Our November Competition
User Reviews - Add Yours!
The PCHF Lounge
Go Back   PC Help Forum » Operating Systems » Windows Vista & 7
Register for a Free Account

Windows Vista & 7 - EXE's won't run posted in the Operating Systems forums; Hi! Below is the logfile from HiJackThis. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:32:46, on 16-06-2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16851) Boot ...


Reply
Scan your PC for Errors
Old 06-16-2009   #1
Bronze Member
 
Join Date: Jun 2009
Posts: 47
PC Experience: Some Experience
Post EXE's won't run

Hi!
Below is the logfile from HiJackThis.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:32:46, on 16-06-2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16851)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10a.ex e
C:\Windows\system32\wuauclt.exe
C:\Users\Simone\Desktop\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = mitAOL | HP
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = mitAOL | HP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = mitAOL | HP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = mitAOL | HP
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\3.0.0.134\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\3.0.0.134\IPSBHO.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\s wg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\3.0.0.134\coIEPlg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll,Regi sterModule
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
O4 - HKCU\..\Run: [MsgCenterExe] "C:\Program Files\Common Files\Real\Update_OB\RealOneMessageCenter.exe" -osboot
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Send billede til &Bluetooth-enhed... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send siden til &Bluetooth-enhed... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/...oUploader3.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton 360\Engine\3.0.0.134\coIEPlg.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: APSHook.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatisk LiveUpdate-planlægning - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 11430 bytes
simone0206 is offline   Reply With Quote
Advertisement - Register to Remove

Old 06-16-2009   #2
Senior Security Analyst
 
chiaz's Avatar
 
Join Date: Jun 2006
Location: Singapore
Posts: 5,176
PC Experience: PC Guru
Default re: EXE's won't run

Hello, and welcome to PCHF.

Your HijackThis log appears good to me, but that is not an absolute indication that your system is clean.

May I enquire if this is just a general check-up, or are you experiencing problems with your PC?
chiaz is offline   Reply With Quote
Old 06-16-2009   #3
Bronze Member
 
Join Date: Jun 2009
Posts: 47
PC Experience: Some Experience
Default re: EXE's won't run

Yeah I'm experiencing problems with my PC. It started a couple of days ago, when I was online and all of a sudden my computer didn't respond, so I rebooted. But as soon as I pressed on the e-icon (the internet) it wouldn’t respond.
But that's not the only problem, other programs wont start when I try to open them =/
I've tried to scan my system with Malwarebytes' Anti-Malware and CCleaner and most recent I downloaded HiJackThis.
My internet is working, but there is still times where it wont respond, and I have to reboot....
simone0206 is offline   Reply With Quote
Old 06-16-2009   #4
Senior Security Analyst
 
chiaz's Avatar
 
Join Date: Jun 2006
Location: Singapore
Posts: 5,176
PC Experience: PC Guru
Default re: EXE's won't run

I'm moving this thread to the [In Progress] section.


Let's have you download ComboFix.exe.

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe


* IMPORTANT !!! Save ComboFix.exe to your Desktop


Disable your AntiVirus and AntiSpyware applications, usually via a right-click on the System Tray icon. They may otherwise interfere with our tools.

Double-click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Recovery Console can be installed from your disc if you have Vista if you wish.

Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.





Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:





Click on Yes to continue scanning for malware.


When finished, it shall produce a log for you. Please include C:\ComboFix.txt, in your next reply.
chiaz is offline   Reply With Quote
Old 06-16-2009   #5
Bronze Member
 
Join Date: Jun 2009
Posts: 47
PC Experience: Some Experience
Default re: EXE's won't run

Okay, done that =) Here's the log:


ComboFix 09-06-15.07 - Simone 16-06-2009 19:37.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.45.1030.18.2046.1292 [GMT 2:00]
Kører fra: c:\users\Simone\Desktop\ComboFix.exe
AV: Norton 360 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
SP: Norton 360 *disabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
SP: Windows Defender *disabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Dannede nyt systemgendannelsespunkt
.
((((((((((((((((((((((((((((((((((((((( Andet, der er slettet )))))))))))))))))))))))))))))))))))))))))))))))))
.
D:\Desktop.ini
.
((((((((((((((((((((((((((((( Filer skabt fra 2009-05-16 til 2009-06-16 )))))))))))))))))))))))))))))))))))
.
2009-06-16 12:34 . 2009-06-10 11:20 89104 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\NAVENG.SYS
2009-06-16 12:34 . 2009-06-10 11:20 876144 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\NAVEX15.SYS
2009-06-16 12:34 . 2009-06-10 11:20 177520 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\NAVENG32.DLL
2009-06-16 12:34 . 2009-06-10 11:20 1181040 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\NAVEX32A.DLL
2009-06-16 12:33 . 2009-06-10 11:20 371248 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\EECTRL.SYS
2009-06-16 12:33 . 2009-06-10 11:20 101936 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\ERASER.SYS
2009-06-16 12:33 . 2009-06-10 11:20 259368 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\ECMSVR32.DLL
2009-06-16 12:33 . 2009-06-10 11:19 2414128 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\CCERASER.DLL
2009-06-15 17:46 . 2009-06-15 17:46 -------- d-----w- c:\users\Simone\AppData\Roaming\Malwarebytes
2009-06-15 17:46 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-15 17:46 . 2009-06-15 17:46 -------- d-----w- c:\programdata\Malwarebytes
2009-06-15 17:46 . 2009-06-15 17:46 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-15 17:46 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-15 17:24 . 2009-06-15 17:42 -------- d-----w- c:\program files\CCleaner
2009-06-14 13:41 . 2009-03-16 20:03 533880 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\Scxpx86.dll
2009-06-14 13:41 . 2009-06-10 11:20 276344 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSXpx86.sys
2009-06-14 13:41 . 2009-06-10 11:20 447864 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSxpx86.dll
2009-06-14 13:41 . 2009-06-10 11:20 292912 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSvix86.sys
2009-06-14 13:41 . 2009-06-10 11:20 396848 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSviA64.sys
2009-06-14 12:12 . 2009-04-30 12:42 428032 ----a-w- c:\windows\system32\EncDec.dll
2009-06-14 12:12 . 2009-04-30 12:52 292352 ----a-w- c:\windows\system32\psisdecd.dll
2009-06-14 12:12 . 2009-04-30 12:44 1244672 ----a-w- c:\windows\system32\mcmde.dll
2009-06-11 20:09 . 2009-06-11 20:09 -------- d-----w- c:\users\Simone\AppData\Roaming\MSNInstaller
2009-06-11 09:42 . 2009-04-21 12:04 2028032 ----a-w- c:\windows\system32\win32k.sys
2009-06-11 09:42 . 2009-04-23 12:56 696832 ----a-w- c:\windows\system32\localspl.dll
2009-06-10 11:20 . 2009-01-15 10:19 23848 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2009-06-10 11:20 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2009-06-10 11:20 . 2009-06-10 11:20 -------- d-----w- c:\programdata\{7B6BA59A-FB0E-4499-8536-A7420338BF3B}
2009-06-10 11:20 . 2009-06-10 11:20 -------- d-----w- c:\users\Simone\AppData\Local\Downloaded Installations
2009-06-10 11:20 . 2009-06-10 11:20 25136 ----a-r- c:\windows\system32\drivers\SymIMV.sys
2009-06-10 11:20 . 2009-06-10 11:20 -------- d-----w- c:\program files\Symantec
2009-06-10 11:20 . 2009-06-10 11:20 124464 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2009-06-10 11:20 . 2009-06-10 11:20 276344 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\ID Sxpx86.sys
2009-06-10 11:20 . 2009-06-10 11:20 292912 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\ID Svix86.sys
2009-06-10 11:20 . 2009-06-10 11:20 396848 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\ID Svia64.sys
2009-06-10 11:20 . 2009-06-10 11:20 1290592 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\SyKnAppS\SyKnAppS.dll
2009-06-10 11:20 . 2009-06-10 11:20 136840 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\SyKnAppS\patch25.dll
2009-06-10 11:20 . 2009-06-10 11:20 447864 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\id sxpx86.dll
2009-06-10 11:19 . 2009-06-10 11:19 796016 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\CLT\cltLMSx.dll
2009-06-10 11:19 . 2009-06-10 11:19 -------- d-----w- c:\windows\system32\drivers\N360
2009-06-10 11:19 . 2009-06-10 11:19 -------- d-----w- c:\program files\Norton 360
2009-06-10 11:11 . 2009-06-10 11:11 -------- d-----w- c:\programdata\PCSettings
2009-06-10 11:11 . 2009-06-10 11:11 -------- d-----w- c:\programdata\Norton
2009-06-10 11:10 . 2009-06-10 11:19 -------- d-----w- c:\programdata\NortonInstaller
2009-06-10 11:10 . 2009-06-10 11:10 -------- d-----w- c:\program files\NortonInstaller
2009-06-08 11:26 . 2009-06-08 11:26 456304 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb842E.tmp.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2009-06-16 17:34 . 2006-11-21 04:49 80288 ----a-w- c:\windows\system32\perfc006.dat
2009-06-16 17:34 . 2006-11-21 04:49 485600 ----a-w- c:\windows\system32\perfh006.dat
2009-06-16 17:27 . 2008-02-14 21:14 27430 ----a-w- c:\users\Simone\AppData\Roaming\nvModes.dat
2009-06-16 17:24 . 2008-02-05 19:21 12 ----a-w- c:\windows\bthservsdp.dat
2009-06-14 12:17 . 2008-02-05 14:00 12832 ----a-w- c:\users\Simone\AppData\Roaming\wklnhst.dat
2009-06-12 15:08 . 2007-08-20 09:05 -------- d-----w- c:\program files\Microsoft Works
2009-06-12 15:08 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-06-10 16:32 . 2007-08-20 08:51 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-06-10 11:20 . 2009-06-10 11:20 7386 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT
2009-06-10 11:20 . 2009-06-10 11:20 805 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF
2009-06-10 11:19 . 2007-08-20 08:51 -------- d-----w- c:\programdata\Symantec
2009-06-09 15:58 . 2008-02-05 15:27 -------- d-----w- c:\users\Simone\AppData\Roaming\Corel
2009-06-01 11:12 . 2007-08-20 08:49 -------- d-----w- c:\programdata\Roxio
2009-04-29 12:58 . 2009-04-27 18:13 -------- d-----w- c:\program files\Common Files\Real
2009-04-27 18:12 . 2009-04-27 18:12 -------- d-----w- c:\program files\Real
2009-04-24 16:22 . 2009-06-11 09:41 827392 ----a-w- c:\windows\system32\wininet.dll
2009-04-24 16:14 . 2009-06-11 09:41 56320 ----a-w- c:\windows\system32\iesetup.dll
2009-04-24 16:14 . 2009-06-11 09:41 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-04-24 16:11 . 2009-06-11 09:41 72704 ----a-w- c:\windows\system32\admparse.dll
2009-04-24 13:53 . 2009-06-11 09:41 26624 ----a-w- c:\windows\system32\ieUnatt.exe
2009-04-24 12:25 . 2009-06-11 09:41 48128 ----a-w- c:\windows\system32\mshtmler.dll
2009-04-23 13:01 . 2009-06-11 09:41 788992 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-14 12:27 . 2009-04-14 12:27 75048 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 8.1.1.10\SetupAdmin.exe
2009-03-19 14:32 . 2009-03-19 14:32 23400 ----a-w- c:\programdata\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\x86\GEARAspiWDM.sys
2008-06-30 18:05 . 2008-02-05 15:27 1890 --sha-w- c:\windows\System32\KGyGaAvL.sys
.
((((((((((((((((((((((((((((((((((( Start steder i reg.basen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Bemærk* tomme linier & lovlige standard linier vises ikke
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-02-07 1232896]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-04-19 484904]
"msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
"AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2008-02-07 2321600]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" [2009-02-21 39408]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]
"WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2006-11-02 2159104]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-01-13 827392]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-04-23 176128]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-02-13 159744]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2007-03-12 50696]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-07-09 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-07-09 8433664]
"NvMediaCenter"="c:\windows\system32\NvMcTray. dll" [2007-07-09 81920]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 472776]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0\bin\jusched.exe" [2007-08-20 77824]
"CognizanceTS"="c:\progra~1\BIOSCR~1\VeriSoft\Bin\ ASTSVCC.dll" [2003-12-22 17920]
"Corel Photo Downloader"="c:\program files\Corel\Corel Snapfire\Corel Photo Downloader.exe" [2006-08-04 462336]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce]
"Launcher"="c:\windows\SMINST\launcher.exe" [2006-11-07 44128]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Hurtigstart.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872]
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-3-29 719664]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\APSHook.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\lsa]
Notification Packages REG_MULTI_SZ scecli ASWLNPkg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\SymEFA.sys]
@="FSFilter Activity Monitor"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\DomainProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\FirewallRules]
"{74FBF85F-9FB0-4CAB-A008-F649DC4F8779}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
"{0F175ECB-2122-43AE-88B0-4E1B548F92F7}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
"{2E2EC380-6ADD-41A9-AD3A-4BDB300D61CC}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
"{21BEB7E1-E03C-4E89-A229-2B8E94892BCB}"= UDP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{D3283CE4-92ED-4542-AC98-A3F3250DC9C5}"= TCP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{A474E733-84A6-4C14-B3AB-56DD01DD9282}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{5D98E128-45D7-4079-AD4F-3F940CDA15E9}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{0539221C-C1F4-42FB-B89A-4173B1047BB7}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{E5DDC39A-35ED-439F-8F35-565E33C52FBC}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\PublicProfile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|S vc=DFSR:Allow inbound TCP traffic|
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\StandardProfile]
"EnableFirewall"= 0 (0x0)
R0 SymEFA;Symantec Extended File Attributes;c:\windows\System32\drivers\N360\0300000.086\SymEFA.sys [10-06-2009 13:20 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\System32\drivers\N360\0300000.086\BHDrvx86.sys [10-06-2009 13:20 258608]
R1 ccHP;Symantec Hash Provider;c:\windows\System32\drivers\N360\0300000.086\cchpx86.sys [10-06-2009 13:20 482352]
R1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSvix86.sys [14-06-2009 15:41 292912]
R2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe -k Cognizance [02-11-2006 10:35 22016]
R2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe -k Cognizance [02-11-2006 10:35 22016]
R2 N360;Norton 360;c:\program files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe [10-06-2009 13:20 115560]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [10-06-2009 21:55 101936]
R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\drivers\N360\0300000.086\symndisv.sys [10-06-2009 13:20 39984]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
Cognizance REG_MULTI_SZ ASBroker ASChannel
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
Indhold af mappen 'Planlagte Opgaver'
.
- - - - TOMME GENVEJE FJERNET - - - -
HKCU-Run-MsgCenterExe - c:\program files\Common Files\Real\Update_OB\RealOneMessageCenter.exe

.
------- Yderligere scanning -------
.
uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=73&bd=Pavilion &pf=laptop
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=73&bd=Pavilion &pf=laptop
uInternet Settings,ProxyOverride = *.local
IE: Send billede til &Bluetooth-enhed... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send siden til &Bluetooth-enhed... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.
************************************************** ************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2009-06-16 19:42
Windows 6.0.6000 NTFS
scanner skjulte processer ...
scanner skjulte autostarter ...
scanner skjulte filer ...
scanning gennemført med succes
skjulte filer: 0
************************************************** ************************
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\N 360]
"ImagePath"="\"c:\program files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\3.0.0.134\diMaster.dll\" /prefetch:1"
.
--------------------- LÅSTE REGISTRERINGS NØGLER ---------------------
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Cl ***\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs startet under kørende Processer ---------------------
- - - - - - - > 'winlogon.exe'(748)
c:\windows\System32\APSHook.dll
- - - - - - - > 'lsass.exe'(672)
c:\windows\System32\APSHook.dll
c:\program files\Bioscrypt\VeriSoft\bin\ASWLNPkg.dll
c:\program files\Bioscrypt\VeriSoft\bin\ItMsg.dll
.
Gennemført tid: 2009-06-16 19:44
ComboFix-quarantined-files.txt 2009-06-16 17:43
Pre-Kørsel: 119.816.347.648 byte ledig
Post-Kørsel: 119.782.338.560 byte ledig
224 --- E O F --- 2009-06-14 13:41
simone0206 is offline   Reply With Quote
Old 06-17-2009   #6
Senior Security Analyst
 
chiaz's Avatar
 
Join Date: Jun 2006
Location: Singapore
Posts: 5,176
PC Experience: PC Guru
Default re: EXE's won't run

The log looks OK to me as well. Just humor me by running one last scanner...


Please go HERE to run Panda ActiveScan 2.0
  • Click the big green Scan now button
  • If it wants to install an ActiveX component allow it
  • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  • Once the scan is completed, please hit the notepad icon next to the text Export to:
  • Save it to a convenient location such as your Desktop
  • Post the contents of the ActiveScan.txt in your next reply.
chiaz is offline   Reply With Quote
Old 06-17-2009   #7
Bronze Member
 
Join Date: Jun 2009
Posts: 47
PC Experience: Some Experience
Default re: EXE's won't run

;************************************************* ************************************************** ************************************************** ******************************
ANALYSIS: 2009-06-17 15:42:09
PROTECTIONS: 3
MALWARE: 26
SUSPECTS: 0
;************************************************* ************************************************** ************************************************** ******************************
PROTECTIONS
Description Version Active Updated
;================================================= ================================================== ================================================== ==============================
Norton 360 3.0.0.134 Yes Yes
Windows Defender 1.1.1505.0 No No
Norton 360 3.0.0.134 No Yes
;================================================= ================================================== ================================================== ==============================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;================================================= ================================================== ================================================== ==============================
00039204 adware/cws Adware No 0 Yes No c:\users\simone\favorites\shop
00139059 Cookie/Traffic Marketplace TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@trafficmp[2].txt
00139059 Cookie/Traffic Marketplace TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@trafficmp[1].txt
00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@casalemedia[2].txt
00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@casalemedia[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@doubleclick[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@doubleclick[2].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@doubleclick[3].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@atdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@atdmt[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@atdmt[3].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@tradedoubler[3].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@tradedoubler[1].txt
00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@247realmedia[2].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@fastclick[3].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@fastclick[1].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@tribalfusion[1].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@tribalfusion[2].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@mediaplex[1].txt
00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@com[1].txt
00167749 Cookie/Toplist TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@toplist[2].txt
00167749 Cookie/Toplist TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@toplist[1].txt
00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@statcounter[1].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@ad.yieldmanager[1].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@ad.yieldmanager[3].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@apmebf[1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@apmebf[2].txt
00168076 Cookie/BurstNet TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@burstnet[2].txt
00168076 Cookie/BurstNet TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@burstnet[3].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@serving-sys[3].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@serving-sys[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@serving-sys[2].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bs.serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bs.serving-sys[3].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bs.serving-sys[4].txt
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adtech[2].txt
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adtech[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@advertising[3].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@advertising[1].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@advertising[2].txt
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@ads.pointroll[1].txt
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@overture[1].txt
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@overture[2].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bluestreak[4].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bluestreak[3].txt
00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bluestreak[1].txt
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adrevolver[3].txt
00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adrevolver[2].txt
00207338 Cookie/Target TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@target[2].txt
00286734 Cookie/Adserver TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adserver.filefront[2].txt
;================================================= ================================================== ================================================== ==============================
SUSPECTS
Sent Location s�`��g�9
;================================================= ================================================== ================================================== ==============================
;================================================= ================================================== ================================================== ==============================
VULNERABILITIES
Id Severity Description s�`��g�9
;================================================= ================================================== ================================================== ==============================
;================================================= ================================================== ================================================== ==============================
simone0206 is offline   Reply With Quote

Reply

Bookmarks

Tags
checking, exe, hijackthis, log, run
Similar discussions...
Thread Thread Starter Forum Replies Last Post
[Fixed] Big exe's Stepes Windows XP/2000 11 03-20-2007 02:52 AM
[Pending] many console.exe's found spellbyte [Fixed] Hijackthis! Logs 14 10-05-2005 08:56 PM

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On




All times are GMT. The time now is 02:39 AM.
Powered by vBulletin
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2