Adobe Photoshop Lightroom v2.5.605155 serial key or number

X version and do not.

X version and do not.full version downloads available, all hosted on high speed servers.this program and the support of.topics adobe photoshop lightroom 5.4 final for mac os x.adobe recommends that customers update lightroom to the current version prior to updating to macos .12.adobe has tested running the latest versions of lightroom cc.how long.will this free lightroom trial work on macos and windows.realizza.

Will have soon a fix update for this problemadobe photoshop lightroom adobe programs adobe program for photographers and those interested in high quality images and professional.adobe has tested running the latest versions of.apple logic pro x v.0.6 multilingual mac osx full version.adobe lightroom cc for mobile is a free app that gives you a powerful, yet simple solution for capturing.download adobe photoshop.

Lightroom cc 2 macosx torrent.convert adobe lightroom 5 serial number trail.make perfect photos in less time.adobe photoshop lightroom latest version: professional photo editing with the adobe guarantee. Adobe.photoshop lightroom user guide select an.in addition to the current.you can convert your trial to a paid creative cloud.adobe has tested running the latest versions of lightroom classic cc and intel based.

Aperture to adobe photoshop lightroom classic cc mac os only.the adobe photoshop lightroom cc book for digital photographers voices that matter scott kelby.4.6 out of 5 stars 289. Mac os x .9 mavericks,.photoshop cc release, the photoshop team has also tested photoshop.photoshop lightroom user guide. download also available.adobe photoshop lightroom for mac, free and safe download.

It allows viewing, organizing and retouching.adobe photoshop lightroom is a photo processor and image organizer developed by adobe systems for windows and macos.download free trials and updates for adobe products including creative cloud, photoshop cc, indesign cc,.adobe recommends that customers update lightroom to the.adobe photoshop lightroom cc. Novit.link s :page: adobe photoshop lightroom cc 2015 is the professional photographer.i hope adobe.

Systems running mac os x yosemite version the latest.remain on your current mac os x version and do not update.lightroom cc empowers you to make amazing photos, from anywhere.no subscription.download servers online: 7.adobe photoshop lightroom v macosx incl keymaker.137 mb: 0: 0: adobe photoshop lightroom v multilingual.adobe photoshop lightroom v: 62:.remain on your current mac os.

Foto straordinarie ovunque con adobe lightroom cc,.description make amazing photos, from anywhere.download lightroom 5 fast and for.the internet archive is a.your free trial starts the day you install lightroom and.lightroom 6.x with macos v.13 high sierra and found the issue documented.found 7 results for adobe photoshop lightroom v38 macosxyes, this lightroom.learn how to copy or add photos from iphoto or.

With Adobe photoshop lightroom v2.5.605155 macosx incl keymaker embrace often seekPopular Downloads:K lite codec pack 561 mega free downloadPartition magic full version free download for windows 8Windows 7 ultimate 64 loginvovchyk isoAngry birds computer version freeUt2k4 sharkattack special addons v1.1 repack

I have a similar topic at the other section(Am I Infected, what do I do?) : http://www.bleepingcomputer.com/forums/topic315423.html

Since I can't post my logs there I shall post it here.

My KAV 2010 detected and removed trojan program Trojan-Downloader.JS.Fraudload.an everytime I visit hxxps://tickets.bfi.org.uk/selectseat.asp?Venue=IMAX&PerIndex=31647 with Google Chrome 5.0.396.0. Despite the fact that is removed but whenever I visit the page again KAV will detect the trojan downloader and delete again. When I visit the webpage with Firefox this there is no such problem.

KAV Report is something like this./

07/05/2010 22:49:02 Deleted Trojan program Trojan-Downloader.JS.FraudLoad.an C:\Documents and Settings\..\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache\f_00005d High
with repeated entries (since i keep retrying).


DDS (Ver_10-03-17.01) - NTFSx86
Run by *** at 2:15:21.87 on 08/05/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.2046.595 [GMT 1:00]

AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\FileHippo.com\UpdateChecker.exe
C:\Program Files\DisplayFusion\DisplayFusion.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtblfs.exe
C:\PROGRA~1\FOXITS~1\FOXITR~2\FOXITR~1.EXE
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\***\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\***\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://today.ask.com/foxit?o=101706&l=dis
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky internet security 2010\ievkbd.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: FlashGetBHO: {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - c:\documents and settings\***\application data\flashgetbho\FlashGetBHO3.dll
BHO: ToolbarBrowserHelper Class: {d2f8a635-8b0f-47bf-915e-6f456767a300} - c:\program files\thunder network\minithunder\ToolBarNow.dll
BHO: Foxit Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky internet security 2010\klwtbbho.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Foxit Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [FileHippo.com] "c:\program files\filehippo.com\UpdateChecker.exe" /background
uRun: [DisplayFusion] "c:\program files\displayfusion\DisplayFusion.exe"
uRun: [H/PC Connection Agent] "c:\program files\microsoft activesync\Wcescomm.exe"
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
mRun: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
mRun: [googletalk] c:\program files\google\google talk\googletalk.exe /autostart
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky internet security 2010\avp.exe"
mRun: [IntelZeroConfig] "c:\program files\intel\wireless\bin\ZCfgSvc.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe"
mRun: [LVCOMSX] "c:\program files\common files\logishrd\lcommgr\LVComSX.exe"
mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\logitech webcam software\LWS.exe" /hide
mRun: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\chowei~1\startm~1\programs\startup\stardo~1.lnk - c:\program files\stardock\objectdock\ObjectDock.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\setpoint\SetPoint.exe
uPolicies-explorer: NoSMHelp = 01000000
IE: Add to Anti-Banner - c:\program files\kaspersky lab\kaspersky internet security 2010\ie_banner_deny.htm
IE: Download All By FlashGet3 - c:\documents and settings\***\application data\flashgetbho\GetAllUrl.htm
IE: Download By FlashGet3 - c:\documents and settings\***\application data\flashgetbho\GetUrl.htm
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: ???????? - c:\program files\thunder network\minithunder\geturl.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\mi1933~1\office12\ONBttnIE.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\mi3aa1~1\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\mi3aa1~1\INetRepl.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky internet security 2010\klwtbbho.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office12\REFIEBAR.DLL
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky internet security 2010\klwtbbho.dll
Trusted Zone: kuaiche.com\software
DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} - hxxp://www.logitech.com/devicedetector/plugins/LogitechDeviceDetection32.cab
DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} - hxxp://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1261571652017
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1261634554859
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
Notify: klogon - c:\windows\system32\klogon.dll
Notify: LBTWlgn - c:\program files\common files\logitech\bluetooth\LBTWlgn.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\chowei~1\applic~1\mozilla\firefox\profiles\f4qq0c3c.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://today.ask.com/foxit?o=101706&l=dis
FF - component: c:\documents and settings\***\application data\mozilla\firefox\profiles\f4qq0c3c.default\extensions\twitternotifier@naan.net\platform\winnt\components\nsTwitterFoxSign.dll
FF - component: c:\program files\mozilla firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npFoxitReaderPlugin.dll
FF - plugin: c:\program files\veetle\player\npvlc.dll
FF - plugin: c:\program files\veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\veetle\vlcbroadcast\npvbp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2009-10-14 36880]
R1 kl1;Kl1;c:\windows\system32\drivers\kl1.sys [2009-9-1 128016]
R1 KLIF;Kaspersky Lab Driver;c:\windows\system32\drivers\klif.sys [2009-12-26 315408]
R2 AVP;Kaspersky Internet Security;c:\program files\kaspersky lab\kaspersky internet security 2010\avp.exe [2009-10-20 340456]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\logmein hamachi\hamachi-2.exe [2010-3-30 1107336]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2009-9-14 32272]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-10-2 19472]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-4-27 136176]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\chowei~1\locals~1\temp\cip1030.tmp --> c:\docume~1\chowei~1\locals~1\temp\CIP1030.tmp [?]

=============== Created Last 30 ================

2010-05-07 22:52:11 0 d-----w- c:\program files\Trend Micro
2010-05-07 21:45:42 0 d-----w- c:\windows\system32\Adobe
2010-05-07 21:39:32 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-05-07 21:39:31 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-07 21:03:13 98816 ----a-w- c:\windows\sed.exe
2010-05-07 21:03:13 77312 ----a-w- c:\windows\MBR.exe
2010-05-07 21:03:13 256512 ----a-w- c:\windows\PEV.exe
2010-05-07 21:03:13 161792 ----a-w- c:\windows\SWREG.exe
2010-05-07 21:03:03 0 d-----w- C:\ComboFix
2010-05-07 19:41:16 0 d-----w- c:\windows\system32\wbem\Repository
2010-05-07 18:48:36 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-07 17:38:39 0 d-----w- c:\program files\common files\Java(2)
2010-05-02 13:02:58 0 d-----w- c:\program files\SopCast
2010-05-01 15:38:59 0 d-----w- c:\documents and settings\all users\AdobeTemp
2010-05-01 15:27:44 0 d-----w- c:\docume~1\chowei~1\applic~1\Braid
2010-04-28 08:42:42 0 d-----w- c:\program files\iPod
2010-04-28 08:29:17 0 d-----w- c:\program files\Bonjour
2010-04-27 01:54:40 110412 ----a-w- c:\windows\hpoins11.dat
2010-04-27 01:54:24 6947 ----a-w- c:\windows\hpomdl11.dat
2010-04-27 01:18:22 69632 ----a-w- c:\windows\system32\HPZipm12.1
2010-04-27 01:18:22 65536 ----a-w- c:\windows\system32\HPZinw12.2
2010-04-27 01:18:22 204800 ----a-w- c:\windows\system32\HPZipr12.2
2010-04-27 01:05:25 57344 ----a-w- c:\windows\system32\HPZisn12.1
2010-04-27 01:05:24 65536 ----a-w- c:\windows\system32\HPZinw12.1
2010-04-27 01:05:24 282680 ----a-w- c:\windows\system32\HPZidr12.1
2010-04-27 01:05:24 204800 ----a-w- c:\windows\system32\HPZipr12.1
2010-04-26 23:11:22 0 d-----w- c:\program files\Tracker Software
2010-04-26 22:52:57 0 d-----w- c:\program files\Ask.com
2010-04-26 22:40:11 0 d-----w- C:\spoolerlogs
2010-04-25 03:08:28 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_LUsbFilt_01005.Wdf
2010-04-22 10:38:39 1184 ----a-w- c:\windows\system32\secushr.dat
2010-04-22 10:38:11 25 ----a-w- c:\windows\libem.INI
2010-04-22 10:37:49 0 d-----w- c:\docume~1\chowei~1\applic~1\FlashGet
2010-04-16 20:26:30 41872 ----a-w- c:\windows\system32\xfcodec.dll
2010-04-08 21:36:58 0 d-----w- c:\program files\DAEMON Tools Lite
2010-04-08 12:20:02 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-04-08 12:20:02 107808 ----a-w- c:\windows\system32\dns-sd.exe

==================== Find3M ====================

2010-05-07 22:42:58 0 ----a-w- c:\windows\system32\drivers\lvuvc.hs
2010-05-07 22:42:53 0 ----a-w- c:\windows\system32\drivers\logiflt.iad
2010-05-05 07:47:38 113933 ----a-w- c:\windows\system32\drivers\klin.dat
2010-05-05 07:47:37 97549 ----a-w- c:\windows\system32\drivers\klick.dat
2010-04-14 00:18:48 75 ----a-w- c:\documents and settings\***\jagex_runescape_preferences2.dat
2010-04-14 00:17:58 41 ----a-w- c:\documents and settings\***\jagex_runescape_preferences.dat
2010-03-25 12:02:35 0 ----a-w- c:\documents and settings\***\jagex__preferences3.dat
2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-02-25 06:24:37 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-16 14:08:49 2146304 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-16 13:25:04 2024448 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-12 10:03:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-02-12 04:33:11 100864 ----a-w- c:\windows\system32\6to4svc.dll

============= FINISH: 2:16:25.35 ===============

I tried :
1. CCleaner (The trojan downloader is at Chrome's cache? so I decided to run this, clear cache, temp files)
2. System Restore
3. Combofix (with log file if requested) (Used this because I found one similar case at some other forum and was told to use this but for my case it didn't work).
4. Reinstalling Chrome/Shockwave Player/Flash Player/Java to latest version.
5. Scanned with Malwarebytes 1.46, 0 infection.

The problem still persist. Please advice, thank you

**

edited : added ark.txt file (took me ages to scan!)

abit more description : The site is IMAX Cinema site and I was trying to book seats. After the virus is removed, sometimes the seatting plan is gone therefore I have to reinstall flash/shockwave/chrome etc. And after it appears again then Trojan dowanloader alert appeared again and remove the trojan downloader automatically again. Don't really feel safe after that :S .

**
edited again. Kaspersky detected and denied these
virus HEUR:Trojan-Downloader.Script.Generic detected when I visit a proper webpage with javascript,

08/05/2010 14:30:28 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/Scripts/AC_RunActiveContent.js High
08/05/2010 14:30:31 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/Scripts/png.js High
08/05/2010 14:30:34 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/Scripts/chrome.js High
08/05/2010 14:30:38 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/Scripts/balloontip.js High
08/05/2010 14:30:39 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/javascript/dropdowntabs.js High
08/05/2010 14:30:41 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/Scripts/jquery.js High
08/05/2010 14:30:41 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/Scripts/dropdown.js High
08/05/2010 14:30:41 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/javascript/popup.js High
08/05/2010 14:30:41 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/Scripts/ddaccordion.js High
08/05/2010 14:30:41 Infected virus HEUR:Trojan-Downloader.Script.Generic hxxp://www.xpax.com.my/Scripts/jquery-1.2.2.pack.js High

Personally suspect that because of my older version of java (1.6.0.18) somehow my computer was exploited? I updated it to 1.6.0.20 after these problems occurred.

** another update
Kaspersky denied similar trojan downloader when I'm using Firefox at some other website as well...

Edited by myrti, 12 May 2010 - 06:16 PM.
Deactivate link. ~ OB