
PAGE ntkrnlpa.exe!NtMapViewOfSection 805B203A 7 Bytes JMP B9EAF2AA mfehidk.sys (McAfee Link Driver/McAfee, Inc.)

text ntkrnlpa.exe!ZwYieldExecution 80504B08 7 Bytes JMP B9EAF294 mfehidk.sys (McAfee Link Driver/McAfee, Inc.) Running: s6c1xkrj.exe Driver: C:\DOCUME~1\me\LOCALS~1\Temp\pxtdypob.sysĬode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwCreateKey Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwDeleteKey Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwDeleteValueKey Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwMapViewOfSection Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwOpenKey Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwOpenProcess Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwOpenThread Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwRenameKey Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwSetSecurityObject Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwSetValueKey Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwTerminateProcess Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwUnmapViewOfSection Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) ZwYieldExecution Ĭode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) NtMapViewOfSectionĬode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) NtOpenProcessĬode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) NtOpenThreadĬode mfehidk.sys (McAfee Link Driver/McAfee, Inc.) NtSetSecurityObject
#Efax messenger with firefox windows#
Windows Service Pack 3 Harddisk1\DR1 -> \Device\Ide\IdeDeviceP2T0L0-f ST3160815AS rev.3.CHF HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (圜enter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (圜enter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp () -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\8DDYX0ZBPZ () -> Value: 8DDYX0ZBPZ -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ (Hijack.Zones) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\XMZH42I4GI () -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\8DDYX0ZBPZ () -> Quarantined and deleted successfully. If I closed your topic and you need it to be reopened, simply PM me. If you need more time, simply let me know. I close my topics if you have not replied in 5 days.If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.

Once the computer is totally clean, I'll certainly let you know. Even if your computer appears to act better, it may still be infected. The cleaning process, once started, has to be completed.Keep updating me regarding your computer behavior, good, or bad.Never run more than one scan at a time.Please refrain from running tools or applying updates other than those I suggest.If you're stuck, or you're not sure about certain step, always ask before doing anything else.Your mistakes during cleaning process may have very serious consequences, like unbootable computer. Read all of my instructions very carefully.If some log exceeds 50,000 characters post limit, split it between couple of replies.
