Bazooka Adware and Spyware Scanner Log 310

****************************************
Bazooka Adware and Spyware Scanner v1.13.01
http://www.kephyr.com/spywarescanner/
http://www.kephyr.com/spywarescanner/library/
Log created 14:31:09.
OS: Windows NT 5.0
Database version: 2.040000
Database format version: 1.020000
Database date: 20040518
Current date: 2004-05-26 14:31


****************************************
Result when scanning:

A Better Internet 777.777.000 bi.dll
http://www.kephyr.com/spywarescanner/library/abetterinternet/index.phtml

A Better Internet.C 779.000.000 %WinDir%\mypbutn.exe
C:\WINNT\mypbutn.exe
http://www.kephyr.com/spywarescanner/library/abetterinternet.c/index.phtml

A Better Internet.D 780.000.000 %WinDir%\cgetaway.exe
C:\WINNT\cgetaway.exe
http://www.kephyr.com/spywarescanner/library/abetterinternet.d/index.phtml

ActualNames 544.744.001 %ProgramsDir%\AdvSearch\
C:\Program\AdvSearch\
http://www.kephyr.com/spywarescanner/library/actualnames/index.phtml

AdRoar 192.900.000 {BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8}
http://www.kephyr.com/spywarescanner/library/adroar/index.phtml

AdRoar 192.900.001 %WinDir%\ARUpdate.exe
C:\WINNT\ARUpdate.exe
http://www.kephyr.com/spywarescanner/library/adroar/index.phtml

AutoStartup 583.200.000 %SystemDir%\AST.EXE
C:\WINNT\system32\\AST.EXE
http://www.kephyr.com/spywarescanner/library/autostartup/index.phtml

BlowSearch 123.300.001 %ProgramsDir%\BlowsearchToolbar\
C:\Program\BlowsearchToolbar\
http://www.kephyr.com/spywarescanner/library/blowsearch/index.phtml

BookedSpace 100.200.300 bxxs5
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\bxxs5
http://www.kephyr.com/spywarescanner/library/bookedspace/index.phtml

BookedSpace 100.200.301 bxxs5.dll
http://www.kephyr.com/spywarescanner/library/bookedspace/index.phtml

BookedSpace 100.200.302 {0019C3E2-DD48-4A6D-ABCD-8D32436323D9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0019C3E2-DD48-4A6D-ABCD-8D32436323D9}
http://www.kephyr.com/spywarescanner/library/bookedspace/index.phtml

ClockSync 847.700.001 %ProgramsDir%\ClockSync\
C:\Program\ClockSync\
http://www.kephyr.com/spywarescanner/library/clocksync/index.phtml

Estart 634.400.000 %SystemDir%\EStartLinkRotater.exe
C:\WINNT\system32\\EStartLinkRotater.exe
http://www.kephyr.com/spywarescanner/library/estart/index.phtml

eXact Search Bar 617.299.124 %ProgramsDir%\eXact\
C:\Program\eXact\
http://www.kephyr.com/spywarescanner/library/exactsearchbar/index.phtml

eXact Search Bar.B 618.299.127 {224530A0-C9CB-4AEE-9C0F-54AC1B533211}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{224530A0-C9CB-4AEE-9C0F-54AC1B533211}
http://www.kephyr.com/spywarescanner/library/exactsearchbar.b/index.phtml

FlashTrack 128.293.002 %ProgramsDir%\Flt\
C:\Program\Flt\
http://www.kephyr.com/spywarescanner/library/flashtrack/index.phtml

Free History Cleaner 312.800.001 %SystemDir%\fhccall.exe
C:\WINNT\system32\\fhccall.exe
http://www.kephyr.com/spywarescanner/library/freehistorycleaner/index.phtml

Httper 931.000.002 %ProgramsDir%\Httper\
C:\Program\Httper\
http://www.kephyr.com/spywarescanner/library/httper/index.phtml

IGetNet 692.118.337 install_all.dll
http://www.kephyr.com/spywarescanner/library/igetnet/index.phtml

IncrediFind 342.900.000 {5D60FF48-95BE-4956-B4C6-6BB168A70310}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D60FF48-95BE-4956-B4C6-6BB168A70310}
http://www.kephyr.com/spywarescanner/library/incredifind/index.phtml

Instant Access Dialer 847.000.001 %ProgramsDir%\Instant Access\
C:\Program\Instant Access\
http://www.kephyr.com/spywarescanner/library/instantaccessdialer/index.phtml

Instant Access Dialer.B 848.000.000 ia.dll
http://www.kephyr.com/spywarescanner/library/instantaccessdialer.b/index.phtml

Instant Access Dialer.C 849.000.001 EGDHTML_1024.dll
http://www.kephyr.com/spywarescanner/library/instantaccessdialer.c/index.phtml

KeenValue.Updater 643.000.001 %ProgramsDir%\Common Files\updater\
C:\Program\Common Files\updater\
http://www.kephyr.com/spywarescanner/library/keenvalue.updater/index.phtml

KeenValue.updmgr 644.000.001 %ProgramsDir%\Common Files\updmgr\
C:\Program\Common Files\updmgr\
http://www.kephyr.com/spywarescanner/library/keenvalue.updmgr/index.phtml

KeySpec 895.300.001 %ProgramsDir%\Keyboard Spectator Pro\
C:\Program\Keyboard Spectator Pro\
http://www.kephyr.com/spywarescanner/library/keyspec/index.phtml

Look2Me 349.000.000
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DDFFA75A-E81D-4454-89FC-B9FD0631E726}\InprocServer32\ThreadingModel
http://www.kephyr.com/spywarescanner/library/look2me/index.phtml

Look2Me 349.000.001 %SystemDir%\msg118.dll
C:\WINNT\system32\\msg118.dll
http://www.kephyr.com/spywarescanner/library/look2me/index.phtml

LimeShop 120.120.002 %ProgramsDir%\LimeShop\
C:\Program\LimeShop\
http://www.kephyr.com/spywarescanner/library/limeshop/index.phtml

MemoryWatcher 654.777.000 %ProgramsDir%\MemoryWatcher\
C:\Program\MemoryWatcher\
http://www.kephyr.com/spywarescanner/library/memorywatcher/index.phtml

MS Media Player GUID 404.888.000
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Settings\Client ID
http://www.kephyr.com/spywarescanner/library/msmediaplayerguid/index.phtml

My Search Bar 132.098.656
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWaySearchAssistant\DisplayName
http://www.kephyr.com/spywarescanner/library/mysearchbar/index.phtml

My Search Bar 777.777.778 %ProgramsDir%\MyWay\
C:\Program\MyWay\
http://www.kephyr.com/spywarescanner/library/mysearchbar/index.phtml

PerfectNav 352.900.000 {0428FFC7-1931-45b7-95CB-3CBB919777E1}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0428FFC7-1931-45b7-95CB-3CBB919777E1}
http://www.kephyr.com/spywarescanner/library/perfectnav/index.phtml

PerfectNav 352.900.001 %ProgramsDir%\PerfectNav\
C:\Program\PerfectNav\
http://www.kephyr.com/spywarescanner/library/perfectnav/index.phtml

PowerSearch 342.300.000 {4E7BD74F-2B8D-469E-A08E-8E1CA787AD2D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{4E7BD74F-2B8D-469E-A08E-8E1CA787AD2D}
http://www.kephyr.com/spywarescanner/library/powersearch/index.phtml

PowerSearch 342.300.000 {4E7BD74F-2B8D-469E-D6F5-F66EA787AD2D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{4E7BD74F-2B8D-469E-D6F5-F66EA787AD2D}
http://www.kephyr.com/spywarescanner/library/powersearch/index.phtml

PowerSearch 342.300.000 {4E7BD74F-2B8D-469E-A08E-8E1CA787AD2D}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4E7BD74F-2B8D-469E-A08E-8E1CA787AD2D}
http://www.kephyr.com/spywarescanner/library/powersearch/index.phtml

PowerSearch 342.300.000 {4E7BD74F-2B8D-469E-D6F5-F66EA787AD2D}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4E7BD74F-2B8D-469E-D6F5-F66EA787AD2D}
http://www.kephyr.com/spywarescanner/library/powersearch/index.phtml

PowerSearch 342.300.001 %ProgramsDir%\PowerSearch\
C:\Program\PowerSearch\
http://www.kephyr.com/spywarescanner/library/powersearch/index.phtml

Real Spy Monitor 740.900.001 %WinDir%\RSM\
C:\WINNT\RSM\
http://www.kephyr.com/spywarescanner/library/realspymonitor/index.phtml

SaveNow 090.090.090 WhenUSave
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WhenUSave
http://www.kephyr.com/spywarescanner/library/savenow/index.phtml

SaveNow 555.666.777 Save.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WhenUSave
http://www.kephyr.com/spywarescanner/library/savenow/index.phtml

SaveNow 090.090.091 %ProgramsDir%\Save\
C:\Program\Save\
http://www.kephyr.com/spywarescanner/library/savenow/index.phtml

Shazaa.bh22 542.555.000 {59EAA50F-8F82-4998-BC9E-0FFB2283C795}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59EAA50F-8F82-4998-BC9E-0FFB2283C795}
http://www.kephyr.com/spywarescanner/library/shazaa.bh22/index.phtml

Shazaa.bh22 542.555.001 {3EAD9D0A-446D-44E0-B795-B92E34590248}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{3EAD9D0A-446D-44E0-B795-B92E34590248}
http://www.kephyr.com/spywarescanner/library/shazaa.bh22/index.phtml

Shazaa.bh22 542.555.002 C:\Program Files\System\Misc\
C:\Program Files\System\Misc\
http://www.kephyr.com/spywarescanner/library/shazaa.bh22/index.phtml

Scbar 190.092.391 %ProgramsDir%\scbar\
C:\Program\scbar\
http://www.kephyr.com/spywarescanner/library/scbar/index.phtml

SpyBan 243.700.000 %ProgramsDir%\SpyBan\
C:\Program\SpyBan\
http://www.kephyr.com/spywarescanner/library/spyban/index.phtml

SpyAgent 199.700.000 %WinDir%\syscache\
C:\WINNT\syscache\
http://www.kephyr.com/spywarescanner/library/spyagent/index.phtml

Tiny Key Logger 342.800.000 %SystemDir%\tikl.log
C:\WINNT\system32\\tikl.log
http://www.kephyr.com/spywarescanner/library/tinykeylogger/index.phtml

Tiny Key Logger 342.800.002
HKEY_CURRENT_USER\SOFTWARE\TiKL\ExeName
http://www.kephyr.com/spywarescanner/library/tinykeylogger/index.phtml

WebSavings 523.900.001 %ProgramsDir%\WebSavingsfromEbates\
C:\Program\WebSavingsfromEbates\
http://www.kephyr.com/spywarescanner/library/websavings/index.phtml

WhenUSearch 534.000.000 WhenUSearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WhenUSearch
http://www.kephyr.com/spywarescanner/library/whenusearch/index.phtml

WhenUSearch 534.000.001 %ProgramsDir%\WhenUSearch\
C:\Program\WhenUSearch\
http://www.kephyr.com/spywarescanner/library/whenusearch/index.phtml

Winpup 340.800.001
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\comms\ren
http://www.kephyr.com/spywarescanner/library/winpup/index.phtml

Winpup 340.800.002
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\pup\ren
http://www.kephyr.com/spywarescanner/library/winpup/index.phtml

Zeropopupbar.zp 173.150.000 {72A58725-2635-4725-8C53-686DFD1FEB8D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{72A58725-2635-4725-8C53-686DFD1FEB8D}
http://www.kephyr.com/spywarescanner/library/zeropopupbar.zp/index.phtml

Zeropopupbar.zp 173.150.001 %SystemDir%\zp.dll
C:\WINNT\system32\\zp.dll
http://www.kephyr.com/spywarescanner/library/zeropopupbar.zp/index.phtml

****************************************
Auto start entries:
C:\Program\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Program\OLYMPUS\CAMEDIA Master 4.1\CM_camera.exe
C:\Program\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Program\OLYMPUS\CAMEDIA Master 4.1\CM_camera.exe

Go here to analyse the startup entries and the associated files:
http://www.kephyr.com/filedb/index.php

****************************************
Run entries:
Synchronization Manager mobsync.exe /logon
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Synchronization Manager

bxxs5 RunDLL32.EXE C:\WINNT\bxxs5.dll,DllRun
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\bxxs5

P2P Networking C:\WINNT\system32\P2P Networking\P2P Networking.exe /AUTOSTART
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\P2P Networking

WhenUSave "C:\Program\Save\Save.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WhenUSave

WhenUSearch "C:\Program\WhenUSearch\Search.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WhenUSearch

internat.exe internat.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\internat.exe

AIM C:\PROGRAM\NETSCAPE\COMMUN~1\PROGRAM\AIM\aim.exe -cnetwait.odl
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\AIM


Go here to analyse the run entries and the associated files:
http://www.kephyr.com/filedb/index.php

****************************************
Browser helper objects:

{0019C3E2-DD48-4A6D-ABCD-8D32436323D9} not set C:\WINNT\bxxs5.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0019C3E2-DD48-4A6D-ABCD-8D32436323D9}

{0428FFC7-1931-45b7-95CB-3CBB919777E1} NavErrRedir Class C:\Program\PERFEC~1\BHO\PERFEC~1.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0428FFC7-1931-45b7-95CB-3CBB919777E1}

{59EAA50F-8F82-4998-BC9E-0FFB2283C795} not set c:\PROGRA~1\System\Misc\bh22.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59EAA50F-8F82-4998-BC9E-0FFB2283C795}

{5D60FF48-95BE-4956-B4C6-6BB168A70310} NavErrRedir Class C:\Program\INCRED~1\BHO\INCFIN~1.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5D60FF48-95BE-4956-B4C6-6BB168A70310}

{9A9C9B69-F908-4AAB-8D0C-10EA8997F37E} C:\WINNT\system32\WinNB51.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9A9C9B69-F908-4AAB-8D0C-10EA8997F37E}

{BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8} not set C:\WINNT\AdRoar.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8}


****************************************
Toolbars:

{8E718888-423F-11D2-876E-00A0C9082467} C:\WINNT\system32\msdxm.ocx
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{8E718888-423F-11D2-876E-00A0C9082467}

{4E7BD74F-2B8D-469E-A08E-8E1CA787AD2D} C:\Program\PowerSearch\Toolbar\pwrs0102.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{4E7BD74F-2B8D-469E-A08E-8E1CA787AD2D}

{BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8} C:\WINNT\AdRoar.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8}

{4E7BD74F-2B8D-469E-D6F5-F66EA787AD2D} C:\Program\PowerSearch\Toolbar\pwrsbikd.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{4E7BD74F-2B8D-469E-D6F5-F66EA787AD2D}

{3EAD9D0A-446D-44E0-B795-B92E34590248} c:\PROGRA~1\System\Misc\sb22.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{3EAD9D0A-446D-44E0-B795-B92E34590248}

{72A58725-2635-4725-8C53-686DFD1FEB8D} C:\WINNT\system32\zp.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{72A58725-2635-4725-8C53-686DFD1FEB8D}

{9A9C9B68-F908-4AAB-8D0C-10EA8997F37E} C:\WINNT\system32\WinNB51.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{9A9C9B68-F908-4AAB-8D0C-10EA8997F37E}

{01E04581-4EEE-11D0-BFE9-00AA005B4383} C:\WINNT\System32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{01E04581-4EEE-11D0-BFE9-00AA005B4383}

{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOT\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\InprocServer32

System error message: Det g�r inte att hitta filen.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}

{01E04581-4EEE-11D0-BFE9-00AA005B4383} C:\WINNT\System32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{01E04581-4EEE-11D0-BFE9-00AA005B4383}

{0E5CBF21-D15F-11D0-8301-00AA005B4383} C:\WINNT\System32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}

{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOT\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\InprocServer32

System error message: Det g�r inte att hitta filen.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}

{224530A0-C9CB-4AEE-9C0F-54AC1B533211} Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOT\CLSID\{224530A0-C9CB-4AEE-9C0F-54AC1B533211}\InprocServer32

System error message: Det g�r inte att hitta filen.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{224530A0-C9CB-4AEE-9C0F-54AC1B533211}

{4E7BD74F-2B8D-469E-A08E-8E1CA787AD2D} C:\Program\PowerSearch\Toolbar\pwrs0102.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4E7BD74F-2B8D-469E-A08E-8E1CA787AD2D}

{4E7BD74F-2B8D-469E-D6F5-F66EA787AD2D} C:\Program\PowerSearch\Toolbar\pwrsbikd.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4E7BD74F-2B8D-469E-D6F5-F66EA787AD2D}

{4D5C8C25-D075-11d0-B416-00C04FB90376} C:\WINNT\System32\shdocvw.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376}

{32683183-48a0-441b-a342-7c2a440a9478} C:\WINNT\System32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478}

{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} C:\WINNT\system32\shell32.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}

{EFA24E62-B078-11D0-89E4-00C04FC9E26E} C:\WINNT\System32\shdocvw.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{EFA24E62-B078-11D0-89E4-00C04FC9E26E}

{EFA24E64-B078-11D0-89E4-00C04FC9E26E} C:\WINNT\System32\shdocvw.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{EFA24E64-B078-11D0-89E4-00C04FC9E26E}


****************************************
All processes:

[System Process]
System
smss.exe
csrss.exe
winlogon.exe
services.exe
lsass.exe
svchost.exe
spoolsv.exe
svchost.exe
regsvc.exe
MSTask.exe
vsmon.exe
WinMgmt.exe
svchost.exe
Explorer.EXE
P2P Networking.
Save.exe
Search.exe
internat.exe
aim.exe
zonealarm.exe
CM_camera.exe
wuauclt.exe
IEXPLORE.EXE
mshta.exe
cmd.exe
spywarescanner.

Go here to analyse the running processes:
http://www.kephyr.com/filedb/index.php

****************************************
Internet Explorer Settings:

Default_Page_URL http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL

Local Page C:\WINNT\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page

Start Page http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page

http://
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix\

www http://
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\www

provider
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\provider

Local Page C:\WINNT\System32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page

Use Search Asst no
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Use Search Asst


****************************************




Related links

Bazooka - Free scan for spyware, adware, trojan horses, keyloggers, etc. Detects more than 500 potentially unwanted applications. Freeware!

The File Database - Search the file database for more information. Free!

PopUp Blocker Test - Find out if your pop-up killer can handle all pop-ups. Free!

Kephyr Labs - Find out what is going on at Kephyr. Try products in an early stage of development.


FreeFixer
Read more about FreeFixer, Kephyr's latest spyware removal tool.
Home & Products |  Legal |  Privacy |  Search

© Kephyr, 2003-2012. HtmlTidy, HTML 4.01, CSS andy@kephyr.com