Bazooka Adware and Spyware Scanner Log 378

****************************************
Bazooka Adware and Spyware Scanner v1.12
Log created 07:23:06.
OS: Windows NT 5.1
Database version: 2.050000
Database format version: 1.020000
Database date: 20040526
Current date: 2004-05-31 07:23

****************************************
Auto start entries:
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DESKTOP.INI
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MA003DMN.LNK
C:\PROGRA~1\DELETE~1\bar\3.bin\MWSOEMON.EXE
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DESKTOP.INI
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MA003DMN.LNK
C:\PROGRA~1\DELETE~1\bar\3.bin\MWSOEMON.EXE
C:\Documents and Settings\Steve\Start Menu\Programs\Startup\DESKTOP.INI
C:\Documents and Settings\Steve\Start Menu\Programs\Startup\DESKTOP.INI

****************************************
Run entries:
NvCplDaemon RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
nwiz nwiz.exe /installquiet
PCTVOICE pctspk.exe
Apoint C:\Program Files\Apoint\Apoint.exe
Dell QuickSet C:\Program Files\Dell\QuickSet\quickset.exe
DVDSentry C:\WINDOWS\System32\DSentry.exe
MMTray C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
ccApp "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
ccRegVfy "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
TkBellExe "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
AdaptecDirectCD "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
DwlClient C:\Program Files\Common Files\Dell\EUSW\Support.exe
QuickTime Task "C:\Program Files\QuickTime\qttask.exe" -atboottime
OfferApp C:\Program Files\OfferApp\OfferApp.exe
glapypw C:\WINDOWS\System32\lbtuyb.exe
MSMSGS "C:\Program Files\Messenger\msmsgs.exe" /background
IncrediMail C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
AIM C:\Program Files\AIM\aim.exe -cnetwait.odl
ctfmon.exe C:\WINDOWS\System32\ctfmon.exe

****************************************
Browser helper objects:

{000020DD-C72E-4113-AF77-DD56626C6C42} not set C:\WINDOWS\twaintec.dll
{01F44A8A-8C97-4325-A378-76E68DC4AB2E} not set C:\WINDOWS\systb.dll
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} not set C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
{1C78AB3F-A857-482e-80C0-3A1E5238A565} not set C:\WINDOWS\System32\toolbar.dll
{549B5CA7-4A86-11D7-A4DF-000874180BB3} not set Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOT\CLSID\{549B5CA7-4A86-11D7-A4DF-000874180BB3}\InprocServer32

System error message: The system cannot find the file specified.

{BDF3E430-B101-42AD-A544-FADC6B084872} NAV Helper C:\Program Files\Norton AntiVirus\NavShExt.dll
{FDD3B846-8D59-4ffb-8758-209B6AD74ACC} not set Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOT\CLSID\{FDD3B846-8D59-4ffb-8758-209B6AD74ACC}\InprocServer32

System error message: The system cannot find the file specified.


****************************************
Toolbars:

{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} C:\Program Files\Norton AntiVirus\NavShExt.dll
{8E718888-423F-11D2-876E-00A0C9082467} C:\WINDOWS\System32\Msdxm.ocx
{1C78AB3F-A857-482e-80C0-3A1E5238A565} C:\WINDOWS\System32\toolbar.dll
{2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOT\CLSID\{2CDE1A7D-A478-4291-BF31-E1B4C16F92EB}\InprocServer32

System error message: The system cannot find the file specified.

{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} C:\Program Files\Norton AntiVirus\NavShExt.dll
{01E04581-4EEE-11D0-BFE9-00AA005B4383} C:\WINDOWS\System32\browseui.dll
{0E5CBF21-D15F-11D0-8301-00AA005B4383} C:\WINDOWS\system32\SHELL32.dll
{4D5C8C25-D075-11d0-B416-00C04FB90376} C:\WINDOWS\System32\shdocvw.dll
{FE54FA40-D68C-11d2-98FA-00C0F0318AFE} C:\WINDOWS\System32\Shdocvw.dll
{30D02401-6A81-11D0-8274-00C04FD5AE38} C:\WINDOWS\System32\browseui.dll
{32683183-48a0-441b-a342-7c2a440a9478} C:\WINDOWS\System32\browseui.dll
{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} C:\WINDOWS\system32\SHELL32.dll
{EFA24E61-B078-11D0-89E4-00C04FC9E26E} C:\WINDOWS\System32\shdocvw.dll
{EFA24E64-B078-11D0-89E4-00C04FC9E26E} C:\WINDOWS\System32\shdocvw.dll

****************************************
All processes:

0 [System Process]
4 System
844 SMSS.EXE
892 CSRSS.EXE
920 WINLOGON.EXE
964 SERVICES.EXE
976 LSASS.EXE
1140 SVCHOST.EXE
1184 SVCHOST.EXE
1384 SVCHOST.EXE
1408 SVCHOST.EXE
1672 SPOOLSV.EXE
1712 CCEVTMGR.EXE
1864 ALG.EXE
1876 CISVC.EXE
1908 MDM.EXE
2016 sqlservr.exe
256 NAVAPSVC.EXE
304 nvsvc32.exe
472 WLTRYSVC.EXE
572 BCMWLTRY.EXE
1152 explorer.exe
720 pctspk.exe
700 Apoint.exe
1544 quickset.exe
1644 DSentry.exe
1564 mm_tray.exe
1568 ccApp.exe
1584 realsched.exe
1596 Directcd.exe
1604 Support.exe
1624 qttask.exe
1804 OfferApp.exe
1844 lbtuyb.exe
1944 aim.exe
1952 CTFMON.EXE
2052 ma003dmn.exe
2060 MWSOEMON.EXE
2088 NotifyAlert.exe
2364 ApntEx.exe
2600 IMApp.exe
2824 WMIAPSRV.EXE
3772 spywarescanner.exe
3384 CIDAEMON.EXE
3012 MSMSGS.EXE

****************************************
Result when scanning:

Twaintech 523.888.000 %WinDir%\twaintec.dll
Twaintech 523.888.001 {000020DD-C72E-4113-AF77-DD56626C6C42}

***************************************