Results 1 to 6 of 6

Thread: Please check this out and let me know whats good and whats bad

  1. #1
    Junior Member
    Join Date
    Apr 2008
    Posts
    6

    Default Please check this out and let me know whats good and whats bad

    --- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

    2008-01-28 blindman.exe (1.0.0.7)
    2008-01-28 SDDelFile.exe (1.0.2.4)
    2008-01-28 SDMain.exe (1.0.0.5)
    2007-10-07 SDShred.exe (1.0.1.2)
    2008-01-28 SDUpdate.exe (1.0.8.8)
    2008-01-28 SDWinSec.exe (1.0.0.11)
    2008-01-28 SpybotSD.exe (1.5.2.20)
    2008-01-28 TeaTimer.exe (1.5.2.16)
    2008-05-21 unins000.exe (51.49.0.0)
    2008-01-28 Update.exe (1.4.0.6)
    2008-01-28 advcheck.dll (1.5.4.5)
    2007-04-02 aports.dll (2.1.0.0)
    2007-11-17 DelZip179.dll (1.79.7.4)
    2008-01-28 SDFiles.dll (1.5.1.19)
    2008-01-28 SDHelper.dll (1.5.0.11)
    2008-01-28 Tools.dll (2.1.3.3)
    2008-04-16 Includes\Adware.sbi
    2008-05-21 Includes\AdwareC.sbi
    2008-05-21 Includes\Cookies.sbi
    2007-12-26 Includes\Dialer.sbi
    2008-05-21 Includes\DialerC.sbi
    2008-05-21 Includes\HeavyDuty.sbi

    --- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

    2008-01-28 blindman.exe (1.0.0.7)
    2008-01-28 SDDelFile.exe (1.0.2.4)
    2008-01-28 SDMain.exe (1.0.0.5)
    2007-10-07 SDShred.exe (1.0.1.2)
    2008-01-28 SDUpdate.exe (1.0.8.8)
    2008-01-28 SDWinSec.exe (1.0.0.11)
    2008-01-28 SpybotSD.exe (1.5.2.20)
    2008-01-28 TeaTimer.exe (1.5.2.16)
    2008-05-21 unins000.exe (51.49.0.0)
    2008-01-28 Update.exe (1.4.0.6)
    2008-01-28 advcheck.dll (1.5.4.5)
    2007-04-02 aports.dll (2.1.0.0)
    2007-11-17 DelZip179.dll (1.79.7.4)
    2008-01-28 SDFiles.dll (1.5.1.19)
    2008-01-28 SDHelper.dll (1.5.0.11)
    2008-01-28 Tools.dll (2.1.3.3)
    2008-04-16 Includes\Adware.sbi
    2008-05-21 Includes\AdwareC.sbi
    2008-05-21 Includes\Cookies.sbi
    2007-12-26 Includes\Dialer.sbi
    2008-05-21 Includes\DialerC.sbi
    2008-05-21 Includes\HeavyDuty.sbi
    2008-04-30 Includes\Hijackers.sbi
    2008-05-21 Includes\HijackersC.sbi
    2008-04-30 Includes\Keyloggers.sbi
    2008-05-21 Includes\KeyloggersC.sbi
    2004-11-29 Includes\LSP.sbi
    2008-05-21 Includes\Malware.sbi
    2008-05-21 Includes\MalwareC.sbi
    2008-03-26 Includes\PUPS.sbi
    2008-05-21 Includes\PUPSC.sbi
    2008-05-21 Includes\Revision.sbi
    2008-01-09 Includes\Security.sbi
    2008-05-21 Includes\SecurityC.sbi
    2008-04-16 Includes\Spybots.sbi
    2008-05-21 Includes\SpybotsC.sbi
    2008-04-16 Includes\Spyware.sbi
    2008-05-21 Includes\SpywareC.sbi
    2007-11-06 Includes\Tracks.uti
    2008-05-21 Includes\Trojans.sbi
    2008-05-21 Includes\TrojansC.sbi
    2008-03-04 Plugins\Chai.dll
    2008-03-05 Plugins\Fennel.dll
    2008-02-26 Plugins\Mate.dll
    2007-12-24 Plugins\TCPIPAddress.dll

    Located: HK_LM:Run, Alcmtr
    command: ALCMTR.EXE
    file: C:\WINDOWS\ALCMTR.EXE
    size: 69632
    MD5: 8B4CBBA1EA526830C7F97E7822E2493A

    Located: HK_LM:Run, Copperhead
    command: C:\Program Files\Razer\Copperhead\razerhid.exe
    file: C:\Program Files\Razer\Copperhead\razerhid.exe
    size: 155648
    MD5: 39587A991BDF42EEC8BAF2D7012559B7

    Located: HK_LM:Run, Lycosa
    command: "C:\Program Files\Razer\Lycosa\razerhid.exe"
    file: C:\Program Files\Razer\Lycosa\razerhid.exe
    size: 147456
    MD5: BBDFDDA0B40FA929314138F93BD89759

    Located: HK_LM:Run, NvCplDaemon
    command: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    file:
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: HK_LM:Run, NvMediaCenter
    command: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    file:
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: HK_LM:Run, nwiz
    command: nwiz.exe /install
    file: C:\WINDOWS\system32\nwiz.exe
    size: 1630208
    MD5: 3D51F8D38A5FE3EC219F33E83607BCDE

    Located: HK_LM:Run, RTHDCPL
    command: RTHDCPL.EXE
    file: C:\WINDOWS\RTHDCPL.EXE
    size: 16269312
    MD5: 1A297CE654D5C04DBC9B17FDC0932D6E

    Located: HK_LM:Run, SkyTel
    command: SkyTel.EXE
    file: C:\WINDOWS\SkyTel.EXE
    size: 2879488
    MD5: C74B86642F131D76C0EDE673FDF137B2

    Located: HK_LM:Run, Windows Defender
    command: "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    file: C:\Program Files\Windows Defender\MSASCui.exe
    size: 866584
    MD5: 77C03BF23AE56B0A31AE4D5BB4B3D0AC

    Located: HK_CU:Run, SpybotSD TeaTimer
    where: S-1-5-21-682003330-1482476501-2146942695-1004...
    command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    size: 2097488
    MD5: A9A5DB6AC3721BE698B996913693D73F

    Located: HK_CU:Run, Steam
    where: S-1-5-21-682003330-1482476501-2146942695-1004...
    command: "C:\Program Files\Steam\Steam.exe" -silent
    file: C:\Program Files\Steam\Steam.exe
    size: 1271032
    MD5: 5136CED31148EDF861B5F42F094F2BD7

    Located: HK_CU:Run, Yahoo! Pager
    where: S-1-5-21-682003330-1482476501-2146942695-1004...
    command: "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
    file: C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
    size: 4670704
    MD5: C7048E3DD4D9FA3AF7BC2747EF5C433F

    Located: WinLogon, crypt32chain
    command: crypt32.dll
    file: crypt32.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, cryptnet
    command: cryptnet.dll
    file: cryptnet.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, cscdll
    command: cscdll.dll
    file: cscdll.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, dimsntfy
    command: %SystemRoot%\System32\dimsntfy.dll
    file: %SystemRoot%\System32\dimsntfy.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, ScCertProp
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, Schedule
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, sclgntfy
    command: sclgntfy.dll
    file: sclgntfy.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, SensLogn
    command: WlNotify.dll
    file: WlNotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, termsrv
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

    Located: WinLogon, wlballoon
    command: wlnotify.dll
    file: wlnotify.dll
    size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
    Warning: if the file is actually larger than 0 bytes,
    the checksum could not be properly calculated!

  2. #2
    Junior Member
    Join Date
    Apr 2008
    Posts
    6

    Default

    also, root certificates in internet explorer,

    what is everyones opinion on this? there are like 150 of them, and I have no clue who, what, or any idea what they are for other than linking others onto my system. Do you suggest removal of certs?

  3. #3
    Junior Member
    Join Date
    Apr 2008
    Posts
    6

    Default

    --- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

    2008-01-28 blindman.exe (1.0.0.7)
    2008-01-28 SDDelFile.exe (1.0.2.4)
    2008-01-28 SDMain.exe (1.0.0.5)
    2007-10-07 SDShred.exe (1.0.1.2)
    2008-01-28 SDUpdate.exe (1.0.8.8)
    2008-01-28 SDWinSec.exe (1.0.0.11)
    2008-01-28 SpybotSD.exe (1.5.2.20)
    2008-01-28 TeaTimer.exe (1.5.2.16)
    2008-05-21 unins000.exe (51.49.0.0)
    2008-01-28 Update.exe (1.4.0.6)
    2008-01-28 advcheck.dll (1.5.4.5)
    2007-04-02 aports.dll (2.1.0.0)
    2007-11-17 DelZip179.dll (1.79.7.4)
    2008-01-28 SDFiles.dll (1.5.1.19)
    2008-01-28 SDHelper.dll (1.5.0.11)
    2008-01-28 Tools.dll (2.1.3.3)
    2008-04-16 Includes\Adware.sbi
    2008-05-21 Includes\AdwareC.sbi
    2008-05-21 Includes\Cookies.sbi
    2007-12-26 Includes\Dialer.sbi
    2008-05-21 Includes\DialerC.sbi
    2008-05-21 Includes\HeavyDuty.sbi
    2008-04-30 Includes\Hijackers.sbi
    2008-05-21 Includes\HijackersC.sbi
    2008-04-30 Includes\Keyloggers.sbi
    2008-05-21 Includes\KeyloggersC.sbi
    2004-11-29 Includes\LSP.sbi
    2008-05-21 Includes\Malware.sbi
    2008-05-21 Includes\MalwareC.sbi
    2008-03-26 Includes\PUPS.sbi
    2008-05-21 Includes\PUPSC.sbi
    2008-05-21 Includes\Revision.sbi
    2008-01-09 Includes\Security.sbi
    2008-05-21 Includes\SecurityC.sbi
    2008-04-16 Includes\Spybots.sbi
    2008-05-21 Includes\SpybotsC.sbi
    2008-04-16 Includes\Spyware.sbi
    2008-05-21 Includes\SpywareC.sbi
    2007-11-06 Includes\Tracks.uti
    2008-05-21 Includes\Trojans.sbi
    2008-05-21 Includes\TrojansC.sbi
    2008-03-04 Plugins\Chai.dll
    2008-03-05 Plugins\Fennel.dll
    2008-02-26 Plugins\Mate.dll
    2007-12-24 Plugins\TCPIPAddress.dll

    Spybot - Search & Destroy browser pages report, 5/22/2008 1:24:55 AM

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
    C:\WINDOWS\system32\blank.htm
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
    http://www.microsoft.com/isapi/redir...ie&ar=iesearch
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
    http://www.microsoft.com/isapi/redir...r=6&ar=msnhome
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\First Home Page
    http://www.microsoft.com/isapi/redir...e5update&O1=b1
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
    %SystemRoot%\system32\blank.htm
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
    http://go.microsoft.com/fwlink/?LinkId=54896
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
    http://go.microsoft.com/fwlink/?LinkId=69157
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
    http://go.microsoft.com/fwlink/?LinkId=69157
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
    http://go.microsoft.com/fwlink/?LinkId=54896
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant
    http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
    HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch
    http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm

  4. #4
    Junior Member
    Join Date
    Apr 2008
    Posts
    6

    Default

    what does everyone think about internet explorer add-ons?

  5. #5
    Junior Member
    Join Date
    Apr 2008
    Posts
    6

    Default

    bump....

  6. #6
    Senior Member
    Join Date
    Oct 2005
    Location
    Germany
    Posts
    5,263

    Default

    Hello,

    I can see nothing bad in your startup list.

    Best regards
    Sandra
    Team Spybot

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •