Hi,
Can you please tell me what I can delete from my ad-aware log.
Lavasoft Ad-Aware Personal Build 1.02
Logfile created on:Wednesday, August 11, 2004 09:33:26 AM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R2 10.08.2004
»»
References detected during the scan:
»»
Alexa(TAC index:5):1 total references
iWon(TAC index:5):58 total references
Tracking Cookie(TAC index:3):22 total references
»»
Ad-Aware Settings
==
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file
Extended Ad-Aware Settings
==
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Backup current definitions file before updating
Set : Play sound at scan completion if scan locates critical objects
11-08-2004 09:33:26 AM - Scan started. (Full System Scan)
Listing running processes
»»
#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 456
ThreadCreationTime : 07-08-2004 02:25:07 PM
BasePriority : Normal
#:2 [csrss.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 528
ThreadCreationTime : 07-08-2004 02:25:11 PM
BasePriority : Normal
#:3 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 556
ThreadCreationTime : 07-08-2004 02:25:12 PM
BasePriority : High
#:4 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 752
ThreadCreationTime : 07-08-2004 02:25:12 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : services.exe
#:5 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 764
ThreadCreationTime : 07-08-2004 02:25:12 PM
BasePriority : Normal
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : lsass.exe
#:6 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 944
ThreadCreationTime : 07-08-2004 02:25:13 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe
#:7 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1032
ThreadCreationTime : 07-08-2004 02:25:13 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe
#:8 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1156
ThreadCreationTime : 07-08-2004 02:25:14 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe
#:9 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1256
ThreadCreationTime : 07-08-2004 02:25:14 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe
#:10 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 1440
ThreadCreationTime : 07-08-2004 02:25:15 PM
BasePriority : Normal
FileVersion : 6.00.2800.1106 (xpsp1.020828-1920)
ProductVersion : 6.00.2800.1106
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : EXPLORER.EXE
#:11 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1584
ThreadCreationTime : 07-08-2004 02:25:16 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (XPClient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : spoolsv.exe
#:12 [ccevtmgr.exe]
FilePath : C:\Program Files\Common Files\Symantec Shared\
ProcessID : 1612
ThreadCreationTime : 07-08-2004 02:25:16 PM
BasePriority : Normal
FileVersion : 1.03.4
ProductVersion : 1.03.4
ProductName : Event Manager
CompanyName : Symantec Corporation
FileDescription : Event Manager Service
InternalName : ccEvtMgr
LegalCopyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved.
OriginalFilename : ccEvtMgr.exe
#:13 [ghoststarttrayapp.exe]
FilePath : C:\Program Files\Symantec\Norton Ghost 2003\
ProcessID : 1844
ThreadCreationTime : 07-08-2004 02:25:18 PM
BasePriority : Normal
FileVersion : 2003.775
ProductVersion : 2003.775
ProductName : Norton Ghost Start
CompanyName : Symantec Corporation
FileDescription : Norton Ghost Start
InternalName : GhostStartTrayApp
LegalCopyright : Copyright (C) 1998-2002 Symantec Corp. All rights reserved.
OriginalFilename : GhostStartTrayApp.exe
#:14 [ccapp.exe]
FilePath : C:\Program Files\Common Files\Symantec Shared\
ProcessID : 1868
ThreadCreationTime : 07-08-2004 02:25:18 PM
BasePriority : Normal
FileVersion : 1.0.10.006
ProductVersion : 1.0.10.006
ProductName : Common Client
CompanyName : Symantec Corporation
FileDescription : Common Client CC App
InternalName : ccApp
LegalCopyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved.
OriginalFilename : ccApp.exe
#:15 [htpatch.exe]
FilePath : C:\WINDOWS\
ProcessID : 1884
ThreadCreationTime : 07-08-2004 02:25:18 PM
BasePriority : Normal
#:16 [sistray.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1892
ThreadCreationTime : 07-08-2004 02:25:18 PM
BasePriority : Normal
FileVersion : 0.0.0.2110
ProductVersion : 0.0.0.2110
ProductName : SiS (R) Compatible Super VGA SiSTray application for Windows NT4.0/2000/XP
CompanyName : Silicon Integrated Systems Corporation
FileDescription : SiS Compatible Super VGA Tray Application
InternalName : SISTRAY 2.09r.01
LegalCopyright : Copyright (C) Silicon Integrated Systems Corp. 1998-2002
OriginalFilename : SISTRAY.EXE
Comments : SiS Compatible Super VGA Tray Application
#:17 [smtray.exe]
FilePath : C:\Program Files\Analog Devices\SoundMAX\
ProcessID : 1904
ThreadCreationTime : 07-08-2004 02:25:19 PM
BasePriority : Normal
FileVersion : 3, 2, 12, 0
ProductVersion : 3, 2, 12, 0
ProductName : SoundMAX Integrated Digital Audio
CompanyName : Analog Devices, Inc.
FileDescription : SoundMAX System Tray
InternalName : SMTray
LegalCopyright : Copyright © 2001 Analog Devices
OriginalFilename : SMTray.exe
#:18 [gsicon.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1924
ThreadCreationTime : 07-08-2004 02:25:19 PM
BasePriority : Normal
FileVersion : 3.1.0
ProductVersion : 3.1.0
ProductName : DSL Modem
CompanyName : GlobeSpan, Inc.
FileDescription : DSL Modem Monitor
InternalName : GSICON.EXE
LegalCopyright : Copyright © 2001 GlobeSpan, Inc.
OriginalFilename : GSICON.EXE
#:19 [dslagent.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1948
ThreadCreationTime : 07-08-2004 02:25:19 PM
BasePriority : Normal
#:20 [hpztsb07.exe]
FilePath : C:\WINDOWS\System32\spool\drivers\w32x86\3\
ProcessID : 1960
ThreadCreationTime : 07-08-2004 02:25:19 PM
BasePriority : Normal
FileVersion : 2,140,0,0
ProductVersion : 2,140,0,0
ProductName : HP DeskJet
CompanyName : HP
LegalCopyright : Copyright (c) Hewlett-Packard Company 1999-2002
#:21 [mwsoemon.exe]
FilePath : C:\PROGRA~1\MYWEBS~1\bar\1.bin\
ProcessID : 1968
ThreadCreationTime : 07-08-2004 02:25:19 PM
BasePriority : Normal
FileVersion : 1,2,2,2
ProductVersion : 2,0,1,0
ProductName : My Web Search Bar for Internet Explorer, email clients, and messenger clients
CompanyName : MyWebSearch.com
FileDescription : My Web Search Email Plugin
InternalName : mwsoemon
LegalCopyright : Copyright © 2003-2004 MyWebSearch.com
OriginalFilename : mwsoemon.exe
Warning! iWon Object found in memory(C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe)
iWon Object Recognized!
Type : Process
Data : mwsoemon.exe
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Object : C:\PROGRA~1\MYWEBS~1\bar\1.bin\
FileVersion : 1,2,2,2
ProductVersion : 2,0,1,0
ProductName : My Web Search Bar for Internet Explorer, email clients, and messenger clients
CompanyName : MyWebSearch.com
FileDescription : My Web Search Email Plugin
InternalName : mwsoemon
LegalCopyright : Copyright © 2003-2004 MyWebSearch.com
OriginalFilename : mwsoemon.exe
"C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe"Process terminated successfully
#:22 [ctfmon.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 112
ThreadCreationTime : 07-08-2004 02:25:20 PM
BasePriority : Normal
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : CTFMON.EXE
#:23 [msmsgs.exe]
FilePath : C:\Program Files\Messenger\
ProcessID : 168
ThreadCreationTime : 07-08-2004 02:25:20 PM
BasePriority : Normal
FileVersion : 4.7.0041
ProductVersion : Version 4.7
ProductName : Messenger
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msmsgs
LegalCopyright : Copyright (c) Microsoft Corporation 1997-2001
LegalTrademarks : Microsoft(R) is a registered trademark of Microsoft Corporation in the U.S. and/or other countries.
OriginalFilename : msmsgs.exe
#:24 [sqlmangr.exe]
FilePath : C:\Program Files\Microsoft SQL Server\80\Tools\Binn\
ProcessID : 256
ThreadCreationTime : 07-08-2004 02:25:21 PM
BasePriority : Normal
FileVersion : 2000.080.0760.00
ProductVersion : 8.00.760
ProductName : Microsoft SQL Server
CompanyName : Microsoft Corporation
FileDescription : SQL Server Service Manager
InternalName : SQLMANGR
LegalCopyright : © 1988-2003 Microsoft Corp. All rights reserved.
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation
OriginalFilename : SQLMANGR.exe
Comments : NT INTEL X86
#:25 [alg.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 580
ThreadCreationTime : 07-08-2004 02:25:24 PM
BasePriority : Normal
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Application Layer Gateway Service
InternalName : ALG.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : ALG.exe
#:26 [ghoststartservice.exe]
FilePath : C:\Program Files\Symantec\Norton Ghost 2003\
ProcessID : 624
ThreadCreationTime : 07-08-2004 02:25:24 PM
BasePriority : Normal
FileVersion : 2003.775
ProductVersion : 2003.775
ProductName : Norton Ghost Start Service
CompanyName : Symantec Corporation
FileDescription : Norton Ghost Start
InternalName : GhostStartService
LegalCopyright : Copyright (C) 1998-2002 Symantec Corp. All rights reserved.
OriginalFilename : GhostStartService.exe
#:27 [ibguard.exe]
FilePath : C:\Program Files\Firebird\bin\
ProcessID : 644
ThreadCreationTime : 07-08-2004 02:25:24 PM
BasePriority : Normal
FileVersion : WI-V1.0.0.794
ProductVersion : 1.0.0.794
ProductName : Firebird Database Server
CompanyName : FirebirdSQL Project
FileDescription : Firebird Database Server
InternalName : Firebird
LegalCopyright : Portions created by Inprise Corporation are Copyright (C) 2000 Inprise Corporation.
Comments : Original Code created by Inprise Corporation and its predecessors. Portions created by Inprise Corporation are Copyright (C) 2000 Inprise Corporation. Portions created by others are Copyright (C) 2000-2001 themselves and/or the FirebirdSQL Project.
#:28 [sqlservr.exe]
FilePath : C:\Program Files\Microsoft SQL ServerMSSQL$SL\Binn\
ProcessID : 676
ThreadCreationTime : 07-08-2004 02:25:25 PM
BasePriority : Normal
FileVersion : 2000.080.0760.00
ProductVersion : 8.00.760
ProductName : Microsoft SQL Server
CompanyName : Microsoft Corporation
FileDescription : SQL Server Windows NT
InternalName : SQLSERVR
LegalCopyright : © 1988-2003 Microsoft Corp. All rights reserved.
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation
OriginalFilename : SQLSERVR.EXE
Comments : NT INTEL X86
#:29 [imapp.exe]
FilePath : C:\PROGRA~1\INCRED~1\bin\
ProcessID : 692
ThreadCreationTime : 07-08-2004 02:25:25 PM
BasePriority : Normal
FileVersion : 3, 0, 0, 1606
ProductVersion : 3, 0, 0, 1606
ProductName : IncrediMail
CompanyName : IncrediMail, Ltd.
FileDescription : IncrediMail Application
InternalName : IncrediApp
LegalCopyright : Copyright © 2002 IncrediMail, Ltd.
OriginalFilename : IMAPP.EXE
#:30 [sqlservr.exe]
FilePath : C:\Program Files\Microsoft SQL Server\MSSQL\Binn\
ProcessID : 1528
ThreadCreationTime : 07-08-2004 02:25:28 PM
BasePriority : Normal
FileVersion : 2000.080.0760.00
ProductVersion : 8.00.760
ProductName : Microsoft SQL Server
CompanyName : Microsoft Corporation
FileDescription : SQL Server Windows NT
InternalName : SQLSERVR
LegalCopyright : © 1988-2003 Microsoft Corp. All rights reserved.
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation
OriginalFilename : SQLSERVR.EXE
Comments : NT INTEL X86
#:31 [navapsvc.exe]
FilePath : C:\Program Files\Norton AntiVirus\
ProcessID : 1784
ThreadCreationTime : 07-08-2004 02:25:31 PM
BasePriority : Normal
FileVersion : 9.05.1015
ProductVersion : 9.05.1015
ProductName : Norton AntiVirus
CompanyName : Symantec Corporation
FileDescription : Norton AntiVirus Auto-Protect Service
InternalName : NAVAPSVC
LegalCopyright : Copyright (c) 2000-2002 Symantec Corporation. All rights reserved.
OriginalFilename : NAVAPSVC.EXE
#:32 [smagent.exe]
FilePath : C:\Program Files\Analog Devices\SoundMAX\
ProcessID : 164
ThreadCreationTime : 07-08-2004 02:25:32 PM
BasePriority : Normal
FileVersion : 3, 2, 6, 0
ProductVersion : 3, 2, 6, 0
ProductName : SoundMAX service agent
CompanyName : Analog Devices, Inc.
FileDescription : SoundMAX service agent component
InternalName : SMAgent
LegalCopyright : Copyright © 2002
OriginalFilename : SMAgent.exe
#:33 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 268
ThreadCreationTime : 07-08-2004 02:25:32 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe
#:34 [sqlagent.exe]
FilePath : C:\Program Files\Microsoft SQL Server\MSSQL\Binn\
ProcessID : 672
ThreadCreationTime : 07-08-2004 02:25:40 PM
BasePriority : Normal
FileVersion : 2000.080.0760.00
ProductVersion : 8.00.760
ProductName : Microsoft SQL Server
CompanyName : Microsoft Corporation
FileDescription : Microsoft SQL Server Agent
InternalName : SQLAGENT
LegalCopyright : © 1988-2003 Microsoft Corp. All rights reserved.
LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation
OriginalFilename : SQLAGENT70.EXE
Comments : NT INTEL X86
#:35 [ibserver.exe]
FilePath : C:\Program Files\Firebird\bin\
ProcessID : 2864
ThreadCreationTime : 07-08-2004 02:26:07 PM
BasePriority : Normal
FileVersion : WI-V1.0.0.794
ProductVersion : 1.0.0.794
ProductName : Firebird Database Server
CompanyName : FirebirdSQL Project
FileDescription : Firebird Database Server
InternalName : Firebird
LegalCopyright : Portions created by Inprise Corporation are Copyright (C) 2000 Inprise Corporation.
Comments : Original Code created by Inprise Corporation and its predecessors. Portions created by Inprise Corporation are Copyright (C) 2000 Inprise Corporation. Portions created by others are Copyright (C) 2000-2001 themselves and/or the FirebirdSQL Project.
#:36 [imnotfy.exe]
FilePath : C:\PROGRA~1\INCRED~1\bin\
ProcessID : 1404
ThreadCreationTime : 11-08-2004 07:32:19 AM
BasePriority : Normal
FileVersion : 3, 0, 0, 1606
ProductVersion : 3, 0, 0, 1606
ProductName : IncrediNotifier Application
FileDescription : IncrediNotifier MFC Application
InternalName : IncrediNotifier
LegalCopyright : Copyright (C) 2003
OriginalFilename : IncrediNotifier.EXE
#:37 [ad-aware.exe]
FilePath : C:\PROGRA~1\Lavasoft\AD-AWA~1\
ProcessID : 3992
ThreadCreationTime : 11-08-2004 07:33:20 AM
BasePriority : Normal
FileVersion : 6.2.0.144
ProductVersion : VI.Second Edition
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved
Memory scan result:
»»
New critical objects: 1
Objects found so far: 1
Started registry scan
»»
Alexa Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{07b18ea1-a523-4961-b6bb-170de4475cca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{07b18ea2-a523-4961-b6bb-170de4475cca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{07b18ea9-a523-4961-b6bb-170de4475cca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{07b18eab-a523-4961-b6bb-170de4475cca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : mywebsearch.outlookaddin
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : mywebsearch.outlookaddin.1
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : mywebsearchtoolbar.settingsplugin
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : mywebsearchtoolbar.settingsplugin.1
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{07b18ea0-a523-4961-b6bb-170de4475cca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{7473d290-b7bb-4f24-ae82-7e2ce94bb6a9}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{adb01e80-3c79-4272-a0f1-7b2be7a782dc}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{00a6faf1-072e-44cf-8957-5838f569a31d}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{07b18ea3-a523-4961-b6bb-170de4475cca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{07b18eac-a523-4961-b6bb-170de4475cca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{8e6f1830-9607-4440-8530-13be7c4b1d14}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{a9571378-68a1-443d-b082-284f960c6d17}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{f42228fb-e84e-479e-b922-fbbd096e792c}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{e47caee0-deea-464a-9326-3f2801535a4d}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{147a976e-eee1-4377-8ea7-4716e4cdd239}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{9afb8248-617f-460d-9366-d71cdeda3179}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{00a6faf0-072e-44cf-8957-5838f569a31d}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{07b18eaa-a523-4961-b6bb-170de4475cca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{adb01e81-3c79-4272-a0f1-7b2be7a782dc}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{9ff05104-b030-46fc-94b8-81276e4e27df}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Rootkey : HKEY_CLASSES_ROOT
Object : screensavercontrol.screensaverinstaller
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Rootkey : HKEY_CLASSES_ROOT
Object : screensavercontrol.screensaverinstaller.1
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Rootkey : HKEY_CLASSES_ROOT
Object : typelib\{29d67d3c-509a-4544-903f-c8c1b8236554}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Rootkey : HKEY_CLASSES_ROOT
Object : interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows\currentversion\explorer\browser helper objects\{07b18ea1-a523-4961-b6bb-170de4475cca}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows\currentversion\explorer\browser helper objects\{00a6faf1-072e-44cf-8957-5838f569a31d}
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_USERS
Object : S-1-5-21-436374069-1960408961-839522115-1003\software\mywebsearch
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\mywebsearch
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\focusinteractive
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\office\word\addins\mywebsearch.outlookaddin
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\office\outlook\addins\mywebsearch.outlookaddin
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_USERS
Object : S-1-5-21-436374069-1960408961-839522115-1003\software\fun web products
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows\currentversion\uninstall\mywebsearch bar uninstall
iWon Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Rootkey : HKEY_USERS
Object : S-1-5-21-436374069-1960408961-839522115-1003\software\microsoft\windows\currentversion\run
Value : MyWebSearch Email Plugin
iWon Object Recognized!
Type : RegValue
Data :
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows\currentversion\run
Value : MyWebSearch Email Plugin
Registry Scan result:
»»
New critical objects: 48
Objects found so far: 49
Started deep registry scan
»»
Deep registry scan result:
»»
New critical objects: 0
Objects found so far: 49
Started Tracking Cookie scan
»»
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@bravenet[1].txt
Category : Data Miner
Comment : Cookie:hannari van gend@bravenet.com/
Value : Cookie:hannari van gend@bravenet.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@bluestreak[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@bluestreak.com/
Value : Cookie:hannari van gend@bluestreak.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@tmpad[1].txt
Category : Data Miner
Comment : Cookie:hannari van gend@ad.trafficmp.com/tmpad
Value : Cookie:hannari van gend@ad.trafficmp.com/tmpad
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@trafficmp[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@trafficmp.com/
Value : Cookie:hannari van gend@trafficmp.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@cgi-bin[1].txt
Category : Data Miner
Comment : Cookie:hannari van gend@imrworldwide.com/cgi-bin
Value : Cookie:hannari van gend@imrworldwide.com/cgi-bin
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@fastclick[1].txt
Category : Data Miner
Comment : Cookie:hannari van gend@fastclick.net/
Value : Cookie:hannari van gend@fastclick.net/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@casalemedia[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@casalemedia.com/
Value : Cookie:hannari van gend@casalemedia.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@qksrv[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@qksrv.net/
Value : Cookie:hannari van gend@qksrv.net/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@gator[1].txt
Category : Data Miner
Comment : Cookie:hannari van gend@gator.com/
Value : Cookie:hannari van gend@gator.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@a.as-us.falkag[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@a.as-us.falkag.net/
Value : Cookie:hannari van gend@a.as-us.falkag.net/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@revenue[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@revenue.net/
Value : Cookie:hannari van gend@revenue.net/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@tribalfusion[1].txt
Category : Data Miner
Comment : Cookie:hannari van gend@tribalfusion.com/
Value : Cookie:hannari van gend@tribalfusion.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@hc2.humanclick[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@hc2.humanclick.com/
Value : Cookie:hannari van gend@hc2.humanclick.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@internetfuel[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@internetfuel.com/
Value : Cookie:hannari van gend@internetfuel.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@ads.tripod.lycos[1].txt
Category : Data Miner
Comment : Cookie:hannari van gend@ads.tripod.lycos.nl/
Value : Cookie:hannari van gend@ads.tripod.lycos.nl/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@statcounter[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@statcounter.com/
Value : Cookie:hannari van gend@statcounter.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@realmedia[1].txt
Category : Data Miner
Comment : Cookie:hannari van gend@realmedia.com/
Value : Cookie:hannari van gend@realmedia.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@cgi-bin[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@www.addfreestats.com/cgi-bin
Value : Cookie:hannari van gend@www.addfreestats.com/cgi-bin
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@stat.onestat[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@stat.onestat.com/
Value : Cookie:hannari van gend@stat.onestat.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@zedo[2].txt
Category : Data Miner
Comment : Cookie:hannari van gend@zedo.com/
Value : Cookie:hannari van gend@zedo.com/
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@maxserving[1].txt
Category : Data Miner
Comment : Cookie:hannari van gend@maxserving.com/
Value : Cookie:hannari van gend@maxserving.com/
Tracking cookie scan result:
»»
New critical objects: 21
Objects found so far: 70
Deep scanning and examining files (C:)
»»
Tracking Cookie Object Recognized!
Type : IECache Entry
Data : hannari van gend@doubleclick[1].txt
Category : Data Miner
Comment :
Value : C:\Documents and Settings\Hannari van Gend\Local Settings\Temp\Cookies\hannari van gend@doubleclick[1].txt
iWon Object Recognized!
Type : File
Data : F3CJPEG.DLL
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Object : C:\Program Files\MyWebSearch\bar\1.bin\
FileVersion : 1, 0, 0, 9
ProductVersion : 2, 0, 0, 0
ProductName : Smiley Central and Popular Screen Savers
CompanyName : Fun Web Products, Inc.
FileDescription : Fun Web Products JPEG Conversion DLL
InternalName : f3cjpeg
LegalCopyright : Copyright © 2003, 2004
OriginalFilename : f3cjpeg.dll
Comments : IJG copyright (C) 1991-1998, Thomas G. Lane.
iWon Object Recognized!
Type : File
Data : F3REPROX.DLL
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Object : C:\Program Files\MyWebSearch\bar\1.bin\
FileVersion : 1, 0, 0, 9
ProductVersion : 2, 0, 0, 0
ProductName : Smiley Central
CompanyName : Fun Web Products, Inc.
FileDescription : Smiley Central MSN Rich Edit DLL
InternalName : f3REProx
LegalCopyright : Copyright © 2003,2004
OriginalFilename : f3REProx.dll
iWon Object Recognized!
Type : File
Data : F3RESTUB.DLL
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Object : C:\Program Files\MyWebSearch\bar\1.bin\
FileVersion : 1, 0, 0, 9
ProductVersion : 2, 0, 0, 0
ProductName : Smiley Central
CompanyName : Fun Web Products, Inc.
FileDescription : Smiley Central MSN Rich Edit DLL
InternalName : f3REStub
LegalCopyright : Copyright © 2003,2004
OriginalFilename : f3REStub.dll
iWon Object Recognized!
Type : File
Data : M3OUTLCN.DLL
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Object : C:\Program Files\MyWebSearch\bar\1.bin\
FileVersion : 1, 0, 0, 9
ProductVersion : 2, 0, 0, 0
ProductName : My Web Search Bar
CompanyName : MyWebSearch.com
FileDescription : My Web Search Outlook Container
InternalName : m3OutlCn
LegalCopyright : Copyright © 2003, 2004
OriginalFilename : m3OutlCn.DLL
iWon Object Recognized!
Type : File
Data : M3SKIN.DLL
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Object : C:\Program Files\MyWebSearch\bar\1.bin\
FileVersion : 1, 0, 0, 4
ProductVersion : 2, 0, 0, 0
ProductName : My Web Search Bar
CompanyName : MyWebSearch.com
FileDescription : My Web Search Skin Tools
InternalName : m3Skin
LegalCopyright : Copyright © 2003, 2004
OriginalFilename : m3Skin.dll
iWon Object Recognized!
Type : File
Data : MWSOEMON.EXE
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.2.1
Object : C:\Program Files\MyWebSearch\bar\1.bin\
FileVersion : 1,2,2,2
ProductVersion : 2,0,1,0
ProductName : My Web Search Bar for Internet Explorer, email clients, and messenger clients
CompanyName : MyWebSearch.com
FileDescription : My Web Search Email Plugin
InternalName : mwsoemon
LegalCopyright : Copyright © 2003-2004 MyWebSearch.com
OriginalFilename : mwsoemon.exe
iWon Object Recognized!
Type : File
Data : MWSSRCAS.DLL
Category : Data Miner
Comment : SmileyCentralPFSetup2.0.0.0
Object : C:\Program Files\MyWebSearch\SrchAstt\1.bin\
FileVersion : 1, 0, 0, 14
ProductVersion : 1, 0, 0, 14
ProductName : MyWebSearch Search Assistant for Internet Explorer
CompanyName : MyWebSearch.com
FileDescription : MyWebSearch Search Assistant
InternalName : mwsSrcAs
LegalCopyright : Copyright © 2003, 2004
OriginalFilename : mwsSrcAs.DLL
Disk Scan Result for C:\
»»
New critical objects: 0
Objects found so far: 78
Deep scanning and examining files (D:)
»»
Disk Scan Result for D:\
»»
New critical objects: 0
Objects found so far: 78
Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»
Hosts file scan result:
»»
1 entries scanned.
New critical objects:0
Objects found so far: 78
Performing conditional scans...
»»
iWon Object Recognized!
Type : Regkey
Data :
Category : Data Miner
Comment :
Rootkey : HKEY_CLASSES_ROOT
Object : clsid\{a4730ebe-43a6-443e-9776-36915d323ad3}
iWon Object Recognized!
Type : File
Data : MyWebSearch Email Plugin.lnk
Category : Data Miner
Comment :
Object : C:\Documents and Settings\Hannari van Gend\Start Menu\Programs\Startup\
iWon Object Recognized!
Type : File
Data : MyWebSearch Email Plugin.lnk
Category : Data Miner
Comment : Shortcut to bad file : C:\Documents and Settings\Hannari van Gend\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
Object : C:\Documents and Settings\Hannari van Gend\Start Menu\Programs\Startup\
Conditional scan result:
»»
New critical objects: 3
Objects found so far: 81
09:50:55 AM Scan Complete
Summary Of This Scan
»»
Total scanning time:00:17:29.171
Objects scanned:128924
Objects identified:81
Objects ignored:0
New critical objects:81
Any help would be much appreciated
