OS : Windows 98 A Build : 4.10.67766446 IE Version : 6.0.2800 Diagnostic Tool Ver:1.07 --------------------------------------------------- Noadware Versions : Current Def File : Noadware Version : Initial Noadware Def File : ------------------------------------------- 1. Start Page (IE) - http://www.newgenlook.info/ad/ad0337/ 2. Default Page URL (IE) - http:\\www.devtex.net 3. Search Page - http://www.google.com 4. Search Bar - http://www.google.com/ie 5. Customize Search - http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm 6. Search Assistant - http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm 7. Default Prefix - http:// 8. Prefixes - http:// 9. Extra Buttons - Translate 10. Extra Buttons - (No Name) 11. Extra Buttons - (No Name) 12. Extra Buttons - (No Name) 13. Extra Buttons - Real.com 14. Extra Buttons - (No Name) 15. BHO - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL []{53707962-6F74-2D53-2644-206D7942484F} 16. BHO - c:\program files\google\googletoolbar1.dll []{AA58ED58-01DD-4d91-8333-CF10577473F7} 17. BHO - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll [Norton Internet Security]{9ECB9560-04F9-4bbc-943D-298DDF1699E1} 18. BHO - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll [NAV Helper]{BDF3E430-B101-42AD-A544-FADC6B084872} 19. Run(HKLM) - PTSNOOP ptsnoop.exe 20. Run(HKLM) - CountrySelection pctptt.exe 21. Run(HKLM) - TaskMonitor c:\windows\taskmon.exe 22. Run(HKLM) - LoadPowerProfile Rundll32.exe powrprof.dll,LoadCurrentPwrScheme 23. Run(HKLM) - SystemTray SysTray.Exe 24. Run(HKLM) - CPQEASYACC C:\Program Files\Compaq\Easy Access Button Support\cpqeadm.exe 25. Run(HKLM) - EACLEAN C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe 26. Run(HKLM) - CPQInet c:\compaq\CPQInet\CpqInet.exe 27. Run(HKLM) - Digital Dashboard C:\Program Files\Compaq\Digital Dashboard\DevGulp.exe 28. Run(HKLM) - Service Connection c:\cpqs\bwtools\sccenter.exe 29. Run(HKLM) - AvconsoleEXE C:\Program Files\Network Associates\McAfee VirusScan\avconsol.exe /minimize 30. Run(HKLM) - VsecomrEXE C:\Program Files\Network Associates\McAfee VirusScan\VSEcomR.EXE 31. Run(HKLM) - Vshwin32EXE C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE 32. Run(HKLM) - VsStatEXE C:\Program Files\Network Associates\McAfee VirusScan\VSSTAT.EXE /SHOWWARNING 33. Run(HKLM) - SystemTasks C:\filez.exe 34. Run(HKLM) - StillImageMonitor C:\WINDOWS\SYSTEM\STIMON.EXE 35. Run(HKLM) - CreateCD50 "c:\Program Files\Common Files\Adaptec Shared\CreateCD\CreateCD50.exe" -r 36. Run(HKLM) - AdaptecDirectCD "c:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" 37. Run(HKLM) - HP Component Manager "C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE" 38. Run(HKLM) - AOLDialer C:\Program Files\Common Files\AOL\ACS\AOLDial.exe 39. Run(HKLM) - HP Software Update C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 40. Run(HKLM) - QuickTime Task "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime 41. Run(HKLM) - ccApp "c:\Program Files\Common Files\Symantec Shared\ccApp.exe" 42. Run(HKLM) - Symantec Core LC C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start 43. Run(HKLM) - Symantec NetDriver Monitor C:\PROGRA~1\SYMNET~1\SNDMON.EXE /Consumer 44. Run(HKCU) - MoneyAgent "C:\Program Files\Microsoft Money\System\Money Express.exe" 45. Startup - America Online Tray Icon.lnk 46. Startup - HP Digital Imaging Monitor.lnk 47. Startup - Forget Me Not.lnk 48. DPF - Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab 49. DPF - DirectAnimation Java Classes - file://c:\windows\SYSTEM\dajava.cab 50. DPF - Internet Explorer Classes for Java - file://c:\windows\SYSTEM\iejava.cab 51. DPF - {166B1BCA-3F9C-11CF-8075-444553540000} - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab 52. DPF - {D27CDB6E-AE6D-11CF-96B8-444553540000} - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab 53. DPF - {17163BB4-107E-11D4-9B76-006097DF2317} - http://aol.ea.com/downloads/games/common/boot_strap/iegils.cab 54. DPF - {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?38152.5725347222 55. DPF - {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - http://a19.g.akamai.net/7/19/7125/4021/ftp.coupons.com/v3123/cpbrkpie.cab 56. DPF - {B991DA79-51F7-4011-98D2-1F2592E82A56} - http://204.118.132.145/2_0/ACNePlayer.cab 57. DPF - {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://www.apple.com/qtactivex/qtplugin.cab 58. DPF - {31564D57-0000-0010-8000-00AA00389B71} - http://codecs.microsoft.com/codecs/i386/wmvax.cab 59. DPF - {644E432F-49D3-41A1-8DD5-E099162EEEC5} - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab