:17 . 2010-09-02 22:17 15872 ----a-w- c:\program files\Common Files\JH_Killer.exe

.

.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-06-21 995176]

"BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2009-08-03 1167360]

"ControlCenter3"="c:\program files\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-13 43848]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2014-05-27 152392]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"WLStart"="c:\program files\Windows Live\Installer\wlstart.exe" [2009-07-26 768336]

"Application Restart 6BB5F3A7147660DB416B838893C7D0734872ADA9F7DB68B1D019043A1CB89397"="c:\windows\System32\ctfmon.exe" [2009-07-14 8704]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk]

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

backup=c:\windows\pss\McAfee Security Scan Plus.lnk.CommonStartup

backupExtension=.CommonStartup

.

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Post-it® Software Notes Lite.lnk]

backup=c:\windows\pss\Post-it® Software Notes Lite.lnkCommon Startup

path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Post-it® Software Notes Lite.lnk

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2013-11-21 16:57 959904 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApplePhotoStreams]

2013-11-20 23:43 59720 ----a-w- c:\program files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iCloudServices]

2013-11-20 23:43 59720 ----a-w- c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

2014-05-27 02:12 152392 ----a-w- c:\program files\iTunes\iTunesHelper.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2014-01-18 00:24 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

2013-03-12 14:32 253816 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

.

R1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20120302.001\BHDrvx86.sys [2012-03-02 820856]

R1 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NIS\1309000.009\ccSetx86.sys [2012-06-07 132768]

R1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20120315.002\IDSvix86.sys [2012-03-07 368248]

R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NIS\1309000.009\Ironx86.SYS [2012-04-18 149624]

R1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NIS\1309000.009\SYMNETS.SYS [2012-04-18 318584]

R2 IntuitUpdateServiceV4;Intuit Update Service v4;c:\program files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe [2014-01-03 14624]

R2 MbaeSvc;Malwarebytes Anti-Exploit Service;c:\program files\Malwarebytes Anti-Exploit\mbae-svc.exe [2014-06-04 360592]

R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]

R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]

R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-19 107392]

R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-21 162408]

R3 Bridge0;Bridge0;c:\windows\system32\drivers\WDBridge.sys [2009-07-28 63240]

R3 BrSerIb;Brother Serial Interface Driver(WDM);c:\windows\system32\DRIVERS\BrSerIb.sys [2009-11-03 71424]

R3 BrUsbSIb;Brother Serial USB Driver(WDM);c:\windows\system32\DRIVERS\BrUsbSIb.sys [2009-11-03 11520]

R3 dc3d;MS Hardware Device Detection Driver;c:\windows\system32\DRIVERS\dc3d.sys [2011-04-09 40448]

R3 JmUsbCcgp;JMicron USB Composite Device Lower Filter Driver;c:\windows\system32\DRIVERS\jmccgp.sys [2009-12-03 15216]

R3 JmUsbVideo;JMicron 31x Upper Filter Driver;c:\windows\system32\Drivers\jmcam.sys [2009-12-03 46320]

R3 JmUsbVideo2;JMicron 31x Lower Filter Driver;c:\windows\system32\Drivers\jmcam_lo.sys [2009-12-03 24048]

R3 k57nd60x;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-13 229888]

R3 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [2014-07-21 75480]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-05-12 23256]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-07-21 110296]

R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-05-12 51928]

R3 Mkd2Bthf;Mkd2Bthf;c:\windows\system32\drivers\Mkd2Bthf.sys [2012-11-13 80728]

R3 Mkd2kfNt;Mkd2kfNt;c:\windows\system32\drivers\Mkd2kfNt.sys [2012-11-13 127064]

R3 Mkd2Nadr;Mkd2Nadr;c:\windows\system32\drivers\Mkd2Nadr.sys [2013-01-26 95504]

R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl.sys [2013-07-25 18944]

R3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]

R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2013-06-21 295376]

R3 NWUSBCDFIL;Novatel Wireless Installation CD;c:\windows\system32\DRIVERS\NwUsbCdFil.sys [2010-07-08 20480]

R3 NWUSBModem_000;Novatel Wireless USB Modem Driver (vGEN);c:\windows\system32\DRIVERS\nwusbmdm_000.sys [2010-07-08 176384]

R3 NWUSBPort_000;Novatel Wireless USB Status Port Driver (vGEN);c:\windows\system32\DRIVERS\nwusbser_000.sys [2010-07-08 176384]

R3 NWUSBPort2_000;Novatel Wireless USB Status2 Port Driver (vGEN);c:\windows\system32\DRIVERS\nwusbser2_000.sys [2010-07-08 176384]

R3 NWVZHelper;Novatel Wireless Verizon Device Helper;c:\program files\Novatel Wireless\Verizon\Drivers\NWHelper_001.exe [2010-06-04 216064]

R3 PS_MDP;ReadyComm Presentation Space Helper Service;c:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]

R3 ReadyComm.DirectRouter;ReadyComm.DirectRouter;c:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-09-22 174592]

R3 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-08-14 3291008]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-04 1343400]

R3 wdmirror;wdmirror;c:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11792]

R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 81704]

R4 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-11-25 172032]

R4 IGRS;IGRS;c:\program files\Lenovo\ReadyComm\common\IGRS.exe [2009-07-15 38152]

R4 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc;c:\program files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]

R4 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc;c:\program files\Lenovo\ReadyComm\ConnSvc.exe [2009-11-17 575304]

S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NIS\1309000.009\SYMDS.SYS [2011-07-26 340088]

S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1309000.009\SYMEFA.SYS [2012-05-22 924320]

S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys [2010-01-20 23136]

S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2009-11-13 58368]

S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-10-19 31288]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation REG_MULTI_SZ   SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc SensrSvc Mcx2Svc

IgrsSvcs REG_MULTI_SZ   ReadyComm.DirectRouter PS_MDP

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2014-06-13 13:57 1091912 ----a-w- c:\program files\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe

.

Contents of the 'Scheduled Tasks' folder

.

2014-07-12 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 19:32]

.

2014-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-16 15:25]

.

2014-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2013-09-16 15:25]

.

.

------- Supplementary Scan -------

.


uInternet Settings,ProxyOverride = *.local

Trusted Zone: axa-equitable.com

Trusted Zone: axaonline.com

Trusted Zone: equitable.com

Trusted Zone: gemoney.com\www

Trusted Zone: google.com\mail

Trusted Zone: jhfnjunction.com

Trusted Zone: jhfnjunction.com\www

Trusted Zone: liveoffice.com\exchange

Trusted Zone: lpl.com

Trusted Zone: statementlook.com\www

Trusted Zone: wkfsexaminer.com\axa

TCP: DhcpNameServer = 172.20.10.1

DPF: {485E3F31-2C60-4537-A410-0BEBD4788F1B} - hxxps://wtiwebopt.axaonline.com/fins_enu/19241/applets/SiebelAx_HI_Client.cab

DPF: {62728BFD-8813-4845-A195-3CAC1A1B7686} - hxxps://wtiwebopt.axaonline.com/fins_enu/19241/applets/SiebelAx_Calendar.cab

FF - ProfilePath - c:\users\new user\AppData\Roaming\Mozilla\Firefox\Profiles\7s1j5jid.default\


.

- - - - ORPHANS REMOVED - - - -

.

Toolbar-Locked - (no file)

Toolbar-{0cc09160-108c-4759-bab1-5c12c216e005} - (no file)

WebBrowser-{0CC09160-108C-4759-BAB1-5C12C216E005} - (no file)

ShellIconOverlayIdentifiers-{771C7324-DA80-49D3-8017-753B0AF60951} - (no file)

SafeBoot-mbamchameleon

SafeBoot-MBAMSwissArmy

SafeBoot-mcmscsvc

SafeBoot-MCODS

MSConfigStartUp-FreeScreenSharing - c:\users\new user\AppData\Local\FreeScreenSharing\FreeScreenSharing.exe

MSConfigStartUp-Malwarebytes' Anti-Malware - c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe

.

.

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_USERS\S-1-5-21-1892232867-1052483326-4277736845-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.Email.1"

.

[HKEY_USERS\S-1-5-21-1892232867-1052483326-4277736845-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.VCard.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2014-07-21  17:11:19

ComboFix-quarantined-files.txt  2014-07-22 00:11

.

Pre-Run: 53,169,184,768 bytes free

Post-Run: 53,709,295,616 bytes free

.

- - End Of File - - 7175F7AA6FE590DC13F0E7C5FE9F6AB2

A36C5E4F47E84449FF07ED3517B43A31
Link to post
Share on other sites
  • 1 month later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Very sorry for the delay. The site has been very busy and there has been more demand for support than we were able handle for a while there.
I'm just now getting back to see if you still need help or not. If you do please reply back and let me know and I'll go ahead and assist you.

Thank you
 

Link to post
Share on other sites
  • 1 month later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.