Pls help..my notebook is having problem...

nowis — Sun, 15 Feb 2009 22:29:42 +0800

Hi, I am using Dell 6400 Notebook..I am having this problem..which I can't login to windows..
The message prompt in blue screen was hardware malfunction- call your hardware vendor for support - nmi:parity check/ memory parity error ** the system has halted**

Pls help...anyway I can backup my documents..
Your reply is very much appreciated...

Thanks again..

zip phone and win pwn..

nowis — Sat, 24 May 2008 19:33:29 +0800

May i know what's the different between zip phone and win pwn??? noob here.

Still curious to know when i restore my iphone . i only know how to use zip phone to jailbreak my iphone and alot people here recommend me winpwn but i don't know how to use it...

iphone restore problem

nowis — Mon, 19 May 2008 18:53:45 +0800

i've restore my iphone ..now everything gone but i still can receive call..how can i install back all my things? now i only have emergency call??

how to remove PSW.online games virus?

nowis — Fri, 04 Apr 2008 19:24:08 +0800

could anyone help me on this.. i m noob here..what should i do ??

[addedon]April 4, 2008, 7:45 pm[/addedon]here is my logfile :

ComboFix 08-04-03.5 - Administrator 2008-04-04 19:32:25.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1408 [GMT 8:00]
Running from: C:\Documents and Settings\Administrator\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\internet explorer\plugins\SysWin7s.Jmp
C:\WINDOWS\avpsrv.exe
C:\WINDOWS\DbgHlp32.exe
C:\WINDOWS\kvsc3.exe
C:\WINDOWS\lotushlp.exe
C:\WINDOWS\msccrt.exe
C:\WINDOWS\PTSShell.exe
C:\WINDOWS\SHAProc.exe
C:\WINDOWS\system32\avpsrv.dll
C:\WINDOWS\system32\ayEZZEZZ1042.dll
C:\WINDOWS\system32\ayFKKFKK1055.dll
C:\WINDOWS\system32\ayQACQAC1030.dll
C:\WINDOWS\system32\ayWWQWWQ1003.dll
C:\WINDOWS\system32\DbgHlp32.dll
C:\WINDOWS\system32\kvsc3.dll
C:\WINDOWS\system32\LotusHlp.dll
C:\WINDOWS\system32\msccrt.dll
C:\WINDOWS\system32\msosdohs00.dll
C:\WINDOWS\system32\msosmhfp00.dll
C:\WINDOWS\system32\msosmnsf00.dll
C:\WINDOWS\system32\PTSShell.dll
C:\WINDOWS\system32\upxdnd.dll
C:\WINDOWS\system32\WSockDrv32.dll
C:\WINDOWS\system32\wtahbz.dll
C:\WINDOWS\system32\xbcvxb.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_FPIDS32
-------\Service_fpids32
-------\Service_mhfp
-------\Service_msosdohs00
-------\Service_msosmnsf00

((((((((((((((((((((((((( Files Created from 2008-03-04 to 2008-04-04 )))))))))))))))))))))))))))))))
.

2008-04-04 18:59 . 2008-04-04 18:59 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-04-04 18:59 . 2008-04-04 19:30 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-04-04 15:20 . 2008-04-04 10:09 20,496 --a------ C:\WINDOWS\jbtppo.exe
2008-04-04 10:10 . 2008-04-04 10:10 34,572 --a------ C:\WINDOWS\system32\drwxpg.dll
2008-04-03 00:08 . 2008-04-03 00:08 35,084 --a------ C:\WINDOWS\system32\uvkbuj.dll
2008-04-03 00:08 . 2008-04-03 00:08 30,468 --a------ C:\WINDOWS\system32\znccsq.dll
2008-04-03 00:08 . 2008-04-04 10:11 17,408 --a------ C:\WINDOWS\system32\qqxyd.dll
2008-04-03 00:08 . 2008-04-04 10:10 14,552 --a------ C:\WINDOWS\system32\qqxyd.exe
2008-04-03 00:08 . 2008-04-04 10:11 1,096 ---hs---- C:\WINDOWS\system32\xbcvxb.cfg
2008-04-03 00:07 . 2008-04-03 00:07 36,620 --a------ C:\WINDOWS\system32\cunzny.dll
2008-04-03 00:07 . 2008-04-03 00:07 33,792 --a------ C:\WINDOWS\system32\nmhqba.dll
2008-04-03 00:07 . 2008-04-03 00:07 33,548 --a------ C:\WINDOWS\system32\blrmkv.dll
2008-04-03 00:07 . 2008-04-03 00:07 32,256 --a------ C:\WINDOWS\system32\jpxaaz.dll
2008-04-03 00:07 . 2008-04-03 00:07 12,729 --a------ C:\WINDOWS\system32\ayEZZEZZ1043.exe
2008-04-02 22:05 . 2008-04-01 17:22 21,078 --a------ C:\WINDOWS\ictknb.exe
2008-04-02 19:24 . 2008-04-02 19:25 <DIR> d-------- C:\Program Files\ZiPhone
2008-04-02 18:37 . 2008-04-02 18:37 <DIR> d-------- C:\Program Files\iTunes
2008-04-02 18:37 . 2008-04-02 18:37 <DIR> d-------- C:\Program Files\iPod
2008-04-02 18:37 . 2008-04-02 18:37 <DIR> d-------- C:\Program Files\Bonjour
2008-04-02 18:37 . 2008-04-03 07:14 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Apple Computer
2008-04-02 18:37 . 2008-04-04 19:36 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-04-02 18:37 . 2008-04-02 18:38 1,409 --a------ C:\WINDOWS\QTFont.for
2008-04-02 18:36 . 2008-04-02 18:36 <DIR> d-------- C:\Program Files\Common Files\Apple
2008-04-02 18:36 . 2008-04-02 18:36 <DIR> d-------- C:\Program Files\Apple Software Update
2008-04-02 18:36 . 2008-04-02 18:36 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-04-02 18:36 . 2008-02-18 11:16 30,464 --a------ C:\WINDOWS\system32\drivers\usbaapl.sys
2008-04-02 18:21 . 2004-08-04 00:56 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
2008-04-02 18:21 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-04-02 18:21 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
2008-04-02 18:21 . 2001-08-17 22:36 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
2008-04-02 18:09 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys
2008-04-01 17:23 . 2008-04-01 17:23 34,816 --a------ C:\WINDOWS\system32\okpngh.dll
2008-04-01 16:52 . 2008-04-01 16:52 139,264 --a------ C:\WINDOWS\system32\kfmzol.dll
2008-04-01 16:52 . 2008-04-01 16:52 34,816 --a------ C:\WINDOWS\system32\alqjvc.dll
2008-04-01 16:52 . 2008-04-01 16:52 33,792 --a------ C:\WINDOWS\system32\irllxu.dll
2008-04-01 16:52 . 2008-04-01 16:52 33,280 --a------ C:\WINDOWS\system32\fcrgqu.dll
2008-04-01 16:52 . 2008-04-01 16:52 32,768 --a------ C:\WINDOWS\system32\tuiqst.dll
2008-04-01 16:52 . 2008-04-01 16:52 32,256 --a------ C:\WINDOWS\system32\hgxdtq.dll
2008-04-01 16:50 . 2008-04-01 00:13 21,078 --a------ C:\WINDOWS\nfjsjm.exe
2008-04-01 00:49 . 2004-08-03 23:14 359,040 --a------ C:\WINDOWS\system32\drivers\tcpip.sys.td
2008-04-01 00:41 . 2008-04-02 00:02 <DIR> d-------- C:\TDDOWNLOAD
2008-04-01 00:14 . 2008-04-01 00:14 92,719 --a------ C:\WINDOWS\wpcap.dll
2008-04-01 00:14 . 2008-04-01 00:14 36,725 --a------ C:\WINDOWS\Packet.dll
2008-04-01 00:14 . 2008-04-01 00:14 34,064 --a------ C:\WINDOWS\system32\drivers\3D.tmp
2008-04-01 00:14 . 2008-04-01 00:14 30,712 --a------ C:\WINDOWS\WanPacket.dll
2008-04-01 00:14 . 2008-04-01 00:14 28,501 --a------ C:\WINDOWS\npptools.dll
2008-04-01 00:14 . 2008-04-03 00:09 13,374 --a------ C:\WINDOWS\system32\ayJHVJHV1015.exe
2008-04-01 00:13 . 2008-04-04 09:37 30,468 --a------ C:\WINDOWS\system32\tciocp32.dll
2008-04-01 00:13 . 2008-04-04 19:36 30,468 --a------ C:\WINDOWS\system32\mfchlp32.dll
2008-04-01 00:13 . 2008-04-03 00:08 17,348 --a------ C:\WINDOWS\tciocp32.exe
2008-04-01 00:13 . 2008-04-04 10:10 17,276 --a------ C:\WINDOWS\mfchlp32.exe
2008-04-01 00:13 . 2008-04-03 00:08 13,077 --a------ C:\WINDOWS\system32\ayWWQWWQ1003.exe
2008-04-01 00:13 . 2008-04-01 17:23 12,258 --a------ C:\WINDOWS\system32\ayQACQAC1030.exe
2008-04-01 00:13 . 2008-04-04 10:10 256 --a------ C:\WINDOWS\system32\msosmnsf.dat
2008-04-01 00:13 . 2008-04-01 00:13 233 --a------ C:\b3b4f3ed78981990343.bat
2008-04-01 00:12 . 2008-04-04 09:37 33,548 --a------ C:\WINDOWS\system32\SHAProc.dat
2008-04-01 00:12 . 2008-04-04 09:37 30,208 --a------ C:\WINDOWS\system32\fmsbbqi.dll
2008-04-01 00:12 . 2008-04-03 00:07 17,361 --a------ C:\WINDOWS\fmsbbqi.exe
2008-04-01 00:12 . 2008-04-01 17:22 12,717 --a------ C:\WINDOWS\system32\ayEZZEZZ1042.exe
2008-04-01 00:12 . 2008-04-03 00:07 12,138 --a------ C:\WINDOWS\system32\ayFKKFKK1055.exe
2008-04-01 00:12 . 2008-04-03 00:07 11,925 --a------ C:\WINDOWS\system32\ayNNBNNB1042.exe
2008-04-01 00:12 . 2008-04-03 00:07 1,096 ---hs---- C:\WINDOWS\system32\oqrthc.cfg
2008-04-01 00:12 . 2008-04-04 10:09 512 --a------ C:\WINDOWS\system32\msosdohs.dat
2008-04-01 00:11 . 2008-04-04 10:10 3,200 --ahs---- C:\WINDOWS\system32\drivers\msosfpids32.sys
2008-04-01 00:11 . 2008-04-01 00:11 256 --a------ C:\WINDOWS\system32\msosmhfp.dat
2008-04-01 00:00 . 2008-04-01 00:00 <DIR> d-------- C:\Documents and Settings\Administrator\dwhelper
2008-03-31 23:44 . 2008-03-31 23:44 <DIR> d-------- C:\Documents and Settings\Administrator\Contacts
2008-03-31 19:42 . 2008-03-31 19:42 268 --ah----- C:\sqmdata00.sqm
2008-03-31 19:42 . 2008-03-31 19:42 244 --ah----- C:\sqmnoopt00.sqm
2008-03-31 19:41 . 2008-04-02 08:32 <DIR> d-------- C:\Program Files\SopCast
2008-03-31 19:38 . 2008-04-04 18:50 <DIR> d-------- C:\Program Files\Mozilla Firefox 3 Beta 4
2008-03-31 19:38 . 2008-03-31 19:38 0 --a------ C:\WINDOWS\nsreg.dat
2008-03-31 19:26 . 2008-03-31 19:26 <DIR> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-03-31 19:26 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2008-03-31 19:24 . 2008-04-02 18:36 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-03-31 19:22 . 2008-03-31 19:23 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\AVG7
2008-03-31 19:21 . 2008-03-31 19:21 <DIR> d-------- C:\Documents and Settings\LocalService\Application Data\AVG7
2008-03-31 19:21 . 2008-03-31 19:21 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-03-31 19:21 . 2008-03-31 19:22 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\avg7
2008-03-31 19:21 . 2008-03-31 19:21 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2008-03-31 19:17 . 2008-03-31 19:26 <DIR> d-------- C:\Program Files\Windows Live
2008-03-31 19:17 . 2008-03-31 19:22 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2008-03-31 19:17 . 2008-03-31 19:17 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-31 19:14 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll
2008-03-31 19:14 . 2007-07-30 19:18 34,136 --a------ C:\WINDOWS\system32\wucltui.dll.mui
2008-03-31 19:14 . 2007-07-30 19:19 25,944 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
2008-03-31 19:14 . 2007-07-30 19:19 25,944 --a------ C:\WINDOWS\system32\wuapi.dll.mui
2008-03-31 19:14 . 2007-07-30 19:18 20,312 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
2008-03-31 19:12 . 2008-04-02 21:41 0 --a------ C:\WINDOWS\system32\admovie.jpg
2008-03-31 19:10 . 2008-03-31 19:10 <DIR> d---s---- C:\Documents and Settings\Administrator\UserData
2008-03-31 19:07 . 2008-03-31 19:07 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\thunder_vod_cache
2008-03-31 19:07 . 2008-04-03 06:19 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\thunder_dctemp
2008-03-31 19:07 . 2008-03-31 19:07 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\mvcache
2008-03-31 19:07 . 2008-04-04 11:39 2,150 --a------ C:\WINDOWS\system32\cid_store.dat
2008-03-31 19:06 . 2005-11-28 13:51 135,168 -ra------ C:\WINDOWS\system32\igfxres.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-04 11:36 20,123 --sh--w C:\ntldr.exe
2008-04-02 10:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-04-01 09:26 --------- d-----w C:\Program Files\Thunder
2008-03-31 18:08 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Media Player Classic
2008-03-31 10:55 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-31 10:55 --------- d-----w C:\Program Files\Realtek
2008-03-31 10:55 --------- d-----w C:\Documents and Settings\Administrator\Application Data\InstallShield
2008-03-31 10:53 --------- d-----w C:\Program Files\Intel
2008-03-31 10:52 --------- d-----w C:\Program Files\Windows Media Connect 2
2008-03-31 10:50 --------- d-----w C:\Program Files\MpcStar
2008-03-31 10:50 --------- d-----w C:\Program Files\K-Lite Codec Pack
2008-03-31 10:49 --------- d-----w C:\Program Files\QvodPlayer
2008-03-31 10:48 --------- d-----w C:\Documents and Settings\All Users\Application Data\Thunder Network
2008-03-31 10:37 --------- d-----w C:\Program Files\microsoft frontpage
2004-08-03 16:56 20,123 ------w C:\WINDOWS\Fonts\00-1A-4D-F4-7A-C3\system\wdfmgr.exe
.

------- Sigcheck -------

2004-08-03 23:14 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\system32\dllcache\tcpip.sys
2004-08-03 23:14 359040 c1783498edb152656303b5d5bcabd86c C:\WINDOWS\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56 15360]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-10-07 12:04 2083664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-03 22:32 208952]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-03 22:31 59392]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-09-01 08:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-09-01 08:00 455168]
"TBMonEx"="C:\WINDOWS\Fonts\00-1A-4D-F4-7A-C3\system\wdfmgr.exe" [2004-08-04 00:56 20123]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-11-28 13:55 98304]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-11-28 13:52 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-11-28 13:55 118784]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-03-31 19:22 579072]
"inudhya"="C:\WINDOWS\Fonts\00-1A-4D-F4-7A-C3\system\soundma.exe" [ ]
"fmsbbqi"="C:\WINDOWS\fmsbbqi.exe" [2008-04-03 00:07 17361]
"mfchlp32"="C:\WINDOWS\mfchlp32.exe" [2008-04-04 10:10 17276]
"tciocp32"="C:\WINDOWS\tciocp32.exe" [2008-04-03 00:08 17348]
"QuickTime Task"="C:\Program Files\MpcStar\Codecs\QuickTime\QTTask.exe" [2008-01-31 23:13 385024]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 13:10 267048]
"DbgHlp32"="C:\WINDOWS\DbgHlp32.exe" [ ]
"SHAProc"="C:\WINDOWS\SHAProc.exe" [ ]
"PTSShell"="C:\WINDOWS\PTSShell.exe" [ ]
"WSockDrv32"="C:\WINDOWS\jbtppo.exe" [2008-04-04 10:09 20496]
"AVPSrv"="C:\WINDOWS\AVPSrv.exE" [ ]
"LotusHlp"="C:\WINDOWS\LotusHlp.exe" [ ]
"Kvsc3"="C:\WINDOWS\Kvsc3.exE" [ ]
"msccrt"="C:\WINDOWS\msccrt.exe" [ ]
"upxdnd"="C:\WINDOWS\upxdnd.exe" [ ]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-03-31 19:21 219136]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{6ce08af1-5f70-4c1a-8d1a-8aba11619e87}"= C:\WINDOWS\system32\ayFKKFKK1055.dll [ ]
"{73627e95-ccad-47bb-a7a6-3180cb5dfb0d}"= C:\WINDOWS\system32\ayNNBNNB1042.dll [ ]
"{f65d26c5-f67a-4849-a9e3-350f6aae3a6c}"= C:\WINDOWS\system32\ayWWQWWQ1003.dll [ ]
"{1b792ceb-5239-4ae0-bb8b-47ab9173c5d6}"= C:\WINDOWS\system32\ayQACQAC1030.dll [ ]
"{fe0ebc25-107f-4fda-ada3-7238573f90ad}"= C:\WINDOWS\system32\ayJHVJHV1015.dll [ ]
"{bdddfeab-1142-4246-a5f4-45674d15bcfe}"= C:\WINDOWS\system32\ayEZZEZZ1043.dll [ ]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"= ctwdm32.dll
"VIDC.YV12"= yv12vfw.dll
"msacm.ac3acm"= ac3acm.acm
"msacm.lameacm"= lameACM.acm

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\my.exe]
Debugger=C:\WINDOWS\Fonts\00-1A-4D-F4-7A-C3\system\lmmh.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\QQLogin.exe]
Debugger=C:\WINDOWS\system32\qqxyd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\XYD2.exe]
Debugger=C:\WINDOWS\system32\qqxyd.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\QvodPlayer\\QvodTerminal.exe"=
"C:\\Program Files\\Thunder\\Program\\Thunder5.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=

R2 Qvod Terminal;Qvod Terminal;C:\Program Files\QvodPlayer\QvodTerminal.exe [2008-02-22 18:22]
S2 dohs;dohs;C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp33.tmp []
S2 mnsf;mnsf;C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp3B.tmp []
S3 sys_flt;sys_flt;C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~21.tmp []

.
Contents of the 'Scheduled Tasks' folder
"2008-04-02 10:36:46 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-04 19:36:45
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\dohs]
"ImagePath"="\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp33.tmp"

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mnsf]
"ImagePath"="\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp3B.tmp"

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\NPF]
"ImagePath"="\??\C:\WINDOWS\system32\drivers\3D.tmp"

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\sys_flt]
"ImagePath"="\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~21.tmp"
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-04-04 19:37:56 - machine was rebooted
ComboFix-quarantined-files.txt 2008-04-04 11:37:40
Pre-Run: 81,294,159,872 bytes free
Post-Run: 81,257,852,928 bytes free

Lowyat.NET: Latest topics by nowis

Pls help..my notebook is having problem...

zip phone and win pwn..

iphone restore problem

how to remove PSW.online games virus?