Fucking scary (a lesson on spyware)

TranceAddict Forums (www.tranceaddict.com/forums)
- Chill Out Room
-- Fucking scary (a lesson on spyware)

Posted by DaveSZ on Nov-09-2003 01:30:

Fucking scary (a lesson on spyware)

This is what I get for not updating my lavasoft adaware program sooner:

LOG

quote:

Lavasoft Ad-aware Personal Build 6.181
Logfile created on :Saturday, November 08, 2003 8:02:52 AM
Created with Ad-aware Personal, free for private use.
Using reference-file :01R217 08.09.2003
______________________________________________________

Started registry scan
��

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : *\shellex\ContextMenuHandlers\StopSignRCS

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{28f00b04-dc4e-11d3-abec-005004a44eeb}

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{28f00b20-dc4e-11d3-abec-005004a44eeb}

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{28f00b21-dc4e-11d3-abec-005004a44eeb}

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{57E69D5A-6539-4d7d-9637-775DE8A385B4}

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{6ACD11BD-4CA0-4283-A8D8-872B9BA289B6}

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{6E6DD93E-1FC3-4F43-8AFB-1B7B90C9D3EB}

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{BB83FD23-AC96-472D-8AA2-7D8560A61D1A}

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{F63C5B10-B709-4DF5-BA27-B90102AD313B}

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : Defender.ScanCore

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : Defender.ScanGUi

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : Directory\shellex\ContextMenuHandlers\EAC_VirusScanner

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : hiwire.configurator

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : hiwire.configurator.1

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : hiwire.transportcenter

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : hiwire.transportcenter.1

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : hiwire.userregrequest

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : hiwire.userregrequest.1

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : INTERFACE\{1A8B567B-BD3F-44A1-8B94-F50D37A1914E}

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : INTERFACE\{3A021D2F-5F75-47F5-9BAB-A137E1FB015F}

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : Interface\{D686DB39-659A-491A-A35C-60B99495C16E}

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : Interface\{D951B1F4-7399-426A-A925-D2C41FCF2002}

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : Interface\{E6A8EE26-1FAD-431C-99D6-8DBA1E25CD72}

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : MSEaid.Gd\GLSID

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\eAnthology

Gator Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\GatorTest

Hi-Wire Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CURRENT_USER
Object : Software\HIWIRE

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2662BDD7-05D6-408F-B241-FF98FACE6054}

Cydoor Object recognized!
Type : RegKey
Data : AdSupport_
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Windows\CurrentVersion\Uninstall\AdSupport_319

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CURRENT_USER
Object : Software\Xupiter

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : TypeLib\{3E072AB7-3CDA-4536-8AFD-56B0FE6846B4}

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : TypeLib\{43732063-1BDA-45A0-BBEE-13E014CB4041}

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : TypeLib\{909E0059-F545-42DE-9D2C-CC4A3E336EC3}

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : TypeLib\{C6C2871F-7467-4A35-90FA-9E9894BC1916}

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : Webcelerator.WebcBrowserHelper

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : XTSearch.XTSearchHook

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : XTSearch.XTSearchHook.1

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : XTUpdate.XT

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : XTUpdate.XT.1

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : XupiterToolbar.Band

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : XupiterToolbar.Band.1

HuntToolBar Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Internet Explorer\Toolbar
Value : {57E69D5A-6539-4d7d-9637-775DE8A385B4}

Xupiter Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\URLSearchHooks
Value : {6E6DD93E-1FC3-4F43-8AFB-1B7B90C9D3EB}

Web3000 Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Windows\CurrentVersion
Value : StashedGMI

Xupiter Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value : XupiterStartup

Xupiter Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value : XupiterCfgLoader

eAcceleration Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Value : {46D570D9-71C8-44E5-A76C-AADFE94442CA}

eAcceleration Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Value : {BB83FD23-AC96-472D-8AA2-7D8560A61D1A}

Windows Object recognized!
Type : RegData
Data :
Rootkey : HKEY_USERS
Object : .DEFAULT\Software\Microsoft\MediaPlayer\Player\Settings
Value : Client ID
Data :

Windows Object recognized!
Type : RegData
Data :
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\MediaPlayer\Player\Settings
Value : Client ID
Data :

Registry scan result :
��
New objects : 50
Objects found so far: 50

Started deep registry scan
��
Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainSearch Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Search Page
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainDefault_Search_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Default_Search_URL
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainDefault_Page_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Default_Page_URL
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainLocal Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Local Page
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainSearch Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Search Page
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainStart Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Start Page
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainDefault_Search_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Default_Search_URL
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainDefault_Page_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Default_Page_URL
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainLocal Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Local Page
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\SearchSearchAssistant.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/search.html"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Search
Value : SearchAssistant
Data : "http://www.kazaa-lite.ws/search.html"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\SearchCustomizeSearch.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/search.html"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Search
Value : CustomizeSearch
Data : "http://www.kazaa-lite.ws/search.html"

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainSearch Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Search Page
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainDefault_Search_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Default_Search_URL
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainDefault_Page_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Default_Page_URL
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainLocal Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Local Page
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainStart Pagexupiter.com

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.xupiter.com/toolbar2"
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Start Page
Data : "http://www.xupiter.com/toolbar2"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainSearch Barxupiter.com

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.xupiter.com/search2.html"
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Search Bar
Data : "http://www.xupiter.com/search2.html"

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainStart Pagexupiter.com

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.xupiter.com/toolbar2"
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Start Page
Data : "http://www.xupiter.com/toolbar2"

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainSearch Barxupiter.com

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.xupiter.com/search2.html"
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Search Bar
Data : "http://www.xupiter.com/search2.html"

Xupiter Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{2662BDD7-05D6-408F-B241-FF98FACE6054}

Xupiter Object recognized!
Type : File
Data : xtupdate.dll
Object : c:\program files\xupiter\
FileSize : 28 KB
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
Copyright : Copyright 2002
FileDescription : XTUpdate Module
InternalName : XTUpdate
OriginalFilename : XTUpdate.DLL
ProductName : XTUpdate Module
Created on : 2/4/03 5:39:11 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 2/4/03 5:39:12 AM

Deep registry scan result :
��
New objects : 20
Objects found so far: 71

��

Tracking Cookie Object recognized!
Type : File
Data : default@atdmt[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/23/03 12:44:51 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/23/03 12:44:52 PM

Tracking Cookie Object recognized!
Type : File
Data : default@advertising[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/26/03 7:33:02 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/26/03 7:33:04 AM

Tracking Cookie Object recognized!
Type : File
Data : default@mediaplex[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/23/03 9:42:21 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/23/03 9:42:22 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][/email]tracker[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/24/03 5:00:32 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/24/03 5:00:34 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/26/03 7:29:21 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/26/03 7:29:22 AM

Other Object recognized!
Type : File
Data : default@cgi-bin[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/23/03 4:26:23 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/23/03 4:26:24 PM

Tracking Cookie Object recognized!
Type : File
Data : default@qksrv[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/23/03 9:15:36 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/23/03 9:15:38 PM

Tracking Cookie Object recognized!
Type : File
Data : default@tribalfusion[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/23/03 9:47:01 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/23/03 9:47:02 PM

Tracking Cookie Object recognized!
Type : File
Data : default@bfast[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/23/03 10:32:52 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/23/03 10:32:54 PM

Tracking Cookie Object recognized!
Type : File
Data : default@trafficmp[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/25/03 4:31:14 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/25/03 4:31:16 PM

Tracking Cookie Object recognized!
Type : File
Data : default@clickagents[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/24/03 6:17:26 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/24/03 6:17:28 AM

Tracking Cookie Object recognized!
Type : File
Data : default@tmpad[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/24/03 7:35:28 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/24/03 7:35:30 AM

Tracking Cookie Object recognized!
Type : File
Data : default@gator[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/25/03 4:30:39 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/25/03 4:30:40 PM

Tracking Cookie Object recognized!
Type : File
Data : default@addynamix[2].txt
Object : C:\WINDOWS\Cookies\
FileSize : 1 KB
Created on : 10/26/03 7:54:21 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/26/03 7:54:22 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][1].txt
Object : C:\WINDOWS\Cookies\
FileSize : 1 KB
Created on : 10/26/03 4:47:28 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/26/03 4:47:30 AM

Tracking Cookie Object recognized!
Type : File
Data : default@zedo[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/26/03 7:39:18 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/26/03 7:39:20 AM

Tracking Cookie Object recognized!
Type : File
Data : default@centrport[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/27/03 10:36:07 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/27/03 10:36:08 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][3].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/6/03 4:20:57 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 4:20:58 PM

Tracking Cookie Object recognized!
Type : File
Data : default@pro-market[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/1/03 3:16:11 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/1/03 3:16:12 AM

Tracking Cookie Object recognized!
Type : File
Data : default@ad-logics[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/31/03 2:22:23 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/31/03 2:22:24 PM

Tracking Cookie Object recognized!
Type : File
Data : default@trafficmp[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/6/03 7:23:41 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 7:23:42 AM

Tracking Cookie Object recognized!
Type : File
Data : default@zedo[3].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/8/03 1:52:48 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/8/03 1:52:50 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][1].txt
Object : C:\WINDOWS\Cookies\
FileSize : 2 KB
Created on : 10/28/03 7:52:37 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/28/03 7:52:38 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\
FileSize : 2 KB
Created on : 10/27/03 8:58:11 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/27/03 8:58:12 AM

Tracking Cookie Object recognized!
Type : File
Data : default@doubleclick[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/7/03 10:03:43 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/7/03 10:03:44 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/28/03 10:43:42 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/28/03 10:43:44 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/28/03 7:49:32 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/28/03 7:49:34 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/28/03 2:07:25 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/28/03 2:07:26 PM

Tracking Cookie Object recognized!
Type : File
Data : default@xxxtoolbar[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/6/03 6:29:00 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 6:29:02 AM

Tracking Cookie Object recognized!
Type : File
Data : default@qksrv[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/7/03 2:33:34 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/7/03 2:33:36 PM

Tracking Cookie Object recognized!
Type : File
Data : default@commission-junction[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/7/03 2:33:35 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/7/03 2:33:36 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\
FileSize : 1 KB
Created on : 10/28/03 10:11:31 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/28/03 10:11:32 PM

Tracking Cookie Object recognized!
Type : File
Data : default@gator[1].txt
Object : C:\WINDOWS\Cookies\
FileSize : 1 KB
Created on : 11/6/03 5:10:31 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 5:10:32 PM

Tracking Cookie Object recognized!
Type : File
Data : default@euniverseads[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 10/31/03 2:22:28 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/31/03 2:22:30 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\
FileSize : 2 KB
Created on : 10/31/03 3:52:12 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/31/03 3:52:14 PM

Tracking Cookie Object recognized!
Type : File
Data : default@fortunecity[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/6/03 6:05:43 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 6:05:44 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\
FileSize : 2 KB
Created on : 10/31/03 4:54:25 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 10/31/03 4:54:26 PM

Tracking Cookie Object recognized!
Type : File
Data : default@hitbox[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/6/03 6:56:18 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 6:56:20 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\
FileSize : 1 KB
Created on : 11/2/03 3:39:47 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/2/03 3:39:48 AM

Tracking Cookie Object recognized!
Type : File
Data : default@targetnet[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/4/03 7:35:26 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/4/03 7:35:28 AM

Tracking Cookie Object recognized!
Type : File
Data : default@adserv[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/2/03 8:52:26 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/2/03 8:52:28 PM

Tracking Cookie Object recognized!
Type : File
Data : default@advertising[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/8/03 1:21:35 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/8/03 1:21:36 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/2/03 8:37:02 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/2/03 8:37:04 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/4/03 9:59:21 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/4/03 9:59:22 PM

Tracking Cookie Object recognized!
Type : File
Data : default@mediaplex[3].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/4/03 8:58:44 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/4/03 8:58:46 AM

Tracking Cookie Object recognized!
Type : File
Data : default@bfast[3].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/2/03 4:38:33 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/2/03 4:38:34 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\
FileSize : 1 KB
Created on : 11/6/03 6:56:18 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 6:56:20 AM

Tracking Cookie Object recognized!
Type : File
Data : default@peel[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/2/03 8:44:28 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/2/03 8:44:30 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/2/03 8:47:59 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/2/03 8:48:00 PM

Tracking Cookie Object recognized!
Type : File
Data : default@adtech[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/4/03 9:10:40 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/4/03 9:10:42 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/8/03 1:21:36 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/8/03 1:21:38 PM

Tracking Cookie Object recognized!
Type : File
Data : default@fastclick[1].txt
Object : C:\WINDOWS\Cookies\
FileSize : 1 KB
Created on : 11/8/03 1:21:36 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/8/03 1:21:38 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/3/03 9:43:24 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/3/03 9:43:26 PM

Tracking Cookie Object recognized!
Type : File
Data : default@overture[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/4/03 6:56:23 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/4/03 6:56:24 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/3/03 9:46:05 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/3/03 9:46:06 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/4/03 8:49:04 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/4/03 8:49:06 AM

Tracking Cookie Object recognized!
Type : File
Data : default@tribalfusion[3].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/8/03 1:59:29 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/8/03 1:59:30 PM

Tracking Cookie Object recognized!
Type : File
Data : default@www.paypopup[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/6/03 6:12:52 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 6:12:54 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][1].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/7/03 2:33:33 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/7/03 2:33:34 PM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/6/03 7:37:19 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 7:37:20 AM

Tracking Cookie Object recognized!
Type : File
Data : default@clickagents[3].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/6/03 5:09:24 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/6/03 5:09:26 PM

Tracking Cookie Object recognized!
Type : File
Data : default@bluestreak[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/7/03 9:45:20 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/7/03 9:45:22 AM

Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\
FileSize : 1 KB
Created on : 11/8/03 12:55:18 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/8/03 12:55:20 PM

Tracking Cookie Object recognized!
Type : File
Data : default@spylog[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/7/03 9:56:22 AM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/7/03 9:56:24 AM

Other Object recognized!
Type : File
Data : default@cgi-bin[2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/7/03 2:45:02 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/7/03 2:45:02 PM

Tracking Cookie Object recognized!
Type : File
Data : [email][email protected][2].txt
Object : C:\WINDOWS\Cookies\

Created on : 11/7/03 4:06:15 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/7/03 4:06:16 PM

Tracking Cookie Object recognized!
Type : File
Data : default@addynamix[1].txt
Object : C:\WINDOWS\Cookies\
FileSize : 1 KB
Created on : 11/8/03 1:52:53 PM
Last accessed : 11/8/03 6:00:00 AM
Last modified : 11/8/03 1:52:54 PM

��

Deep scanning and examining files (C
��

Performing conditional scans..
��

eAcceleration Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : MSEaid.Gd

eAcceleration Object recognized!
Type : Folder
Object : c:\program files\common files\eAcceleration

eAcceleration Object recognized!
Type : Folder
Object : c:\program files\Acceleration Software

Conditional scan result:
��
New objects : 3
Objects found so far: 141

8:08:47 AM Scan complete

Summary of this scan
��
Total scanning time :00:05:54:760
Objects scanned :32225
Objects identified :141
Objects ignored :0
New objects :141

Posted by DaveSZ on Nov-09-2003 01:33:

I'm surprised my credit card hasn't been hijacked by now.

Fucking twats.

So download Lavasoft Ad Aware or some other good spyware removal prog, and protect yourself!

-I don't think I posted any sensitive data, but if you see any let me know. I'm just posting this to warn people.

Posted by DaveSZ on Nov-09-2003 01:40:

Could this be the RIAA in action?

Or maybe just some twats trying to exploit security holes in kazaa?

quote:

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainSearch Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Search Page
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainDefault_Search_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Default_Search_URL
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainDefault_Page_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Default_Page_URL
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainLocal Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\Internet Explorer\Main
Value : Local Page
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainSearch Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Search Page
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainStart Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Start Page
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainDefault_Search_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Default_Search_URL
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainDefault_Page_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Default_Page_URL
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\MainLocal Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Main
Value : Local Page
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\SearchSearchAssistant.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/search.html"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Search
Value : SearchAssistant
Data : "http://www.kazaa-lite.ws/search.html"

Possible browser hijack attempt : Software\Microsoft\Internet Explorer\SearchCustomizeSearch.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/search.html"
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Internet Explorer\Search
Value : CustomizeSearch
Data : "http://www.kazaa-lite.ws/search.html"

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainSearch Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Search Page
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainDefault_Search_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/results.php?show="
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Default_Search_URL
Data : "http://www.kazaa-lite.ws/results.php?show="

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainDefault_Page_URL.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Default_Page_URL
Data : "http://www.kazaa-lite.ws/"

Possible browser hijack attempt : .Default\Software\Microsoft\Internet Explorer\MainLocal Page.kazaa-lite.ws

Possible Browser Hijack attempt Object recognized!
Type : RegData
Data : "http://www.kazaa-lite.ws/"
Rootkey : HKEY_USERS
Object : .Default\Software\Microsoft\Internet Explorer\Main
Value : Local Page

Posted by SebG on Nov-09-2003 02:00:

Spy Bot>Adaware

Posted by biznology on Nov-09-2003 02:04:

quote:
Originally posted by SebG
Spy Bot>Adaware

use both, i do|

Posted by DaveSZ on Nov-09-2003 02:04:

is it free though?

Posted by djSlain on Nov-09-2003 02:05:

ya, spybot is definently better. it not only gets rid of spyware, but it also prevents u from ever receiving that specific spyware in the future

Posted by arctic on Nov-09-2003 02:16:

quote:
Originally posted by DaveSaenz
is it free though?

Yes.

Use both, they get stuff the other misses.

Posted by Greedy on Nov-09-2003 02:52:

thanks!

Posted by rollypoles on Nov-09-2003 10:43:

hehe....i wasnt about to read this thread. thanks for the tip on Spy Bot. fucking ad ware.....

Posted by Streakfury on Nov-09-2003 13:37:

Somebody suggested to me to use a prog called Ad-aware. He said it was pretty good, not just for stopping pop-ups etc, but also for removing all kinds of spyware and cleaning up your system in general. I cant verify that personally tho.

Posted by Nadi on Nov-09-2003 17:40:

Use both. Neither one of em gets everything.