Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

desktop Icons and Start button keep disappear


  • Please log in to reply

#1
oferkn

oferkn

    New Member

  • Member
  • Pip
  • 1 posts
My desktop Icons and Start button keep disappearing and reappearing , I have windows xp sp2 up to date nod32, used spyware doctor, regclean, and a few other free AV programs but no luck, have tried other advice and downloads from other forums and still no luck.
after i followed all required steps at "you must read this before posting hjt log"
the icon and start button works o.k
and panda detect virus
so please check all log files i copy, and if need more to do .
any help would be greatly appreciated.

Thanks for any help

Logfile of HijackThis v1.99.1
Scan saved at 15:27:13, on 05/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\spyware doctor\Spyware Doctor\pctsAuxs.exe
C:\Program Files\spyware doctor\Spyware Doctor\pctsSvc.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\WinZip E-Mail Companion\loadwzco.exe
C:\Program Files\spyware doctor\Spyware Doctor\pctsTray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ynet.co.i...340,L-8,00.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: עוזר הכניסה של Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinZip E-Mail Companion OEAPI] "C:\Program Files\WinZip E-Mail Companion\loadwzco.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe Reader\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\spyware doctor\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe" /NoDialog
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\DOCUME~1\1F10~1\LOCALS~1\Temp\SSUPDATE.EXE Software\SUPERAntiSpyware.com\SUPERAntiSpyware
O8 - Extra context menu item: &יצא ל- Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoft...s/as2stubie.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitd...can8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1201715804007
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.mi...b?1201717922917
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\spyware doctor\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\spyware doctor\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe



Malwarebytes' Anti-Malware 1.14
Database version: 826

12:12:56 05/06/2008
mbam-log-6-5-2008 (12-12-56).txt

Scan type: Quick Scan
Objects scanned: 41558
Time elapsed: 6 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 2
Registry Keys Infected: 8
Registry Values Infected: 1
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\system32\vtUmLffD.dll (Trojan.Vundo) -> Unloaded module successfully.
C:\WINDOWS\system32\opnnolmk.dll (Trojan.Vundo) -> Unloaded module successfully.

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{f08032f3-2223-47c2-9ee8-2f69cdfa9939} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f08032f3-2223-47c2-9ee8-2f69cdfa9939} (Trojan.Vundo) -> Delete on reboot.
HKEY_CURRENT_USER\CLSID\{129fa2a1-408c-4824-83a4-5001581fd01e} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{129fa2a1-408c-4824-83a4-5001581fd01e} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{129fa2a1-408c-4824-83a4-5001581fd01e} (Trojan.Vundo) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\opnnolmk (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{129fa2a1-408c-4824-83a4-5001581fd01e} (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\vtumlffd -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\vtUmLffD.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\opnnolmk.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\geBsrRjI.dll (Trojan.Vundo) -> Quarantined and deleted successfully.


SUPERAntiSpyware Scan Log
Generated 06/05/2008 at 01:13 PM

Application Version : 3.6.1000

Core Rules Database Version : 3475
Trace Rules Database Version: 1466

Scan type : Complete Scan
Total Scan Time : 00:39:24

Memory items scanned : 433
Memory threats detected : 0
Registry items scanned : 4423
Registry threats detected : 0
File items scanned : 31278
File threats detected : 1

Adware.Tracking Cookie
C:\Documents and Settings\עופר קנאפו\Cookies\עופר_קנאפו@a.total-media[1].txt



;*******************************************************************************
*********************************************************************************
*******************
ANALYSIS: 2008-06-05 14:59:01
PROTECTIONS: 1
MALWARE: 28
SUSPECTS: 0
;*******************************************************************************
*********************************************************************************
*******************
PROTECTIONS
Description Version Active Updated
;===============================================================================
=================================================================================
===================
ESET NOD32 antivirus system 2.70 2.70 Yes Yes
;===============================================================================
=================================================================================
===================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===============================================================================
=================================================================================
===================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\16-03-2008-09-35-15\2.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\11.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\26-05-2008-17-15-58\5.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\29-05-2008-13-54-39\4.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-05-2008-22-44-51\8.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\10-05-2008-19-19-07\3.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\30-04-2008-17-14-11\1.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\12.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\24-03-2008-11-26-53\2.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\03-05-2008-22-27-33\6.qit
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-21-19-44\3.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-21-19-44\1.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\08-04-2008-11-17-02\0.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\11-04-2008-19-37-09\3.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-05-2008-22-44-51\5.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\10-05-2008-19-19-07\0.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\03-05-2008-22-27-33\4.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\18-03-2008-15-19-52\1.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\8.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\29-05-2008-13-54-39\2.qit
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\7.qit
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\12.qit
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\03-05-2008-22-27-33\7.qit
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\11-04-2008-19-37-09\5.qit
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-08-31-49\2.qit
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-05-2008-22-44-51\9.qit
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\13.qit
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\24-03-2008-11-26-53\3.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\10-05-2008-19-19-07\6.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\16-03-2008-09-35-15\6.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\23-05-2008-14-23-26\1.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-05-2008-22-44-51\14.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\26-05-2008-17-15-58\10.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\21-05-2008-11-52-45\3.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-05-2008-20-37-38\4.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-21-19-44\10.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\02-04-2008-21-32-56\4.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\24-03-2008-11-26-53\9.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\13-03-2008-08-56-09\0.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\18-05-2008-09-02-07\7.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\28.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\29-05-2008-13-54-39\8.qit
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\03-05-2008-22-27-33\9.qit
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-21-19-44\5.qit
00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\24.qit
00145807 Cookie/Linksynergy TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-05-2008-22-44-51\11.qit
00145869 Cookie/SpyLog TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\18-05-2008-09-02-07\6.qit
00146967 Cookie/PayCounter TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\20.qit
00147824 Cookie/Clickbank TrackingCookie No 0 Yes No C:\Program Files\True Sword 4\backuped\25\עופר_קנאפו@clickbank[2].txt
00167647 Cookie/Yadro TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\29-05-2008-13-54-39\9.qit
00167647 Cookie/Yadro TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\18.qit
00167647 Cookie/Yadro TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\11-04-2008-19-37-09\8.qit
00168048 Cookie/Overture TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\19.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\21-05-2008-11-52-45\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\25-03-2008-15-47-58\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-05-2008-20-37-38\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\26-05-2008-17-15-58\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\1.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-21-19-44\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-03-2008-00-19-30\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-05-2008-22-44-51\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\29-05-2008-13-54-39\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\24-03-2008-11-26-53\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\18-05-2008-09-02-07\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\11-04-2008-19-37-09\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\18-03-2008-15-19-52\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\30-04-2008-17-14-11\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\03-05-2008-22-27-33\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-08-31-49\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\16-03-2008-09-35-15\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\20-05-2008-08-25-10\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\02-04-2008-21-32-56\0.qit
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\0.qit
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-05-2008-22-44-51\4.qit
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\6.qit
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-08-31-49\1.qit
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\6.qit
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\11-04-2008-19-37-09\2.qit
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\18-05-2008-09-02-07\2.qit
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\03-05-2008-22-27-33\3.qit
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Program Files\True Sword 4\backuped\24\עופר_קנאפו@apmebf[2].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Program Files\True Sword 4\backuped\40\עופר_קנאפו@apmebf[1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\24-03-2008-11-26-53\1.qit
00168076 Cookie/BurstNet TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\10-05-2008-19-19-07\1.qit
00168076 Cookie/BurstNet TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\10.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\26-05-2008-17-15-58\9.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\11-04-2008-19-37-09\7.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\16-03-2008-09-35-15\5.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\16.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-05-2008-22-44-51\13.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\08-04-2008-11-17-02\4.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\23.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-21-19-44\8.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\29-05-2008-13-54-39\7.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\02-04-2008-21-32-56\3.qit
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-05-2008-20-37-38\3.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-05-2008-20-37-38\1.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-21-19-44\2.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\8.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\29-05-2008-13-54-39\3.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\9.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\11-04-2008-19-37-09\4.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\16-03-2008-09-35-15\1.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\15-05-2008-22-44-51\6.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\26-05-2008-17-15-58\4.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\02-04-2008-21-32-56\1.qit
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\08-04-2008-11-17-02\1.qit
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\26-05-2008-17-15-58\2.qit
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\11-04-2008-19-37-09\1.qit
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Program Files\True Sword 4\backuped\23\עופר_קנאפו@advertising[2].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\5.qit
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\5.qit
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\03-05-2008-22-27-33\2.qit
00170304 Cookie/WebtrendsLive TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\03-05-2008-22-27-33\11.qit
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-21-19-44\6.qit
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\21.qit
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\14.qit
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\18.qit
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\16-03-2008-09-35-15\4.qit
00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-04-2008-20-09-25\19.qit
00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\14-03-2008-21-19-44\11.qit
00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\31.qit
00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\22-05-2008-20-37-38\5.qit
00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\29-05-2008-13-54-39\10.qit
00216065 Cookie/Screensavers TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\15.qit
01176994 Bck/VB.XB Virus/Trojan No 0 No No C:\Documents and Settings\עופר קנאפו\שולחן העבודה\ComboFix.exe[327882R2FWJFW\NirCmdC.cfexe]
01606636 Cookie/Adserver TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\4.qit
02908816 Cookie/Starware TrackingCookie No 0 Yes No C:\Documents and Settings\עופר קנאפו\Application Data\SpywareStop\Quarantine\12-03-2008-19-55-55\14.qit
02962645 Application/SpywareStop HackTools No 0 Yes No C:\System Volume Information\_restore{517368AD-84F8-41FF-B640-34DC23FA7C6C}\RP90\A0125030.msi[unk_0023]
02962645 Application/SpywareStop HackTools No 0 Yes No C:\System Volume Information\_restore{517368AD-84F8-41FF-B640-34DC23FA7C6C}\RP66\A0015992.msi[unk_0031]
;===============================================================================
=================================================================================
===================
SUSPECTS
Sent Location o
;===============================================================================
=================================================================================
===================
;===============================================================================
=================================================================================
===================
VULNERABILITIES
Id Severity Description o
;===============================================================================
=================================================================================
===================
133387 MEDIUM MS06-065 o
;===============================================================================
=================================================================================
===================

Edited by oferkn, 05 June 2008 - 06:35 AM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP