View Single Post
  #1  
Old Jan 04, 2004, 12:36 PM
MasterMind MasterMind is offline
Veteran
 
Join Date: May 2001
Location: Pune, Maharashtra, India
Posts: 3,219
Default Who's creating Sober.Log at Startup? [; ; winME]

For last few days this file (sober.log) is getting created/ appended on C: root. Don't know which application is involved in this. Antivirus is Quick Heal 7 and Tiny Personal Firewall

Contents of this file;

Sober : sys Dir (C:\WINDOWS\SYSTEM)
Sober : HKLM dwValues (11)
Sober : i (0) [ScanRegistry]=>[C:\WINDOWS\scanregw.exe /autorun]
Sober : szData (C:\WINDOWS\SCANREGW.EXE /AUTORUN)
Sober : i (1) [TaskMonitor]=>[C:\WINDOWS\taskmon.exe]
Sober : szData (C:\WINDOWS\TASKMON.EXE)
Sober : i (2) [PCHealth]=>[C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s]
Sober : szData (C:\WINDOWS\PCHEALTH\SUPPORT\PCHSCHD.EXE -S)
Sober : i (3) [SystemTray]=>[SysTray.Exe]
Sober : szData (SYSTRAY.EXE)
Sober : i (4) [LoadPowerProfile]=>[Rundll32.exe powrprof.dll,LoadCurrentPwrScheme]
Sober : szData (RUNDLL32.EXE POWRPROF.DLL,LOADCURRENTPWRSCHEME)
Sober : i (5) [Tweak UI]=>[RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp]
Sober : szData (RUNDLL32.EXE TWEAKUI.CPL,TWEAKMEUP)
Sober : i (6) [Resume copy]=>[copyfstq.exe /startup]
Sober : szData (COPYFSTQ.EXE /STARTUP)
Sober : i (7) [Quick Heal e-mail Protection]=>[C:\PROGRA~1\QUICKH~1\MailSvr.exe]
Sober : szData (C:\PROGRA~1\QUICKH~1\MAILSVR.EXE)
Sober : i (8) [QHFW]=>[C:\PROGRA~1\QUICKH~1\DOTBK.EXE]
Sober : szData (C:\PROGRA~1\QUICKH~1\DOTBK.EXE)
Sober : i (9) [QH Office 2K Check]=>[C:\PROGRA~1\QUICKH~1\O2KCHECK.EXE /CHECK]
Sober : szData (C:\PROGRA~1\QUICKH~1\O2KCHECK.EXE /CHECK)
Sober : i (10) [Quick Heal On-Line Protection]=>[C:\PROGRA~1\QUICKH~1\CATEYE.EXE /start]
Sober : szData (C:\PROGRA~1\QUICKH~1\CATEYE.EXE /START)