[kc8525]

Ad-Aware SE Build 1.05
Logfile Created on:Tuesday, April 26, 2005 1:21:47 PM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R41 25.04.2005
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Alexa(TAC index:5):9 total references
Claria(TAC index:7):5 total references
Possible Browser Hijack attempt(TAC index:3):2 total references
Tracking Cookie(TAC index:3):300 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Definition File:
=========================
Definitions File Loaded:
Reference Number : SE1R41 25.04.2005
Internal build : 48
File location : C:\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref
File size : 462131 Bytes
Total size : 1397647 Bytes
Signature data size : 1367126 Bytes
Reference data size : 30009 Bytes
Signatures total : 39003
Fingerprints total : 816
Fingerprints size : 28835 Bytes
Target categories : 15
Target families : 650


Memory + processor status:
==========================
Number of processors : 1
Processor architecture : Intel Pentium III
Memory available:8 %
Total physical memory:523760 kb
Available physical memory:36836 kb
Total page file size:1014044 kb
Available on page file:613068 kb
Total virtual memory:2097024 kb
Available virtual memory:2042752 kb
OS:Microsoft Windows 2000 Professional Service Pack 4 (Build 2195)

Ad-Aware SE Settings
===========================
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan within archives
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Obtain command line of scanned processes
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Write-protect system files after repair (Hosts file, etc.)
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Play sound at scan completion if scan locates critical objects


4-26-2005 1:21:47 PM - Scan started. (Full System Scan)

Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
ModuleName : \SystemRoot\System32\smss.exe
Command Line : n/a
ProcessID : 160
ThreadCreationTime : 4-26-2005 4:42:21 PM
BasePriority : Normal


#:2 [csrss.exe]
ModuleName : \??\C:\WINNT\system32\csrss.exe
Command Line : C:\WINNT\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThre
ProcessID : 184
ThreadCreationTime : 4-26-2005 4:42:32 PM
BasePriority : Normal


#:3 [winlogon.exe]
ModuleName : \??\C:\WINNT\system32\winlogon.exe
Command Line : winlogon.exe
ProcessID : 180
ThreadCreationTime : 4-26-2005 4:42:35 PM
BasePriority : High


#:4 [services.exe]
ModuleName : C:\WINNT\system32\services.exe
Command Line : C:\WINNT\system32\services.exe
ProcessID : 232
ThreadCreationTime : 4-26-2005 4:42:38 PM
BasePriority : Normal
FileVersion : 5.00.2195.6700
ProductVersion : 5.00.2195.6700
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : services.exe

#:5 [lsass.exe]
ModuleName : C:\WINNT\system32\lsass.exe
Command Line : C:\WINNT\system32\lsass.exe
ProcessID : 244
ThreadCreationTime : 4-26-2005 4:42:38 PM
BasePriority : Normal
FileVersion : 5.00.2195.6902
ProductVersion : 5.00.2195.6902
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Executable and Server DLL (Export Version)
InternalName : lsasrv.dll and lsass.exe
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : lsasrv.dll and lsass.exe

#:6 [ibmpmsvc.exe]
ModuleName : C:\WINNT\System32\ibmpmsvc.exe
Command Line : C:\WINNT\System32\ibmpmsvc.exe
ProcessID : 368
ThreadCreationTime : 4-26-2005 4:42:44 PM
BasePriority : Normal


#:7 [svchost.exe]
ModuleName : C:\WINNT\system32\svchost.exe
Command Line : C:\WINNT\system32\svchost -k rpcss
ProcessID : 424
ThreadCreationTime : 4-26-2005 4:42:45 PM
BasePriority : Normal
FileVersion : 5.00.2134.1
ProductVersion : 5.00.2134.1
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : svchost.exe

#:8 [svchost.exe]
ModuleName : C:\WINNT\System32\svchost.exe
Command Line : C:\WINNT\System32\svchost.exe -k netsvcs
ProcessID : 468
ThreadCreationTime : 4-26-2005 4:42:46 PM
BasePriority : Normal
FileVersion : 5.00.2134.1
ProductVersion : 5.00.2134.1
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : svchost.exe

#:9 [lexbces.exe]
ModuleName : C:\WINNT\system32\LEXBCES.EXE
Command Line : C:\WINNT\system32\LEXBCES.EXE
ProcessID : 520
ThreadCreationTime : 4-26-2005 4:42:46 PM
BasePriority : Normal
FileVersion : 5,13,00,00
ProductVersion : 5,13,00,00
ProductName : MarkVision for Windows (32 bit)
CompanyName : Lexmark International, Inc.
FileDescription : LexBce Service
InternalName : LexBce Service
LegalCopyright : © 1993 - 2000 Lexmark International, Inc.
OriginalFilename : LexBceS.exe

#:10 [spoolsv.exe]
ModuleName : C:\WINNT\system32\spoolsv.exe
Command Line : C:\WINNT\system32\spoolsv.exe
ProcessID : 544
ThreadCreationTime : 4-26-2005 4:42:46 PM
BasePriority : Normal
FileVersion : 5.00.2195.6659
ProductVersion : 5.00.2195.6659
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolss.exe
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : spoolss.exe

#:11 [ati2evxx.exe]
ModuleName : C:\WINNT\System32\Ati2evxx.exe
Command Line : C:\WINNT\System32\Ati2evxx.exe
ProcessID : 648
ThreadCreationTime : 4-26-2005 4:43:01 PM
BasePriority : Normal


#:12 [cvpnd.exe]
ModuleName : C:\Program Files\Thompson\VPN Client\cvpnd.exe
Command Line : "C:\Program Files\Thompson\VPN Client\cvpnd.exe"
ProcessID : 664
ThreadCreationTime : 4-26-2005 4:43:01 PM
BasePriority : Normal
FileVersion : 4.0.4 (D)
ProductVersion : 4.0.4 (D)
ProductName : Cisco Systems VPN Client
CompanyName : Cisco Systems, Inc.
FileDescription : Cisco Systems VPN Client
InternalName : cvpnd
LegalCopyright : Copyright © 1998-2003 Cisco Systems, Inc.
OriginalFilename : CVPND.EXE

#:13 [dcfssvc.exe]
ModuleName : C:\WINNT\system32\DRIVERS\dcfssvc.exe
Command Line : C:\WINNT\system32\DRIVERS\dcfssvc.exe
ProcessID : 708
ThreadCreationTime : 4-26-2005 4:43:06 PM
BasePriority : Normal
FileVersion : 1.1.4100.0
ProductVersion : 3.2.0400.0
ProductName : Kodak DC File System Driver (Win32)
CompanyName : Eastman Kodak Company
FileDescription : Kodak DC Ring 3 Conduit (Win32)
InternalName : DcFsSvc.exe
LegalCopyright : Copyright © Eastman Kodak Co. 2000-1
OriginalFilename : DcFsSvc.exe

#:14 [mdm.exe]
ModuleName : C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
Command Line : "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
ProcessID : 740
ThreadCreationTime : 4-26-2005 4:43:08 PM
BasePriority : Normal
FileVersion : 7.00.9466
ProductVersion : 7.00.9466
ProductName : Microsoft® Visual Studio .NET
CompanyName : Microsoft Corporation
FileDescription : Machine Debug Manager
InternalName : mdm.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : mdm.exe

#:15 [sqlservr.exe]
ModuleName : C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
Command Line : "C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER
ProcessID : 776
ThreadCreationTime : 4-26-2005 4:43:11 PM
BasePriority : Normal
FileVersion : 2000.080.0760.00
ProductVersion : 8.00.760
ProductName : Microsoft SQL Server
CompanyName : Microsoft Corporation
FileDescription : SQL Server Windows NT
InternalName : SQLSERVR
LegalCopyright : © 1988-2003 Microsoft Corp. All rights reserved.
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation. Windows™ is a trademark of Microsoft Corporation
OriginalFilename : SQLSERVR.EXE
Comments : NT INTEL X86

#:16 [ntrtscan.exe]
ModuleName : C:\Program Files\OfficeScan NT\ntrtscan.exe
Command Line : "C:\Program Files\OfficeScan NT\ntrtscan.exe"
ProcessID : 900
ThreadCreationTime : 4-26-2005 4:43:14 PM
BasePriority : Normal
FileVersion : 7.0.0.1040
ProductVersion : 7.0
ProductName : Trend Micro OfficeScan
CompanyName : Trend Micro Inc.
FileDescription : Ntrtscan.exe
LegalCopyright : Copyright © 1999-2005 Trend Micro Incorporated. All rights reserved.
LegalTrademarks : Copyright © Trend Micro Inc.

#:17 [ofcpfwsvc.exe]
ModuleName : C:\Program Files\OfficeScan NT\OfcPfwSvc.exe
Command Line : "C:\Program Files\OfficeScan NT\OfcPfwSvc.exe"
ProcessID : 916
ThreadCreationTime : 4-26-2005 4:43:17 PM
BasePriority : Normal
FileVersion : 7.0.0.1040
ProductVersion : 7.0
ProductName : Trend Micro OfficeScan
CompanyName : Trend Micro Inc.
FileDescription : OfcPfwSvc
InternalName : OfcPfwSvc
LegalCopyright : Copyright © 1999-2005 Trend Micro Incorporated. All rights reserved.
LegalTrademarks : Copyright © Trend Micro Inc.
OriginalFilename : OfcPfwSvc.exe
Comments : OFC PFW Service

#:18 [ptssvc.exe]
ModuleName : C:\Program Files\KODAK\Kodak EasyShare software\bin\ptssvc.exe
Command Line : "C:\Program Files\KODAK\Kodak EasyShare software\bin\ptssvc.exe"
ProcessID : 972
ThreadCreationTime : 4-26-2005 4:43:18 PM
BasePriority : Normal
FileVersion : 5, 0, 4, 116
ProductVersion : 4, 0, 2, 134
ProductName : KODAK PTS service
CompanyName : KODAK
FileDescription : ptssvc
InternalName : ptssvc
LegalCopyright : Copyright © 2001 Eastman Kodak Company
OriginalFilename : ptssvc.exe

#:19 [qconsvc.exe]
ModuleName : C:\WINNT\System32\QCONSVC.EXE
Command Line : System32\QCONSVC.EXE
ProcessID : 988
ThreadCreationTime : 4-26-2005 4:43:22 PM
BasePriority : Normal


#:20 [regsvc.exe]
ModuleName : C:\WINNT\system32\regsvc.exe
Command Line : C:\WINNT\system32\regsvc.exe
ProcessID : 1008
ThreadCreationTime : 4-26-2005 4:43:22 PM
BasePriority : Normal
FileVersion : 5.00.2195.6701
ProductVersion : 5.00.2195.6701
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Remote Registry Service
InternalName : regsvc
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : REGSVC.EXE

#:21 [retrorun.exe]
ModuleName : C:\Program Files\Dantz\Retrospect\retrorun.exe
Command Line : "C:\Program Files\Dantz\Retrospect\retrorun.exe"
ProcessID : 1020
ThreadCreationTime : 4-26-2005 4:43:23 PM
BasePriority : Normal
FileVersion : 6.0.222
ProductVersion : 6.0
ProductName : Retrospect
CompanyName : Dantz Development Corporation
FileDescription : Retrospect
InternalName :
LegalCopyright : Copyright Dantz 1989-2002
LegalTrademarks : Dantz® Retrospect®
OriginalFilename : retrorun.exe

#:22 [mstask.exe]
ModuleName : C:\WINNT\system32\MSTask.exe
Command Line : C:\WINNT\system32\MSTask.exe
ProcessID : 1208
ThreadCreationTime : 4-26-2005 4:43:42 PM
BasePriority : Normal
FileVersion : 4.71.2195.6920
ProductVersion : 4.71.2195.6920
ProductName : Microsoft® Windows® Task Scheduler
CompanyName : Microsoft Corporation
FileDescription : Task Scheduler Engine
InternalName : TaskScheduler
LegalCopyright : Copyright © Microsoft Corp. 1997
OriginalFilename : mstask.exe

#:23 [stisvc.exe]
ModuleName : C:\WINNT\system32\stisvc.exe
Command Line : C:\WINNT\system32\stisvc.exe
ProcessID : 1252
ThreadCreationTime : 4-26-2005 4:43:43 PM
BasePriority : Normal
FileVersion : 5.00.2195.6656
ProductVersion : 5.00.2195.6656
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Still Image Devices Monitor
InternalName : STIMON
LegalCopyright : Copyright © Microsoft Corp. 1996-1997
OriginalFilename : STIMON.EXE

#:24 [tmlisten.exe]
ModuleName : C:\Program Files\OfficeScan NT\tmlisten.exe
Command Line : "C:\Program Files\OfficeScan NT\tmlisten.exe"
ProcessID : 1272
ThreadCreationTime : 4-26-2005 4:43:44 PM
BasePriority : Normal
FileVersion : 7.0.0.1040
ProductVersion : 7.0
ProductName : Trend Micro OfficeScan
CompanyName : Trend Micro Inc.
LegalCopyright : Copyright © 1999-2005 Trend Micro Incorporated. All rights reserved.
LegalTrademarks : Copyright © Trend Micro Inc.

#:25 [explorer.exe]
ModuleName : C:\WINNT\Explorer.EXE
Command Line : C:\WINNT\Explorer.EXE
ProcessID : 800
ThreadCreationTime : 4-26-2005 4:43:45 PM
BasePriority : Normal
FileVersion : 5.00.3700.6690
ProductVersion : 5.00.3700.6690
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : EXPLORER.EXE

#:26 [winmgmt.exe]
ModuleName : C:\WINNT\System32\WBEM\WinMgmt.exe
Command Line : C:\WINNT\System32\WBEM\WinMgmt.exe
ProcessID : 1348
ThreadCreationTime : 4-26-2005 4:44:12 PM
BasePriority : Normal
FileVersion : 1.50.1085.0100
ProductVersion : 1.50.1085.0100
ProductName : Windows Management Instrumentation
CompanyName : Microsoft Corporation
FileDescription : Windows Management Instrumentation
InternalName : WINMGMT
LegalCopyright : Copyright © Microsoft Corp. 1995-1999

#:27 [mspmspsv.exe]
ModuleName : C:\WINNT\System32\mspmspsv.exe
Command Line : C:\WINNT\System32\mspmspsv.exe
ProcessID : 1356
ThreadCreationTime : 4-26-2005 4:44:15 PM
BasePriority : Normal
FileVersion : 7.10.00.3068
ProductVersion : 7.10.00.3068
ProductName : Microsoft ® DRM
CompanyName : Microsoft Corporation
FileDescription : WMDM PMSP Service
InternalName : MSPMSPSV.EXE
LegalCopyright : Copyright © Microsoft Corp. 1981-2000
OriginalFilename : MSPMSPSV.EXE

#:28 [svchost.exe]
ModuleName : C:\WINNT\system32\svchost.exe
Command Line : C:\WINNT\system32\svchost.exe -k wugroup
ProcessID : 1380
ThreadCreationTime : 4-26-2005 4:44:17 PM
BasePriority : Normal
FileVersion : 5.00.2134.1
ProductVersion : 5.00.2134.1
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : svchost.exe

#:29 [svchost.exe]
ModuleName : C:\WINNT\System32\svchost.exe
Command Line : C:\WINNT\System32\svchost.exe -k BITSgroup
ProcessID : 1388
ThreadCreationTime : 4-26-2005 4:44:17 PM
BasePriority : Normal
FileVersion : 5.00.2134.1
ProductVersion : 5.00.2134.1
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : svchost.exe

#:30 [tp4serv.exe]
ModuleName : C:\WINNT\system32\tp4serv.exe
Command Line : "C:\WINNT\system32\tp4serv.exe"
ProcessID : 1420
ThreadCreationTime : 4-26-2005 4:44:21 PM
BasePriority : Normal
FileVersion : 3.07
ProductVersion : 3.07
ProductName : IBM PS/2 TrackPoint Support
CompanyName : IBM Corporation
FileDescription : IBM PS/2 TrackPoint Daemon
InternalName : daemon.exe
LegalCopyright : Copyright © IBM Corporation 1997-2002
OriginalFilename : daemon.exe

#:31 [tp98tray.exe]
ModuleName : C:\PROGRA~1\ThinkPad\UTILIT~1\TP98TRAY.EXE
Command Line : "C:\PROGRA~1\ThinkPad\UTILIT~1\TP98TRAY.EXE"
ProcessID : 1456
ThreadCreationTime : 4-26-2005 4:44:25 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 0
ProductVersion : 1, 0, 0, 0
ProductName : IBM ThinkPad Tray Utility
CompanyName : IBM Corp.
FileDescription : IBM ThinkPad Tray Utility
InternalName : IBM ThinkPad Tray Utility
LegalCopyright : Copyright © IBM Corp. 1998,2002.
OriginalFilename : Tp98Tray.exe

#:32 [ttb8f1.exe]
ModuleName : C:\WINNT\TEMP\TTB8F1.EXE
Command Line : "C:\WINNT\TEMP\TTB8F1.EXE"
ProcessID : 1472
ThreadCreationTime : 4-26-2005 4:44:25 PM
BasePriority : Normal


#:33 [tpkmapmn.exe]
ModuleName : C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
Command Line : "C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe"
ProcessID : 1548
ThreadCreationTime : 4-26-2005 4:44:28 PM
BasePriority : Normal


#:34 [tphkmgr.exe]
ModuleName : C:\PROGRA~1\ThinkPad\UTILIT~1\tphkmgr.exe
Command Line : "C:\PROGRA~1\ThinkPad\UTILIT~1\tphkmgr.exe"
ProcessID : 1148
ThreadCreationTime : 4-26-2005 4:44:29 PM
BasePriority : Normal


#:35 [rundll32.exe]
ModuleName : C:\WINNT\system32\RunDll32.exe
Command Line : "C:\WINNT\system32\RunDll32.exe" C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
ProcessID : 1580
ThreadCreationTime : 4-26-2005 4:44:29 PM
BasePriority : Normal
FileVersion : 5.00.2134.1
ProductVersion : 5.00.2134.1
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Run a DLL as an App
InternalName : rundll
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : RUNDLL.EXE

#:36 [promon.exe]
ModuleName : C:\WINNT\system32\Promon.exe
Command Line : "C:\WINNT\system32\Promon.exe"
ProcessID : 1588
ThreadCreationTime : 4-26-2005 4:44:30 PM
BasePriority : Normal
FileVersion : 1.11
ProductVersion : 3.09
ProductName : Intel® PROMonitor
CompanyName : Intel Corporation
FileDescription : Intel® PROSet Tray Icon
InternalName : Intel® PROMonitor
LegalCopyright : Copyright © 1998-2000 Intel Corporation. All Rights Reserved.
OriginalFilename : PROMon.exe
Comments : Configures and tests Intel® PRO family of adapters.

#:37 [ltcm000c.exe]
ModuleName : C:\WINNT\system32\ltcm000c.exe
Command Line : "C:\WINNT\system32\ltcm000c.exe" 9
ProcessID : 1604
ThreadCreationTime : 4-26-2005 4:44:31 PM
BasePriority : Normal
FileVersion : 1, 0, 1, 7
ProductVersion : 1.37(LT 1,0,1,9)
ProductName : Xircom Ltmsg
CompanyName : LUCENT TECHNOLOGIES
FileDescription : ltmsg
InternalName : ltmsg
LegalCopyright : Copyright © 1999
OriginalFilename : ltmsg.exe
Comments : Messaging application for Lucent Modem

#:38 [prpcui.exe]
ModuleName : C:\WINNT\system32\PRPCUI.exe
Command Line : "C:\WINNT\system32\PRPCUI.exe"
ProcessID : 1640
ThreadCreationTime : 4-26-2005 4:44:32 PM
BasePriority : Normal
FileVersion : 1.1.0.0
ProductVersion : 1.1.0.0
ProductName : Intel® SpeedStep™ technology applet
CompanyName : Intel Corporation
FileDescription : Intel® SpeedStep™ technology User Interface
InternalName : prpcui.exe
LegalCopyright : Copyright© Intel Corporation 1998-2000
LegalTrademarks : Intel® SpeedStep™ technology
OriginalFilename : prpcui.exe
Comments : Version 1.1

#:39 [qcwlicon.exe]
ModuleName : C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
Command Line : "C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE"
ProcessID : 1656
ThreadCreationTime : 4-26-2005 4:44:32 PM
BasePriority : Normal


#:40 [rundll32.exe]
ModuleName : C:\WINNT\system32\RunDll32.exe
Command Line : "C:\WINNT\system32\RunDll32.exe" cwcprops.cpl,CrystalControlWnd
ProcessID : 1664
ThreadCreationTime : 4-26-2005 4:44:32 PM
BasePriority : Normal
FileVersion : 5.00.2134.1
ProductVersion : 5.00.2134.1
ProductName : Microsoft® Windows ® 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Run a DLL as an App
InternalName : rundll
LegalCopyright : Copyright © Microsoft Corp. 1981-1999
OriginalFilename : RUNDLL.EXE

#:41 [acmonitor_x73.exe]
ModuleName : C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe
Command Line : "C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe"
ProcessID : 1732
ThreadCreationTime : 4-26-2005 4:44:37 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 8
ProductVersion : 1, 0, 0, 0
ProductName : ACMonitor
CompanyName : Silitek Corp.
FileDescription : ACMonitor
InternalName : ACMonitor
LegalCopyright : Copyright c 2001
OriginalFilename : ACMonitor.exe

#:42 [acbtnmgr_x73.exe]
ModuleName : C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe
Command Line : "C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe"
ProcessID : 1312
ThreadCreationTime : 4-26-2005 4:44:38 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : Jetsoft Development Company AcBtnMgr
CompanyName : Jetsoft Development Company
FileDescription : AcBtnMgr
InternalName : AcBtnMgr
LegalCopyright : Copyright © 2000
OriginalFilename : AcBtnMgr.exe
Comments : By: Alan S Hong

#:43 [realsched.exe]
ModuleName : C:\Program Files\Common Files\Real\Update_OB\realsched.exe
Command Line : "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
ProcessID : 1740
ThreadCreationTime : 4-26-2005 4:44:39 PM
BasePriority : Normal
FileVersion : 0.1.0.1622
ProductVersion : 0.1.0.1622
ProductName : RealOne Player (32-bit)
CompanyName : RealNetworks, Inc.
FileDescription : RealNetworks Scheduler
InternalName : schedapp
LegalCopyright : Copyright © RealNetworks, Inc. 1995-2002
LegalTrademarks : RealAudio™ is a trademark of RealNetworks, Inc.
OriginalFilename : realsched.exe

#:44 [pccntmon.exe]
ModuleName : C:\Program Files\OfficeScan NT\Pccntmon.exe
Command Line : "C:\Program Files\OfficeScan NT\Pccntmon.exe" -HideWindow
ProcessID : 1744
ThreadCreationTime : 4-26-2005 4:44:43 PM
BasePriority : Normal
FileVersion : 7.0.0.1040
ProductVersion : 7.0
ProductName : Trend Micro OfficeScan
CompanyName : Trend Micro Inc.
FileDescription : I/O Monitor
InternalName : PCCNTMON
LegalCopyright : Copyright © 1999-2005 Trend Micro Incorporated. All rights reserved.
LegalTrademarks : Copyright © Trend Micro Inc.
OriginalFilename : PCCNTMON.EXE

#:45 [onetouch.exe]
ModuleName : C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
Command Line : "C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe"
ProcessID : 1764
ThreadCreationTime : 4-26-2005 4:44:45 PM
BasePriority : Normal
FileVersion : 2, 0, 0, 0
ProductVersion : 2, 0, 0, 0
ProductName : Maxtor OneTouch
CompanyName : Maxtor
FileDescription : Maxtor OneTouch Detection
InternalName : ComboButton
LegalCopyright : Copyright © 2003 Maxtor Corp.
OriginalFilename : OneTouch.EXE

#:46 [mxoaldr.exe]
ModuleName : C:\WINNT\MXOALDR.EXE
Command Line : "C:\WINNT\MXOALDR.EXE"
ProcessID : 1788
ThreadCreationTime : 4-26-2005 4:44:47 PM
BasePriority : Normal
FileVersion : 6.00.1010.0
ProductVersion : 6.00.1010.0
ProductName : MXO Storage Adapter
CompanyName : Cypress Semiconductor
FileDescription : Maxtor MXO Auto Loader Application
InternalName : MXOALDR.EXE
LegalCopyright : Copyright © 1998-2002 Cypress Semiconductor
OriginalFilename : MXOALDR.EXE

#:47 [msnappau.exe]
ModuleName : C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
Command Line : "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe"
ProcessID : 1804
ThreadCreationTime : 4-26-2005 4:44:49 PM
BasePriority : Normal


#:48 [jusched.exe]
ModuleName : C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
Command Line : "C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe"
ProcessID : 1816
ThreadCreationTime : 4-26-2005 4:44:50 PM
BasePriority : Normal


#:49 [faxctrl.exe]
ModuleName : C:\Program Files\RightFax\Client\FaxCtrl.exe
Command Line : "C:\Program Files\RightFax\Client\FaxCtrl.exe"
ProcessID : 1840
ThreadCreationTime : 4-26-2005 4:44:52 PM
BasePriority : Normal
FileVersion : 9, 0, 0, 307
ProductVersion : 9.0.0.0
ProductName : RightFax
CompanyName : Captaris, Inc.
FileDescription : RightFax FaxCtrl Module
InternalName : FaxCtrl
LegalCopyright : Copyright ©1990, 2004 Captaris, Inc. All rights reserved.

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form by any means without written permission.
OriginalFilename : FaxCtrl.EXE

#:50 [pop3trap.exe]
ModuleName : C:\Program Files\OfficeScan NT\Pop3Trap.exe
Command Line : "C:\Program Files\OfficeScan NT\Pop3Trap.exe"
ProcessID : 1844
ThreadCreationTime : 4-26-2005 4:44:57 PM
BasePriority : Normal
FileVersion : 10.0.0.1171
ProductVersion : 10.0.0
ProductName : Trend Pc-cillin 10.0
CompanyName : Trend Micro Inc.
FileDescription : POP3Trap
InternalName : POP3Trap
LegalCopyright : Copyright © 2002-2003 Trend Micro Inc. All rights reserved.
LegalTrademarks : Copyright © Trend Micro Inc.
OriginalFilename : POP3Trap

#:51 [createcd.exe]
ModuleName : C:\PROGRA~1\Adaptec\EASYCD~1\CreateCD\CreateCD.exe
Command Line : "C:\PROGRA~1\Adaptec\EASYCD~1\CreateCD\CreateCD.exe" -r
ProcessID : 1776
ThreadCreationTime : 4-26-2005 4:44:57 PM
BasePriority : Normal
FileVersion : 4.01 (202)
ProductVersion : 4.01 (202)
ProductName : Easy CD Creator
CompanyName : Adaptec
FileDescription : Adaptec Create CD
InternalName : createcd.exe
LegalCopyright : Copyright © 1996-1999 Adaptec, Inc.
OriginalFilename : createcd.exe

#:52 [msnmsgr.exe]
ModuleName : C:\Program Files\MSN Messenger\msnmsgr.exe
Command Line : "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
ProcessID : 1092
ThreadCreationTime : 4-26-2005 4:45:16 PM
BasePriority : Normal
FileVersion : 7.0.0777
ProductVersion : 7.0.0777
ProductName : MSN Messenger
CompanyName : Microsoft Corporation
FileDescription : MSN Messenger
InternalName : msnmsgr
LegalCopyright : Copyright © Microsoft Corporation 1997-2004
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
OriginalFilename : msnmsgr.exe

#:53 [wcescomm.exe]
ModuleName : C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
Command Line : "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
ProcessID : 1924
ThreadCreationTime : 4-26-2005 4:45:21 PM
BasePriority : Normal
FileVersion : 3.7.1.3244
ProductVersion : 3.7.3244
ProductName : Microsoft ActiveSync
CompanyName : Microsoft Corporation
FileDescription : Connection Manager
InternalName : wcescomm
LegalCopyright : Copyright © 1995-2003 Microsoft Corp. All rights reserved.
LegalTrademarks : Microsoft® and Windows® are registered trademarks of Microsoft Corporation.
OriginalFilename : WCESCOMM.EXE

#:54 [ctfmon.exe]
ModuleName : C:\WINNT\system32\ctfmon.exe
Command Line : "C:\WINNT\system32\ctfmon.exe"
ProcessID : 1932
ThreadCreationTime : 4-26-2005 4:45:21 PM
BasePriority : Normal
FileVersion : 1.00.2409.7 built by: Lab06_N
ProductVersion : 1.00.2409.7
ProductName : Microsoft® Windows NT® Operating System
CompanyName : Microsoft Corporation
FileDescription : Cicero Loader
InternalName : CICLOAD
LegalCopyright : Copyright © Microsoft Corporation. 1981-2001
OriginalFilename : CICLOAD.EXE

#:55 [installstub.exe]
ModuleName : C:\Program Files\Plaxo\2.1.0.80\InstallStub.exe
Command Line : "C:\Program Files\Plaxo\2.1.0.80\InstallStub.exe" -a
ProcessID : 1940
ThreadCreationTime : 4-26-2005 4:45:24 PM
BasePriority : Normal
FileVersion : 2.1.0.80
ProductVersion : 2.1.0.80
ProductName : Plaxo InstallStub
CompanyName : Plaxo
FileDescription : InstallStub
InternalName : InstallStub
LegalCopyright : Copyright 2001-2004
OriginalFilename : InstallStub.exe

#:56 [weather.exe]
ModuleName : C:\Program Files\AWS\WeatherBug\Weather.exe
Command Line : "C:\Program Files\AWS\WeatherBug\Weather.exe" 1
ProcessID : 1948
ThreadCreationTime : 4-26-2005 4:45:24 PM
BasePriority : Normal
FileVersion : 6, 4, 0, 9
ProductVersion : 6, 4, 0, 9
ProductName : WeatherBug
CompanyName : AWS Convergence Technologies, Inc.
FileDescription : WeatherBug
InternalName : Desktop Weather
LegalCopyright : Copyright © 2001-2004
LegalTrademarks : WeatherBug
OriginalFilename : Weather.exe
Comments : World Largest Weather Network

#:57 [infuzer.exe]
ModuleName : C:\Program Files\Infuzer\Infuzer.exe
Command Line : "C:\Program Files\Infuzer\Infuzer.exe"
ProcessID : 1692
ThreadCreationTime : 4-26-2005 4:45:32 PM
BasePriority : Normal
FileVersion : 1, 6, 200, 0
ProductVersion : 1, 6, 200, 0
ProductName : Infuzer
CompanyName : Trondent Development Corp.
FileDescription : Infuzer Application
InternalName : Infuzer.exe
LegalCopyright : Copyright © Trondent Development Corp. 2002
OriginalFilename : Infuzer.exe

#:58 [osa.exe]
ModuleName : C:\Program Files\Microsoft Office97\Office\OSA.EXE
Command Line : "C:\Program Files\Microsoft Office97\Office\OSA.EXE" -b
ProcessID : 2012
ThreadCreationTime : 4-26-2005 4:45:36 PM
BasePriority : Normal


#:59 [sqlmangr.exe]
ModuleName : C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
Command Line : "C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe" /n
ProcessID : 2020
ThreadCreationTime : 4-26-2005 4:45:37 PM
BasePriority : Normal
FileVersion : 2000.080.0760.00
ProductVersion : 8.00.760
ProductName : Microsoft SQL Server
CompanyName : Microsoft Corporation
FileDescription : SQL Server Service Manager
InternalName : SQLMANGR
LegalCopyright : © 1988-2003 Microsoft Corp. All rights reserved.
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation. Windows™ is a trademark of Microsoft Corporation
OriginalFilename : SQLMANGR.exe
Comments : NT INTEL X86

#:60 [extranet.exe]
ModuleName : C:\Program Files\DSI Contivity VPN Client\Extranet.exe
Command Line : "C:\Program Files\DSI Contivity VPN Client\Extranet.exe"
ProcessID : 2036
ThreadCreationTime : 4-26-2005 5:24:58 PM
BasePriority : Normal
FileVersion : V04_10.00
ProductVersion : V04_10.00
ProductName : ISAKMPD Application
CompanyName : Nortel Networks NA, Inc.
FileDescription : Contivity VPN Client
InternalName : ISAKMPD
LegalCopyright : Copyright © 1997-2002 Nortel Networks NA, Inc.
OriginalFilename : ISAKMPD.EXE

#:61 [outlook.exe]
ModuleName : C:\Program Files\Microsoft Office97\OFFICE11\OUTLOOK.EXE
Command Line : "C:\Program Files\Microsoft Office97\OFFICE11\OUTLOOK.EXE" /recycle
ProcessID : 2284
ThreadCreationTime : 4-26-2005 5:25:21 PM
BasePriority : Normal


#:62 [iexplore.exe]
ModuleName : C:\Program Files\Internet Explorer\IEXPLORE.EXE
Command Line : "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
ProcessID : 1316
ThreadCreationTime : 4-26-2005 5:26:31 PM
BasePriority : Normal
FileVersion : 6.00.2800.1106
ProductVersion : 6.00.2800.1106
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : IEXPLORE.EXE

#:63 [lxarsw32.exe]
ModuleName : C:\WINNT\system32\spool\DRIVERS\W32X86\3\LXARSW32.EXE
Command Line : C:\WINNT\system32\spool\DRIVERS\W32X86\3\LXARSW32.EXE SPLPP /F=Lexmark X73(2)
ProcessID : 2208
ThreadCreationTime : 4-26-2005 6:11:22 PM
BasePriority : Normal
FileVersion : 2.0
ProductVersion : 4.0
ProductName : Lexmark Color Inkjet Status Window
CompanyName : Lexmark International
FileDescription : Lexmark Color Inkjet Status Window
InternalName : LEXESW
LegalCopyright : Copyright © Lexmark International 1997
OriginalFilename : LEXESW.EXE

#:64 [lexreg.exe]
ModuleName : C:\WINNT\system32\spool\DRIVERS\W32X86\3\lexreg.exe
Command Line : lexreg USB001 Lexmark X73(2)
ProcessID : 2332
ThreadCreationTime : 4-26-2005 6:11:26 PM
BasePriority : Normal


#:65 [ad-aware.exe]
ModuleName : C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
Command Line : "C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe"
ProcessID : 1996
ThreadCreationTime : 4-26-2005 6:18:08 PM
BasePriority : Normal
FileVersion : 6.2.0.206
ProductVersion : VI.Second Edition
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Claria Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_USERS
Object : S-1-5-21-1301461004-2612657945-1889917391-4933\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\gain

Claria Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_USERS
Object : S-1-5-21-1301461004-2612657945-1889917391-4933\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\gain
Value : Order

Alexa Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}

Alexa Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
Value : MenuText

Alexa Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
Value : MenuStatusBar

Alexa Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
Value : Script

Alexa Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
Value : clsid

Alexa Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
Value : Icon

Alexa Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
Value : HotIcon

Alexa Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
Value : ButtonText

Claria Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_USERS
Object : S-1-5-21-1301461004-2612657945-1889917391-4933\\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\gain

Claria Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_USERS
Object : S-1-5-21-1301461004-2612657945-1889917391-4933\\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\gain
Value : Order

Alexa Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment : "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
Rootkey : HKEY_USERS
Object : S-1-5-21-1301461004-2612657945-1889917391-4933\software\microsoft\internet explorer\extensions\cmdmapping
Value : {c95fe080-8f5d-11d2-a20b-00aa003c157a}

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 13
Objects found so far: 13


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 13


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@cgi-bin[4].txt
Category : Data Miner
Comment : Hits:21
Value : Cookie:[email protected]/ubb/cgi-bin/
Expires : 12-25-2004 10:52:24 AM
LastSync : Hits:21
UseCount : 0
Hits : 21

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:8
Value : Cookie:[email protected]/
Expires : 2-16-2015 4:21:08 PM
LastSync : Hits:8
UseCount : 0
Hits : 8

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@tripod[1].txt
Category : Data Miner
Comment : Hits:6
Value : Cookie:[email protected]/
Expires : 9-7-2005 6:29:52 PM
LastSync : Hits:6
UseCount : 0
Hits : 6

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@instadia[1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:[email protected]/
Expires : 7-3-2029 7:00:00 PM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@adrevolver[2].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:[email protected]/adrevolver/
Expires : 3-27-2004 8:44:04 AM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@accumail[2].txt
Category : Data Miner
Comment : Hits:2
Value : Cookie:[email protected]/
Expires : 4-17-2004 10:09:30 AM
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][3].txt
Category : Data Miner
Comment : Hits:41
Value : Cookie:[email protected]/
Expires : 11-23-2005 6:12:40 PM
LastSync : Hits:41
UseCount : 0
Hits : 41

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment : Hits:7
Value : Cookie:[email protected]/
Expires : 9-16-2008 11:40:48 AM
LastSync : Hits:7
UseCount : 0
Hits : 7

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:5
Value : Cookie:[email protected]/
Expires : 11-26-2005
LastSync : Hits:5
UseCount : 0
Hits : 5

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@bravenet[3].txt
Category : Data Miner
Comment : Hits:64
Value : Cookie:[email protected]/
Expires : 11-8-2014 4:04:26 PM
LastSync : Hits:64
UseCount : 0
Hits : 64

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:2
Value : Cookie:[email protected]/
Expires : 4-25-2015 7:00:00 PM
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:5
Value : Cookie:[email protected]/
Expires : 1-25-2072 12:49:26 PM
LastSync : Hits:5
UseCount : 0
Hits : 5

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@maxserving[1].txt
Category : Data Miner
Comment : Hits:24
Value : Cookie:[email protected]/
Expires : 2-16-2015 4:37:22 PM
LastSync : Hits:24
UseCount : 0
Hits : 24

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@tickle[1].txt
Category : Data Miner
Comment : Hits:19
Value : Cookie:[email protected]/
Expires : 8-12-2006 1:40:46 PM
LastSync : Hits:19
UseCount : 0
Hits : 19

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][2].txt
Category : Data Miner
Comment : Hits:34
Value : Cookie:[email protected]/
Expires : 12-30-2034 9:14:00 PM
LastSync : Hits:34
UseCount : 0
Hits : 34

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@adrevolver[4].txt
Category : Data Miner
Comment : Hits:2
Value : Cookie:[email protected]/adrevolver/
Expires : 8-9-2005 9:33:26 AM
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@adrevolver[5].txt
Category : Data Miner
Comment : Hits:7
Value : Cookie:[email protected]/adrevolver/
Expires : 10-8-2007 11:30:30 PM
LastSync : Hits:7
UseCount : 0
Hits : 7

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@dbbsrv[2].txt
Category : Data Miner
Comment : Hits:2
Value : Cookie:[email protected]/
Expires : 11-30-2005 3:00:00 AM
LastSync : Hits:2
UseCount : 0
Hits : 2

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:[email protected]/
Expires : 11-8-2004 12:10:38 PM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorgl@cgi-bin[3].txt
Category : Data Miner
Comment : Hits:3
Value : Cookie:[email protected]/cgi-bin
Expires : 7-14-2014 6:00:40 PM
LastSync : Hits:3
UseCount : 0
Hits : 3

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : aiellosc@doubleclick[2].txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\minorgl\Cookies\aiellosc@doubleclick[2].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorg@2o7[1].txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\minorgl\Cookies\minorg@2o7[1].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\minorgl\Cookies\[email protected][1].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\minorgl\Cookies\[email protected][1].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorg@ad-adex3_flycast.txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\minorgl\Cookies\minorg@ad-adex3_flycast.txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : [email protected][1].txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\minorgl\Cookies\[email protected][1].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorg@adbureau[1].txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\minorgl\Cookies\minorg@adbureau[1].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorg@adbureau[2].txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\minorgl\Cookies\minorg@adbureau[2].txt

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : minorg@addynamix[1].txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\minorgl\Cookies\minorg@addynamix[1].txt

Tracking Cookie Object Re

[Advertisements]

Hello and Welcome

First, this error is usualy caused when Spybot does not remove an entry completely. If the problem persists after you complete these directions, please make a note of that in your reply.

Ad-aware has found objects on your computer. Please follow these directions to remove them.

If you chose to clean your computer from what Ad-aware found please follow these instructions below…

Please make sure that you are using the latest definition file.


Please launch Ad-Aware SE and click on the gear to access the Configuration Menu. Please make sure that this setting is applied.

Click on Tweak > Cleaning Engine > UNcheck "Always try to unload modules before deletion".

Disconnect from the internet (for broadband/cable users, it is recommended that you disconnect the cable connection) and close all open browsers or other programs you have running.

Please then boot into Safe Mode

To clean your machine, it is highly recommended that you clean the following directory contents (but not the directory folder):

* C:\Windows\Temp\
* C:\Documents and Settings\<Your Profile>\Local Settings\Temporary Internet Files\ <- This will delete all your cached internet content including cookies.
* C:\Documents and Settings\<Your Profile>\Local Settings\Temp\
* C:\Documents and Settings\<Any other users Profile>\Local Settings\Temporary Internet Files\
* C:\Documents and Settings\<Any other users Profile>\Local Settings\Temp\
* Empty your "Recycle Bin".

Please run Ad-Aware SE from the command lines shown in the instructions shown below.

Click "Start" > select "Run" > type the text shown in bold below (including the quotation marks and with the same spacing as shown)

"C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe" +procnuke
(For the Personal version)


Click OK.

Please note that the path above is of the default installion location for Ad-aware SE, if this is different, please adjust it to the location that you have installed it to.

When the scan has completed, select Next. In the Scanning Results window, select the "Scan Summary" tab. Check the box next to each "target family" you wish to remove. Click next, Click OK.

If problems are caused by deleting a family, please leave it.

Please shutdown/restart your computer after removal, run a new full scan and post the results as a reply. Do not launch any programs or connect to the internet at this time.

Please then copy & paste the complete log file here. Don't quarantine or remove anything at this time, just post a complete logfile. This can sometimes takes 2-3 posts to get it all posted, once the "Summary of this scan" information is shown, you have posted all of your logfile.

Please remember when posting another logfile keep "Search for negligible risk entries" deselected as negligible risk entries (MRU's) are not considered to be a threat. This option can be changed when choosing your scan type.

Please post back here

Edited by prab, 27 April 2005 - 04:30 AM.

[prab]

Hello and Welcome

First, this error is usualy caused when Spybot does not remove an entry completely. If the problem persists after you complete these directions, please make a note of that in your reply.

Ad-aware has found objects on your computer. Please follow these directions to remove them.

If you chose to clean your computer from what Ad-aware found please follow these instructions below…

Please make sure that you are using the latest definition file.


Please launch Ad-Aware SE and click on the gear to access the Configuration Menu. Please make sure that this setting is applied.

Click on Tweak > Cleaning Engine > UNcheck "Always try to unload modules before deletion".

Disconnect from the internet (for broadband/cable users, it is recommended that you disconnect the cable connection) and close all open browsers or other programs you have running.

Please then boot into Safe Mode

To clean your machine, it is highly recommended that you clean the following directory contents (but not the directory folder):

* C:\Windows\Temp\
* C:\Documents and Settings\<Your Profile>\Local Settings\Temporary Internet Files\ <- This will delete all your cached internet content including cookies.
* C:\Documents and Settings\<Your Profile>\Local Settings\Temp\
* C:\Documents and Settings\<Any other users Profile>\Local Settings\Temporary Internet Files\
* C:\Documents and Settings\<Any other users Profile>\Local Settings\Temp\
* Empty your "Recycle Bin".

Please run Ad-Aware SE from the command lines shown in the instructions shown below.

Click "Start" > select "Run" > type the text shown in bold below (including the quotation marks and with the same spacing as shown)

"C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe" +procnuke
(For the Personal version)


Click OK.

Please note that the path above is of the default installion location for Ad-aware SE, if this is different, please adjust it to the location that you have installed it to.

When the scan has completed, select Next. In the Scanning Results window, select the "Scan Summary" tab. Check the box next to each "target family" you wish to remove. Click next, Click OK.

If problems are caused by deleting a family, please leave it.

Please shutdown/restart your computer after removal, run a new full scan and post the results as a reply. Do not launch any programs or connect to the internet at this time.

Please then copy & paste the complete log file here. Don't quarantine or remove anything at this time, just post a complete logfile. This can sometimes takes 2-3 posts to get it all posted, once the "Summary of this scan" information is shown, you have posted all of your logfile.

Please remember when posting another logfile keep "Search for negligible risk entries" deselected as negligible risk entries (MRU's) are not considered to be a threat. This option can be changed when choosing your scan type.

Please post back here

Edited by prab, 27 April 2005 - 04:30 AM.