inventor
2006-08-12, 07:26
CoolWWWSearch red marks ?
How do I remove these... I did fix on 4 checks is this the same thing?
interpreting Spybot 11 Aug 06
Spybot 1.4 updated on Aug 7th
Please any comments will help thanks
Greg
ps I get this every time I run regclean ????? [HKEY_LOCAL_MACHINE\Software\CLASSES\QKFilter.ScreenDisplay\CurVer]
@="{B0CE4CE4-48D7-11D2-8BC3-00C04F86A9E1}"
CoolWWWSearch
CoolWWWSearch
CoolWWWSearch
CoolWWWSearch
--- Search result list ---
Error during check!: AdGoblin [2] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03F14164) ()
Error during check!: CoolWWWSearch.Feat2DLL [36] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [12] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [33] (Access violation at address 0040247F in module 'SPYBOTSD.EXE'. Read of address A78BC3F4) ()
Error during check!: CoolWWWSearch.Feat2Installer [43] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1010] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1054] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 7069BDC4) ()
Error during check!: CoolWWWSearch.Feat2Installer [1080] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1084] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1090] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1094] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1105] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1129] (Access violation at address 0040247F in module 'SPYBOTSD.EXE'. Read of address 03BEDC0C) ()
Error during check!: CoolWWWSearch.Feat2Installer [1164] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1174] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1179] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1195] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1210] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1214] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1250] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1259] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1260] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1264] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1270] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1275] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1279] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1285] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1316] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1330] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 4D593E9C) ()
Error during check!: CoolWWWSearch.Feat2Installer [1342] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1353] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1402] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1465] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.HomeSearch [26] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.HomeSearch [92] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Service [38] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03E89844) ()
Error during check!: CoolWWWSearch.Service [55] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Service [102] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Service [755] (Invalid pointer operation) ()
Error during check!: GTDownloader [10] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03931088) ()
Error during check!: HotsearchBar [108] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03F05150) ()
Error during check!: QuickNavigate [7] (Invalid pointer operation) ()
Error during check!: ABetterInternet [80] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 0411C1CC) ()
Error during check!: AdtomiAdware [3] (Invalid pointer operation) ()
Error during check!: Adware-Patrol [84] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch [26] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 0411C904) ()
Error during check!: DyFuCA.InternetOptimizer [10] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 5850C608) ()
Error during check!: Mailbot [92] (Invalid pointer operation) ()
Error during check!: Mosaic1 [2] (Invalid pointer operation) ()
Error during check!: Smitfraud-C. [766] (Invalid pointer operation) ()
Error during check!: Smitfraud-C. [818] (Invalid pointer operation) ()
Error during check!: NewDotNet [42] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03F016C4) ()
Error during check!: 180Solutions.SearchAssistant [42] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 04304B50) ()
Error during check!: 180Solutions.SearchAssistant [470] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 04304FE8) ()
Error during check!: 180Solutions.SearchAssistant [472] (Invalid pointer operation) ()
Error during check!: 180Solutions.SearchAssistant [533] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 04305E1C) ()
Error during check!: 180Solutions.SearchAssistant [554] (Invalid pointer operation) ()
Error during check!: 180Solutions.SearchAssistant [561] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 0430415C) ()
Error during check!: 180Solutions.SearchAssistant [575] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 04304AC4) ()
Error during check!: 180Solutions.SearchAssistant [589] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 3446191C) ()
Error during check!: 180Solutions.SearchAssistant [591] (Invalid pointer operation) ()
Error during check!: 180Solutions.SearchAssistant [610] (Invalid pointer operation) ()
Error during check!: 180Solutions.SearchAssistant [622] (Invalid pointer operation) ()
Error during check!: ClientMan [26] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 56576D6C) ()
Error during check!: ClientMan [28] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 4B5EBA60) ()
Error during check!: Beasty [2] (Invalid pointer operation) ()
Error during check!: BraveSentry [6] (Invalid pointer operation) ()
Error during check!: Dropper [6] (Invalid pointer operation) ()
Error during check!: FTP Center 1.3 [4] (Invalid pointer operation) ()
Error during check!: Humble [3] (Invalid pointer operation) ()
Error during check!: PSGuard.msmsgs [84] (Invalid pointer operation) ()
Error during check!: Zlob.Foro [1] (Invalid pointer operation) ()
HitBox: Tracking cookie (Internet Explorer: invent) (Cookie, nothing done)
DoubleClick: Tracking cookie (Internet Explorer: invent) (Cookie, nothing done)
Advertising.com: Tracking cookie (Internet Explorer: invent) (Cookie, nothing done)
Avenue A, Inc.: Tracking cookie (Internet Explorer: invent) (Cookie, nothing done)
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2006-08-10 unins000.exe (51.41.0.0)
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-08-04 Includes\Cookies.sbi (*)
2006-08-04 Includes\Dialer.sbi (*)
2006-08-04 Includes\Hijackers.sbi (*)
2006-08-04 Includes\Malware.sbi (*)
2006-08-04 Includes\Keyloggers.sbi (*)
2006-08-04 Includes\Revision.sbi (*)
2006-08-04 Includes\Security.sbi (*)
2006-08-04 Includes\Spybots.sbi (*)
2006-08-04 Includes\Trojans.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-08-04 Includes\PUPS.sbi (*)
--- System information ---
Windows 98 (Build: 2222) A
--- Startup entries list ---
Located: HK_LM:Run, Gene USB Monitor
command: C:\WINDOWS\SYSTEM\USBMonit.exe
file: C:\WINDOWS\SYSTEM\USBMonit.exe
size: 45056
MD5: 241db1dbe67cfae3da0da7bbd7a6524e
Located: HK_LM:Run, LoadPowerProfile
command: Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
file: C:\WINDOWS\Rundll32.exe
size: 24576
MD5: 3857d93aa630abbd63467db4aeffce2c
Located: HK_LM:Run, Microsoft IntelliType Pro
command: "C:\Program Files\Microsoft Hardware\Keyboard\speedkey.exe"
file: C:\Program Files\Microsoft Hardware\Keyboard\speedkey.exe
size: 30208
MD5: 0213a257eb74b904fd416a7c2d09c1ae
Located: HK_LM:Run, Microsoft WebServer
command: C:\Program Files\WebSvr\System\svctrl /init
file:
Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
file: C:\WINDOWS\RUNDLL32.EXE
size: 24576
MD5: 3857d93aa630abbd63467db4aeffce2c
Located: HK_LM:Run, nwiz
command: nwiz.exe /install
file: C:\WINDOWS\SYSTEM\nwiz.exe
size: 323584
MD5: fce4275c64509c25c2606d90fd285b7f
Located: HK_LM:Run, POINTER
command: point32.exe
file:
Located: HK_LM:Run, ScanRegistry
command: C:\WINDOWS\scanregw.exe /autorun
file: C:\WINDOWS\scanregw.exe
size: 86016
MD5: f123231689e2ab2fa5c636b99314501f
Located: HK_LM:Run, SystemTray
command: SysTray.Exe
file: C:\WINDOWS\SYSTEM\SysTray.Exe
size: 32768
MD5: 73681085dcd0997e531240100ca12b28
Located: HK_LM:Run, TaskMonitor
command: C:\WINDOWS\taskmon.exe
file: C:\WINDOWS\taskmon.exe
size: 28672
MD5: f795110611101279aa15997801abaca0
Located: HK_LM:Run, TPP Auto Loader
command: C:\WINDOWS\TPPALDR.EXE
file: C:\WINDOWS\TPPALDR.EXE
size: 118784
MD5: 41701380b16877a69e84a8be7fe535dd
Located: HK_LM:RunServices, LoadPowerProfile
command: Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
file: C:\WINDOWS\Rundll32.exe
size: 24576
MD5: 3857d93aa630abbd63467db4aeffce2c
Located: HK_LM:RunServices, Microsoft WebServer
command: C:\Program Files\WebSvr\System\inetsw95 -w3svc
file:
Located: HK_LM:RunServices, SchedulingAgent
command: mstask.exe
file: C:\WINDOWS\SYSTEM\mstask.exe
size: 111888
MD5: 39d6b416d9c73a7729cdaed247430d21
Located: HK_CU:Run, NvMediaCenter
command: RUNDLL32.EXE C:\WINDOWS\SYSTEM\NVMCTRAY.DLL,NvTaskbarInit
file: C:\WINDOWS\RUNDLL32.EXE
size: 24576
MD5: 3857d93aa630abbd63467db4aeffce2c
Located: Startup (user), Microsoft Office.lnk
command: C:\Program Files\Microsoft Office\Office\OSA9.EXE
file: C:\Program Files\Microsoft Office\Office\OSA9.EXE
size: 65588
MD5: a89d195caf6a030b152e2a4cabe7018d
--- Browser helper object list ---
--- ActiveX list ---
--- Process list ---
PID: -7369367 (2119113913) C:\WINDOWS\SYSTEM\KERNEL32.DLL
size: 471040
MD5: 375B0813980AE17DCC689E913AB9DD7B
PID: -9843 (-7369367) C:\WINDOWS\SYSTEM\MSGSRV32.EXE
size: 11920
MD5: 15020A139F22CDBF9C70AA8D80F6AE0E
PID: -12771 (-9843) C:\WINDOWS\SYSTEM\MPREXE.EXE
size: 28672
MD5: 562D04789250A81CE629D60646A0D191
PID: -120919 (-12771) C:\WINDOWS\SYSTEM\MSTASK.EXE
size: 111888
MD5: 39D6B416D9C73A7729CDAED247430D21
PID: -6883 (-12771) C:\PROGRAM FILES\WEBSVR\SYSTEM\INETSW95.EXE
size: 15872
MD5: 58B294D1B9FED8E5A98C91296484E8F9
PID: -100079 (-9843) C:\WINDOWS\EXPLORER.EXE
size: 180224
MD5: B22B28F61B1BB06723019307F0FAACFC
PID: -162763 (-100079) C:\WINDOWS\TASKMON.EXE
size: 28672
MD5: F795110611101279AA15997801ABACA0
PID: -148087 (-100079) C:\WINDOWS\SYSTEM\SYSTRAY.EXE
size: 32768
MD5: 73681085DCD0997E531240100CA12B28
PID: -144327 (-100079) C:\WINDOWS\SYSTEM\USBMONIT.EXE
size: 45056
MD5: 241DB1DBE67CFAE3DA0DA7BBD7A6524E
PID: -261291 (-100079) C:\PROGRAM FILES\MICROSOFT HARDWARE\KEYBOARD\SPEEDKEY.EXE
size: 30208
MD5: 0213A257EB74B904FD416A7C2D09C1AE
PID: -251179 (-100079) C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
size: 69632
MD5: 0D914B23BBC2DD4F6AFF314E1EBDB2AC
PID: -232583 (-100079) C:\WINDOWS\TPPALDR.EXE
size: 118784
MD5: 41701380B16877A69E84A8BE7FE535DD
PID: -235927 (-100079) C:\WINDOWS\RUNDLL32.EXE
size: 24576
MD5: 3857D93AA630ABBD63467DB4AEFFCE2C
PID: -305811 (-256115) C:\WINDOWS\SYSTEM\DDHELP.EXE
size: 49152
MD5: 0677824ECBB0E8D08BEB93FFE9AB60D8
PID: -318879 (-148087) C:\WINDOWS\SYSTEM\WMIEXE.EXE
size: 16384
MD5: 3DFE9CA6728C02CCD8309DC66B1DFEB1
PID: -316559 (-261291) C:\WINDOWS\RUNDLL32.EXE
size: 24576
MD5: 3857D93AA630ABBD63467DB4AEFFCE2C
PID: -242723 (-100079) C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SPYBOTSD.EXE
size: 4393096
MD5: 09CA174A605B480318731E691DC98539
--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 12/31/99 11:23:40 PM
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\SYSTEM\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.inventor-warp-speed.com/
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
http://home.microsoft.com/access/autosearch.asp?p=%s
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\SYSTEM\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
--- Winsock Layered Service Provider list ---
--- Uninstall list ---
(DXM_Runtime)
(ICW)
Microsoft Internet Explorer 5.5 and Internet Tools (IE40)
uninstall cmd: rundll32 setupwbv.dll,IE5Maintenance "C:\Program Files\Internet Explorer\Setup\SETUP.EXE" /g "C:\WINDOWS\IE Uninstall Log.Txt"
(DirectDrawEx)
(IE5BAKEX)
(SchedulingAgent)
(MobileOptionPack)
(MSJavaVM)
(MSTASK)
NetMeeting 3.0 (NetMeeting)
Microsoft Outlook Express 5 (OutlookExpress)
uninstall cmd: "C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:OE /UNINSTALL /PROMPT
(AddressBook)
uninstall cmd: "C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:WAB /CALLER:IE50 /UNINSTALL /PROMPT
(Branding)
USB Storage Driver (GENEUIDE)
uninstall cmd: DelUIDrv.exe
WinZip (WinZip)
uninstall cmd: "C:\PROGRAM FILES\WINZIP\WINZIP32.EXE" /uninstall
(expinst)
(IEREADME)
(HTMLHelp)
(128PATCH)
(fontcore)
(IEData)
(IE4Data)
(IE_EXTRA)
(VGX)
Macromedia Flash Player 8 8 (ShockwaveFlash)
uninstall cmd:
How do I remove these... I did fix on 4 checks is this the same thing?
interpreting Spybot 11 Aug 06
Spybot 1.4 updated on Aug 7th
Please any comments will help thanks
Greg
ps I get this every time I run regclean ????? [HKEY_LOCAL_MACHINE\Software\CLASSES\QKFilter.ScreenDisplay\CurVer]
@="{B0CE4CE4-48D7-11D2-8BC3-00C04F86A9E1}"
CoolWWWSearch
CoolWWWSearch
CoolWWWSearch
CoolWWWSearch
--- Search result list ---
Error during check!: AdGoblin [2] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03F14164) ()
Error during check!: CoolWWWSearch.Feat2DLL [36] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [12] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [33] (Access violation at address 0040247F in module 'SPYBOTSD.EXE'. Read of address A78BC3F4) ()
Error during check!: CoolWWWSearch.Feat2Installer [43] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1010] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1054] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 7069BDC4) ()
Error during check!: CoolWWWSearch.Feat2Installer [1080] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1084] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1090] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1094] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1105] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1129] (Access violation at address 0040247F in module 'SPYBOTSD.EXE'. Read of address 03BEDC0C) ()
Error during check!: CoolWWWSearch.Feat2Installer [1164] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1174] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1179] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1195] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1210] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1214] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1250] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1259] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1260] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1264] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1270] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1275] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1279] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1285] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1316] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1330] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 4D593E9C) ()
Error during check!: CoolWWWSearch.Feat2Installer [1342] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1353] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1402] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Feat2Installer [1465] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.HomeSearch [26] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.HomeSearch [92] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Service [38] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03E89844) ()
Error during check!: CoolWWWSearch.Service [55] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Service [102] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch.Service [755] (Invalid pointer operation) ()
Error during check!: GTDownloader [10] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03931088) ()
Error during check!: HotsearchBar [108] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03F05150) ()
Error during check!: QuickNavigate [7] (Invalid pointer operation) ()
Error during check!: ABetterInternet [80] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 0411C1CC) ()
Error during check!: AdtomiAdware [3] (Invalid pointer operation) ()
Error during check!: Adware-Patrol [84] (Invalid pointer operation) ()
Error during check!: CoolWWWSearch [26] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 0411C904) ()
Error during check!: DyFuCA.InternetOptimizer [10] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 5850C608) ()
Error during check!: Mailbot [92] (Invalid pointer operation) ()
Error during check!: Mosaic1 [2] (Invalid pointer operation) ()
Error during check!: Smitfraud-C. [766] (Invalid pointer operation) ()
Error during check!: Smitfraud-C. [818] (Invalid pointer operation) ()
Error during check!: NewDotNet [42] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 03F016C4) ()
Error during check!: 180Solutions.SearchAssistant [42] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 04304B50) ()
Error during check!: 180Solutions.SearchAssistant [470] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 04304FE8) ()
Error during check!: 180Solutions.SearchAssistant [472] (Invalid pointer operation) ()
Error during check!: 180Solutions.SearchAssistant [533] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 04305E1C) ()
Error during check!: 180Solutions.SearchAssistant [554] (Invalid pointer operation) ()
Error during check!: 180Solutions.SearchAssistant [561] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 0430415C) ()
Error during check!: 180Solutions.SearchAssistant [575] (Access violation at address 00402426 in module 'SPYBOTSD.EXE'. Read of address 04304AC4) ()
Error during check!: 180Solutions.SearchAssistant [589] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 3446191C) ()
Error during check!: 180Solutions.SearchAssistant [591] (Invalid pointer operation) ()
Error during check!: 180Solutions.SearchAssistant [610] (Invalid pointer operation) ()
Error during check!: 180Solutions.SearchAssistant [622] (Invalid pointer operation) ()
Error during check!: ClientMan [26] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 56576D6C) ()
Error during check!: ClientMan [28] (Access violation at address 004024DC in module 'SPYBOTSD.EXE'. Read of address 4B5EBA60) ()
Error during check!: Beasty [2] (Invalid pointer operation) ()
Error during check!: BraveSentry [6] (Invalid pointer operation) ()
Error during check!: Dropper [6] (Invalid pointer operation) ()
Error during check!: FTP Center 1.3 [4] (Invalid pointer operation) ()
Error during check!: Humble [3] (Invalid pointer operation) ()
Error during check!: PSGuard.msmsgs [84] (Invalid pointer operation) ()
Error during check!: Zlob.Foro [1] (Invalid pointer operation) ()
HitBox: Tracking cookie (Internet Explorer: invent) (Cookie, nothing done)
DoubleClick: Tracking cookie (Internet Explorer: invent) (Cookie, nothing done)
Advertising.com: Tracking cookie (Internet Explorer: invent) (Cookie, nothing done)
Avenue A, Inc.: Tracking cookie (Internet Explorer: invent) (Cookie, nothing done)
--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---
2006-08-10 unins000.exe (51.41.0.0)
2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-05-31 Update.exe (1.4.0.0)
2006-02-06 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2006-02-20 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2006-08-04 Includes\Cookies.sbi (*)
2006-08-04 Includes\Dialer.sbi (*)
2006-08-04 Includes\Hijackers.sbi (*)
2006-08-04 Includes\Malware.sbi (*)
2006-08-04 Includes\Keyloggers.sbi (*)
2006-08-04 Includes\Revision.sbi (*)
2006-08-04 Includes\Security.sbi (*)
2006-08-04 Includes\Spybots.sbi (*)
2006-08-04 Includes\Trojans.sbi (*)
2005-02-17 Includes\Tracks.uti
2006-08-04 Includes\PUPS.sbi (*)
--- System information ---
Windows 98 (Build: 2222) A
--- Startup entries list ---
Located: HK_LM:Run, Gene USB Monitor
command: C:\WINDOWS\SYSTEM\USBMonit.exe
file: C:\WINDOWS\SYSTEM\USBMonit.exe
size: 45056
MD5: 241db1dbe67cfae3da0da7bbd7a6524e
Located: HK_LM:Run, LoadPowerProfile
command: Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
file: C:\WINDOWS\Rundll32.exe
size: 24576
MD5: 3857d93aa630abbd63467db4aeffce2c
Located: HK_LM:Run, Microsoft IntelliType Pro
command: "C:\Program Files\Microsoft Hardware\Keyboard\speedkey.exe"
file: C:\Program Files\Microsoft Hardware\Keyboard\speedkey.exe
size: 30208
MD5: 0213a257eb74b904fd416a7c2d09c1ae
Located: HK_LM:Run, Microsoft WebServer
command: C:\Program Files\WebSvr\System\svctrl /init
file:
Located: HK_LM:Run, NvCplDaemon
command: RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
file: C:\WINDOWS\RUNDLL32.EXE
size: 24576
MD5: 3857d93aa630abbd63467db4aeffce2c
Located: HK_LM:Run, nwiz
command: nwiz.exe /install
file: C:\WINDOWS\SYSTEM\nwiz.exe
size: 323584
MD5: fce4275c64509c25c2606d90fd285b7f
Located: HK_LM:Run, POINTER
command: point32.exe
file:
Located: HK_LM:Run, ScanRegistry
command: C:\WINDOWS\scanregw.exe /autorun
file: C:\WINDOWS\scanregw.exe
size: 86016
MD5: f123231689e2ab2fa5c636b99314501f
Located: HK_LM:Run, SystemTray
command: SysTray.Exe
file: C:\WINDOWS\SYSTEM\SysTray.Exe
size: 32768
MD5: 73681085dcd0997e531240100ca12b28
Located: HK_LM:Run, TaskMonitor
command: C:\WINDOWS\taskmon.exe
file: C:\WINDOWS\taskmon.exe
size: 28672
MD5: f795110611101279aa15997801abaca0
Located: HK_LM:Run, TPP Auto Loader
command: C:\WINDOWS\TPPALDR.EXE
file: C:\WINDOWS\TPPALDR.EXE
size: 118784
MD5: 41701380b16877a69e84a8be7fe535dd
Located: HK_LM:RunServices, LoadPowerProfile
command: Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
file: C:\WINDOWS\Rundll32.exe
size: 24576
MD5: 3857d93aa630abbd63467db4aeffce2c
Located: HK_LM:RunServices, Microsoft WebServer
command: C:\Program Files\WebSvr\System\inetsw95 -w3svc
file:
Located: HK_LM:RunServices, SchedulingAgent
command: mstask.exe
file: C:\WINDOWS\SYSTEM\mstask.exe
size: 111888
MD5: 39d6b416d9c73a7729cdaed247430d21
Located: HK_CU:Run, NvMediaCenter
command: RUNDLL32.EXE C:\WINDOWS\SYSTEM\NVMCTRAY.DLL,NvTaskbarInit
file: C:\WINDOWS\RUNDLL32.EXE
size: 24576
MD5: 3857d93aa630abbd63467db4aeffce2c
Located: Startup (user), Microsoft Office.lnk
command: C:\Program Files\Microsoft Office\Office\OSA9.EXE
file: C:\Program Files\Microsoft Office\Office\OSA9.EXE
size: 65588
MD5: a89d195caf6a030b152e2a4cabe7018d
--- Browser helper object list ---
--- ActiveX list ---
--- Process list ---
PID: -7369367 (2119113913) C:\WINDOWS\SYSTEM\KERNEL32.DLL
size: 471040
MD5: 375B0813980AE17DCC689E913AB9DD7B
PID: -9843 (-7369367) C:\WINDOWS\SYSTEM\MSGSRV32.EXE
size: 11920
MD5: 15020A139F22CDBF9C70AA8D80F6AE0E
PID: -12771 (-9843) C:\WINDOWS\SYSTEM\MPREXE.EXE
size: 28672
MD5: 562D04789250A81CE629D60646A0D191
PID: -120919 (-12771) C:\WINDOWS\SYSTEM\MSTASK.EXE
size: 111888
MD5: 39D6B416D9C73A7729CDAED247430D21
PID: -6883 (-12771) C:\PROGRAM FILES\WEBSVR\SYSTEM\INETSW95.EXE
size: 15872
MD5: 58B294D1B9FED8E5A98C91296484E8F9
PID: -100079 (-9843) C:\WINDOWS\EXPLORER.EXE
size: 180224
MD5: B22B28F61B1BB06723019307F0FAACFC
PID: -162763 (-100079) C:\WINDOWS\TASKMON.EXE
size: 28672
MD5: F795110611101279AA15997801ABACA0
PID: -148087 (-100079) C:\WINDOWS\SYSTEM\SYSTRAY.EXE
size: 32768
MD5: 73681085DCD0997E531240100CA12B28
PID: -144327 (-100079) C:\WINDOWS\SYSTEM\USBMONIT.EXE
size: 45056
MD5: 241DB1DBE67CFAE3DA0DA7BBD7A6524E
PID: -261291 (-100079) C:\PROGRAM FILES\MICROSOFT HARDWARE\KEYBOARD\SPEEDKEY.EXE
size: 30208
MD5: 0213A257EB74B904FD416A7C2D09C1AE
PID: -251179 (-100079) C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
size: 69632
MD5: 0D914B23BBC2DD4F6AFF314E1EBDB2AC
PID: -232583 (-100079) C:\WINDOWS\TPPALDR.EXE
size: 118784
MD5: 41701380B16877A69E84A8BE7FE535DD
PID: -235927 (-100079) C:\WINDOWS\RUNDLL32.EXE
size: 24576
MD5: 3857D93AA630ABBD63467DB4AEFFCE2C
PID: -305811 (-256115) C:\WINDOWS\SYSTEM\DDHELP.EXE
size: 49152
MD5: 0677824ECBB0E8D08BEB93FFE9AB60D8
PID: -318879 (-148087) C:\WINDOWS\SYSTEM\WMIEXE.EXE
size: 16384
MD5: 3DFE9CA6728C02CCD8309DC66B1DFEB1
PID: -316559 (-261291) C:\WINDOWS\RUNDLL32.EXE
size: 24576
MD5: 3857D93AA630ABBD63467DB4AEFFCE2C
PID: -242723 (-100079) C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SPYBOTSD.EXE
size: 4393096
MD5: 09CA174A605B480318731E691DC98539
--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 12/31/99 11:23:40 PM
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\SYSTEM\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.inventor-warp-speed.com/
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@
http://home.microsoft.com/access/autosearch.asp?p=%s
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\SYSTEM\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
--- Winsock Layered Service Provider list ---
--- Uninstall list ---
(DXM_Runtime)
(ICW)
Microsoft Internet Explorer 5.5 and Internet Tools (IE40)
uninstall cmd: rundll32 setupwbv.dll,IE5Maintenance "C:\Program Files\Internet Explorer\Setup\SETUP.EXE" /g "C:\WINDOWS\IE Uninstall Log.Txt"
(DirectDrawEx)
(IE5BAKEX)
(SchedulingAgent)
(MobileOptionPack)
(MSJavaVM)
(MSTASK)
NetMeeting 3.0 (NetMeeting)
Microsoft Outlook Express 5 (OutlookExpress)
uninstall cmd: "C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:OE /UNINSTALL /PROMPT
(AddressBook)
uninstall cmd: "C:\PROGRA~1\OUTLOO~1\setup50.exe" /APP:WAB /CALLER:IE50 /UNINSTALL /PROMPT
(Branding)
USB Storage Driver (GENEUIDE)
uninstall cmd: DelUIDrv.exe
WinZip (WinZip)
uninstall cmd: "C:\PROGRAM FILES\WINZIP\WINZIP32.EXE" /uninstall
(expinst)
(IEREADME)
(HTMLHelp)
(128PATCH)
(fontcore)
(IEData)
(IE4Data)
(IE_EXTRA)
(VGX)
Macromedia Flash Player 8 8 (ShockwaveFlash)
uninstall cmd: