The following are the spywares
found in my computer system. Notice that "Alxela" is the spyware belongs
Microsoft that in the Explore 5.0 and late, and Outlookexpress. Others that
I already either uninstalled or deleted, but they could still exist in my computer,
if I don't have this software to scan them out.
______________________________________________________________________
Scan initialized on 1/25/2002 12:58:00 AM.(AAW release 5.62, referencefile 087-22.09.2001)
=================================================
Started memory scan
====================
Running processes:
#:1 (smss.exe)
Path:\SystemRoot\System32\
ThreadCreationTime:1/25/2002 6:44:27 AM
BasePriority :Normal
#:2 (winlogon.exe)
Path:\??\D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:44:40 AM
BasePriority :High
#:3 (services.exe)
Path:D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:44:44 AM
BasePriority :Normal
#:4 (lsass.exe)
Path:D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:44:44 AM
BasePriority :Normal
#:5 (svchost.exe)
Path:D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:44:49 AM
BasePriority :Normal
#:6 (spoolsv.exe)
Path:D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:44:50 AM
BasePriority :Normal
#:7 (msdtc.exe)
Path:D:\WINNT\System32\
ThreadCreationTime:1/25/2002 6:44:50 AM
BasePriority :Normal
#:8 (crimgsvr.exe)
Path:D:\Program Files\Seagate Software\Crystal Reports\
ThreadCreationTime:1/25/2002 6:44:53 AM
BasePriority :Normal
#:9 (crpgsvr.exe)
Path:D:\Program Files\Seagate Software\Crystal Reports\
ThreadCreationTime:1/25/2002 6:44:53 AM
BasePriority :Normal
#:10 (servnt.exe)
Path:D:\Program Files\eSafe\Protect\
ThreadCreationTime:1/25/2002 6:44:57 AM
BasePriority :High
#:11 (svchost.exe)
Path:D:\WINNT\System32\
ThreadCreationTime:1/25/2002 6:44:57 AM
BasePriority :Normal
#:12 (msiexec.exe)
Path:D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:44:58 AM
BasePriority :Normal
#:13 (explorer.exe)
Path:D:\WINNT\
ThreadCreationTime:1/25/2002 6:45:03 AM
BasePriority :Normal
#:14 (directcd.exe)
Path:D:\PROGRA~1\Adaptec\DirectCD\
ThreadCreationTime:1/25/2002 6:45:09 AM
BasePriority :Normal
#:15 (loadqm.exe)
Path:D:\WINNT\
ThreadCreationTime:1/25/2002 6:45:09 AM
BasePriority :Normal
#:16 (espwatch.exe)
Path:D:\Program Files\eSafe\Protect\
ThreadCreationTime:1/25/2002 6:45:09 AM
BasePriority :Normal
#:17 (createcd.exe)
Path:D:\PROGRA~1\Adaptec\EASYCD~1\CreateCD\
ThreadCreationTime:1/25/2002 6:45:09 AM
BasePriority :Normal
#:18 (msmsgs.exe)
Path:D:\Program Files\Messenger\
ThreadCreationTime:1/25/2002 6:45:10 AM
BasePriority :Normal
#:19 (apache.exe)
Path:D:\OraNT\Apache\Apache\
ThreadCreationTime:1/25/2002 6:45:14 AM
BasePriority :Normal
#:20 (pctspk.exe)
Path:D:\WINNT\System32\
ThreadCreationTime:1/25/2002 6:45:16 AM
BasePriority :Normal
#:21 (regsvc.exe)
Path:D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:45:17 AM
BasePriority :Normal
#:22 (mstask.exe)
Path:D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:45:18 AM
BasePriority :Normal
#:23 (tcpsvcs.exe)
Path:D:\WINNT\System32\
ThreadCreationTime:1/25/2002 6:45:19 AM
BasePriority :Normal
#:24 (snmp.exe)
Path:D:\WINNT\System32\
ThreadCreationTime:1/25/2002 6:45:19 AM
BasePriority :Normal
#:25 (stisvc.exe)
Path:D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:45:19 AM
BasePriority :Normal
#:26 (winmgmt.exe)
Path:D:\WINNT\System32\WBEM\
ThreadCreationTime:1/25/2002 6:45:21 AM
BasePriority :Normal
#:27 (faxsvc.exe)
Path:D:\WINNT\system32\
ThreadCreationTime:1/25/2002 6:45:22 AM
BasePriority :Normal
#:28 (inetinfo.exe)
Path:D:\WINNT\System32\inetsrv\
ThreadCreationTime:1/25/2002 6:45:24 AM
BasePriority :Normal
#:29 (mqsvc.exe)
Path:D:\WINNT\System32\
ThreadCreationTime:1/25/2002 6:45:26 AM
BasePriority :Normal
#:30 (java.exe)
Path:D:\OraNT\Apache\jdk\bin\
ThreadCreationTime:1/25/2002 6:45:40 AM
BasePriority :Normal
#:31 (apache.exe)
Path:D:\OraNT\Apache\Apache\
ThreadCreationTime:1/25/2002 6:45:41 AM
BasePriority :Normal
#:32 (mdm.exe)
Path:D:\WINNT\System32\
ThreadCreationTime:1/25/2002 6:47:11 AM
BasePriority :Normal
#:33 (hh.exe)
Path:D:\WINNT\
ThreadCreationTime:1/25/2002 7:31:54 AM
BasePriority :Normal
#:34 (msimn.exe)
Path:D:\Program Files\Outlook Express\
ThreadCreationTime:1/25/2002 7:34:21 AM
BasePriority :Normal
#:35 (iexplore.exe)
Path:D:\Program Files\Internet Explorer\
ThreadCreationTime:1/25/2002 7:56:53 AM
BasePriority :Normal
#:36 (ad-aware.exe)
Path:D:\Program Files\Lavasoft Ad-aware\
ThreadCreationTime:1/25/2002 8:57:42 AM
BasePriority :Normal
Memory scan result:
Total modules found:36
Suspicious modules found:0
Started registry scan
======================
Alexa key:HKEY_CLASSES_ROOT\alxbp3.browserproxy\
Alexa key:HKEY_CLASSES_ROOT\alxbp3.browserproxy.1\
Alexa key:HKEY_CLASSES_ROOT\alxbw.bblhtml\
Alexa key:HKEY_CLASSES_ROOT\alxbw.bblhtml.1\
Alexa key:HKEY_CLASSES_ROOT\alxbw.bblwnd\
Alexa key:HKEY_CLASSES_ROOT\alxbw.bblwnd.1\
Alexa key:HKEY_CLASSES_ROOT\alxbw.browserwnd\
Alexa key:HKEY_CLASSES_ROOT\alxbw.browserwnd.1\
Alexa key:HKEY_CLASSES_ROOT\bhoalexa.bhoalexa\
Alexa key:HKEY_CLASSES_ROOT\bhoalexa.bhoalexa.1\
Gator key:HKEY_CLASSES_ROOT\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\
Alexa key:HKEY_CLASSES_ROOT\interface\{1c1f99ea-8b5d-4d08-b6a8-b1e4cb542f9e}\
Alexa key:HKEY_CLASSES_ROOT\interface\{36600c37-fac4-471e-90bb-fc7a9c979c24}\
Alexa key:HKEY_CLASSES_ROOT\interface\{446edfee-3a1a-11d3-bd49-00600827885e}\
Alexa key:HKEY_CLASSES_ROOT\interface\{4f7cc126-4cff-4db5-892d-da71a7552c99}\
Alexa key:HKEY_CLASSES_ROOT\interface\{533b5798-12d1-4063-8cd0-ffe842de872d}\
Alexa key:HKEY_CLASSES_ROOT\interface\{5641f13a-f62e-4326-a5b6-551103ba6272}\
Alexa key:HKEY_CLASSES_ROOT\interface\{57405e21-4f6d-11d3-bd52-00600827885e}\
Alexa key:HKEY_CLASSES_ROOT\interface\{5cdc7a97-f8e3-4ea6-b0a7-578ecd31de2c}\
Alexa key:HKEY_CLASSES_ROOT\interface\{62e5bcee-2b5f-4866-8b19-197cfacb770c}\
Alexa key:HKEY_CLASSES_ROOT\interface\{68721ce6-c7c1-4c37-ab1f-51644f20b073}\
Alexa key:HKEY_CLASSES_ROOT\interface\{7280333e-17d0-4246-9510-2d6170468585}\
Alexa key:HKEY_CLASSES_ROOT\interface\{79a4d241-de89-11d3-ac85-00c04f2ee811}\
Alexa key:HKEY_CLASSES_ROOT\interface\{7b068023-1ac9-4168-a133-9fdd9361af80}\
Alexa key:HKEY_CLASSES_ROOT\interface\{7e22206d-52d1-11d4-acb8-00c04f2ee811}\
Alexa key:HKEY_CLASSES_ROOT\interface\{8561ae3b-1832-471b-ac4f-da479d635b8e}\
Alexa key:HKEY_CLASSES_ROOT\interface\{911a1dfe-c959-11d3-8164-00c04f30faf9}\
Alexa key:HKEY_CLASSES_ROOT\interface\{b3b1d367-4253-42b9-b620-31a7d7710a06}\
Alexa key:HKEY_CLASSES_ROOT\interface\{c42000c4-703a-4a55-b8af-5c83b24c9922}\
Alexa key:HKEY_CLASSES_ROOT\interface\{d1f6abee-b889-11d2-8e3c-dcca155f9a71}\
Alexa key:HKEY_CLASSES_ROOT\interface\{eccc5b5c-fa9f-42a1-993f-c67a8161f5a0}\
Alexa key:HKEY_CLASSES_ROOT\interface\{f88028b4-4523-4ec4-a48e-064db9952f30}\
Alexa key:HKEY_CLASSES_ROOT\interface\{fb1d5ef1-df31-11d3-ac86-00c04f2ee811}\
Alexa key:HKEY_CLASSES_ROOT\popmenu.menu\
Alexa key:HKEY_CLASSES_ROOT\popmenu.menu.1\
Alexa key:HKEY_LOCAL_MACHINE\software\alexa internet\
Other
key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\offers\
Alexa key:HKEY_CLASSES_ROOT\typelib\{0a291298-dfb0-4b0d-b547-5a66fd709d57}\
Alexa key:HKEY_CLASSES_ROOT\typelib\{e3978204-d428-11d3-8164-00c04f30faf9}\
Alexa key:HKEY_CLASSES_ROOT\typelib\{e3978228-d428-11d3-8164-00c04f30faf9}\
Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgef
Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgmg
Alexa key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\D:\WINNT\Downloaded
Program Files\alexa.htm
Alexa key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\D:\WINNT\System32\AlxIE328.dll
Alexa key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\D:\WINNT\System32\AlxBW328.dll
Alexa key:Software\Microsoft\Windows\CurrentVersion\SharedDLLs\D:\WINNT\System32\AlxBP328.dll
Started extended registry
scan
===============================
Alexa
key:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\moduleusage\D:/WINNT/Downloaded
Program Files/alexa.htm
Alexa key:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\moduleusage\D:/WINNT/System32/AlxBP328.dll
Alexa key:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\moduleusage\D:/WINNT/System32/AlxBW328.dll
Alexa key:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\moduleusage\D:/WINNT/System32/AlxIE328.dll
Alexa key:CLSID\{79A4D242-DE89-11D3-AC85-00C04F2EE811}
Alexa key:CLSID\{7E22206E-52D1-11D4-ACB8-00C04F2EE811}
Alexa key:CLSID\{FB1D5EF2-DF31-11D3-AC86-00C04F2EE811}
Registry scan result:
Suspicious keys found :53
Started folder scan
====================
Now processing drive (C), 1 remaining.
Finished processing Drive(C), 2500 folders total.
Now processing drive (D),
0 remaining.
Finished processing Drive(D), 7435 folders total.
Folder scan result:
Folders processed:9935
Suspicious folders found:0
Started file scan
==================
Aureate file:C:\aureate-uninstall-log.txt
Timesink file:C:\My\MyProgram\PSM_SE\BACKUP\CTInstall.exe
Timesink file:C:\My\MyProgram\PSM_SE\BACKUP\SimpleRegistration.dll
Timesink file:C:\My\MyProgram\PSM_SE\TSUninstaller.exe
Alexa file:D:\WINNT\system32\AlxBP328.dll
Alexa file:D:\WINNT\system32\AlxBP328.dll
Alexa file:D:\WINNT\system32\AlxBW328.dll
Alexa file:D:\WINNT\system32\AlxBW328.dll
Alexa file:D:\WINNT\system32\AlxIE328.dll
Alexa file:D:\WINNT\system32\AlxIE328.dll
Aureate file:D:\WINNT\system32\adimage.dll
Aureate file:D:\WINNT\system32\ipcclient.dll
Aureate file:D:\WINNT\system32\msipcsv.exe
Aureate file:D:\WINNT\system32\tfde.dll
Alexa file:D:\WINNT\Downloaded Program Files\alexa.htm
Gator file:D:\Program Files\Common Files\GMT\egIEEngine.dll
Gator file:D:\Program Files\Common Files\GMT\EGIEProcess.dll
Gator file:D:\Program Files\Common Files\GMT\EGNSEngine.dll
File scan result:
Suspicious files found:18
Scanning finished
==================
Suspicious modules found:0
Suspicious keys found :53
Suspicious folders found:0
Suspicious files found:18
==========================
Spyware components ignored:0
Total spyware components found:71