Page 2 of 2 FirstFirst 12
Results 11 to 14 of 14

Thread: OptixPro

  1. #11
    Senior Member
    Join Date
    Feb 2002
    Posts
    1,210
    oops.. you missed one.. this is part of coolwebsearch.. run cwshredder.. and delete this bootconf file after a reboot.

    O4 - HKLM\..\Run: [Internat Conf] C:\WINDOWS\SYSTEM\bootconf.exe

    read some of the links in this google search

    ohh.. and this.. DataSpy Network X
    O4 - HKLM\..\Run: [WinDSNX] C:\WINDOWS\SYSTEM\WINVTOL.EXE

    not much in revealed in this google search

    Name: DataSpy Network X
    Aliases: DSNX, Win32.DSNX, Backdoor.DSNX, BackDoor.UK, Trojan.Win32.DSNX, Troj/Dsnx,
    Ports: 113, 1025, 1026, 1027, 1028, 6667 (ports can be changed)
    Files: Dsnx0.3b.zip - Dsnx0.4b.zip - 159,615 bytes Dataspy0.4b.zip - 164,970 bytes Dsnx.exe - Dsnxeditor.exe - Editserver.exe - 217,088 bytes Runme.exe - 7,477 bytes Server.exe - Upxscrambler.exe - 17,981 bytes Winxvfn.exe - Winsqli.exe - Winvtol.exe - Win****.exe - [**** is random characters] - 41,472 bytes - 83,968 bytes
    Created: Mar 2001
    Requires:
    Actions: Remote Access / Keylogger / Downloading trojan / Port scanner / DoS tool / IRC trojan / Port proxy / Hacking tool / Destructive trojan
    Registers: HKEY_LOCAL_MACHINE\\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
    I see you installed a new printer program ?

    C:\P&PLUS\PNPLUS.EXE

    not much in google on that..

    and I think you really should upgrade to IE 6..

    there are a bunch of things in your log that you don't really need running at startup, I would take the time to research them and disable via your msconfig startup tab.

  2. #12
    Senior Member therenegade's Avatar
    Join Date
    Apr 2003
    Posts
    400
    k...I'd originally disabled the wvtol entry too..just put it back cos I thought I'd deleted everything related to Optix...*sigh* btw..how much does google pay you?:P,jk
    n yeah,I'll be switching to IE6 pretty soon..thnx

  3. #13
    Senior Member
    Join Date
    Feb 2002
    Posts
    1,210
    oh yeah.. one of the steps before running a hijackthis log (which i should of mentioned) is re-enabling entries in your msconfig so that hijackthis can see them.. also, making sure that windows explorer is set to view hidden files.. that one can be a killer sometimes if you don't.

    and speaking of getting paid by google.. I did consider that.. google has an answers section and they DO pay experts to google and answer other's questions.. alas.. I really don't think I have what it takes to get a job there.

  4. #14
    Senior Member therenegade's Avatar
    Join Date
    Apr 2003
    Posts
    400
    lol,thnx mate..you've been a major help..cheers
    oh n bout that google job...keep at it..hehe

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •