i have done evey thing as you say but my systen hanged
then earlier stage redtore all came back .. so here is the log from aadware
Ad-Aware SE Build 1.05
Logfile Created on:Saturday, May 14, 2005 5:59:12 PM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R45 13.05.2005
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
180Solutions(TAC index:6):31 total references
AdDestroyer(TAC index:5):3 total references
Adsincontext(TAC index:6):137 total references
AltnetBDE(TAC index:4):38 total references
BargainBuddy(TAC index:8):359 total references
begin2search(TAC index:3):86 total references
BlazeFind(TAC index:5):17 total references
BookedSpace(TAC index:10):4 total references
BrilliantDigital(TAC index:6):15 total references
BroadCastPC(TAC index:7):3 total references
Claria(TAC index:7):19 total references
ClickSpring(TAC index:6):8 total references
CnsMin(TAC index:8):108 total references
CometSystems(TAC index:8):35 total references
Cydoor(TAC index:7):241 total references
DownloadWare(TAC index:8):12 total references
DyFuCA(TAC index:3):48 total references
Ebates MoneyMaker(TAC index:4):9 total references
EzuLa(TAC index:6):19 total references
Gigatech Superbar(TAC index:5):56 total references
Global Netcom Inc(TAC index:5):4 total references
HungryHands BHO(TAC index:3):1 total references
IBIS Toolbar(TAC index:5):71 total references
IGetNet(TAC index:8):10 total references
InternetDelivery(TAC index:5):6 total references
IPInsight(TAC index:7):23 total references
istbar(TAC index:7):65 total references
Lop(TAC index:7):10 total references
Malware.TopAntiSpyware(TAC index:7):9 total references
MediaCharger(TAC index:5):9 total references
MediaMotor(TAC index:8):3 total references
MoneyTree(TAC index:6):4 total references
MRU List(TAC index:0):30 total references
MyDailyHoroscope(TAC index:5):25 total references
Other(TAC index:5):11 total references
OverPro(TAC index:3):17 total references
Possible Browser Hijack attempt(TAC index:3):127 total references
PurityScan(TAC index:6):7 total references
Roings(TAC index:8):11 total references
SahAgent(TAC index:9):38 total references
SCBAR(TAC index:3):15 total references
Search Relevancy(TAC index:5):2 total references
searchwww.hijacker(TAC index:8):4 total references
Security iGuard(TAC index:9):2 total references
ShopNav Hijacker(TAC index:8):4 total references
StatBlaster(TAC index:8):2 total references
Tracking Cookie(TAC index:3):88 total references
UCSearch(TAC index:6):20 total references
UpdateLoader Malware(TAC index:5):3 total references
WebDialer(TAC index:5):4 total references
Win32.TrojanDownloader.TSUpdate(TAC index:6):1 total references
WindUpdates(TAC index:8):12 total references
VirtualBouncer(TAC index:5):4 total references
Virtumonde(TAC index:10):5 total references
VX2(TAC index:10):84 total references
Zango(TAC index:6):1 total references
ZipclixToolbar(TAC index:3):18 total references
ZyncosMark(TAC index:3):11 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Definition File:
=========================
Definitions File Loaded:
Reference Number : SE1R8 13.09.2004
Internal build : 12
File location : C:\PROGRA~1\Lavasoft\AD-AWA~1\defs.ref
File size : 344723 Bytes
Total size : 1092481 Bytes
Signature data size : 1068971 Bytes
Reference data size : 22998 Bytes
Signatures total : 30122
Fingerprints total : 154
Fingerprints size : 7129 Bytes
Target categories : 15
Target families : 560
5-14-2005 5:37:33 PM Performing WebUpdate...
Installing Update...
Definitions File Loaded:
Reference Number : SE1R45 13.05.2005
Internal build : 53
File location : C:\PROGRA~1\Lavasoft\AD-AWA~1\defs.ref
File size : 473168 Bytes
Total size : 1430575 Bytes
Signature data size : 1399518 Bytes
Reference data size : 30545 Bytes
Signatures total : 39932
Fingerprints total : 881
Fingerprints size : 30173 Bytes
Target categories : 15
Target families : 672
5-14-2005 5:37:40 PM Success
Update successfully downloaded and installed.
Memory + processor status:
==========================
Number of processors : 1
Processor architecture : Non Intel
Memory available:19 %
Total physical memory:523760 kb
Available physical memory:96120 kb
Total page file size:2066376 kb
Available on page file:1632408 kb
Total virtual memory:2097024 kb
Available virtual memory:2017732 kb
OS:Microsoft Windows XP Professional Service Pack 2 (Build 2600)
Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan within archives
Set : Scan my Hosts file
Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects
5/14/2005 5:59:13 PM - Scan started. (Full System Scan)
MRU List Object Recognized!
Location: : C:\Documents and Settings\fnadeem\recent
Description : list of recently opened documents
MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct3d
MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct X
MRU List Object Recognized!
Location: : software\microsoft\directdraw\mostrecentapplication
Description : most recent application to use microsoft directdraw
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\internet explorer
Description : last download directory used in microsoft internet explorer
MRU List Object Recognized!
Location: : .DEFAULT\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer
MRU List Object Recognized!
Location: : S-1-5-18\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer
MRU List Object Recognized!
Location: : .DEFAULT\software\microsoft\mediaplayer\preferences
Description : last cd record path used in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-18\software\microsoft\mediaplayer\preferences
Description : last cd record path used in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\mediaplayer\preferences
Description : last cd record path used in microsoft windows media player
MRU List Object Recognized!
Location: : .DEFAULT\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-18\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-19\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-20\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in microsoft windows media player
MRU List Object Recognized!
Location: : .DEFAULT\software\microsoft\windows\currentversion\applets\regedit
Description : last key accessed using the microsoft registry editor
MRU List Object Recognized!
Location: : S-1-5-18\software\microsoft\windows\currentversion\applets\regedit
Description : last key accessed using the microsoft registry editor
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\windows\currentversion\applets\regedit
Description : last key accessed using the microsoft registry editor
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
Description : list of recent programs opened
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
Description : list of recently saved files, stored according to file extension
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\windows\currentversion\explorer\recentdocs
Description : list of recent documents opened
MRU List Object Recognized!
Location: : .DEFAULT\software\microsoft\windows\currentversion\explorer\runmru
Description : mru list for items opened in start | run
MRU List Object Recognized!
Location: : S-1-5-18\software\microsoft\windows\currentversion\explorer\runmru
Description : mru list for items opened in start | run
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\windows\currentversion\explorer\runmru
Description : mru list for items opened in start | run
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\nvidia corporation\global\nview\windowmanagement
Description : nvidia nview cached application window positions
MRU List Object Recognized!
Location: : .DEFAULT\software\microsoft\windows media\wmsdk\general
Description : windows media sdk
MRU List Object Recognized!
Location: : S-1-5-18\software\microsoft\windows media\wmsdk\general
Description : windows media sdk
MRU List Object Recognized!
Location: : S-1-5-20\software\microsoft\windows media\wmsdk\general
Description : windows media sdk
MRU List Object Recognized!
Location: : S-1-5-21-448539723-152049171-854245398-1016\software\microsoft\windows media\wmsdk\general
Description : windows media sdk
Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 668
ThreadCreationTime : 5/14/2005 3:02:07 PM
BasePriority : Normal
#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\SYSTEM32\
ProcessID : 772
ThreadCreationTime : 5/14/2005 3:02:17 PM
BasePriority : High
#:3 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 816
ThreadCreationTime : 5/14/2005 3:02:17 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : services.exe
#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 844
ThreadCreationTime : 5/14/2005 3:02:17 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : lsass.exe
Warning! Virtumonde Object found in memory(C:\WINDOWS\System32\inetadpt.dll)
Virtumonde Object Recognized!
Type : Process
Data : inetadpt.dll
Category : Malware
Comment :
Object : C:\WINDOWS\System32\
FileVersion : 0, 403, 29, 1705
ProductVersion : 1, 1, 0, 0
ProductName : TargetSoft
InternalName : inetadpt.dll
LegalCopyright : Copyright 2003
OriginalFilename : inetadpt.dll
Comments : TargetSoft
Warning! "C:\WINDOWS\system32\lsass.exe"Process could not be terminated!
#:5 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1028
ThreadCreationTime : 5/14/2005 3:02:21 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe
#:6 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1152
ThreadCreationTime : 5/14/2005 3:02:21 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe
#:7 [incdsrv.exe]
FilePath : C:\Program Files\Ahead\InCD\
ProcessID : 1172
ThreadCreationTime : 5/14/2005 3:02:21 PM
BasePriority : Normal
FileVersion : 4, 3, 11, 1
ProductVersion : 4, 3, 11, 1
ProductName : Nero AG incdsrv
CompanyName : Nero AG
FileDescription : incdsrv
InternalName : incdsrv
LegalCopyright : Copyright 1995-2005 Nero AG and its licensors. All Rights Reserved.
LegalTrademarks : InCD is a trademark of Nero AG
OriginalFilename : incdsrv.exe
#:8 [smc.exe]
FilePath : C:\Program Files\Sygate\SPF\
ProcessID : 1304
ThreadCreationTime : 5/14/2005 3:02:23 PM
BasePriority : Normal
FileVersion : 5.6.00.2808
ProductVersion : 5.6.00.2808
ProductName : Sygate® Security Agent and Personal Firewall
CompanyName : Sygate Technologies, Inc.
FileDescription : Sygate Agent Firewall
InternalName : Smc
LegalCopyright : Copyright © 1999 - 2004 Sygate Technologies, Inc. All rights reserved.
OriginalFilename : Smc.EXE
#:9 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1624
ThreadCreationTime : 5/14/2005 3:02:24 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : spoolsv.exe
Warning! VX2 Object found in memory(C:\WINDOWS\system32\DrPMon.dll)
VX2 Object Recognized!
Type : Process
Data : DrPMon.dll
Category : Malware
Comment :
Object : C:\WINDOWS\system32\
FileVersion : 1, 0, 0, 5
ProductVersion : 1, 0, 0, 0
ProductName : DrPMon PrintMonitor
CompanyName : Direct Revenue
FileDescription : DrPMon PrintMonitor
InternalName : DrPMon
LegalCopyright : Copyright © 2005
OriginalFilename : DrPMon.dll
#:10 [gbpoll.exe]
FilePath : C:\Program Files\Roxio\GoBack\
ProcessID : 520
ThreadCreationTime : 5/14/2005 3:02:33 PM
BasePriority : Normal
#:11 [gearsec.exe]
FilePath : C:\WINDOWS\SYSTEM32\
ProcessID : 540
ThreadCreationTime : 5/14/2005 3:02:33 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 6
ProductVersion : 1, 0, 0, 6
ProductName : gearsec
CompanyName : GEAR Software
FileDescription : gearsec
InternalName : gearsec
LegalCopyright : Copyright © 2001-2003 GEAR Software
OriginalFilename : gearsec.exe
#:12 [hueyserv.exe]
FilePath : C:\Program Files\Huey\
ProcessID : 556
ThreadCreationTime : 5/14/2005 3:02:33 PM
BasePriority : Normal
#:13 [inetinfo.exe]
FilePath : C:\WINDOWS\System32\inetsrv\
ProcessID : 588
ThreadCreationTime : 5/14/2005 3:02:34 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Internet Information Services
CompanyName : Microsoft Corporation
FileDescription : Internet Information Services
InternalName : INETINFO.EXE
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : INETINFO.EXE
#:14 [nvsvc32.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 728
ThreadCreationTime : 5/14/2005 3:02:35 PM
BasePriority : Normal
FileVersion : 6.14.10.5216
ProductVersion : 6.14.10.5216
ProductName : NVIDIA Driver Helper Service, Version 52.16
CompanyName : NVIDIA Corporation
FileDescription : NVIDIA Driver Helper Service, Version 52.16
InternalName : NVSVC
LegalCopyright : © NVIDIA Corporation. All rights reserved.
OriginalFilename : nvsvc32.exe
#:15 [ramaint.exe]
FilePath : C:\Program Files\RemotelyAnywhere\
ProcessID : 1316
ThreadCreationTime : 5/14/2005 3:02:45 PM
BasePriority : Normal
FileVersion : 5.33.435
ProductVersion : 5.33.435
ProductName : RemotelyAnywhere
CompanyName : 3am Labs Ltd.
FileDescription : RemotelyAnywhere Maintenance Service
InternalName : RAMaint
LegalCopyright : Copyright © 1998-2004 3am Labs Ltd. All rights reserved.
OriginalFilename : ramaint.exe
#:16 [remotelyanywhere.exe]
FilePath : C:\Program Files\RemotelyAnywhere\
ProcessID : 1724
ThreadCreationTime : 5/14/2005 3:02:50 PM
BasePriority : Normal
FileVersion : 5.33.435
ProductVersion : 5.33.435
ProductName : RemotelyAnywhere
CompanyName : 3am Labs Ltd.
FileDescription : RemotelyAnywhere
InternalName : RemotelyAnywhere
LegalCopyright : Copyright © 1998-2004 3am Labs Ltd. All rights reserved.
OriginalFilename : RemotelyAnywhere.exe
#:17 [r_server.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1764
ThreadCreationTime : 5/14/2005 3:02:50 PM
BasePriority : Normal
FileVersion : 2, 2, 0, 0
ProductVersion : 2, 2, 0, 0
ProductName : Remote Administrator
FileDescription : Remote control tool
InternalName : R_server
LegalCopyright : Software and all its components Copyright © 1999-2004 Dmitri Znosko. All rights reserved.
LegalTrademarks : Radmin, Remote Administrator
OriginalFilename : R_server.exe
Comments : Server part
#:18 [tcpsvcs.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2124
ThreadCreationTime : 5/14/2005 3:02:54 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : TCP/IP Services Application
InternalName : TCPSVCS.EXE
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : TCPSVCS.EXE
#:19 [snmp.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2152
ThreadCreationTime : 5/14/2005 3:02:54 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : SNMP Service
InternalName : snmp.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : snmp.exe
#:20 [srvadmsrv.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2168
ThreadCreationTime : 5/14/2005 3:02:54 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 8
ProductVersion : 1, 0, 0, 2
ProductName : HHD Service Administrator and SafeLaunch
CompanyName : HHD Software
FileDescription : HHD SrvAdmin Security service
InternalName : SrvAdmSrv
LegalCopyright : Copyright © 2000 by HHD Software
OriginalFilename : SrvAdmSrv.exe
#:21 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2200
ThreadCreationTime : 5/14/2005 3:02:55 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe
#:22 [wt32exe.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2308
ThreadCreationTime : 5/14/2005 3:02:55 PM
BasePriority : Realtime
FileVersion : 1, 5, 0, 0
ProductVersion : 1, 0, 0, 1
ProductName : Aiptek wt32exe
CompanyName : Aiptek
FileDescription : wt32exe
InternalName : wt32exe
LegalCopyright : Copyright c 2000
OriginalFilename : wt32exe.exe
#:23 [wfxsvc.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2584
ThreadCreationTime : 5/14/2005 3:02:59 PM
BasePriority : Normal
FileVersion : 9.02.98.1128
ProductVersion : 9.02
ProductName : Symantec WinFax PRO
CompanyName : Symantec Corporation
FileDescription : Symantec WinFax PRO NT Service
InternalName : WFXSVC
LegalCopyright : Copyright © Symantec Corporation. 1990-1998
LegalTrademarks : Symantec WinFax PRO ® is a registered trademark of Symantec Corporation
#:24 [winvnc.exe]
FilePath : C:\Program Files\TightVNC-unstable\
ProcessID : 2644
ThreadCreationTime : 5/14/2005 3:02:59 PM
BasePriority : Normal
FileVersion : 1, 3, 0, 5
ProductVersion : 1, 3, 0, 5
ProductName : TightVNC Win32 Server
CompanyName : Constantin Kaplinsky
FileDescription : TightVNC Win32 Server
InternalName : WinVNC
LegalCopyright : Copyright © 1998-2004 [many holders]
OriginalFilename : WinVNC.exe
Comments : Based on TridiaVNC by Tridia Corporation
#:25 [winvnc4.exe]
FilePath : C:\Program Files\RealVNC\VNC4\
ProcessID : 2692
ThreadCreationTime : 5/14/2005 3:03:01 PM
BasePriority : Normal
FileVersion : 4.0
ProductVersion : 4.0
ProductName : VNC Server 4.0
CompanyName : RealVNC Ltd.
FileDescription : VNC Server for Win32
InternalName : WinVNC 4.0
LegalCopyright : Copyright © RealVNC Ltd. 2002-2004
LegalTrademarks : RealVNC
OriginalFilename : winvnc4.exe
#:26 [xcommsvr.exe]
FilePath : C:\Program Files\Common Files\BullGuard\BullGuard Communicator\
ProcessID : 2724
ThreadCreationTime : 5/14/2005 3:03:02 PM
BasePriority : Normal
FileVersion : 1, 7, 0, 6
ProductVersion : 1, 7, 0, 6
ProductName : Softwin BullGuard Communicator Server
CompanyName : Softwin
FileDescription : BullGuard Communicator Server
InternalName : XCOMMSVR
LegalCopyright : Copyright © 2003-2004 Softwin
OriginalFilename : xcommsvr.exe
Comments : Manages communication between BitDefender components
#:27 [mqsvc.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2756
ThreadCreationTime : 5/14/2005 3:03:02 PM
BasePriority : Normal
FileVersion : 5.01.1108
ProductVersion : 5.01.1108
ProductName : Microsoft Message Queue
CompanyName : Microsoft Corporation
FileDescription : Message Queuing Service
LegalCopyright : Copyright © Microsoft Corporation. 1981-2000
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation. Windows NT™ is a trademark of Microsoft Corporation
OriginalFilename : MQSVC.EXE
Warning! Virtumonde Object found in memory(C:\WINDOWS\System32\inetadpt.dll)
Virtumonde Object Recognized!
Type : Process
Data : inetadpt.dll
Category : Malware
Comment :
Object : C:\WINDOWS\System32\
FileVersion : 0, 403, 29, 1705
ProductVersion : 1, 1, 0, 0
ProductName : TargetSoft
InternalName : inetadpt.dll
LegalCopyright : Copyright 2003
OriginalFilename : inetadpt.dll
Comments : TargetSoft
Warning! "C:\WINDOWS\System32\mqsvc.exe"Process could not be terminated!
#:28 [bdss.exe]
FilePath : C:\Program Files\Common Files\BullGuard\BullGuard Scan Server\
ProcessID : 2808
ThreadCreationTime : 5/14/2005 3:03:03 PM
BasePriority : Normal
#:29 [mqtgsvc.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 3188
ThreadCreationTime : 5/14/2005 3:03:07 PM
BasePriority : Normal
FileVersion : 5.01.1108
ProductVersion : 5.01.1108
ProductName : Microsoft Message Queue
CompanyName : Microsoft Corporation
FileDescription : Windows NT MSMQ Trigger Service
LegalCopyright : Copyright © Microsoft Corporation. 1981-2000
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation. Windows NT™ is a trademark of Microsoft Corporation
OriginalFilename : QMTGSVC.EXE
#:30 [vsserv.exe]
FilePath : C:\Program Files\BullGuard\
ProcessID : 3440
ThreadCreationTime : 5/14/2005 3:03:15 PM
BasePriority : Normal
#:31 [jusched.exe]
FilePath : C:\Program Files\Java\j2re1.4.2_05\bin\
ProcessID : 3480
ThreadCreationTime : 5/14/2005 3:03:17 PM
BasePriority : Normal
#:32 [popupinspector.exe]
FilePath : C:\Program Files\GIANT Company Software inc\PopUp Inspector\
ProcessID : 3980
ThreadCreationTime : 5/14/2005 3:03:27 PM
BasePriority : Normal
FileVersion : 1.05.0432
ProductVersion : 1.05.0432
ProductName : PopUpInspector
CompanyName : GIANT Company Software inc.
InternalName : PopUpInspector
OriginalFilename : PopUpInspector.exe
#:33 [mwsoemon.exe]
FilePath : C:\PROGRA~1\MyWay\bar\2.bin\
ProcessID : 384
ThreadCreationTime : 5/14/2005 3:03:37 PM
BasePriority : Normal
FileVersion : 1,2,0,4
ProductVersion : 1,2,0,4
ProductName : My Way Email Plugin
CompanyName : MyWay.com
FileDescription : My Way Email Plugin
InternalName : My Way Email Plugin
LegalCopyright : Copyright © 2003-2004 MyWay.com
OriginalFilename : mwsoemon.exe
#:34 [msnappau.exe]
FilePath : C:\Program Files\MSN Apps\Updater\01.02.3000.1001\de\
ProcessID : 660
ThreadCreationTime : 5/14/2005 3:03:38 PM
BasePriority : Normal
#:35 [kazaa.kpp]
FilePath : C:\Program Files\Kazaa Lite\
ProcessID : 2944
ThreadCreationTime : 5/14/2005 3:03:53 PM
BasePriority : Normal
FileVersion : 2, 0, 2, 0
ProductVersion : 2, 0, 2, 0
ProductName : Kazaa Lite
FileDescription : Kazaa Lite
InternalName : kazaa
LegalCopyright : Nothing is copyrighted in the world of Kazaa
LegalTrademarks : No
OriginalFilename : Kazaa.EXE
Comments : Kazaa Lite rocks!
#:36 [iexplore.exe]
FilePath : C:\Program Files\Internet Explorer\
ProcessID : 3628
ThreadCreationTime : 5/14/2005 3:05:13 PM
BasePriority : Normal
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : IEXPLORE.EXE
#:37 [rundll32.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 288
ThreadCreationTime : 5/14/2005 3:05:26 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Run a DLL as an App
InternalName : rundll
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : RUNDLL.EXE
#:38 [msmsgs.exe]
FilePath : C:\Program Files\Messenger\
ProcessID : 2908
ThreadCreationTime : 5/14/2005 3:05:33 PM
BasePriority : Normal
FileVersion : 4.7.3001
ProductVersion : Version 4.7.3001
ProductName : Messenger
CompanyName : Microsoft Corporation
FileDescription : Windows Messenger
InternalName : msmsgs
LegalCopyright : Copyright © Microsoft Corporation 2004
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
OriginalFilename : msmsgs.exe
#:39 [avant.exe]
FilePath : C:\Program Files\Avant Browser\
ProcessID : 5248
ThreadCreationTime : 5/14/2005 3:11:26 PM
BasePriority : Normal
FileVersion : 10.0.0.167
ProductVersion : 10.0
ProductName : Avant Browser
FileDescription : Avant Browser
#:40 [hijackthis.exe]
FilePath : C:\Documents and Settings\fnadeem\Desktop\New Folder\
ProcessID : 3816
ThreadCreationTime : 5/14/2005 3:23:27 PM
BasePriority : Normal
FileVersion : 1.99.0001
ProductVersion : 1.99.0001
ProductName : HijackThis
CompanyName : Soeperman Enterprises Ltd.
FileDescription : HijackThis
InternalName : HijackThis
LegalCopyright : Freeware
OriginalFilename : HijackThis.exe
Comments : Version history is in Help section
#:41 [ad-aware.exe]
FilePath : C:\PROGRA~1\Lavasoft\AD-AWA~1\
ProcessID : 4152
ThreadCreationTime : 5/14/2005 3:36:50 PM
BasePriority : Normal
FileVersion : 6.2.0.206
ProductVersion : VI.Second Edition
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved
#:42 [ceewbw.exe]
FilePath : c:\windows\system32\
ProcessID : 3048
ThreadCreationTime : 5/14/2005 3:38:50 PM
BasePriority : Normal
FileVersion : 1, 0, 7, 1
ProductVersion : 0, 0, 7, 0
ProductName : TODO: <Product name>
CompanyName : TODO: <Company name>
FileDescription : TODO: <File description>
LegalCopyright : TODO: © <Company name>. All rights reserved.
#:43 [ctfmon.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 4164
ThreadCreationTime : 5/14/2005 3:44:23 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : CTFMON.EXE
#:44 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 3436
ThreadCreationTime : 5/14/2005 3:55:47 PM
BasePriority : Normal
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : EXPLORER.EXE
Warning! BlazeFind Object found in memory(C:\Windows\System32\omniband.dll)
BlazeFind Object Recognized!
Type : Process
Data : omniband.dll
Category : Malware
Comment :
Object : C:\Windows\System32\
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : WindowsSaBand Module
FileDescription : WindowsSaBand Module
InternalName : WindowsSaBand
LegalCopyright : Copyright 2004
OriginalFilename : WindowsSaBand.DLL
Warning! Malware.TopAntiSpyware Object found in memory(C:\WINDOWS\System32\srpcsrv32.dll)
Malware.TopAntiSpyware Object Recognized!
Type : Process
Data : srpcsrv32.dll
Category : Malware
Comment :
Object : C:\WINDOWS\System32\
Warning! Malware.TopAntiSpyware Object found in memory(C:\WINDOWS\System32\spoolsrv32.exe)
Malware.TopAntiSpyware Object Recognized!
Type : Process
Data : spoolsrv32.exe
Category : Malware
Comment :
Object : C:\WINDOWS\System32\
"C:\WINDOWS\System32\spoolsrv32.exe"Process terminated successfully
Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 1
Objects found so far: 36
Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
begin2search Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{16b238d5-80de-47ce-8f17-b3ece2c2248d}
begin2search Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{16b238d5-80de-47ce-8f17-b3ece2c2248d}
Value :
begin2search Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{57cb9b97-9ff9-4c87-88a4-56a867ffc95e}
begin2search Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{57cb9b97-9ff9-4c87-88a4-56a867ffc95e}
Value :
begin2search Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{227d1e33-ead4-4ace-be32-4acfaad072dd}
begin2search Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : var3.rsynchlpr
begin2search Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : var3.rsynchlpr
Value :
begin2search Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : var3.rsynchlpr.1
begin2search Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : var3.rsynchlpr.1
Value :
BlazeFind Object Recognized!
Type : Regkey
Data :
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{14d2cffe-6656-4bec-8d9e-dde6f2d4eae5}
BlazeFind Object Recognized!
Type : RegValue
Data :
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{14d2cffe-6656-4bec-8d9e-dde6f2d4eae5}
Value :
BlazeFind Object Recognized!
Type : Regkey
Data :
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{0b3569d7-1ea4-4cba-ac13-225902619789}
BlazeFind Object Recognized!
Type : Regkey
Data :
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : windowssaband.winsaband
BlazeFind Object Recognized!
Type : RegValue
Data :
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : windowssaband.winsaband
Value :
BlazeFind Object Recognized!
Type : Regkey
Data :
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : windowssaband.winsaband.1
BlazeFind Object Recognized!
Type : RegValue
Data :
Category : Malware
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : windowssaband.winsaband.1
Value :
BrilliantDigital Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{3eec42b5-fb94-40d3-a588-bb54b383a7cb}
BrilliantDigital Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{3eec42b5-fb94-40d3-a588-bb54b383a7cb}
Value :
BrilliantDigital Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{5aaa506a-ceb1-441a-9f05-43fae6b8a495}
BrilliantDigital Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{5aaa506a-ceb1-441a-9f05-43fae6b8a495}
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : assist.easyassist
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : assist.easyassist
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : assist.easyassist.1
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : assist.easyassist.1
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cesweb.web
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cesweb.web
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cesweb.web.1
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cesweb.web.1
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{1b0e7716-898e-48cc-9690-4e338e8de1d3}
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{1b0e7716-898e-48cc-9690-4e338e8de1d3}
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{6231d512-e4a4-4df2-be62-5b8f0ee348ef}
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{6231d512-e4a4-4df2-be62-5b8f0ee348ef}
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{b83fc273-3522-4cc6-92ec-75cc86678da4}
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{b83fc273-3522-4cc6-92ec-75cc86678da4}
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cnshelper.ch
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cnshelper.ch
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cnshelper.ch.1
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cnshelper.ch.1
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cnsminhk.cnshook
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cnsminhk.cnshook
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cnsminhk.cnshook.1
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cnsminhk.cnshook.1
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{1bb0abbe-2d95-4847-b9d8-6f90de3714c1}
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{1bb0abbe-2d95-4847-b9d8-6f90de3714c1}
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{924f5b3a-7a27-484a-b873-e855c9708667}
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{924f5b3a-7a27-484a-b873-e855c9708667}
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{df692509-d9ef-48a0-9cd0-3aa5b81f6f68}
CnsMin Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{df692509-d9ef-48a0-9cd0-3aa5b81f6f68}
Value :
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{0c618dcf-cfbd-448e-8ba0-c49a2cdfa2a7}
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{19069804-2cf0-4357-b696-ba6e9aad99ef}
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{a5adeae7-a8b4-4f94-9128-bf8d8db5e927}
CnsMin Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{aab6bce3-1df6-4930-9b14-9ca79dc8c267}
CometSystems Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{16bc6464-196a-4bab-a14b-f69f8a0a60f7}
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{16bc6464-196a-4bab-a14b-f69f8a0a60f7}
Value :
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{16bc6464-196a-4bab-a14b-f69f8a0a60f7}
Value : AppID
CometSystems Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{197ab1d7-a7dd-4c86-a938-1fcc0db21b85}
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{197ab1d7-a7dd-4c86-a938-1fcc0db21b85}
Value :
CometSystems Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{f59c663d-e891-492c-86e3-0758c71885c2}
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{f59c663d-e891-492c-86e3-0758c71885c2}
Value :
CometSystems Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cssecurity.htmlsecurity
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cssecurity.htmlsecurity
Value :
CometSystems Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cssecurity.htmlsecurity.1
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : cssecurity.htmlsecurity.1
Value :
CometSystems Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : dmproxy.dmproxyctl
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : dmproxy.dmproxyctl
Value :
CometSystems Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : dmproxy.dmproxyctl.1
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : dmproxy.dmproxyctl.1
Value :
CometSystems Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : dmserver.dmnotify
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : dmserver.dmnotify
Value :
CometSystems Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : dmserver.dmnotify.1
CometSystems Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
This topic is locked
Sign In
Create Account
