Spyware / Malware / Virus Removal

My Hijack Log

2 min read

Looking for the outcome? Ask AI

bink Topic Starter

Post #1April 9, 2005, 11:24 PM UTC

1) SpyWareNuker 2005 shows 100's of spyware.

2) Microsoft AntiSpyware shows 0.
3) Spyware Doctor shows 0.
4) Ad-Ware SE Professional shows 0.
5) Spybot-Search & Destroy shows 0.
6) When "remove spyware" was clicked in SpyWareNuker 2004 all my VCom Files were deleted. :rant: :rant:

Here is my HiJack log, are the Spyware shown by SpyWareNuker false positives?

Logfile of HijackThis v1.99.1
Scan saved at 6:17:17 PM, on 4/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\WINDOWS\System32\hphmon04.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\WINDOWS\system32\wfxsnt40.exe
C:\Program Files\Winamp\Winampa.exe
C:\WINDOWS\LTMSG.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\PROGRA~1\LAVASOFT\AD-AWA~1\Ad-Watch.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Symantec\WinFax\WFXCTL32.EXE
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\TextPad 4\TextPad.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\WFXSVC.EXE
C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
C:\Program Files\Symantec\WinFax\WFXMOD32.EXE
C:\WINDOWS\System32\HPHipm11.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:7212
R3 - Default URLSearchHook is missing
N1 - Netscape 4: user_pref("browser.startup.homepage", "http://www.ygpros.com/login/menu.php"); (C:\Program Files\Netscape\Users\bink\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
O2 - BHO: IEWatchObj Class - {9527D42F-D666-11D3-B8DD-00600838CD5F} - C:\WINDOWS\system32\IETie.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel® Active Monitor\imontray.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [RCScheduleCheck] C:\Program Files\VCOM\Recovery Commander\RCSCHED.EXE -CHECK
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot
O4 - HKLM\..\Run: [DNS7reminder] "C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.exe" -r "C:\Program Files\ScanSoft\NaturallySpeaking8\Program\ereg.ini"
O4 - HKLM\..\Run: [Fix-It AV] C:\PROGRA~1\VCOM\SYSTEM~1\MemCheck.exe
O4 - HKLM\..\Run: [AWMON] "C:\PROGRA~1\LAVASOFT\AD-AWA~1\Ad-Watch.exe"
O4 - HKLM\..\Run: [Spyware Nuker] C:\Program Files\Spyware Nuker 2004\swn2.exe /h
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - Startup: TextPad.lnk = C:\Program Files\TextPad 4\TextPad.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Controller.LNK = C:\Program Files\Symantec\WinFax\WFXCTL32.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Allow personal info to reach this site - file://C:\Program Files\GhostSurf\info.allow.html
O8 - Extra context menu item: Allow popups on this site - file://C:\Program Files\GhostSurf\popup.allow.html
O8 - Extra context menu item: Allow this advertisement - file://C:\Program Files\GhostSurf\menu.allowimg.html
O8 - Extra context menu item: Block personal info from this site - file://C:\Program Files\GhostSurf\info.block.html
O8 - Extra context menu item: Block popups on this site - file://C:\Program Files\GhostSurf\popup.block.html
O8 - Extra context menu item: Block this advertisement - file://C:\Program Files\GhostSurf\menu.blockimg.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: GhostSurf Privacy Center - {578FC4E3-151E-456c-AF8E-B63061EFE228} - C:\Program Files\GhostSurf\LaunchPCC.exe (file missing)
O9 - Extra 'Tools' menuitem: GhostSurf Privacy Center - {578FC4E3-151E-456c-AF8E-B63061EFE228} - C:\Program Files\GhostSurf\LaunchPCC.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid;=0x409
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1097344302171
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Intel® Active Monitor (imonNT) - Intel Corp. - C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\System32\HPHipm11.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation - C:\WINDOWS\System32\WFXSVC.EXE

Racktracker

Post #2April 10, 2005, 7:37 PM UTC

I don't see any problems in your log.

You do have a couple of cleanup items.
Have hijackthis fix these entries.
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R3 - Default URLSearchHook is missing

Spywarenuker is probably giving false postitives. Easier to sell the program that way.
You should take a look at this site.

http://www.spywarewarrior.com/rogue_anti-spyware.htm

bink

Post #3April 11, 2005, 4:42 AM UTC

Thanks Racktracker

SpyWareNuker used to be on http://www.spywarewarrior.com/rogue_anti-spyware.htm
but has been since removed.

It is the only Anti Spyware program that shows spyware on my system?

Bill

Racktracker

Post #4April 12, 2005, 12:31 AM UTC

Is it removing what it finds? Can you post a log of what it found?

bink

Post #5April 12, 2005, 1:29 AM UTC last edited April 12, 2005, 1:35 AM UTC

Racktracter,

They corrected SpyWareNuker 2005 last night.
The version I have which is SpyWareNuker 2004 has not yet been corrected to my knowledge, so I am waiting.

Their product support is the worst I have encountered, for over 2 weeks they said I did not know what I was doing.
Their quote: "which leads us to believe that you are not sure what program you are using"

After over 2 weeks I was so flustrated that I included this in an email that I sent them on 4/8/2005.
******** start email in part ***************************
I have been in the computer industry for 50 years.
I started with IBM in 1956
I have been a VP with 7 different computer companies, always hardware and software.
I have had 100's of computer engineers repairing hardware & software all over the world.
I have designed software systems that sold for over 100,000.00 a copy.
I have designed large main frame computers.
I designed the first parity checker for any adder on any computer installed any where in the world
I have been know as the best trouble shooter in every company I have been with

Do not tell me "that you are not sure what program you are using"

Click on this for my background http://www.dowebpages.com/work
Be sure and read it carefully, even you should be able to get the drift.

Now:
If I remove all Nuker programs, files & directories
Then if I click on the below link I will get an EXE file
If I click on that EXE file it will install Nuker 2004
If I click on "about" it will show that it is registered as SN: 6125494-2450177-xxxxxxx
If I run a scan it will find SpyWare
If I click to remove SpyWare it will delete all my VCom files

I have done these exact things 4 times.

I don't believe you know what you are doing and I suggest you pass this problem up stairs. :rant: :rant:
******** end my email *******************

SpyWareNuker 2005 ran this morning without error.

Here is their log file generated on 4/9/2005 when I ran the program.

********* Spyware Nuker Log File **********
- Version: 3.3.17.2 Build 2
- Definition Database Date: 3/18/2005 10:34:41 AM (9028 entries)
- OS version: Windows XP 5.1.2600 [Service Pack 2]
- Web Browser Version: IE:6.0.2900.2180;NS:7.1b1 (en);
- User ID: S-1-5-21-861567501-1645522239-1801674531-1003
= 04/09/2005 07:54:35 Start Scaning:
Registry,Files,Cookies,Processes,Hosts
= 04/09/2005 07:54:37 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:37 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:38 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:39 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 07:54:40 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 07:54:44 User terminated the scaning.
********* Spyware Nuker Log File **********
- Version: 3.3.17.2 Build 2
- Definition Database Date: 3/18/2005 10:34:41 AM (9028 entries)
- OS version: Windows XP 5.1.2600 [Service Pack 2]
- Web Browser Version: IE:6.0.2900.2180;NS:7.1b1 (en);
- User ID: S-1-5-21-861567501-1645522239-1801674531-1003
= 04/09/2005 08:04:04 Start Scaning:
Registry,Files,Cookies,Processes,Hosts
= 04/09/2005 08:04:06 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:06 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:07 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 512: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/09/2005 08:04:08 !! Process match (698-7432): 3244: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/09/2005 08:04:10 User terminated the scaning.
********* Spyware Nuker Log File **********
- Version: 3.3.17.2 Build 2
- Definition Database Date: 3/18/2005 10:34:41 AM (9028 entries)
- OS version: Windows XP 5.1.2600 [Service Pack 2]
- Web Browser Version: IE:6.0.2900.2180;NS:7.1b1 (en);
- User ID: S-1-5-21-861567501-1645522239-1801674531-1003
= 04/10/2005 22:58:51 Start Scaning:
Registry,Files,Cookies,Processes,Hosts
= 04/10/2005 22:58:53 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:53 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:53 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:53 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:54 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:54 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:54 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:54 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:54 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:54 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:54 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:55 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:55 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1700: C:\WINDOWS\Explorer.EXE
= 04/10/2005 22:58:55 !! Process match (698-7432): 2028: C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 980: C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 3132: C:\WINDOWS\System32\alg.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 3860: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 520: C:\Program Files\Mozilla Firefox\firefox.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1816: C:\Program Files\Spyware Doctor\swdoctor.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 712: C:\WINDOWS\system32\lsass.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1028: C:\WINDOWS\system32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1136: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1196: C:\WINDOWS\System32\svchost.exe
= 04/10/2005 22:58:55 !! Process match (698-7432): 1296: C:\WINDOWS\System32\svchost.e

Racktracker

Post #6April 12, 2005, 1:47 AM UTC

I edited part of the serial out of your post, don't want that floating around. With a resume like that, I should be asking you questions. So far I am unimpressed with spyware nuker. As you well know every item shown in that log is a legitimate file, some are even vital system files. It also apears as though the log may have been cut short due to length. Is there anything in the log that you think could actually be spyware?

bink

Post #7April 12, 2005, 2:17 AM UTC

Racktracter, Thanks for xxxxx out part of the serial but they are so concerned about those keys that it can only be used one time under any and all situations. That is why Eric Howes dropped them from his evaluation of Spyware programs. <_< Long time computer man, short time Spyware man

I stopped the scan after the count got so high that it was obvious that it was in error. Nothing in my PC except legitimate files according to the many other programs. I plan on taking action against them

if they do not fix the SpyWareNuker 2004 that I purchased. That program actually deleted ALL my VCom files four times and they kept saying do stupid stuff.

Will post the results when I know them. Bink

Racktracker

Post #8April 12, 2005, 2:30 AM UTC

If I were you, I would only be interested in getting my money back and getting their program off my pc.

Some of the best spyware removal and prevention programs available come at no charge.

This link gives some very good advice on prevention.

So how did I get infected

Let me know how things turn out.

bink

Post #9April 13, 2005, 4:58 AM UTC

They finally admitted and corrected their problem today after over 2 weeks: They said, "Spyware Nuker was causing issues removing your VCOM software which you did not want removed as it was a legitimate application. We refer to this as a 'false positive'." I still give them

:rant:

on their support as this problem should not have taken over two weeks to admit that the problem existed.

Racktracker

Post #10April 13, 2005, 6:20 PM UTC

Good to hear that you have things worked out.

If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

My Hijack Log

✨ Ask AI

Ask AI