|
Spyware File Details O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing) Last Detected: 10/4/2006 7:59:00 AM Found on 8 PCs. Users with this object complained of the following: "keep getting computer infected, trying to install itself on to my tool bar. programe name is spywaerstrike. it forces you to buy it" PCs containing this item also contained the following spyware: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm (More Details) O2 - BHO: RandomName - {e0103cd4-d1ce-411a-b75b-4fec072867f4} - C:\WINDOWS\system32\hp5F9B.tmp (More Details) O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (More Details) O3 - Toolbar: Windows Updates - {A20CC53E-61FE-4788-85FF-A0F9C9B4C2A9} - C:\WINDOWS\system32\msiedp32.dll (More Details) O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER (More Details) O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing) (More Details) O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing) (More Details) O17 - HKLM\System\CCS\Services\Tcpip\..\{0F3ED595-5349-43C2-8E59-D53A533C3A33}: NameServer = 205.188.146.145 (More Details) O18 - Filter: text/html - (no CLSID) - (no file) (More Details) O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\system32\popcorn320.exe rundll.dll,LoadMouseProfile (More Details) O4 - HKLM\..\Run: [yaemu.exe] C:\WINDOWS\system32\yaemu.exe (More Details) O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} - (More Details) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.shopnav.com/sidesearch...id=5.20013 (More Details) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.shopnav.com/sidesearch...id=5.20013 (More Details) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.shopnav.com/sidesearch...id=5.20013 (More Details) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.shopnav.com/sidesearch...id=5.20013 (More Details) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://websearch.shopnav.com/sidesearch...id=5.20013 (More Details) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.shopnav.com/sidesearch...id=5.20013 (More Details) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.shopnav.com/q.cgi?q= (More Details) O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll (More Details) O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file) (More Details) O4 - HKLM\..\Run: [Win Server Updt] C:\WINDOWS\pxckdla.exe (More Details) Back to Spyware List |
||||||
| About HijackRemote | Recently Slayed Spyware | Message Board | Contact Us | ||||||
| HijackRemote ©2005 (Terms of Service) | ||||||
