ComboFix 15-08-20.01 - Yasser 08/21/2015 20:02:00.1.2 - x86 Microsoft Windows 7 Ultimate 6.1.7601.1.1256.213.1033.18.1942.970 [GMT 1:00] Running from: c:\users\Yasser\Desktop\ComboFix.exe AV: ESET Smart Security 8.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289} FW: Pare-feu personnel d'ESET *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2} SP: ESET Smart Security 8.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2015-07-21 to 2015-08-21 ))))))))))))))))))))))))))))))) . . 2015-08-21 19:10 . 2015-08-21 19:10 -------- d-----w- c:\users\Default\AppData\Local\temp 2015-08-21 18:36 . 2015-08-21 18:36 -------- d-----w- c:\windows\LastGood 2015-08-21 18:36 . 2015-08-21 18:36 144 ----a-w- c:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2015-08-21 18:31 . 2015-03-19 17:40 177320 ----a-w- c:\windows\system32\SynTPCo20.dll 2015-08-21 18:31 . 2015-03-19 17:40 205992 ----a-w- c:\windows\system32\SynTPAPI.dll 2015-08-21 18:31 . 2015-03-19 17:39 434856 ----a-w- c:\windows\system32\drivers\SynTP.sys 2015-08-21 18:31 . 2015-03-19 17:40 409256 ----a-w- c:\windows\system32\SynCOM.dll 2015-08-21 18:31 . 2015-03-19 17:39 25256 ----a-w- c:\windows\system32\drivers\Smb_driver_Intel.sys 2015-08-21 18:31 . 2015-08-21 18:36 -------- d-----w- c:\programdata\Synaptics 2015-08-21 18:31 . 2015-08-21 18:31 -------- d-----w- C:\swsetup 2015-08-21 17:02 . 2012-05-24 12:39 8192 ----a-w- c:\windows\system32\drivers\rt2860.bin 2015-08-21 17:02 . 2012-05-24 12:39 4096 ----a-w- c:\windows\system32\drivers\rt3290.bin 2015-08-21 17:02 . 2012-05-24 12:39 4096 ----a-w- c:\windows\system32\drivers\3290PCI4KB.bin 2015-08-21 17:02 . 2015-02-10 19:49 2097296 ----a-w- c:\windows\system32\drivers\netr28.sys 2015-08-21 17:02 . 2014-06-10 09:39 241296 ----a-w- c:\windows\system32\RaCoInst.dll 2015-08-21 17:02 . 2015-02-06 17:55 386928 ----a-w- c:\windows\system32\drivers\FW7650.bin 2015-08-21 17:02 . 2015-08-21 17:02 -------- d-----w- c:\programdata\Ralink Driver 2015-08-21 16:19 . 2015-08-21 16:19 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1BA8EFDD-45A2-4846-B0AC-9E60A2CF6807}\offreg.1732.dll 2015-08-21 15:35 . 2015-08-21 15:35 451 ----a-w- c:\windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 2015-08-21 15:30 . 2015-08-21 15:30 931528 ----a-w- c:\windows\system32\drivers\rtbth.sys 2015-08-21 15:30 . 2015-08-21 15:30 40958 ----a-w- c:\windows\system32\drivers\rt3298.bin 2015-08-21 15:28 . 2015-08-21 15:28 368912 ----a-w- c:\windows\system32\drivers\IntcDAud.sys 2015-08-21 15:27 . 2015-08-21 15:27 85616 ----a-w- c:\windows\system32\RtNicProp32.dll 2015-08-21 15:27 . 2015-08-21 15:27 731904 ----a-w- c:\windows\system32\drivers\Rt86win7.sys 2015-08-21 15:26 . 2015-08-21 15:26 -------- d-----w- c:\program files\Synaptics 2015-08-21 15:26 . 2015-08-21 15:26 1629040 ----a-w- c:\windows\system32\WdfCoInstaller01011.dll 2015-08-21 15:26 . 2015-08-21 15:24 60416 ----a-w- c:\windows\system32\OpenCL.DLL 2015-08-21 15:26 . 2015-08-21 15:26 -------- d-----w- c:\program files\Common Files\Intel 2015-08-21 15:22 . 2015-08-21 15:22 2637528 ----a-w- c:\windows\system32\RTSndMgr.cpl 2015-08-21 15:22 . 2015-08-21 15:22 3535576 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys 2015-08-21 15:22 . 2015-08-21 15:22 2630872 ----a-w- c:\windows\system32\RtkPgExt.dll 2015-08-21 15:22 . 2015-08-21 15:22 1708760 ----a-w- c:\windows\system32\RtkCoInstII.dll 2015-08-21 15:22 . 2015-08-21 15:22 2394328 ----a-w- c:\windows\system32\RtkApoApi.dll 2015-08-21 15:22 . 2015-08-21 15:22 35222128 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT 2015-08-21 15:22 . 2015-08-21 15:22 2585816 ----a-w- c:\windows\system32\RltkAPO.dll 2015-08-21 15:21 . 2015-08-21 15:21 1490960 ----a-w- c:\windows\system32\CX32APO.dll 2015-08-21 14:54 . 2015-08-21 14:54 23840 ----a-w- c:\windows\system32\drivers\HWiNFO32.SYS 2015-08-21 08:03 . 2015-07-31 09:37 9234960 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1BA8EFDD-45A2-4846-B0AC-9E60A2CF6807}\mpengine.dll 2015-08-21 07:56 . 2015-08-21 08:05 -------- d-----w- c:\program files\CCleaner 2015-08-21 07:41 . 2012-02-11 05:37 317440 ----a-w- c:\windows\system32\spoolsv.exe 2015-08-21 07:39 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\explorer.exe 2015-08-21 07:30 . 2015-08-21 14:37 98520 ----a-w- c:\windows\system32\drivers\1CAB0946.sys 2015-08-20 20:46 . 2014-03-09 21:47 99480 ----a-w- c:\windows\system32\infocardapi.dll 2015-08-20 20:46 . 2014-06-30 22:14 8856 ----a-w- c:\windows\system32\icardres.dll 2015-08-20 20:46 . 2014-03-09 21:47 619672 ----a-w- c:\windows\system32\icardagt.exe 2015-08-20 20:46 . 2014-06-06 06:16 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe 2015-08-20 20:34 . 2015-08-20 20:34 -------- d-----w- c:\program files\Internet Download Manager 2015-08-20 14:47 . 2012-03-17 07:27 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys 2015-08-20 14:47 . 2014-12-08 02:46 308224 ----a-w- c:\windows\system32\scesrv.dll 2015-08-20 14:47 . 2015-04-24 17:56 530432 ----a-w- c:\windows\system32\comctl32.dll 2015-08-20 13:56 . 2015-08-20 13:56 -------- d-s---w- c:\windows\system32\CompatTel 2015-08-20 13:56 . 2015-08-20 13:56 -------- d-----w- c:\windows\system32\appraiser 2015-08-20 12:08 . 2015-08-20 12:13 -------- d-----w- c:\windows\system32\MRT 2015-08-20 11:55 . 2015-08-20 08:31 2362688 ----a-w- c:\windows\system32\SNU.dll 2015-08-20 11:55 . 2015-08-20 11:55 -------- d-----w- c:\programdata\2BrightSparks 2015-08-20 11:55 . 2015-08-20 11:55 -------- d-----w- c:\program files\2BrightSparks 2015-08-20 11:36 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll 2015-08-20 11:36 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll 2015-08-20 11:36 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys 2015-08-20 11:36 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys 2015-08-20 11:36 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe 2015-08-20 11:36 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll 2015-08-20 11:36 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll 2015-08-20 11:18 . 2015-08-20 11:18 -------- d-----w- c:\users\Public\Foxit Software 2015-08-20 11:12 . 2015-08-20 11:12 -------- d-----w- c:\program files\Microsoft.NET 2015-08-20 11:12 . 2015-08-20 11:12 -------- d-----w- c:\windows\Migration 2015-08-20 11:07 . 2015-06-23 12:27 246952 ------w- c:\windows\system32\MpSigStub.exe 2015-08-20 11:04 . 2015-08-20 11:04 -------- d-----w- c:\program files\Foxit Software 2015-08-20 10:53 . 2015-07-30 13:13 103120 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-08-20 10:52 . 2015-01-09 02:48 76800 ----a-w- c:\windows\system32\wdi.dll 2015-08-20 10:52 . 2015-01-09 02:48 635904 ----a-w- c:\windows\system32\perftrack.dll 2015-08-20 10:52 . 2015-01-09 02:48 27136 ----a-w- c:\windows\system32\powertracker.dll 2015-08-20 10:41 . 2015-07-15 02:55 44032 ----a-w- c:\windows\system32\basesrv.dll 2015-08-20 10:39 . 2013-05-10 03:20 24576 ----a-w- c:\windows\system32\cryptdlg.dll 2015-08-20 10:37 . 2015-07-15 17:59 3989952 ----a-w- c:\windows\system32\ntkrnlpa.exe 2015-08-20 10:36 . 2014-03-04 09:17 538112 ----a-w- c:\windows\system32\objsel.dll 2015-08-20 10:36 . 2014-03-04 09:17 35328 ----a-w- c:\windows\system32\wincredprovider.dll 2015-08-20 10:36 . 2014-03-04 09:17 47616 ----a-w- c:\windows\system32\dpapiprovider.dll 2015-08-20 10:36 . 2014-03-04 09:17 36864 ----a-w- c:\windows\system32\dimsroam.dll 2015-08-20 10:36 . 2014-03-04 09:17 51200 ----a-w- c:\windows\system32\cngprovider.dll 2015-08-20 10:36 . 2014-03-04 09:17 48128 ----a-w- c:\windows\system32\capiprovider.dll 2015-08-20 10:36 . 2014-03-04 09:17 49664 ----a-w- c:\windows\system32\adprovider.dll 2015-08-20 10:36 . 2014-06-18 22:23 81560 ----a-w- c:\windows\system32\mscories.dll 2015-08-20 10:36 . 2014-06-18 22:23 156824 ----a-w- c:\windows\system32\mscorier.dll 2015-08-20 10:36 . 2014-06-18 22:23 1131664 ----a-w- c:\windows\system32\dfshim.dll 2015-08-20 10:36 . 2015-07-10 17:34 3221504 ----a-w- c:\windows\system32\mstscax.dll 2015-08-20 10:36 . 2015-07-10 17:34 36864 ----a-w- c:\windows\system32\tsgqec.dll 2015-08-20 10:36 . 2015-07-10 17:33 131584 ----a-w- c:\windows\system32\aaclient.dll 2015-08-20 10:34 . 2015-07-28 20:00 635904 ----a-w- c:\windows\system32\invagent.dll 2015-08-20 10:32 . 2015-07-30 17:57 812032 ----a-w- c:\windows\system32\FntCache.dll 2015-08-20 10:32 . 2015-07-30 16:52 2384384 ----a-w- c:\windows\system32\win32k.sys 2015-08-20 10:32 . 2015-07-30 16:49 299520 ----a-w- c:\windows\system32\atmfd.dll 2015-08-20 10:32 . 2015-07-30 17:57 1081856 ----a-w- c:\windows\system32\DWrite.dll 2015-08-20 10:32 . 2015-07-30 17:57 1171456 ----a-w- c:\windows\system32\d3d10warp.dll 2015-08-20 10:32 . 2015-07-30 17:57 26624 ----a-w- c:\windows\system32\lpk.dll 2015-08-20 10:32 . 2015-07-30 17:57 70656 ----a-w- c:\windows\system32\fontsub.dll 2015-08-20 10:32 . 2015-07-30 17:57 10240 ----a-w- c:\windows\system32\dciman32.dll 2015-08-20 10:32 . 2015-07-30 17:57 34304 ----a-w- c:\windows\system32\atmlib.dll 2015-08-20 10:31 . 2014-06-18 01:52 868864 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\tipskins.dll 2015-08-20 10:31 . 2014-06-18 01:52 399360 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\tabskb.dll 2015-08-20 10:31 . 2014-06-18 01:52 348672 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\tiptsf.dll 2015-08-20 10:31 . 2014-06-18 01:52 104448 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\TipBand.dll 2015-08-20 10:31 . 2014-06-18 01:51 181760 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\TabTip.exe 2015-08-20 10:31 . 2014-06-18 01:51 646144 ----a-w- c:\windows\system32\osk.exe 2015-08-20 10:31 . 2014-06-18 01:50 544768 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\TipRes.dll 2015-08-20 10:29 . 2014-08-01 11:35 793600 ----a-w- c:\windows\system32\TSWorkspace.dll 2015-08-20 10:29 . 2012-10-03 16:42 175104 ----a-w- c:\windows\system32\netcorehc.dll 2015-08-20 10:29 . 2012-10-03 16:40 499712 ----a-w- c:\windows\system32\iphlpsvc.dll 2015-08-20 10:29 . 2012-10-03 16:42 18944 ----a-w- c:\windows\system32\netevent.dll 2015-08-20 10:29 . 2012-10-03 15:21 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys 2015-08-20 10:29 . 2015-06-15 21:43 2364416 ----a-w- c:\windows\system32\msi.dll 2015-08-20 10:29 . 2015-06-15 21:47 101824 ----a-w- c:\windows\system32\consent.exe 2015-08-20 10:29 . 2015-06-15 21:43 337408 ----a-w- c:\windows\system32\msihnd.dll 2015-08-20 10:29 . 2015-06-15 21:43 1805824 ----a-w- c:\windows\system32\authui.dll 2015-08-20 10:29 . 2015-06-15 21:43 47104 ----a-w- c:\windows\system32\appinfo.dll 2015-08-20 10:29 . 2015-06-15 21:42 73216 ----a-w- c:\windows\system32\msiexec.exe 2015-08-20 10:29 . 2015-06-15 21:37 25088 ----a-w- c:\windows\system32\msimsg.dll 2015-08-20 10:27 . 2013-10-04 01:58 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll 2015-08-20 10:26 . 2015-01-29 03:02 2311168 ----a-w- c:\windows\system32\wpdshext.dll 2015-08-20 10:26 . 2014-06-06 09:44 509440 ----a-w- c:\windows\system32\qedit.dll 2015-08-20 10:26 . 2013-10-12 02:04 121856 ----a-w- c:\windows\system32\wshom.ocx 2015-08-20 10:26 . 2013-10-12 02:03 163840 ----a-w- c:\windows\system32\scrrun.dll 2015-08-20 10:26 . 2013-10-12 01:15 141824 ----a-w- c:\windows\system32\wscript.exe 2015-08-20 10:26 . 2013-10-12 01:15 126976 ----a-w- c:\windows\system32\cscript.exe 2015-08-20 10:26 . 2013-07-03 03:36 55808 ----a-w- c:\windows\system32\drivers\hidclass.sys . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2015-07-15 17:43 . 2015-08-20 10:37 2560 ----a-w- c:\windows\system32\drivers\en-US\mountmgr.sys.mui 2015-07-14 14:29 . 2015-07-14 14:29 60552 ----a-w- c:\windows\system32\drivers\epfwwfp.sys 2015-07-14 14:29 . 2015-07-14 14:29 46656 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys 2015-07-14 14:29 . 2015-07-14 14:29 202704 ----a-w- c:\windows\system32\drivers\eamonm.sys 2015-07-14 14:29 . 2015-07-14 14:29 185176 ----a-w- c:\windows\system32\drivers\epfw.sys 2015-07-14 14:29 . 2015-07-14 14:29 144536 ----a-w- c:\windows\system32\drivers\ehdrv.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ IDM Shell Extension] @="{CDC95B92-E27C-4745-A8C5-64A52A78855D}" [HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}] 2015-08-14 10:52 23520 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2015-08-15 3907152] "CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2015-06-01 6405912] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2015-07-08 5089480] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI.exe" [2015-08-21 7540440] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RtHDVBg.exe" [2015-08-21 1015512] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2015-03-19 2491560] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-20 62464] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2015-06-11 15872] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2010-11-20 77184] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2010-11-20 25600] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2010-11-20 112640] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2015-07-14 60552] S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2015-07-14 202704] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2015-07-14 144536] S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2015-07-14 46656] S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\system32\drivers\HWiNFO32.SYS [2015-08-21 23840] S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSrv.EXE [2009-11-17 87968] S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992] S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2015-07-08 1353720] S2 IconMan_R;IconMan_R;c:\program files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-11-15 1833104] S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2015-06-12 123968] S2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe [2015-08-21 274024] S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-06-18 1871160] S2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880] S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService.exe [2015-08-21 255192] S2 SynTPEnhService;SynTPEnh Caller Service;c:\program files\Synaptics\SynTP\SynTPEnhService.exe [2015-03-19 192168] S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2015-08-21 368912] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-06-18 23256] S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2015-08-21 98520] S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-06-18 51928] S3 netr28;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28.sys [2015-02-10 2097296] S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys [2015-08-21 230616] S3 rtbth;RTBTH Bluetooth Device Driver;c:\windows\system32\DRIVERS\rtbth.sys [2015-08-21 931528] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2015-08-21 731904] S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys [2015-03-19 25256] . . --- Other Services/Drivers In Memory --- . *NewlyCreated* - MBAMSWISSARMY . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] utcsvc REG_MULTI_SZ DiagTrack . Contents of the 'Scheduled Tasks' folder . . ------- Supplementary Scan ------- . IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm FF - ProfilePath - c:\users\Yasser\AppData\Roaming\Mozilla\Firefox\Profiles\235zpzof.default\ . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2015-08-21 20:13:46 ComboFix-quarantined-files.txt 2015-08-21 19:13 . Pre-Run: 36,547,284,992 bytes free Post-Run: 36,255,559,680 bytes free . - - End Of File - - BF579E953C6AB8C111D0C5AA21C6DCE0 A36C5E4F47E84449FF07ED3517B43A31