#58 Analyze This Please!!!!

v1.0_(example)
closed
9
2013-07-22
2013-07-09
Stone Camillo
No

look at attachment!!!

1 Attachments

Discussion

  • Hi,

    Please delete/fix the following entries using hijacthis:
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=119776&babsrc=HP_ss_din2g&mntrId=4A7020C9D0D780 98
    O4 - HKUS\S-1-5-18..\Run: [SearchProtect] \SearchProtect\bin\cltmng.exe (User 'SYSTEM')
    O4 - HKUS\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
    O4 - HKUS.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
    O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
    O23 - Service: Search Protect by Conduit Updater (CltMngSvc) - Conduit - C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe

     
    • status: open --> pending
     
    • status: pending --> closed
     
  • no updates. case closed, can be re-open if needed.