X-RayPc

[Boris]

http://www.x-raypc.com/ :unsure:

Anyone got any views/info on this ???

[Scarecrow Man]

Doesn't look all that much differen't than HijackThis.

Seems faily new still.. Too many unknowns. I assume this will change as it becomes more used. (if it does)

Here's my log and a screenshot if anyone is interested:

Logfile of X-RayPc Build 38285 (Installed 1102604507)

Scan saved at 12/9/2004 3:03:07 PM

Registry Settings:

IE Start Page (User) : http://www.windowsforum.org/

IE Start Page (Global) : http://www.microsoft.com/isapi/redir.dll?p...B_PVER}&ar=home

IE Blank Page : C:\WINNT\system32\blank.htm

IE Default Page : http://www.microsoft.com/isapi/redir.dll?p...er=6&ar=msnhome

IE Search Page (User) : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

IE Search Page (Global) : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

IE Default Search : http://www.microsoft.com/isapi/redir.dll?p...er=6&ar=msnhome

HOSTS Directory : %SystemRoot%\System32\drivers\etc

Running processes:

C:\WINNT\system32\services.exe (89360 cfed2d28f5b8a24127e9e06043070643)

C:\WINNT\system32\lsass.exe (33552 0c13d582edaf90cbea454a1ac535b913)

C:\WINNT\system32\svchost.exe (7952 9e64ad53cfd9da2d22e8a924f8c6e62c)

C:\WINNT\system32\spoolsv.exe (45328 987daf317b917cfc973de8364d62a76c)

C:\WINNT\System32\svchost.exe (7952 9e64ad53cfd9da2d22e8a924f8c6e62c)

C:\Program Files\Symantec\Ghost\ngserver.exe (693416 7192b0ed028f5c79af6821d4a40a602f)

C:\WINNT\System32\nvsvc32.exe (61440 2b8fbd3e1e364871e06cd29c1424ddad)

C:\WINNT\system32\regsvc.exe (68368 250c4ce389783fa2398e3afa4317008c)

C:\WINNT\system32\MSTask.exe (119568 37d7411389a10d7f3abfe12b247b1ac5)

C:\WINNT\System32\WBEM\WinMgmt.exe (196706 05b2001e1bc653fd6091e741b46f71b4)

C:\WINNT\System32\mspmspsv.exe (53248 668056d5c3c11ab7d266819a96b964e8)

C:\WINNT\system32\svchost.exe (7952 9e64ad53cfd9da2d22e8a924f8c6e62c)

C:\Program Files\Symantec\Ghost\bin\dbserv.exe (45056 a49e8b36445d8af1772e3b84346ed1d1)

C:\Program Files\Symantec\Ghost\bin\rteng7.exe (41984 f00c974a2fd3666aaea6f6ad8bfacd1c)

C:\WINNT\Explorer.EXE

C:\Program Files\Analog Devices\SoundMAX\Smtray.exe (69632 616ed292690ca2df0181dd71c6c6dcba)

C:\WINNT\system32\ICO.EXE (45056 cd25b3324872fc15216e33e6622872f5)

C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe (32881 bed6eddbf28db980aa8d3a42d4a05586)

C:\Program Files\Iconoid\iconoid.exe (90112 159045cb3582736f9db99175bd5851f9)

C:\Program Files\MSN Messenger\MsnMsgr.Exe (4882432 f914c780dc4a3eb6eec812f0dddc0e3a)

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (1038336 58f7e6434d285f4c98ad3621e0bd8c8d)

C:\Program Files\Mozilla Firefox\firefox.exe (6578276 0a614599f8e9faa5069fea6326a25d65)

C:\Documents and Settings\Administrator\Desktop\xraypc\x-raypc.exe (332024 78dbd24a52b7812b2a855c741760b372)

O2 - BHO: (AcroIEHlprObj Class) - {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (54248 fc7850324464e4d19a24a03d882b5cc4)

O2 - BHO: (no name) - {53707962-6f74-2d53-2644-206d7942484f} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (744960 abf5ba518c6a5ed104496ff42d19ad88)

O3 - Toolbar: &Radio {8e718888-423f-11d2-876e-00a0c9082467} - C:\WINNT\system32\msdxm.ocx (844048 71b4ec7ee27a6935d3c20b98f0d8ddf9)

O4 - HKLM\..\Run: [synchronization Manager] C:\WINNT\system32\mobsync.exe (111376 9b2f5b9e745deaaa57fb78329ed03061)

O4 - HKLM\..\Run: [NvCplDaemon]

O4 - HKLM\..\Run: [smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe (69632 616ed292690ca2df0181dd71c6c6dcba)

O4 - HKLM\..\Run: [nwiz] C:\WINNT\system32\nwiz.exe (364544 7e84f46c1205996fb1b93a590fc397ba)

O4 - HKLM\..\Run: [uC_SMB]

O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] C:\WINNT\system32\ICO.EXE (45056 cd25b3324872fc15216e33e6622872f5)

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe (32881 bed6eddbf28db980aa8d3a42d4a05586)

O4 - HKLM\..\Run: [NGServer] C:\Program Files\Symantec\Ghost\ngserver.exe (693416 7192b0ed028f5c79af6821d4a40a602f)

O4 - HKLM\..\Run: [EPSON Stylus C82 Series] C:\WINNT\system32\spool\DRIVERS\W32X86\3\E_S0HIC1.EXE (99840 66c912f312505101c004e30de765d255)

O4 - HKCU\..\Run: [iconoid] C:\Program Files\Iconoid\iconoid.exe (90112 159045cb3582736f9db99175bd5851f9)

O4 - HKCU\..\Run: [MsnMsgr] C:\Program Files\MSN Messenger\MsnMsgr.Exe (4882432 f914c780dc4a3eb6eec812f0dddc0e3a)

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (1038336 58f7e6434d285f4c98ad3621e0bd8c8d)

O4 - HKLM\..\ShellServiceObjectDelayLoad: [Network.ConnectionTray] C:\WINNT\system32\NETSHELL.dll (477456 fc1783b19a718444de5f6fe5c9143079)

O4 - HKLM\..\ShellServiceObjectDelayLoad: [WebCheck] C:\WINNT\system32\webcheck.dll (258048 f2786dc35401fceb401a0f5810e22ab6)

O4 - HKLM\..\ShellServiceObjectDelayLoad: [sysTray] C:\WINNT\system32\stobject.dll (81168 34660338069fd5665b921ecffc96e0ce)

O16 - DPF: (DirectAnimation Java Classes)- file://C:\WINNT\Java\classes\dajava.cab - C:\WINNT\Downloaded Program Files\DirectAnimation Java Classes.osd (697 5e61262ec8e0940cf774788991219153)

O16 - DPF: (Microsoft XML Parser for Java)- file://C:\WINNT\Java\classes\xmldso.cab - C:\WINNT\Downloaded Program Files\Microsoft XML Parser for Java.osd (1162 0f7667aa2dfebb40816a75bfa972166d)

O16 - DPF: {8ad9c840-044e-11d1-b3e9-00805f499d93} (Java Plug-in 1.4.2_05)- http://java.sun.com/products/plugin/autodl...indows-i586.cab - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll (65650 174488c8877fa852448d1937c322aabb)

O16 - DPF: {9f1c11aa-197b-4942-ba54-47a8489bb47f} (Update Class)- http://v4.windowsupdate.microsoft.com/CAB/...38210.337650463 - C:\WINNT\Downloaded Program Files\iuctl.inf (1096 bd5daf951a3c65ac4a3ca26a23f9e5f6)

O16 - DPF: {cafeefac-0014-0002-0005-abcdeffedcba} (Java Plug-in 1.4.2_05)- http://java.sun.com/products/plugin/autodl...indows-i586.cab - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll (65650 174488c8877fa852448d1937c322aabb)

O16 - DPF: {d27cdb6e-ae6d-11cf-96b8-444553540000} (Shockwave Flash Object)- http://download.macromedia.com/pub/shockwa...ash/swflash.cab - C:\WINNT\Downloaded Program Files\swflash.inf (3759 60b7c507c4804edf26cc2a3066899c29)

I do like the addition of the md5 checksum though.