Page 1 of 2 12 LastLast
Results 1 to 10 of 16

Thread: HLM\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2

  1. 2007-06-12, 19:49 #1
    tacka
    tacka is offline
    Junior Member
    Join Date
    Jun 2007
    Posts
    2

    Default HLM\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2

    Please help with this problem:

    I have a slow computer with high CPU usage on Windows XP Pro and I keep getting the recurring problem in Spybot after reboot:

    Microsoft.WindowsSecurityCenter_disabled: Settings (Registry change, nothing done) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2

    Here is my Hijack log:
    Last edited by tashi; 2007-06-12 at 22:21. Reason: HJT log removed
    Reply With Quote Reply With Quote
  2. 2007-06-12, 20:53 #2
    md usa spybot fan
    md usa spybot fan is offline
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    re: This detection:

    Code:
    Microsoft.WindowsSecurityCenter_disabled: Settings
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2
    That detection (problem) indicates that Spybot-S&D found that the registry entry that controls the starting of Windows Security Center was not set to "Automatic".

    Without Windows Security Center running you will not be notified by Windows Security Center if your firewall or antivirus are not running properly.

    To verify that this:
    • Click Start then Run.
    • Type "Services.msc" (no quotes) in the Open block.
    • Click OK.
    • When Services dialog opens, scroll down in the right pane and locate the "Security Center" entry in the list.
    • Double click on the entry.
    • In the Security Center Properties (Local Computer) dialog I believe that you will find the "Startup type" is set to either "Disabled" or "Manual" not "Automatic".

    __________________


    HijackThis logs are not analyzed in the Spybot-S&D forum. Please see:

    If you feel that you need further help with the analysis of the HijackThis log, please post in the Malware Removal forum following these posting instructions:
    s are not analyzed in this forum
    Last edited by md usa spybot fan; 2007-06-12 at 21:00.

    Getting an answer is one thing, learning is another.

    Microsoft Windows XP Home Edition running on a 2.40GHz IntelŪ PentiumŪ 4 Processor with 512 MB of RAM and a 533 MHz System Bus.
    Reply With Quote Reply With Quote
  3. 2007-06-12, 22:14 #3
    tacka
    tacka is offline
    Junior Member
    Join Date
    Jun 2007
    Posts
    2

    Default Thanks for reply; I'm a timer for this type of help . .

    I followed what you suggested. The startup type was set on "automatic" but the service status is "stopped" and it will not start if I try.

    Any other suggestions.
    Reply With Quote Reply With Quote
  4. 2008-03-05, 03:58 #4
    Yeti39
    Yeti39 is offline
    Junior Member
    Join Date
    Mar 2008
    Posts
    8

    Default

    how do you get rid of it? I can turn on Security Center every time I turn the computer on. Norton Antivirus doesnt see it but Spybot does. Is there a way of rewriting that file?
    Reply With Quote Reply With Quote
  5. 2008-03-05, 04:14 #5
    Yeti39
    Yeti39 is offline
    Junior Member
    Join Date
    Mar 2008
    Posts
    8

    Default

    Spybot says it fixes it, but when I restart my computer it is back with Adrevolver.com
    Reply With Quote Reply With Quote
  6. 2008-03-05, 04:23 #6
    Zenobia
    Zenobia is offline
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,491

    Default

    Quote Originally Posted by Spybot
    Company:
    Product: Microsoft.WindowsSecurityCenter_disabled
    Threat: Security


    Functionality
    if the Windows Security Center is disabled this entry will be shown

    Description
    Malware can disable the Windows Security Center to make your System more vulnerable.

    If you have other security software suit installed, this may also deactivate the Windows Security Center to avoid double warning messages.
    Norton antivirus may have disabled Windows Security Center,if you chose that option when installing Norton,to avoid double warning messages.

    You can leave Security Center disabled,if you wish.

    Or,if you would prefer to turn Windows Security Center back on,you could turn it back on through Norton.
    bordello posted instructions for that here:
    http://forums.spybot.info/showpost.p...2&postcount=36
    Quote Originally Posted by bordello
    I opened Norton AntiVirus. Chose Options (located at the top) --> Norton Protection Center --> and then found the option to "Show messages from Windows Security Center". I made sure that box was checked, then I applied all the settings.
    Reply With Quote Reply With Quote
  7. 2008-03-05, 04:27 #7
    Zenobia
    Zenobia is offline
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,491

    Default

    Adrevolver is listed in Spybot as a tracking cookie,I believe.
    Could you please do this?
    • Open SpyBot.
    • Check for problems.
    • When the scan completes, right click on the results list, select "Copy results to clipboard".
    • Paste (Ctrl+V) those results here.
    Last edited by Zenobia; 2008-03-05 at 04:28.
    Reply With Quote Reply With Quote
  8. 2008-03-05, 23:50 #8
    Yeti39
    Yeti39 is offline
    Junior Member
    Join Date
    Mar 2008
    Posts
    8

    Default

    Well, I turned on the Security Center myself. It didnt show the other problem, but adrevolver has been popping up alot.

    Here is what Spybot said:
    --- Search result list ---
    AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


    AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


    AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


    AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


    AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)


    AdRevolver: Tracking cookie (Firefox: default) (Cookie, fixed)



    --- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

    2008-01-28 blindman.exe (1.0.0.7)
    2008-01-28 SDDelFile.exe (1.0.2.4)
    2008-01-28 SDMain.exe (1.0.0.5)
    2007-10-07 SDShred.exe (1.0.1.2)
    2008-01-28 SDUpdate.exe (1.0.8.8)
    2008-01-28 SDWinSec.exe (1.0.0.11)
    2008-01-28 SpybotSD.exe (1.5.2.20)
    2008-01-28 TeaTimer.exe (1.5.2.16)
    2007-11-20 unins000.exe (51.41.0.0)
    2008-02-29 unins001.exe (51.49.0.0)
    2008-01-28 Update.exe (1.4.0.6)
    2008-01-28 advcheck.dll (1.5.4.5)
    2007-04-02 aports.dll (2.1.0.0)
    2005-05-31 borlndmm.dll (7.0.4.453)
    2005-05-31 delphimm.dll (7.0.4.453)
    2007-11-17 DelZip179.dll (1.79.7.4)
    2008-01-28 SDFiles.dll (1.5.1.19)
    2008-01-28 SDHelper.dll (1.5.0.11)
    2008-01-28 Tools.dll (2.1.3.3)
    2005-05-31 UnzDll.dll (1.73.1.1)
    2005-05-31 ZipDll.dll (1.73.2.0)
    2008-02-27 Includes\Cookies.sbi (*)
    2007-12-26 Includes\Dialer.sbi (*)
    2008-02-27 Includes\DialerC.sbi (*)
    2008-02-27 Includes\HeavyDuty.sbi (*)
    2008-02-20 Includes\Hijackers.sbi (*)
    2008-02-27 Includes\HijackersC.sbi (*)
    2008-02-27 Includes\Keyloggers.sbi (*)
    2008-02-27 Includes\KeyloggersC.sbi (*)
    2004-11-29 Includes\LSP.sbi (*)
    2008-02-27 Includes\Malware.sbi (*)
    2008-02-27 Includes\MalwareC.sbi (*)
    2008-02-20 Includes\PUPS.sbi (*)
    2008-02-27 Includes\PUPSC.sbi (*)
    2008-02-27 Includes\Revision.sbi (*)
    2008-01-09 Includes\Security.sbi (*)
    2008-02-27 Includes\SecurityC.sbi (*)
    2008-02-20 Includes\Spybots.sbi (*)
    2008-02-27 Includes\SpybotsC.sbi (*)
    2007-11-06 Includes\Tracks.uti
    2008-02-27 Includes\Trojans.sbi (*)
    2008-02-27 Includes\TrojansC.sbi (*)
    2007-12-24 Plugins\TCPIPAddress.dll



    --- System information ---
    Windows XP (Build: 2600) Service Pack 2 (5.1.2600)
    / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB928366)
    / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
    / Microsoft .NET Framework 2.0: This Security Update is for Microsoft .NET Framework 2.0. \n
    If you later install a more recent service pack, this Security Update will be uninstalled automatically. \n
    For more information, visit http://support.microsoft.com/kb/928365
    / MSXML4SP2: Security update for MSXML4 SP2 (KB936181)
    / Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
    / Windows / SP1: Microsoft National Language Support Downlevel APIs
    / Windows Media Format 11 SDK: Hotfix for Windows Media Format 11 SDK (KB929399)
    / Windows Media Player 11: Security Update for Windows Media Player 11 (KB936782)
    / Windows Media Player 11: Hotfix for Windows Media Player 11 (KB939683)
    / Windows Media Player 6.4: Security Update for Windows Media Player 6.4 (KB925398)
    / Windows Media Player 9: Security Update for Windows Media Player 9 (KB936782)
    / Windows XP: Security Update for Windows XP (KB923689)
    / Windows XP: Security Update for Windows XP (KB941569)
    / Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB938127)
    / Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB939653)
    / Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB942615)
    / Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB944533)
    / Windows XP / SP10: Microsoft Compression Client Pack 1.0 for Windows XP
    / Windows XP / SP3: Windows XP Hotfix - KB873339
    / Windows XP / SP3: Windows XP Hotfix - KB885835
    / Windows XP / SP3: Windows XP Hotfix - KB885836
    / Windows XP / SP3: Windows XP Hotfix - KB885884
    / Windows XP / SP3: Windows XP Hotfix - KB886185
    / Windows XP / SP3: Windows XP Hotfix - KB887472
    / Windows XP / SP3: Windows XP Hotfix - KB888302
    / Windows XP / SP3: Security Update for Windows XP (KB890046)
    / Windows XP / SP3: Windows XP Hotfix - KB890859
    / Windows XP / SP3: Windows XP Hotfix - KB891781
    / Windows XP / SP3: Security Update for Windows XP (KB893756)
    / Windows XP / SP3: Windows Installer 3.1 (KB893803)
    / Windows XP / SP3: Update for Windows XP (KB894391)
    / Windows XP / SP3: Hotfix for Windows XP (KB896344)
    / Windows XP / SP3: Security Update for Windows XP (KB896358)
    / Windows XP / SP3: Security Update for Windows XP (KB896423)
    / Windows XP / SP3: Security Update for Windows XP (KB896428)
    / Windows XP / SP3: Update for Windows XP (KB898461)
    / Windows XP / SP3: Security Update for Windows XP (KB899587)
    / Windows XP / SP3: Security Update for Windows XP (KB899591)
    / Windows XP / SP3: Update for Windows XP (KB900485)
    / Windows XP / SP3: Security Update for Windows XP (KB900725)
    / Windows XP / SP3: Security Update for Windows XP (KB901017)
    / Windows XP / SP3: Security Update for Windows XP (KB901214)
    / Windows XP / SP3: Security Update for Windows XP (KB902400)
    / Windows XP / SP3: Security Update for Windows XP (KB904706)
    / Windows XP / SP3: Update for Windows XP (KB904942)
    / Windows XP / SP3: Security Update for Windows XP (KB905414)
    / Windows XP / SP3: Security Update for Windows XP (KB905749)
    / Windows XP / SP3: Security Update for Windows XP (KB908519)
    / Windows XP / SP3: Update for Windows XP (KB908531)
    / Windows XP / SP3: Update for Windows XP (KB910437)
    / Windows XP / SP3: Update for Windows XP (KB911280)
    / Windows XP / SP3: Security Update for Windows XP (KB911562)
    / Windows XP / SP3: Security Update for Windows XP (KB911927)
    / Windows XP / SP3: Security Update for Windows XP (KB913580)
    / Windows XP / SP3: Security Update for Windows XP (KB914388)
    / Windows XP / SP3: Security Update for Windows XP (KB914389)
    / Windows XP / SP3: Hotfix for Windows XP (KB914440)
    / Windows XP / SP3: Hotfix for Windows XP (KB915865)
    / Windows XP / SP3: Update for Windows XP (KB916595)
    / Windows XP / SP3: Security Update for Windows XP (KB917344)
    / Windows XP / SP3: Security Update for Windows XP (KB917953)
    / Windows XP / SP3: Security Update for Windows XP (KB918118)
    / Windows XP / SP3: Security Update for Windows XP (KB918439)
    / Windows XP / SP3: Security Update for Windows XP (KB919007)
    / Windows XP / SP3: Security Update for Windows XP (KB920213)
    / Windows XP / SP3: Update for Windows XP (KB920342)
    / Windows XP / SP3: Security Update for Windows XP (KB920670)
    / Windows XP / SP3: Security Update for Windows XP (KB920683)
    / Windows XP / SP3: Security Update for Windows XP (KB920685)
    / Windows XP / SP3: Update for Windows XP (KB920872)
    / Windows XP / SP3: Security Update for Windows XP (KB921503)
    / Windows XP / SP3: Update for Windows XP (KB922582)
    / Windows XP / SP3: Security Update for Windows XP (KB922819)
    / Windows XP / SP3: Security Update for Windows XP (KB923191)
    / Windows XP / SP3: Security Update for Windows XP (KB923414)
    / Windows XP / SP3: Security Update for Windows XP (KB923980)
    / Windows XP / SP3: Security Update for Windows XP (KB924270)
    / Windows XP / SP3: Security Update for Windows XP (KB924496)
    / Windows XP / SP3: Security Update for Windows XP (KB924667)
    / Windows XP / SP3: Update for Windows XP (KB925720)
    / Windows XP / SP3: Update for Windows XP (KB925876)
    / Windows XP / SP3: Security Update for Windows XP (KB925902)
    / Windows XP / SP3: Hotfix for Windows XP (KB926239)
    / Windows XP / SP3: Security Update for Windows XP (KB926255)
    / Windows XP / SP3: Security Update for Windows XP (KB926436)
    / Windows XP / SP3: Security Update for Windows XP (KB927779)
    / Windows XP / SP3: Security Update for Windows XP (KB927802)
    / Windows XP / SP3: Update for Windows XP (KB927891)
    / Windows XP / SP3: Security Update for Windows XP (KB928255)
    / Windows XP / SP3: Security Update for Windows XP (KB928843)
    / Windows XP / SP3: Security Update for Windows XP (KB929123)
    / Windows XP / SP3: Security Update for Windows XP (KB930178)
    / Windows XP / SP3: Update for Windows XP (KB930916)
    / Windows XP / SP3: Security Update for Windows XP (KB931261)
    / Windows XP / SP3: Security Update for Windows XP (KB931784)
    / Windows XP / SP3: Security Update for Windows XP (KB932168)
    / Windows XP / SP3: Update for Windows XP (KB933360)
    / Windows XP / SP3: Security Update for Windows XP (KB933729)
    / Windows XP / SP3: Security Update for Windows XP (KB935839)
    / Windows XP / SP3: Security Update for Windows XP (KB935840)
    / Windows XP / SP3: Security Update for Windows XP (KB936021)
    / Windows XP / SP3: Update for Windows XP (KB936357)
    / Windows XP / SP3: Security Update for Windows XP (KB938127)
    / Windows XP / SP3: Update for Windows XP (KB938828)
    / Windows XP / SP3: Security Update for Windows XP (KB938829)
    / Windows XP / SP3: Security Update for Windows XP (KB939653)
    / Windows XP / SP3: Security Update for Windows XP (KB941202)
    / Windows XP / SP3: Security Update for Windows XP (KB941568)
    / Windows XP / SP3: Security Update for Windows XP (KB941644)
    / Windows XP / SP3: Update for Windows XP (KB942763)
    / Windows XP / SP3: Security Update for Windows XP (KB943055)
    / Windows XP / SP3: Security Update for Windows XP (KB943460)
    / Windows XP / SP3: Security Update for Windows XP (KB943485)
    / Windows XP / SP3: Security Update for Windows XP (KB944653)
    / Windows XP / SP3: Security Update for Windows XP (KB946026)
    / XML Paper Specification Shared Components Pack 1.0: XML Paper Specification Shared Components Pack 1.0


    --- Startup entries list ---
    Located: HK_LM:Run, Adobe Reader Speed Launcher
    command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    size: 39792
    MD5: 8B9145D229D4E89D15ACB820D4A3A90F

    Located: HK_LM:Run, AGRSMMSG
    command: AGRSMMSG.exe
    file: C:\WINDOWS\AGRSMMSG.exe
    size: 88209
    MD5: 230EA041666125B6812FE3FF964B2DF3

    Located: HK_LM:Run, AtiPTA
    command: atiptaxx.exe
    file: C:\WINDOWS\system32\atiptaxx.exe
    size: 344064
    MD5: 755750EC06ED1649D83AB6DF7BBA6516

    Located: HK_LM:Run, ccApp
    command: "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    file: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    size: 51048
    MD5: E67200B6EF51BBF60C14C64D60FAD482

    Located: HK_LM:Run, osCheck
    command: "C:\Program Files\Norton AntiVirus\osCheck.exe"
    file: C:\Program Files\Norton AntiVirus\osCheck.exe
    size: 714608
    MD5: 91535A86F6BD48BACCC3D58E6653456A

    Located: HK_LM:Run, QuickTime Task
    command: "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    file: C:\Program Files\QuickTime\QTTask.exe
    size: 385024
    MD5: BAFCF6CF19CE4882039C52DFA17BE35F

    Located: HK_LM:Run, SunJavaUpdateSched
    command: "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    file: C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    size: 132496
    MD5: D4F0F7437327DBAA264338BAAFB5E5AF

    Located: HK_CU:Run, ctfmon.exe
    where: S-1-5-21-1214440339-1292428093-1801674531-1003...
    command: C:\WINDOWS\system32\ctfmon.exe
    file: C:\WINDOWS\system32\ctfmon.exe
    size: 15360
    MD5: 24232996A38C0B0CF151C2140AE29FC8

    Located: HK_CU:Run, SpybotSD TeaTimer
    where: S-1-5-21-1214440339-1292428093-1801674531-1003...
    command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    size: 2097488
    MD5: A9A5DB6AC3721BE698B996913693D73F

    Located: Startup (common), Microsoft Office.lnk
    where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
    command: C:\Program Files\Microsoft Office\Office10\OSA.EXE
    file: C:\Program Files\Microsoft Office\Office10\OSA.EXE
    size: 83360
    MD5: 5BC65464354A9FD3BEAA28E18839734A

    Located: Startup (common), Wireless-G Notebook Adapter.lnk
    where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
    command: C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
    file: C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
    size: 36864
    MD5: AC13DB39F26510F059284834E696D531

    Located: WinLogon, AtiExtEvent
    command: Ati2evxx.dll
    file: Ati2evxx.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, crypt32chain
    command: crypt32.dll
    file: crypt32.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, cryptnet
    command: cryptnet.dll
    file: cryptnet.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, cscdll
    command: cscdll.dll
    file: cscdll.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, ScCertProp
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, Schedule
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, sclgntfy
    command: sclgntfy.dll
    file: sclgntfy.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, SensLogn
    command: WlNotify.dll
    file: WlNotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, termsrv
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, wlballoon
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!



    --- Browser helper object list ---
    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
    location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
    BHO name:
    CLSID name: Adobe PDF Reader Link Helper
    description: Adobe Acrobat reader
    classification: Legitimate
    known filename: AcroIEhelper.ocx<br>AcroIEhelper.dll
    info link: http://www.adobe.com/products/acrobat/readstep2.html
    info source: TonyKlein
    Path: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\
    Long name: AcroIEHelper.dll
    Short name: ACROIE~1.DLL
    Date (created): 10/22/2006 11:08:42 PM
    Date (last access): 3/5/2008 5:35:26 PM
    Date (last write): 10/22/2006 11:08:42 PM
    Filesize: 62080
    Attributes: archive
    MD5: C11F6A1F61481E24BE3FDC06EA6F7D2A
    CRC32: E388508F
    Version: 8.0.0.456

    {53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)
    location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
    BHO name:
    CLSID name: Spybot-S&D IE Protection
    description: Spybot-S&D IE Browser plugin
    classification: Legitimate
    known filename: SDhelper.dll
    info link: http://spybot.eon.net.au/
    info source: Patrick M. Kolla
    Path: C:\Program Files\Spybot - Search & Destroy\
    Long name: SDHelper.dll
    Short name:
    Date (created): 11/20/2007 2:57:30 PM
    Date (last access): 3/5/2008 5:41:50 PM
    Date (last write): 1/28/2008 11:43:28 AM
    Filesize: 1554256
    Attributes: archive
    MD5: 5248E02EFBCB64D328647CD00E384B85
    CRC32: C1B426A9
    Version: 1.5.0.11

    {549B5CA7-4A86-11D7-A4DF-000874180BB3} ()
    location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
    BHO name:
    CLSID name:

    {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} (NCO 2.0 IE BHO)
    location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
    BHO name: NCO 2.0 IE BHO
    CLSID name:

    {6D53EC84-6AAE-4787-AEEE-F4628F01010C} (Symantec Intrusion Prevention)
    location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
    BHO name: Symantec Intrusion Prevention
    CLSID name: Symantec Intrusion Prevention
    Path: C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\
    Long name: IPSBHO.dll
    Short name:
    Date (created): 2/5/2008 9:11:30 PM
    Date (last access): 3/5/2008 5:33:26 PM
    Date (last write): 2/5/2008 9:33:16 PM
    Filesize: 116088
    Attributes: archive
    MD5: FA3E00177B57D5B2BF058D560931D750
    CRC32: DF9D41CC
    Version: 8.2.0.86

    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
    location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
    BHO name:
    CLSID name: SSVHelper Class
    Path: C:\Program Files\Java\jre1.6.0_03\bin\
    Long name: ssv.dll
    Short name:
    Date (created): 2/17/2008 10:54:18 AM
    Date (last access): 3/5/2008 5:42:08 PM
    Date (last write): 9/25/2007 1:11:34 AM
    Filesize: 501136
    Attributes: archive
    MD5: D787E3123FAD2BD58AB45B9A5C360ACD
    CRC32: DDC625C2
    Version: 6.0.30.5

    {7E853D72-626A-48EC-A868-BA8D5E23E045} ()
    location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
    BHO name:
    CLSID name:

    {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} ()
    location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
    BHO name:
    CLSID name:
    description: Microsoft Money
    classification: Open for discussion
    known filename: mnyviewer.dll
    info link: http://www.microsoft.com/money/default.asp
    info source: TonyKlein
    Reply With Quote Reply With Quote
  9. 2008-03-05, 23:51 #9
    Yeti39
    Yeti39 is offline
    Junior Member
    Join Date
    Mar 2008
    Posts
    8

    Default

    --- ActiveX list ---
    {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class)
    DPF name:
    CLSID name: MUWebControl Class
    Installer: C:\WINDOWS\Downloaded Program Files\muweb.inf
    Codebase: http://www.update.microsoft.com/micr...?1197067812312
    Path: C:\WINDOWS\system32\
    Long name: muweb.dll
    Short name:
    Date (created): 7/30/2007 7:18:34 PM
    Date (last access): 3/5/2008 5:29:10 PM
    Date (last write): 7/30/2007 7:18:34 PM
    Filesize: 207736
    Attributes: archive
    MD5: 8038B166CE79E58E193566150CE26465
    CRC32: 9137D395
    Version: 7.0.6000.381

    {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
    DPF name: Java Runtime Environment 1.6.0
    CLSID name: Java Plug-in 1.6.0_03
    Installer:
    Codebase: http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
    description: Sun Java
    classification: Legitimate
    known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin\npjava131.dll
    info link:
    info source: Patrick M. Kolla
    Path: C:\Program Files\Java\jre1.6.0_03\bin\
    Long name: npjpi160_03.dll
    Short name: NPJPI1~1.DLL
    Date (created): 9/24/2007 11:31:44 PM
    Date (last access): 3/5/2008 5:42:08 PM
    Date (last write): 9/25/2007 1:11:34 AM
    Filesize: 132496
    Attributes: archive
    MD5: D6A4682A6FF41832A3F1A7AB9AE08199
    CRC32: 9080B537
    Version: 6.0.30.5

    {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
    DPF name: Java Runtime Environment 1.6.0
    CLSID name: Java Plug-in 1.6.0_02
    Installer:
    Codebase: http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
    Path: C:\Program Files\Java\jre1.6.0_02\bin\
    Long name: npjpi160_02.dll
    Short name: NPJPI1~1.DLL
    Date (created): 7/12/2007 2:22:38 AM
    Date (last access): 3/5/2008 5:42:08 PM
    Date (last write): 7/12/2007 4:00:36 AM
    Filesize: 132496
    Attributes: archive
    MD5: E3811F1A1C5063C941EC0E2766C3EA39
    CRC32: AEFD3747
    Version: 6.0.20.6

    {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
    DPF name: Java Runtime Environment 1.6.0
    CLSID name: Java Plug-in 1.6.0_03
    Installer:
    Codebase: http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
    Path: C:\Program Files\Java\jre1.6.0_03\bin\
    Long name: npjpi160_03.dll
    Short name: NPJPI1~1.DLL
    Date (created): 9/24/2007 11:31:44 PM
    Date (last access): 3/5/2008 5:42:08 PM
    Date (last write): 9/25/2007 1:11:34 AM
    Filesize: 132496
    Attributes: archive
    MD5: D6A4682A6FF41832A3F1A7AB9AE08199
    CRC32: 9080B537
    Version: 6.0.30.5

    {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
    DPF name: Java Runtime Environment 1.6.0
    CLSID name: Java Plug-in 1.6.0_03
    Installer:
    Codebase: http://java.sun.com/update/1.6.0/jin...ndows-i586.cab
    Path: C:\Program Files\Java\jre1.6.0_03\bin\
    Long name: npjpi160_03.dll
    Short name: NPJPI1~1.DLL
    Date (created): 9/24/2007 11:31:44 PM
    Date (last access): 3/5/2008 5:42:08 PM
    Date (last write): 9/25/2007 1:11:34 AM
    Filesize: 132496
    Attributes: archive
    MD5: D6A4682A6FF41832A3F1A7AB9AE08199
    CRC32: 9080B537
    Version: 6.0.30.5

    {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
    DPF name:
    CLSID name: Shockwave Flash Object
    Installer: C:\WINDOWS\Downloaded Program Files\swflash.inf
    Codebase: http://fpdownload2.macromedia.com/ge...sh/swflash.cab
    description: Macromedia Shockwave Flash Player
    classification: Legitimate
    known filename:
    info link:
    info source: Patrick M. Kolla
    Path: C:\WINDOWS\system32\Macromed\Flash\
    Long name: Flash9d.ocx
    Short name:
    Date (created): 6/11/2007 1:04:32 PM
    Date (last access): 3/5/2008 5:42:10 PM
    Date (last write): 6/11/2007 1:04:32 PM
    Filesize: 2267368
    Attributes: readonly archive
    MD5: B01E2A41389FBA42B7B5A026EA88C9B7
    CRC32: 8980B6EC
    Version: 9.0.47.0



    --- Process list ---
    PID: 0 ( 0) [System]
    PID: 1692 ( 4) \SystemRoot\System32\smss.exe
    size: 50688
    PID: 212 (1692) \??\C:\WINDOWS\system32\csrss.exe
    size: 6144
    PID: 588 (1692) \??\C:\WINDOWS\system32\winlogon.exe
    size: 502272
    PID: 648 ( 588) C:\WINDOWS\system32\services.exe
    size: 108032
    MD5: C6CE6EEC82F187615D1002BB3BB50ED4
    PID: 660 ( 588) C:\WINDOWS\system32\lsass.exe
    size: 13312
    MD5: 84885F9B82F4D55C6146EBF6065D75D2
    PID: 848 ( 648) C:\WINDOWS\system32\Ati2evxx.exe
    size: 413696
    MD5: A2EAEB497CA29ECAEAF0DF66AD85C57D
    PID: 872 ( 648) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 8F078AE4ED187AAABC0A305146DE6716
    PID: 1008 ( 648) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 8F078AE4ED187AAABC0A305146DE6716
    PID: 1052 ( 648) C:\WINDOWS\System32\svchost.exe
    size: 14336
    MD5: 8F078AE4ED187AAABC0A305146DE6716
    PID: 1096 ( 648) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 8F078AE4ED187AAABC0A305146DE6716
    PID: 1256 ( 648) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 8F078AE4ED187AAABC0A305146DE6716
    PID: 1344 ( 648) C:\WINDOWS\system32\svchost.exe
    size: 14336
    MD5: 8F078AE4ED187AAABC0A305146DE6716
    PID: 1684 ( 648) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    size: 149864
    MD5: A8D49668CA8BBDDF5D3D4FBD9ECFF49E
    PID: 2000 ( 648) C:\WINDOWS\system32\spoolsv.exe
    size: 57856
    MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F
    PID: 216 ( 648) C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
    size: 102400
    MD5: 2486C8E3F14496341E90CF2AB8BC82ED
    PID: 312 ( 648) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    size: 110592
    MD5: 69DA2BB73AC426CDEEBDACC68438BA3D
    PID: 404 ( 648) C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    size: 243064
    MD5: DE220DCEA74E13E659FF6192C3AFE49C
    PID: 512 ( 648) C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
    size: 455680
    MD5: 6FC277793D4CBDEAEE0121EDA6905661
    PID: 1444 ( 588) C:\WINDOWS\system32\Ati2evxx.exe
    size: 413696
    MD5: A2EAEB497CA29ECAEAF0DF66AD85C57D
    PID: 876 (1936) C:\WINDOWS\Explorer.EXE
    size: 1033216
    MD5: 97BD6515465659FF8F3B7BE375B2EA87
    PID: 2280 ( 648) C:\WINDOWS\System32\alg.exe
    size: 44544
    MD5: F1958FBF86D5C004CF19A5951A9514B7
    PID: 4036 ( 876) C:\WINDOWS\AGRSMMSG.exe
    size: 88209
    MD5: 230EA041666125B6812FE3FF964B2DF3
    PID: 612 ( 876) C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    size: 132496
    MD5: D4F0F7437327DBAA264338BAAFB5E5AF
    PID: 1132 ( 788) C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    size: 149864
    MD5: A8D49668CA8BBDDF5D3D4FBD9ECFF49E
    PID: 1136 ( 876) C:\WINDOWS\system32\ctfmon.exe
    size: 15360
    MD5: 24232996A38C0B0CF151C2140AE29FC8
    PID: 1624 ( 876) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    size: 2097488
    MD5: A9A5DB6AC3721BE698B996913693D73F
    PID: 3040 ( 876) C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
    size: 36864
    MD5: AC13DB39F26510F059284834E696D531
    PID: 3152 (3040) C:\Program Files\Linksys\Wireless-G Notebook Adapter\OdHost.exe
    size: 24649
    MD5: 00AA5A7523E5C7A3712F834FAC86A3EB
    PID: 2444 ( 876) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
    size: 5146448
    MD5: 2ECA8CDEED7C82F879E766DA92A3561A
    PID: 3692 ( 648) C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
    size: 1251720
    MD5: FA2F6A8849219B16460BF44F9D1F3AA7
    PID: 768 ( 876) C:\Program Files\Mozilla Firefox\firefox.exe
    size: 7655024
    MD5: 5F5DB4D92B7095DAED04689DB6DFD586
    PID: 3340 ( 648) C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
    size: 3192184
    MD5: 63ED50A6ED61829C2DEF5B733D258A05
    PID: 2216 ( 404) C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE
    size: 308600
    MD5: FF84B9F59B4B4035F5B1161F8F3C8F21
    PID: 4 ( 0) System


    --- Browser start & search pages list ---
    Spybot - Search & Destroy browser pages report, 3/5/2008 5:43:10 PM

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
    C:\WINDOWS\system32\blank.htm
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
    http://www.microsoft.com/isapi/redir...ie&ar=iesearch
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
    http://www.microsoft.com/isapi/redir...r=6&ar=msnhome
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
    %SystemRoot%\system32\blank.htm
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
    http://go.microsoft.com/fwlink/?LinkId=54896
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
    http://go.microsoft.com/fwlink/?LinkId=69157
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
    http://go.microsoft.com/fwlink/?LinkId=69157
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
    http://go.microsoft.com/fwlink/?LinkId=54896
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
    http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
    http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm


    --- Winsock Layered Service Provider list ---
    Protocol 0: MSAFD Tcpip [TCP/IP]
    GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP IP protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD Tcpip[*]

    Protocol 1: MSAFD Tcpip [UDP/IP]
    GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP IP protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD Tcpip[*]

    Protocol 2: MSAFD Tcpip [RAW/IP]
    GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP IP protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD Tcpip[*]

    Protocol 3: RSVP UDP Service Provider
    GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
    Filename: %SystemRoot%\system32\rsvpsp.dll
    Description: Microsoft Windows NT/2k/XP RVSP
    DB filename: %SystemRoot%\system32\rsvpsp.dll
    DB protocol: RSVP * Service Provider

    Protocol 4: RSVP TCP Service Provider
    GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
    Filename: %SystemRoot%\system32\rsvpsp.dll
    Description: Microsoft Windows NT/2k/XP RVSP
    DB filename: %SystemRoot%\system32\rsvpsp.dll
    DB protocol: RSVP * Service Provider

    Protocol 5: MSAFD NetBIOS [\Device\NetBT_Tcpip_{547C384E-104B-4575-B185-42112B2B54B9}] SEQPACKET 4
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Protocol 6: MSAFD NetBIOS [\Device\NetBT_Tcpip_{547C384E-104B-4575-B185-42112B2B54B9}] DATAGRAM 4
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Protocol 7: MSAFD NetBIOS [\Device\NetBT_Tcpip_{61888FCD-5692-477D-9EB0-4CEEB89A8C0D}] SEQPACKET 0
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Protocol 8: MSAFD NetBIOS [\Device\NetBT_Tcpip_{61888FCD-5692-477D-9EB0-4CEEB89A8C0D}] DATAGRAM 0
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Protocol 9: MSAFD NetBIOS [\Device\NetBT_Tcpip_{01EC0B9B-B909-424A-9FCC-C93FE1C8E197}] SEQPACKET 1
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Protocol 10: MSAFD NetBIOS [\Device\NetBT_Tcpip_{01EC0B9B-B909-424A-9FCC-C93FE1C8E197}] DATAGRAM 1
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Protocol 11: MSAFD NetBIOS [\Device\NetBT_Tcpip_{920F1722-18CC-4324-934E-E47C4B77C042}] SEQPACKET 2
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Protocol 12: MSAFD NetBIOS [\Device\NetBT_Tcpip_{920F1722-18CC-4324-934E-E47C4B77C042}] DATAGRAM 2
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Protocol 13: MSAFD NetBIOS [\Device\NetBT_Tcpip_{C5763B3A-5AD9-4637-A156-CDD5EE903B83}] SEQPACKET 3
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Protocol 14: MSAFD NetBIOS [\Device\NetBT_Tcpip_{C5763B3A-5AD9-4637-A156-CDD5EE903B83}] DATAGRAM 3
    GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
    Filename: %SystemRoot%\system32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP NetBios protocol
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: MSAFD NetBIOS *

    Namespace Provider 0: Tcpip
    GUID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
    Filename: %SystemRoot%\System32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP TCP/IP name space provider
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: TCP/IP

    Namespace Provider 1: NTDS
    GUID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
    Filename: %SystemRoot%\System32\winrnr.dll
    Description: Microsoft Windows NT/2k/XP name space provider
    DB filename: %SystemRoot%\system32\winrnr.dll
    DB protocol: NTDS

    Namespace Provider 2: Network Location Awareness (NLA) Namespace
    GUID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
    Filename: %SystemRoot%\System32\mswsock.dll
    Description: Microsoft Windows NT/2k/XP name space provider
    DB filename: %SystemRoot%\system32\mswsock.dll
    DB protocol: NLA-Namespace
    Reply With Quote Reply With Quote
  10. 2008-03-06, 06:11 #10
    Zenobia
    Zenobia is offline
    Spybot Advisor Team Zenobia's Avatar
    Join Date
    Oct 2005
    Posts
    5,491

    Default

    Spybot fixed those tracking cookies.If you would like,this page shows how to block third-party cookies,and that help may prevent that tracking cookie from coming back.
    http://www.spybot.info/en/faq/37.html
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules