|
Spyware File Details O20 - Winlogon Notify: NavLogon - C:\WINDOWS\ Last Detected: 9/8/2006 9:06:00 AM Found on 3 PCs. Users with this object complained of the following: "My computer will automatically connect to the isp without my instruction (ie. press the login)" PCs containing this item also contained the following spyware: O2 - BHO: - {c90b79a5-77f9-4460-b8b4-8ab5cf8c743c} - C:\WINDOWS\System32\ni.dll (More Details) O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab (More Details) O17 - HKLM\System\CCS\Services\Tcpip\..\{1C6A9EAB-3980-4692-86C8-DF8C573E149D}: NameServer = 203.198.23.208 205.252.144.126 (More Details) O17 - HKLM\System\CS1\Services\Tcpip\..\{1C6A9EAB-3980-4692-86C8-DF8C573E149D}: NameServer = 203.198.23.208 205.252.144.126 (More Details) O20 - Winlogon Notify: NavLogon - C:\WINDOWS\ (More Details) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - blank (file missing) (More Details) O4 - HKLM\..\Run: [NI.UWFX5_0001_N57M2811] C:\Documents and Settings\Jeremy\Local Settings\Temporary Internet Files\Content.IE5\6P89STCV\WinFixerScannerInstall[1].exe -nag (More Details) O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file) (More Details) O4 - HKLM\..\Run: [corrida] abrek.exe (More Details) O4 - HKCU\..\Run: [bnui] mozilla-text.exe (More Details) O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJ (More Details) O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU) (More Details) O17 - HKLM\System\CCS\Services\Tcpip\..\{02433DDC-6FE4-4C0A-A3B8-DC499D3157F1}: NameServer = 85.255.116.132,85.255.112.180 (More Details) O17 - HKLM\System\CCS\Services\Tcpip\..\{3873024D-298C-4C77-BDBE-F1FF3AC1B176}: NameServer = 85.255.116.132,85.255.112.180 (More Details) O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.132 85.255.112.180 (More Details) O17 - HKLM\System\CS2\Services\Tcpip\..\{02433DDC-6FE4-4C0A-A3B8-DC499D3157F1}: NameServer = 85.255.116.132,85.255.112.180 (More Details) O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 85.255.116.132 85.255.112.180 (More Details) Back to Spyware List |
||||||
| About HijackRemote | Recently Slayed Spyware | Message Board | Contact Us | ||||||
| HijackRemote ©2005 (Terms of Service) | ||||||
