|
Spyware File Details R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = Last Detected: 11/18/2007 12:02:00 PM Found on 61 PCs. Users with this object complained of the following: "popups" "Very slow, after cleaning all inutile software still slow and hardly any capacity" "Not too slow, but I do get times when program lag and completely stop working. I'd like to get rid of this problem" "trojan" "spyware cookies. someone overclocked my grafik drivers" PCs containing this item also contained the following spyware: R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = (More Details) O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll (More Details) O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm (More Details) O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm (More Details) O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (More Details) O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (More Details) O23 - Service: MSMPSVC - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MSMPSVC.exe" -n 4 (file missing) (More Details) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://breedband.telenet.be/ (More Details) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://breedband.telenet.be (More Details) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = (More Details) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=TraceRemoverPopupKiller:8100 (More Details) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local (More Details) R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen (More Details) O4 - HKLM\..\Run: [Traceless] "C:\Program Files\Traceless\traceless.exe" launch (More Details) O4 - Global Startup: BTTray.lnk = ? (More Details) O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm (More Details) R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/ (More Details) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 (More Details) O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_98.dll (More Details) O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Downloads\Save Flash\SaveFlash.dll (More Details) O4 - HKLM\..\Run: [A-ToolBar] C:\Downloads\A-ToolBar\A-ToolBar\AToolBar.exe s (More Details) O4 - HKLM\..\Run: [Anti-keylogger 7.1] E:\DL's\Anti-keylogger\Anti-keylogger.exe /autorun (More Details) O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (More Details) O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (More Details) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startsidan.telia.se/ (More Details) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\OOBE\BLANK.HTM (More Details) R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Lnkar (More Details) O2 - BHO: (no name) - {7B55BB05-0B4D-44fd-81A6-B136188F5DEB} - (no file) (More Details) O3 - Toolbar: Privata Affarer - {4E7BD74F-2B8D-469E-C0FF-FD6DA4D5FA7D} - C:\WINDOWS\DOWNLO~1\PABAR.DLL (More Details) O4 - Startup: Reboot.exe (More Details) O16 - DPF: {127698E4-E730-4E5C-A2B1-21490A70C8A1} (CEnroll Class) - https://www.skandiabanken.se/CertControl/X86/xenroll.dll (More Details) O16 - DPF: {82202BE7-C56A-487E-9E55-D84BDC1A5776} - http://install.anark.com/client/version1/windows-ie/en/AMClient.cab (More Details) O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (sys Class) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB (More Details) R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks (More Details) Back to Spyware List |
||||||
| About HijackRemote | Recently Slayed Spyware | Message Board | Contact Us | ||||||
| HijackRemote ©2005 (Terms of Service) Privacy Policy | ||||||
