Bazooka Adware and Spyware Scanner Log 317

****************************************
Bazooka Adware and Spyware Scanner v1.13.01
http://www.kephyr.com/spywarescanner/
http://www.kephyr.com/spywarescanner/library/
Log created 09:56:27.
OS: Windows NT 5.1
Database version: 2.050000
Database format version: 1.020000
Database date: 20040526
Current date: 2004-05-28 09:56

****************************************
Result when scanning:

No potentially unwanted software found.
****************************************
Auto start entries:
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\desktop.ini
C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l
C:\Program Files\Microsoft Office\Office\OSA.EXE -b
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\desktop.ini
C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
C:\Program Files\Microsoft Office\Office\OSA9.EXE -b -l
C:\Program Files\Microsoft Office\Office\OSA.EXE -b
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\desktop.ini
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\Printkey.exe
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\desktop.ini
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\Printkey.exe

Go here to analyse the startup entries and the associated files:
http://www.kephyr.com/filedb/index.php

****************************************
Run entries:
Smapp C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Smapp

CPQEASYACC C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\CPQEASYACC

PROMon.exe PROMon.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PROMon.exe

WinampAgent C:\Program Files\Winamp\winampa.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WinampAgent

nod32kui C:\Program Files\Eset\nod32kui.exe /WAITSERVICE
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\nod32kui

Internat Service C:\Windows\System32\msvchost.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Internat Service

Windows report C:\Windows\swchost.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Windows report

FP Loader loadfp.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\FP Loader

Win32 Services C:\Windows\spoolsrv.cpl
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Win32 Services

CPQDFWAG C:\Windows\Cpqdiag\CpqDfwAg.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\CPQDFWAG

Win32 Services C:\Windows\spoolsrv.cpl
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Win32 Services

CTFMON.EXE C:\Windows\System32\ctfmon.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\CTFMON.EXE

MSMSGS "C:\Program Files\Messenger\msmsgs.exe" /background
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\MSMSGS

Win32 Services C:\Windows\spoolsrv.cpl
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Win32 Services

msmc C:\Windows\System32\msmc.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msmc

IEengine C:\Program Files\Internet Explorer\IEengine.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\IEengine

rundll32 C:\windows\rundll32.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\rundll32

dllhelp c:\windows
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\dllhelp

Go here to analyse the run entries and the associated files:
http://www.kephyr.com/filedb/index.php

****************************************
Browser helper objects:

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} not set C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

{CF021F40-3E14-23A5-CBA2-716D61788264} not set C:\Windows\System32\max8264.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CF021F40-3E14-23A5-CBA2-716D61788264}

****************************************
Toolbars:

{8E718888-423F-11D2-876E-00A0C9082467} C:\WINDOWS\System32\msdxm.ocx
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{8E718888-423F-11D2-876E-00A0C9082467}

{E0E899AB-F487-11D5-8D29-0050BA6940E3} Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOT\CLSID\{E0E899AB-F487-11D5-8D29-0050BA6940E3}\InprocServer32

System error message: Syst�m nem��e nal�zt uveden� soubor.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{E0E899AB-F487-11D5-8D29-0050BA6940E3}

{01E04581-4EEE-11D0-BFE9-00AA005B4383} C:\Windows\System32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{01E04581-4EEE-11D0-BFE9-00AA005B4383}

{0E5CBF21-D15F-11D0-8301-00AA005B4383} C:\Windows\system32\SHELL32.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}

{01E04581-4EEE-11D0-BFE9-00AA005B4383} C:\Windows\System32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{01E04581-4EEE-11D0-BFE9-00AA005B4383}

{0E5CBF21-D15F-11D0-8301-00AA005B4383} C:\Windows\system32\SHELL32.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}

{4D5C8C25-D075-11d0-B416-00C04FB90376} C:\Windows\System32\shdocvw.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376}

{32683183-48a0-441b-a342-7c2a440a9478} C:\Windows\System32\browseui.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478}

{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} C:\Windows\system32\SHELL32.dll
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}

****************************************
All processes:

[System Process]
System
smss.exe
csrss.exe
winlogon.exe
services.exe
lsass.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
spoolsv.exe
CPQDFWAG.EXE
nod32krn.exe
explorer.exe
STARTEAK.exe
PROMon.exe
winampa.exe
nod32kui.exe
msvchost.exe
loadfp.exe
rundll32.exe
ctfmon.exe
msmsgs.exe
IEengine.exe
CpqEAKSystemTray.exe
CPQEADM.exe
EAUSBKBD.exe
dllhelp.exe
BttnServ.exe
FINDFAST.EXE
OSA.EXE
Printkey.exe
IEXPLORE.EXE
msimn.exe
IEXPLORE.EXE
spywarescanner.exe
IEXPLORE.EXE

Go here to analyse the running processes:
http://www.kephyr.com/filedb/index.php

****************************************
Internet Explorer Settings:

http://www.google.sk/
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl\

Default_Page_URL http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL

Default_Search_URL http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL

Local Page C:\Windows\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page

Search Bar http://infoweb.minv.sk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Bar

Search Page http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page

Start Page http://infoweb.minv.sk
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page

Use Search Asst no
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Use Search Asst

http://google.sk/
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\

SearchAssistant http://your-searcher.com/sp.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant

CustomizeSearch http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch

http://
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix\

www http://
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\www

http://your-searcher.com/index.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\

provider gogl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\provider

Local Page C:\WINDOWS\System32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page

Search Bar http://your-searcher.com/sp.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar

Search Page http://your-searcher.com/index.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page

Start Page http://your-searcher.com/index.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page

Use Search Asst no
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Use Search Asst

http://www.google.sk
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\

SearchAssistant http://google.sk/
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\SearchAssistant

****************************************