Hi!
Below is the logfile from HiJackThis.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:32:46, on 16-06-2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16851)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10a.ex e
C:\Windows\system32\wuauclt.exe
C:\Users\Simone\Desktop\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = mitAOL | HP
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = mitAOL | HP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = mitAOL | HP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = mitAOL | HP
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\3.0.0.134\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\3.0.0.134\IPSBHO.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\s wg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\3.0.0.134\coIEPlg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll,Regi sterModule
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
O4 - HKCU\..\Run: [MsgCenterExe] "C:\Program Files\Common Files\Real\Update_OB\RealOneMessageCenter.exe" -osboot
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKAL TJENESTE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETVÆRKSTJENESTE')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Global Startup: Adobe Reader Hurtigstart.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Send billede til &Bluetooth-enhed... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send siden til &Bluetooth-enhed... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/...oUploader3.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton 360\Engine\3.0.0.134\coIEPlg.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: APSHook.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatisk LiveUpdate-planlægning - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod-tjeneste (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 11430 bytes
![]() |
|
|||||||
| Windows Vista & 7 - EXE's won't run posted in the Operating Systems forums; Hi! Below is the logfile from HiJackThis. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:32:46, on 16-06-2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16851) Boot ... |
|
|
|
#1 |
|
Bronze Member
![]() Join Date: Jun 2009
Posts: 47 PC Experience: Some Experience
|
|
|
|
|
| Advertisement - Register to Remove | |
|
|
|
#2 |
|
Senior Security Analyst
![]() Join Date: Jun 2006
Location: Singapore
Posts: 5,120 PC Experience: PC Guru
|
Hello, and welcome to PCHF.
Your HijackThis log appears good to me, but that is not an absolute indication that your system is clean. May I enquire if this is just a general check-up, or are you experiencing problems with your PC?
__________________
I vouch only for my own advice. You may want to take others' with a pinch of salt. More if necessary.
|
|
|
|
|
|
#3 |
|
Bronze Member
![]() Join Date: Jun 2009
Posts: 47 PC Experience: Some Experience
|
Yeah I'm experiencing problems with my PC. It started a couple of days ago, when I was online and all of a sudden my computer didn't respond, so I rebooted. But as soon as I pressed on the e-icon (the internet) it wouldn’t respond.
But that's not the only problem, other programs wont start when I try to open them =/ I've tried to scan my system with Malwarebytes' Anti-Malware and CCleaner and most recent I downloaded HiJackThis. My internet is working, but there is still times where it wont respond, and I have to reboot.... |
|
|
|
|
|
#4 |
|
Senior Security Analyst
![]() Join Date: Jun 2006
Location: Singapore
Posts: 5,120 PC Experience: PC Guru
|
I'm moving this thread to the [In Progress] section.
Let's have you download ComboFix.exe. http://download.bleepingcomputer.com/sUBs/ComboFix.exe http://www.forospyware.com/sUBs/ComboFix.exe http://subs.geekstogo.com/ComboFix.exe * IMPORTANT !!! Save ComboFix.exe to your Desktop Disable your AntiVirus and AntiSpyware applications, usually via a right-click on the System Tray icon. They may otherwise interfere with our tools. Double-click on ComboFix.exe & follow the prompts. As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Recovery Console can be installed from your disc if you have Vista if you wish. Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console. **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. ![]() Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message: ![]() Click on Yes to continue scanning for malware. When finished, it shall produce a log for you. Please include C:\ComboFix.txt, in your next reply.
__________________
I vouch only for my own advice. You may want to take others' with a pinch of salt. More if necessary.
|
|
|
|
|
|
#5 |
|
Bronze Member
![]() Join Date: Jun 2009
Posts: 47 PC Experience: Some Experience
|
Okay, done that =) Here's the log:
ComboFix 09-06-15.07 - Simone 16-06-2009 19:37.1 - NTFSx86 Microsoft® Windows Vista Home Premium 6.0.6000.0.1252.45.1030.18.2046.1292 [GMT 2:00] Kører fra: c:\users\Simone\Desktop\ComboFix.exe AV: Norton 360 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} SP: Norton 360 *disabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Windows Defender *disabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} * Dannede nyt systemgendannelsespunkt . ((((((((((((((((((((((((((((((((((((((( Andet, der er slettet ))))))))))))))))))))))))))))))))))))))))))))))))) . D:\Desktop.ini . ((((((((((((((((((((((((((((( Filer skabt fra 2009-05-16 til 2009-06-16 ))))))))))))))))))))))))))))))))))) . 2009-06-16 12:34 . 2009-06-10 11:20 89104 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\NAVENG.SYS 2009-06-16 12:34 . 2009-06-10 11:20 876144 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\NAVEX15.SYS 2009-06-16 12:34 . 2009-06-10 11:20 177520 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\NAVENG32.DLL 2009-06-16 12:34 . 2009-06-10 11:20 1181040 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\NAVEX32A.DLL 2009-06-16 12:33 . 2009-06-10 11:20 371248 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\EECTRL.SYS 2009-06-16 12:33 . 2009-06-10 11:20 101936 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\ERASER.SYS 2009-06-16 12:33 . 2009-06-10 11:20 259368 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\ECMSVR32.DLL 2009-06-16 12:33 . 2009-06-10 11:19 2414128 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\2009061 5.050\CCERASER.DLL 2009-06-15 17:46 . 2009-06-15 17:46 -------- d-----w- c:\users\Simone\AppData\Roaming\Malwarebytes 2009-06-15 17:46 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-06-15 17:46 . 2009-06-15 17:46 -------- d-----w- c:\programdata\Malwarebytes 2009-06-15 17:46 . 2009-06-15 17:46 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-06-15 17:46 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-06-15 17:24 . 2009-06-15 17:42 -------- d-----w- c:\program files\CCleaner 2009-06-14 13:41 . 2009-03-16 20:03 533880 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\Scxpx86.dll 2009-06-14 13:41 . 2009-06-10 11:20 276344 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSXpx86.sys 2009-06-14 13:41 . 2009-06-10 11:20 447864 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSxpx86.dll 2009-06-14 13:41 . 2009-06-10 11:20 292912 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSvix86.sys 2009-06-14 13:41 . 2009-06-10 11:20 396848 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSviA64.sys 2009-06-14 12:12 . 2009-04-30 12:42 428032 ----a-w- c:\windows\system32\EncDec.dll 2009-06-14 12:12 . 2009-04-30 12:52 292352 ----a-w- c:\windows\system32\psisdecd.dll 2009-06-14 12:12 . 2009-04-30 12:44 1244672 ----a-w- c:\windows\system32\mcmde.dll 2009-06-11 20:09 . 2009-06-11 20:09 -------- d-----w- c:\users\Simone\AppData\Roaming\MSNInstaller 2009-06-11 09:42 . 2009-04-21 12:04 2028032 ----a-w- c:\windows\system32\win32k.sys 2009-06-11 09:42 . 2009-04-23 12:56 696832 ----a-w- c:\windows\system32\localspl.dll 2009-06-10 11:20 . 2009-01-15 10:19 23848 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2009-06-10 11:20 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll 2009-06-10 11:20 . 2009-06-10 11:20 -------- d-----w- c:\programdata\{7B6BA59A-FB0E-4499-8536-A7420338BF3B} 2009-06-10 11:20 . 2009-06-10 11:20 -------- d-----w- c:\users\Simone\AppData\Local\Downloaded Installations 2009-06-10 11:20 . 2009-06-10 11:20 25136 ----a-r- c:\windows\system32\drivers\SymIMV.sys 2009-06-10 11:20 . 2009-06-10 11:20 -------- d-----w- c:\program files\Symantec 2009-06-10 11:20 . 2009-06-10 11:20 124464 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2009-06-10 11:20 . 2009-06-10 11:20 276344 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\ID Sxpx86.sys 2009-06-10 11:20 . 2009-06-10 11:20 292912 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\ID Svix86.sys 2009-06-10 11:20 . 2009-06-10 11:20 396848 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\ID Svia64.sys 2009-06-10 11:20 . 2009-06-10 11:20 1290592 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\SyKnAppS\SyKnAppS.dll 2009-06-10 11:20 . 2009-06-10 11:20 136840 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\SyKnAppS\patch25.dll 2009-06-10 11:20 . 2009-06-10 11:20 447864 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\id sxpx86.dll 2009-06-10 11:19 . 2009-06-10 11:19 796016 ----a-w- c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\CLT\cltLMSx.dll 2009-06-10 11:19 . 2009-06-10 11:19 -------- d-----w- c:\windows\system32\drivers\N360 2009-06-10 11:19 . 2009-06-10 11:19 -------- d-----w- c:\program files\Norton 360 2009-06-10 11:11 . 2009-06-10 11:11 -------- d-----w- c:\programdata\PCSettings 2009-06-10 11:11 . 2009-06-10 11:11 -------- d-----w- c:\programdata\Norton 2009-06-10 11:10 . 2009-06-10 11:19 -------- d-----w- c:\programdata\NortonInstaller 2009-06-10 11:10 . 2009-06-10 11:10 -------- d-----w- c:\program files\NortonInstaller 2009-06-08 11:26 . 2009-06-08 11:26 456304 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb842E.tmp.exe . (((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) )) . 2009-06-16 17:34 . 2006-11-21 04:49 80288 ----a-w- c:\windows\system32\perfc006.dat 2009-06-16 17:34 . 2006-11-21 04:49 485600 ----a-w- c:\windows\system32\perfh006.dat 2009-06-16 17:27 . 2008-02-14 21:14 27430 ----a-w- c:\users\Simone\AppData\Roaming\nvModes.dat 2009-06-16 17:24 . 2008-02-05 19:21 12 ----a-w- c:\windows\bthservsdp.dat 2009-06-14 12:17 . 2008-02-05 14:00 12832 ----a-w- c:\users\Simone\AppData\Roaming\wklnhst.dat 2009-06-12 15:08 . 2007-08-20 09:05 -------- d-----w- c:\program files\Microsoft Works 2009-06-12 15:08 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2009-06-10 16:32 . 2007-08-20 08:51 -------- d-----w- c:\program files\Common Files\Symantec Shared 2009-06-10 11:20 . 2009-06-10 11:20 7386 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT 2009-06-10 11:20 . 2009-06-10 11:20 805 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF 2009-06-10 11:19 . 2007-08-20 08:51 -------- d-----w- c:\programdata\Symantec 2009-06-09 15:58 . 2008-02-05 15:27 -------- d-----w- c:\users\Simone\AppData\Roaming\Corel 2009-06-01 11:12 . 2007-08-20 08:49 -------- d-----w- c:\programdata\Roxio 2009-04-29 12:58 . 2009-04-27 18:13 -------- d-----w- c:\program files\Common Files\Real 2009-04-27 18:12 . 2009-04-27 18:12 -------- d-----w- c:\program files\Real 2009-04-24 16:22 . 2009-06-11 09:41 827392 ----a-w- c:\windows\system32\wininet.dll 2009-04-24 16:14 . 2009-06-11 09:41 56320 ----a-w- c:\windows\system32\iesetup.dll 2009-04-24 16:14 . 2009-06-11 09:41 78336 ----a-w- c:\windows\system32\ieencode.dll 2009-04-24 16:11 . 2009-06-11 09:41 72704 ----a-w- c:\windows\system32\admparse.dll 2009-04-24 13:53 . 2009-06-11 09:41 26624 ----a-w- c:\windows\system32\ieUnatt.exe 2009-04-24 12:25 . 2009-06-11 09:41 48128 ----a-w- c:\windows\system32\mshtmler.dll 2009-04-23 13:01 . 2009-06-11 09:41 788992 ----a-w- c:\windows\system32\rpcrt4.dll 2009-04-14 12:27 . 2009-04-14 12:27 75048 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 8.1.1.10\SetupAdmin.exe 2009-03-19 14:32 . 2009-03-19 14:32 23400 ----a-w- c:\programdata\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\x86\GEARAspiWDM.sys 2008-06-30 18:05 . 2008-02-05 15:27 1890 --sha-w- c:\windows\System32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((((( Start steder i reg.basen )))))))))))))))))))))))))))))))))))))))))))))))) . . *Bemærk* tomme linier & lovlige standard linier vises ikke REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-02-07 1232896] "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-04-19 484904] "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440] "AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2008-02-07 2321600] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" [2009-02-21 39408] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728] "WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2006-11-02 2159104] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-01-13 827392] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-04-23 176128] "QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-02-13 159744] "HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2007-03-12 50696] "NvSvc"="c:\windows\system32\nvsvc.dll" [2007-07-09 86016] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-07-09 8433664] "NvMediaCenter"="c:\windows\system32\NvMcTray. dll" [2007-07-09 81920] "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 472776] "WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128] "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-16 49152] "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0\bin\jusched.exe" [2007-08-20 77824] "CognizanceTS"="c:\progra~1\BIOSCR~1\VeriSoft\Bin\ ASTSVCC.dll" [2003-12-22 17920] "Corel Photo Downloader"="c:\program files\Corel\Corel Snapfire\Corel Photo Downloader.exe" [2006-08-04 462336] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce] "Launcher"="c:\windows\SMINST\launcher.exe" [2006-11-07 44128] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run] "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Reader Hurtigstart.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048] Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-23 734872] BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-3-29 719664] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\System32\APSHook.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\lsa] Notification Packages REG_MULTI_SZ scecli ASWLNPkg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\SymEFA.sys] @="FSFilter Activity Monitor" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "UacDisableNotify"=dword:00000001 "InternetSettingsDisableNotify"=dword:00000001 "AutoUpdateDisableNotify"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpo licy\DomainProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpo licy\FirewallRules] "{74FBF85F-9FB0-4CAB-A008-F649DC4F8779}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone) "{0F175ECB-2122-43AE-88B0-4E1B548F92F7}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play "{2E2EC380-6ADD-41A9-AD3A-4BDB300D61CC}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program "{21BEB7E1-E03C-4E89-A229-2B8E94892BCB}"= UDP:c:\program files\LimeWire\LimeWire.exe:LimeWire "{D3283CE4-92ED-4542-AC98-A3F3250DC9C5}"= TCP:c:\program files\LimeWire\LimeWire.exe:LimeWire "{A474E733-84A6-4C14-B3AB-56DD01DD9282}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "{5D98E128-45D7-4079-AD4F-3F940CDA15E9}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour "{0539221C-C1F4-42FB-B89A-4173B1047BB7}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes "{E5DDC39A-35ED-439F-8F35-565E33C52FBC}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes [HKLM\~\services\sharedaccess\parameters\firewallpo licy\PublicProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpo licy\RestrictedServices\Static\System] "DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|S vc=DFSR:Allow inbound TCP traffic| [HKLM\~\services\sharedaccess\parameters\firewallpo licy\StandardProfile] "EnableFirewall"= 0 (0x0) R0 SymEFA;Symantec Extended File Attributes;c:\windows\System32\drivers\N360\0300000.086\SymEFA.sys [10-06-2009 13:20 310320] R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\System32\drivers\N360\0300000.086\BHDrvx86.sys [10-06-2009 13:20 258608] R1 ccHP;Symantec Hash Provider;c:\windows\System32\drivers\N360\0300000.086\cchpx86.sys [10-06-2009 13:20 482352] R1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090610. 006\IDSvix86.sys [14-06-2009 15:41 292912] R2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe -k Cognizance [02-11-2006 10:35 22016] R2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe -k Cognizance [02-11-2006 10:35 22016] R2 N360;Norton 360;c:\program files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe [10-06-2009 13:20 115560] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [10-06-2009 21:55 101936] R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\drivers\N360\0300000.086\symndisv.sys [10-06-2009 13:20 39984] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ Cognizance REG_MULTI_SZ ASBroker ASChannel [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] "c:\program files\Common Files\LightScribe\LSRunOnce.exe" . Indhold af mappen 'Planlagte Opgaver' . - - - - TOMME GENVEJE FJERNET - - - - HKCU-Run-MsgCenterExe - c:\program files\Common Files\Real\Update_OB\RealOneMessageCenter.exe . ------- Yderligere scanning ------- . uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=73&bd=Pavilion &pf=laptop mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=DA_DK&c=73&bd=Pavilion &pf=laptop uInternet Settings,ProxyOverride = *.local IE: Send billede til &Bluetooth-enhed... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send siden til &Bluetooth-enhed... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm . ************************************************** ************************ catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2009-06-16 19:42 Windows 6.0.6000 NTFS scanner skjulte processer ... scanner skjulte autostarter ... scanner skjulte filer ... scanning gennemført med succes skjulte filer: 0 ************************************************** ************************ [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\N 360] "ImagePath"="\"c:\program files\Norton 360\Engine\3.0.0.134\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\3.0.0.134\diMaster.dll\" /prefetch:1" . --------------------- LÅSTE REGISTRERINGS NØGLER --------------------- [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Cl ***\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . --------------------- DLLs startet under kørende Processer --------------------- - - - - - - - > 'winlogon.exe'(748) c:\windows\System32\APSHook.dll - - - - - - - > 'lsass.exe'(672) c:\windows\System32\APSHook.dll c:\program files\Bioscrypt\VeriSoft\bin\ASWLNPkg.dll c:\program files\Bioscrypt\VeriSoft\bin\ItMsg.dll . Gennemført tid: 2009-06-16 19:44 ComboFix-quarantined-files.txt 2009-06-16 17:43 Pre-Kørsel: 119.816.347.648 byte ledig Post-Kørsel: 119.782.338.560 byte ledig 224 --- E O F --- 2009-06-14 13:41 |
|
|
|
|
|
#6 |
|
Senior Security Analyst
![]() Join Date: Jun 2006
Location: Singapore
Posts: 5,120 PC Experience: PC Guru
|
The log looks OK to me as well. Just humor me by running one last scanner...
Please go HERE to run Panda ActiveScan 2.0
__________________
I vouch only for my own advice. You may want to take others' with a pinch of salt. More if necessary.
|
|
|
|
|
|
#7 |
|
Bronze Member
![]() Join Date: Jun 2009
Posts: 47 PC Experience: Some Experience
|
;************************************************* ************************************************** ************************************************** ******************************
ANALYSIS: 2009-06-17 15:42:09 PROTECTIONS: 3 MALWARE: 26 SUSPECTS: 0 ;************************************************* ************************************************** ************************************************** ****************************** PROTECTIONS Description Version Active Updated ;================================================= ================================================== ================================================== ============================== Norton 360 3.0.0.134 Yes Yes Windows Defender 1.1.1505.0 No No Norton 360 3.0.0.134 No Yes ;================================================= ================================================== ================================================== ============================== MALWARE Id Description Type Active Severity Disinfectable Disinfected Location ;================================================= ================================================== ================================================== ============================== 00039204 adware/cws Adware No 0 Yes No c:\users\simone\favorites\shop 00139059 Cookie/Traffic Marketplace TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@trafficmp[2].txt 00139059 Cookie/Traffic Marketplace TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@trafficmp[1].txt 00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@casalemedia[2].txt 00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@casalemedia[1].txt 00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@doubleclick[1].txt 00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@doubleclick[2].txt 00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@doubleclick[3].txt 00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@atdmt[2].txt 00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@atdmt[1].txt 00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@atdmt[3].txt 00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@tradedoubler[3].txt 00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@tradedoubler[1].txt 00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@247realmedia[2].txt 00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@fastclick[3].txt 00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@fastclick[1].txt 00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@tribalfusion[1].txt 00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@tribalfusion[2].txt 00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@mediaplex[1].txt 00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@com[1].txt 00167749 Cookie/Toplist TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@toplist[2].txt 00167749 Cookie/Toplist TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@toplist[1].txt 00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@statcounter[1].txt 00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@ad.yieldmanager[1].txt 00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@ad.yieldmanager[3].txt 00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@apmebf[1].txt 00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@apmebf[2].txt 00168076 Cookie/BurstNet TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@burstnet[2].txt 00168076 Cookie/BurstNet TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@burstnet[3].txt 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@serving-sys[3].txt 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@serving-sys[1].txt 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@serving-sys[2].txt 00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bs.serving-sys[1].txt 00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bs.serving-sys[3].txt 00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bs.serving-sys[4].txt 00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adtech[2].txt 00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adtech[1].txt 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@advertising[3].txt 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@advertising[1].txt 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@advertising[2].txt 00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@ads.pointroll[1].txt 00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@overture[1].txt 00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@overture[2].txt 00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bluestreak[4].txt 00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bluestreak[3].txt 00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@bluestreak[1].txt 00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adrevolver[3].txt 00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adrevolver[2].txt 00207338 Cookie/Target TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@target[2].txt 00286734 Cookie/Adserver TrackingCookie No 0 Yes No C:\Users\Simone\AppData\Roaming\Microsoft\Windows\ Cookies\Low\simone@adserver.filefront[2].txt ;================================================= ================================================== ================================================== ============================== SUSPECTS Sent Location s�`��g�9 ;================================================= ================================================== ================================================== ============================== ;================================================= ================================================== ================================================== ============================== VULNERABILITIES Id Severity Description s�`��g�9 ;================================================= ================================================== ================================================== ============================== ;================================================= ================================================== ================================================== ============================== |
|
|
|
![]() |
| Bookmarks |
| Tags |
| checking, exe, hijackthis, log, run |
Similar discussions...
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| [Fixed] Big exe's | Stepes | Windows XP/2000 | 11 | 03-20-2007 02:52 AM |
| [Pending] many console.exe's found | spellbyte | [Fixed] Hijackthis! Logs | 14 | 10-05-2005 08:56 PM |
| Thread Tools | |
| Display Modes | |
|
|




























Linear Mode

