PCULog1.txt File - Help

[wbyeats]

In C:\Documents and Settings\John\Local Settings\Temp
I keep getting files called PCULog1.txt. The more I get the higher the
number goes. The culprit seems to be in the registry key kisted below.
I must have some kind of logging turned on but don't know what. I know
the file name is also generated by a type of trojan but the effects of
that seem to be pretty obvious and I haven't experienced any of that.
I did search both Microsoft and Trend-Micro but found nothing. Anyone?

***************** New Log **************************



Start time: 10/14/2007 1:50:45 PM

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings

User Agent=Mozilla/4.0 (compatible; MSIE 7.0; Win32)

IE5_UA_Backup_Flag=5.0

NoNetAutodial=0

MigrateProxy=1

EmailName=IEUser@

AutoConfigProxy=wininet.dll

MimeExclusionListForCache=multipart/mixed multipart/x-mixed-replace
multipart/x-byteranges

EnableHttp1_1=1

PrivacyAdvanced=0

EnableNegotiate=1

ProxyEnable=0

GlobalUserOffline=0

EnableAutodial=1

SyncMode5=4

UrlEncoding=0

SecureProtocols=ffffffa0

PrivDiscUiShown=1

DisableCachingOfSSLPages=0

WarnonZoneCrossing=0

CertificateRevocation=0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet
Settings

MinorVersion=0

CodeBaseSearchPath=CODEBASE;<http://activex.microsoft.com/objects/ocget.dll>;<http://codecs.microsoft.com/isapi/ocget.dll>

UrlEncoding=0x00000000

ActiveXCache=C:\WINDOWS\Downloaded Program Files

EnablePunycode=1

WarnOnIntranet=1

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Internet
Settings\ProxySettingsPerUser

10/14/2007 1:50:45 PM VA elapsed time: 0.000 seconds

 

[Doug Knox - [MS-MVP]]

A snippet of the contents of the log file might be of more use in helping
you find out what's creating it and why.

 

[John]

A snippet of the contents of the log file might be of more use in helping
you find out what's creating it and why.

I'm sorry but I thought that was what I posted at the bottom of my
original posting. But here it is again. Thanks.

 

[John]

I'm sorry but I thought that was what I posted at the bottom of my
original posting. But here it is again. Thanks.

Just an addendum - the last registry string in the log is not in the
registry.
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Internet
Settings\ProxySettingsPerUser

 

[Doug Knox - [MS-MVP]]

I can't find any reference to what's creating this log. It would appear to
be related to some internet application, but I couldn't tell you which one.
I don't have this log file on my system.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com

 

[John]

I can't find any reference to what's creating this log. It would appear to
be related to some internet application, but I couldn't tell you which one.
I don't have this log file on my system.

Thanks for your time.

John