Bazooka Adware and Spyware Scanner Log 950

****************************************
Bazooka Adware and Spyware Scanner v1.12
Log created 11:14:02.
OS: Windows NT 5.1
Database version: 1.510000
Database format version: 1.020000
Database date: 20031217
Current date: 2003-12-23 11:14

****************************************
Auto start entries:
C:\PROGRA~1\AMERIC~1.0\aoltray.exe -check
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DESKTOP.INI
C:\PROGRA~1\DIGITA~1\DLG.exe
C:\PROGRA~1\COMMON~1\efax\HotTray.exe
C:\PROGRA~1\COMMON~1\efax\Dllcmd32.exe /R /K C:\PROGRA~1\COMMON~1\efax\HsPfcW32.dll,JSPFCWSetHooking,1,0,0,0
C:\PROGRA~1\MICROS~3\Office10\OSA.EXE -b -l
C:\PROGRA~1\COMMON~1\MICROS~1\WORKSS~1\wkcalrem.exe
C:\PROGRA~1\Nikon\NkView4\NkVwMon.exe
C:\PROGRA~1\AMERIC~1.0\aoltray.exe -check
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DESKTOP.INI
C:\PROGRA~1\DIGITA~1\DLG.exe
C:\PROGRA~1\COMMON~1\efax\HotTray.exe
C:\PROGRA~1\COMMON~1\efax\Dllcmd32.exe /R /K C:\PROGRA~1\COMMON~1\efax\HsPfcW32.dll,JSPFCWSetHooking,1,0,0,0
C:\PROGRA~1\MICROS~3\Office10\OSA.EXE -b -l
C:\PROGRA~1\COMMON~1\MICROS~1\WORKSS~1\wkcalrem.exe
C:\PROGRA~1\Nikon\NkView4\NkVwMon.exe
C:\Documents and Settings\Greg Luther\Start Menu\Programs\Startup\DESKTOP.INI
C:\Documents and Settings\Greg Luther\Start Menu\Programs\Startup\DESKTOP.INI

****************************************
Run entries:
NAV Agent C:\PROGRA~1\NORTON~1\navapw32.exe
PGStub.exe C:\Documents and Settings\Greg Luther\dp-b23011805.exe
version C:\WINDOWS\System32\version.exe
TkBellExe "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
MSMSGS "C:\Program Files\Messenger\msmsgs.exe" /background
AIM C:\Program Files\AIM95\aim.exe -cnetwait.odl
MoneyAgent "C:\Program Files\Microsoft Money\System\Money Express.exe"
msmc C:\WINDOWS\System32\msongn.exe
Microsoft Works Update Detection C:\Program Files\Microsoft Works\WkDetect.exe

****************************************
Browser helper objects:

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} not set C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
{27557cf1-a237-496d-8c8f-08f3844c6a8b} not set C:\Program Files\whistlesoftware\WselServices\WhistleHelper.dll
{96BE1D9A-9E54-4344-A27A-37C088D64FB4} not set C:\WINDOWS\System32\mseffm.dll
{AA58ED58-01DD-4d91-8333-CF10577473F7} not set c:\program files\google\googletoolbar1.dll
{AE38E89D-52A5-4E8C-9AE3-046A9B466B5E} not set C:\WINDOWS\System32\dellisys.dll
{BDF3E430-B101-42AD-A544-FADC6B084872} NAV Helper C:\Program Files\Norton AntiVirus\NavShExt.dll
{CC916B4B-BE44-4026-A19D-8C74BBD23361} not set C:\WINDOWS\System32\mscdka.dll
{FDD3B846-8D59-4ffb-8758-209B6AD74ACC} not set C:\Program Files\Microsoft Money\System\mnyviewer.dll

****************************************
Toolbars:

{8E718888-423F-11D2-876E-00A0C9082467} C:\WINDOWS\System32\msdxm.ocx
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} C:\Program Files\Norton AntiVirus\NavShExt.dll
{2318C2B1-4965-11d4-9B18-009027A5CD4F} c:\program files\google\googletoolbar1.dll
{01E04581-4EEE-11D0-BFE9-00AA005B4383} C:\WINDOWS\System32\browseui.dll
{0E5CBF21-D15F-11D0-8301-00AA005B4383} C:\WINDOWS\system32\SHELL32.dll
{CCE83E45-30B2-4BAE-B1F5-25D128D27A43} Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOT\CLSID\{CCE83E45-30B2-4BAE-B1F5-25D128D27A43}\InprocServer32

System error message: The system cannot find the file specified.

{2318C2B1-4965-11D4-9B18-009027A5CD4F} c:\program files\google\googletoolbar1.dll
{014DA6C9-189F-421A-88CD-07CFE51CFF10} Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOT\CLSID\{014DA6C9-189F-421A-88CD-07CFE51CFF10}\InprocServer32

System error message: The system cannot find the file specified.

{4D5C8C25-D075-11d0-B416-00C04FB90376} C:\WINDOWS\system32\shdocvw.dll
{FE54FA40-D68C-11d2-98FA-00C0F0318AFE} C:\WINDOWS\System32\Shdocvw.dll
{32683183-48a0-441b-a342-7c2a440a9478} C:\WINDOWS\System32\browseui.dll
{9404901D-06DA-4B23-A0EE-3EA4F64EC9B3} C:\Program Files\Microsoft Money\System\mnyviewer.dll
{BDEADE7F-C265-11D0-BCED-00A0C90AB50F} shdocvw.dll
{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} C:\WINDOWS\system32\SHELL32.dll
{EFA24E61-B078-11D0-89E4-00C04FC9E26E} C:\WINDOWS\system32\shdocvw.dll
{EFA24E62-B078-11D0-89E4-00C04FC9E26E} C:\WINDOWS\system32\shdocvw.dll

****************************************
All processes:

0 [System Process]
4 System
588 SMSS.EXE
636 CSRSS.EXE
660 WINLOGON.EXE
704 SERVICES.EXE
716 LSASS.EXE
880 SVCHOST.EXE
924 SVCHOST.EXE
1120 SVCHOST.EXE
1144 SVCHOST.EXE
1252 SPOOLSV.EXE
1352 ALG.EXE
1364 CISVC.EXE
1400 Navapsvc.exe
256 EXPLORER.EXE
400 Navapw32.exe
412 realsched.exe
432 aim.exe
564 DLG.exe
612 HotTray.exe
632 Dllcmd32.exe
900 WkCalRem.exe
944 NkVwMon.exe
816 MSMSGS.EXE
1068 CIDAEMON.EXE
1088 CIDAEMON.EXE
2008 OUTLOOK.EXE
1864 IEXPLORE.EXE
540 EXCEL.EXE
1664 spywarescanner.exe

****************************************
Result when scanning:

ClientMan.bho1 445.997.948 {96BE1D9A-9E54-4344-A27A-37C088D64FB4}
ClientMan.bho1 445.997.948 {CC916B4B-BE44-4026-A19D-8C74BBD23361}
ClientMan.bho1 445.997.949 %SystemDir%\MSEFFM.DLL

***************************************




Related links

Bazooka - Free scan for spyware, adware, trojan horses, keyloggers, etc. Detects more than 500 potentially unwanted applications. Freeware!

The File Database - Search the file database for more information. Free!

PopUp Blocker Test - Find out if your pop-up killer can handle all pop-ups. Free!

Kephyr Labs - Find out what is going on at Kephyr. Try products in an early stage of development.



FreeFixer
Read more about FreeFixer, Kephyr's latest spyware removal tool.
Home & Products |  Legal |  Privacy |  Search

© Kephyr, 2003-2012. HtmlTidy, HTML 4.01, CSS andy@kephyr.com