|
Re: Browser hijacker, backdoor.haxdoor, etc
the output of query.bat :
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr
Type REG_DWORD 0x2
Start REG_DWORD 0x0
ErrorControl REG_DWORD 0x1
Tag REG_DWORD 0x4
DisplayName REG_SZ Sistem Geri Yükleme Süzeç Sürücüsü
Group REG_SZ FSFilter System Recovery
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Parameters
FirstRun REG_DWORD 0x0
DontBackup REG_DWORD 0x0
MachineGuid REG_SZ {21582CFF-E91B-4F54-83B7-B1DE856A59DC}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Security
Security REG_BINARY 01001480900000009C000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020060000400000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D01020001010000000000050B00000000001800FD01020001020000000000052000000023020000010100000000000512000000010100000000000512000000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Enum
0 REG_SZ Root\LEGACY_SR\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1
Last edited by Ioo; 08-11-2007 at 08:15 AM.
|