Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

hijacked


  • Please log in to reply

#1
spudhead

spudhead

    New Member

  • Member
  • Pip
  • 8 posts
Hi, hoping someone can help - have a use who is only able to browse google. she can even do google searches, any links to other pages, or even typed url's brings up page cannot displayed.
have run trend office scan - no viruses. spybot, ad-aware. cwshredder doesn't find anything. however a random exe keeps appearing in the windows temp file. i've left it there and run a hijack this log:



Logfile of HijackThis v1.99.1
Scan saved at 12:33:37, on 22/06/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\NETSUP~1\client32.exe
C:\OfficeScan NT\ntrtscan.exe
C:\OfficeScan NT\OfcPfwSvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\OfficeScan NT\tmlisten.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\TEMP\LA3E35.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
C:\OfficeScan NT\pccntmon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\OfficeScan NT\pccntupd.exe
C:\Program Files\Compaq\Easy Access Button Support\CPQEAKSYSTEMTRAY.EXE
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Augi's stuff\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.compaq.com...DT/0409/bl8.asp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.compaq.com...DT/0409/bl7.asp
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\OfficeScan NT\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = mydomain.co.uk
O17 - HKLM\Software\..\Telephony: DomainName = mydomain.co.uk
O17 - HKLM\System\CCS\Services\Tcpip\..\{AC701AE7-1A7B-48D6-ACE3-40B91FCA5897}: NameServer = 212.158.192.3,212.158.192.2
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = mydomain.co.uk
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Client32 - NetSupport Ltd - C:\PROGRA~1\NETSUP~1\client32.exe
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\OfficeScan NT\ntrtscan.exe
O23 - Service: OfficeScanNT Personal Firewall (OfcPfwSvc) - Trend Micro Inc. - C:\OfficeScan NT\OfcPfwSvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\OfficeScan NT\tmlisten.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  • 0

Advertisements


#2
Wizard

Wizard

    Retired Staff

  • Retired Staff
  • 5,661 posts
Hi spudhead and Welcome!

I cant see the first sign of any problems or rouge Temp Files in that log!

Run MSCONFIG and enable everything in the startup area. To get to MSCONFIG, click on Start -> Run -> type in MSCONFIG -> click OK!

Under the "General" Tab
Make Sure Normal Startup is Checked!!

Click Apply>>OK>>Follow the Prompts to Restart!!

Restart Normal and have the PC Scanned here
Panda Active Scan

You will need to be using Internet Explorer for the Scan to work!

Save the Report it generates!

I need you to download and run Silent Runners:
http://www.silentrun...ent Runners.zip

Unzip it and select Extract all files!

Run the SilentRunners.vbs file. If your antivirus has a script blocker, you will get a warning asking if you want to allow SilentRunners.vbs to run. It might say something like "Malicious Script Warning". This script is not malicious so you are safe in allowing it to run.

It will start scanning the System,be patient,it takes a bit!

Once Completed,it will produce a Notepad page,I need you to Copy&Paste those results into your next post!

Post back with the Results from Silent Runners>>Panda and A fresh HijackThis log!
  • 0

#3
spudhead

spudhead

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
hi cretemonster,

ok a bit of an update. I had to get the computer running again - so reverted to the earliest restore point I could - which was back to march. That worked fine - but even at that point there appears to be spyware on the machine. Browsing however, now works, but I still can't see any sign of what's causing the random exe to appear.

I've done the things you've asked.

MSCONFIG
normal config was already selected

Panda active scan log:
Incident Status Location
Spyware:Spyware/Web3000 No disinfected C:\WINDOWS\hh.ico

Silent runners log:
"Silent Runners.vbs", revision 39, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"Yahoo! Pager" = "C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet" ["Yahoo! Inc."]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"IgfxTray" = "C:\WINDOWS\System32\igfxtray.exe" ["Intel Corporation"]
"HotKeysCmds" = "C:\WINDOWS\System32\hkcmd.exe" ["Intel Corporation"]
"SunJavaUpdateSched" = "C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe" [null data]
"Smapp" = "C:\Program Files\Analog Devices\SoundMAX\SMTray.exe" ["Analog Devices, Inc."]
"DrvLsnr" = "C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe" ["adi"]
"srmclean" = "C:\Cpqs\Scom\srmclean.exe" [null data]
"SetRefresh" = "C:\Program Files\Compaq\SetRefresh\SetRefresh.exe" ["Hewlett-Packard Company"]
"CPQEASYACC" = "C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe" ["Compaq Computer Corporation"]
"OfficeScanNT Monitor" = ""C:\OfficeScan NT\pccntmon.exe" -HideWindow" ["Trend Micro Inc."]
"QuickTime Task" = ""C:\Program Files\QuickTime\qttask.exe" -atboottime" ["Apple Computer, Inc."]
"Zone Labs Client" = ""C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"" ["Zone Labs Inc."]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "Display Panning CPL Extension"
-> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "HyperTerminal Icon Ext"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\System32\hticons.dll" ["Hilgraeve, Inc."]
"{E0D79300-84BE-11CE-9641-444553540000}" = "WinZip"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WinZip\WZSHLEXT.DLL" [null data]
"{E0D79301-84BE-11CE-9641-444553540000}" = "WinZip"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WinZip\WZSHLEXT.DLL" [null data]
"{E0D79302-84BE-11CE-9641-444553540000}" = "WinZip"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WinZip\WZSHLEXT.DLL" [null data]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Outlook Custom Icon Handler"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~2\Office\OLKFSTUB.DLL" [MS]

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\
INFECTION WARNING! igfxcui\DLLName = "igfxsrvc.dll" ["Intel Corporation"]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
WinZip\(Default) = "{E0D79300-84BE-11CE-9641-444553540000}"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WinZip\WZSHLEXT.DLL" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinZip\(Default) = "{E0D79300-84BE-11CE-9641-444553540000}"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WinZip\WZSHLEXT.DLL" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
WinZip\(Default) = "{E0D79300-84BE-11CE-9641-444553540000}"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\WinZip\WZSHLEXT.DLL" [null data]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop is disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\Windows\HPQ800H.BMP"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]


Startup items in "asmith" & "All Users" startup folders:
--------------------------------------------------------

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
"Microsoft Office" -> shortcut to: "C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l" [MS]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 11
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\
"MenuText" = "Sun Java Console"
"CLSIDExtension" = "{08B0E5C0-4FCB-11CF-AAA5-00401C608501}"

{FB5F1910-F110-11D2-BB9E-00C04F795683}\
"ButtonText" = "Messenger"
"MenuText" = "Windows Messenger"
"Exec" = "C:\Program Files\Messenger\msmsgs.exe" [MS]


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

Client32, Client32, "C:\PROGRA~1\NETSUP~1\client32.exe /* * " ["NetSupport Ltd"]
OfficeScanNT Listener, tmlisten, "C:\OfficeScan NT\tmlisten.exe" ["Trend Micro Inc."]
OfficeScanNT Personal Firewall, OfcPfwSvc, "C:\OfficeScan NT\OfcPfwSvc.exe" ["Trend Micro Inc."]
OfficeScanNT RealTime Scan, ntrtscan, "C:\OfficeScan NT\ntrtscan.exe" ["Trend Micro Inc."]
SoundMAX Agent Service, SoundMAX Agent Service (default), "C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe" ["Analog Devices, Inc."]
TrueVector Internet Monitor, vsmon, "C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service" ["Zone Labs Inc."]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
took 25 seconds.
+ The search for all Registry CLSIDs containing dormant Explorer Bars
took 9 seconds.
---------- (total run time: 62 seconds)

hijack this log
Logfile of HijackThis v1.99.1
Scan saved at 15:54:59, on 27/06/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\NETSUP~1\client32.exe
C:\OfficeScan NT\ntrtscan.exe
C:\OfficeScan NT\OfcPfwSvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\OfficeScan NT\tmlisten.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\TEMP\KDA8D2.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
C:\OfficeScan NT\pccntmon.exe
C:\Program Files\Java\j2re1.4.2_01\bin\jucheck.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\OfficeScan NT\pccntupd.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Compaq\Easy Access Button Support\CPQEAKSYSTEMTRAY.EXE
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\Lotus\Notes\NLNOTES.EXE
C:\Program Files\Lotus\Notes\ntaskldr.EXE
C:\Program Files\Britannica 2004\Encyclopaedia Britannica 2004 Deluxe Edition\starter.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Augi's stuff\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.compaq.com...DT/0409/bl8.asp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.compaq.com...DT/0409/bl8.asp
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.compaq.com...DT/0409/bl7.asp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.compaq.com...DT/0409/bl7.asp
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\OfficeScan NT\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1095150792484
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.c...utocomplete.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = mydomain.co.uk
O17 - HKLM\Software\..\Telephony: DomainName = mydomain.co.uk
O17 - HKLM\System\CCS\Services\Tcpip\..\{AC701AE7-1A7B-48D6-ACE3-40B91FCA5897}: NameServer = 212.158.192.3,212.158.192.2
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = mydomain.co.uk
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Client32 - NetSupport Ltd - C:\PROGRA~1\NETSUP~1\client32.exe
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\OfficeScan NT\ntrtscan.exe
O23 - Service: OfficeScanNT Personal Firewall (OfcPfwSvc) - Trend Micro Inc. - C:\OfficeScan NT\OfcPfwSvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\OfficeScan NT\tmlisten.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


Hope you can shed some light!
thanks in advance
  • 0

#4
Wizard

Wizard

    Retired Staff

  • Retired Staff
  • 5,661 posts
Still not seeing anything that jumps out at me!

We need to make sure the 017s are appropriate for the PC!

They Should relect you ISP or Domian Name\Network Name??

The IP Address comes back as

ns1.bulldogdsl.com (212.158.192.3)
212.158.192.0 - 212.158.192.127
Bulldog Communications CLL Metronode

Bulldog Communciations
26 Red Lion Square
London
WC1R 4HQ

The Domain Name "mydomain.co.uk" doesnt tell me much!

Does all this look correct to you?

Lets run another Scan and See if anything is lurking about

Download Pfind:
http://www.bleepingc...files/pfind.php

UNZIP the contents to a permanent folder and Extract all Files!

So make sure all those files remain in the same folder.

Doubleclick pfind.bat
It will scan for a while, so please be patient.
Wait till the doswindow closes.

Post the contents of C:\pfind.txt in your next reply
  • 0

#5
spudhead

spudhead

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
hi,
the 017 ar all correct. the ISP is bulldog, and i did change the domain names to mydomain.co.uk - but they are all correct.

here's the pfind log:
Files found with this application may be legitimate.
Only remove files that you know are malware related.
Checking the C:\WINDOWS folder


Checking the C:\WINDOWS\SYSTEM32 folder
C:\WINDOWS\SYSTEM32\ntdll.dll: .aspack


Checking all directories under the C:\WINDOWS\SYSTEM32\drivers folder


Checking the C:\Documents and Settings\All Users\Start Menu\programs\Startup\ folder



Checking the C:\Documents and Settings\All Users\Application Data folder



Checking the C:\Documents and Settings\asmith\Start Menu\programs\Startup\ folder



Checking the C:\Documents and Settings\asmith\Application Data folder
  • 0

#6
Wizard

Wizard

    Retired Staff

  • Retired Staff
  • 5,661 posts
Still not seeing anything at all!

Describe any and all problems you are experiencing!
  • 0

#7
spudhead

spudhead

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
initially the computer was not able to download anything, and couldn't browse using IE, APART from google. it allowed you to use type a search term in google, and would return results. but no hyperlinks would work, and if you typed any other url it would just give page unable to be displayed.

In zone alarm there were lots of entries for random exe files.

I couldnt' see anything from my limited spyware experience, and in the end I resotred the computer to a restore point from march. Even then there is a random exe which loads itself up.

At the moment there doesn't seem to be any problems, apart from the random exe (different everytime the computer is started) which appears in taskmanager. it doesn't affect the use of the computer at all - but is annoying.

I have now installed spywareblaster,spyware guard and ie-spyad on the computer.
  • 0

#8
Wizard

Wizard

    Retired Staff

  • Retired Staff
  • 5,661 posts
Give me the names of some of these Random exe files??

Please download FindQoologic from here:
http://forums.net-in...=post&id=134981

Save it to the desktop and run Find-Qoologic2.bat.

This will generate a log file; please post the entire contents of the log file here for me to see!
  • 0

#9
spudhead

spudhead

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
example of the random exe.
today: AC8C25.exe running in c:\windows\temp

from my previous HJT logs:
C:\WINDOWS\TEMP\KDA8D2.EXE
C:\WINDOWS\TEMP\LA3E35.EXE


I've run the findqoologic as requested, here's the output:
FindQoologic - file.txt:
PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
»»»»»»»»»»»»»»»»»»»»»»»» Files found in System »»»»»»»»»»»»»»»»»»»»»»»



»»»»»»»»»»»»»»»»»»»»»»»» startup files»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


»»»»»»»»»»»»»»»»»»»»»»»»» Checking Global Startup »»»»»»»»»»»»»»»»»»»»»

Using address check -- 0x7c90df5e

Global Startup:
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
.
..
desktop.ini
Microsoft Office.lnk

User Startup:
C:\Documents and Settings\asmith\Start Menu\Programs\Startup
.
..
desktop.ini
SpywareGuard.lnk

»»»»»»»»»»»»»»»»»»»»»»»» Registry Entries Found »»»»»»»»»»»»»»»»»»»»»»»

! REG.EXE VERSION 3.0

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Offline Files
<NO NAME> REG_SZ {750fdf0e-2a26-11d1-a3ea-080036587f03}

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With
<NO NAME> REG_SZ {09799AFB-AD67-11d1-ABCD-00C04FC30936}

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With EncryptionMenu
<NO NAME> REG_SZ {A470F8CF-A1E8-4f65-8335-227475AA5C46}

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\WinZip
<NO NAME> REG_SZ {E0D79300-84BE-11CE-9641-444553540000}

HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
<NO NAME> REG_SZ Start Menu Pin

»»»»»»»»»»»»»»»»»»»»»»»»» Active setup »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

"Find activesetup", version1, launched at: 16:28
Operating System: Windows XP SP2


HKLM\Software\Microsoft\Active Setup\Installed Components\
">{22d6f312-b0f6-11d0-94ab-0080c74c7e95}\(Default)" = "Windows Media Player"
\StubPath = "C:\WINDOWS\INF\unregmp2.exe /ShowWMP" [MS]

»»»»»»»»»»»»»»»»»»»»»»»» File read Error »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

**File C:\AUGI'S~1\FIND-Q~1\LIST.TXT

FindQoologic list.txt:
Analyzer v1.36 by Boogie Copyright © 1997 ESP Team
Files: C:\WINDOWS\SYSTEM32\*.DLL
Ä
6TO4SVC.DLL MS Windows 95 / Windows NT Exe
A3D.DLL MS Windows 95 / Windows NT Exe
AAAAMON.DLL MS Windows 95 / Windows NT Exe
ACCTRES.DLL MS Windows 95 / Windows NT Exe
ACLEDIT.DLL MS Windows 95 / Windows NT Exe
ACLUI.DLL MS Windows 95 / Windows NT Exe
ACTIVEDS.DLL MS Windows 95 / Windows NT Exe
ACTXPRXY.DLL MS Windows 95 / Windows NT Exe
ADMPARSE.DLL MS Windows 95 / Windows NT Exe
ADPTIF.DLL MS Windows 95 / Windows NT Exe
ADSLDP.DLL MS Windows 95 / Windows NT Exe
ADSLDPC.DLL MS Windows 95 / Windows NT Exe
ADSMSEXT.DLL MS Windows 95 / Windows NT Exe
ADSNDS.DLL MS Windows 95 / Windows NT Exe
ADSNT.DLL MS Windows 95 / Windows NT Exe
ADSNW.DLL MS Windows 95 / Windows NT Exe
ADVAPI32.DLL MS Windows 95 / Windows NT Exe
ADVPACK.DLL MS Windows 95 / Windows NT Exe
ALRSVC.DLL MS Windows 95 / Windows NT Exe
AMSTREAM.DLL MS Windows 95 / Windows NT Exe
APCUPS.DLL MS Windows 95 / Windows NT Exe
APPHELP.DLL MS Windows 95 / Windows NT Exe
APPMGMTS.DLL MS Windows 95 / Windows NT Exe
APPMGR.DLL MS Windows 95 / Windows NT Exe
ASFERROR.DLL MS Windows 95 / Windows NT Exe
ASYCFILT.DLL MS Windows 95 / Windows NT Exe
ATI2CQAG.DLL MS Windows 95 / Windows NT Exe
ATI2DVAA.DLL MS Windows 95 / Windows NT Exe
ATI2DVAG.DLL MS Windows 95 / Windows NT Exe
ATI3D1AG.DLL MS Windows 95 / Windows NT Exe
ATI3D2AG.DLL MS Windows 95 / Windows NT Exe
ATI3DUAG.DLL MS Windows 95 / Windows NT Exe
ATIVTMXX.DLL MS Windows 95 / Windows NT Exe
ATIVVAXX.DLL MS Windows 95 / Windows NT Exe
ATKCTRS.DLL MS Windows 95 / Windows NT Exe
ATL.DLL MS Windows 95 / Windows NT Exe
ATMFD.DLL MS Windows 95 / Windows NT Exe
ATMLIB.DLL MS Windows 95 / Windows NT Exe
ATMPVCNO.DLL MS Windows 95 / Windows NT Exe
ATRACE.DLL MS Windows 95 / Windows NT Exe
AUDIOSRV.DLL MS Windows 95 / Windows NT Exe
AUTHZ.DLL MS Windows 95 / Windows NT Exe
AUTODISC.DLL MS Windows 95 / Windows NT Exe
AVICAP.DLL MS Windows: "avicap.exe"
AVICAP32.DLL MS Windows 95 / Windows NT Exe
AVIFIL32.DLL MS Windows 95 / Windows NT Exe
AVIFILE.DLL MS Windows: "Microsoft AVI File Read/Write library"
AVMETER.DLL MS Windows 95 / Windows NT Exe
AVTAPI.DLL MS Windows 95 / Windows NT Exe
AVWAV.DLL MS Windows 95 / Windows NT Exe
BASESRV.DLL MS Windows 95 / Windows NT Exe
BASPXP32.DLL MS Windows 95 / Windows NT Exe
BATMETER.DLL MS Windows 95 / Windows NT Exe
BATT.DLL MS Windows 95 / Windows NT Exe
BIDISPL.DLL MS Windows 95 / Windows NT Exe
BITSPRX2.DLL MS Windows 95 / Windows NT Exe
BITSPRX3.DLL MS Windows 95 / Windows NT Exe
BLACKBOX.DLL MS Windows 95 / Windows NT Exe
BMAPI.DLL MS Windows 95 / Windows NT Exe
BOOTVID.DLL MS Windows 95 / Windows NT Exe
BROWSELC.DLL MS Windows 95 / Windows NT Exe
BROWSER.DLL MS Windows 95 / Windows NT Exe
BROWSEUI.DLL MS Windows 95 / Windows NT Exe
BROWSEWM.DLL MS Windows 95 / Windows NT Exe
BSELLIST.DLL MS Windows 95 / Windows NT Exe
BTHCI.DLL MS Windows 95 / Windows NT Exe
BTHSERV.DLL MS Windows 95 / Windows NT Exe
BTPANUI.DLL MS Windows 95 / Windows NT Exe
CABINET.DLL MS Windows 95 / Windows NT Exe
CABVIEW.DLL MS Windows 95 / Windows NT Exe
CABW32.DLL MS Windows 95 / Windows NT Exe
CAMOCX.DLL MS Windows 95 / Windows NT Exe
CAPESNPN.DLL MS Windows 95 / Windows NT Exe
CARDS.DLL MS Windows 95 / Windows NT Exe
CATSRV.DLL MS Windows 95 / Windows NT Exe
CATSRVPS.DLL MS Windows 95 / Windows NT Exe
CATSRVUT.DLL MS Windows 95 / Windows NT Exe
CCFGNT.DLL MS Windows 95 / Windows NT Exe
CDFVIEW.DLL MS Windows 95 / Windows NT Exe
CDM.DLL MS Windows 95 / Windows NT Exe
CDMODEM.DLL MS Windows 95 / Windows NT Exe
CDOSYS.DLL MS Windows 95 / Windows NT Exe
CERTCLI.DLL MS Windows 95 / Windows NT Exe
CERTMGR.DLL MS Windows 95 / Windows NT Exe
CEWMDM.DLL MS Windows 95 / Windows NT Exe
CFGBKEND.DLL MS Windows 95 / Windows NT Exe
CFGMGR32.DLL MS Windows 95 / Windows NT Exe
CIADMIN.DLL MS Windows 95 / Windows NT Exe
CIC.DLL MS Windows 95 / Windows NT Exe
CIODM.DLL MS Windows 95 / Windows NT Exe
CLB.DLL MS Windows 95 / Windows NT Exe
CLBCATEX.DLL MS Windows 95 / Windows NT Exe
CLBCATQ.DLL MS Windows 95 / Windows NT Exe
CLHOOK4.DLL MS Windows 95 / Windows NT Exe
CLICONFG.DLL MS Windows 95 / Windows NT Exe
CLUSAPI.DLL MS Windows 95 / Windows NT Exe
CMCFG32.DLL MS Windows 95 / Windows NT Exe
CMDIAL32.DLL MS Windows 95 / Windows NT Exe
CMPBK32.DLL MS Windows 95 / Windows NT Exe
CMPROPS.DLL MS Windows 95 / Windows NT Exe
CMSETACL.DLL MS Windows 95 / Windows NT Exe
CMUTIL.DLL MS Windows 95 / Windows NT Exe
CNBJMON.DLL MS Windows 95 / Windows NT Exe
CNETCFG.DLL MS Windows 95 / Windows NT Exe
CNVFAT.DLL MS Windows 95 / Windows NT Exe
COLBACT.DLL MS Windows 95 / Windows NT Exe
COMADDIN.DLL MS Windows 95 / Windows NT Exe
COMADMIN.DLL MS Windows 95 / Windows NT Exe
COMCAT.DLL MS Windows 95 / Windows NT Exe
COMCTL32.DLL MS Windows 95 / Windows NT Exe
COMDLG32.DLL MS Windows 95 / Windows NT Exe
COMMDLG.DLL MS Windows: "Common Windows Dialogs, Ver. 3.10"
COMPATUI.DLL MS Windows 95 / Windows NT Exe
COMPOBJ.DLL MS Windows: "obj\i386\compobj.exe"
COMPSTUI.DLL MS Windows 95 / Windows NT Exe
COMREPL.DLL MS Windows 95 / Windows NT Exe
COMRES.DLL MS Windows 95 / Windows NT Exe
COMSNAP.DLL MS Windows 95 / Windows NT Exe
COMSVCS.DLL MS Windows 95 / Windows NT Exe
COMUID.DLL MS Windows 95 / Windows NT Exe
CONFMSP.DLL MS Windows 95 / Windows NT Exe
CONSOLE.DLL MS Windows 95 / Windows NT Exe
CORPOL.DLL MS Windows 95 / Windows NT Exe
CREDUI.DLL MS Windows 95 / Windows NT Exe
CRTDLL.DLL MS Windows 95 / Windows NT Exe
CRYPT32.DLL MS Windows 95 / Windows NT Exe
CRYPTDLG.DLL MS Windows 95 / Windows NT Exe
CRYPTDLL.DLL MS Windows 95 / Windows NT Exe
CRYPTEXT.DLL MS Windows 95 / Windows NT Exe
CRYPTNET.DLL MS Windows 95 / Windows NT Exe
CRYPTSVC.DLL MS Windows 95 / Windows NT Exe
CRYPTUI.DLL MS Windows 95 / Windows NT Exe
CSCDLL.DLL MS Windows 95 / Windows NT Exe
CSCUI.DLL MS Windows 95 / Windows NT Exe
CSRSRV.DLL MS Windows 95 / Windows NT Exe
CSSEQCHK.DLL MS Windows 95 / Windows NT Exe
CTL3D32.DLL MS Windows 95 / Windows NT Exe
CTL3DV2.DLL MS Windows: "3d control dll"
D3D8.DLL MS Windows 95 / Windows NT Exe
D3D8THK.DLL MS Windows 95 / Windows NT Exe
D3D9.DLL MS Windows 95 / Windows NT Exe
D3DIM.DLL MS Windows 95 / Windows NT Exe
D3DIM700.DLL MS Windows 95 / Windows NT Exe
D3DPMESH.DLL MS Windows 95 / Windows NT Exe
D3DRAMP.DLL MS Windows 95 / Windows NT Exe
D3DRM.DLL MS Windows 95 / Windows NT Exe
D3DXOF.DLL MS Windows 95 / Windows NT Exe
DANIM.DLL MS Windows 95 / Windows NT Exe
DATACLEN.DLL MS Windows 95 / Windows NT Exe
DATIME.DLL MS Windows 95 / Windows NT Exe
DAVCLNT.DLL MS Windows 95 / Windows NT Exe
DBGENG.DLL MS Windows 95 / Windows NT Exe
DBGHELP.DLL MS Windows 95 / Windows NT Exe
DBMSADSN.DLL MS Windows 95 / Windows NT Exe
DBMSRPCN.DLL MS Windows 95 / Windows NT Exe
DBMSVINN.DLL MS Windows 95 / Windows NT Exe
DBNETLIB.DLL MS Windows 95 / Windows NT Exe
DBNMPNTW.DLL MS Windows 95 / Windows NT Exe
DCIMAN32.DLL MS Windows 95 / Windows NT Exe
DDEML.DLL MS Windows: "DDE Manager Library"
DDRAW.DLL MS Windows 95 / Windows NT Exe
DDRAWEX.DLL MS Windows 95 / Windows NT Exe
DESKADP.DLL MS Windows 95 / Windows NT Exe
DESKMON.DLL MS Windows 95 / Windows NT Exe
DESKPERF.DLL MS Windows 95 / Windows NT Exe
DEVENUM.DLL MS Windows 95 / Windows NT Exe
DEVMGR.DLL MS Windows 95 / Windows NT Exe
DFRGRES.DLL MS Windows 95 / Windows NT Exe
DFRGSNAP.DLL MS Windows 95 / Windows NT Exe
DFRGUI.DLL MS Windows 95 / Windows NT Exe
DFSSHLEX.DLL MS Windows 95 / Windows NT Exe
DGNET.DLL MS Windows 95 / Windows NT Exe
DGRPSETU.DLL MS Windows 95 / Windows NT Exe
DGSETUP.DLL MS Windows 95 / Windows NT Exe
DHCPCSVC.DLL MS Windows 95 / Windows NT Exe
DHCPMON.DLL MS Windows 95 / Windows NT Exe
DHCPSAPI.DLL MS Windows 95 / Windows NT Exe
DIACTFRM.DLL MS Windows 95 / Windows NT Exe
DIGEST.DLL MS Windows 95 / Windows NT Exe
DIMAP.DLL MS Windows 95 / Windows NT Exe
DINPUT.DLL MS Windows 95 / Windows NT Exe
DINPUT8.DLL MS Windows 95 / Windows NT Exe
DISKCOPY.DLL MS Windows 95 / Windows NT Exe
DISPEX.DLL MS Windows 95 / Windows NT Exe
DMBAND.DLL MS Windows 95 / Windows NT Exe
DMCOMPOS.DLL MS Windows 95 / Windows NT Exe
DMCONFIG.DLL MS Windows 95 / Windows NT Exe
DMDLGS.DLL MS Windows 95 / Windows NT Exe
DMDSKMGR.DLL MS Windows 95 / Windows NT Exe
DMDSKRES.DLL MS Windows 95 / Windows NT Exe
DMIME.DLL MS Windows 95 / Windows NT Exe
DMINTF.DLL MS Windows 95 / Windows NT Exe
DMLOADER.DLL MS Windows 95 / Windows NT Exe
DMOCX.DLL MS Windows 95 / Windows NT Exe
DMSCRIPT.DLL MS Windows 95 / Windows NT Exe
DMSERVER.DLL MS Windows 95 / Windows NT Exe
DMSTYLE.DLL MS Windows 95 / Windows NT Exe
DMSYNTH.DLL MS Windows 95 / Windows NT Exe
DMUSIC.DLL MS Windows 95 / Windows NT Exe
DMUTIL.DLL MS Windows 95 / Windows NT Exe
DNSAPI.DLL MS Windows 95 / Windows NT Exe
DNSRSLVR.DLL MS Windows 95 / Windows NT Exe
DOCPROP.DLL MS Windows 95 / Windows NT Exe
DOCPROP2.DLL MS Windows 95 / Windows NT Exe
DPCDLL.DLL MS Windows 95 / Windows NT Exe
DPLAY.DLL MS Windows 95 / Windows NT Exe
DPLAYX.DLL MS Windows 95 / Windows NT Exe
DPMODEMX.DLL MS Windows 95 / Windows NT Exe
DPNADDR.DLL MS Windows 95 / Windows NT Exe
DPNET.DLL MS Windows 95 / Windows NT Exe
DPNHPAST.DLL MS Windows 95 / Windows NT Exe
DPNHUPNP.DLL MS Windows 95 / Windows NT Exe
DPNLOBBY.DLL MS Windows 95 / Windows NT Exe
DPNMODEM.DLL MS Windows 95 / Windows NT Exe
DPNWSOCK.DLL MS Windows 95 / Windows NT Exe
DPSERIAL.DLL MS Windows 95 / Windows NT Exe
DPVACM.DLL MS Windows 95 / Windows NT Exe
DPVOICE.DLL MS Windows 95 / Windows NT Exe
DPVVOX.DLL MS Windows 95 / Windows NT Exe
DPWSOCK.DLL MS Windows 95 / Windows NT Exe
DPWSOCKX.DLL MS Windows 95 / Windows NT Exe
DRMCLIEN.DLL MS Windows 95 / Windows NT Exe
DRMSTOR.DLL MS Windows 95 / Windows NT Exe
DRMV2CLT.DLL MS Windows 95 / Windows NT Exe
DRPROV.DLL MS Windows 95 / Windows NT Exe
DS16GT.DLL MS Windows: "ODBC Generic Thunk API library (16-bit), Copyrigh..."
DS32GT.DLL MS Windows 95 / Windows NT Exe
DSAUTH.DLL MS Windows 95 / Windows NT Exe
DSDMO.DLL MS Windows 95 / Windows NT Exe
DSDMOPRP.DLL MS Windows 95 / Windows NT Exe
DSKQUOTA.DLL MS Windows 95 / Windows NT Exe
DSKQUOUI.DLL MS Windows 95 / Windows NT Exe
DSOUND.DLL MS Windows 95 / Windows NT Exe
DSOUND3D.DLL MS Windows 95 / Windows NT Exe
DSPROP.DLL MS Windows 95 / Windows NT Exe
DSPRPRES.DLL MS Windows 95 / Windows NT Exe
DSQUERY.DLL MS Windows 95 / Windows NT Exe
DSSEC.DLL MS Windows 95 / Windows NT Exe
DSSENH.DLL MS Windows 95 / Windows NT Exe
DSUIEXT.DLL MS Windows 95 / Windows NT Exe
DSWAVE.DLL MS Windows 95 / Windows NT Exe
DUSER.DLL MS Windows 95 / Windows NT Exe
DX7VB.DLL MS Windows 95 / Windows NT Exe
DX8VB.DLL MS Windows 95 / Windows NT Exe
DXDIAGN.DLL MS Windows 95 / Windows NT Exe
DXMASF.DLL MS Windows 95 / Windows NT Exe
DXTMSFT.DLL MS Windows 95 / Windows NT Exe
DXTRANS.DLL MS Windows 95 / Windows NT Exe
EFSADU.DLL MS Windows 95 / Windows NT Exe
ELS.DLL MS Windows 95 / Windows NT Exe
ENCAPI.DLL MS Windows 95 / Windows NT Exe
ENCDEC.DLL MS Windows 95 / Windows NT Exe
EQNCLASS.DLL MS Windows 95 / Windows NT Exe
ERSVC.DLL MS Windows 95 / Windows NT Exe
ES.DLL MS Windows 95 / Windows NT Exe
ESENT.DLL MS Windows 95 / Windows NT Exe
ESENT97.DLL MS Windows 95 / Windows NT Exe
ESENTPRF.DLL MS Windows 95 / Windows NT Exe
EVENTCLS.DLL MS Windows 95 / Windows NT Exe
EVENTLOG.DLL MS Windows 95 / Windows NT Exe
EVTGPROV.DLL MS Windows 95 / Windows NT Exe
EXPSRV.DLL MS Windows 95 / Windows NT Exe
EXSEC32.DLL MS Windows 95 / Windows NT Exe
EXTMGR.DLL MS Windows 95 / Windows NT Exe
EXTS.DLL MS Windows 95 / Windows NT Exe
FAULTREP.DLL MS Windows 95 / Windows NT Exe
FDE.DLL MS Windows 95 / Windows NT Exe
FDEPLOY.DLL MS Windows 95 / Windows NT Exe
FECLIENT.DLL MS Windows 95 / Windows NT Exe
FILEMGMT.DLL MS Windows 95 / Windows NT Exe
FLDRCLNR.DLL MS Windows 95 / Windows NT Exe
FLTLIB.DLL MS Windows 95 / Windows NT Exe
FLTRCOI.DLL MS Windows 95 / Windows NT Exe
FM20.DLL MS Windows 95 / Windows NT Exe
FM20ENU.DLL MS Windows 95 / Windows NT Exe
FMIFS.DLL MS Windows 95 / Windows NT Exe
FONTEXT.DLL MS Windows 95 / Windows NT Exe
FONTSUB.DLL MS Windows 95 / Windows NT Exe
FRAMEBUF.DLL MS Windows 95 / Windows NT Exe
FSUSD.DLL MS Windows 95 / Windows NT Exe
FTSRCH.DLL MS Windows 95 / Windows NT Exe
FWCFG.DLL MS Windows 95 / Windows NT Exe
GCDEF.DLL MS Windows 95 / Windows NT Exe
GDI32.DLL MS Windows 95 / Windows NT Exe
GDIHOOK5.DLL MS Windows 95 / Windows NT Exe
GETUNAME.DLL MS Windows 95 / Windows NT Exe
GLMF32.DLL MS Windows 95 / Windows NT Exe
GLU32.DLL MS Windows 95 / Windows NT Exe
GPEDIT.DLL MS Windows 95 / Windows NT Exe
GPKCSP.DLL MS Windows 95 / Windows NT Exe
GPKRSRC.DLL MS Windows 95 / Windows NT Exe
GPTEXT.DLL MS Windows 95 / Windows NT Exe
H323MSP.DLL MS Windows 95 / Windows NT Exe
HAL.DLL MS Windows 95 / Windows NT Exe
HCCOIN.DLL MS Windows 95 / Windows NT Exe
HCCUTILS.DLL MS Windows 95 / Windows NT Exe
HHSETUP.DLL MS Windows 95 / Windows NT Exe
HID.DLL MS Windows 95 / Windows NT Exe
HLINK.DLL MS Windows 95 / Windows NT Exe
HNETCFG.DLL MS Windows 95 / Windows NT Exe
HNETMON.DLL MS Windows 95 / Windows NT Exe
HNETWIZ.DLL MS Windows 95 / Windows NT Exe
HOTPLUG.DLL MS Windows 95 / Windows NT Exe
HSFCISP2.DLL MS Windows 95 / Windows NT Exe
HTICONS.DLL MS Windows 95 / Windows NT Exe
HTTPAPI.DLL MS Windows 95 / Windows NT Exe
HTUI.DLL MS Windows 95 / Windows NT Exe
HYPERTRM.DLL MS Windows 95 / Windows NT Exe
I81XDNT5.DLL MS Windows 95 / Windows NT Exe
IALMCO~1.DLL MS Windows 95 / Windows NT Exe
IALMDD5.DLL MS Windows 95 / Windows NT Exe
IALMDEV5.DLL MS Windows 95 / Windows NT Exe
IALMDNT5.DLL MS Windows 95 / Windows NT Exe
IALMGDEV.DLL MS Windows 95 / Windows NT Exe
IALMGICD.DLL MS Windows 95 / Windows NT Exe
IALMREM.DLL MS Windows 95 / Windows NT Exe
IALMRNT5.DLL MS Windows 95 / Windows NT Exe
IASACCT.DLL MS Windows 95 / Windows NT Exe
IASADS.DLL MS Windows 95 / Windows NT Exe
IASHLPR.DLL MS Windows 95 / Windows NT Exe
IASNAP.DLL MS Windows 95 / Windows NT Exe
IASPOLCY.DLL MS Windows 95 / Windows NT Exe
IASRAD.DLL MS Windows 95 / Windows NT Exe
IASRECST.DLL MS Windows 95 / Windows NT Exe
IASSAM.DLL MS Windows 95 / Windows NT Exe
IASSDO.DLL MS Windows 95 / Windows NT Exe
IASSVCS.DLL MS Windows 95 / Windows NT Exe
ICAAPI.DLL MS Windows 95 / Windows NT Exe
ICCVID.DLL MS Windows 95 / Windows NT Exe
ICFGNT5.DLL MS Windows 95 / Windows NT Exe
ICM32.DLL MS Windows 95 / Windows NT Exe
ICMP.DLL MS Windows 95 / Windows NT Exe
ICMUI.DLL MS Windows 95 / Windows NT Exe
ICWDIAL.DLL MS Windows 95 / Windows NT Exe
ICWPHBK.DLL MS Windows 95 / Windows NT Exe
IDQ.DLL MS Windows 95 / Windows NT Exe
IEAKENG.DLL MS Windows 95 / Windows NT Exe
IEAKSIE.DLL MS Windows 95 / Windows NT Exe
IEAKUI.DLL MS Windows 95 / Windows NT Exe
IEDKCS32.DLL MS Windows 95 / Windows NT Exe
IEENCODE.DLL MS Windows 95 / Windows NT Exe
IEPEERS.DLL MS Windows 95 / Windows NT Exe
IERNONCE.DLL MS Windows 95 / Windows NT Exe
IESETUP.DLL MS Windows 95 / Windows NT Exe
IFMON.DLL MS Windows 95 / Windows NT Exe
IFSUTIL.DLL MS Windows 95 / Windows NT Exe
IGFXDEV.DLL MS Windows 95 / Windows NT Exe
IGFXDGPS.DLL MS Windows 95 / Windows NT Exe
IGFXDO.DLL MS Windows 95 / Windows NT Exe
IGFXEUD.DLL MS Windows 95 / Windows NT Exe
IGFXEXPS.DLL MS Windows 95 / Windows NT Exe
IGFXHK.DLL MS Windows 95 / Windows NT Exe
IGFXPPH.DLL MS Windows 95 / Windows NT Exe
IGFXRES.DLL MS Windows 95 / Windows NT Exe
IGFXRESS.DLL MS Windows 95 / Windows NT Exe
IGFXSRVC.DLL MS Windows 95 / Windows NT Exe
IGMPAGNT.DLL MS Windows 95 / Windows NT Exe
IISSUBA.DLL MS Windows 95 / Windows NT Exe
ILS.DLL MS Windows 95 / Windows NT Exe
IMAGEHLP.DLL MS Windows 95 / Windows NT Exe
IMESHARE.DLL MS Windows 95 / Windows NT Exe
IMGUTIL.DLL MS Windows 95 / Windows NT Exe
IMM32.DLL MS Windows 95 / Windows NT Exe
INETCFG.DLL MS Windows 95 / Windows NT Exe
INETCOMM.DLL MS Windows 95 / Windows NT Exe
INETCPLC.DLL MS Windows 95 / Windows NT Exe
INETMIB1.DLL MS Windows 95 / Windows NT Exe
INETPP.DLL MS Windows 95 / Windows NT Exe
INETPPUI.DLL MS Windows 95 / Windows NT Exe
INETRES.DLL MS Windows 95 / Windows NT Exe
INFOSOFT.DLL MS Windows 95 / Windows NT Exe
INITPKI.DLL MS Windows 95 / Windows NT Exe
INPUT.DLL MS Windows 95 / Windows NT Exe
INSENG.DLL MS Windows 95 / Windows NT Exe
IOLOGMSG.DLL MS Windows 95 / Windows NT Exe
IPHLPAPI.DLL MS Windows 95 / Windows NT Exe
IPMONTR.DLL MS Windows 95 / Windows NT Exe
IPNATHLP.DLL MS Windows 95 / Windows NT Exe
IPPROMON.DLL MS Windows 95 / Windows NT Exe
IPROP.DLL MS Windows 95 / Windows NT Exe
IPRTPRIO.DLL MS Windows 95 / Windows NT Exe
IPRTRMGR.DLL MS Windows 95 / Windows NT Exe
IPSECSNP.DLL MS Windows 95 / Windows NT Exe
IPSECSVC.DLL MS Windows 95 / Windows NT Exe
IPSMSNAP.DLL MS Windows 95 / Windows NT Exe
IPV6MON.DLL MS Windows 95 / Windows NT Exe
IPXMONTR.DLL MS Windows 95 / Windows NT Exe
IPXPROMN.DLL MS Windows 95 / Windows NT Exe
IPXRIP.DLL MS Windows 95 / Windows NT Exe
IPXRTMGR.DLL MS Windows 95 / Windows NT Exe
IPXSAP.DLL MS Windows 95 / Windows NT Exe
IPXWAN.DLL MS Windows 95 / Windows NT Exe
IR32_32.DLL MS Windows 95 / Windows NT Exe
IR41_QC.DLL MS Windows 95 / Windows NT Exe
IR41_QCX.DLL MS Windows 95 / Windows NT Exe
IR50_32.DLL MS Windows 95 / Windows NT Exe
IR50_QC.DLL MS Windows 95 / Windows NT Exe
IR50_QCX.DLL MS Windows 95 / Windows NT Exe
IRCLASS.DLL MS Windows 95 / Windows NT Exe
ISIGN32.DLL MS Windows 95 / Windows NT Exe
ISRDBG32.DLL MS Windows 95 / Windows NT Exe
ITIRCL.DLL MS Windows 95 / Windows NT Exe
ITSS.DLL MS Windows 95 / Windows NT Exe
IUENGINE.DLL MS Windows 95 / Windows NT Exe
IXSSO.DLL MS Windows 95 / Windows NT Exe
IYUV_32.DLL MS Windows 95 / Windows NT Exe
JET500.DLL MS Windows 95 / Windows NT Exe
JGAW400.DLL MS Windows 95 / Windows NT Exe
JGDW400.DLL MS Windows 95 / Windows NT Exe
JGMD400.DLL MS Windows 95 / Windows NT Exe
JGPL400.DLL MS Windows 95 / Windows NT Exe
JGSD400.DLL MS Windows 95 / Windows NT Exe
JGSH400.DLL MS Windows 95 / Windows NT Exe
JOBEXEC.DLL MS Windows 95 / Windows NT Exe
JSCRIPT.DLL MS Windows 95 / Windows NT Exe
JSPROXY.DLL MS Windows 95 / Windows NT Exe
KBDAL.DLL MS Windows 95 / Windows NT Exe
KBDAZE.DLL MS Windows 95 / Windows NT Exe
KBDAZEL.DLL MS Windows 95 / Windows NT Exe
KBDBE.DLL MS Windows 95 / Windows NT Exe
KBDBENE.DLL MS Windows 95 / Windows NT Exe
KBDBLR.DLL MS Windows 95 / Windows NT Exe
KBDBR.DLL MS Windows 95 / Windows NT Exe
KBDBU.DLL MS Windows 95 / Windows NT Exe
KBDCA.DLL MS Windows 95 / Windows NT Exe
KBDCAN.DLL MS Windows 95 / Windows NT Exe
KBDCR.DLL MS Windows 95 / Windows NT Exe
KBDCZ.DLL MS Windows 95 / Windows NT Exe
KBDCZ1.DLL MS Windows 95 / Windows NT Exe
KBDCZ2.DLL MS Windows 95 / Windows NT Exe
KBDDA.DLL MS Windows 95 / Windows NT Exe
KBDDV.DLL MS Windows 95 / Windows NT Exe
KBDES.DLL MS Windows 95 / Windows NT Exe
KBDEST.DLL MS Windows 95 / Windows NT Exe
KBDFC.DLL MS Windows 95 / Windows NT Exe
KBDFI.DLL MS Windows 95 / Windows NT Exe
KBDFI1.DLL MS Windows 95 / Windows NT Exe
KBDFO.DLL MS Windows 95 / Windows NT Exe
KBDFR.DLL MS Windows 95 / Windows NT Exe
KBDGAE.DLL MS Windows 95 / Windows NT Exe
KBDGKL.DLL MS Windows 95 / Windows NT Exe
KBDGR.DLL MS Windows 95 / Windows NT Exe
KBDGR1.DLL MS Windows 95 / Windows NT Exe
KBDHE.DLL MS Windows 95 / Windows NT Exe
KBDHE220.DLL MS Windows 95 / Windows NT Exe
KBDHE319.DLL MS Windows 95 / Windows NT Exe
KBDHELA2.DLL MS Windows 95 / Windows NT Exe
KBDHELA3.DLL MS Windows 95 / Windows NT Exe
KBDHEPT.DLL MS Windows 95 / Windows NT Exe
KBDHU.DLL MS Windows 95 / Windows NT Exe
KBDHU1.DLL MS Windows 95 / Windows NT Exe
KBDIC.DLL MS Windows 95 / Windows NT Exe
KBDINBE1.DLL MS Windows 95 / Windows NT Exe
KBDINBEN.DLL MS Windows 95 / Windows NT Exe
KBDINMAL.DLL MS Windows 95 / Windows NT Exe
KBDIR.DLL MS Windows 95 / Windows NT Exe
KBDIT.DLL MS Windows 95 / Windows NT Exe
KBDIT142.DLL MS Windows 95 / Windows NT Exe
KBDKAZ.DLL MS Windows 95 / Windows NT Exe
KBDKYR.DLL MS Windows 95 / Windows NT Exe
KBDLA.DLL MS Windows 95 / Windows NT Exe
KBDLT.DLL MS Windows 95 / Windows NT Exe
KBDLT1.DLL MS Windows 95 / Windows NT Exe
KBDLV.DLL MS Windows 95 / Windows NT Exe
KBDLV1.DLL MS Windows 95 / Windows NT Exe
KBDMAC.DLL MS Windows 95 / Windows NT Exe
KBDMAORI.DLL MS Windows 95 / Windows NT Exe
KBDMLT47.DLL MS Windows 95 / Windows NT Exe
KBDMLT48.DLL MS Windows 95 / Windows NT Exe
KBDMON.DLL MS Windows 95 / Windows NT Exe
KBDNE.DLL MS Windows 95 / Windows NT Exe
KBDNEC.DLL MS Windows 95 / Windows NT Exe
KBDNO.DLL MS Windows 95 / Windows NT Exe
KBDNO1.DLL MS Windows 95 / Windows NT Exe
KBDPL.DLL MS Windows 95 / Windows NT Exe
KBDPL1.DLL MS Windows 95 / Windows NT Exe
KBDPO.DLL MS Windows 95 / Windows NT Exe
KBDRO.DLL MS Windows 95 / Windows NT Exe
KBDRU.DLL MS Windows 95 / Windows NT Exe
KBDRU1.DLL MS Windows 95 / Windows NT Exe
KBDSF.DLL MS Windows 95 / Windows NT Exe
KBDSG.DLL MS Windows 95 / Windows NT Exe
KBDSL.DLL MS Windows 95 / Windows NT Exe
KBDSL1.DLL MS Windows 95 / Windows NT Exe
KBDSMSFI.DLL MS Windows 95 / Windows NT Exe
KBDSMSNO.DLL MS Windows 95 / Windows NT Exe
KBDSP.DLL MS Windows 95 / Windows NT Exe
KBDSW.DLL MS Windows 95 / Windows NT Exe
KBDTAT.DLL MS Windows 95 / Windows NT Exe
KBDTUF.DLL MS Windows 95 / Windows NT Exe
KBDTUQ.DLL MS Windows 95 / Windows NT Exe
KBDUK.DLL MS Windows 95 / Windows NT Exe
KBDUKX.DLL MS Windows 95 / Windows NT Exe
KBDUR.DLL MS Windows 95 / Windows NT Exe
KBDUS.DLL MS Windows 95 / Windows NT Exe
KBDUSL.DLL MS Windows 95 / Windows NT Exe
KBDUSR.DLL MS Windows 95 / Windows NT Exe
KBDUSX.DLL MS Windows 95 / Windows NT Exe
KBDUZB.DLL MS Windows 95 / Windows NT Exe
KBDYCC.DLL MS Windows 95 / Windows NT Exe
KBDYCL.DLL MS Windows 95 / Windows NT Exe
KD1394.DLL MS Windows 95 / Windows NT Exe
KDCOM.DLL MS Windows 95 / Windows NT Exe
KERBEROS.DLL MS Windows 95 / Windows NT Exe
KERNEL32.DLL MS Windows 95 / Windows NT Exe
KEYMGR.DLL MS Windows 95 / Windows NT Exe
KSUSER.DLL MS Windows 95 / Windows NT Exe
LANGWRBK.DLL MS Windows 95 / Windows NT Exe
LAPRXY.DLL MS Windows 95 / Windows NT Exe
LICDLL.DLL MS Windows 95 / Windows NT Exe
LICMGR10.DLL MS Windows 95 / Windows NT Exe
LICWMI.DLL MS Windows 95 / Windows NT Exe
LINKINFO.DLL MS Windows 95 / Windows NT Exe
LMHSVC.DLL MS Windows 95 / Windows NT Exe
LMRT.DLL MS Windows 95 / Windows NT Exe
LOADPERF.DLL MS Windows 95 / Windows NT Exe
LOCALSEC.DLL MS Windows 95 / Windows NT Exe
LOCALSPL.DLL MS Windows 95 / Windows NT Exe
LOCALUI.DLL MS Windows 95 / Windows NT Exe
LOGHOURS.DLL MS Windows 95 / Windows NT Exe
LPK.DLL MS Windows 95 / Windows NT Exe
LPRHELP.DLL MS Windows 95 / Windows NT Exe
LPRMONUI.DLL MS Windows 95 / Windows NT Exe
LSASRV.DLL MS Windows 95 / Windows NT Exe
LZ32.DLL MS Windows 95 / Windows NT Exe
LZEXPAND.DLL MS Windows: "Windows file expansion library"
MAG_HOOK.DLL MS Windows 95 / Windows NT Exe
MAPI.DLL MS Windows: "Extended MAPI 1.0"
MAPI32.DLL MS Windows 95 / Windows NT Exe
MAPISTUB.DLL MS Windows 95 / Windows NT Exe
MCASTMIB.DLL MS Windows 95 / Windows NT Exe
MCD32.DLL MS Windows 95 / Windows NT Exe
MCDSRV32.DLL MS Windows 95 / Windows NT Exe
MCHGRCOI.DLL MS Windows 95 / Windows NT Exe
MCIAVI32.DLL MS Windows 95 / Windows NT Exe
MCICDA.DLL MS Windows 95 / Windows NT Exe
MCIOLE16.DLL MS Windows: "OLE handler DLL for MCI objects"
MCIOLE32.DLL MS Windows 95 / Windows NT Exe
MCIQTZ32.DLL MS Windows 95 / Windows NT Exe
MCISEQ.DLL MS Windows 95 / Windows NT Exe
MCIWAVE.DLL MS Windows 95 / Windows NT Exe
MDHCP.DLL MS Windows 95 / Windows NT Exe
MDMINST.DLL MS Windows 95 / Windows NT Exe
MDMXSDK.DLL MS Windows 95 / Windows NT Exe
MDT2FW95.DLL MS Windows 95 / Windows NT Exe
MDWMDMSP.DLL MS Windows 95 / Windows NT Exe
MF3216.DLL MS Windows 95 / Windows NT Exe
MFC40.DLL MS Windows 95 / Windows NT Exe
MFC40U.DLL MS Windows 95 / Windows NT Exe
MFC42.DLL MS Windows 95 / Windows NT Exe
MFC42ENU.DLL MS Windows 95 / Windows NT Exe
MFC42U.DLL MS Windows 95 / Windows NT Exe
MFCANS32.DLL MS Windows 95 / Windows NT Exe
MFCSUBS.DLL MS Windows 95 / Windows NT Exe
MGMTAPI.DLL MS Windows 95 / Windows NT Exe
MIDIMAP.DLL MS Windows 95 / Windows NT Exe
MIGLIBNT.DLL MS Windows 95 / Windows NT Exe
MIMEFILT.DLL MS Windows 95 / Windows NT Exe
MINDEX.DLL MS Windows 95 / Windows NT Exe
MLANG.DLL MS Windows 95 / Windows NT Exe
MLL_HP.DLL MS Windows 95 / Windows NT Exe
MLL_MTF.DLL MS Windows 95 / Windows NT Exe
MLL_QIC.DLL MS Windows 95 / Windows NT Exe
MMCBASE.DLL MS Windows 95 / Windows NT Exe
MMCNDMGR.DLL MS Windows 95 / Windows NT Exe
MMCSHEXT.DLL MS Windows 95 / Windows NT Exe
MMDRV.DLL MS Windows 95 / Windows NT Exe
MMFUTIL.DLL MS Windows 95 / Windows NT Exe
MMSYSTEM.DLL MS Windows: "System APIs for Multimedia"
MMUTILSE.DLL MS Windows 95 / Windows NT Exe
MNMDD.DLL MS Windows 95 / Windows NT Exe
MOBSYNC.DLL MS Windows 95 / Windows NT Exe
MODEMUI.DLL MS Windows 95 / Windows NT Exe
MODEX.DLL MS Windows 95 / Windows NT Exe
MORICONS.DLL MS Windows 95 / Windows NT Exe
MP43DMOD.DLL MS Windows 95 / Windows NT Exe
MP4SDMOD.DLL MS Windows 95 / Windows NT Exe
MPG4DMOD.DLL MS Windows 95 / Windows NT Exe
MPR.DLL MS Windows 95 / Windows NT Exe
MPRAPI.DLL MS Windows 95 / Windows NT Exe
MPRDDM.DLL MS Windows 95 / Windows NT Exe
MPRDIM.DLL MS Windows 95 / Windows NT Exe
MPRMSG.DLL MS Windows 95 / Windows NT Exe
MPRUI.DLL MS Windows 95 / Windows NT Exe
MQAD.DLL MS Windows 95 / Windows NT Exe
MQCERTUI.DLL MS Windows 95 / Windows NT Exe
MQDSCLI.DLL MS Windows 95 / Windows NT Exe
MQGENTR.DLL MS Windows 95 / Windows NT Exe
MQISE.DLL MS Windows 95 / Windows NT Exe
MQLOGMGR.DLL MS Windows 95 / Windows NT Exe
MQOA.DLL MS Windows 95 / Windows NT Exe
MQPERF.DLL MS Windows 95 / Windows NT Exe
MQQM.DLL MS Windows 95 / Windows NT Exe
MQRT.DLL MS Windows 95 / Windows NT Exe
MQRTDEP.DLL MS Windows 95 / Windows NT Exe
MQSEC.DLL MS Windows 95 / Windows NT Exe
MQSNAP.DLL MS Windows 95 / Windows NT Exe
MQTRIG.DLL MS Windows 95 / Windows NT Exe
MQUPGRD.DLL MS Windows 95 / Windows NT Exe
MQUTIL.DLL MS Windows 95 / Windows NT Exe
MSAATEXT.DLL MS Windows 95 / Windows NT Exe
MSACM.DLL MS Windows: "Microsoft Audio Compression Manager"
MSACM32.DLL MS Windows 95 / Windows NT Exe
MSAFD.DLL MS Windows 95 / Windows NT Exe
MSAPSSPC.DLL MS Windows 95 / Windows NT Exe
MSASN1.DLL MS Windows 95 / Windows NT Exe
MSAUDITE.DLL MS Windows 95 / Windows NT Exe
MSCAT32.DLL MS Windows 95 / Windows NT Exe
MSCMS.DLL MS Windows 95 / Windows NT Exe
MSCONF.DLL MS Windows 95 / Windows NT Exe
MSCPX32R.DLL MS Windows 95 / Windows NT Exe
MSCPXL32.DLL MS Windows 95 / Windows NT Exe
MSCTF.DLL MS Windows 95 / Windows NT Exe
MSCTFP.DLL MS Windows 95 / Windows NT Exe
MSDADIAG.DLL MS Windows 95 / Windows NT Exe
MSDART.DLL MS Windows 95 / Windows NT Exe
MSDMO.DLL MS Windows 95 / Windows NT Exe
MSDTCLOG.DLL MS Windows 95 / Windows NT Exe
MSDTCPRX.DLL MS Windows 95 / Windows NT Exe
MSDTCTM.DLL MS Windows 95 / Windows NT Exe
MSDTCUIU.DLL MS Windows 95 / Windows NT Exe
MSDXMLC.DLL MS Windows 95 / Windows NT Exe
MSENCODE.DLL MS Windows 95 / Windows NT Exe
MSEXCH40.DLL MS Windows 95 / Windows NT Exe
MSEXCL40.DLL MS Windows 95 / Windows NT Exe
MSFTEDIT.DLL MS Windows 95 / Windows NT Exe
MSGINA.DLL MS Windows 95 / Windows NT Exe
MSGSVC.DLL MS Windows 95 / Windows NT Exe
MSHTML.DLL MS Windows 95 / Windows NT Exe
MSHTMLED.DLL MS Windows 95 / Windows NT Exe
MSHTMLER.DLL MS Windows 95 / Windows NT Exe
MSI.DLL MS Windows 95 / Windows NT Exe
MSIDENT.DLL MS Windows 95 / Windows NT Exe
MSIDLE.DLL MS Windows 95 / Windows NT Exe
MSIDNTLD.DLL MS Windows 95 / Windows NT Exe
MSIEFTP.DLL MS Windows 95 / Windows NT Exe
MSIHND.DLL MS Windows 95 / Windows NT Exe
MSIMG32.DLL MS Windows 95 / Windows NT Exe
MSIMRT.DLL MS Windows 95 / Windows NT Exe
MSIMRT16.DLL MS Windows: "MSIMRT16 DLL © 1996 Microsoft"
MSIMRT32.DLL MS Windows 95 / Windows NT Exe
MSIMSG.DLL MS Windows 95 / Windows NT Exe
MSIMTF.DLL MS Windows 95 / Windows NT Exe
MSIMUSIC.DLL MS Windows 95 / Windows NT Exe
MSISAM11.DLL MS Windows 95 / Windows NT Exe
MSISIP.DLL MS Windows 95 / Windows NT Exe
MSJET40.DLL MS Windows 95 / Windows NT Exe
MSJETO~1.DLL MS Windows 95 / Windows NT Exe
MSJINT40.DLL MS Windows 95 / Windows NT Exe
MSJTER40.DLL MS Windows 95 / Windows NT Exe
MSJTES40.DLL MS Windows 95 / Windows NT Exe
MSLBUI.DLL MS Windows 95 / Windows NT Exe
MSLS31.DLL MS Windows 95 / Windows NT Exe
MSLTUS40.DLL MS Windows 95 / Windows NT Exe
MSNETOBJ.DLL MS Windows 95 / Windows NT Exe
MSNSSPC.DLL MS Windows 95 / Windows NT Exe
MSOBJS.DLL MS Windows 95 / Windows NT Exe
MSOEACCT.DLL MS Windows 95 / Windows NT Exe
MSOERT2.DLL MS Windows 95 / Windows NT Exe
MSORC32R.DLL MS Windows 95 / Windows NT Exe
MSORCL32.DLL MS Windows 95 / Windows NT Exe
MSPATCHA.DLL MS Windows 95 / Windows NT Exe
MSPBDE40.DLL MS Windows 95 / Windows NT Exe
MSPMSNSV.DLL MS Windows 95 / Windows NT Exe
MSPMSP.DLL MS Windows 95 / Windows NT Exe
MSPORTS.DLL MS Windows 95 / Windows NT Exe
MSPRIVS.DLL MS Windows 95 / Windows NT Exe
MSR2C.DLL MS Windows 95 / Windows NT Exe
MSR2CENU.DLL MS Windows 95 / Windows NT Exe
MSRATELC.DLL MS Windows 95 / Windows NT Exe
MSRATING.DLL MS Windows 95 / Windows NT Exe
MSRCLR40.DLL MS Windows 95 / Windows NT Exe
MSRD2X40.DLL MS Windows 95 / Windows NT Exe
MSRD3X40.DLL MS Windows 95 / Windows NT Exe
MSRDO20.DLL MS Windows 95 / Windows NT Exe
MSRECR40.DLL MS Windows 95 / Windows NT Exe
MSREPL40.DLL MS Windows 95 / Windows NT Exe
MSRLE32.DLL MS Windows 95 / Windows NT Exe
MSRTEDIT.DLL MS Windows 95 / Windows NT Exe
MSSAP.DLL MS Windows 95 / Windows NT Exe
MSSCP.DLL MS Windows 95 / Windows NT Exe
MSSIGN32.DLL MS Windows 95 / Windows NT Exe
MSSIP32.DLL MS Windows 95 / Windows NT Exe
MSSSC.DLL Binary file
MSSTDFMT.DLL MS Windows 95 / Windows NT Exe
MSSTKPRP.DLL MS Windows 95 / Windows NT Exe
MSSWCH.DLL MS Windows 95 / Windows NT Exe
MSTASK.DLL MS Windows 95 / Windows NT Exe
MSTEXT40.DLL MS Windows 95 / Windows NT Exe
MSTIME.DLL MS Windows 95 / Windows NT Exe
MSTLSAPI.DLL MS Windows 95 / Windows NT Exe
MSTSCAX.DLL MS Windows 95 / Windows NT Exe
MSUNI11.DLL MS Windows 95 / Windows NT Exe
MSUTB.DLL MS Windows 95 / Windows NT Exe
MSV1_0.DLL MS Windows 95 / Windows NT Exe
MSVBVM50.DLL MS Windows 95 / Windows NT Exe
MSVBVM60.DLL MS Windows 95 / Windows NT Exe
MSVCIRT.DLL MS Windows 95 / Windows NT Exe
MSVCP50.DLL MS Windows 95 / Windows NT Exe
MSVCP60.DLL MS Windows 95 / Windows NT Exe
MSVCRT.DLL MS Windows 95 / Windows NT Exe
MSVCRT20.DLL MS Windows 95 / Windows NT Exe
MSVCRT40.DLL MS Windows 95 / Windows NT Exe
MSVFW32.DLL MS Windows 95 / Windows NT Exe
MSVIDC32.DLL MS Windows 95 / Windows NT Exe
MSVIDCTL.DLL MS Windows 95 / Windows NT Exe
MSVIDEO.DLL MS Windows: "Microsoft Video For Windows APIs"
MSW3PRT.DLL MS Windows 95 / Windows NT Exe
MSWDAT10.DLL MS Windows 95 / Windows NT Exe
MSWEBDVD.DLL MS Windows 95 / Windows NT Exe
MSWMDM.DLL MS Windows 95 / Windows NT Exe
MSWSOCK.DLL MS Windows 95 / Windows NT Exe
MSWSTR10.DLL MS Windows 95 / Windows NT Exe
MSXBDE40.DLL MS Windows 95 / Windows NT Exe
MSXML.DLL MS Windows 95 / Windows NT Exe
MSXML2.DLL MS Windows 95 / Windows NT Exe
MSXML2R.DLL MS Windows 95 / Windows NT Exe
MSXML3.DLL MS Windows 95 / Windows NT Exe
MSXML3R.DLL MS Windows 95 / Windows NT Exe
MSXMLR.DLL MS Windows 95 / Windows NT Exe
MSYUV.DLL MS Windows 95 / Windows NT Exe
MTXCLU.DLL MS Windows 95 / Windows NT Exe
MTXDM.DLL MS Windows 95 / Windows NT Exe
MTXEX.DLL MS Windows 95 / Windows NT Exe
MTXLEGIH.DLL MS Windows 95 / Windows NT Exe
MTXOCI.DLL MS Windows 95 / Windows NT Exe
MTXPARHD.DLL MS Windows 95 / Windows NT Exe
MYCOMPUT.DLL MS Windows 95 / Windows NT Exe
MYDOCS.DLL MS Windows 95 / Windows NT Exe
NARRHOOK.DLL MS Windows 95 / Windows NT Exe
NCOBJAPI.DLL MS Windows 95 / Windows NT Exe
NCXPNT.DLL MS Windows 95 / Windows NT Exe
NDDEAPI.DLL MS Windows 95 / Windows NT Exe
NDDENB32.DLL MS Windows 95 / Windows NT Exe
NETAPI.DLL MS Windows: "Microsoft LAN Manager API Library, Copyright© M..."
NETAPI32.DLL MS Windows 95 / Windows NT Exe
NETCFGX.DLL MS Windows 95 / Windows NT Exe
NETEVENT.DLL MS Windows 95 / Windows NT Exe
NETH.DLL MS Windows 95 / Windows NT Exe
NETID.DLL MS Windows 95 / Windows NT Exe
NETLOGON.DLL MS Windows 95 / Windows NT Exe
NETMAN.DLL MS Windows 95 / Windows NT Exe
NETMSG.DLL MS Windows 95 / Windows NT Exe
NETPLWIZ.DLL MS Windows 95 / Windows NT Exe
NETRAP.DLL MS Windows 95 / Windows NT Exe
NETSHELL.DLL MS Windows 95 / Windows NT Exe
NETUI0.DLL MS Windows 95 / Windows NT Exe
NETUI1.DLL MS Windows 95 / Windows NT Exe
NETUI2.DLL MS Windows 95 / Windows NT Exe
NEWDEV.DLL MS Windows 95 / Windows NT Exe
NLHTML.DLL MS Windows 95 / Windows NT Exe
NMEVTMSG.DLL MS Windows 95 / Windows NT Exe
NMMKCERT.DLL MS Windows 95 / Windows NT Exe
NPPTOOLS.DLL MS Windows 95 / Windows NT Exe
NTDLL.DLL MS Windows 95 / Windows NT Exe
NTDSAPI.DLL MS Windows 95 / Windows NT Exe
NTDSBCLI.DLL MS Windows 95 / Windows NT Exe
NTLANMAN.DLL MS Windows 95 / Windows NT Exe
NTLANUI.DLL MS Windows 95 / Windows NT Exe
NTLANUI2.DLL MS Windows 95 / Windows NT Exe
NTLSAPI.DLL MS Windows 95 / Windows NT Exe
NTMARTA.DLL MS Windows 95 / Windows NT Exe
NTMSAPI.DLL MS Windows 95 / Windows NT Exe
NTMSDBA.DLL MS Windows 95 / Windows NT Exe
NTMSEVT.DLL MS Windows 95 / Windows NT Exe
NTMSMGR.DLL MS Windows 95 / Windows NT Exe
NTMSSVC.DLL MS Windows 95 / Windows NT Exe
NTPRINT.DLL MS Windows 95 / Windows NT Exe
NTSDEXTS.DLL MS Windows 95 / Windows NT Exe
NTSHRUI.DLL MS Windows 95 / Windows NT Exe
NTVDMD.DLL MS Windows 95 / Windows NT Exe
NV4_DISP.DLL MS Windows 95 / Windows NT Exe
NWAPI16.DLL MS Windows 95 / Windows NT Exe
NWAPI32.DLL MS Windows 95 / Windows NT Exe
NWCFG.DLL MS Windows 95 / Windows NT Exe
NWEVENT.DLL MS Windows 95 / Windows NT Exe
NWNSP32.DLL MS Windows 95 / Windows NT Exe
NWPROVAU.DLL MS Windows 95 / Windows NT Exe
NWWKS.DLL MS Windows 95 / Windows NT Exe
OAKLEY.DLL MS Windows 95 / Windows NT Exe
OBJSEL.DLL MS Windows 95 / Windows NT Exe
OC30.DLL MS Windows 95 / Windows NT Exe
OCCACHE.DLL MS Windows 95 / Windows NT Exe
OCMANAGE.DLL MS Windows 95 / Windows NT Exe
ODBC16GT.DLL MS Windows: "ODBC Generic Thunk API library (16-bit), Copyrigh..."
ODBC32.DLL MS Windows 95 / Windows NT Exe
ODBC32GT.DLL MS Windows 95 / Windows NT Exe
ODBCBCP.DLL MS Windows 95 / Windows NT Exe
ODBCCONF.DLL MS Windows 95 / Windows NT Exe
ODBCCP32.DLL MS Windows 95 / Windows NT Exe
ODBCCR32.DLL MS Windows 95 / Windows NT Exe
ODBCCU32.DLL MS Windows 95 / Windows NT Exe
ODBCINT.DLL MS Windows 95 / Windows NT Exe
ODBCJI32.DLL MS Windows 95 / Windows NT Exe
ODBCJT32.DLL MS Windows 95 / Windows NT Exe
ODBCP32R.DLL MS Windows 95 / Windows NT Exe
ODBCTRAC.DLL MS Windows 95 / Windows NT Exe
ODDBSE32.DLL MS Windows 95 / Windows NT Exe
ODEXL32.DLL MS Windows 95 / Windows NT Exe
ODFOX32.DLL MS Windows 95 / Windows NT Exe
ODPDX32.DLL MS Windows 95 / Windows NT Exe
ODTEXT32.DLL MS Windows 95 / Windows NT Exe
OFFFILT.DLL MS Windows 95 / Windows NT Exe
OLE2.DLL MS Windows: "obj\i386\ole2.exe"
OLE2DISP.DLL MS Windows: "OLE Automation Library"
OLE2NLS.DLL MS Windows: "National Language Support Library"
OLE32.DLL MS Windows 95 / Windows NT Exe
OLEACC.DLL MS Windows 95 / Windows NT Exe
OLEACCRC.DLL MS Windows 95 / Windows NT Exe
OLEAUT32.DLL MS Windows 95 / Windows NT Exe
OLECLI.DLL MS Windows: "OLE Client. support © Copyright Microsoft Corp...."
OLECLI32.DLL MS Windows 95 / Windows NT Exe
OLECNV32.DLL MS Windows 95 / Windows NT Exe
OLEDLG.DLL MS Windows 95 / Windows NT Exe
OLEPRN.DLL MS Windows 95 / Windows NT Exe
OLEPRO32.DLL MS Windows 95 / Windows NT Exe
OLESVR.DLL MS Windows: "OLE Server. © Copyright Microsoft Corp. 1990 - ..."
OLESVR32.DLL MS Windows 95 / Windows NT Exe
OLETHK32.DLL MS Windows 95 / Windows NT Exe
OPENGL32.DLL MS Windows 95 / Windows NT Exe
OSUNINST.DLL MS Windows 95 / Windows NT Exe
OUTLWAB.DLL MS Windows 95 / Windows NT Exe
P2P.DLL MS Windows 95 / Windows NT Exe
P2PGASVC.DLL MS Windows 95 / Windows NT Exe
P2PGRAPH.DLL MS Windows 95 / Windows NT Exe
P2PNETSH.DLL MS Windows 95 / Windows NT Exe
P2PSVC.DLL MS Windows 95 / Windows NT Exe
PANMAP.DLL MS Windows 95 / Windows NT Exe
PAQSP.DLL MS Windows 95 / Windows NT Exe
PAUTOENR.DLL MS Windows 95 / Windows NT Exe
PCIGINA.DLL MS Windows 95 / Windows NT Exe
PCIMON.DLL MS Windows 95 / Windows NT Exe
PCIMSG.DLL MS Windows 95 / Windows NT Exe
PCIVDD.DLL MS Windows 95 / Windows NT Exe
PDH.DLL MS Windows 95 / Windows NT Exe
PERFCTRS.DLL MS Windows 95 / Windows NT Exe
PERFDISK.DLL MS Windows 95 / Windows NT Exe
PERFNET.DLL MS Windows 95 / Windows NT Exe
PERFNW.DLL MS Windows 95 / Windows NT Exe
PERFOS.DLL MS Windows 95 / Windows NT Exe
PERFPROC.DLL MS Windows 95 / Windows NT Exe
PERFTS.DLL MS Windows 95 / Windows NT Exe
PHOTOWIZ.DLL MS Windows 95 / Windows NT Exe
PID.DLL MS Windows 95 / Windows NT Exe
PIDGEN.DLL MS Windows 95 / Windows NT Exe
PIFMGR.DLL MS Windows 95 / Windows NT Exe
PJLMON.DLL MS Windows 95 / Windows NT Exe
PLUSTAB.DLL MS Windows 95 / Windows NT Exe
PMSPL.DLL MS Windows: "Microsoft LAN Manager Spooler APIs, Copyright© ..."
PNGFILT.DLL MS Windows 95 / Windows NT Exe
PNRPNSP.DLL MS Windows 95 / Windows NT Exe
POLSTORE.DLL MS Windows 95 / Windows NT Exe
POWRPROF.DLL MS Windows 95 / Windows NT Exe
PRFLBMSG.DLL MS Windows 95 / Windows NT Exe
PRINTUI.DLL MS Windows 95 / Windows NT Exe
PROFMAP.DLL MS Windows 95 / Windows NT Exe
PSAPI.DLL MS Windows 95 / Windows NT Exe
PSBASE.DLL MS Windows 95 / Windows NT Exe
PSCHDPRF.DLL MS Windows 95 / Windows NT Exe
PSISDECD.DLL MS Windows 95 / Windows NT Exe
PSNPPAGN.DLL MS Windows 95 / Windows NT Exe
PSTOREC.DLL MS Windows 95 / Windows NT Exe
PSTORSVC.DLL MS Windows 95 / Windows NT Exe
QASF.DLL MS Windows 95 / Windows NT Exe
QCAP.DLL MS Windows 95 / Windows NT Exe
QDV.DLL MS Windows 95 / Windows NT Exe
QDVD.DLL MS Windows 95 / Windows NT Exe
QEDIT.DLL MS Windows 95 / Windows NT Exe
QEDWIPES.DLL MS Windows 95 / Windows NT Exe
QMGR.DLL MS Windows 95 / Windows NT Exe
QMGRPRXY.DLL MS Windows 95 / Windows NT Exe
QOSNAME.DLL MS Windows 95 / Windows NT Exe
QUARTZ.DLL MS Windows 95 / Windows NT Exe
QUERY.DLL MS Windows 95 / Windows NT Exe
RACPLDLG.DLL MS Windows 95 / Windows NT Exe
RASADHLP.DLL MS Windows 95 / Windows NT Exe
RASAPI32.DLL MS Windows 95 / Windows NT Exe
RASAUTO.DLL MS Windows 95 / Windows NT Exe
RASCHAP.DLL MS Windows 95 / Windows NT Exe
RASCTRS.DLL MS Windows 95 / Windows NT Exe
RASDLG.DLL MS Windows 95 / Windows NT Exe
RASMAN.DLL MS Windows 95 / Windows NT Exe
RASMANS.DLL MS Windows 95 / Windows NT Exe
RASMONTR.DLL MS Windows 95 / Windows NT Exe
RASMXS.DLL MS Windows 95 / Windows NT Exe
RASPPP.DLL MS Windows 95 / Windows NT Exe
RASRAD.DLL MS Windows 95 / Windows NT Exe
RASSAPI.DLL MS Windows 95 / Windows NT Exe
RASSER.DLL MS Windows 95 / Windows NT Exe
RASTAPI.DLL MS Windows 95 / Windows NT Exe
RASTLS.DLL MS Windows 95 / Windows NT Exe
RCBDYCTL.DLL MS Windows 95 / Windows NT Exe
RDCHOST.DLL MS Windows 95 / Windows NT Exe
RDOCURS.DLL MS Windows 95 / Windows NT Exe
RDPCFGEX.DLL MS Windows 95 / Windows NT Exe
RDPDD.DLL MS Windows 95 / Windows NT Exe
RDPSND.DLL MS Windows 95 / Windows NT Exe
RDPWSX.DLL MS Windows 95 / Windows NT Exe
REGAPI.DLL MS Windows 95 / Windows NT Exe
REGSVC.DLL MS Windows 95 / Windows NT Exe
REGWIZC.DLL MS Windows 95 / Windows NT Exe
REMOTEPG.DLL MS Windows 95 / Windows NT Exe
REND.DLL MS Windows 95 / Windows NT Exe
RESUTILS.DLL MS Windows 95 / Windows NT Exe
RICHED20.DLL MS Windows 95 / Windows NT Exe
RICHED32.DLL MS Windows 95 / Windows NT Exe
RNR20.DLL MS Windows 95 / Windows NT Exe
ROBOEX32.DLL MS Windows 95 / Windows NT Exe
ROUTETAB.DLL MS Windows 95 / Windows NT Exe
RPCNS4.DLL MS Windows 95 / Windows NT Exe
RPCRT4.DLL MS Windows 95 / Windows NT Exe
RPCSS.DLL MS Windows 95 / Windows NT Exe
RSAENH.DLL MS Windows 95 / Windows NT Exe
RSFSAPS.DLL MS Windows 95 / Windows NT Exe
RSHX32.DLL MS Windows 95 / Windows NT Exe
RSMPS.DLL MS Windows 95 / Windows NT Exe
RSVPMSG.DLL MS Windows 95 / Windows NT Exe
RSVPPERF.DLL MS Windows 95 / Windows NT Exe
RSVPSP.DLL MS Windows 95 / Windows NT Exe
RTIPXMIB.DLL MS Windows 95 / Windows NT Exe
RTM.DLL MS Windows 95 / Windows NT Exe
RTUTILS.DLL MS Windows 95 / Windows NT Exe
S11THK32.DLL MS Windows 95 / Windows NT Exe
S3GNB.DLL MS Windows 95 / Windows NT Exe
SAFRCDLG.DLL MS Windows 95 / Windows NT Exe
SAFRDM.DLL MS Windows 95 / Windows NT Exe
SAFRSLV.DLL MS Windows 95 / Windows NT Exe
SAMLIB.DLL MS Windows 95 / Windows NT Exe
SAMSRV.DLL MS Windows 95 / Windows NT Exe
SBE.DLL MS Windows 95 / Windows NT Exe
SBEIO.DLL MS Windows 95 / Windows NT Exe
SCARDDLG.DLL MS Windows 95 / Windows NT Exe
SCARDSSP.DLL MS Windows 95 / Windows NT Exe
SCCBASE.DLL MS Windows 95 / Windows NT Exe
SCCSCCP.DLL MS Windows 95 / Windows NT Exe
SCECLI.DLL MS Windows 95 / Windows NT Exe
SCESRV.DLL MS Windows 95 / Windows NT Exe
SCHANNEL.DLL MS Windows 95 / Windows NT Exe
SCHEDSVC.DLL MS Windows 95 / Windows NT Exe
SCLGNTFY.DLL MS Windows 95 / Windows NT Exe
SCP32.DLL MS Windows 95 / Windows NT Exe
SCREDIR.DLL MS Windows 95 / Windows NT Exe
SCRIPTO.DLL MS Windows 95 / Windows NT Exe
SCRIPTPW.DLL MS Windows 95 / Windows NT Exe
SCROBJ.DLL MS Windows 95 / Windows NT Exe
SCRRUN.DLL MS Windows 95 / Windows NT Exe
SDHCINST.DLL MS Windows 95 / Windows NT Exe
SDPBLB.DLL MS Windows 95 / Windows NT Exe
SECLOGON.DLL MS Windows 95 / Windows NT Exe
SECUR32.DLL MS Windows 95 / Windows NT Exe
SECURITY.DLL MS Windows 95 / Windows NT Exe
SENDCMSG.DLL MS Windows 95 / Windows NT Exe
SENDMAIL.DLL MS Windows 95 / Windows NT Exe
SENS.DLL MS Windows 95 / Windows NT Exe
SENSAPI.DLL MS Windows 95 / Windows NT Exe
SENSCFG.DLL MS Windows 95 / Windows NT Exe
SERIALUI.DLL MS Windows 95 / Windows NT Exe
SERVDEPS.DLL MS Windows 95 / Windows NT Exe
SERWVDRV.DLL MS Windows 95 / Windows NT Exe
SETUPAPI.DLL MS Windows 95 / Windows NT Exe
SETUPDLL.DLL MS Windows 95 / Windows NT Exe
SFC.DLL MS Windows 95 / Windows NT Exe
SFCFILES.DLL MS Windows 95 / Windows NT Exe
SFC_OS.DLL MS Windows 95 / Windows NT Exe
SFMAPI.DLL MS Windows 95 / Windows NT Exe
SHDOCLC.DLL MS Windows 95 / Windows NT Exe
SHDOCVW.DLL MS Windows 95 / Windows NT Exe
SHELL.DLL MS Windows: "WOW REPLACEMENT SHELL"
SHELL32.DLL MS Windows 95 / Windows NT Exe
SHELLS~1.DLL MS Windows 95 / Windows NT Exe
SHFOLDER.DLL MS Windows 95 / Windows NT Exe
SHGINA.DLL MS Windows 95 / Windows NT Exe
SHIMENG.DLL MS Windows 95 / Windows NT Exe
SHIMGVW.DLL MS Windows 95 / Windows NT Exe
SHLWAPI.DLL MS Windows 95 / Windows NT Exe
SHMEDIA.DLL MS Windows 95 / Windows NT Exe
SHSCRAP.DLL MS Windows 95 / Windows NT Exe
SHSVCS.DLL MS Windows 95 / Windows NT Exe
SIGTAB.DLL MS Windows 95 / Windows NT Exe
SISBKUP.DLL MS Windows 95 / Windows NT Exe
SKDLL.DLL MS Windows 95 / Windows NT Exe
SLAYERXP.DLL MS Windows 95 / Windows NT Exe
SLBCSP.DLL MS Windows 95 / Windows NT Exe
SLBIOP.DLL MS Windows 95 / Windows NT Exe
SLBRCCSP.DLL MS Windows 95 / Windows NT Exe
SLCOINST.DLL MS Windows 95 / Windows NT Exe
SLEXTSPK.DLL MS Windows 95 / Windows NT Exe
SLGEN.DLL MS Windows 95 / Windows NT Exe
SMLOGCFG.DLL MS Windows 95 / Windows NT Exe
SMMEDIA.DLL MS Windows 95 / Windows NT Exe
SNMPAPI.DLL MS Windows 95 / Windows NT Exe
SNMPSNAP.DLL MS Windows 95 / Windows NT Exe
SOFTPUB.DLL MS Windows 95 / Windows NT Exe
SPMSG.DLL MS Windows 95 / Windows NT Exe
SPNIKE.DLL MS Windows 95 / Windows NT Exe
SPOOLSS.DLL MS Windows 95 / Windows NT Exe
SPRIO600.DLL MS Windows 95 / Windows NT Exe
SPRIO800.DLL MS Windows 95 / Windows NT Exe
SPXCOINS.DLL MS Windows 95 / Windows NT Exe
SQLSRV32.DLL MS Windows 95 / Windows NT Exe
SQLUNIRL.DLL MS Windows 95 / Windows NT Exe
SQLWID.DLL MS Windows 95 / Windows NT Exe
SQLWOA.DLL MS Windows 95 / Windows NT Exe
SRCLIENT.DLL MS Windows 95 / Windows NT Exe
SRRSTR.DLL MS Windows 95 / Windows NT Exe
SRSVC.DLL MS Windows 95 / Windows NT Exe
SRVSVC.DLL MS Windows 95 / Windows NT Exe
SSDPAPI.DLL MS Windows 95 / Windows NT Exe
SSDPSRV.DLL MS Windows 95 / Windows NT Exe
STCLIENT.DLL MS Windows 95 / Windows NT Exe
STI.DLL MS Windows 95 / Windows NT Exe
STI_CI.DLL MS Windows 95 / Windows NT Exe
STOBJECT.DLL MS Windows 95 / Windows NT Exe
STORAGE.DLL MS Windows: "obj\i386\storage.exe"
STORPROP.DLL MS Windows 95 / Windows NT Exe
STREAMCI.DLL MS Windows 95 / Windows NT Exe
STRMDLL.DLL MS Windows 95 / Windows NT Exe
STRMFILT.DLL MS Windows 95 / Windows NT Exe
SVCPACK.DLL MS Windows 95 / Windows NT Exe
SWPRV.DLL MS Windows 95 / Windows NT Exe
SXS.DLL MS Windows 95 / Windows NT Exe
SYNCENG.DLL MS Windows 95 / Windows NT Exe
SYNCOR11.DLL MS Windows 95 / Windows NT Exe
SYNCUI.DLL MS Windows 95 / Windows NT Exe
SYNTHC~1.DLL MS Windows 95 / Windows NT Exe
SYSINV.DLL MS Windows 95 / Windows NT Exe
SYSSETUP.DLL MS Windows 95 / Windows NT Exe
T2EMBED.DLL MS Windows 95 / Windows NT Exe
TAPI.DLL MS Windows: "obj\i386\tapi.exe"
TAPI3.DLL MS Windows 95 / Windows NT Exe
TAPI32.DLL MS Windows 95 / Windows NT Exe
TAPIPERF.DLL MS Windows 95 / Windows NT Exe
TAPISRV.DLL MS Windows 95 / Windows NT Exe
TAPIUI.DLL MS Windows 95 / Windows NT Exe
TCPMIB.DLL MS Windows 95 / Windows NT Exe
TCPMON.DLL MS Windows 95 / Windows NT Exe
TCPMONUI.DLL MS Windows 95 / Windows NT Exe
TERMMGR.DLL MS Windows 95 / Windows NT Exe
TERMSRV.DLL MS Windows 95 / Windows NT Exe
THEMEUI.DLL MS Windows 95 / Windows NT Exe
TLNTSVRP.DLL MS Windows 95 / Windows NT Exe
TOOLHELP.DLL MS Windows: "TOOLHELP for WOW - Debug/Tool Helper library"
TRAFFIC.DLL MS Windows 95 / Windows NT Exe
TRKWKS.DLL MS Windows 95 / Windows NT Exe
TSAPPCMP.DLL MS Windows 95 / Windows NT Exe
TSBYUV.DLL MS Windows 95 / Windows NT Exe
TSCFGWMI.DLL MS Windows 95 / Windows NT Exe
TSD32.DLL MS Windows 95 / Windows NT Exe
TSDDD.DLL MS Windows 95 / Windows NT Exe
TWEXT.DLL MS Windows 95 / Windows NT Exe
TXFLOG.DLL MS Windows 95 / Windows NT Exe
TYPELIB.DLL MS Windows: "OLE Automation Type Information Interfaces"
UDHISAPI.DLL MS Windows 95 / Windows NT Exe
UFAT.DLL MS Windows 95 / Windows NT Exe
ULIB.DLL MS Windows 95 / Windows NT Exe
UMANDLG.DLL MS Windows 95 / Windows NT Exe
UMDMXFRM.DLL MS Windows 95 / Windows NT Exe
UMPNPMGR.DLL MS Windows 95 / Windows NT Exe
UNIMDMAT.DLL MS Windows 95 / Windows NT Exe
UNIPLAT.DLL MS Windows 95 / Windows NT Exe
UNTFS.DLL MS Windows 95 / Windows NT Exe
UPNP.DLL MS Windows 95 / Windows NT Exe
UPNPHOST.DLL MS Windows 95 / Windows NT Exe
UPNPUI.DLL MS Windows 95 / Windows NT Exe
UREG.DLL MS Windows 95 / Windows NT Exe
URL.DLL MS Windows 95 / Windows NT Exe
URLMON.DLL MS Windows 95 / Windows NT Exe
USBMON.DLL MS Windows 95 / Windows NT Exe
USBUI.DLL MS Windows 95 / Windows NT Exe
USER32.DLL MS Windows 95 / Windows NT Exe
USERENV.DLL MS Windows 95 / Windows NT Exe
USP10.DLL MS Windows 95 / Windows NT Exe
USRCNTRA.DLL MS Windows 95 / Windows NT Exe
USRCOINA.DLL MS Windows 95 / Windows NT Exe
USRDPA.DLL MS Windows 95 / Windows NT Exe
USRDTEA.DLL MS Windows 95 / Windows NT Exe
USRFAXA.DLL MS Windows 95 / Windows NT Exe
USRLBVA.DLL MS Windows 95 / Windows NT Exe
USRRTOSA.DLL MS Windows 95 / Windows NT Exe
USRSDPIA.DLL MS Windows 95 / Windows NT Exe
USRSVPIA.DLL MS Windows 95 / Windows NT Exe
USRV42A.DLL MS Windows 95 / Windows NT Exe
USRV80A.DLL MS Windows 95 / Windows NT Exe
USRVOICA.DLL MS Windows 95 / Windows NT Exe
USRVPA.DLL MS Windows 95 / Windows NT Exe
UTILDLL.DLL MS Windows 95 / Windows NT Exe
UXTHEME.DLL MS Windows 95 / Windows NT Exe
VBAJET32.DLL MS Windows 95 / Windows NT Exe
VBAME.DLL MS Windows 95 / Windows NT Exe
VBSCRIPT.DLL MS Windows 95 / Windows NT Exe
VCDEX.DLL MS Windows 95 / Windows NT Exe
VDMDBG.DLL MS Windows 95 / Windows NT Exe
VDMREDIR.DLL MS Windows 95 / Windows NT Exe
VER.DLL MS Windows: "VER - A Version stamping library"
VERIFIER.DLL MS Windows 95 / Windows NT Exe
VERSION.DLL MS Windows 95 / Windows NT Exe
VFPODBC.DLL MS Windows 95 / Windows NT Exe
VGA.DLL MS Windows 95 / Windows NT Exe
VGA256.DLL MS Windows 95 / Windows NT Exe
VGA64K.DLL MS Windows 95 / Windows NT Exe
VJOY.DLL MS Windows 95 / Windows NT Exe
VSDATA.DLL MS Windows 95 / Windows NT Exe
VSINIT.DLL MS Windows 95 / Windows NT Exe
VSMONAPI.DLL MS Windows 95 / Windows NT Exe
VSPUBAPI.DLL MS Windows 95 / Windows NT Exe
VSREGEXP.DLL MS Windows 95 / Windows NT Exe
VSSAPI.DLL MS Windows 95 / Windows NT Exe
VSS_PS.DLL MS Windows 95 / Windows NT Exe
VSUTIL.DLL MS Windows 95 / Windows NT Exe
VSXML.DLL MS Windows 95 / Windows NT Exe
VWIPXSPX.DLL MS Windows 95 / Windows NT Exe
W32TIME.DLL MS Windows 95 / Windows NT Exe
W32TOPL.DLL MS Windows 95 / Windows NT Exe
W3SSL.DLL MS Windows 95 / Windows NT Exe
WAVEMSP.DLL MS Windows 95 / Windows NT Exe
WDIGEST.DLL MS Windows 95 / Windows NT Exe
WDMIOCTL.DLL MS Windows 95 / Windows NT Exe
WEBCHECK.DLL MS Windows 95 / Windows NT Exe
WEBCLNT.DLL MS Windows 95 / Windows NT Exe
WEBHITS.DLL MS Windows 95 / Windows NT Exe
WEBVW.DLL MS Windows 95 / Windows NT Exe
WIADEFUI.DLL MS Windows 95 / Windows NT Exe
WIADSS.DLL MS Windows 95 / Windows NT Exe
WIASCR.DLL MS Windows 95 / Windows NT Exe
WIASERVC.DLL MS Windows 95 / Windows NT Exe
WIASHEXT.DLL MS Windows 95 / Windows NT Exe
WIAVIDEO.DLL MS Windows 95 / Windows NT Exe
WIAVUSD.DLL MS Windows 95 / Windows NT Exe
WIFEMAN.DLL MS Windows: "WOW REPLACEMENT Font Driver Manager For WIFE"
WIN32SPL.DLL MS Windows 95 / Windows NT Exe
WIN87EM.DLL MS Windows: "Microsoft Windows 3.1 Coprocessor/Emulator Librar..."
WINBRAND.DLL MS Windows 95 / Windows NT Exe
WINFAX.DLL MS Windows 95 / Windows NT Exe
WINHTTP.DLL MS Windows 95 / Windows NT Exe
WININET.DLL MS Windows 95 / Windows NT Exe
WINIPSEC.DLL MS Windows 95 / Windows NT Exe
WINMM.DLL MS Windows 95 / Windows NT Exe
WINNLS.DLL MS Windows: "WOW REPLACEMENT WINNLS"
WINNTBBU.DLL MS Windows 95 / Windows NT Exe
WINRNR.DLL MS Windows 95 / Windows NT Exe
WINSCARD.DLL MS Windows 95 / Windows NT Exe
WINSHFHC.DLL MS Windows 95 / Windows NT Exe
WINSOCK.DLL MS Windows: "BSD Socket API for Windows"
WINSRV.DLL MS Windows 95 / Windows NT Exe
WINSTA.DLL MS Windows 95 / Windows NT Exe
WINSTRM.DLL MS Windows 95 / Windows NT Exe
WINTRUST.DLL MS Windows 95 / Windows NT Exe
WKSSVC.DLL MS Windows 95 / Windows NT Exe
WLDAP32.DLL MS Windows 95 / Windows NT Exe
WLNOTIFY.DLL MS Windows 95 / Windows NT Exe
WMADMOD.DLL MS Windows 95 / Windows NT Exe
WMADMOE.DLL MS Windows 95 / Windows NT Exe
WMASF.DLL MS Windows 95 / Windows NT Exe
WMDMLOG.DLL MS Windows 95 / Windows NT Exe
WMDMPS.DLL MS Windows 95 / Windows NT Exe
WMERRENU.DLL MS Windows 95 / Windows NT Exe
WMERROR.DLL MS Windows 95 / Windows NT Exe
WMI.DLL MS Windows 95 / Windows NT Exe
WMIDX.DLL MS Windows 95 / Windows NT Exe
WMIPROP.DLL MS Windows 95 / Windows NT Exe
WMISCMGR.DLL MS Windows 95 / Windows NT Exe
WMNETMGR.DLL MS Windows 95 / Windows NT Exe
WMP.DLL MS Windows 95 / Windows NT Exe
WMPASF.DLL MS Windows 95 / Windows NT Exe
WMPCD.DLL MS Windows 95 / Windows NT Exe
WMPCORE.DLL MS Windows 95 / Windows NT Exe
WMPDXM.DLL MS Windows 95 / Windows NT Exe
WMPLOC.DLL MS Windows 95 / Windows NT Exe
WMPNS.DLL MS Windows 95 / Windows NT Exe
WMPSHELL.DLL MS Windows 95 / Windows NT Exe
WMPUI.DLL MS Windows 95 / Windows NT Exe
WMSDMOD.DLL MS Windows 95 / Windows NT Exe
WMSDMOE.DLL MS Windows 95 / Windows NT Exe
WMSDMOE2.DLL MS Windows 95 / Windows NT Exe
WMSPDMOD.DLL MS Windows 95 / Windows NT Exe
WMSPDMOE.DLL MS Windows 95 / Windows NT Exe
WMSTREAM.DLL MS Windows 95 / Windows NT Exe
WMV8DMOD.DLL MS Windows 95 / Windows NT Exe
WMVCORE.DLL MS Windows 95 / Windows NT Exe
WMVCORE2.DLL MS Windows 95 / Windows NT Exe
WMVDMOD.DLL MS Windows 95 / Windows NT Exe
WMVDMOE.DLL MS Windows 95 / Windows NT Exe
WMVDMOE2.DLL MS Windows 95 / Windows NT Exe
WOW32.DLL MS Windows 95 / Windows NT Exe
WOWFAX.DLL MS Windows 95 / Windows NT Exe
WOWFAXUI.DLL MS Windows 95 / Windows NT Exe
WS2HELP.DLL MS Windows 95 / Windows NT Exe
WS2_32.DLL MS Windows 95 / Windows NT Exe
WSCSVC.DLL MS Windows 95 / Windows NT Exe
WSECEDIT.DLL MS Windows 95 / Windows NT Exe
WSHATM.DLL MS Windows 95 / Windows NT Exe
WSHBTH.DLL MS Windows 95 / Windows NT Exe
WSHCON.DLL MS Windows 95 / Windows NT Exe
WSHEXT.DLL MS Windows 95 / Windows NT Exe
WSHIP6.DLL MS Windows 95 / Windows NT Exe
WSHISN.DLL MS Windows 95 / Windows NT Exe
WSHNETBS.DLL MS Windows 95 / Windows NT Exe
WSHRM.DLL MS Windows 95 / Windows NT Exe
WSHTCPIP.DLL MS Windows 95 / Windows NT Exe
WSNMP32.DLL MS Windows 95 / Windows NT Exe
WSOCK32.DLL MS Windows 95 / Windows NT Exe
WSTDECOD.DLL MS Windows 95 / Windows NT Exe
WTSAPI32.DLL MS Windows 95 / Windows NT Exe
WUAPI.DLL MS Windows 95 / Windows NT Exe
WUAUENG.DLL MS Windows 95 / Windows NT Exe
WUAUENG1.DLL MS Windows 95 / Windows NT Exe
WUAUSERV.DLL MS Windows 95 / Windows NT Exe
WUCLTUI.DLL MS Windows 95 / Windows NT Exe
WUPS.DLL MS Windows 95 / Windows NT Exe
WUWEB.DLL MS Windows 95 / Windows NT Exe
WZCDLG.DLL MS Windows 95 / Windows NT Exe
WZCSAPI.DLL MS Windows 95 / Windows NT Exe
WZCSVC.DLL MS Windows 95 / Windows NT Exe
XACTSRV.DLL MS Windows 95 / Windows NT Exe
XENROLL.DLL MS Windows 95 / Windows NT Exe
XMLPROV.DLL MS Windows 95 / Windows NT Exe
XMLPROVI.DLL MS Windows 95 / Windows NT Exe
XOLEHLP.DLL MS Windows 95 / Windows NT Exe
XPOB2RES.DLL MS Windows 95 / Windows NT Exe
XPSP1RES.DLL MS Windows 95 / Windows NT Exe
XPSP2RES.DLL MS Windows 95 / Windows NT Exe
ZIPFLDR.DLL MS Windows 95 / Windows NT Exe
ZLCOMM.DLL MS Windows 95 / Windows NT Exe
ZLCOMMDB.DLL MS Windows 95 / Windows NT Exe
ZPORT4AS.DLL MS Windows: "ZPORT4AS.DLL"
Ä
  • 0

#10
Wizard

Wizard

    Retired Staff

  • Retired Staff
  • 5,661 posts
How bout sending me 4 or 5 of the files you have in that folder!

Right Click the Desktop and Select Compressed(zipped)Folder

C:\WINDOWS\TEMP\AC8C25.exe
C:\WINDOWS\TEMP\KDA8D2.EXE
C:\WINDOWS\TEMP\LA3E35.EXE

And a couple of others you think are nasty!

Place them all in the Zip folder,but before you Close it,go up and Click File>> Add a Password, make the password "infected' and email it to the addy below

filesubmit@charter.net

Once thats done lets figure out what this is being used for
O23 - Service: Client32 - NetSupport Ltd - C:\PROGRA~1\NETSUP~1\client32.exe

I know what its for but who is using it?

Active Ports from here
http://www.protect-m...m/freeware.html

Once Installed,see what is accessing what?

Sysinternals Process Explorer may shed some light as well
http://www.sysintern...ssExplorer.html

With Process Explorer>> locate the temp file running in Processes>> Double Click and Select Strings>> Copy&Paste that list back here!

Click the TCP/IP number to see if the file is accessing the Internet or trying to!

You can also use Process explorer to End or Suspend the process by right clicking the process name

Download UnHackme
http://www.greatis.c...me/download.htm

Install and Run and let me know the results

Now lets see if there are any bugs in there we cant see

Download Grinlers Pfind:
http://www.bleepingc...r/pfind-new.zip

Right Click the Zip Folder and Select "Extract All"
So make sure all those files remain in the same folder.

Don't use it yet!

Restart in Safe Mode

Doubleclick pfind.bat
It will scan for a while, so please be patient.
Wait till the doswindow closes.

Configure Windows to Show All Hidden Files and Folders
Here is a link to help with that:
http://www.bleepingc...showtutorial=62

While in Safe Mode>> Open the Search Assistant(Click Start>>Click Search)
Select All Files and Folders,
Select Advanced Options,
Make sure there is a check by these 3:

Search System Folders
Search hidden files and folders
Search Subfolders

Now under All Files and Folders,enter this into the text box:

Temp<< for every return that comes back labeled "Temp"<< Delete the entire contents of the folder

Post the contents of C:\pfind.txt in your next reply together with a new hijackthislog.

I know this seems a bit extreme and why I didnt notice the temp folders in Processes is beyond me but you see where I am going with this!

Either some form of RootKit File\Backdoor is running around or this System is Compromised!

Let me know what ya find out!

Post back with all the info I asked for!
  • 0

#11
spudhead

spudhead

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Hi cretemonster,

there doesn't seem to be any problems with the computer now apart from the random exe - which i have now figured out - see link below. your question about the netsupport stuff - client32.exe, that's being used by myself to connect remotely to the computer.

It would seem the random exe is generated by our corporate edition of TrendMicro Officescan - I found this info.
http://forums.majorg...dex.php/t-43052

thanks for all your help. i guess this can be locked now?
  • 0

#12
Wizard

Wizard

    Retired Staff

  • Retired Staff
  • 5,661 posts
So explain the Trend thing to me?

Just waking up and coffee hasnt kicked in yet!

I just went through an episode where a .exe file packed with UPX was located on a system!

No one knew what it was,so on a hunch,I did a clean install on test box and ran the Online trend scan and low and behold,there was the exe!

I do wish the customer support there was a little bit more responsive!


Glad to hear the issues are resolved and I never close a thread!

LOL....Never seen the need to! :tazz: LOL!
  • 0

#13
spudhead

spudhead

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
apparently the random exe references:
C:\Program Files\Trend Micro\OfficeScan Client\Ofcdog.exe
which is the office scan watchdog. the reason it makes it random is so that it is harder to identify by potentially malicious programs hence they won't be able to disable the virus scanner.

it's nice to finally figure it out. plus i've learned a bit in the process! still so much more to learn though! :tazz:
  • 0

#14
Wizard

Wizard

    Retired Staff

  • Retired Staff
  • 5,661 posts
OK,Gotcha,I had heard about that somewhere else but had not paid it much attention!

Bet I will from now on!

Thanks for the Info!
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP