Ad-Aware SE Build 1.06r1
Logfile Created on:Monday, January 05, 2004 4:08:54 PM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R116 24.07.2006
References detected during the scan:
Adware.Look2Me(TAC index:7):4 total references
CmdServices(TAC index:4):3 total references
iSearch Toolbar(TAC index:4):1 total references
win32.Trojan.Dnschanger(TAC index:10):1 total references
VX2(TAC index:10):2 total references
Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Search for low-risk threats
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file
Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects
#:17 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 408
ThreadCreationTime : 1/5/2004 11:16:30 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft? Windows? Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : ? Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe
#:18 [ttraveler.exe]
FilePath : C:\Program Files\Tencent\TT\
ProcessID : 2588
ThreadCreationTime : 1/5/2004 11:17:12 PM
BasePriority : Normal
FileVersion : 2, 0, 14, 196
ProductVersion : 2, 0, 14, 196
ProductName : Tencent Traveler
CompanyName : Shenzhen Tencent Computer Systems Company Limted
FileDescription : Tencent Traveler
InternalName : Tencent Traveler
LegalCopyright : Shenzhen Tencent Computer Systems Company Limited (C)
All right reserved 2000-2004
OriginalFilename : TBrowser.EXE
#:19 [ad-aware.exe]
FilePath : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
ProcessID : 3884
ThreadCreationTime : 1/5/2004 11:42:34 PM
BasePriority : Normal
FileVersion : 6.2.0.236
ProductVersion : SE 106
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright ? Lavasoft AB Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved
#:20 [conime.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1804
ThreadCreationTime : 1/5/2004 11:48:41 PM
BasePriority : Normal
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
ProductName : Microsoft? Windows? Operating System
CompanyName : Microsoft Corporation
FileDescription : Console IME
InternalName : Console
LegalCopyright : ? Microsoft Corporation. All rights reserved.
OriginalFilename : CONIME.EXE
#:21 [rundll32.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 3756
ThreadCreationTime : 1/6/2004 12:01:20 AM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft? Windows? Operating System
CompanyName : Microsoft Corporation
FileDescription : Run a DLL as an App
InternalName : rundll
LegalCopyright : ? Microsoft Corporation. All rights reserved.
OriginalFilename : RUNDLL.EXE
Adware.Look2Me Object Recognized!
Type : Process
Data : guard.tmp
TAC Rating : 7
Category : Adware
Comment : iieshare.dll.dmp
Object : C:\WINDOWS\system32\
Warning! Adware.Look2Me Object found in memory(C:\WINDOWS\system32\guard.tmp)
VX2 Object Recognized!
Type : RegData
Data : explorer.exe
TAC Rating : 10
Category : Malware
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows nt\currentversion\winlogon
Value : Shell
Data : explorer.exe
Conditional scan result:
New critical objects: 4
Objects found so far: 11
4:17:08 PM Scan Complete
Summary Of This Scan
Total scanning time:00:08:13.390
Objects scanned:104471
Objects identified:8
Objects ignored:0
New critical objects:8
END OF REPORT
I tried to clean it out, but it just shows up the next time i scan it.
The look2me is driving me nuts. On ewido anti-spyware when i try to delete it the "error while deleting" will show. I've downloaded the L2M destroyer, but it never completely whipes it out. Every time I start my computer there's a .dll error
