DaniWeb IT Discussion Community

DaniWeb IT Discussion Community (http://www.daniweb.com/forums/index.php)
-   Viruses, Spyware and other Nasties (http://www.daniweb.com/forums/forum64.html)
-   -   Online hijackthis log scanner (http://www.daniweb.com/forums/thread31752.html)

crunchie Sep 4th, 2005 10:16 am
Online hijackthis log scanner
 
Ran a log through the scanner at www.hijackthis.de and these are the results;

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.flhrhdisywxtypjrrhipzzo....mBaXrZ8OdK1.php

Safe. This page has been identified as safe.

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ggqtkweturoedmnnqgrlvj.i...E96VBQZoo4.html

Safe. This page has been identified as safe.

Both these entries are from a LOP infection, but marked as 'safe' by the scanner.

O2 - BHO: (no name) - {EA15FA6B-EB9F-C0CB-3D91-8708FA5BC5AF} - C:\DOCUME~1\Chris\APPLIC~1\ACIDGR~1\bin coal.exe

Also added by LOP and marked as unknown by the online scanner, as were two other LOP related entries.

O4 - HKLM\..\RunServices: [Windows Session Manager] smss32.exe
Unknown

O4 - HKLM\..\RunServices: [Microsoft DirectX] wuafmgr.exe
Unknown

Both entries are known to be bad, but marked as unknown.

My intent is to show the unreliability of automated scanners, without also using a pair of eyes :).
These scanners can give you an idea of what is there, but IMO are no match for the human touch.


All times are GMT -4. The time now is 11:13 pm.

Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC