| 저자 |
install2.exe 파일에러 |
Anonymous (0)
비회원
|  게시일: 2004-10-25 12:12| |
Windows 2003사용자입니다.
얼마전부터 계속
D:\temp폴더가 만들어지면서 그안에
install2.exe라는 파일이 생기고
바이러스 차단 프로그램창에 virus dropper라고 뜹니다.
에러창도 같이 뜨는데 내용은
Windows cannot access the specified device, path, or file.
You may not have the appropriate permissions to access the item.
입니다.
불규칙적으로 하루에 서너번씩 뜹니다.
특정행동을 할 때 뜨는 것도 아닌 듯 한데..
아시는 분 답변 부탁드립니다. | |
|
Anonymous (0)
비회원
| 게시일: 2004-10-25 12:29||
서버 사이드 프로그램에의해 전파되는 ADWare 같습니다.
단순히 파일명만 가지고는 해결책을 찾기는 어렵습니다. 예전에 얘기헜듯이 HiJack 로그가 있으면 완전한 해결책을 찾을 수 있겠지만...
일단 GIANT AntiSpyware 라는 프로그램으로 검사해보기 바랍니다. 님과 비슷한 증상을 보이는 Spyware를 eAcceleration.Stop 이라는 이름으로 잡아냅니다.
마지막으로 다른 분들을 위해 확인 후 답글 부탁합니다. |
Anonymous (0)
비회원
| 게시일: 2004-10-25 12:30||
[이 글은 관리자에의해 윈도우즈 게시판에서 기타 게시판으로 이동되었습니다] |
Anonymous (0)
비회원
| 게시일: 2004-10-25 18:00||
GIANT AntiSpyware를 받아서 해보려고 했지만 그럴 수가 없었습니다.
VersionTracker.com, topshareware.com, fileheaven.com,
그리고 심파일 등에서 다운로드를 하려고 했지만 위 영문 사이트는 동일하게
<a href="http://www.giantcompany.com/files/GIANTAntiSpyware.exe" target="_blank" target="_new">http://www.giantcompany.com/files/GIANTAntiSpyware.exe</a> 로 연결이 되어 있고
서버가 너무 느려서 정말 천천히 받아지다가 결국 먹통이 되어버립니다.
심파일에서는 다운로드 버튼을 누르면 아무 내용도 뜨지않는 백지화면만 나타납니다.
일단 AD-aware로 검사한 내용을 올립니다.
이렇게 잡은 스파이웨어 중에 제가 질문한 내용의 것이 있는 지는 두고봐야 알 것 같습니다.
인용!
-----
Lavasoft Ad-aware Professional Build 6.181
Logfile created on :Monday, October 25, 2004 5:41:00 PM
Using reference-file :01R346 24.10.2004
______________________________________________________
Ad-aware Settings
=========================
Set : Activate in-depth scan (Recommended)
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep scan registry
2004-Oct-25 5:41:00 PM - Scan started. (Smart mode)
Listing running processes
???????????????????
#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 2004-Oct-25 1:14:55 AM
BasePriority : Normal
#:2 [winlogon.exe]
FilePath : \??\D:\WINDOWS\system32\
ThreadCreationTime : 2004-Oct-25 1:14:58 AM
BasePriority : High
#:3 [services.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 2004-Oct-25 1:14:58 AM
BasePriority : Normal
FileSize : 102 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Microsoft
Created on : 2004-Sep-24 9:06:08 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:4 [lsass.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 2004-Oct-25 1:14:58 AM
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : LSA Shell
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft
Created on : 2004-Sep-24 9:03:55 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:5 [svchost.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 2004-Oct-25 1:14:58 AM
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 2004-Sep-24 9:06:49 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:6 [svchost.exe]
FilePath : D:\WINDOWS\System32\
ThreadCreationTime : 2004-Oct-25 1:14:58 AM
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 2004-Sep-24 9:06:49 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:7 [svchost.exe]
FilePath : D:\WINDOWS\System32\
ThreadCreationTime : 2004-Oct-25 1:15:00 AM
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 2004-Sep-24 9:06:49 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:8 [spoolsv.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 2004-Oct-25 1:15:01 AM
BasePriority : Normal
FileSize : 55 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
OriginalFilename : spoolsv.exe
ProductName : Microsoft
Created on : 2004-Sep-24 9:06:25 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:9 [svchost.exe]
FilePath : D:\WINDOWS\System32\
ThreadCreationTime : 2004-Oct-25 1:15:02 AM
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 2004-Sep-24 9:06:49 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:10 [nvsvc32.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 2004-Oct-25 1:15:02 AM
BasePriority : Normal
FileSize : 112 KB
FileVersion : 6.14.10.6140
ProductVersion : 6.14.10.6140
Copyright : (C) NVIDIA Corporation. All rights reserved.
CompanyName : NVIDIA Corporation
FileDescription : NVIDIA Driver Helper Service, Version 61.40
InternalName : NVSVC
OriginalFilename : nvsvc32.exe
ProductName : NVIDIA Driver Helper Service, Version 61.40
Created on : 2004-Sep-24 11:10:36 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-May-19 8:47:00 PM
#:11 [explorer.exe]
FilePath : D:\WINDOWS\
ThreadCreationTime : 2004-Oct-25 1:15:03 AM
BasePriority : Normal
FileSize : 2396 KB
FileVersion : 6.00.3790.0 (srv03_rtm.030324-204
ProductVersion : 6.00.3790.0
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Microsoft
Created on : 2004-Sep-24 9:03:03 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:12 [dfssvc.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 2004-Oct-25 1:15:04 AM
BasePriority : Normal
FileSize : 130 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : Windows NT Distributed File System Service
InternalName : dfssvc.exe
OriginalFilename : dfssvc.exe
ProductName : Microsoft
Created on : 2004-Sep-24 9:02:03 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:13 [f-stopw.exe]
FilePath : D:\Program Files\FSI\F-Prot\
ThreadCreationTime : 2004-Oct-25 1:15:06 AM
BasePriority : Normal
FileSize : 260 KB
FileVersion : 3.14C
ProductVersion : 3.14C
Copyright : Copyright
CompanyName : Frisk Software International
FileDescription : F-StopW Version 3.14C
InternalName : F-StopW
OriginalFilename : F-StopW.EXE
ProductName : F-StopW NT/2000/XP
Created on : 2004-Sep-24 11:09:37 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Feb-05 6:30:48 AM
#:14 [syncroad.exe]
FilePath : D:\Program Files\Windows SyncroAd\
ThreadCreationTime : 2004-Oct-25 1:15:07 AM
BasePriority : Normal
FileSize : 24 KB
Created on : 2004-Sep-26 4:26:06 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Sep-26 4:26:08 PM
Warning! BlazeFind object found in memory(D:\Program Files\Windows SyncroAd\SyncroAd.exe)
BlazeFind Object recognized!
Type : Process
Data : syncroad.exe
Object : D:\Program Files\Windows SyncroAd\
FileSize : 24 KB
Created on : 2004-Sep-26 4:26:06 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Sep-26 4:26:08 PM
"syncroad.exe"Process terminated successfully.
#:15 [ctfmon.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 2004-Oct-25 1:15:07 AM
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
OriginalFilename : CTFMON.EXE
ProductName : Microsoft
Created on : 2004-Sep-24 9:08:34 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:16 [winsync.exe]
FilePath : D:\Program Files\Windows SyncroAd\
ThreadCreationTime : 2004-Oct-25 1:15:07 AM
BasePriority : Normal
FileSize : 17 KB
Created on : 2004-Sep-26 4:26:00 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Sep-26 4:26:02 PM
Warning! BlazeFind object found in memory(D:\Program Files\Windows SyncroAd\WinSync.exe)
BlazeFind Object recognized!
Type : Process
Data : winsync.exe
Object : D:\Program Files\Windows SyncroAd\
FileSize : 17 KB
Created on : 2004-Sep-26 4:26:00 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Sep-26 4:26:02 PM
"winsync.exe"Process terminated successfully.
#:17 [winroll.exe]
FilePath : C:\Program Files\winroll_bin_2.0\
ThreadCreationTime : 2004-Oct-25 1:15:07 AM
BasePriority : Normal
FileSize : 15 KB
Created on : 2004-Oct-09 9:27:33 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Apr-06 5:00:00 PM
#:18 [3r-1c.exe]
FilePath : D:\Program Files\pogrelz.com\3r-1c\
ThreadCreationTime : 2004-Oct-25 1:15:07 AM
BasePriority : Normal
FileSize : 436 KB
FileVersion : 1.00
ProductVersion : 1.00
Copyright : (c) 2003 Matthew Malensek
CompanyName : pogrelz.com
InternalName : 3r-1c
OriginalFilename : 3r-1c.exe
ProductName : 3r-1c
Created on : 2004-Sep-25 12:16:05 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Jan-19 7:32:06 AM
#:19 [yztoolbar.exe]
FilePath : D:\Program Files\YzToolBar1_3Kor\
ThreadCreationTime : 2004-Oct-25 1:15:07 AM
BasePriority : Normal
FileSize : 47 KB
FileVersion : 1, 3, 0, 0
ProductVersion : 1, 3, 0, 0
Copyright : Copyright (C) 2002 M.Yamaguchi
CompanyName : Y'z@Home
FileDescription : ToolBar icon can be changed.
InternalName : YzToolBar
OriginalFilename : YzToolBar.exe
ProductName : Y'z ToolBar
Created on : 2004-Sep-24 11:59:07 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2002-Sep-29 5:41:10 AM
#:20 [avedesk.exe]
FilePath : C:\Program Files\AveDesk\
ThreadCreationTime : 2004-Oct-25 1:15:08 AM
BasePriority : Normal
FileSize : 432 KB
FileVersion : 1, 1, 0, 0
ProductVersion : 1, 1, 0, 0
Copyright : Copyright
CompanyName : Andreas Verhoeven
FileDescription : AveDesk
InternalName : AVEDESK 1.1 BUILD 2
OriginalFilename : Test.exe
ProductName : AveDesk 1.1
Created on : 2004-Aug-20 4:18:19 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Jul-22 2:30:30 PM
#:21 [1stql.exe]
FilePath : D:\Program Files\1stQL\
ThreadCreationTime : 2004-Oct-25 1:15:08 AM
BasePriority : Normal
FileSize : 547 KB
FileVersion : 1.0.0.108
ProductVersion : 1.0
Copyright : Copyright (C) 1999, Green Parrots Software
CompanyName : Green Parrots Software
FileDescription : Launch your favorite applications, folders and Web pages with a single keystroke
InternalName : 1STQL.EXE
OriginalFilename : 1STQL.EXE
ProductName : 1st QuickLaunch
Created on : 1999-Jul-14 4:00:00 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 1999-Jul-14 4:00:00 PM
#:22 [runembeddingclient.exe]
FilePath : C:\Program Files\ClockClient\
ThreadCreationTime : 2004-Oct-25 1:15:08 AM
BasePriority : Normal
FileSize : 48 KB
Created on : 2004-Aug-16 9:19:12 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Jul-18 2:56:56 PM
#:23 [client.exe]
FilePath : D:\Program Files\Samurize\
ThreadCreationTime : 2004-Oct-25 1:15:08 AM
BasePriority : Normal
FileSize : 1260 KB
Created on : 2004-Oct-14 9:53:47 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-14 9:53:48 PM
#:24 [client.exe]
FilePath : D:\Program Files\Samurize\
ThreadCreationTime : 2004-Oct-25 1:15:08 AM
BasePriority : Normal
FileSize : 1260 KB
Created on : 2004-Oct-14 9:53:47 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-14 9:53:48 PM
#:25 [client.exe]
FilePath : D:\Program Files\Samurize\
ThreadCreationTime : 2004-Oct-25 1:15:09 AM
BasePriority : Normal
FileSize : 1260 KB
Created on : 2004-Oct-14 9:53:47 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-14 9:53:48 PM
#:26 [client.exe]
FilePath : D:\Program Files\Samurize\
ThreadCreationTime : 2004-Oct-25 1:15:09 AM
BasePriority : Normal
FileSize : 1260 KB
Created on : 2004-Oct-14 9:53:47 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-14 9:53:48 PM
#:27 [samurizeserver.exe]
FilePath : D:\Program Files\Samurize\
ThreadCreationTime : 2004-Oct-25 1:15:09 AM
BasePriority : Normal
FileSize : 1331 KB
Created on : 2004-Oct-14 9:53:55 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-14 9:53:56 PM
#:28 [svchost.exe]
FilePath : D:\WINDOWS\System32\
ThreadCreationTime : 2004-Oct-25 1:15:11 AM
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 2004-Sep-24 9:06:49 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:29 [foobar2000.exe]
FilePath : D:\Program Files\foobar2000\
ThreadCreationTime : 2004-Oct-25 2:08:56 AM
BasePriority : Normal
FileSize : 308 KB
Created on : 2004-Jul-21 12:32:28 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Jul-21 12:32:28 PM
#:30 [conime.exe]
FilePath : D:\WINDOWS\system32\
ThreadCreationTime : 2004-Oct-25 5:11:12 AM
BasePriority : Normal
FileSize : 25 KB
FileVersion : 5.2.3790.0 (srv03_rtm.030324-204
ProductVersion : 5.2.3790.0
CompanyName : Microsoft Corporation
FileDescription : Console IME
InternalName : Console
OriginalFilename : CONIME.EXE
ProductName : Microsoft
Created on : 2004-Sep-24 9:01:52 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Apr-03 3:00:00 AM
#:31 [webmau.exe]
FilePath : D:\Program Files\WebMa2\
ThreadCreationTime : 2004-Oct-25 8:20:17 AM
BasePriority : Normal
FileSize : 459 KB
Created on : 2004-Oct-01 2:47:47 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Sep-30 1:21:44 AM
#:32 [ad-aware.exe]
FilePath : D:\Program Files\Lavasoft\Ad-aware 6\
ThreadCreationTime : 2004-Oct-25 8:37:00 AM
BasePriority : Normal
FileSize : 724 KB
FileVersion : 6.0.1.183
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 2004-Sep-25 5:10:12 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2003-Jul-12 1:01:58 PM
Memory scan result :
???????????????????
New objects : 2
Objects found so far: 2
Started registry scan
???????????????????
DyFuCA Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value : Internet Optimizer
Registry scan result :
???????????????????
New objects : 1
Objects found so far: 3
Started deep registry scan
???????????????????
BlazeFind Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}
BlazeFind Object recognized!
Type : File
Data : syncroadx.dll
Object : d:\windows\downloaded program files\
FileSize : 21 KB
Created on : 2004-Sep-15 8:00:12 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Sep-15 8:00:12 AM
BlazeFind Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : SyncroAdX.Installer
BlazeFind Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\microsoft\windows\currentversion\moduleusage\D:/WINDOWS/Downloaded Program Files/SyncroAdX.dll
BlazeFind Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Windows\CurrentVersion\Run
Value : Windows SyncroAd
180Solutions Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Windows\CurrentVersion\Run
Value : msbb
180Solutions Object recognized!
Type : File
Data : msbb.exe
Object : d:\temp\
BlazeFind Object recognized!
Type : RegValue
Data : d:\windows\downloaded program files\syncroadx.dll
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Windows\CurrentVersion\SharedDLLs
Value : D:\WINDOWS\Downloaded Program Files\SyncroAdX.dll
Deep registry scan result :
???????????????????
New objects : 6
Objects found so far: 11
???????????????????
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@gator[1].txt" target="_new">administrator@gator[1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-14 12:49:15 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-14 12:49:16 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:[email protected][1].txt" target="_new">[email protected][1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-14 8:18:06 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-14 8:18:08 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@advertising[1].txt" target="_new">administrator@advertising[1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-14 8:18:06 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-14 8:18:08 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@bluestreak[1].txt" target="_new">administrator@bluestreak[1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-14 8:18:07 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-14 8:18:08 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@doubleclick[2].txt" target="_new">administrator@doubleclick[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-17 9:38:29 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-17 9:39:44 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@realmedia[2].txt" target="_new">administrator@realmedia[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-19 5:49:04 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-19 5:49:06 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@casalemedia[2].txt" target="_new">administrator@casalemedia[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-22 3:39:15 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-25 5:32:30 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@atdmt[2].txt" target="_new">administrator@atdmt[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-20 10:28:08 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-20 10:28:10 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@valueclick[2].txt" target="_new">administrator@valueclick[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-21 9:04:03 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-21 9:04:04 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@s130376[2].txt" target="_new">administrator@s130376[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-20 11:11:38 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-20 11:11:40 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@adtech[2].txt" target="_new">administrator@adtech[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-20 11:37:56 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-20 11:37:58 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@cgi-bin[1].txt" target="_new">administrator@cgi-bin[1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-20 1:03:14 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-20 1:03:16 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@tribalfusion[1].txt" target="_new">administrator@tribalfusion[1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-20 3:44:35 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-20 3:44:36 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@overture[1].txt" target="_new">administrator@overture[1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-21 9:16:03 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-21 9:16:04 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:[email protected][2].txt" target="_new">[email protected][2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-21 12:21:25 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-21 12:21:26 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:[email protected][1].txt" target="_new">[email protected][1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-24 8:30:53 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-24 8:30:54 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:[email protected][1].txt" target="_new">[email protected][1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-22 2:31:30 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-22 2:31:48 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:[email protected][1].txt" target="_new">[email protected][1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-21 11:50:08 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-21 11:50:10 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@commission-junction[2].txt" target="_new">administrator@commission-junction[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-21 12:09:34 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-21 12:09:36 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@hotlog[2].txt" target="_new">administrator@hotlog[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-23 11:20:22 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-23 11:20:24 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@fastclick[2].txt" target="_new">administrator@fastclick[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-22 2:31:46 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-22 2:31:48 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:[email protected][2].txt" target="_new">[email protected][2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-22 2:18:09 PM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-22 2:18:10 PM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@adrevolver[2].txt" target="_new">administrator@adrevolver[2].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-23 12:51:19 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-23 12:51:20 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@spylog[1].txt" target="_new">administrator@spylog[1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-23 4:45:22 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-24 5:38:32 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:[email protected][1].txt" target="_new">[email protected][1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-24 5:39:01 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-24 5:39:02 AM
Tracking Cookie Object recognized!
Type : File
Data : <a href="mailto:administrator@maxserving[1].txt" target="_new">administrator@maxserving[1].txt</a>
Object : D:\Documents and Settings\Administrator\Cookies\
Created on : 2004-Oct-25 8:25:14 AM
Last accessed : 2004-Oct-24 3:00:00 PM
Last modified : 2004-Oct-25 8:25:16 AM
???????????????????
Deep scanning and examining files (D
???????????????????
Performing conditional scans..
???????????????????
BlazeFind Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Classes\CLSID\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}
BlazeFind Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Classes\SyncroAdX.Installer
Conditional scan result:
???????????????????
New objects : 2
Objects found so far: 39
5:48:39 PM Scan complete
Summary of this scan
???????????????????
Total scanning time :00:07:38:589
Objects scanned :96379
Objects identified :39
Objects ignored :0
New objects :39
---
[ 메시지수정: tickle21 일시: 2004-10-25 18:12 ] | |
| |
| |
(