URL http://paste-bin.com/view/6d3b35dd

View Raw


hijackthis

By Elf102, 1 Month ago, written in php.
  1. Logfile of Trend Micro HijackThis v2.0.4
  2. Scan saved at 1:05:03 AM, on 7/31/2010
  3. Platform: Windows XP SP3, v.5755 (WinNT 5.01.2600)
  4. MSIE: Internet Explorer v6.00 SP3 (6.00.2900.3264)
  5. Boot mode: Normal
  6.  
  7. Running processes:
  8. C:\WINDOWS\System32\smss.exe
  9. C:\WINDOWS\system32\winlogon.exe
  10. C:\WINDOWS\system32\services.exe
  11. C:\WINDOWS\system32\lsass.exe
  12. C:\WINDOWS\system32\Ati2evxx.exe
  13. C:\WINDOWS\system32\svchost.exe
  14. C:\WINDOWS\System32\svchost.exe
  15. C:\WINDOWS\system32\svchost.exe
  16. C:\WINDOWS\system32\Ati2evxx.exe
  17. C:\Program Files\AVG\AVG9\avgchsvx.exe
  18. C:\Program Files\AVG\AVG9\avgrsx.exe
  19. C:\WINDOWS\system32\spoolsv.exe
  20. C:\Program Files\AVG\AVG9\avgcsrvx.exe
  21. C:\WINDOWS\System32\svchost.exe
  22. C:\Program Files\AVG\AVG9\avgwdsvc.exe
  23. F:\main\hamachi-2.exe
  24. C:\Program Files\Java\jre6\bin\jqs.exe
  25. C:\Program Files\CDBurnerXP\NMSAccessU.exe
  26. C:\WINDOWS\system32\PnkBstrA.exe
  27. C:\WINDOWS\system32\PnkBstrB.exe
  28. C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
  29. C:\WINDOWS\system32\svchost.exe
  30. C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
  31. C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe
  32. C:\Program Files\AVG\AVG9\avgemc.exe
  33. C:\Program Files\AVG\AVG9\avgnsx.exe
  34. C:\Program Files\AVG\AVG9\avgcsrvx.exe
  35. C:\WINDOWS\Explorer.EXE
  36. C:\WINDOWS\system32\wscntfy.exe
  37. C:\Program Files\DivX\DivX Update\DivXUpdate.exe
  38. C:\WINDOWS\System32\svchost.exe
  39. C:\Program Files\Common Files\Java\Java Update\jusched.exe
  40. C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\mom.exe
  41. C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
  42. C:\Program Files\ESET\ESET Online Scanner\OnlineScannerApp.exe
  43. C:\Program Files\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
  44. C:\Program Files\Mozilla Firefox\firefox.exe
  45. C:\Program Files\Ventrilo\Ventrilo.exe
  46. C:\WINDOWS\system32\msiexec.exe
  47. C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
  48.  
  49. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
  50. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://forum.maxiwarez.com
  51. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
  52. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Comcast
  53. R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
  54. O1 - Hosts: 66.98.148.65 auto.search.msn.com
  55. O1 - Hosts: 66.98.148.65 auto.search.msn.es
  56. O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  57. O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
  58. O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
  59. O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
  60. O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
  61. O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
  62. O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll (file missing)
  63. O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
  64. O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
  65. O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
  66. O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
  67. O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
  68. O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
  69. O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "F:\main\hamachi-2-ui.exe" --auto-start
  70. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
  71. O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
  72. O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
  73. O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
  74. O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
  75. O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware (registration)] regsvr32.exe /s "C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll"
  76. O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
  77. O4 - HKLM\..\RunOnce: [InnoSetupRegFile.0000000001] "C:\WINDOWS\is-IGFA7.exe" /REG
  78. O4 - HKCU\..\Run: [uTorrent] "F:\uTorrent.exe"
  79. O4 - Startup: DesktopVideoPlayer.LNK = C:\Program Files\vghd\vghd.exe
  80. O4 - Startup: OpenOffice.org 3.2.lnk = F:\Open Office\OpenOffice.org 3\program\quickstart.exe
  81. O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
  82. O4 - Global Startup: Microsoft Office.lnk = F:\Microsoft Word\Office10\OSA.EXE
  83. O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\MICROS~1\Office10\EXCEL.EXE/3000
  84. O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
  85. O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
  86. O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe (file missing)
  87. O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
  88. O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
  89. O14 - IERESET.INF: START_PAGE_URL=http://forum.maxiwarez.com
  90. O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
  91. O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
  92. O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
  93. O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
  94. O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
  95. O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
  96. O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
  97. O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
  98. O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
  99. O23 - Service: getPlus(R) Helper - Unknown owner - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe (file missing)
  100. O23 - Service: Google Update Service (gupdate1ca722d2297ac6) (gupdate1ca722d2297ac6) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
  101. O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - F:\main\hamachi-2.exe
  102. O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  103. O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
  104. O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
  105. O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
  106. O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
  107. O23 - Service: SupportSoft Sprocket Service (ddoctorv2) (sprtsvc_ddoctorv2) - SupportSoft, Inc. - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
  108. O23 - Service: WMP54Gv4SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
  109.  
  110. --
  111. End of file - 8381 bytes
Powered By Stikked created by Ben McRedmond