Unsolved
This post is more than 5 years old
31 Posts
0
414
November 19th, 2007 19:00
No control panel plus multi popus warning spyware infection
HKCR\CLSID\{50B4D2B3-723F-41B3-AEC4-0BD66F0F45FF}\Implemented Categories
HKCR\CLSID\{50B4D2B3-723F-41B3-AEC4-0BD66F0F45FF}\Implemented Categories\{00021493-0000-0000-C000-000000000046}
HKCR\CLSID\{50B4D2B3-723F-41B3-AEC4-0BD66F0F45FF}\InprocServer32
HKCR\CLSID\{50B4D2B3-723F-41B3-AEC4-0BD66F0F45FF}\InprocServer32#ThreadingModel
HKCR\CLSID\{50B4D2B3-723F-41B3-AEC4-0BD66F0F45FF}\Instance
HKCR\CLSID\{50B4D2B3-723F-41B3-AEC4-0BD66F0F45FF}\Instance#CLSID
HKCR\CLSID\{50B4D2B3-723F-41B3-AEC4-0BD66F0F45FF}\Instance\InitPropertyBag
HKCR\CLSID\{50B4D2B3-723F-41B3-AEC4-0BD66F0F45FF}\Instance\InitPropertyBag#Url
HKCR\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51}
HKCR\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51}\Implemented Categories
HKCR\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51}\Implemented Categories\{00021494-0000-0000-C000-000000000046}
HKCR\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51}\InprocServer32
HKCR\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51}\InprocServer32#ThreadingModel
HKCR\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51}\Instance
HKCR\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51}\Instance#CLSID
HKCR\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51}\Instance\InitPropertyBag
HKCR\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51}\Instance\InitPropertyBag#Url
C:\Program Files\Ezula\basis.dst
C:\Program Files\Ezula\basis.kwd
C:\Program Files\Ezula\basis.pu
C:\Program Files\Ezula\basis.rst
C:\Program Files\Ezula\CHCON.dll
C:\Program Files\Ezula\genun.ez
C:\Program Files\Ezula\Images\arrow1.gif
C:\Program Files\Ezula\Images\arrow2.gif
C:\Program Files\Ezula\Images\button_small.gif
C:\Program Files\Ezula\Images\icon.gif
C:\Program Files\Ezula\Images\Layer_Bottom.gif
C:\Program Files\Ezula\Images\Layer_Center.gif
C:\Program Files\Ezula\Images\Layer_Top.gif
C:\Program Files\Ezula\Images\new.gif
C:\Program Files\Ezula\Images\PopUp_Follow_divider.gif
C:\Program Files\Ezula\Images\PopUp_Follow_Left.gif
C:\Program Files\Ezula\Images\PopUp_Follow_Off.gif
C:\Program Files\Ezula\Images\PopUp_Follow_On.gif
C:\Program Files\Ezula\Images\PopUp_Follow_Right.gif
C:\Program Files\Ezula\Images\PopUp_Top.gif
C:\Program Files\Ezula\Images\PopUp_Top_Bottom.gif
C:\Program Files\Ezula\Images\Side_B.gif
C:\Program Files\Ezula\Images\Side_L.gif
C:\Program Files\Ezula\Images\Side_R.gif
C:\Program Files\Ezula\Images\Side_Top.gif
C:\Program Files\Ezula\Images\spacer.gif
C:\Program Files\Ezula\Images\Thumbs.db
C:\Program Files\Ezula\Images
C:\Program Files\Ezula\INSTALL.LOG
C:\Program Files\Ezula\legend.lgn
C:\Program Files\Ezula\mmod.exe
C:\Program Files\Ezula\param.ez
C:\Program Files\Ezula\rwds.rst
C:\Program Files\Ezula\search.src
C:\Program Files\Ezula\seng.dll
C:\Program Files\Ezula\UNWISE.EXE
C:\Program Files\Ezula\upgrade.vrn
C:\Program Files\Ezula\version.vrn
C:\Program Files\Ezula\wndbannn.src
C:\Program Files\Ezula
C:\Program Files\Web Offer\apev.exe
C:\Program Files\Web Offer\basisp.dst
C:\Program Files\Web Offer\basisp.kwd
C:\Program Files\Web Offer\basisp.pu
C:\Program Files\Web Offer\basisp.rst
C:\Program Files\Web Offer\CHPON.dll
C:\Program Files\Web Offer\eapbh.dll
C:\Program Files\Web Offer\gendis.ez
C:\Program Files\Web Offer\INSTALL.LOG
C:\Program Files\Web Offer\paramp.ez
C:\Program Files\Web Offer\rwdsp.rst
C:\Program Files\Web Offer\sepng.dll
C:\Program Files\Web Offer\UNWISE.EXE
C:\Program Files\Web Offer\upgradep.vrn
C:\Program Files\Web Offer\versionp.vrn
C:\Program Files\Web Offer\wndbannnp.src
C:\Program Files\Web Offer\wo.exe
C:\Program Files\Web Offer
C:\WINDOWS\WOINSTALL.EXE
Trojan.NewDotNet
HKU\.DEFAULT\Software\New.net
HKU\S-1-5-18\Software\New.net
C:\WINDOWS\NDNUNINSTALL6_38.EXE
HKU\.DEFAULT\Software\New.net
HKU\S-1-5-18\Software\New.net
C:\WINDOWS\NDNUNINSTALL6_38.EXE
Malware.Ultimate Defender
HKLM\Software\Ultimate Defender
C:\DOCUMENTS AND SETTINGS\HCH\APPLICATION DATA\TRANT.EXE
C:\DOCUMENTS AND SETTINGS\HCH\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\2LOFIXY5\UCLEANER_SETUP[1].EXE
C:\PROGRAM FILES\UCLEANER_SETUP.EXE
C:\RECYCLER\S-1-5-21-1757134264-4201092952-2540798924-1011\DC21.EXE
C:\WINDOWS\Prefetch\TRANT.EXE-08CF80AD.pf
C:\WINDOWS\Prefetch\UCLEANER_SETUP.EXE-0E6DB6A7.pf
HKLM\Software\Ultimate Defender
C:\DOCUMENTS AND SETTINGS\HCH\APPLICATION DATA\TRANT.EXE
C:\DOCUMENTS AND SETTINGS\HCH\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\2LOFIXY5\UCLEANER_SETUP[1].EXE
C:\PROGRAM FILES\UCLEANER_SETUP.EXE
C:\RECYCLER\S-1-5-21-1757134264-4201092952-2540798924-1011\DC21.EXE
C:\WINDOWS\Prefetch\TRANT.EXE-08CF80AD.pf
C:\WINDOWS\Prefetch\UCLEANER_SETUP.EXE-0E6DB6A7.pf
Malware.Ultimate Cleaner
HKLM\Software\Ultimate Cleaner
C:\Program Files\Ultimate Cleaner
C:\Documents and Settings\HCH\Application Data\Ultimate Cleaner\backup
C:\Documents and Settings\HCH\Application Data\Ultimate Cleaner\logs
C:\Documents and Settings\HCH\Application Data\Ultimate Cleaner\settings.dat
C:\Documents and Settings\HCH\Application Data\Ultimate Cleaner
HKLM\Software\Ultimate Cleaner
C:\Program Files\Ultimate Cleaner
C:\Documents and Settings\HCH\Application Data\Ultimate Cleaner\backup
C:\Documents and Settings\HCH\Application Data\Ultimate Cleaner\logs
C:\Documents and Settings\HCH\Application Data\Ultimate Cleaner\settings.dat
C:\Documents and Settings\HCH\Application Data\Ultimate Cleaner
Adware.Search2Find
C:\DOCUMENTS AND SETTINGS\HCH\DESKTOP\FIND SPYWARE REMOVER.LNK
C:\DOCUMENTS AND SETTINGS\HCH\DESKTOP\FREE ONLINE DATING.LNK
C:\DOCUMENTS AND SETTINGS\HCH\DESKTOP\GO TO CASINO.LNK
C:\DOCUMENTS AND SETTINGS\HCH\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\ED1EJU1C\S2F[1].EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029362.EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029365.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029367.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029369.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029384.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029386.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029388.LNK
C:\DOCUMENTS AND SETTINGS\HCH\DESKTOP\FIND SPYWARE REMOVER.LNK
C:\DOCUMENTS AND SETTINGS\HCH\DESKTOP\FREE ONLINE DATING.LNK
C:\DOCUMENTS AND SETTINGS\HCH\DESKTOP\GO TO CASINO.LNK
C:\DOCUMENTS AND SETTINGS\HCH\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\ED1EJU1C\S2F[1].EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029362.EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029365.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029367.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029369.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029384.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029386.LNK
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029388.LNK
Trojan.Unknown Origin
C:\DOCUMENTS AND SETTINGS\HCH\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\2LOFIXY5\3269[1].EXE
C:\PROGRAM FILES\3269.EXE
C:\RECYCLER\S-1-5-21-1757134264-4201092952-2540798924-1011\DC24.EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029361.EXE
C:\WINDOWS\Prefetch\3269.EXE-2AF1D23C.pf
C:\DOCUMENTS AND SETTINGS\HCH\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\2LOFIXY5\3269[1].EXE
C:\PROGRAM FILES\3269.EXE
C:\RECYCLER\S-1-5-21-1757134264-4201092952-2540798924-1011\DC24.EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029361.EXE
C:\WINDOWS\Prefetch\3269.EXE-2AF1D23C.pf
Trojan.Downloader-Gen/IX
C:\DOCUMENTS AND SETTINGS\HCH\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\43ZNI455\MSC[1].EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029363.EXE
C:\DOCUMENTS AND SETTINGS\HCH\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\43ZNI455\MSC[1].EXE
C:\SYSTEM VOLUME INFORMATION\_RESTORE{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP301\A0029363.EXE
Trojan.Downloader-FindFast/Fake
C:\DOCUMENTS AND SETTINGS\HCH\START MENU\PROGRAMS\STARTUP\FINDFAST.EXE
C:\DOCUMENTS AND SETTINGS\HCH\START MENU\PROGRAMS\STARTUP\FINDFAST.EXE
Trojan.NewDotNet-Installer
C:\PROGRAM FILES\FILESUBMIT\ALWAYS AND FOREVER\NNEZTA388.EXE
C:\PROGRAM FILES\FILESUBMIT\TIGGER AND PIGLET ON ICE WITH SNOW FALLING\NNEZTA388.EXE
C:\PROGRAM FILES\FILESUBMIT\VERY SAVER\NNEZTA388.EXE
C:\PROGRAM FILES\FILESUBMIT\ALWAYS AND FOREVER\NNEZTA388.EXE
C:\PROGRAM FILES\FILESUBMIT\TIGGER AND PIGLET ON ICE WITH SNOW FALLING\NNEZTA388.EXE
C:\PROGRAM FILES\FILESUBMIT\VERY SAVER\NNEZTA388.EXE
MyQuickSearch Toolbar
C:\PROGRAM FILES\QUICKSEARCH\QUICKSEARCHBAR1_27.DLL
C:\PROGRAM FILES\QUICKSEARCH\QUICKSEARCHBAR1_27.DLL
InstaFinder Installer
C:\WINDOWS\SYSTEM32\INSTAFINDER_INST.EXE
C:\WINDOWS\SYSTEM32\INSTAFINDER_INST.EXE
Trace.Known Threat Sources
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\e404[1].exe
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\[5].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\ED1EJU1C\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\WRQNM1E9\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\functions.js[1].php
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\Q3WRIHGN\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\VFDRJHK4\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\KHGXAV09\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\AX3OP8FQ\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\[3].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\[4].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\VFDRJHK4\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\43ZNI455\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0DWNGJGF\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\ED1EJU1C\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0DWNGJGF\[3].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\8TQNQRSH\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\43ZNI455\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\2VABI9YF\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0DWNGJGF\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\AX3OP8FQ\get_lic[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\e404[1].exe
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\[5].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\ED1EJU1C\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\WRQNM1E9\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\functions.js[1].php
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\Q3WRIHGN\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\VFDRJHK4\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\KHGXAV09\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\AX3OP8FQ\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\[3].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\[4].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\VFDRJHK4\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\43ZNI455\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0DWNGJGF\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\ED1EJU1C\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0DWNGJGF\[3].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0B972UJ9\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\8TQNQRSH\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\43ZNI455\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\2VABI9YF\[1].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\0DWNGJGF\[2].htm
C:\Documents and Settings\HCH\Local Settings\Temporary Internet Files\Content.IE5\AX3OP8FQ\get_lic[1].htm
Message Edited by 3jewels on 11-19-2007 04:01 PM
No Events found!
bamajim
10.4K Posts
0
November 19th, 2007 20:00
"The world is what you make of it"