May 6, 2008

hijack this keylogger report..?


Ongoing process:
C: \ Windows \ explorer.exe
C: \ Program Files \ HijackThis \ HIJACKTHIS.EXE
C: \ Windows \ system32 \ igfxsrvc.exe

R1 -- HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://us.rd.yahoo.com/customize/ie/defa ...
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://us.rd.yahoo.com/customize/ie/defa ...
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.yahoo.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http:/ / www.yahoo.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defa ...
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://us.rd.yahoo.com/customize/ie/defa ...
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://us.rd.yahoo.com/customize/ie/defa ...
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.yahoo.com/
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http:/ / www.gateway.com / g / sidepanel.html ...
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ SearchURL, (default) = http://us.rd.yahoo.com / customize / ie / defa ...
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11d2-892F-0090271D4F88) - C: \ Progra ~ 1 \ Yahoo! \ Companion \ Installs \ cp ...
O1 - Hosts::: 1 localhost
O2 - BHO: Yahoo! D'assistance tools - (02478D38-C3F9-4efb-9B51-7695ECA05670) - C: \ Progra ~ 1 \ Yahoo! \ Companion \ Installs \ cp ...
O2 - BHO: Adobe Reader PDF Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper ...
O2 - BHO: (no name) - (089FD14D-132B-48FC-8861-0048AE113215) - C: \ Program Files \ SiteAdvisor \ 6253 \ SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - (377C180E - 6F0E-4D4C-980F-F45BD3D40CF4) - C: \ Program Files \ McAfee \ MSK \ mcapbho.dll
O2 - BHO: Spybot-S

No comments: