Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spy Sweeper With Antivirus - Version Upgrade Error


  • Please log in to reply
No replies to this topic

#1 joygreen

joygreen

  • Members
  • 242 posts
  • OFFLINE
  •  
  • Location:Southeast U.S.A.
  • Local time:08:59 PM

Posted 10 August 2007 - 10:15 PM

Hi all,

I just saw the post with the new scanners, and I will be trying them out later. Below is the report I got after upgrading my SpySweeper w/Antivirus. It never finds anything. Ad-Aware is still finding the %notepad% error I entered in another post; I followed all the recommendations but Ad-Aware keeps finding and deleting this spy. Thank you in advance for any recommendations you can give. What's up with all those dollar signs? Several items I do not recognize. Thank you :thumbsup:

date/time : 2007-07-30, 23:17:06, 125ms
computer name : COMPUTERNAME
user name : ~N <admin>
operating ~N : ~q XP ~S Pack 2 build 2600
~N language : English
~N up time : 2 minutes 26 seconds
program up time : 1 minute 29 seconds
processor : AMD Sempron™ Processor 3300+
physical memory : 731/1246 MB (free/total)
free disk space : (C:) 54.88 GB
display mode : 1024x768, 32 bit
process id : $490
allocated memory : 70.84 MB
executable : ~A
exec. date/time : 2007-07-19 22:54
version : 3.5.6.56
~f version : 3.0c
callstack crc : $011d4cc8, $ffd477a3, $7a4f45c6
exception number : 1
exception class : EAccessViolation
exception message : Access violation at address 011D4CC8. Write of address 005D4FB8.

~R $710 (~n):
011d4cc8 ???
004f9c15 ~A VolumeInfo 217 TVolumeInfos.GetVolumeType
00507e7b ~A FileStreamDirect 62 TFileStreamDirect.~o
005d4fce ~A IdentifyFileObj 2175 CheckFile
005d5459 ~A IdentifyFileObj 2264 PerformCheck
005d58fc ~A IdentifyFileObj 2339 TIdentifyFileObj.InternalIsSpy
005d4d52 ~A IdentifyFileObj 2110 TIdentifyFileObj.IsSpy
0064040a ~A ~t~N~S 984 T~t~N~S.ScanFile
0063e8dc ~A ~t~N~S 526 T~t~N~S.Check~SFileCreation
00640255 ~A ~t~N~S 929 T~t~N~S.On~SFileCreation
0063dbe4 ~A ~t~N~S 288 TControlSetRules.DoOn~SFileWrite
004eef7a ~A FileMonitorRule 574 TFileMonitorRule.DoOnFileMonitorEvent
004ee9ae ~A FileMonitorRule 443 TFileMonitorRule.DoOnEvent
004f6e7c ~A RuleManager 252 TRuleContainer.DoOnEvent
004f66ec ~A ~O 1198 ~n.DoOnEvent
004f65bc ~A ~O 1153 ~n.ProcessEventRecord
004f683f ~A ~O 1242 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

modules:
0033~Q ~Piz~r 6.0.5441.0 C:\~I
004~Q0 ~A 3.5.6.56 C:\~j\Webroot\Spy Sweeper
00f~Q0 sguard~r 6.0.20.0 C:\~j\iolo\Common\Lib
03ed~Q ztvunrar3~r C:\~j\Webroot\Spy Sweeper
055~Q0 MailShld~r C:\~j\Webroot\Spy Sweeper
0ffd~Q rsaenh~r 5.1.2600.2161 C:\~I
1~Q000 pcre~r 6.1.0.0 C:\~j\Webroot\Spy Sweeper
2~Q000 xpsp2res~r 5.1.2600.2180 C:\~I
4299~Q iertutil~r 7.0.6000.16473 C:\~I
42c1~Q wininet~r 7.0.6000.16473 C:\~I
4d4f~Q WINHTTP~r 5.1.2600.2180 C:\~I
589a~Q VEEX~r 2.47.0.289 C:\~j\Webroot\Spy Sweeper\AntiVirus
58eb~Q ~h 5.4.6.289 C:\~j\Webroot\Spy Sweeper\AntiVirus
58fa~Q OSDP~r 1.37.0.1501 C:\~j\Webroot\Spy Sweeper\AntiVirus
5ad6~Q vdmdbg~r 5.1.2600.2180 C:\~I
5b86~Q NETAPI32~r 5.1.2600.2976 C:\~I
5d09~Q comctl32~r 5.82.2900.2982 C:\~I
5edd~Q olepro32~r 5.1.2600.2180 C:\~I
71aa~Q WS2HELP~r 5.1.2600.2180 C:\~I
71ab~Q WS2_32~r 5.1.2600.2180 C:\~I
71ad~Q wsock32~r 5.1.2600.2180 C:\~I
71b2~Q mpr~r 5.1.2600.2180 C:\~I
71bf~Q SAMLIB~r 5.1.2600.2180 C:\~I
71c1~Q ntlanman~r 5.1.2600.2180 C:\~I
71c8~Q NETRAP~r 5.1.2600.2180 C:\~I
71c9~Q NETUI1~r 5.1.2600.2180 C:\~I
71cd~Q NETUI0~r 5.1.2600.2180 C:\~I
722b~Q SensApi~r 5.1.2600.2180 C:\~I
74ed~Q wbemsvc~r 5.1.2600.2180 C:\~I\wbem
74ef~Q wbemprox~r 5.1.2600.2180 C:\~I\wbem
7529~Q wbemcomn~r 5.1.2600.2180 C:\~I\wbem
7569~Q fastprox~r 5.1.2600.2180 C:\~I\wbem
75e6~Q cryptnet~r 5.131.2600.2180 C:\~I
75e9~Q SXS~r 5.1.2600.3019 C:\~I
75f6~Q drprov~r 5.1.2600.2180 C:\~I
75f7~Q davclnt~r 5.1.2600.2180 C:\~I
7608~Q MSVCP60~r 6.2.3104.0 C:\~I
763b~Q comdlg32~r 6.0.2900.2180 C:\~I
767a~Q NTDSAPI~r 5.1.2600.2180 C:\~I
769c~Q userenv~r 5.1.2600.2180 C:\~I
76b4~Q winmm~r 5.1.2600.2180 C:\~I
76bf~Q PSAPI~r 5.1.2600.2180 C:\~I
76c3~Q WINTRUST~r 5.131.2600.2180 C:\~I
76c9~Q IMAGEHLP~r 5.1.2600.2180 C:\~I
76d6~Q iphlpapi~r 5.1.2600.2912 C:\~I
76f2~Q dnsapi~r 5.1.2600.2938 C:\~I
76f6~Q WLDAP32~r 5.1.2600.2180 C:\~I
76fd~Q CLBCATQ~r 2001.12.4414.308 C:\~I
7705~Q COMRes~r 2001.12.4414.258 C:\~I
7712~Q oleaut32~r 5.1.2600.2180 C:\~I
773d~Q comctl32~r 6.0.2900.2982 C:\~q\WinSxS\x86_Microsoft.~q.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03
774e~Q ole32~r 5.1.2600.2726 C:\~I
7792~Q SETUPAPI~r 5.1.2600.2180 C:\~I
77a8~Q crypt32~r 5.131.2600.2180 C:\~I
77b2~Q MSASN1~r 5.1.2600.2180 C:\~I
77b4~Q Apphelp~r 5.1.2600.2180 C:\~I
77c~Q0 version~r 5.1.2600.2180 C:\~I
77c1~Q msvcrt~r 7.0.2600.2180 C:\~I
77dd~Q ADVAPI32~r 5.1.2600.2180 C:\~I
77e7~Q RPCRT4~r 5.1.2600.2180 C:\~I
77f1~Q GDI32~r 5.1.2600.3099 C:\~I
77f6~Q SHLWAPI~r 6.0.2900.3086 C:\~I
77fe~Q Secur32~r 5.1.2600.2180 C:\~I
7c8~Q0 ~H 5.1.2600.3119 C:\~I
7c9~Q0 ~i 5.1.2600.2180 C:\~I
7c9c~Q shell32~r 6.0.2900.3051 C:\~I
7e0c~Q ztvcabinet~r 5.0.2147.1 C:\~j\Webroot\Spy Sweeper
7e41~Q USER32~r 5.1.2600.3099 C:\~I

processes:
000 Idle
004 ~N ~P
1a0 smss.exe ~P C:\~I
1f4 csrss.exe ~P C:\~I
20c ~T.exe high C:\~I
23c ~Ss.exe ~P C:\~I
248 lsass.exe ~P C:\~I
2e0 svchost.exe ~P C:\~I
318 svchost.exe ~P C:\~I
358 MsMpEng.exe ~P C:\~j\Microsoft ~q OneCare Live\Antivirus
380 svchost.exe ~P C:\~I
394 InCDsrv.exe ~P C:\~j\Ahead\InCD
478 smc.exe ~P C:\~j\Sygate\SPF
4e0 svchost.exe ~P C:\~I
570 svchost.exe ~P C:\~I
5c4 Explorer.EXE ~P C:\~q
640 spoolsv.exe ~P C:\~I
6a4 SOUNDMAN.EXE ~P C:\~q
6b4 ~NGuardAlerter.exe ~P C:\~j\iolo\~N Mechanic Professional 6
6c4 shwiconem.exe idle C:\~j\Digital Media Reader
6d0 SpySweeperUI.exe ~P C:\~j\Webroot\Spy Sweeper
6f4 SM~NAnalyzer.exe ~P C:\~j\iolo\~N Mechanic Professional 6
6fc ctfmon.exe ~P C:\~I
0a8 Helper~S.exe ~P C:\~j\VZDRIVE
150 IoloSGCtrl.exe ~P C:\~j\iolo\~N Mechanic Professional 6
074 nvsvc32.exe ~P C:\~I
1b8 PRISMXL.SYS ~P C:\~j\Common Files\New Boundary\PrismXL
2e8 snmp.exe ~P C:\~I
3a4 symlcsvc.exe ~P C:\~j\Common Files\Symantec Shared\CCPD-LC
468 vssvc.exe ~P C:\~I
490 ~A ~P C:\~j\Webroot\Spy Sweeper
81c msfwsvc.exe ~P C:\~j\Microsoft ~q OneCare Live\Firewall
884 winss.exe ~P C:\~j\Microsoft ~q OneCare Live
a28 alg.exe ~P C:\~I
a8c wmiprvse.exe ~P C:\~I\wbem
afc notepad.exe ~P C:\~I
cf0 wuauclt.exe ~P C:\~I
da8 winssnotify.exe ~P C:\~j\Microsoft ~q OneCare Live
dfc wmiprvse.exe ~P C:\~I\wbem
850 SSU.EXE ~P C:\~j\Webroot\Spy Sweeper

cpu registers:
eax = 01170030
ebx = 005d4fb8
ecx = 004f9a2c
edx = 006b1150
esi = ~Q~Q
edi = 0283f7d8
eip = 011d4cc8
esp = 0283f28c
ebp = 0283f298

stack dump:
0283f28c 18 9c 4f 00 c8 f2 83 5c - 50 00 17 01 d8 f2 83 02 ..O....\P.......
0283f29c 7d 7e 50 00 e0 f2 83 02 - b4 4c 40 00 d8 f2 83 02 }~P......L@.....
0283f2ac 01 00 00 00 0e 00 00 00 - e4 f2 83 02 33 08 91 7c ............3..|
0283f2bc 00 00 00 00 00 00 00 00 - 00 00 40 5c 00 00 00 00 ..........@\....
0283f2cc bc f2 83 02 5c 7b ad 0a - c0 7d 50 00 34 f8 83 02 ....\{...}P.4...
0283f2dc d3 4f 5d 00 d8 f7 83 02 - 0c 4c 40 00 34 f8 83 02 .O]......L@.4...
0283f2ec 00 00 00 00 2e 32 48 00 - 50 76 99 0a f8 f3 83 02 .....2H.Pv......
0283f2fc 24 f3 83 02 30 f3 83 02 - 00 00 00 00 00 00 00 00 $...0...........
0283f30c 00 00 00 00 bf 37 90 7c - f8 f3 83 02 d8 f7 83 02 .....7.|........
0283f31c 28 f4 83 02 cc f3 83 02 - d8 f7 83 02 d8 37 90 7c (............7.|
0283f32c d8 f7 83 02 e0 f3 83 02 - 8b 37 90 7c f8 f3 83 02 .........7.|....
0283f33c d8 f7 83 02 28 f4 83 02 - cc f3 83 02 b3 4f 5d 00 ....(........O].
0283f34c 01 00 00 00 f8 f3 83 02 - d8 f7 83 02 60 78 93 7c ............`x.|
0283f35c f8 f3 83 02 d8 f7 83 02 - 28 f4 83 02 cc f3 83 02 ........(.......
0283f36c b3 4f 5d 00 4c fb 12 00 - f8 f3 83 02 7c f7 83 02 .O].L.......|...
0283f37c 70 09 91 7c c0 e4 97 7c - ef 40 91 7c bb 40 91 7c p..|...|.@.|.@.|
0283f38c 00 00 00 00 5c 7b ad 0a - 01 ee 47 00 06 00 00 00 ....\{....G.....
0283f39c 83 00 00 00 06 01 00 00 - 00 00 00 00 08 00 00 00 ................
0283f3ac 08 00 0a 00 88 3e 91 7c - 1a 02 00 00 00 00 00 00 .....>.|........
0283f3bc f0 f3 83 02 00 00 15 00 - 32 07 91 7c 41 00 00 00 ........2..|A...

main ~R ($494):
7c90eb94 ~i ~G
7e419416 USER32~r WaitMessage
004c3ad1 ~A Forms TApplication.Idle
004c2f97 ~A Forms TApplication.HandleMessage
005108c2 ~A SvcMgr T~SApplication.Run
006b0414 ~A WRSSSDK 391 ~J

~R $4fc:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l

~R $3e0 (TErrorEvent~R):
7c90eb94 ~i ~G
7c90e9be ~i Nt~K
7c8025c5 ~H ~KEx
7c80252d ~H ~K
00483880 ~A SyncObjs 1242 THandleObject.WaitFor
004d3bef ~A Errors 1344 TErrorEvent~R.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
006adc1f ~A Errors 1379 ~J

~R $6e8 (TVolumeInfoRefresher):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f9de0 ~A VolumeInfo 275 TVolumeInfoRefresher.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f9ca2 ~A VolumeInfo 244 TVolumeInfoRefresher.~o

~R $694 (~:flowers::
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f5f55 ~A ~O 932 ~B.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f5cf2 ~A ~O 853 ~B.~o

~R $714 (~n):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f6789 ~A ~O 1221 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

~R $718 (~n):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f6789 ~A ~O 1221 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

~R $720 (~n):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f6789 ~A ~O 1221 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

~R $724 (~n):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f6789 ~A ~O 1221 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

~R $728 (~n):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f6789 ~A ~O 1221 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

~R $730 (~n):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f6789 ~A ~O 1221 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

~R $734 (~n):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f6789 ~A ~O 1221 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

~R $738 (~n):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f6789 ~A ~O 1221 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

~R $740 (~n):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
004f6789 ~A ~O 1221 ~n.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
004f62be ~A ~O 1033 ~n.~o

~R $56c (TCSIDLRefresh~R):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0056619a ~A CSIDLRefresh~R 97 TCSIDLRefresh~R.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
00566043 ~A CSIDLRefresh~R 57 TCSIDLRefresh~R.~o

~R $760 (T~TMgr):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
005e58ba ~A ~TNotifierMgr 362 T~TMgr.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
005e54f7 ~A ~TNotifierMgr 286 T~TMgr.~o

~R $770 (~m7Manager):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068f059 ~A ~tSpyFS 2056 ~m7Manager.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068eebb ~A ~tSpyFS 2002 ~m7Manager.~o

~R $540 (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $76c (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $768 (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $77c (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $708 (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $748 (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $704 (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $764 (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $2b0 (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $798 (~m7):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0068e7ae ~A ~tSpyFS 1877 ~m7.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
0068e62e ~A ~tSpyFS 1824 ~m7.~o

~R $7ac (TMemManagement~R):
7c90eb94 ~i ~G
7c90e9be ~i Nt~K
7c8025c5 ~H ~KEx
7c80252d ~H ~K
006a4678 ~A AVEngine 3532 TMemManagement~R.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
006a45c3 ~A AVEngine 3516 TMemManagement~R.~o

~R $758 (TExternalSignalWatcher): <priority:-1>
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
00634b01 ~A SelfProtectCommon 121 TExternalSignalWatcher.CheckForSignal
00634d98 ~A SelfProtectCommon 189 TExternalSignalWatcher.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
00634dcb ~A SelfProtectCommon 195 TExternalSignalWatcher.~o

~R $75c (T~S~s~R):
7c90eb94 ~i ~G
7c90e286 ~i NtReadFile
7c80186f ~H ReadFile
77e37dc7 ADVAPI32~r ~s~SCtrlDispatcherA
00510723 ~A SvcMgr T~S~s~R.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~k ($494) at:
005106bb ~A SvcMgr T~S~s~R.~o

~R $754:
7c90eb94 ~i ~G
7c90e9be ~i Nt~K
7c8025c5 ~H ~KEx
7c80252d ~H ~K
00474184 ~A ~g T~R.WaitFor
0050fb35 ~A SvcMgr T~S.Do~s
0050fa64 ~A SvcMgr T~S.Main
0050ffbb ~A SvcMgr T~SApplication.Dispatch~SMain
0050fd6a ~A SvcMgr ~SMain
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $75c (T~S~s~R) at:
77deb355 ADVAPI32~r

~R $7b0 (T~S~R):
7c90eb94 ~i ~G
7e42e03d USER32~r GetMessageA
0050f2c0 ~A SvcMgr T~S~R.ProcessRequests
006a8385 ~A WRSSSDK~S 287 TsvcWRSSSDK.~S~C
0050f130 ~A SvcMgr T~S~R.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $754 at:
0050f02b ~A SvcMgr T~S~R.~o

~R $804:
7c90eb94 ~i ~G
7c90e397 ~i NtReplyWaitReceivePortEx
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $7b0 (T~S~R) at:
77e8760d RPCRT4~r

~R $80c:
7c90eb94 ~i ~G
7c90d85a ~i NtDelayExecution
7c8023e7 ~H SleepEx
7c80244c ~H Sleep
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $7b0 (T~S~R) at:
7750cc4a ole32~r

~R $9a8:
7c90eb94 ~i ~G
7c90e397 ~i NtReplyWaitReceivePortEx
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $804 at:
77e8760d RPCRT4~r

~R $a44:
7c90eb94 ~i ~G
7c90d85a ~i NtDelayExecution
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
77e8760d RPCRT4~r

~R $acc:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l

~R $ad0:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
769c8951 userenv~r

~R $ad4 (TRestoredFiles~R): <priority:-1>
7c90eb94 ~i ~G
7c90e9be ~i Nt~K
7c8025c5 ~H ~KEx
7c80252d ~H ~K
005fc12a ~A RestoredFileList 317 TRestoredFiles~R.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
005fb26b ~A RestoredFileList 69 TRestoredFiles~R.~o

~R $adc (T~tKeylogger~R):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0063324a ~A ~tKeylogger~R 129 T~tKeylogger~R.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
00633017 ~A ~tKeylogger~R 75 T~tKeylogger~R.~o

~R $b04:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
58ee3fd4 ~h

~R $b08:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
58ee3fd4 ~h

~R $b28:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
58ee3fd4 ~h

~R $b2c:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
58ee3fd4 ~h

~R $b30:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
58ee3fd4 ~h

~R $b34:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
58ee3fd4 ~h

~R $b38:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
58ee3fd4 ~h

~R $cec:
7c90eb94 ~i ~G
7c90e397 ~i NtReplyWaitReceivePortEx
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $9a8 at:
77e8760d RPCRT4~r

~R $d44 (TDirectoryWatcher):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
005e325c ~A Watcher 141 ~u
005e32e8 ~A Watcher 162 ~U.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $d3c at:
005e2ff7 ~A Watcher 72 ~U.~o

~R $da0 (T~tMessenger~S~R):
7c90eb94 ~i ~G
7c90d85a ~i NtDelayExecution
7c8023e7 ~H SleepEx
7c80244c ~H Sleep
006243a6 ~A ~tMessenger~S 225 T~tMessenger~S~R.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $804 at:
0062414e ~A ~tMessenger~S 116 TWinSxS\x86_Microsoft.~q.Common-Controls_65

~R $dc4 (TDirectoryWatcher):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
005e325c ~A Watcher 141 ~u
005e32e8 ~A Watcher 162 ~U.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $d3c at:
005e2ff7 ~A Watcher 72 ~U.~o

~R $fb0 (THostsFileResolver~R):
7c90eb94 ~i ~G
7c90e9be ~i Nt~K
7c8025c5 ~H ~KEx
7c80252d ~H ~K
006227d0 ~A HostsFile 954 THostsFileResolver~R.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $804 at:
00622396 ~A HostsFile 835 THostsFileResolver~R.~o

~R $fbc (TDirectoryWatcher):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
005e325c ~A Watcher 141 ~u
005e32e8 ~A Watcher 162 ~U.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $804 at:
005e2ff7 ~A Watcher 72 ~U.~o

~R $d0:
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $710 (~n) at:
77a8a2fb crypt32~r

~R $340 (TDirectoryWatcher):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
005e325c ~A Watcher 141 ~u
005e32e8 ~A Watcher 162 ~U.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $cec at:
005e2ff7 ~A Watcher 72 ~U.~o

~R $51c (TRegistryWatcher):
7c90eb94 ~i ~G
7c90e9a9 ~i ~l
7c8094dc ~H ~LEx
7c80a070 ~H ~L
005e325c ~A Watcher 141 ~u
005e32e8 ~A Watcher 162 ~U.~C
0044fd5b ~A ~f ~M~C
00473b20 ~A ~g ~F
004053d4 ~A ~N 36 ~c
0044fc3d ~A ~f ~E
0044fca7 ~A ~f ~e
>> ~od by ~R $cec at:
005e2ff7 ~A Watcher 72 ~U.~o

hardware:
+ Computer
- ACPI Uniprocessor PC
+ Disk drives
- Generic USB CF Reader USB Device
- Generic USB MS Reader USB Device
- Generic USB SD Reader USB Device
- Generic USB SM Reader USB Device
- ST3100011A
+ Display adapters
- NVIDIA GeForce 6100 (driver 8.1.3.3)
+ DVD/CD-ROM drives
- HL-DT-ST DVDRRW GSA-2166D USB Device
- TSSTcorp CDW/DVD TS-H492C
+ IDE ATA/ATAPI controllers
- Primary IDE Channel
- Primary IDE Channel
- Secondary IDE Channel
- Secondary IDE Channel
- Standard Dual Channel PCI IDE Controller
- Standard Dual Channel PCI IDE Controller
+ Imaging devices
- ALARIS QuickVideo weeCam USB
+ Keyboards
- Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
+ Mice and other pointing devices
- PS/2 Compatible Mouse
+ Modems
- Communications cable between two computers <--------------- I am trying to direct connect 2 PCs
- PCI Soft Data Fax Modem with SmartCP (driver 7.32.0.0)
+ Monitors
- Plug and Play Monitor
+ Network adapters
- NVIDIA nForce Networking Controller (driver 50.0.9.0)
+ NVIDIA Network Bus Enumerator
- NVIDIA Network Bus Enumerator (driver 50.0.9.0)
+ Ports (COM
"Restore an environmentally sustainable and economically just America"

BC AdBot (Login to Remove)

 


m



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users