crunchie 990 Most Valuable Poster Team Colleague Featured Poster

Ran a log through the scanner and these are the results:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.flhrhdisywxtypjrrhipzzo....mBaXrZ8OdK1.php


Safe.       This page has been identified as safe.


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ggqtkweturoedmnnqgrlvj.i...E96VBQZoo4.html


Safe.       This page has been identified as safe.


Both these entries are from a LOP infection, but marked as 'safe' by the scanner.


O2 - BHO: (no name) - {EA15FA6B-EB9F-C0CB-3D91-8708FA5BC5AF} - C:\DOCUME~1\Chris\APPLIC~1\ACIDGR~1\bin coal.exe


Also added by LOP and marked as unknown by the online scanner, as were two other LOP related entries.


O4 - HKLM\..\RunServices: [Windows Session Manager] smss32.exe
Unknown


O4 - HKLM\..\RunServices: [Microsoft DirectX] wuafmgr.exe
Unknown


Both entries are known to be bad, but marked as unknown.

My intent is to show the unreliability of automated scanners, without also using a pair of eyes :).
These scanners can give you an idea of what is there, but IMO are no match for the human touch.