Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:11:21, on 2008-10-12
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
 
Running processes:
C:\\WINDOWS\\System32\\smss.exe
C:\\WINDOWS\\system32\\winlogon.exe
C:\\WINDOWS\\system32\\services.exe
C:\\WINDOWS\\system32\\lsass.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\WINDOWS\\system32\\spoolsv.exe
C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2009\\avp.exe
C:\\Program Files\\cFosSpeed\\spd.exe
C:\\WINDOWS\\system32\\nvsvc32.exe
C:\\WINDOWS\\system32\\PnkBstrA.exe
C:\\WINDOWS\\system32\\PnkBstrB.exe
C:\\Program Files\\Spyware Terminator\\sp_rsser.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\WINDOWS\\RTHDCPL.EXE
C:\\Program Files\\cFosSpeed\\cFosSpeed.exe
C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2009\\avp.exe
C:\\Program Files\\DAEMON Tools Pro\\DTProAgent.exe
C:\\Program Files\\iolo\\System Mechanic 6\\SMSystemAnalyzer.exe
C:\\Documents and Settings\\Marek\\Ustawienia lokalne\\Dane aplikacji\\Google\\Update\\GoogleUpdate.exe
C:\\Program Files\\SAGEM\\SAGEM F@st 800-840\\dslmon.exe
C:\\Program Files\\Stardock\\ObjectDock\\ObjectDock.exe
C:\\WINDOWS\\system32\\wscntfy.exe
C:\\WINDOWS\\system32\\wuauclt.exe
C:\\WINDOWS\\explorer.exe
C:\\Program Files\\Trend Micro\\HijackThis\\HijackThis.exe
 
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://onet.pl/
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Łącza
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll
O4 - HKLM\\..\\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\\..\\Run: [NvCplDaemon] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup
O4 - HKLM\\..\\Run: [NvMediaCenter] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\\..\\Run: [Media Codec Update Service] C:\\Program Files\\Essentials Codec Pack\\update.exe -silent
O4 - HKLM\\..\\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\\..\\Run: [Adobe Reader Speed Launcher] \"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\"
O4 - HKLM\\..\\Run: [cFosSpeed] C:\\Program Files\\cFosSpeed\\cFosSpeed.exe
O4 - HKLM\\..\\Run: [AVP] \"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2009\\avp.exe\"
O4 - HKCU\\..\\Run: [DAEMON Tools Pro Agent] \"C:\\Program Files\\DAEMON Tools Pro\\DTProAgent.exe\"
O4 - HKCU\\..\\Run: [SMSystemAnalyzer] \"C:\\Program Files\\iolo\\System Mechanic 6\\SMSystemAnalyzer.exe\"
O4 - HKCU\\..\\Run: [Google Update] \"C:\\Documents and Settings\\Marek\\Ustawienia lokalne\\Dane aplikacji\\Google\\Update\\GoogleUpdate.exe\" /c
O4 - HKUS\\S-1-5-19\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'USŁUGA LOKALNA\')
O4 - HKUS\\S-1-5-20\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'USŁUGA SIECIOWA\')
O4 - HKUS\\S-1-5-18\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'SYSTEM\')
O4 - HKUS\\.DEFAULT\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'Default user\')
O4 - Startup: Stardock ObjectDock.lnk = C:\\Program Files\\Stardock\\ObjectDock\\ObjectDock.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\\Program Files\\Common Files\\Adobe\\Calibration\\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = C:\\Program Files\\SAGEM\\SAGEM F@st 800-840\\dslmon.exe
O8 - Extra context menu item: Dodaj do listy blokowanych banerów - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2009\\ie_banner_deny.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll
O9 - Extra \'Tools\' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll
O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2009\\SCIEPlgn.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O9 - Extra \'Tools\' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab
O17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{4A1E6320-6957-4476-8892-F3F2C274A313}: NameServer = 83.238.255.76 213.241.79.37
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 2009\\avp.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\\Program Files\\cFosSpeed\\spd.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\\Program Files\\Common Files\\InstallShield\\Driver\\1150\\Intel 32\\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\\WINDOWS\\system32\\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\\WINDOWS\\system32\\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\\WINDOWS\\system32\\PnkBstrB.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\\Program Files\\Spyware Terminator\\sp_rsser.exe
 
--
End of file - 5729 bytes