quorum log
quorum log The log where the quorum resource stores data. This data is maintained by the clustering software. Also known as the recovery log or change log.

log file
log file A file that stores messages generated by an application, service, or operating system. These messages are used to track the operations performed. For example, Web servers maintain log files listing every request made ...

security log
security log An event log containing information on security events that are specified in the audit policy.

trace log
trace log A type of log generated when the user selects a trace data provider using Performance. Trace logs differ sdff from counter-data logs in that they measure data continuously rather than take periodic samples.

Event Log service
Event Log service A service that records events in the system, security, and application logs. The Event Log service is located in Event Viewer.

Boot Logging
Boot Logging A process in which a computer that is starting (booting) creates a log file that records the loading of each device and service. The log file is called Ntbtlog.txt, and it is saved ...

log on
log on To begin using a network by providing a user name and password that identifies a user to the network.

Key Logger
Key Logger Any program that records keystrokes is, technically, a key logger. The term tends to be used in malware circles for programs that surreptitiously record keystrokes and then make the log of keyboard activity ...

logon right
logon right A user right that is assigned to a user and that specifies the ways in which a user can log on to a system. An example of a logon right is the right ...

winlogon.exe
[winlogon.exe]
Process File: winlogon or winlogon.exe
Process Name: Windows Logon Process
Description: Windows NT logon utility that manages user logons and logoffs. The utility prompts you for the password when you log on and allows you to ...

Example of a clean Hosts Log
Example of a clean Hosts Log # Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP / IP for Windows.
#
# This file contains the mappings of IP addresses to host ...

Re: HijackThisLog Analysis - Evon
Re: HijackThisLog Analysis - Evon Date: Thursday, 17 June, 2004 7:10 PM As for you log, it looks pretty clean.  The only entry that need attention is... O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BackWeb-8876480.exe BackWeb-8876480.exe is a streaming web application. ...

How to easily Bypass the Windows Vista Boot Logon Screen
How to easily Bypass the Windows Vista Boot / Logon Screen? This is nothing more than simple account management. You will have to click the Start sphere, then enter "cmd" in the search box. In ...

Ad-Aware Log
Lavasoft Ad-aware Personal Build 6.181
Logfile created on  :Tuesday, June 15, 2004 10:33:04 AM
Created with Ad-aware Personal, free for private use.
Using reference-file :01R319 15.06.2004 #:24 [save.exe]
    FilePath           : C:\Program Files\Save\
    ThreadCreationTime : 6-15-2004 2:16:57 AM
    BasePriority       : ...

Anti Spyware Removal Log
Anti Spyware Removal Log Occurred on: 02 / 09 / 2005 at 00:37:08 Internet Explorer URL for Search Bar has been allowed to be changed from website: byxsrzzuenamcqba.net / H5HFj1ucLs37QpjCIwwdNlcJzAX7byZOlE1WKl2QHP 60osqIjAWX0gLybIZeLR0P.jpg to website: wtwzibfpnbdgyuix.com / H5HFj1ucLs37QpjCIwwdNlc JzAX7byZOlE1WKl2QHP4QKotQ4XszZwLybIZeLR0P.html. ...

Mcafee Log
Review Mcafee Scan Log: 9/4/2003 3:03:59 PM  C:\WINXP\system32\wins\DLLHOST.EXE W32/Nachi.worm
C:\System Volume Information\_restore{51AA6DBF-81DD-4C9D-A65D-E26C6DD1D3D5}\RP138\A0034475.EXE W32/Nachi.worm 6/8/2004 11:02:21 AM Move failed (Delete failed)   C:\Documents and Settings\SGNLW\Local Settings\Temp\ps_install-mt.exe Adware-PurityScan
C:\WINXP\system32\wintsu.exe Adware-PurityScan
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m 6/14/2004 2:57:41 PM C:\Documents and Settings\SGNLW\Local Settings\Temp\VVSN_CLIC0404Inst.exe Adware-SaveNow
C:\WINXP\system32\wintsu.exe Adware-PurityScan
C:\Program Files\VVSN\URL1\SAVE-SYNCm-WHSE_sb.min.g2Inst.exe Adware-SaveNow
C:\Documents and Settings\SGNLW\Local Settings\Temp\B7C.WUT\WUSearch.cab\Search.exe Adware-SaveNow
6/14/2004 2:58:51 PM Move failed (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET15.tmp Adware-SaveNow
6/14/2004 2:58:53 PM Move failed (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET16.tmp Adware-SaveNow
6/14/2004 2:59:41 ...

Follow-up Log file
Follow-up Log file Logfile of HijackThis v1.97.7
Scan saved at 10:00:06 AM, on 10 / 8 / 2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes:
C: \ WINNT \ System32 \ smss.exe
C: \ WINNT ...

Clean Log
Here is the log after the cleaning process: Logfile of HijackThis v1.97.7
Scan saved at 10:14:49 AM, on 8/07/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HiJackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http:??www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R0 ...

Re: HijackThisLog Analysis - Tipp87
Re: HijackThisLog Analysis - Tipp87 Date: Tuesday, 31 August, 2004 11:21 AM This log looks clean.  Here are some interesting observation: C:\WINDOWS\SM1BG.EXE ZCfgSvc.exe TPPALDR.EXE sti_ci.dll Client.exe You may want to review this AD_AWARE procedure and then analyse the log again. Original log but with private ...

Ad-aware log
Lavasoft Ad-aware Personal Build 6.181
Logfile created on  :Tuesday, June 15, 2004 11:48:12 AM
Created with Ad-aware Personal, free for private use.
Using reference-file :01R319 15.06.2004 Registry scan Alexa Object recognized!
    Type               : RegKey
    Data               :
    Rootkey            : HKEY_LOCAL_MACHINE
    ...

Re: HijackThisLog Analysis - Todds
Re: HijackThisLog Analysis - Todds Date: 1 August 2004 Question: Please HELP!! We think we deleted approx 70 worms/viruses from our computer, but have not completely taken it back. Please let us know which entries to delete, ...

Logfile of HijackThis v1.98.2 - Anonymous
Logfile of HijackThis v1.98.2 - Anonymous Your log looks clean.  The following are some uncommon software, uninstall them if you are not frequently used: GhostTyp.exe (Typing Tools from sc-data.de) clarify.exe (small wrapper that execute a certain batch file ...

Logfile of HijackThis v1.98.2 - Rasandy
Logfile of HijackThis v1.98.2 - Rasandy Your log looks clean.  The following are some uncommon software, uninstall them if you are not frequently used: PicasaMediaDetector.exe Media detector for Picasa's automatic photo organizer Original Log Posted: Scan saved at 09:20:28, ...

Log 2
I made several changes between when I sent the first log and when you responded. I am still having problems after making
the changes you suggested. I have a new log attached below for you to ...

Re: HijackThisLog Analysis - Jeff
Re: HijackThisLog Analysis - Jeff Date: Wednesday, 14 July, 2004 11:39 PM
This log looks clean. sstray.exe NVIDIA nForce Taskbar Utility. sstray.exe is located in "C:\WINDOWS\SYSTEM\" on Windows 95/98/ME, "C:\WINNT\SYSTEM32\" on Windows NT/2000 and "C:\WINDOWS\SYSTEM32\" on Windows XP. Ptipbmf.dll Probably ...

 

Sponsored Ads