Lavasoft Ad-aware Personal Build 6.181 Logfile created on :Tuesday, September 05, 2006 8:53:35 PM Created with Ad-aware Personal, free for private use. Using reference-file :01R347 26.10.2004 ______________________________________________________ Reffile status: ========================= Reference file loaded: Reference Number : 01R347 26.10.2004 Internal build : 281 File location : C:\PROGRA~1\Lavasoft\AD-AWA~1\reflist.ref Total size : 1379284 Bytes Signature data size : 1356739 Bytes Reference data size : 22481 Bytes Signatures total : 29961 Target categories : 10 Target families : 587 Memory + processor status: ========================== Number of processors : 1 Processor architecture : Intel Pentium IV Memory available:42 % Total physical memory:260080 kb Available physical memory:109124 kb Total page file size:639992 kb Available on page file:319876 kb Total virtual memory:2097024 kb Available virtual memory:2051004 kb OS: Ad-aware Settings ========================= Set : Activate in-depth scan (Recommended) Set : Safe mode (always request confirmation) Set : Scan active processes Set : Scan registry Set : Deep scan registry Set : Scan my IE Favorites for banned URLs Set : Scan within archives Set : Scan my Hosts file 9-5-2006 8:53:35 PM - Scan started. (Smart mode) Listing running processes ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ #:1 [smss.exe] FilePath : \SystemRoot\System32\ ThreadCreationTime : 9-6-2006 1:26:02 AM BasePriority : Normal #:2 [winlogon.exe] FilePath : \??\C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:06 AM BasePriority : High #:3 [services.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:07 AM BasePriority : Normal FileSize : 105 KB FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 CompanyName : Microsoft Corporation FileDescription : Services and Controller app InternalName : services.exe OriginalFilename : services.exe ProductName : Microsoft Created on : 8/29/2002 10:00:00 AM Last accessed : 9/6/2006 1:28:01 AM Last modified : 8/4/2004 7:56:55 AM #:4 [lsass.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:08 AM BasePriority : Normal FileSize : 13 KB FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 CompanyName : Microsoft Corporation FileDescription : LSA Shell (Export Version) InternalName : lsass.exe OriginalFilename : lsass.exe ProductName : Microsoft Created on : 8/29/2002 10:00:00 AM Last accessed : 9/6/2006 1:28:01 AM Last modified : 8/4/2004 7:56:50 AM #:5 [svchost.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:09 AM BasePriority : Normal FileSize : 14 KB FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe OriginalFilename : svchost.exe ProductName : Microsoft Created on : 8/29/2002 10:00:00 AM Last accessed : 9/6/2006 1:31:13 AM Last modified : 8/4/2004 7:56:57 AM #:6 [msmpeng.exe] FilePath : C:\Program Files\Windows Defender\ ThreadCreationTime : 9-6-2006 1:26:10 AM BasePriority : Normal FileSize : 13 KB FileVersion : 1.1.1347.0 ProductVersion : 1.1.1347.0 CompanyName : Microsoft Corporation FileDescription : Service Executable InternalName : MsMpEng.exe OriginalFilename : MsMpEng.exe ProductName : Windows Defender Created on : 4/3/2006 11:12:14 PM Last accessed : 9/6/2006 1:29:49 AM Last modified : 4/3/2006 11:12:14 PM #:7 [svchost.exe] FilePath : C:\WINDOWS\System32\ ThreadCreationTime : 9-6-2006 1:26:11 AM BasePriority : Normal FileSize : 14 KB FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe OriginalFilename : svchost.exe ProductName : Microsoft Created on : 8/29/2002 10:00:00 AM Last accessed : 9/6/2006 1:31:13 AM Last modified : 8/4/2004 7:56:57 AM #:8 [lexbces.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:20 AM BasePriority : Normal FileSize : 296 KB FileVersion : 8.16 ProductVersion : 8.16 Copyright : (C) 1993 - 2003 Lexmark International, Inc. CompanyName : Lexmark International, Inc. FileDescription : LexBce Service InternalName : LexBce Service OriginalFilename : LexBceS.exe ProductName : MarkVision for Windows (32 bit) Created on : 6/2/2003 4:01:26 PM Last accessed : 9/6/2006 1:26:20 AM Last modified : 6/2/2003 4:01:26 PM #:9 [explorer.exe] FilePath : C:\WINDOWS\ ThreadCreationTime : 9-6-2006 1:26:20 AM BasePriority : Normal FileSize : 1008 KB FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 6.00.2900.2180 CompanyName : Microsoft Corporation FileDescription : Windows Explorer InternalName : explorer OriginalFilename : EXPLORER.EXE ProductName : Microsoft Created on : 8/29/2002 10:00:00 AM Last accessed : 9/6/2006 1:26:25 AM Last modified : 8/4/2004 7:56:49 AM #:10 [lexpps.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:22 AM BasePriority : Normal FileSize : 170 KB FileVersion : 8.16 ProductVersion : 8.16 Copyright : (C) 1993 - 2003 Lexmark International, Inc. CompanyName : Lexmark International, Inc. FileDescription : LEXPPS.EXE InternalName : LEXPPS OriginalFilename : LEXPPS.EXE ProductName : MarkVision for Windows (32 bit) Created on : 6/2/2003 3:56:02 PM Last accessed : 9/6/2006 1:26:22 AM Last modified : 6/2/2003 3:56:02 PM #:11 [spoolsv.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:22 AM BasePriority : Normal FileSize : 56 KB FileVersion : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519) ProductVersion : 5.1.2600.2696 CompanyName : Microsoft Corporation FileDescription : Spooler SubSystem App InternalName : spoolsv.exe OriginalFilename : spoolsv.exe ProductName : Microsoft Created on : 8/29/2002 10:00:00 AM Last accessed : 9/6/2006 1:26:22 AM Last modified : 6/10/2005 11:53:32 PM #:12 [tfswctrl.exe] FilePath : C:\WINDOWS\system32\dla\ ThreadCreationTime : 9-6-2006 1:26:30 AM BasePriority : Normal FileSize : 112 KB FileVersion : 1.04.05b Copyright : Copyright CompanyName : Sonic Solutions FileDescription : Drive Letter Access Component Created on : 4/7/2004 6:31:44 PM Last accessed : 9/6/2006 1:26:30 AM Last modified : 8/6/2003 6:04:00 AM #:13 [winpatrol.exe] FilePath : C:\PROGRA~1\BILLPS~1\WINPAT~1\ ThreadCreationTime : 9-6-2006 1:26:30 AM BasePriority : Normal FileSize : 217 KB FileVersion : 9, 7, 4, 0 ProductVersion : 9.7.4.0 Copyright : Copyright CompanyName : BillP Studios FileDescription : WinPatrol System Monitor InternalName : WinPatrol Monitor OriginalFilename : Scotty ProductName : WinPatrol Monitor Created on : 10/9/2005 3:37:12 PM Last accessed : 9/6/2006 1:26:30 AM Last modified : 10/5/2005 8:23:58 PM #:14 [jusched.exe] FilePath : C:\Program Files\Java\jre1.5.0_06\bin\ ThreadCreationTime : 9-6-2006 1:26:30 AM BasePriority : Normal FileSize : 36 KB FileVersion : 5.0.60.5 ProductVersion : 5.0.60.5 Copyright : Copyright CompanyName : Sun Microsystems, Inc. FileDescription : Java(TM) 2 Platform Standard Edition binary InternalName : Java(TM) Update Scheduler OriginalFilename : jusched.exe ProductName : Java(TM) 2 Platform Standard Edition 5.0 Update 6 Created on : 3/25/2006 3:28:38 PM Last accessed : 9/6/2006 1:26:30 AM Last modified : 11/10/2005 7:03:52 PM #:15 [hkcmd.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:31 AM BasePriority : Normal FileSize : 76 KB FileVersion : 3.0.0.4396 ProductVersion : 7.0.0.4396 Copyright : Copyright 1999-2004, Intel Corporation CompanyName : Intel Corporation FileDescription : hkcmd Module InternalName : HKCMD OriginalFilename : HKCMD.EXE ProductName : Intel(R) Common User Interface Created on : 1/1/1980 5:00:00 AM Last accessed : 9/6/2006 1:26:31 AM Last modified : 9/20/2005 2:32:24 PM #:16 [hwapi.exe] FilePath : C:\Program Files\Common Files\McAfee\HackerWatch\ ThreadCreationTime : 9-6-2006 1:26:32 AM BasePriority : Normal FileSize : 541 KB FileVersion : 8.0.162.0 ProductVersion : 8.0.162.0 Copyright : (c) McAfee, Inc. All rights reserved. CompanyName : McAfee, Inc. FileDescription : McAfee HackerWatch Service OriginalFilename : HWAPI.exe ProductName : McAfee HackerWatch Service Created on : 8/17/2006 2:29:44 AM Last accessed : 9/6/2006 1:26:32 AM Last modified : 7/19/2006 9:48:46 PM #:17 [igfxpers.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:32 AM BasePriority : Normal FileSize : 112 KB FileVersion : 3.0.0.4396 ProductVersion : 7.0.0.4396 Copyright : Copyright 1999-2004, Intel Corporation CompanyName : Intel Corporation FileDescription : persistence Module InternalName : PERSISTENCE OriginalFilename : IGFXPERS.EXE ProductName : Intel(R) Common User Interface Created on : 9/20/2005 2:36:20 PM Last accessed : 9/6/2006 1:26:32 AM Last modified : 9/20/2005 2:36:20 PM #:18 [mclogsrv.exe] FilePath : C:\PROGRA~1\McAfee\MSC\ ThreadCreationTime : 9-6-2006 1:26:33 AM BasePriority : Normal FileSize : 171 KB FileVersion : 7,0,327,0 ProductVersion : 7,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : MSC Log Manager InternalName : mclogsrv OriginalFilename : mclogsrv.exe ProductName : McAfee SecurityCenter Created on : 8/17/2006 2:29:03 AM Last accessed : 9/6/2006 1:26:33 AM Last modified : 8/19/2006 12:35:58 AM #:19 [msascui.exe] FilePath : C:\Program Files\Windows Defender\ ThreadCreationTime : 9-6-2006 1:26:33 AM BasePriority : Normal FileSize : 759 KB FileVersion : 1.1.1347.0 ProductVersion : 1.1.1347.0 CompanyName : Microsoft Corporation FileDescription : Windows Defender User Interface InternalName : MSASCUI OriginalFilename : MSASCUI.exe ProductName : Windows Defender Created on : 4/3/2006 11:12:24 PM Last accessed : 9/6/2006 1:26:33 AM Last modified : 4/3/2006 11:12:24 PM #:20 [mcupdmgr.exe] FilePath : C:\PROGRA~1\McAfee\MSC\ ThreadCreationTime : 9-6-2006 1:26:34 AM BasePriority : Normal FileSize : 653 KB FileVersion : 7,0,327,0 ProductVersion : 7,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Update Manager Service InternalName : mcupdmgr OriginalFilename : mcupdmgr.exe ProductName : McAfee SecurityCenter Created on : 8/17/2006 2:28:59 AM Last accessed : 9/6/2006 1:26:34 AM Last modified : 8/19/2006 12:36:06 AM #:21 [mclogcln.exe] FilePath : C:\PROGRA~1\McAfee\MSC\ ThreadCreationTime : 9-6-2006 1:26:35 AM BasePriority : Normal FileSize : 69 KB Created on : 8/16/2006 2:53:55 AM Last accessed : 9/6/2006 1:26:36 AM Last modified : 8/15/2006 1:42:10 AM #:22 [mcsvrcnt.exe] FilePath : C:\Program Files\McAfee\MSC\ ThreadCreationTime : 9-6-2006 1:26:37 AM BasePriority : Normal FileSize : 229 KB FileVersion : 7,0,327,0 ProductVersion : 7,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Server Content InternalName : McSvrCnt OriginalFilename : McSvrCnt.exe ProductName : McAfee SecurityCenter Created on : 8/16/2006 2:54:27 AM Last accessed : 9/6/2006 1:29:11 AM Last modified : 8/19/2006 12:36:00 AM #:23 [mcupdui.exe] FilePath : C:\Program Files\McAfee\MSC\ ThreadCreationTime : 9-6-2006 1:26:38 AM BasePriority : Normal FileSize : 331 KB FileVersion : 7,0,327,0 ProductVersion : 7,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee McUpdUI EXE InternalName : McUpdUI OriginalFilename : McUpdUI.exe ProductName : McAfee SecurityCenter Created on : 8/16/2006 2:54:27 AM Last accessed : 9/6/2006 1:26:38 AM Last modified : 8/19/2006 12:35:48 AM #:24 [mcnasvc.exe] FilePath : c:\program files\common files\mcafee\mna\ ThreadCreationTime : 9-6-2006 1:26:39 AM BasePriority : Normal FileSize : 2085 KB FileVersion : 1,0,177,0 ProductVersion : 1,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Network Agent InternalName : McNASvc OriginalFilename : McNASvc.exe ProductName : McAfee Integrated Security Platform Created on : 8/17/2006 2:29:20 AM Last accessed : 9/6/2006 1:26:39 AM Last modified : 8/7/2006 10:58:00 PM #:25 [mskagent.exe] FilePath : C:\Program Files\McAfee\MSK\ ThreadCreationTime : 9-6-2006 1:26:39 AM BasePriority : Normal FileSize : 153 KB FileVersion : 8.0.239.0 ProductVersion : 8.0 Copyright : Copyright CompanyName : McAfee Inc. FileDescription : McAfee SpamKiller MskAgent Application InternalName : MskAgent OriginalFilename : MskAgent.exe ProductName : McAfee SpamKiller Created on : 8/17/2006 2:31:22 AM Last accessed : 9/6/2006 1:26:39 AM Last modified : 8/23/2006 11:31:08 PM #:26 [ctfmon.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:26:41 AM BasePriority : Normal FileSize : 15 KB FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 CompanyName : Microsoft Corporation FileDescription : CTF Loader InternalName : CTFMON OriginalFilename : CTFMON.EXE ProductName : Microsoft Created on : 8/29/2002 10:00:00 AM Last accessed : 9/6/2006 1:26:41 AM Last modified : 8/4/2004 7:56:48 AM #:27 [mcods.exe] FilePath : C:\PROGRA~1\McAfee\VIRUSS~1\ ThreadCreationTime : 9-6-2006 1:26:42 AM BasePriority : Normal FileSize : 337 KB FileVersion : 11,0,210,0 ProductVersion : 11,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee VirusScan - On Demand Scan InternalName : mcods.exe OriginalFilename : mcods.exe ProductName : McAfee VirusScan Created on : 8/17/2006 2:30:18 AM Last accessed : 9/6/2006 1:26:42 AM Last modified : 8/15/2006 12:50:32 AM #:28 [mcpromgr.exe] FilePath : C:\PROGRA~1\McAfee\MSC\ ThreadCreationTime : 9-6-2006 1:26:48 AM BasePriority : Normal FileSize : 459 KB FileVersion : 7,0,327,0 ProductVersion : 7,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Integrated Security Platform InternalName : McProMgr OriginalFilename : McProMgr.exe ProductName : McAfee SecurityCenter Created on : 8/17/2006 2:29:06 AM Last accessed : 9/6/2006 1:26:48 AM Last modified : 8/19/2006 12:35:26 AM #:29 [mcproxy.exe] FilePath : c:\PROGRA~1\COMMON~1\mcafee\mcproxy\ ThreadCreationTime : 9-6-2006 1:26:50 AM BasePriority : Normal FileSize : 333 KB FileVersion : 1,0,232,0 ProductVersion : 1,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Proxy Service Module InternalName : McProxy OriginalFilename : McProxy.exe ProductName : McAfee Proxy Created on : 8/17/2006 2:30:50 AM Last accessed : 9/6/2006 1:26:50 AM Last modified : 8/17/2006 4:11:04 AM #:30 [redirsvc.exe] FilePath : c:\PROGRA~1\COMMON~1\mcafee\redirsvc\ ThreadCreationTime : 9-6-2006 1:26:53 AM BasePriority : Normal FileSize : 221 KB FileVersion : 1,0,202,0 ProductVersion : 1,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Redirector Service Module InternalName : McRedirector OriginalFilename : RedirSvc.exe ProductName : McAfee Redirector Created on : 8/17/2006 2:29:43 AM Last accessed : 9/6/2006 1:26:53 AM Last modified : 8/15/2006 3:54:04 PM #:31 [mcshield.exe] FilePath : C:\PROGRA~1\McAfee\VIRUSS~1\ ThreadCreationTime : 9-6-2006 1:26:54 AM BasePriority : High FileSize : 137 KB FileVersion : 13.2.0.180 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : On-Access Scanner service ProductName : VirusScan Created on : 8/17/2006 2:29:52 AM Last accessed : 9/6/2006 1:26:54 AM Last modified : 8/14/2006 9:24:08 PM #:32 [mcsysmon.exe] FilePath : C:\PROGRA~1\McAfee\VIRUSS~1\ ThreadCreationTime : 9-6-2006 1:26:55 AM BasePriority : Normal FileSize : 607 KB FileVersion : 11,0,286,0 ProductVersion : 11,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee SystemGuards Service InternalName : sysmon OriginalFilename : sysmon.exe ProductName : McAfee VirusScan API Created on : 8/17/2006 2:29:57 AM Last accessed : 9/6/2006 1:26:55 AM Last modified : 8/15/2006 12:48:28 AM #:33 [mcagent.exe] FilePath : C:\PROGRA~1\mcafee.com\agent\ ThreadCreationTime : 9-6-2006 1:27:00 AM BasePriority : Normal FileSize : 545 KB FileVersion : 7,0,327,0 ProductVersion : 7,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Integrated Security Platform InternalName : McAgent OriginalFilename : McAgent.exe ProductName : McAfee SecurityCenter Created on : 8/17/2006 2:29:10 AM Last accessed : 9/6/2006 1:27:01 AM Last modified : 8/19/2006 12:35:00 AM #:34 [mctskshd.exe] FilePath : C:\PROGRA~1\McAfee\MSC\ ThreadCreationTime : 9-6-2006 1:27:01 AM BasePriority : Normal FileSize : 183 KB FileVersion : 7,0,327,0 ProductVersion : 7,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Tqsk Scheduler InternalName : McTskShd OriginalFilename : mctskshd.exe ProductName : McAfee SecurityCenter Created on : 8/17/2006 2:28:59 AM Last accessed : 9/6/2006 1:27:01 AM Last modified : 8/19/2006 12:35:42 AM #:35 [mcusrmgr.exe] FilePath : C:\PROGRA~1\McAfee\MSC\ ThreadCreationTime : 9-6-2006 1:27:03 AM BasePriority : Normal FileSize : 293 KB FileVersion : 7,0,327,0 ProductVersion : 7,0,0,0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : MISP User Manager InternalName : McUsrMgr OriginalFilename : McUsrMgr.exe ProductName : McAfee SecurityCenter Created on : 8/17/2006 2:29:02 AM Last accessed : 9/6/2006 1:27:03 AM Last modified : 8/19/2006 12:35:50 AM #:36 [mdm.exe] FilePath : C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\ ThreadCreationTime : 9-6-2006 1:27:04 AM BasePriority : Normal FileSize : 314 KB FileVersion : 7.00.9466 ProductVersion : 7.00.9466 CompanyName : Microsoft Corporation FileDescription : Machine Debug Manager InternalName : mdm.exe OriginalFilename : mdm.exe ProductName : Microsoft Created on : 6/20/2003 4:25:00 AM Last accessed : 9/6/2006 1:27:04 AM Last modified : 6/20/2003 4:25:00 AM #:37 [mpfsrv.exe] FilePath : C:\Program Files\McAfee\MPF\ ThreadCreationTime : 9-6-2006 1:27:06 AM BasePriority : Normal FileSize : 785 KB FileVersion : 8.0.203.0 ProductVersion : 8.0.203.0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Personal Firewall Service InternalName : MPFService OriginalFilename : MpfService.exe ProductName : McAfee Personal Firewall Created on : 8/17/2006 2:30:35 AM Last accessed : 9/6/2006 1:28:51 AM Last modified : 8/24/2006 6:58:02 AM #:38 [msksrver.exe] FilePath : C:\Program Files\McAfee\MSK\ ThreadCreationTime : 9-6-2006 1:27:12 AM BasePriority : Normal FileSize : 43 KB FileVersion : 8.0.239.0 ProductVersion : 8.0 Copyright : Copyright CompanyName : McAfee Inc. FileDescription : McAfee SpamKiller MskServer InternalName : MskServe OriginalFilename : MskServe.exe ProductName : McAfee SpamKiller Created on : 8/17/2006 2:31:24 AM Last accessed : 9/6/2006 1:27:12 AM Last modified : 8/23/2006 11:31:18 PM #:39 [svchost.exe] FilePath : C:\WINDOWS\System32\ ThreadCreationTime : 9-6-2006 1:27:18 AM BasePriority : Normal FileSize : 14 KB FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe OriginalFilename : svchost.exe ProductName : Microsoft Created on : 8/29/2002 10:00:00 AM Last accessed : 9/6/2006 1:31:13 AM Last modified : 8/4/2004 7:56:57 AM #:40 [fxssvc.exe] FilePath : C:\WINDOWS\system32\ ThreadCreationTime : 9-6-2006 1:27:40 AM BasePriority : Normal FileSize : 261 KB FileVersion : 5.2.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.2.2600.2180 CompanyName : Microsoft Corporation FileDescription : Fax Service InternalName : FXSSVC.EXE OriginalFilename : FXSSVC.EXE ProductName : Microsoft Created on : 4/7/2004 6:12:49 PM Last accessed : 9/6/2006 1:27:40 AM Last modified : 8/4/2004 7:56:49 AM #:41 [mps.exe] FilePath : C:\PROGRA~1\McAfee\MPS\ ThreadCreationTime : 9-6-2006 1:27:58 AM BasePriority : Normal FileSize : 861 KB FileVersion : 9.0.382.0 ProductVersion : 9.0.382.0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Privacy Service 9.0 InternalName : mps9 OriginalFilename : mps.exe ProductName : McAfee Privacy Service Created on : 8/17/2006 2:30:53 AM Last accessed : 9/6/2006 1:27:58 AM Last modified : 8/24/2006 8:38:54 PM #:42 [mpsevh.exe] FilePath : C:\Program Files\McAfee\MPS\ ThreadCreationTime : 9-6-2006 1:28:13 AM BasePriority : Normal FileSize : 293 KB FileVersion : 9.0.382.0 ProductVersion : 9.0.382.0 Copyright : Copyright CompanyName : McAfee, Inc. FileDescription : McAfee Privacy Service 9.0 Event Handler InternalName : MpsEventHandler OriginalFilename : mpsevh.exe ProductName : McAfee Privacy Service Created on : 8/17/2006 2:30:54 AM Last accessed : 9/6/2006 1:28:14 AM Last modified : 8/24/2006 8:38:58 PM #:43 [ad-aware.exe] FilePath : C:\PROGRA~1\Lavasoft\AD-AWA~1\ ThreadCreationTime : 9-6-2006 1:53:18 AM BasePriority : Normal FileSize : 668 KB FileVersion : 6.0.1.181 ProductVersion : 6.0.0.0 Copyright : Copyright CompanyName : Lavasoft Sweden FileDescription : Ad-aware 6 core application InternalName : Ad-aware.exe OriginalFilename : Ad-aware.exe ProductName : Lavasoft Ad-aware Plus Created on : 7/22/2004 10:36:27 PM Last accessed : 9/6/2006 1:53:29 AM Last modified : 7/13/2003 2:00:20 AM Memory scan result : ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ New objects : 0 Objects found so far: 0 Started registry scan ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ ZaZZeR Object recognized! Type : RegKey Data : Category : Malware Comment : Rootkey : HKEY_LOCAL_MACHINE Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c68ae9c0-0909-4ddc-b661-c1afb9f5ae53} ZaZZeR Object recognized! Type : RegKey Data : Category : Malware Comment : Rootkey : HKEY_CLASSES_ROOT Object : CLSID\{C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} ZaZZeR Object recognized! Type : RegKey Data : Category : Malware Comment : Rootkey : HKEY_CLASSES_ROOT Object : TypeLib\{90A52F08-64AC-4DC6-9D7D-4516670275D3} Registry scan result : ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ New objects : 3 Objects found so far: 3 Started deep registry scan ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Deep registry scan result : ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ New objects : 0 Objects found so far: 3 ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Deep scanning and examining files (C:) ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Scanning Hosts file(C:\WINDOWS\system32\drivers\etc\hosts) ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Hosts file scan result: ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ 1 entries scanned. New objects :0 Objects found so far: 3 Performing conditional scans.. ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ ZaZZeR Object recognized! Type : RegKey Data : Category : Malware Comment : Rootkey : HKEY_CLASSES_ROOT Object : AppID\{90A52F08-64AC-4DC6-9D7D-4516670275D3} ZaZZeR Object recognized! Type : RegKey Data : Category : Malware Comment : Rootkey : HKEY_CLASSES_ROOT Object : Interface\{6C51F7E9-8542-4F25-A30F-2060157752E1} Conditional scan result: ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ New objects : 2 Objects found so far: 5 8:59:43 PM Scan complete Summary of this scan ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ Total scanning time :00:06:07:16 Objects scanned :53678 Objects identified :5 Objects ignored :0 New objects :5