J
jay
Ad-Aware SE Build 1.05
Logfile Created on:Tuesday, February 22, 2005 8:10:20 AM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R28 16.02.2005
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
MRU List(TAC index:0):22 total references
Tracking Cookie(TAC index:3):3 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan within archives
Set : Scan my Hosts file
Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user
only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates
critical objects
2-22-2005 8:10:20 AM - Scan started. (Smart mode)
Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 660
ThreadCreationTime : 2-22-2005 2:07:26 PM
BasePriority : Normal
#:2 [csrss.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 728
ThreadCreationTime : 2-22-2005 2:07:31 PM
BasePriority : Normal
#:3 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 752
ThreadCreationTime : 2-22-2005 2:07:31 PM
BasePriority : High
#:4 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 796
ThreadCreationTime : 2-22-2005 2:07:32 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : services.exe
#:5 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 808
ThreadCreationTime : 2-22-2005 2:07:32 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : lsass.exe
#:6 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 968
ThreadCreationTime : 2-22-2005 2:07:33 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:7 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1048
ThreadCreationTime : 2-22-2005 2:07:33 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:8 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1144
ThreadCreationTime : 2-22-2005 2:07:33 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:9 [s24evmon.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1196
ThreadCreationTime : 2-22-2005 2:07:34 PM
BasePriority : Normal
FileVersion : 8, 0, 0, 162
ProductVersion : 8, 0, 0, 162
ProductName : Mobile Unit Support Service
CompanyName : Intel Corporation
FileDescription : Event Monitor - Supports driver
extensions to NIC Driver for wireless adapters.
InternalName : S24EvMon
LegalCopyright : Copyright © 2001 - 2003 Intel
Corporation, 1997 - 2001 Symbol Technologies, Inc.
Portions Copyright © MIT
OriginalFilename : S24EvMon.exe
#:10 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1288
ThreadCreationTime : 2-22-2005 2:07:34 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:11 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1372
ThreadCreationTime : 2-22-2005 2:07:34 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:12 [ccsetmgr.exe]
FilePath : C:\Program Files\Common
Files\Symantec Shared\
ProcessID : 1468
ThreadCreationTime : 2-22-2005 2:07:34 PM
BasePriority : Normal
FileVersion : 2.2.0.577
ProductVersion : 2.2.0.577
ProductName : Common Client
CompanyName : Symantec Corporation
FileDescription : Common Client Settings Manager
Service
InternalName : ccSetMgr
LegalCopyright : Copyright (c) 2000-2003 Symantec
Corporation. All rights reserved.
OriginalFilename : ccSetMgr.exe
#:13 [ccevtmgr.exe]
FilePath : C:\Program Files\Common
Files\Symantec Shared\
ProcessID : 1496
ThreadCreationTime : 2-22-2005 2:07:35 PM
BasePriority : Normal
FileVersion : 2.2.0.577
ProductVersion : 2.2.0.577
ProductName : Common Client
CompanyName : Symantec Corporation
FileDescription : Common Client Event Manager
Service
InternalName : ccEvtMgr
LegalCopyright : Copyright (c) 2000-2003 Symantec
Corporation. All rights reserved.
OriginalFilename : ccEvtMgr.exe
#:14 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1616
ThreadCreationTime : 2-22-2005 2:07:35 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : spoolsv.exe
#:15 [defwatch.exe]
FilePath : C:\Program Files\Symantec
AntiVirus\
ProcessID : 108
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 9.0.0.338
ProductVersion : 9.0.0.338
ProductName : Symantec AntiVirus
CompanyName : Symantec Corporation
FileDescription : Virus Definition Daemon
InternalName : DefWatch
LegalCopyright : Copyright 1998 - 2004 Symantec
Corporation. All rights reserved.
OriginalFilename : DefWatch.exe
#:16 [rsobserv.exe]
FilePath : C:\PROGRA~1\ROCKWE~1\RSCOMMON\
ProcessID : 452
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 1, 19, 10, 0
ProductVersion : 1, 19, 10, 0
ProductName : Rockwell Sofware Hamony services
CompanyName : Rockwell Software Inc.
FileDescription : Harmony Object Server
InternalName : RSObServ
LegalCopyright : Copyright © 1995-2003 Rockwell
Software Inc.
OriginalFilename : RSObServ.exe
Comments : Harmony extendible service
manager
#:17 [frameworkservice.exe]
FilePath : C:\Program Files\Network
Associates\Common Framework\
ProcessID : 488
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 3.5.0.412
ProductName : McAfee Common Framework
CompanyName : Network Associates, Inc.
FileDescription : Framework Service
InternalName : Framework
LegalCopyright : Copyright© 2000-2004 Networks
Associates Technology, Inc. All Rights Reserved.
OriginalFilename : Framework.exe
#:18 [mdm.exe]
FilePath : C:\Program Files\Common
Files\Microsoft Shared\VS7Debug\
ProcessID : 644
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 7.00.9466
ProductVersion : 7.00.9466
ProductName : Microsoft® Visual Studio .NET
CompanyName : Microsoft Corporation
FileDescription : Machine Debug Manager
InternalName : mdm.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : mdm.exe
#:19 [opcenum.exe]
FilePath : C:\Program Files\Common
Files\OPC Foundation\
ProcessID : 680
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : OpcEnum Module
FileDescription : OpcEnum Module
InternalName : OPCENUM
LegalCopyright : Copyright 1998 OPC Foundation
OriginalFilename : OPCENUM.DLL
#:20 [regsrvc.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 924
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 8, 0, 0, 162
ProductVersion : 8, 0, 0, 162
ProductName : RegSrvc Module
CompanyName : Intel Corporation
FileDescription : RegSrvc Module
InternalName : RegSrvc
LegalCopyright : Copyright © 2002 - 2003 Intel
Corporation
OriginalFilename : RegSrvc.EXE
#:21 [rslinx.exe]
FilePath : C:\PROGRA~1\ROCKWE~1\RSLINX\
ProcessID : 1232
ThreadCreationTime : 2-22-2005 2:07:43 PM
BasePriority : Normal
FileVersion : 2.42.18.0
ProductVersion : 2.42.18.0
ProductName : RSLinx
CompanyName : Rockwell Software, Inc.
FileDescription : RSLinx Communications Server
InternalName : RSLinx
LegalCopyright : Copyright © 1996-2000 Rockwell
Software, Inc.
OriginalFilename : RSLinx
Comments : RSLinx Communications Server
#:22 [naprdmgr.exe]
FilePath : C:\PROGRA~1\NETWOR~1\COMMON~1\
ProcessID : 1252
ThreadCreationTime : 2-22-2005 2:07:46 PM
BasePriority : Normal
FileVersion : 3.5.0.412
ProductName : McAfee Common Framework
CompanyName : Network Associates, Inc.
FileDescription : NAI Product Manager
InternalName : Product Manager
LegalCopyright : Copyright© 2000-2004 Networks
Associates Technology, Inc. All Rights Reserved.
OriginalFilename : naPrdMgr.exe
#:23 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1316
ThreadCreationTime : 2-22-2005 2:07:46 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:24 [rtvscan.exe]
FilePath : C:\Program Files\Symantec
AntiVirus\
ProcessID : 1428
ThreadCreationTime : 2-22-2005 2:07:46 PM
BasePriority : Normal
FileVersion : 9.0.0.338
ProductVersion : 9.0.0.338
ProductName : Symantec AntiVirus
CompanyName : Symantec Corporation
FileDescription : Symantec AntiVirus
LegalCopyright : Copyright 1991 - 2004 Symantec
Corporation. All rights reserved.
#:25 [wuauclt.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1908
ThreadCreationTime : 2-22-2005 2:07:49 PM
BasePriority : Normal
FileVersion : 5.4.3790.2182 built by: srv03_rtm
(ntvbl04)
ProductVersion : 5.4.3790.2182
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Automatic Updates
InternalName : wuauclt.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : wuauclt.exe
#:26 [alg.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2100
ThreadCreationTime : 2-22-2005 2:08:14 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Application Layer Gateway Service
InternalName : ALG.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : ALG.exe
#:27 [zcfgsvc.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 2468
ThreadCreationTime : 2-22-2005 2:08:19 PM
BasePriority : Normal
FileVersion : 8, 0, 0, 162
ProductVersion : 8, 0, 0, 162
ProductName : ZeroCfgSvc Application
CompanyName : Intel Corporation
FileDescription : ZeroCfgSvc MFC Application
InternalName : ZeroCfgSvc
LegalCopyright : Copyright © 2002 - 2003 Intel
Corporation
OriginalFilename : ZeroCfgSvc.EXE
#:28 [1xconfig.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2580
ThreadCreationTime : 2-22-2005 2:08:20 PM
BasePriority : Normal
FileVersion : 8, 0, 0, 162
ProductVersion : 8, 0, 0, 162
ProductName : 8021XConfig Module
CompanyName : Intel
FileDescription : 8021XConfig Module
InternalName : 8021XConfig
LegalCopyright : Copyright 2003
OriginalFilename : 1XConfig.EXE
Comments : Wrapper for MH. (Service COM)
#:29 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 2976
ThreadCreationTime : 2-22-2005 2:08:25 PM
BasePriority : Normal
FileVersion : 6.00.2900.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : EXPLORER.EXE
#:30 [jusched.exe]
FilePath : C:\Program
Files\Java\j2re1.4.2_05\bin\
ProcessID : 3096
ThreadCreationTime : 2-22-2005 2:08:27 PM
BasePriority : Normal
#:31 [statusclient.exe]
FilePath : C:\Program Files\Hewlett-
Packard\Toolbox2.0\Apache Tomcat 4.0
\webapps\Toolbox\StatusClient\
ProcessID : 3144
ThreadCreationTime : 2-22-2005 2:08:27 PM
BasePriority : Normal
FileVersion : 00.00.13
ProductVersion : 00.00.13
ProductName : Hewlett-Packard T-TR Status
Client
CompanyName : Hewlett-Packard
FileDescription : Hewlett-Packard T-TR Status
Client
InternalName : StatusClient.exe
LegalCopyright : Copyright © 2002 Hewlett-Packard
Company
LegalTrademarks : All Rights Reserved.
OriginalFilename : StatusClient.exe
#:32 [msnappau.exe]
FilePath : C:\Program Files\MSN
Apps\Updater\01.02.3000.1001\en-us\
ProcessID : 3312
ThreadCreationTime : 2-22-2005 2:08:28 PM
BasePriority : Normal
#:33 [updaterui.exe]
FilePath : C:\Program Files\Network
Associates\Common Framework\
ProcessID : 3320
ThreadCreationTime : 2-22-2005 2:08:29 PM
BasePriority : Normal
FileVersion : 3.5.0.412
ProductName : McAfee Common Framework
CompanyName : Network Associates, Inc.
FileDescription : Common User Interface
InternalName : UpdaterUI
LegalCopyright : Copyright© 2000-2004 Networks
Associates Technology, Inc. All Rights Reserved.
OriginalFilename : UpdaterUI.exe
#:34 [ituneshelper.exe]
FilePath : C:\Program Files\iTunes\
ProcessID : 3336
ThreadCreationTime : 2-22-2005 2:08:29 PM
BasePriority : Normal
FileVersion : 4.7.1.30
ProductVersion : 4.7.1.30
ProductName : iTunes
CompanyName : Apple Computer, Inc.
FileDescription : iTunesHelper Module
InternalName : iTunesHelper
LegalCopyright : © 2003-2004 Apple Computer, Inc.
All Rights Reserved.
OriginalFilename : iTunesHelper.exe
#:35 [hkcmd.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 3368
ThreadCreationTime : 2-22-2005 2:08:30 PM
BasePriority : Normal
FileVersion : 3.0.0.3889
ProductVersion : 7.0.0.3889
ProductName : Intel(R) Common User Interface
CompanyName : Intel Corporation
FileDescription : hkcmd Module
InternalName : HKCMD
LegalCopyright : Copyright 1999-2002, Intel
Corporation
OriginalFilename : HKCMD.EXE
#:36 [ipodservice.exe]
FilePath : C:\Program Files\iPod\bin\
ProcessID : 3452
ThreadCreationTime : 2-22-2005 2:08:30 PM
BasePriority : Normal
FileVersion : 4.7.1.30
ProductVersion : 4.7.1.30
ProductName : iTunes
CompanyName : Apple Computer, Inc.
FileDescription : iPodService Module
InternalName : iPodService
LegalCopyright : © 2003-2004 Apple Computer, Inc.
All Rights Reserved.
OriginalFilename : iPodService.exe
#:37 [quickset.exe]
FilePath : C:\Program Files\Dell\QuickSet\
ProcessID : 3476
ThreadCreationTime : 2-22-2005 2:08:31 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : QuickSet Application
FileDescription : QuickSet MFC Application
InternalName : direct
LegalCopyright : Copyright (C) 2001
OriginalFilename : direct.EXE
#:38 [apoint.exe]
FilePath : C:\Program Files\Apoint\
ProcessID : 3536
ThreadCreationTime : 2-22-2005 2:08:31 PM
BasePriority : Normal
FileVersion : 5.5.101.123
ProductVersion : 5.5.101.123
ProductName : Alps Pointing-device Driver
CompanyName : Alps Electric Co., Ltd.
FileDescription : Alps Pointing-device Driver
InternalName : Alps Pointing-device Driver
LegalCopyright : Copyright (C) 1999-2003 Alps
Electric Co., Ltd.
OriginalFilename : Apoint.exe
#:39 [ccapp.exe]
FilePath : C:\Program Files\Common
Files\Symantec Shared\
ProcessID : 3668
ThreadCreationTime : 2-22-2005 2:08:31 PM
BasePriority : Normal
FileVersion : 2.2.0.577
ProductVersion : 2.2.0.577
ProductName : Common Client
CompanyName : Symantec Corporation
FileDescription : Common Client User Session
InternalName : ccApp
LegalCopyright : Copyright (c) 2000-2003 Symantec
Corporation. All rights reserved.
OriginalFilename : ccApp.exe
#:40 [vptray.exe]
FilePath : C:\PROGRA~1\SYMANT~1\
ProcessID : 3692
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Normal
FileVersion : 9.0.0.338
ProductVersion : 9.0.0.338
ProductName : Symantec AntiVirus
CompanyName : Symantec Corporation
FileDescription : Symantec AntiVirus
LegalCopyright : Copyright 1991 - 2004 Symantec
Corporation. All rights reserved.
#:41 [gcasserv.exe]
FilePath : C:\Program Files\Microsoft
AntiSpyware\
ProcessID : 3720
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Idle
FileVersion : 1.00.0509
ProductVersion : 1.00.0509
ProductName : Microsoft AntiSpyware (Beta 1)
CompanyName : Microsoft Corporation
FileDescription : Microsoft AntiSpyware Service
InternalName : gcasServ
LegalCopyright : Copyright © 2004-2005 Microsoft
Corporation. All rights reserved.
LegalTrademarks : Microsoft® and Windows® are
registered trademarks of Microsoft Corporation. SpyNet
(tm) is a trademark of Microsoft Corporation.
OriginalFilename : gcasServ.exe
#:42 [realsched.exe]
FilePath : C:\Program Files\Common
Files\Real\Update_OB\
ProcessID : 3728
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Normal
FileVersion : 0.1.0.3034
ProductVersion : 0.1.0.3034
ProductName : RealPlayer (32-bit)
CompanyName : RealNetworks, Inc.
FileDescription : RealNetworks Scheduler
InternalName : schedapp
LegalCopyright : Copyright © RealNetworks, Inc.
1995-2004
LegalTrademarks : RealAudio(tm) is a trademark of
RealNetworks, Inc.
OriginalFilename : realsched.exe
#:43 [javaw.exe]
FilePath : C:\Program Files\Hewlett-
Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\
ProcessID : 3768
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Normal
#:44 [apntex.exe]
FilePath : C:\Program Files\Apoint\
ProcessID : 3776
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Normal
FileVersion : 5.0.1.15
ProductVersion : 5.0.1.15
ProductName : Alps Pointing-device Driver for
Windows NT/2000/XP
CompanyName : Alps Electric Co., Ltd.
FileDescription : Alps Pointing-device Driver for
Windows NT/2000/XP
InternalName : Alps Pointing-device Driver for
Windows NT/2000/XP
LegalCopyright : Copyright (C) 1998-2003 Alps
Electric Co., Ltd.
OriginalFilename : ApntEx.exe
#:45 [ctfmon.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 3788
ThreadCreationTime : 2-22-2005 2:08:33 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : CTFMON.EXE
#:46 [dlg.exe]
FilePath : C:\Program Files\Digital Line
Detect\
ProcessID : 3880
ThreadCreationTime : 2-22-2005 2:08:33 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : BVRP Software TestLine
CompanyName : BVRP Software
FileDescription : Digital Line Detection
InternalName : TestLine
LegalCopyright : Copyright © 2003
OriginalFilename : TestLine.exe
#:47 [wweb32.exe]
FilePath : C:\Program Files\WordWeb\
ProcessID : 3928
ThreadCreationTime : 2-22-2005 2:08:34 PM
BasePriority : Normal
FileVersion : 3.0.1.0
ProductVersion : 3.0.1.0
ProductName : WordWeb
CompanyName : Antony Lewis
FileDescription : WordWeb thesaurus/dictionary
LegalCopyright : Antony Lewis 2004
Comments : See wordweb.info
#:48 [gcasdtserv.exe]
FilePath : C:\Program Files\Microsoft
AntiSpyware\
ProcessID : 2032
ThreadCreationTime : 2-22-2005 2:08:36 PM
BasePriority : Normal
FileVersion : 1.00.0509
ProductVersion : 1.00.0509
ProductName : Microsoft AntiSpyware (Beta 1)
CompanyName : Microsoft Corporation
FileDescription : Microsoft AntiSpyware Data
Service
InternalName : gcasDtServ
LegalCopyright : Copyright © 2004-2005 Microsoft
Corporation. All rights reserved.
LegalTrademarks : Microsoft® and Windows® are
registered trademarks of Microsoft Corporation. SpyNet
(tm) is a trademark of Microsoft Corporation.
OriginalFilename : gcasDtServ.exe
#:49 [iexplore.exe]
FilePath : C:\Program Files\Internet
Explorer\
ProcessID : 2324
ThreadCreationTime : 2-22-2005 2:08:59 PM
BasePriority : Normal
FileVersion : 6.00.2900.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : IEXPLORE.EXE
#:50 [ad-aware.exe]
FilePath : C:\Program Files\Lavasoft\Ad-
Aware SE Personal\
ProcessID : 3200
ThreadCreationTime : 2-22-2005 2:09:50 PM
BasePriority : Normal
FileVersion : 6.2.0.206
ProductVersion : VI.Second Edition
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved
Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0
Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0
Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0
Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : fsjcv111@tripod[1].txt
Category : Data Miner
Comment : Hits:3
Value : Cookie:[email protected]/
Expires : 2-22-2006 12:04:10 AM
LastSync : Hits:3
UseCount : 0
Hits : 3
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : fsjcv111@metriweb[1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:[email protected]/
Expires : 2-21-2006 11:49:32 PM
LastSync : Hits:1
UseCount : 0
Hits : 1
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : fsjcv111@realmedia[2].txt
Category : Data Miner
Comment : Hits:8
Value : Cookie:[email protected]/
Expires : 12-31-2010 6:00:00 PM
LastSync : Hits:8
UseCount : 0
Hits : 8
Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 3
Objects found so far: 3
Deep scanning and examining files...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Disk Scan Result for C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 3
Disk Scan Result for C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 3
Disk Scan Result for C:\DOCUME~1\fsjcv111\LOCALS~1\Temp\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 3
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\explorer\runmru
Description : mru list for items opened in
start | run
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\search assistant\acmru
Description : list of recent search terms used
with the search assistant
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\explorer\comdlg
32\opensavemru
Description : list of recently saved files,
stored according to file extension
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\explorer\comdlg
32\lastvisitedmru
Description : list of recent programs opened
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\explorer\recent
docs
Description : list of recent documents opened
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\office\10.0
\common\open find\microsoft word\settings\save as\file
name mru
Description : list of recent documents saved
by microsoft word
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\office\10.0
\excel\recent files
Description : list of recent files used by
microsoft excel
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\mediaplayer\player\recentfilelist
Description : list of recently used files in
microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\realnetworks\realplayer\6.0
\preferences
Description : list of recent skins in
realplayer
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\internet explorer
Description : last download directory used in
microsoft internet explorer
MRU List Object Recognized!
Location: :
software\microsoft\directdraw\mostrecentapplication
Description : most recent application to use
microsoft directdraw
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\microsoft management
console\recent file list
Description : list of recent snap-ins used in
the microsoft management console
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\office\10.0
\common\general
Description : list of recently used symbols in
microsoft office
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\adobe\acrobat reader\6.0
\avgeneral\crecentfiles
Description : list of recently used files in
adobe reader
MRU List Object Recognized!
Location: :
software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use
microsoft direct3d
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\mediaplayer\preferences
Description : last playlist index loaded in
microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\realnetworks\realplayer\6.0
\preferences
Description : list of recent clips in
realplayer
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\applets\regedit
Description : last key accessed using the
microsoft registry editor
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in
microsoft windows media player
MRU List Object Recognized!
Location: :
software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use
microsoft direct X
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\windows
media\wmsdk\general
Description : windows media sdk
MRU List Object Recognized!
Location: : C:\Documents and
Settings\fsjcv111\Application Data\microsoft\office\recent
Description : list of recently opened
documents using microsoft office
Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 25
8:16:30 AM Scan Complete
Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:06:09.211
Objects scanned:68895
Objects identified:3
Objects ignored:0
New critical objects:3
Logfile Created on:Tuesday, February 22, 2005 8:10:20 AM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R28 16.02.2005
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
MRU List(TAC index:0):22 total references
Tracking Cookie(TAC index:3):3 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan within archives
Set : Scan my Hosts file
Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user
only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates
critical objects
2-22-2005 8:10:20 AM - Scan started. (Smart mode)
Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 660
ThreadCreationTime : 2-22-2005 2:07:26 PM
BasePriority : Normal
#:2 [csrss.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 728
ThreadCreationTime : 2-22-2005 2:07:31 PM
BasePriority : Normal
#:3 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 752
ThreadCreationTime : 2-22-2005 2:07:31 PM
BasePriority : High
#:4 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 796
ThreadCreationTime : 2-22-2005 2:07:32 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : services.exe
#:5 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 808
ThreadCreationTime : 2-22-2005 2:07:32 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : lsass.exe
#:6 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 968
ThreadCreationTime : 2-22-2005 2:07:33 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:7 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1048
ThreadCreationTime : 2-22-2005 2:07:33 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:8 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1144
ThreadCreationTime : 2-22-2005 2:07:33 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:9 [s24evmon.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1196
ThreadCreationTime : 2-22-2005 2:07:34 PM
BasePriority : Normal
FileVersion : 8, 0, 0, 162
ProductVersion : 8, 0, 0, 162
ProductName : Mobile Unit Support Service
CompanyName : Intel Corporation
FileDescription : Event Monitor - Supports driver
extensions to NIC Driver for wireless adapters.
InternalName : S24EvMon
LegalCopyright : Copyright © 2001 - 2003 Intel
Corporation, 1997 - 2001 Symbol Technologies, Inc.
Portions Copyright © MIT
OriginalFilename : S24EvMon.exe
#:10 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1288
ThreadCreationTime : 2-22-2005 2:07:34 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:11 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1372
ThreadCreationTime : 2-22-2005 2:07:34 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:12 [ccsetmgr.exe]
FilePath : C:\Program Files\Common
Files\Symantec Shared\
ProcessID : 1468
ThreadCreationTime : 2-22-2005 2:07:34 PM
BasePriority : Normal
FileVersion : 2.2.0.577
ProductVersion : 2.2.0.577
ProductName : Common Client
CompanyName : Symantec Corporation
FileDescription : Common Client Settings Manager
Service
InternalName : ccSetMgr
LegalCopyright : Copyright (c) 2000-2003 Symantec
Corporation. All rights reserved.
OriginalFilename : ccSetMgr.exe
#:13 [ccevtmgr.exe]
FilePath : C:\Program Files\Common
Files\Symantec Shared\
ProcessID : 1496
ThreadCreationTime : 2-22-2005 2:07:35 PM
BasePriority : Normal
FileVersion : 2.2.0.577
ProductVersion : 2.2.0.577
ProductName : Common Client
CompanyName : Symantec Corporation
FileDescription : Common Client Event Manager
Service
InternalName : ccEvtMgr
LegalCopyright : Copyright (c) 2000-2003 Symantec
Corporation. All rights reserved.
OriginalFilename : ccEvtMgr.exe
#:14 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1616
ThreadCreationTime : 2-22-2005 2:07:35 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : spoolsv.exe
#:15 [defwatch.exe]
FilePath : C:\Program Files\Symantec
AntiVirus\
ProcessID : 108
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 9.0.0.338
ProductVersion : 9.0.0.338
ProductName : Symantec AntiVirus
CompanyName : Symantec Corporation
FileDescription : Virus Definition Daemon
InternalName : DefWatch
LegalCopyright : Copyright 1998 - 2004 Symantec
Corporation. All rights reserved.
OriginalFilename : DefWatch.exe
#:16 [rsobserv.exe]
FilePath : C:\PROGRA~1\ROCKWE~1\RSCOMMON\
ProcessID : 452
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 1, 19, 10, 0
ProductVersion : 1, 19, 10, 0
ProductName : Rockwell Sofware Hamony services
CompanyName : Rockwell Software Inc.
FileDescription : Harmony Object Server
InternalName : RSObServ
LegalCopyright : Copyright © 1995-2003 Rockwell
Software Inc.
OriginalFilename : RSObServ.exe
Comments : Harmony extendible service
manager
#:17 [frameworkservice.exe]
FilePath : C:\Program Files\Network
Associates\Common Framework\
ProcessID : 488
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 3.5.0.412
ProductName : McAfee Common Framework
CompanyName : Network Associates, Inc.
FileDescription : Framework Service
InternalName : Framework
LegalCopyright : Copyright© 2000-2004 Networks
Associates Technology, Inc. All Rights Reserved.
OriginalFilename : Framework.exe
#:18 [mdm.exe]
FilePath : C:\Program Files\Common
Files\Microsoft Shared\VS7Debug\
ProcessID : 644
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 7.00.9466
ProductVersion : 7.00.9466
ProductName : Microsoft® Visual Studio .NET
CompanyName : Microsoft Corporation
FileDescription : Machine Debug Manager
InternalName : mdm.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : mdm.exe
#:19 [opcenum.exe]
FilePath : C:\Program Files\Common
Files\OPC Foundation\
ProcessID : 680
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : OpcEnum Module
FileDescription : OpcEnum Module
InternalName : OPCENUM
LegalCopyright : Copyright 1998 OPC Foundation
OriginalFilename : OPCENUM.DLL
#:20 [regsrvc.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 924
ThreadCreationTime : 2-22-2005 2:07:42 PM
BasePriority : Normal
FileVersion : 8, 0, 0, 162
ProductVersion : 8, 0, 0, 162
ProductName : RegSrvc Module
CompanyName : Intel Corporation
FileDescription : RegSrvc Module
InternalName : RegSrvc
LegalCopyright : Copyright © 2002 - 2003 Intel
Corporation
OriginalFilename : RegSrvc.EXE
#:21 [rslinx.exe]
FilePath : C:\PROGRA~1\ROCKWE~1\RSLINX\
ProcessID : 1232
ThreadCreationTime : 2-22-2005 2:07:43 PM
BasePriority : Normal
FileVersion : 2.42.18.0
ProductVersion : 2.42.18.0
ProductName : RSLinx
CompanyName : Rockwell Software, Inc.
FileDescription : RSLinx Communications Server
InternalName : RSLinx
LegalCopyright : Copyright © 1996-2000 Rockwell
Software, Inc.
OriginalFilename : RSLinx
Comments : RSLinx Communications Server
#:22 [naprdmgr.exe]
FilePath : C:\PROGRA~1\NETWOR~1\COMMON~1\
ProcessID : 1252
ThreadCreationTime : 2-22-2005 2:07:46 PM
BasePriority : Normal
FileVersion : 3.5.0.412
ProductName : McAfee Common Framework
CompanyName : Network Associates, Inc.
FileDescription : NAI Product Manager
InternalName : Product Manager
LegalCopyright : Copyright© 2000-2004 Networks
Associates Technology, Inc. All Rights Reserved.
OriginalFilename : naPrdMgr.exe
#:23 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1316
ThreadCreationTime : 2-22-2005 2:07:46 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32
Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : svchost.exe
#:24 [rtvscan.exe]
FilePath : C:\Program Files\Symantec
AntiVirus\
ProcessID : 1428
ThreadCreationTime : 2-22-2005 2:07:46 PM
BasePriority : Normal
FileVersion : 9.0.0.338
ProductVersion : 9.0.0.338
ProductName : Symantec AntiVirus
CompanyName : Symantec Corporation
FileDescription : Symantec AntiVirus
LegalCopyright : Copyright 1991 - 2004 Symantec
Corporation. All rights reserved.
#:25 [wuauclt.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1908
ThreadCreationTime : 2-22-2005 2:07:49 PM
BasePriority : Normal
FileVersion : 5.4.3790.2182 built by: srv03_rtm
(ntvbl04)
ProductVersion : 5.4.3790.2182
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Automatic Updates
InternalName : wuauclt.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : wuauclt.exe
#:26 [alg.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2100
ThreadCreationTime : 2-22-2005 2:08:14 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Application Layer Gateway Service
InternalName : ALG.exe
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : ALG.exe
#:27 [zcfgsvc.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 2468
ThreadCreationTime : 2-22-2005 2:08:19 PM
BasePriority : Normal
FileVersion : 8, 0, 0, 162
ProductVersion : 8, 0, 0, 162
ProductName : ZeroCfgSvc Application
CompanyName : Intel Corporation
FileDescription : ZeroCfgSvc MFC Application
InternalName : ZeroCfgSvc
LegalCopyright : Copyright © 2002 - 2003 Intel
Corporation
OriginalFilename : ZeroCfgSvc.EXE
#:28 [1xconfig.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 2580
ThreadCreationTime : 2-22-2005 2:08:20 PM
BasePriority : Normal
FileVersion : 8, 0, 0, 162
ProductVersion : 8, 0, 0, 162
ProductName : 8021XConfig Module
CompanyName : Intel
FileDescription : 8021XConfig Module
InternalName : 8021XConfig
LegalCopyright : Copyright 2003
OriginalFilename : 1XConfig.EXE
Comments : Wrapper for MH. (Service COM)
#:29 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 2976
ThreadCreationTime : 2-22-2005 2:08:25 PM
BasePriority : Normal
FileVersion : 6.00.2900.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : EXPLORER.EXE
#:30 [jusched.exe]
FilePath : C:\Program
Files\Java\j2re1.4.2_05\bin\
ProcessID : 3096
ThreadCreationTime : 2-22-2005 2:08:27 PM
BasePriority : Normal
#:31 [statusclient.exe]
FilePath : C:\Program Files\Hewlett-
Packard\Toolbox2.0\Apache Tomcat 4.0
\webapps\Toolbox\StatusClient\
ProcessID : 3144
ThreadCreationTime : 2-22-2005 2:08:27 PM
BasePriority : Normal
FileVersion : 00.00.13
ProductVersion : 00.00.13
ProductName : Hewlett-Packard T-TR Status
Client
CompanyName : Hewlett-Packard
FileDescription : Hewlett-Packard T-TR Status
Client
InternalName : StatusClient.exe
LegalCopyright : Copyright © 2002 Hewlett-Packard
Company
LegalTrademarks : All Rights Reserved.
OriginalFilename : StatusClient.exe
#:32 [msnappau.exe]
FilePath : C:\Program Files\MSN
Apps\Updater\01.02.3000.1001\en-us\
ProcessID : 3312
ThreadCreationTime : 2-22-2005 2:08:28 PM
BasePriority : Normal
#:33 [updaterui.exe]
FilePath : C:\Program Files\Network
Associates\Common Framework\
ProcessID : 3320
ThreadCreationTime : 2-22-2005 2:08:29 PM
BasePriority : Normal
FileVersion : 3.5.0.412
ProductName : McAfee Common Framework
CompanyName : Network Associates, Inc.
FileDescription : Common User Interface
InternalName : UpdaterUI
LegalCopyright : Copyright© 2000-2004 Networks
Associates Technology, Inc. All Rights Reserved.
OriginalFilename : UpdaterUI.exe
#:34 [ituneshelper.exe]
FilePath : C:\Program Files\iTunes\
ProcessID : 3336
ThreadCreationTime : 2-22-2005 2:08:29 PM
BasePriority : Normal
FileVersion : 4.7.1.30
ProductVersion : 4.7.1.30
ProductName : iTunes
CompanyName : Apple Computer, Inc.
FileDescription : iTunesHelper Module
InternalName : iTunesHelper
LegalCopyright : © 2003-2004 Apple Computer, Inc.
All Rights Reserved.
OriginalFilename : iTunesHelper.exe
#:35 [hkcmd.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 3368
ThreadCreationTime : 2-22-2005 2:08:30 PM
BasePriority : Normal
FileVersion : 3.0.0.3889
ProductVersion : 7.0.0.3889
ProductName : Intel(R) Common User Interface
CompanyName : Intel Corporation
FileDescription : hkcmd Module
InternalName : HKCMD
LegalCopyright : Copyright 1999-2002, Intel
Corporation
OriginalFilename : HKCMD.EXE
#:36 [ipodservice.exe]
FilePath : C:\Program Files\iPod\bin\
ProcessID : 3452
ThreadCreationTime : 2-22-2005 2:08:30 PM
BasePriority : Normal
FileVersion : 4.7.1.30
ProductVersion : 4.7.1.30
ProductName : iTunes
CompanyName : Apple Computer, Inc.
FileDescription : iPodService Module
InternalName : iPodService
LegalCopyright : © 2003-2004 Apple Computer, Inc.
All Rights Reserved.
OriginalFilename : iPodService.exe
#:37 [quickset.exe]
FilePath : C:\Program Files\Dell\QuickSet\
ProcessID : 3476
ThreadCreationTime : 2-22-2005 2:08:31 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : QuickSet Application
FileDescription : QuickSet MFC Application
InternalName : direct
LegalCopyright : Copyright (C) 2001
OriginalFilename : direct.EXE
#:38 [apoint.exe]
FilePath : C:\Program Files\Apoint\
ProcessID : 3536
ThreadCreationTime : 2-22-2005 2:08:31 PM
BasePriority : Normal
FileVersion : 5.5.101.123
ProductVersion : 5.5.101.123
ProductName : Alps Pointing-device Driver
CompanyName : Alps Electric Co., Ltd.
FileDescription : Alps Pointing-device Driver
InternalName : Alps Pointing-device Driver
LegalCopyright : Copyright (C) 1999-2003 Alps
Electric Co., Ltd.
OriginalFilename : Apoint.exe
#:39 [ccapp.exe]
FilePath : C:\Program Files\Common
Files\Symantec Shared\
ProcessID : 3668
ThreadCreationTime : 2-22-2005 2:08:31 PM
BasePriority : Normal
FileVersion : 2.2.0.577
ProductVersion : 2.2.0.577
ProductName : Common Client
CompanyName : Symantec Corporation
FileDescription : Common Client User Session
InternalName : ccApp
LegalCopyright : Copyright (c) 2000-2003 Symantec
Corporation. All rights reserved.
OriginalFilename : ccApp.exe
#:40 [vptray.exe]
FilePath : C:\PROGRA~1\SYMANT~1\
ProcessID : 3692
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Normal
FileVersion : 9.0.0.338
ProductVersion : 9.0.0.338
ProductName : Symantec AntiVirus
CompanyName : Symantec Corporation
FileDescription : Symantec AntiVirus
LegalCopyright : Copyright 1991 - 2004 Symantec
Corporation. All rights reserved.
#:41 [gcasserv.exe]
FilePath : C:\Program Files\Microsoft
AntiSpyware\
ProcessID : 3720
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Idle
FileVersion : 1.00.0509
ProductVersion : 1.00.0509
ProductName : Microsoft AntiSpyware (Beta 1)
CompanyName : Microsoft Corporation
FileDescription : Microsoft AntiSpyware Service
InternalName : gcasServ
LegalCopyright : Copyright © 2004-2005 Microsoft
Corporation. All rights reserved.
LegalTrademarks : Microsoft® and Windows® are
registered trademarks of Microsoft Corporation. SpyNet
(tm) is a trademark of Microsoft Corporation.
OriginalFilename : gcasServ.exe
#:42 [realsched.exe]
FilePath : C:\Program Files\Common
Files\Real\Update_OB\
ProcessID : 3728
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Normal
FileVersion : 0.1.0.3034
ProductVersion : 0.1.0.3034
ProductName : RealPlayer (32-bit)
CompanyName : RealNetworks, Inc.
FileDescription : RealNetworks Scheduler
InternalName : schedapp
LegalCopyright : Copyright © RealNetworks, Inc.
1995-2004
LegalTrademarks : RealAudio(tm) is a trademark of
RealNetworks, Inc.
OriginalFilename : realsched.exe
#:43 [javaw.exe]
FilePath : C:\Program Files\Hewlett-
Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\
ProcessID : 3768
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Normal
#:44 [apntex.exe]
FilePath : C:\Program Files\Apoint\
ProcessID : 3776
ThreadCreationTime : 2-22-2005 2:08:32 PM
BasePriority : Normal
FileVersion : 5.0.1.15
ProductVersion : 5.0.1.15
ProductName : Alps Pointing-device Driver for
Windows NT/2000/XP
CompanyName : Alps Electric Co., Ltd.
FileDescription : Alps Pointing-device Driver for
Windows NT/2000/XP
InternalName : Alps Pointing-device Driver for
Windows NT/2000/XP
LegalCopyright : Copyright (C) 1998-2003 Alps
Electric Co., Ltd.
OriginalFilename : ApntEx.exe
#:45 [ctfmon.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 3788
ThreadCreationTime : 2-22-2005 2:08:33 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : CTFMON.EXE
#:46 [dlg.exe]
FilePath : C:\Program Files\Digital Line
Detect\
ProcessID : 3880
ThreadCreationTime : 2-22-2005 2:08:33 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
ProductName : BVRP Software TestLine
CompanyName : BVRP Software
FileDescription : Digital Line Detection
InternalName : TestLine
LegalCopyright : Copyright © 2003
OriginalFilename : TestLine.exe
#:47 [wweb32.exe]
FilePath : C:\Program Files\WordWeb\
ProcessID : 3928
ThreadCreationTime : 2-22-2005 2:08:34 PM
BasePriority : Normal
FileVersion : 3.0.1.0
ProductVersion : 3.0.1.0
ProductName : WordWeb
CompanyName : Antony Lewis
FileDescription : WordWeb thesaurus/dictionary
LegalCopyright : Antony Lewis 2004
Comments : See wordweb.info
#:48 [gcasdtserv.exe]
FilePath : C:\Program Files\Microsoft
AntiSpyware\
ProcessID : 2032
ThreadCreationTime : 2-22-2005 2:08:36 PM
BasePriority : Normal
FileVersion : 1.00.0509
ProductVersion : 1.00.0509
ProductName : Microsoft AntiSpyware (Beta 1)
CompanyName : Microsoft Corporation
FileDescription : Microsoft AntiSpyware Data
Service
InternalName : gcasDtServ
LegalCopyright : Copyright © 2004-2005 Microsoft
Corporation. All rights reserved.
LegalTrademarks : Microsoft® and Windows® are
registered trademarks of Microsoft Corporation. SpyNet
(tm) is a trademark of Microsoft Corporation.
OriginalFilename : gcasDtServ.exe
#:49 [iexplore.exe]
FilePath : C:\Program Files\Internet
Explorer\
ProcessID : 2324
ThreadCreationTime : 2-22-2005 2:08:59 PM
BasePriority : Normal
FileVersion : 6.00.2900.2180
(xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Microsoft® Windows® Operating
System
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
LegalCopyright : © Microsoft Corporation. All
rights reserved.
OriginalFilename : IEXPLORE.EXE
#:50 [ad-aware.exe]
FilePath : C:\Program Files\Lavasoft\Ad-
Aware SE Personal\
ProcessID : 3200
ThreadCreationTime : 2-22-2005 2:09:50 PM
BasePriority : Normal
FileVersion : 6.2.0.206
ProductVersion : VI.Second Edition
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved
Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0
Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0
Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0
Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : fsjcv111@tripod[1].txt
Category : Data Miner
Comment : Hits:3
Value : Cookie:[email protected]/
Expires : 2-22-2006 12:04:10 AM
LastSync : Hits:3
UseCount : 0
Hits : 3
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : fsjcv111@metriweb[1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:[email protected]/
Expires : 2-21-2006 11:49:32 PM
LastSync : Hits:1
UseCount : 0
Hits : 1
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : fsjcv111@realmedia[2].txt
Category : Data Miner
Comment : Hits:8
Value : Cookie:[email protected]/
Expires : 12-31-2010 6:00:00 PM
LastSync : Hits:8
UseCount : 0
Hits : 8
Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 3
Objects found so far: 3
Deep scanning and examining files...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Disk Scan Result for C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 3
Disk Scan Result for C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 3
Disk Scan Result for C:\DOCUME~1\fsjcv111\LOCALS~1\Temp\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 3
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\explorer\runmru
Description : mru list for items opened in
start | run
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\search assistant\acmru
Description : list of recent search terms used
with the search assistant
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\explorer\comdlg
32\opensavemru
Description : list of recently saved files,
stored according to file extension
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\explorer\comdlg
32\lastvisitedmru
Description : list of recent programs opened
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\explorer\recent
docs
Description : list of recent documents opened
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\office\10.0
\common\open find\microsoft word\settings\save as\file
name mru
Description : list of recent documents saved
by microsoft word
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\office\10.0
\excel\recent files
Description : list of recent files used by
microsoft excel
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\mediaplayer\player\recentfilelist
Description : list of recently used files in
microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\realnetworks\realplayer\6.0
\preferences
Description : list of recent skins in
realplayer
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\internet explorer
Description : last download directory used in
microsoft internet explorer
MRU List Object Recognized!
Location: :
software\microsoft\directdraw\mostrecentapplication
Description : most recent application to use
microsoft directdraw
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\microsoft management
console\recent file list
Description : list of recent snap-ins used in
the microsoft management console
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\office\10.0
\common\general
Description : list of recently used symbols in
microsoft office
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\adobe\acrobat reader\6.0
\avgeneral\crecentfiles
Description : list of recently used files in
adobe reader
MRU List Object Recognized!
Location: :
software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use
microsoft direct3d
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\mediaplayer\preferences
Description : last playlist index loaded in
microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\realnetworks\realplayer\6.0
\preferences
Description : list of recent clips in
realplayer
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\windows\currentversion\applets\regedit
Description : last key accessed using the
microsoft registry editor
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310
\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in
microsoft windows media player
MRU List Object Recognized!
Location: :
software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use
microsoft direct X
MRU List Object Recognized!
Location: : S-1-5-21-790525478-1708537768-
1801674531-18310\software\microsoft\windows
media\wmsdk\general
Description : windows media sdk
MRU List Object Recognized!
Location: : C:\Documents and
Settings\fsjcv111\Application Data\microsoft\office\recent
Description : list of recently opened
documents using microsoft office
Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 25
8:16:30 AM Scan Complete
Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:06:09.211
Objects scanned:68895
Objects identified:3
Objects ignored:0
New critical objects:3