Logfile of HijackThis v1.97.7
Scan saved at 1:29:40 PM, on 7/14/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\CSINJECT.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\NPROTECT.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
C:\WINDOWS\SYSTEM\CPQPSCP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\REWARDS NETWORK\BRNTRAY.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\TROJANHUNTER 3.9\THGUARD.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\REWARDS NETWORK\BRNDISP.EXE
C:\PROGRAM FILES\ATI MULTIMEDIA\MAIN\LAUNCHPD.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\CSINSM32.EXE
C:\PROGRAM FILES\PRINTKEY2000\PRINTKEY2000.EXE
C:\Program Files\Norton SystemWorks\Norton CleanSweep\Monwow.exe
C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.igl.net/ipcrib/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by SNET Internet
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [CompaqSysTray] cpqpscp.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMANTEC\LIVEUP~1\SNDMON.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [REWARDS NETWORK] C:\Program Files\Rewards Network\brntray.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE"
O4 - HKLM\..\Run: [THGuard] "C:\PROGRAM FILES\TROJANHUNTER 3.9\THGUARD.EXE"
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NORTON~1\NAVAPW32.EXE
O4 - HKLM\..\Run: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ATIPOLAB] ati2evxx.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [CSINJECT.EXE] C:\Program Files\Norton SystemWorks\Norton CleanSweep\CSINJECT.EXE
O4 - HKLM\..\RunServices: [NPROTECT] C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O4 - HKLM\..\RunServices: [SymTray - Norton SystemWorks] C:\Program Files\Common Files\Symantec Shared\SymTray.exe "Norton SystemWorks"
O4 - HKCU\..\Run: [ATI Launchpad] "C:\PROGRAM FILES\ATI MULTIMEDIA\MAIN\LAUNCHPD.EXE"
O4 - Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsm32.exe
O4 - Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe
O8 - Extra context menu item: Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Yahoo! Login (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Login (HKLM)
O9 - Extra button: AIM (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://home.snet.net/
Here also is the log from adaware. Something always seems to come up and the vx2 that will not allow me to clean they are all in the system restore. is it possible that it's because i dont have the system restore yet? Also if you read my post on bottom of page one about norton having problems that is still there, and ive looked at info to fix and i cant fix. Maybe it's time for a new anti virus system.. but computer seems to be running pretty good ecxept during shutdown it freezes sometimes but not always.
Lavasoft Ad-aware Personal Build 6.181
Logfile created on :Wednesday, July 14, 2004 12:41:43 PM
Created with Ad-aware Personal, free for private use.
Using reference-file :01R332 12.07.2004
______________________________________________________
Reffile status:
=========================
Reference file loaded:
Reference Number : 01R332 12.07.2004
Internal build : 264
File location : C:\PROGRAM FILES\LAVASOFT\AD-AWARE 6\reflist.ref
Total size : 1304680 Bytes
Signature data size : 1283888 Bytes
Reference data size : 20728 Bytes
Signatures total : 28484
Target categories : 10
Target families : 520
Memory + processor status:
==========================
Number of processors : 1
Processor architecture : Intel Pentium IV
Memory available:46 %
Total physical memory:261580 kb
Available physical memory:70064 kb
Total page file size:1835568 kb
Available on page file:1696968 kb
Total virtual memory:2093056 kb
Available virtual memory:2023936 kb
OS:Windows (ME)
Ad-aware Settings
=========================
Set : Activate in-depth scan (Recommended)
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan within archives
Set : Scan my Hosts file
Extended Ad-aware Settings
=========================
Set : Unload recognized processes during scanning
Set : Include basic Ad-aware settings in logfile
Set : Include additional Ad-aware settings in logfile
Set : Let windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Always back up reference file, before updating
Set : Play sound if scan produced a result
7-14-2004 12:41:43 PM - Scan started. (Custom mode)
Listing running processes
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
#:1 [kernel32.dll]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4291780813
Threads : 10
Priority : High
FileSize : 524 KB
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
Copyright : Copyright © Microsoft Corp. 1991-2000
CompanyName : Microsoft Corporation
FileDescription : Win32 Kernel core component
InternalName : KERNEL32
OriginalFilename : KERNEL32.DLL
ProductName : Microsoft® Windows® Millennium Operating System
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:2 [msgsrv32.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294939377
Threads : 1
Priority : Normal
FileSize : 11 KB
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
Copyright : Copyright © Microsoft Corp. 1992-1998
CompanyName : Microsoft Corporation
FileDescription : Windows 32-bit VxD Message Server
InternalName : MSGSRV32
OriginalFilename : MSGSRV32.EXE
ProductName : Microsoft® Windows® Millennium Operating System
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:3 [spool32.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294941977
Threads : 2
Priority : Normal
FileSize : 44 KB
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
Copyright : Copyright © Microsoft Corp. 1994 - 1998
CompanyName : Microsoft Corporation
FileDescription : Spooler Sub System Process
InternalName : spool32
OriginalFilename : spool32.exe
ProductName : Microsoft® Windows® Millennium Operating System
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:4 [mprexe.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294845589
Threads : 2
Priority : Normal
FileSize : 28 KB
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
Copyright : Copyright © Microsoft Corp. 1993-2000
CompanyName : Microsoft Corporation
FileDescription : WIN32 Network Interface Service Process
InternalName : MPREXE
OriginalFilename : MPREXE.EXE
ProductName : Microsoft® Windows® Millennium Operating System
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:5 [mstask.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294881989
Threads : 3
Priority : Normal
FileSize : 124 KB
FileVersion : 4.71.2721.1
ProductVersion : 4.71.2721.1
Copyright : Copyright © Microsoft Corp. 2000
CompanyName : Microsoft Corporation
FileDescription : Task Scheduler Engine
InternalName : TaskScheduler
OriginalFilename : mstask.exe
ProductName : Microsoft
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:6 [ati2evxx.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294875865
Threads : 2
Priority : Normal
FileSize : 56 KB
Copyright : mpa
Created on : 11/4/2001 3:20:18 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 4/5/2000 3:03:20 PM
#:7 [vsmon.exe]
FilePath : C:\WINDOWS\SYSTEM\ZONELABS\
ProcessID : 4294900945
Threads : 16
Priority : Normal
FileSize : 893 KB
FileVersion : 5.0.590.043
ProductVersion : 5.0.590.043
Copyright : Copyright
CompanyName : Zone Labs Inc.
FileDescription : TrueVector Service
InternalName : vsmon
OriginalFilename : vsmon.exe
ProductName : TrueVector Service
Created on : 7/9/2004 2:43:12 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/16/2004 8:47:36 AM
#:8 [csinject.exe]
FilePath : C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\
ProcessID : 4294786281
Threads : 1
Priority : Normal
FileSize : 28 KB
FileVersion : 6.01.0012
ProductVersion : 6.01
Copyright : Copyright © 1992-2001 Symantec Corporation
CompanyName : Symantec Corporation
FileDescription : csinject
InternalName : CSInject
OriginalFilename : CSInject.exe
ProductName : Norton CleanSweep
Created on : 7/14/2004 3:24:35 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 2/1/2002 9:00:00 PM
#:9 [nprotect.exe]
FilePath : C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\
ProcessID : 4294782181
Threads : 3
Priority : Normal
FileSize : 132 KB
FileVersion : 15.03.0.36
ProductVersion : 15.03.0.36
Copyright : Copyright © 2002 Symantec Corporation
CompanyName : Symantec Corporation
FileDescription : Norton Protection Status
InternalName : NPROTECT
OriginalFilename : NPROTECT.EXE
ProductName : Norton Utilities
Created on : 3/6/2002 9:56:36 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 2/5/2002 10:03:00 AM
#:10 [symtray.exe]
FilePath : C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\
ProcessID : 4294774205
Threads : 1
Priority : Normal
FileSize : 72 KB
FileVersion : 2002.05.53
ProductVersion : 2002.05.53
Copyright : Copyright © 1997-2000 Symantec Corporation
CompanyName : Symantec Corporation
FileDescription : Norton SystemWorks SymTray
InternalName : SymTray.exe
OriginalFilename : SymTray.exe
ProductName : Norton SystemWorks
Created on : 8/24/2001 5:38:26 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 8/24/2001 5:38:26 PM
#:11 [mmtask.tsk]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294718889
Threads : 1
Priority : Normal
FileSize : 1 KB
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
Copyright : Copyright
CompanyName : Microsoft Corporation
FileDescription : Multimedia background task support module
InternalName : mmtask.tsk
OriginalFilename : mmtask.tsk
ProductName : Microsoft Windows
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:12 [stmgr.exe]
FilePath : C:\WINDOWS\SYSTEM\RESTORE\
ProcessID : 4294814709
Threads : 5
Priority : Normal
FileSize : 60 KB
FileVersion : 4.90.0.2533
ProductVersion : 4.90.0.2533
Copyright : Copyright © Microsoft Corp. 1981-2000
CompanyName : Microsoft Corporation
FileDescription : Microsoft ® PC State Manager
InternalName : StateMgr.exe
OriginalFilename : StateMgr.exe
ProductName : Microsoft ® PCHealth
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:13 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 4294767425
Threads : 17
Priority : Normal
FileSize : 220 KB
FileVersion : 5.50.4134.100
ProductVersion : 5.50.4134.100
Copyright : Copyright © Microsoft Corp. 1981-2000
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Microsoft® Windows ® 2000 Operating System
Created on : 6/8/2000 9:00:00 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:14 [taskmon.exe]
FilePath : C:\WINDOWS\
ProcessID : 4294175529
Threads : 1
Priority : Normal
FileSize : 28 KB
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
Copyright : Copyright © Microsoft Corp. 1998
CompanyName : Microsoft Corporation
FileDescription : Task Monitor
InternalName : TaskMon
OriginalFilename : TASKMON.EXE
ProductName : Microsoft® Windows® Millennium Operating System
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:15 [systray.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294720641
Threads : 2
Priority : Normal
FileSize : 36 KB
FileVersion : 4.90.3000
ProductVersion : 4.90.3000
Copyright : Copyright © Microsoft Corp. 1993-2000
CompanyName : Microsoft Corporation
FileDescription : System Tray Applet
InternalName : SYSTRAY
OriginalFilename : SYSTRAY.EXE
ProductName : Microsoft® Windows® Millennium Operating System
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:16 [atiptaxx.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294064057
Threads : 1
Priority : Normal
FileSize : 152 KB
FileVersion : 4.12.2461
ProductVersion : 4.12.2461
Copyright : Copyright © 1998-2000 ATI Technologies Inc.
CompanyName : ATI Technologies, Inc.
FileDescription : ATI Task Icon
InternalName : ATIPDSXX
OriginalFilename : ATIPTAXX.DLL
ProductName : ATI Desktop Component
Created on : 11/4/2001 3:20:20 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/5/2000 6:46:04 PM
#:17 [cpqpscp.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294058493
Threads : 1
Priority : Normal
FileSize : 64 KB
FileVersion : 1.00.010
ProductVersion : 1.00.010
Copyright : Copyright
CompanyName : Compaq Computer Corp.
FileDescription : Compaq Printer Status Control Program
InternalName : CpqPSCP
OriginalFilename : CpqPSCP.exe
ProductName : Compaq Printer Status Control Program
Created on : 11/14/2001 9:11:16 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 3/13/1998 12:48:34 PM
#:18 [wmiexe.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294074629
Threads : 3
Priority : Normal
FileSize : 16 KB
FileVersion : 4.90.2452.1
ProductVersion : 4.90.2452.1
Copyright : Copyright © Microsoft Corp. 1981-1999
CompanyName : Microsoft Corporation
FileDescription : WMI service exe housing
InternalName : wmiexe
OriginalFilename : wmiexe.exe
ProductName : Microsoft® Windows® Millennium Operating System
Created on : 1/1/1601
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/8/2000 9:00:00 PM
#:19 [realsched.exe]
FilePath : C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\
ProcessID : 4294069417
Threads : 2
Priority : Normal
FileSize : 176 KB
FileVersion : 0.1.0.3018
ProductVersion : 0.1.0.3018
Copyright : Copyright
CompanyName : RealNetworks, Inc.
FileDescription : RealNetworks Scheduler
InternalName : schedapp
OriginalFilename : realsched.exe
ProductName : RealPlayer (32-bit)
Created on : 3/29/2004 12:24:41 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 3/29/2004 12:24:42 AM
#:20 [brntray.exe]
FilePath : C:\PROGRAM FILES\REWARDS NETWORK\
ProcessID : 4294107841
Threads : 1
Priority : Normal
FileSize : 116 KB
FileVersion : 1.00
ProductVersion : 1.00
Copyright : Copyright PlanetJam Media Group 2001
CompanyName : PlanetJam Media Group
FileDescription : Rewards Network
InternalName : brntray
OriginalFilename : brntray.exe
ProductName : Rewards Network
Created on : 2/13/2004 2:59:49 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 11/16/2001 10:38:16 PM
#:21 [zlclient.exe]
FilePath : C:\PROGRAM FILES\ZONE LABS\ZONEALARM\
ProcessID : 4294147641
Threads : 6
Priority : Normal
FileSize : 681 KB
FileVersion : 5.0.590.043
ProductVersion : 5.0.590.043
Copyright : Copyright
CompanyName : Zone Labs Inc.
FileDescription : Zone Labs Client
InternalName : zlclient
OriginalFilename : zlclient.exe
ProductName : Zone Labs Client
Created on : 7/9/2004 2:43:16 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 6/16/2004 8:48:24 AM
#:22 [brndisp.exe]
FilePath : C:\PROGRAM FILES\REWARDS NETWORK\
ProcessID : 4293996837
Threads : 2
Priority : Normal
FileSize : 64 KB
Created on : 2/13/2004 2:59:49 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 11/16/2001 8:24:24 PM
#:23 [thguard.exe]
FilePath : C:\PROGRAM FILES\TROJANHUNTER 3.9\
ProcessID : 4294011513
Threads : 3
Priority : Normal
FileSize : 1042 KB
FileVersion : 3.8.0.272
ProductVersion : 1.0.0.0
Copyright : Mischel Internet Security
CompanyName : Mischel Internet Security
FileDescription : TrojanHunter Guard
OriginalFilename : THGuard.exe
ProductName : TrojanHunter Guard
Created on : 2/25/2004 5:40:08 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 2/25/2004 5:40:08 AM
#:24 [navapw32.exe]
FilePath : C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\
ProcessID : 4294024433
Threads : 11
Priority : Normal
FileSize : 73 KB
FileVersion : 8.07.17
ProductVersion : 8.07.17
Copyright : Copyright © 2000-2002 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Norton AntiVirus Agent
InternalName : NAVAPW32
OriginalFilename : NAVAPW32.EXE
ProductName : Norton AntiVirus
Created on : 3/5/2002 8:04:48 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 2/27/2002 3:27:58 PM
#:25 [launchpd.exe]
FilePath : C:\PROGRAM FILES\ATI MULTIMEDIA\MAIN\
ProcessID : 4294042313
Threads : 1
Priority : Normal
FileSize : 76 KB
FileVersion : 7.0.006
ProductVersion : 7.0
Copyright : Copyright
CompanyName : ATI Technologies Inc.
FileDescription : ATI Multimedia Center Launchpad
InternalName : LAUNCHPD
OriginalFilename : LAUNCHPD.EXE
ProductName : ATI Multimedia Center
Created on : 11/4/2001 3:20:53 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 8/14/2000 1:45:08 PM
#:26 [csinsm32.exe]
FilePath : C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\
ProcessID : 4293930773
Threads : 4
Priority : Normal
FileSize : 208 KB
FileVersion : 6.01.0012
ProductVersion : 6.01
Copyright : Copyright © 1992-2001 Symantec Corporation
CompanyName : Symantec Corporation
FileDescription : Norton CleanSweep Install Monitor
InternalName : CSINSM
OriginalFilename : CSINSM*.EXE
ProductName : Norton CleanSweep
Created on : 7/14/2004 3:24:35 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 2/1/2002 9:00:00 PM
#:27 [printkey2000.exe]
FilePath : C:\PROGRAM FILES\PRINTKEY2000\
ProcessID : 4294118109
Threads : 2
Priority : Normal
FileSize : 849 KB
FileVersion : 5.1.0.0
Copyright : Copyright 1999 By Alfred Bolliger
CompanyName : Fred's Software
InternalName : PrintKey
ProductName : PrintKey
Created on : 5/21/2002 1:38:24 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 10/1/1999 1:31:38 AM
#:28 [monwow.exe]
FilePath : C:\Program Files\Norton SystemWorks\Norton CleanSweep\
ProcessID : 4293959333
Threads : 1
Priority : Normal
FileSize : 4 KB
FileVersion : 6.01.0012
ProductVersion : 6.01
Copyright : Copyright
CompanyName : Symantec Corporation
FileDescription : Norton SmartSweep for NT WOW monitor
InternalName : MONWOW
OriginalFilename : MonWOW.EXE
ProductName : Norton CleanSweep
Created on : 7/14/2004 3:24:36 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 2/1/2002 9:00:00 PM
#:29 [ad-aware.exe]
FilePath : C:\PROGRAM FILES\LAVASOFT\AD-AWARE 6\
ProcessID : 4294177877
Threads : 2
Priority : Normal
FileSize : 668 KB
FileVersion : 6.0.1.181
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 7/9/2004 4:28:21 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/13/2003 1:00:20 AM
Memory scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0
Started registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0
Started deep registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Deep registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0
Deep scanning and examining files (C:)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Tracking Cookie Object recognized!
Type : File
Data : dan & giselle@edge.ru4[1].txt
Category : Data Miner
Comment :
Object : C:\WINDOWS\Cookies\
Created on : 7/14/2004 2:20:17 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/14/2004 2:20:18 PM
Tracking Cookie Object recognized!
Type : File
Data : dan & giselle@atdmt[2].txt
Category : Data Miner
Comment :
Object : C:\WINDOWS\Cookies\
Created on : 7/14/2004 4:18:45 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/14/2004 4:18:46 PM
VX2 Object recognized!
Type : File
Data : dzcndi.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 12:08:58 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : mvvbvm60.0
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 1:35:30 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : serrun.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 2:14:26 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : mevbvm60.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 5:46:32 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : sarrun.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 5:55:40 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : ixfrared.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 6:05:46 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : ncswan32.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 6:20:43 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : sirrun.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 6:27:50 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : stsidll.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 6:35:44 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : isfrared.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 6:44:56 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : mvvbvm60.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 6:52:08 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : djndi.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 9:46:08 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : sx2evnt1.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 9:49:22 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : iknpstub.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/13/2004 10:16:52 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : innpstub.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/14/2004 12:23:10 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : sv2evnt1.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/14/2004 12:25:14 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : ngtapi.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/14/2004 1:29:55 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : dmkmaint.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/14/2004 1:31:24 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : myvbvm60.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/14/2004 2:37:07 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : wxock32.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/14/2004 2:43:40 AM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
VX2 Object recognized!
Type : File
Data : dikmaint.1
Category : Data Miner
Comment :
Object : C:\_RESTORE\TEMP\
FileSize : 305 KB
Created on : 7/2/2004 10:33:50 PM
Last accessed : 7/14/2004 4:00:00 AM
Last modified : 7/2/2004 10:33:52 PM
Disk scan result for C:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 23
Scanning Hosts file(C:\WINDOWS\hosts)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Hosts file scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
10 entries scanned.
New objects :0
Objects found so far: 23
Performing conditional scans..
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Conditional scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 23
1:01:20 PM Scan complete
Summary of this scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Total scanning time :00:19:36:230
Objects scanned :114124
Objects identified :23
Objects ignored :0
New objects :23
