**************************************** Bazooka Adware and Spyware Scanner v1.12 Log created 10:37:15. OS: Windows 98 Database version: 1.680000 Database format version: 1.020000 Database date: 20040203 Current date: 2004-02-05 10:37 **************************************** Auto start entries: C:\PROGRA~1\MICROS~1\OFFICE\OSA9.EXE -b -l **************************************** Run entries: internat.exe internat.exe SystemTray SysTray.Exe ScanRegistry C:\WINDOWS\scanregw.exe /autorun TaskMonitor C:\WINDOWS\taskmon.exe LoadPowerProfile Rundll32.exe powrprof.dll,LoadCurrentPwrScheme IgfxTray C:\WINDOWS\SYSTEM\igfxtray.exe HotKeysCmds C:\WINDOWS\SYSTEM\hkcmd.exe Atikey Atitask.exe AtiCwd32 Aticwd32.exe QuickTime Task "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime Desktop rundll32.exe C:\WINDOWS\SYSTEM\msconfd.dll,Restore ControlPanel Windows Security Assistant C:\WINDOWS\system32\rundll32.vbe ccApp "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" ccRegVfy "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe" RealTray C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER Norton eMail Protect C:\PROGRAM FILES\NORTON ANTIVIRUS\POProxy.exe Service Connection c:\cpqs\bwtools\sccenter.exe SchedulingAgent mstask.exe Windows Security Assistant C:\WINDOWS\system32\rundll32.vbe ccEvtMgr "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe" ScriptBlocking "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg LoadPowerProfile Rundll32.exe powrprof.dll,LoadCurrentPwrScheme RNBOStart C:\WINDOWS\SYSTEM\RNBOSENT\SENTSTRT.EXE Machine Debug Manager C:\WINDOWS\SYSTEM\MDM.EXE Windows Security Assistant C:\WINDOWS\system32\rundll32.vbe sws.exe c:\program files\GlobalDialer\domer00094\GD-DIAL.EXE -remove rkt4h4rvko C:\WINDOWS\D4LN60Y8WM.EXE wn4hbbhhtp C:\WINDOWS\06GK43D66S.EXE **************************************** Browser helper objects: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX {BDF3E430-B101-42AD-A544-FADC6B084872} NAV Helper C:\Program Files\Norton AntiVirus\NavShExt.dll **************************************** Toolbars: {8E718888-423F-11D2-876E-00A0C9082467} C:\WINDOWS\SYSTEM\MSDXM.OCX {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} C:\Program Files\Norton AntiVirus\NavShExt.dll {01E04581-4EEE-11D0-BFE9-00AA005B4383} C:\WINDOWS\SYSTEM\BROWSEUI.DLL {0E5CBF21-D15F-11D0-8301-00AA005B4383} C:\WINDOWS\SYSTEM\BROWSEUI.DLL {01E04581-4EEE-11D0-BFE9-00AA005B4383} C:\WINDOWS\SYSTEM\BROWSEUI.DLL {0E5CBF21-D15F-11D0-8301-00AA005B4383} C:\WINDOWS\SYSTEM\BROWSEUI.DLL {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} C:\Program Files\Norton AntiVirus\NavShExt.dll {4D5C8C25-D075-11d0-B416-00C04FB90376} C:\WINDOWS\SYSTEM\SHDOCVW.DLL {EFA24E62-B078-11D0-89E4-00C04FC9E26E} C:\WINDOWS\SYSTEM\SHDOCVW.DLL {EFA24E61-B078-11D0-89E4-00C04FC9E26E} C:\WINDOWS\SYSTEM\SHDOCVW.DLL {32683183-48a0-441b-a342-7c2a440a9478} C:\WINDOWS\SYSTEM\BROWSEUI.DLL {EFA24E64-B078-11D0-89E4-00C04FC9E26E} C:\WINDOWS\SYSTEM\SHDOCVW.DLL **************************************** All processes: 4279175133 C:\WINDOWS\SYSTEM\KERNEL32.DLL 4294954817 C:\WINDOWS\SYSTEM\MSGSRV32.EXE 4294963441 C:\WINDOWS\SYSTEM\MPREXE.EXE 4294938625 C:\WINDOWS\SYSTEM\mmtask.tsk 4294936317 C:\WINDOWS\SYSTEM\MSTASK.EXE 4294856545 C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE 4294843109 C:\WINDOWS\SYSTEM\MDM.EXE 4294883741 C:\WINDOWS\EXPLORER.EXE 4294827497 C:\WINDOWS\SYSTEM\INTERNAT.EXE 4294823013 C:\WINDOWS\SYSTEM\SYSTRAY.EXE 4294810533 C:\WINDOWS\TASKMON.EXE 4294814313 C:\WINDOWS\SYSTEM\IGFXTRAY.EXE 4294733777 C:\WINDOWS\SYSTEM\HKCMD.EXE 4294705185 C:\WINDOWS\SYSTEM\DDHELP.EXE 4294707537 C:\WINDOWS\SYSTEM\ATITASK.EXE 4294755233 C:\WINDOWS\SYSTEM\ATICWD32.EXE 4294769641 C:\WINDOWS\SYSTEM\QTTASK.EXE 4294879245 C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE 4294656645 C:\CPQS\BWTOOLS\SCCENTER.EXE 4294667389 C:\PROGRAM FILES\GLOBALDIALER\DOMER00094\GD-DIAL.EXE 4294636949 C:\PROGRAM FILES\BAZOOKA ADWARE AND SPYWARE SCANNER\SPYWARESCANNER.EXE 4294585113 C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE 4294490349 C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE 4294416889 C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE **************************************** Result when scanning: CoolWebSearch.DNSErr 456.000.000 %WinDir%\DNSErr.dll CoolWebSearch.sys 461.000.000 %WinDir%\sys.reg CoolWebSearch.alfasearch 463.000.000 Windows Security Assistant CoolWebSearch.olehelp 465.000.000 %WinDir%\olehelp.exe CoolWebSearch.qttasks 467.000.000 %WinDir%\qttasks.exe CoolWebSearch.quicken 470.000.001 %WinDir%\quicken.exe EasyDates 612.000.001 c:\Program Files\comsoft\ GlobalDialer 139.300.000 %ProgramsDir%\GlobalDialer\ GlobalDialer 139.300.001 sws.exe ***************************************