|
Spyware File Details O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup Last Detected: 3/19/2009 1:20:00 PM Found on 6 PCs. Users with this object complained of the following: "NvCplDaemon msmsgrs.exe Added by the DLOADER-YI TROJAN! csrss.exe %winpath%\ This worm is transmitted via e-mail and attempts to install itself on your computer " "Spyware" "programs closing, odd startup" "slow" PCs containing this item also contained the following spyware: O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (More Details) O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit (More Details) O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO (More Details) O9 - Extra button: (no name) - AutorunsDisabled - (no file) (More Details) O4 - HKCU\..\Run: [desktop] C:\WINDOWS\system32\idemlog.exe (More Details) O4 - HKCU\..\Run: [UnSpyPC] "C:\Program Files\UnSpyPC\UnSpyPC.exe" (More Details) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = (More Details) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = (More Details) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank (More Details) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank (More Details) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 (More Details) R3 - URLSearchHook: (no name) - {C6542C6F-BF80-9029-A28F-E13B857574C0} - (no file) (More Details) O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll (More Details) O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" (More Details) O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" (More Details) O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode (More Details) O4 - HKLM\..\Run: [nwiz] nwiz.exe /install (More Details) O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe (More Details) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (More Details) O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) (More Details) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe (More Details) R3 - URLSearchHook: (no name) - ~D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - (no file) (More Details) R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) (More Details) R3 - URLSearchHook: CyberDefender safeSEARCH - {F35CE83E-9EBF-40d5-AE87-53F982389740} - C:\Documents and Settings\zeljkec\Local Settings\Application Data\CyberDefender\sssTbar.dll (More Details) R3 - URLSearchHook: (no name) - {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL (More Details) R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (More Details) O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\companion\Installs\cpn\yt.dll (More Details) O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (More Details) O2 - BHO: MorpheusToolbar BHO - {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL (More Details) O2 - BHO: 2DPlay Toolbar - {4E7BD74F-2B8D-469E-CBFF-F37CB0E7FA7D} - C:\PROGRA~1\2DPlay\2dplay.dll (More Details) O2 - BHO: Alcohol Toolbar Helper - {52D06F97-5511-43FA-8FDA-C481864FD26E} - C:\Program Files\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll (More Details) Back to Spyware List |
||||||
| About HijackRemote | Recently Slayed Spyware | Message Board | Contact Us | ||||||
| HijackRemote ©2005 (Terms of Service) Privacy Policy | ||||||
