Crss.exe

LUISCMARTINS
LUISCMARTINS
in Logs analysis

Greetings.


Yesterday when I turn my computer on, I clicked my username to start the windows (Windows XP Home Edition Start-up) and got an error message saying the Windows could not find the following file: C:\WINDOWS\Config\crss.exe


I searched on the web and found out that file is a virus which is passed thorough e-mail.


I performed a scan with BitDefender and SUPERAntispyware and cleaned the system thrash with CCleaner. But I keep getting the same error upon logging in.


Can I get some help out here?


Thanks in advance.

Comments

  • danton
    danton
    Greetings.


    Yesterday when I turn my computer on, I clicked my username to start the windows (Windows XP Home Edition Start-up) and got an error message saying the Windows could not find the following file: C:\WINDOWS\Config\crss.exe


    I searched on the web and found out that file is a virus which is passed thorough e-mail.


    I performed a scan with BitDefender and SUPERAntispyware and cleaned the system thrash with CCleaner. But I keep getting the same error upon logging in.


    Can I get some help out here?


    Thanks in advance.


    It seems you have a registry entry left linked to that file. The file probably was malware and was removed previously, but the registry entry remained. That error should go away if the registry entry is simply removed.

  • LUISCMARTINS
    LUISCMARTINS
    That error should go away if the registry entry is simply removed.


    I see. Could you please tell me how to do that?

  • alexcrist
    alexcrist ✭

    Hello Luis,


    Please post a HijackThis log.


    Cris.

  • LUISCMARTINS
    LUISCMARTINS

    Here it is.


    Logfile of HijackThis v1.99.1


    Scan saved at 12:13:59, on 29-04-2008


    Platform: Windows XP SP2 (WinNT 5.01.2600)


    MSIE: Internet Explorer v7.00 (7.00.6000.16640)


    Running processes:


    C:\WINDOWS\System32\smss.exe


    C:\WINDOWS\system32\winlogon.exe


    C:\WINDOWS\system32\services.exe


    C:\WINDOWS\system32\lsass.exe


    C:\WINDOWS\system32\svchost.exe


    C:\WINDOWS\System32\svchost.exe


    C:\WINDOWS\system32\spoolsv.exe


    C:\Programas\Ficheiros comuns\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe


    C:\Programas\Bonjour\mDNSResponder.exe


    C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe


    C:\WINDOWS\Explorer.exe


    C:\WINDOWS\system32\HPZipm12.exe


    C:\WINDOWS\system32\svchost.exe


    C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe


    C:\WINDOWS\system32\SearchIndexer.exe


    C:\Programas\Ficheiros comuns\Softwin\BitDefender Communicator\xcommsvr.exe


    C:\Programas\Ficheiros comuns\Softwin\BitDefender Scan Server\bdss.exe


    C:\Programas\Ficheiros comuns\Softwin\BitDefender Update Service\livesrv.exe


    C:\Programas\Softwin\BitDefender10\bdmcon.exe


    C:\Programas\Softwin\BitDefender10\bdagent.exe


    C:\WINDOWS\SOUNDMAN.EXE


    C:\WINDOWS\system32\VTTimer.exe


    C:\WINDOWS\system32\VTtrayp.exe


    C:\WINDOWS\system32\atwtusb.exe


    C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe


    C:\Programas\iTunes\iTunesHelper.exe


    C:\Programas\DAP\DAP.EXE


    C:\WINDOWS\system32\ctfmon.exe


    C:\Programas\Windows Live\Messenger\MsnMsgr.Exe


    C:\Programas\DNA\btdna.exe


    C:\Programas\DAEMON Tools Lite\daemon.exe


    C:\Programas\Windows Desktop Search\WindowsSearch.exe


    C:\Programas\Softwin\BitDefender10\vsserv.exe


    C:\Programas\iPod\bin\iPodService.exe


    C:\WINDOWS\system32\SearchProtocolHost.exe


    C:\WINDOWS\system32\wuauclt.exe


    C:\Programas\Windows Live\Messenger\usnsvc.exe


    C:\Programas\Mozilla Firefox\firefox.exe


    C:\Programas\Ventrilo\Ventrilo.exe


    C:\Programas\Gravity\RO\Launcher.exe


    C:\Documents and Settings\Luis Martins\Ambiente de trabalho\HijackThis.exe


    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pt/


    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157


    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896


    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896


    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157


    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local


    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações


    R3 - URLSearchHook: Barra de Ferramentas do Yahoo! com bloqueador de pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programas\Yahoo!\Companion\Installs\cpn\yt.dll


    F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\csrss.exe


    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programas\Yahoo!\Companion\Installs\cpn\yt.dll


    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programas\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll


    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programas\Java\jre1.6.0_03\bin\ssv.dll


    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)


    O2 - BHO: Programa Auxiliar de Início de Sessão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programas\Ficheiros comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll


    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programas\google\googletoolbar1.dll


    O3 - Toolbar: Barra de Ferramentas do Yahoo! com bloqueador de pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programas\Yahoo!\Companion\Installs\cpn\yt.dll


    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programas\google\googletoolbar1.dll


    O4 - HKLM\..\Run: [bDMCon] "C:\Programas\Softwin\BitDefender10\bdmcon.exe" /reg


    O4 - HKLM\..\Run: [bDAgent] "C:\Programas\Softwin\BitDefender10\bdagent.exe"


    O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE


    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe


    O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe


    O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta


    O4 - HKLM\..\Run: [TkBellExe] "C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe" -osboot


    O4 - HKLM\..\Run: [QuickTime Task] "C:\Programas\QuickTime\QTTask.exe" -atboottime


    O4 - HKLM\..\Run: [iTunesHelper] "C:\Programas\iTunes\iTunesHelper.exe"


    O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Programas\DAP\DAP.EXE" /STARTUP


    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe


    O4 - HKCU\..\Run: [MsnMsgr] "C:\Programas\Windows Live\Messenger\MsnMsgr.Exe" /background


    O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Programas\DNA\btdna.exe"


    O4 - HKCU\..\Run: [swg] C:\Programas\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe


    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Programas\DAEMON Tools Lite\daemon.exe" -autorun


    O4 - Global Startup: Windows Desktop Search.lnk = C:\Programas\Windows Desktop Search\WindowsSearch.exe


    O8 - Extra context menu item: &Clean Traces - C:\Programas\DAP\Privacy Package\dapcleanerie.htm


    O8 - Extra context menu item: &Download with &DAP - C:\Programas\DAP\dapextie.htm


    O8 - Extra context menu item: Download &all with DAP - C:\Programas\DAP\dapextie2.htm


    O8 - Extra context menu item: Download by YouTube Robot - res://C:\Programas\YouTubeRobot\RobotExt.ocx/LINK.HTM


    O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000


    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programas\Java\jre1.6.0_03\bin\ssv.dll


    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programas\Java\jre1.6.0_03\bin\ssv.dll


    O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programas\Windows Live\Writer\WriterBrowserExtension.dll


    O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programas\Windows Live\Writer\WriterBrowserExtension.dll


    O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL


    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)


    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)


    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe


    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe


    O10 - Unknown file in Winsock LSP: c:\programas\bonjour\mdnsnsp.dll


    O11 - Options group: [iNTERNATIONAL] International*


    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programas\Yahoo!\Common\yinsthelper.dll


    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1193930769421


    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL


    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL


    O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programas\Windows Live\Mail\mailcomm.dll


    O20 - Winlogon Notify: !SASWinLogon - C:\Programas\SUPERAntiSpyware\SASWINLO.dll


    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll


    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programas\Ficheiros comuns\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe


    O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Programas\Ares\chatServer.exe


    O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Programas\Ficheiros comuns\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)


    O23 - Service: Bonjour Service - Apple Inc. - C:\Programas\Bonjour\mDNSResponder.exe


    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programas\Ficheiros comuns\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe


    O23 - Service: Serviço iPod (iPod Service) - Apple Inc. - C:\Programas\iPod\bin\iPodService.exe


    O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Programas\Ficheiros comuns\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)


    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe


    O23 - Service: NMIndexingService - Nero AG - C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexingService.exe


    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe


    O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe


    O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Programas\Softwin\BitDefender10\vsserv.exe" /service (file missing)


    O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Programas\Ficheiros comuns\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

  • alexcrist
    alexcrist ✭

    Run HijackThis again, select the following line, and click Fix selected:


    F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\csrss.exe


    Also, please post a new HijackThis log, but use the newest version, 2.0.2.


    Cris.

  • LUISCMARTINS
    LUISCMARTINS

    Here.


    I think the problem is fixed, because since I fixed the file with HijackThis, the start-up error didn't show up anymore.


    Thanks.


    Logfile of Trend Micro HijackThis v2.0.2


    Scan saved at 16:36:07, on 29-04-2008


    Platform: Windows XP SP2 (WinNT 5.01.2600)


    MSIE: Internet Explorer v7.00 (7.00.6000.16640)


    Boot mode: Normal


    Running processes:


    C:\WINDOWS\System32\smss.exe


    C:\WINDOWS\system32\winlogon.exe


    C:\WINDOWS\system32\services.exe


    C:\WINDOWS\system32\lsass.exe


    C:\WINDOWS\system32\svchost.exe


    C:\WINDOWS\System32\svchost.exe


    C:\WINDOWS\system32\spoolsv.exe


    C:\WINDOWS\Explorer.EXE


    C:\Programas\Softwin\BitDefender10\bdmcon.exe


    C:\Programas\Softwin\BitDefender10\bdagent.exe


    C:\WINDOWS\SOUNDMAN.EXE


    C:\WINDOWS\system32\VTTimer.exe


    C:\WINDOWS\system32\VTtrayp.exe


    C:\WINDOWS\system32\atwtusb.exe


    C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe


    C:\Programas\iTunes\iTunesHelper.exe


    C:\Programas\DAP\DAP.EXE


    C:\WINDOWS\system32\ctfmon.exe


    C:\Programas\Windows Live\Messenger\MsnMsgr.Exe


    C:\Programas\DNA\btdna.exe


    C:\Programas\DAEMON Tools Lite\daemon.exe


    C:\Programas\Windows Desktop Search\WindowsSearch.exe


    C:\Programas\Ficheiros comuns\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe


    C:\Programas\Bonjour\mDNSResponder.exe


    C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe


    C:\WINDOWS\system32\HPZipm12.exe


    C:\WINDOWS\system32\svchost.exe


    C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe


    C:\WINDOWS\system32\SearchIndexer.exe


    C:\Programas\Ficheiros comuns\Softwin\BitDefender Communicator\xcommsvr.exe


    C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe


    C:\Programas\Ficheiros comuns\Softwin\BitDefender Scan Server\bdss.exe


    C:\Programas\Ficheiros comuns\Softwin\BitDefender Update Service\livesrv.exe


    C:\WINDOWS\system32\SearchProtocolHost.exe


    C:\Programas\Softwin\BitDefender10\vsserv.exe


    C:\Programas\iPod\bin\iPodService.exe


    C:\Programas\Ventrilo\Ventrilo.exe


    C:\Programas\Windows Live\Messenger\usnsvc.exe


    C:\Programas\Mozilla Firefox\firefox.exe


    C:\WINDOWS\system32\wuauclt.exe


    C:\WINDOWS\system32\SearchProtocolHost.exe


    C:\Programas\Trend Micro\HijackThis\HijackThis.exe


    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pt/


    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157


    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896


    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896


    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157


    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local


    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hiperligações


    R3 - URLSearchHook: Barra de Ferramentas do Yahoo! com bloqueador de pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programas\Yahoo!\Companion\Installs\cpn\yt.dll


    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programas\Yahoo!\Companion\Installs\cpn\yt.dll


    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programas\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll


    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programas\Java\jre1.6.0_03\bin\ssv.dll


    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)


    O2 - BHO: Programa Auxiliar de Início de Sessão do Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programas\Ficheiros comuns\Microsoft Shared\Windows Live\WindowsLiveLogin.dll


    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programas\google\googletoolbar1.dll


    O3 - Toolbar: Barra de Ferramentas do Yahoo! com bloqueador de pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programas\Yahoo!\Companion\Installs\cpn\yt.dll


    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programas\google\googletoolbar1.dll


    O4 - HKLM\..\Run: [bDMCon] "C:\Programas\Softwin\BitDefender10\bdmcon.exe" /reg


    O4 - HKLM\..\Run: [bDAgent] "C:\Programas\Softwin\BitDefender10\bdagent.exe"


    O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE


    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe


    O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe


    O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta


    O4 - HKLM\..\Run: [TkBellExe] "C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe" -osboot


    O4 - HKLM\..\Run: [QuickTime Task] "C:\Programas\QuickTime\QTTask.exe" -atboottime


    O4 - HKLM\..\Run: [iTunesHelper] "C:\Programas\iTunes\iTunesHelper.exe"


    O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Programas\DAP\DAP.EXE" /STARTUP


    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe


    O4 - HKCU\..\Run: [MsnMsgr] "C:\Programas\Windows Live\Messenger\MsnMsgr.Exe" /background


    O4 - HKCU\..\Run: [bitTorrent DNA] "C:\Programas\DNA\btdna.exe"


    O4 - HKCU\..\Run: [swg] C:\Programas\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe


    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Programas\DAEMON Tools Lite\daemon.exe" -autorun


    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIÇO LOCAL')


    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Serviço de rede')


    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')


    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')


    O4 - Global Startup: Windows Desktop Search.lnk = C:\Programas\Windows Desktop Search\WindowsSearch.exe


    O8 - Extra context menu item: &Clean Traces - C:\Programas\DAP\Privacy Package\dapcleanerie.htm


    O8 - Extra context menu item: &Download with &DAP - C:\Programas\DAP\dapextie.htm


    O8 - Extra context menu item: Download &all with DAP - C:\Programas\DAP\dapextie2.htm


    O8 - Extra context menu item: Download by YouTube Robot - res://C:\Programas\YouTubeRobot\RobotExt.ocx/LINK.HTM


    O8 - Extra context menu item: E&xportar para o Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000


    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programas\Java\jre1.6.0_03\bin\ssv.dll


    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programas\Java\jre1.6.0_03\bin\ssv.dll


    O9 - Extra button: Incluir no Blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programas\Windows Live\Writer\WriterBrowserExtension.dll


    O9 - Extra 'Tools' menuitem: &Incluir no Blog no Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programas\Windows Live\Writer\WriterBrowserExtension.dll


    O9 - Extra button: Pesquisar - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL


    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe


    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe


    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe


    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programas\Messenger\msmsgs.exe


    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programas\Yahoo!\Common\yinsthelper.dll


    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1193930769421


    O20 - Winlogon Notify: !SASWinLogon - C:\Programas\SUPERAntiSpyware\SASWINLO.dll


    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programas\Ficheiros comuns\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe


    O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Programas\Ares\chatServer.exe


    O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Programas\Ficheiros comuns\Softwin\BitDefender Scan Server\bdss.exe


    O23 - Service: Bonjour Service - Apple Inc. - C:\Programas\Bonjour\mDNSResponder.exe


    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programas\Ficheiros comuns\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe


    O23 - Service: Serviço iPod (iPod Service) - Apple Inc. - C:\Programas\iPod\bin\iPodService.exe


    O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Programas\Ficheiros comuns\Softwin\BitDefender Update Service\livesrv.exe


    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Programas\Nero\Nero8\Nero BackItUp\NBService.exe


    O23 - Service: NMIndexingService - Nero AG - C:\Programas\Ficheiros comuns\Nero\Lib\NMIndexingService.exe


    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe


    O23 - Service: VideoAcceleratorService - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe


    O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Programas\Softwin\BitDefender10\vsserv.exe


    O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Programas\Ficheiros comuns\Softwin\BitDefender Communicator\xcommsvr.exe


    --


    End of file - 9098 bytes

  • alexcrist
    alexcrist ✭
    edited April 2008

    The log looks clean. :)


    EDIT: Topic moved to the correct section.

All Time Leaders

Categories

Defenders of the month