Login | Live Chat & Podcast at 1:00PM Eastern on Sunday! |
 Search | |
| |
02-Jan-2004, 01:31 PM
#16 | ||||||
| Last edited by cybertech; 02-Jan-2004 at 02:50 PM.. |
| |
06-Jan-2004, 04:11 PM
#19 | |||||
| |
06-Jan-2004, 04:14 PM
#20 | |||||
| |
06-Jan-2004, 04:39 PM
#23 | |||||
| |
06-Jan-2004, 04:42 PM
#24 | |||||
| |
06-Jan-2004, 04:52 PM
#25 | |||||
| |
06-Jan-2004, 05:14 PM
#26 | |||||
| |
06-Jan-2004, 06:21 PM
#28 | |||||
| Last edited by nikos_nikos; 07-Jan-2004 at 05:16 PM.. |
06-Jan-2004, 09:06 PM
#29 | |||||
| I removed some obvious stuff and here are my final logs for HijackThis v1.97.7 , Ad-ware 6.0. and Spybot Please tell me what has to be removed (I use adware version of Kazaa) Logfile of HijackThis v1.97.7 Scan saved at 03:06:58, on 7/1/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\System32\inetsrv\inetinfo.exe D:\WINDOWS\System32\ctfmon.exe D:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe D:\WINDOWS\System32\nvsvc32.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\System32\Fast.exe D:\WINDOWS\System32\taskswitch.exe D:\WINDOWS\System32\fast.exe D:\Program Files\Drivers\Iomega\DriveIcons\ImgIcon.exe D:\WINDOWS\System32\CTHELPER.EXE D:\program files\music software\MUSICMATCH Jukebox\mmtask.exe D:\Program Files\Common Files\Symantec Shared\ccApp.exe D:\WINDOWS\system32\taskmgr.exe D:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe D:\Program Files\Internet Explorer\iexplore.exe D:\WINDOWS\system32\notepad.exe D:\Program Files\Spybot - Search & Destroy\SpybotSD.exe D:\Program Files\DVD Software\DVD5\WinDVD.exe D:\WINDOWS\system32\NOTEPAD.EXE D:\Documents and Settings\Nikos\Desktop\HijackThis.exe N3 - Netscape 7: user_pref("browser.startup.homepage", ""); (D:\Documents and Settings\Nikos\Application Data\Mozilla\Profiles\default\zwur8jji.slt\prefs.js) N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://D%3A%5CProgram%20Files%5CInternet%20Software%5CNetscape%5CNetscape%206%5Cse archplugins%5CSBWeb_01.src"); (D:\Documents and Settings\Nikos\Application Data\Mozilla\Profiles\default\zwur8jji.slt\prefs.js) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx__SpybotSDDisabled (file missing) O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - D:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: WebFerret - {A58686ED-FC46-44C3-95C6-4A812AB776F1} - D:\Program Files\Internet Software\WebFerret\FerretBand.dll O3 - Toolbar: McAfee VirusScan - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - D:\Program Files\McAfee\McAfee VirusScan\VSCShellExtension.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - D:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Systran40stand.IEPlugIn - {EDDEB5CF-6CC3-11D6-ABAA-00B0D094B576} - D:\Program Files\Systran\4_0\Standard\IEPlugIn.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [CoolSwitch] D:\WINDOWS\System32\taskswitch.exe O4 - HKLM\..\Run: [FastUser] D:\WINDOWS\System32\fast.exe O4 - HKLM\..\Run: [Iomega Startup Options] D:\Program Files\Drivers\Iomega\Common\ImgStart.exe O4 - HKLM\..\Run: [Iomega Drive Icons] D:\Program Files\Drivers\Iomega\DriveIcons\ImgIcon.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" O4 - HKLM\..\Run: [mmtask] d:\program files\music software\MUSICMATCH Jukebox\mmtask.exe O4 - HKLM\..\Run: [PinnacleDriverCheck] D:\WINDOWS\System32\PSDrvCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "D:\program files\video software\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ccApp] "D:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [ccRegVfy] "D:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe" O4 - HKLM\..\Run: [SpyStopper] D:\Program Files\SpyStopper\spystopper.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKCU\..\Run: [Active Desktop Calendar] D:\Program Files\Utilities\Active Desktop Calendar\ADC.exe O4 - Startup: clean.exe (2).lnk = J:\TEMP\CLEAN.EXE O4 - Startup: clean.exe (3).lnk = E:\TEMP\clean.exe O4 - Startup: clean.exe (4).lnk = F:\TEMP\clean.exe O4 - Startup: CLEAN.EXE (5).lnk = C:\WINDOWS\TEMP\CLEAN.EXE O4 - Startup: clean.exe.lnk = D:\TEMP\clean.exe O4 - Startup: Task manager.lnk = D:\WINDOWS\system32\taskmgr.exe O8 - Extra context menu item: Allow Popups - D:\Program Files\Internet Software\Popup Ad Filter\WhiteGetUrl.js O8 - Extra context menu item: Download with GetRight - D:\Program Files\Internet Software\GetRight\GRdownload.htm O8 - Extra context menu item: Open with GetRight Browser - D:\Program Files\Internet Software\GetRight\GRbrowse.htm O8 - Extra context menu item: Å&îáãùãÞ óôï Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM) O9 - Extra button: ICQ Pro (HKLM) O9 - Extra 'Tools' menuitem: ICQ (HKLM) O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Messenger (HKLM) O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O15 - Trusted Zone: vertical.di.uoa.gr O16 - DPF: Yahoo! Chat - http://cs5.chat.sc5.yahoo.com/c381/chat.cab O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://cs5.chat.sc5.yahoo.com/v43/yacscom.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst.cab O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/downlo...22/wmv9VCM.CAB O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/...6/mcinsctl.cab O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://office.microsoft.com/productu...ntent/opuc.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...987.5818171296 O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/...16/mcgdmgr.cab O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab O16 - DPF: {CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA} (Java Runtime Environment 1.4.0) - O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab --------------------------------------------------------------------- Spybot (updated) log : --------------------------------------------------------------------- MyWay.MyBar: Global settings (Registry key, nothing done) HKEY_LOCAL_MACHINE\Software\MyWay\myBar WhazIt: Installer (File, nothing done) D:\WINDOWS\Downloaded Program Files\downloader.inf Windows Media Player: Client ID (Registry change, nothing done) HKEY_USERS\S-1-5-21-1801674531-1292428093-725345543-1003\Software\Microsoft\MediaPlayer\Player\Settings\Client ID= Windows Media Player: Client ID (Registry change, nothing done) HKEY_USERS\S-1-5-19\Software\Microsoft\MediaPlayer\Player\Settings\Client ID= --- Spybot-S&D version: 1.2 --- 2003-11-05 Includes\Cookies.sbi 2003-10-27 Includes\Dialer.sbi 2003-12-17 Includes\Hijackers.sbi 2003-11-11 Includes\Keyloggers.sbi 2003-12-17 Includes\Malware.sbi 2003-03-16 Includes\plugin-ignore.ini 2003-11-05 Includes\Security.sbi 2003-12-17 Includes\Spybots.sbi 2003-03-16 Includes\Temporary.sbi 2003-11-27 Includes\Tracks.uti 2003-12-10 Includes\Trojans.sbi --------------------------------------------------------------------- Ad-ware 6.0 (updated) log : --------------------------------------------------------------------- Lavasoft Ad-aware Personal Build 6.181 Logfile created on :ÔåôÜñôç, 7 Éáíïõáñßïõ 2004 02:42:19 Created with Ad-aware Personal, free for private use. Using reference-file :01R246 06.01.2004 ______________________________________________________ Reffile status: ========================= Reference file loaded: Reference Number : 01R246 06.01.2004 Internal build : 173 File location : D:\Program Files\Lavasoft\Ad-aware 6\reflist.ref Total size : 776473 Bytes Signature data size : 761491 Bytes Reference data size : 14918 Bytes Signatures total : 17315 Target categories : 10 Target families : 394 Memory + processor status: ========================== Number of processors : 1 Processor architecture : Non Intel Memory available:50 % Total physical memory:785904 kb Available physical memory:392124 kb Total page file size:1137044 kb Available on page file:817064 kb Total virtual memory:2097024 kb Available virtual memory:2046576 kb OS: Ad-aware Settings ========================= Set : Activate in-depth scan (Recommended) Set : Safe mode (always request confirmation) Set : Scan active processes Set : Scan registry Set : Deep scan registry Set : Scan within archives Set : Scan my Hosts file 7-1-2004 02:42:19 - Scan started. (Custom mode) Listing running processes ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ #:1 [smss.exe] FilePath : \SystemRoot\System32\ ThreadCreationTime : 6-1-2004 23:45:29 BasePriority : Normal #:2 [winlogon.exe] FilePath : \??\D:\WINDOWS\system32\ ThreadCreationTime : 6-1-2004 23:45:38 BasePriority : High #:3 [services.exe] FilePath : D:\WINDOWS\system32\ ThreadCreationTime : 6-1-2004 23:45:40 BasePriority : Normal FileSize : 99 KB FileVersion : 5.1.2600.0 (xpclient.010817-1148) ProductVersion : 5.1.2600.0 CompanyName : Microsoft Corporation FileDescription : Services and Controller app InternalName : services.exe OriginalFilename : services.exe ProductName : Microsoft Created on : 23/8/2001 10:00:00 Last accessed : 6/1/2004 23:42:56 Last modified : 23/8/2001 10:00:00 #:4 [lsass.exe] FilePath : D:\WINDOWS\system32\ ThreadCreationTime : 6-1-2004 23:45:40 BasePriority : Normal FileSize : 11 KB FileVersion : 5.1.2600.1106 (xpsp1.020828-1920) ProductVersion : 5.1.2600.1106 CompanyName : Microsoft Corporation FileDescription : LSA Shell (Export Version) InternalName : lsass.exe OriginalFilename : lsass.exe ProductName : Microsoft Created on : 23/8/2001 10:00:00 Last accessed : 6/1/2004 23:42:56 Last modified : 29/8/2002 00:41:26 #:5 [svchost.exe] FilePath : D:\WINDOWS\system32\ ThreadCreationTime : 6-1-2004 23:45:42 BasePriority : Normal FileSize : 12 KB FileVersion : 5.1.2600.0 (xpclient.010817-1148) ProductVersion : 5.1.2600.0 CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe OriginalFilename : svchost.exe ProductName : Microsoft Created on : 23/8/2001 10:00:00 Last accessed : 6/1/2004 23:42:56 Last modified : 23/8/2001 10:00:00 #:6 [svchost.exe] FilePath : D:\WINDOWS\System32\ ThreadCreationTime : 6-1-2004 23:45:42 BasePriority : Normal FileSize : 12 KB FileVersion : 5.1.2600.0 (xpclient.010817-1148) ProductVersion : 5.1.2600.0 CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe OriginalFilename : svchost.exe ProductName : Microsoft Created on : 23/8/2001 10:00:00 Last accessed : 6/1/2004 23:42:56 Last modified : 23/8/2001 10:00:00 #:7 [spoolsv.exe] FilePath : D:\WINDOWS\system32\ ThreadCreationTime : 6-1-2004 23:45:46 BasePriority : Normal FileSize : 50 KB FileVersion : 5.1.2600.0 (XPClient.010817-1148) ProductVersion : 5.1.2600.0 CompanyName : Microsoft Corporation FileDescription : Spooler SubSystem App InternalName : spoolsv.exe OriginalFilename : spoolsv.exe ProductName : Microsoft Created on : 23/8/2001 10:00:00 Last accessed : 6/1/2004 23:42:56 Last modified : 23/8/2001 10:00:00 #:8 [explorer.exe] FilePath : D:\WINDOWS\ ThreadCreationTime : 6-1-2004 23:45:47 BasePriority : Normal FileSize : 980 KB FileVersion : 6.00.2800.1106 (xpsp1.020828-1920) ProductVersion : 6.00.2800.1106 CompanyName : Microsoft Corporation FileDescription : Windows Explorer InternalName : explorer OriginalFilename : EXPLORER.EXE ProductName : Microsoft Created on : 16/6/2003 03:12:58 Last accessed : 7/1/2004 00:21:04 Last modified : 29/8/2002 00:41:24 #:9 [inetinfo.exe] FilePath : D:\WINDOWS\System32\inetsrv\ ThreadCreationTime : 6-1-2004 23:45:48 BasePriority : Normal FileSize : 13 KB FileVersion : 5.1.2600.0 (xpclient.010817-1148) ProductVersion : 5.1.2600.0 CompanyName : Microsoft Corporation FileDescription : Internet Information Services InternalName : INETINFO.EXE OriginalFilename : INETINFO.EXE ProductName : Internet Information Services Created on : 28/11/2003 13:25:44 Last accessed : 6/1/2004 23:42:56 Last modified : 23/8/2001 10:00:00 #:10 [ctfmon.exe] FilePath : D:\WINDOWS\System32\ ThreadCreationTime : 6-1-2004 23:45:49 BasePriority : Normal FileSize : 13 KB FileVersion : 5.1.2600.1106 (xpsp1.020828-1920) ProductVersion : 5.1.2600.1106 CompanyName : Microsoft Corporation FileDescription : CTF Loader InternalName : CTFMON OriginalFilename : CTFMON.EXE ProductName : Microsoft Created on : 26/9/2002 14:36:37 Last accessed : 6/1/2004 23:42:56 Last modified : 29/8/2002 00:41:22 #:11 [mdm.exe] FilePath : D:\Program Files\Common Files\Microsoft Shared\VS7Debug\ ThreadCreationTime : 6-1-2004 23:45:49 BasePriority : Normal FileSize : 328 KB FileVersion : 7.10.3077 ProductVersion : 7.10.3077 Copyright : Copyright CompanyName : Microsoft Corporation FileDescription : Machine Debug Manager InternalName : mdm.exe OriginalFilename : mdm.exe ProductName : Microsoft Created on : 19/3/2003 01:55:56 Last accessed : 6/1/2004 23:42:56 Last modified : 19/3/2003 01:55:56 #:12 [nvsvc32.exe] FilePath : D:\WINDOWS\System32\ ThreadCreationTime : 6-1-2004 23:45:49 BasePriority : Normal FileSize : 80 KB FileVersion : 6.14.10.5216 ProductVersion : 6.14.10.5216 Copyright : (C) NVIDIA Corporation. All rights reserved. CompanyName : NVIDIA Corporation FileDescription : NVIDIA Driver Helper Service, Version 52.16 InternalName : NVSVC OriginalFilename : nvsvc32.exe ProductName : NVIDIA Driver Helper Service, Version 52.16 Created on : 6/10/2003 12:16:00 Last accessed : 6/1/2004 23:42:56 Last modified : 6/10/2003 12:16:00 #:13 [svchost.exe] FilePath : D:\WINDOWS\System32\ ThreadCreationTime : 6-1-2004 23:45:51 BasePriority : Normal FileSize : 12 KB FileVersion : 5.1.2600.0 (xpclient.010817-1148) ProductVersion : 5.1.2600.0 CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe OriginalFilename : svchost.exe ProductName : Microsoft Created on : 23/8/2001 10:00:00 Last accessed : 6/1/2004 23:42:56 Last modified : 23/8/2001 10:00:00 #:14 [fast.exe] FilePath : D:\WINDOWS\System32\ ThreadCreationTime : 6-1-2004 23:45:52 BasePriority : Normal FileSize : 48 KB FileVersion : 5.1.3564.0 (Lab06_DEV(lamadio).011003-1729) ProductVersion : 5.1.3564.0 CompanyName : Microsoft Corporation FileDescription : Super Fast User Switcher InternalName : Fast OriginalFilename : Fast.EXE ProductName : Microsoft Created on : 8/10/2001 09:59:36 Last accessed : 6/1/2004 23:45:52 Last modified : 8/10/2001 09:59:36 #:15 [taskswitch.exe] FilePath : D:\WINDOWS\System32\ ThreadCreationTime : 6-1-2004 23:45:53 BasePriority : Normal FileSize : 44 KB Created on : 8/10/2001 09:59:36 Last accessed : 6/1/2004 23:42:56 Last modified : 8/10/2001 09:59:36 #:16 [fast.exe] FilePath : D:\WINDOWS\System32\ ThreadCreationTime : 6-1-2004 23:45:54 BasePriority : Normal FileSize : 48 KB FileVersion : 5.1.3564.0 (Lab06_DEV(lamadio).011003-1729) ProductVersion : 5.1.3564.0 CompanyName : Microsoft Corporation FileDescription : Super Fast User Switcher InternalName : Fast OriginalFilename : Fast.EXE ProductName : Microsoft Created on : 8/10/2001 09:59:36 Last accessed : 6/1/2004 23:45:52 Last modified : 8/10/2001 09:59:36 #:17 [imgicon.exe] FilePath : D:\Program Files\Drivers\Iomega\DriveIcons\ ThreadCreationTime : 6-1-2004 23:45:54 BasePriority : Normal FileSize : 60 KB FileVersion : 6, 3, 0, 30 ProductVersion : 6, 3, 0, 30 Copyright : 6.3, Copyright CompanyName : Iomega Corp. FileDescription : IMGICON InternalName : IMGICON OriginalFilename : IMGICON.exe ProductName : Iomega Corp. IMGICON 6.3 Created on : 6/6/2001 06:40:45 Last accessed : 6/1/2004 23:42:56 Last modified : 12/9/2001 08:35:31 #:18 [cthelper.exe] FilePath : D:\WINDOWS\System32\ ThreadCreationTime : 6-1-2004 23:45:58 BasePriority : Normal FileSize : 40 KB FileVersion : 1, 0, 0, 1 ProductVersion : 1, 0, 0, 1 Copyright : Copyright CompanyName : Creative Technology Ltd FileDescription : cthelper InternalName : cthelper OriginalFilename : cthelper.exe ProductName : cthelper Created on : 4/3/2003 17:52:38 Last accessed : 6/1/2004 23:42:56 Last modified : 7/2/2002 16:01:24 #:19 [mmtask.exe] FilePath : D:\program files\music software\MUSICMATCH Jukebox\ ThreadCreationTime : 6-1-2004 23:46:00 BasePriority : Normal FileSize : 52 KB FileVersion : 1.0.0.1 ProductVersion : 1.0.0.1 Copyright : TODO: (c) <Company name>. All rights reserved. CompanyName : TODO: <Company name> FileDescription : TODO: <File description> InternalName : mmtask.exe OriginalFilename : mmtask.exe ProductName : TODO: <Product name> Created on : 23/5/2003 02:36:47 Last accessed : 6/1/2004 23:42:56 Last modified : 19/5/2003 08:21:00 #:20 [ccapp.exe] FilePath : D:\Program Files\Common Files\Symantec Shared\ ThreadCreationTime : 6-1-2004 23:46:02 BasePriority : Normal FileSize : 53 KB FileVersion : 1.0.10.006 ProductVersion : 1.0.10.006 Copyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved. CompanyName : Symantec Corporation FileDescription : Common Client CC App InternalName : ccApp OriginalFilename : ccApp.exe ProductName : Common Client Created on : 21/12/2003 05:43:38 Last accessed : 6/1/2004 23:42:56 Last modified : 2/12/2003 14:11:04 #:21 [taskmgr.exe] FilePath : D:\WINDOWS\system32\ ThreadCreationTime : 6-1-2004 23:46:15 BasePriority : High FileSize : 125 KB FileVersion : 5.1.2600.1106 (xpsp1.020828-1920) ProductVersion : 5.1.2600.1106 CompanyName : Microsoft Corporation FileDescription : Windows TaskManager InternalName : taskmgr OriginalFilename : taskmgr.exe ProductName : Microsoft Created on : 26/9/2002 14:35:53 Last accessed : 7/1/2004 00:23:50 Last modified : 29/8/2002 00:41:28 #:22 [ccevtmgr.exe] FilePath : D:\Program Files\Common Files\Symantec Shared\ ThreadCreationTime : 6-1-2004 23:46:17 BasePriority : Normal FileSize : 309 KB FileVersion : 1.03.4 ProductVersion : 1.03.4 Copyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved. CompanyName : Symantec Corporation FileDescription : Event Manager Service InternalName : ccEvtMgr OriginalFilename : ccEvtMgr.exe ProductName : Event Manager Created on : 13/11/2002 13:44:02 Last accessed : 7/1/2004 00:20:31 Last modified : 13/11/2002 13:44:02 #:23 [iexplore.exe] FilePath : D:\Program Files\Internet Explorer\ ThreadCreationTime : 7-1-2004 00:00:42 BasePriority : Normal FileSize : 89 KB FileVersion : 6.00.2800.1106 (xpsp1.020828-1920) ProductVersion : 6.00.2800.1106 CompanyName : Microsoft Corporation FileDescription : Internet Explorer InternalName : iexplore OriginalFilename : IEXPLORE.EXE ProductName : Microsoft Created on : 26/9/2002 14:37:45 Last accessed : 7/1/2004 00:10:49 Last modified : 29/8/2002 00:41:26 #:24 [notepad.exe] FilePath : D:\WINDOWS\system32\ ThreadCreationTime : 7-1-2004 00:13:35 BasePriority : Normal FileSize : 64 KB FileVersion : 5.1.2600.0 (xpclient.010817-1148) ProductVersion : 5.1.2600.0 CompanyName : Microsoft Corporation FileDescription : Notepad InternalName : Notepad OriginalFilename : NOTEPAD.EXE ProductName : Microsoft Created on : 23/8/2001 10:00:00 Last accessed : 7/1/2004 00:27:56 Last modified : 23/8/2001 10:00:00 #:25 [nero.exe] FilePath : D:\Program Files\CD-Recorder\Nero\Nero\ ThreadCreationTime : 7-1-2004 00:22:15 BasePriority : High FileSize : 4960 KB FileVersion : 5, 5, 10, 28 ProductVersion : 5, 5, 10, 28 Copyright : Copyright (c) 1995-2003 Ahead Software AG CompanyName : Ahead Software AG FileDescription : Nero - Burning Rom InternalName : Nero - Burning Rom OriginalFilename : NERO.EXE ProductName : LANGUAGE_English2 Created on : 28/5/2003 23:26:33 Last accessed : 7/1/2004 00:22:15 Last modified : 24/4/2003 15:07:50 #:26 [imapi.exe] FilePath : D:\WINDOWS\System32\ ThreadCreationTime : 7-1-2004 00:22:17 BasePriority : Normal FileSize : 121 KB FileVersion : 5.1.2600.1106 (xpsp1.020828-1920) ProductVersion : 5.1.2600.1106 CompanyName : Microsoft Corporation FileDescription : Image Mastering API InternalName : imapi OriginalFilename : imapi.exe ProductName : Microsoft Created on : 26/9/2002 14:36:29 Last accessed : 7/1/2004 00:22:17 Last modified : 29/8/2002 00:41:26 #:27 [ad-aware.exe] FilePath : D:\Program Files\Lavasoft\Ad-aware 6\ ThreadCreationTime : 7-1-2004 00:40:57 BasePriority : Normal FileSize : 668 KB FileVersion : 6.0.1.181 ProductVersion : 6.0.0.0 Copyright : Copyright CompanyName : Lavasoft Sweden FileDescription : Ad-aware 6 core application InternalName : Ad-aware.exe OriginalFilename : Ad-aware.exe ProductName : Lavasoft Ad-aware Plus Created on : 6/1/2004 23:36:18 Last accessed : 7/1/2004 00:11:46 Last modified : 12/7/2003 20:00:20 Memory scan result : ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ New objects : 0 Objects found so far: 0 Started registry scan ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Alexa Object recognized! Type : RegKey Data : Category : Data Miner Comment : Rootkey : HKEY_LOCAL_MACHINE Object : SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} Windows Object recognized! Type : RegData Data : Category : Data Miner Comment : MediaPlayer Unique ID Rootkey : HKEY_CURRENT_USER Object : Software\Microsoft\MediaPlayer\Player\Settings Value : Client ID Data : Registry scan result : ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ New objects : 2 Objects found so far: 2 Started deep registry scan ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Deep registry scan result : ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ New objects : 0 Objects found so far: 2 Deep scanning and examining files (D  ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ NCase Object recognized! Type : File Data : kyf.dat Category : Data Miner Comment : Object : D:\WINDOWS\ FileSize : 872 KB Created on : 7/7/2003 06:18:23 Last accessed : 6/1/2004 23:55:24 Last modified : 7/7/2003 06:19:50 Whazit Object recognized! Type : File Data : whatzit.xml Category : Malware Comment : Object : D:\WINDOWS\ FileSize : 1 KB Created on : 7/7/2003 06:19:19 Last accessed : 6/1/2004 23:55:25 Last modified : 7/7/2003 06:19:19 Disk scan result for D:\ ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ New objects : 0 Objects found so far: 4 Performing conditional scans.. ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ NCase Object recognized! Type : File Data : fiz1 Category : Data Miner Comment : Object : d:\windows\ Created on : 7/7/2003 06:19:32 Last accessed : 6/1/2004 23:55:26 Last modified : 7/7/2003 06:19:32 Whazit Object recognized! Type : File Data : downloader.inf Category : Malware Comment : Object : d:\windows\downloaded program files\ Created on : 3/7/2003 20:38:14 Last accessed : 6/1/2004 23:55:26 Last modified : 3/7/2003 20:38:14 Conditional scan result: ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ New objects : 2 Objects found so far: 6 02:51:52 Scan complete Summary of this scan ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Total scanning time :00:09:33:78 Objects scanned :164305 Objects identified :6 Objects ignored :0 New objects :6 |
 |
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
| You Are Using:  |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 04:45 PM. Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved. |  |
Facebook
Twitter
TechGuy.tv
TSG Mobile