1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
26.
27.
28.
29.
30.
31.
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.
43.
44.
45.
46.
47.
48.
49.
50.
51.
52.
53.
54.
55.
56.
57.
58.
59.
60.
61.
62.
63.
64.
65.
66.
67.
68.
69.
70.
71.
72.
73.
74.
75.
76.
77.
78.
79.
80.
81.
82.
83.
84.
85.
86.
87.
88.
89.
90.
91.
92.
93.
94.
95.
96.
97.
98.
99.
100.
101.
102.
103.
104.
105.
106.
107.
108.
109.
110.
111.
112.
113.
114.
115.
116.
117.
118.
119.
120.
121.
122.
123.
124.
125.
126.
127.
128.
129.
130.
131.
132.
133.
134.
135.
136.
137.
138.
139.
140.
141. | Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:12:21, on 2010-07-30
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal
Running processes:
C:\\WINDOWS\\System32\\smss.exe
C:\\WINDOWS\\system32\\winlogon.exe
C:\\WINDOWS\\system32\\services.exe
C:\\WINDOWS\\system32\\lsass.exe
C:\\WINDOWS\\system32\\nvsvc32.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\system32\\spoolsv.exe
C:\\Program Files\\ESET\\ESET Smart Security\\ekrn.exe
D:\\Program Files\\LogMeIn Hamachi\\hamachi-2.exe
C:\\Program Files\\Java\\jre6\\bin\\jqs.exe
C:\\Program Files\\Common Files\\LogiShrd\\LVMVFM\\LVPrcSrv.exe
D:\\Program Files\\Sony Ericsson\\Sony Ericsson PC Suite\\SupServ.exe
C:\\WINDOWS\\system32\\PnkBstrA.exe
C:\\WINDOWS\\system32\\PnkBstrB.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\system32\\wbem\\wmiapsrv.exe
C:\\WINDOWS\\Explorer.EXE
C:\\WINDOWS\\RTHDCPL.EXE
C:\\WINDOWS\\system32\\RUNDLL32.EXE
C:\\Program Files\\Winamp\\winampa.exe
C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe
C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe
C:\\Program Files\\ESET\\ESET Smart Security\\egui.exe
C:\\Program Files\\Logitech\\Logitech WebCam Software\\LWS.exe
D:\\Program Files\\LogMeIn Hamachi\\hamachi-2-ui.exe
C:\\Program Files\\Common Files\\Nokia\\MPlatform\\NokiaMServer.exe
C:\\WINDOWS\\system32\\ctfmon.exe
D:\\Program Files\\Steam\\Steam.exe
C:\\Program Files\\Logitech\\Logitech Vid\\vid.exe
D:\\PROGRA~1\\WapSter\\WAPSTE~1\\AQQ.exe
D:\\Program Files\\Sony Ericsson\\Sony Ericsson PC Suite\\SEPCSuite.exe
C:\\Documents and Settings\\Mateusz\\Dane aplikacji\\Octoshape\\Octoshape Streaming Services\\OctoshapeClient.exe
C:\\Program Files\\Skype\\Phone\\Skype.exe
C:\\Documents and Settings\\Mateusz\\Ustawienia lokalne\\Dane aplikacji\\Google\\Update\\1.2.183.29\\GoogleCrashHandler.exe
C:\\Program Files\\Xfire\\Xfire.exe
C:\\Program Files\\Common Files\\Logishrd\\LQCVFX\\COCIManager.exe
C:\\WINDOWS\\system32\\wuauclt.exe
C:\\Program Files\\Logitech\\Logitech Vid\\LU\\LULnchr.exe
C:\\Program Files\\Logitech\\Logitech Vid\\LU\\LogitechUpdate.exe
C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe
C:\\WINDOWS\\system32\\msiexec.exe
C:\\Program Files\\Trend Micro\\HiJackThis\\HiJackThis.exe
R1 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,SearchAssistant =
R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,CustomizeSearch =
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\\Program Files\\XfireXO\\tbXfir.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\\Program Files\\Winamp Toolbar\\winamptb.dll
O2 - BHO: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\\Program Files\\XfireXO\\tbXfir.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\\Program Files\\Microsoft Office\\Office12\\GrooveShellExtensions.dll
O2 - BHO: Pomocnik rejestracji usługi Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\\Program Files\\Common Files\\Microsoft Shared\\Windows Live\\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\\Program Files\\Skype\\Toolbars\\Internet Explorer\\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\\Program Files\\Java\\jre6\\bin\\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\\Program Files\\Java\\jre6\\lib\\deploy\\jqs\\ie\\jqs_plugin.dll
O2 - BHO: IEPluginBHO - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\\Documents and Settings\\All Users\\Dane aplikacji\\Gadu-Gadu 10\\_userdata\\ggbho.2.dll (file missing)
O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\\Program Files\\XfireXO\\tbXfir.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\\Program Files\\Winamp Toolbar\\winamptb.dll
O4 - HKLM\\..\\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\\..\\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\\..\\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\\..\\Run: [JMB36X IDE Setup] C:\\WINDOWS\\RaidTool\\xInsIDE.exe
O4 - HKLM\\..\\Run: [36X Raid Configurer] C:\\WINDOWS\\system32\\xRaidSetup.exe boot
O4 - HKLM\\..\\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\\..\\Run: [NvMediaCenter] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\\..\\Run: [NvCplDaemon] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup
O4 - HKLM\\..\\Run: [WinampAgent] \"C:\\Program Files\\Winamp\\winampa.exe\"
O4 - HKLM\\..\\Run: [GrooveMonitor] \"C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe\"
O4 - HKLM\\..\\Run: [Adobe Reader Speed Launcher] \"C:\\Program Files\\Adobe\\Reader 9.0\\Reader\\Reader_sl.exe\"
O4 - HKLM\\..\\Run: [Adobe ARM] \"C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"
O4 - HKLM\\..\\Run: [egui] \"C:\\Program Files\\ESET\\ESET Smart Security\\egui.exe\" /hide /waitservice
O4 - HKLM\\..\\Run: [LogitechQuickCamRibbon] \"C:\\Program Files\\Logitech\\Logitech WebCam Software\\LWS.exe\" /hide
O4 - HKLM\\..\\Run: [LogMeIn Hamachi Ui] \"D:\\Program Files\\LogMeIn Hamachi\\hamachi-2-ui.exe\" --auto-start
O4 - HKLM\\..\\Run: [NokiaMServer] C:\\Program Files\\Common Files\\Nokia\\MPlatform\\NokiaMServer /watchfiles startup
O4 - HKCU\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\ctfmon.exe
O4 - HKCU\\..\\Run: [Steam] \"D:\\Program Files\\Steam\\Steam.exe\" -silent
O4 - HKCU\\..\\Run: [Logitech Vid] \"C:\\Program Files\\Logitech\\Logitech Vid\\vid.exe\" -bootmode
O4 - HKCU\\..\\Run: [Google Update] \"C:\\Documents and Settings\\Mateusz\\Ustawienia lokalne\\Dane aplikacji\\Google\\Update\\GoogleUpdate.exe\" /c
O4 - HKCU\\..\\Run: [msnmsgr] \"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\" /background
O4 - HKCU\\..\\Run: [AQQ] D:\\PROGRA~1\\WapSter\\WAPSTE~1\\AQQ.exe
O4 - HKCU\\..\\Run: [Sony Ericsson PC Suite] \"D:\\Program Files\\Sony Ericsson\\Sony Ericsson PC Suite\\SEPCSuite.exe\" /systray /nologon
O4 - HKCU\\..\\Run: [Octoshape Streaming Services] \"C:\\Documents and Settings\\Mateusz\\Dane aplikacji\\Octoshape\\Octoshape Streaming Services\\OctoshapeClient.exe\" -inv:bootrun
O4 - HKCU\\..\\Run: [uTorrent] \"D:\\Program Files\\uTorrent\\uTorrent.exe\"
O4 - HKCU\\..\\Run: [Skype] \"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized
O4 - HKUS\\S-1-5-19\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'USŁUGA LOKALNA\')
O4 - HKUS\\S-1-5-19\\..\\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User \'USŁUGA LOKALNA\')
O4 - HKUS\\S-1-5-20\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'USŁUGA SIECIOWA\')
O4 - HKUS\\S-1-5-20\\..\\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User \'USŁUGA SIECIOWA\')
O4 - HKUS\\S-1-5-18\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'SYSTEM\')
O4 - HKUS\\S-1-5-18\\..\\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User \'SYSTEM\')
O4 - HKUS\\.DEFAULT\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'Default user\')
O4 - HKUS\\.DEFAULT\\..\\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User \'Default user\')
O4 - Startup: Xfire.lnk = C:\\Program Files\\Xfire\\Xfire.exe
O8 - Extra context menu item: &Winamp Search - C:\\Documents and Settings\\All Users\\Dane aplikacji\\Winamp Toolbar\\ieToolbar\\resources\\en-US\\local\\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\\WINDOWS\\system32\\GPhotos.scr/200
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\\PROGRA~1\\MICROS~2\\Office12\\EXCEL.EXE/3000
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\\PROGRA~1\\MICROS~2\\Office12\\ONBttnIE.dll
O9 - Extra \'Tools\' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\\PROGRA~1\\MICROS~2\\Office12\\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\\Program Files\\Skype\\Toolbars\\Internet Explorer\\skypeieplugin.dll
O9 - Extra \'Tools\' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\\Program Files\\Skype\\Toolbars\\Internet Explorer\\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\\PROGRA~1\\MICROS~2\\Office12\\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe
O9 - Extra \'Tools\' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O9 - Extra \'Tools\' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\\Program Files\\Microsoft Office\\Office12\\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\\Program Files\\Skype\\Toolbars\\Internet Explorer\\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\\PROGRA~1\\COMMON~1\\Skype\\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Moduł wstępnego ładowania interfejsu Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\\WINDOWS\\system32\\browseui.dll
O22 - SharedTaskScheduler: Demon buforu kategorii składników - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\\WINDOWS\\system32\\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\\Program Files\\ESET\\ESET Smart Security\\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\\Program Files\\ESET\\ESET Smart Security\\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\\Program Files\\Google\\Common\\Google Updater\\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\\Program Files\\LogMeIn Hamachi\\hamachi-2.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\\Program Files\\Java\\jre6\\bin\\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\\Program Files\\Common Files\\LogiShrd\\LVMVFM\\LVPrcSrv.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\\WINDOWS\\system32\\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\\WINDOWS\\system32\\nvsvc32.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - D:\\Program Files\\Sony Ericsson\\Sony Ericsson PC Suite\\SupServ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\\WINDOWS\\system32\\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\\WINDOWS\\system32\\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\\Program Files\\PC Connectivity Solution\\ServiceLayer.exe
--
End of file - 11562 bytes
|