API tools faq
paste
Guest User

Untitled

a guest
Mar 15th, 2012
83
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.34 KB | None | 0 0
raw download clone embed print report
  1. Logfile of Trend Micro HijackThis v2.0.4
  2. Scan saved at 20:15:58, on 15-3-2012
  3. Platform: Windows 7 SP1 (WinNT 6.00.3505)
  4. MSIE: Internet Explorer v9.00 (9.00.8112.16421)
  5. Boot mode: Normal
  6.  
  7. Running processes:
  8. C:\Windows\system32\taskhost.exe
  9. C:\Windows\system32\Dwm.exe
  10. C:\Windows\SYSTEM32\DWRCST.exe
  11. C:\Program Files\TeamViewer\Version7\TeamViewer.exe
  12. C:\Windows\Explorer.EXE
  13. C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
  14. C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe
  15. C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
  16. C:\Program Files\Dell\QuickSet\quickset.exe
  17. C:\Program Files\DellTPad\Apoint.exe
  18. C:\Program Files\DellTPad\ApMsgFwd.exe
  19. C:\Program Files\Sophos\AutoUpdate\ALMon.exe
  20. C:\Program Files\Classic Shell\ClassicStartMenu.exe
  21. C:\Program Files\DellTPad\HidFind.exe
  22. C:\Program Files\DellTPad\Apntex.exe
  23. C:\Windows\system32\conhost.exe
  24. C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
  25. C:\Windows\System32\igfxtray.exe
  26. C:\Windows\System32\hkcmd.exe
  27. C:\Windows\System32\igfxpers.exe
  28. C:\Program Files\Internet Explorer\iexplore.exe
  29. C:\Program Files\Internet Explorer\iexplore.exe
  30. C:\Windows\system32\taskhost.exe
  31. C:\Windows\SYSTEM32\DWRCST.exe
  32. C:\Windows\system32\Dwm.exe
  33. C:\Windows\Explorer.EXE
  34. C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
  35. C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe
  36. C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
  37. C:\Program Files\Dell\QuickSet\quickset.exe
  38. C:\Program Files\DellTPad\Apoint.exe
  39. C:\Program Files\DellTPad\ApMsgFwd.exe
  40. C:\Program Files\DellTPad\HidFind.exe
  41. C:\Program Files\DellTPad\Apntex.exe
  42. C:\Windows\system32\conhost.exe
  43. C:\Program Files\Sophos\AutoUpdate\ALMon.exe
  44. C:\Program Files\Classic Shell\ClassicStartMenu.exe
  45. C:\Program Files\VMware\VMware Workstation\vmware-tray.exe
  46. C:\Windows\System32\hkcmd.exe
  47. C:\Windows\System32\igfxpers.exe
  48. C:\Users\VLC Medewerker\AppData\Roaming\Dropbox\bin\Dropbox.exe
  49. C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
  50. C:\Windows\system32\wbem\unsecapp.exe
  51. C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
  52. C:\Program Files\Internet Explorer\iexplore.exe
  53. C:\Program Files\Internet Explorer\iexplore.exe
  54. C:\Program Files\Internet Explorer\iexplore.exe
  55. C:\Windows\system32\wuauclt.exe
  56. C:\Program Files\Internet Explorer\iexplore.exe
  57. C:\TMP\MEDEWE~1\HouseCall\housecall.bin
  58. C:\Program Files\Internet Explorer\iexplore.exe
  59. C:\Windows\explorer.exe
  60. C:\Windows\System32\msiexec.exe
  61. C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
  62.  
  63. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  64. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
  65. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  66. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  67. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  68. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  69. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  70. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  71. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  72. O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  73. O2 - BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
  74. O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
  75. O2 - BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll
  76. O3 - Toolbar: Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
  77. O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
  78. O4 - HKLM\..\Run: [FreeFallProtection] C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe
  79. O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
  80. O4 - HKLM\..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe
  81. O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
  82. O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
  83. O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  84. O4 - HKLM\..\Run: [Sophos AutoUpdate Monitor] C:\Program Files\Sophos\AutoUpdate\almon.exe
  85. O4 - HKLM\..\Run: [Classic Start Menu] C:\Program Files\Classic Shell\ClassicStartMenu.exe
  86. O4 - HKLM\..\Run: [vmware-tray] "C:\Program Files\VMware\VMware Workstation\vmware-tray.exe"
  87. O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
  88. O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
  89. O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
  90. O4 - HKLM\..\Run: [DameWare MRC Agent] C:\Windows\system32\DWRCST.exe
  91. O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
  92. O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
  93. O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
  94. O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
  95. O4 - S-1-5-21-210896911-2591671556-3603525625-500 Startup: Bginfo.lnk = C:\Program Files\SysInternals\Bginfo.exe (User 'Admin')
  96. O4 - S-1-5-21-210896911-2591671556-3603525625-500 User Startup: Bginfo.lnk = C:\Program Files\SysInternals\Bginfo.exe (User 'Admin')
  97. O4 - Startup: Dropbox.lnk = C:\Users\VLC Medewerker\AppData\Roaming\Dropbox\bin\Dropbox.exe
  98. O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
  99. O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
  100. O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
  101. O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
  102. O9 - Extra button: (no name) - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE9_32.exe
  103. O9 - Extra 'Tools' menuitem: Classic IE9 Settings - {56753E59-AF1D-4FBA-9E15-31557124ADA2} - C:\Program Files\Classic Shell\ClassicIE9_32.exe
  104. O9 - Extra button: (no name) - {64964764-1101-4bbd-8891-B56B1A53B9B3} - C:\Program Files\Classic Shell\ClassicExplorer32.dll
  105. O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
  106. O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
  107. O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
  108. O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
  109. O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
  110. O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
  111. O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
  112. O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
  113. O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
  114. O10 - Unknown file in Winsock LSP: c:\programdata\sophos\web intelligence\swi_ifslsp.dll
  115. O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
  116. O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
  117. O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
  118. O15 - Trusted Zone: *.hetvlc.nl
  119. O15 - Trusted Zone: *.veenlandencollege.nl
  120. O17 - HKLM\System\CCS\Services\Tcpip\..\{F5D0AC9C-8EE5-4F85-A768-DB89CC1F3E18}: NameServer = 10.0.0.1
  121. O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
  122. O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
  123. O20 - AppInit_DLLs: C:\PROGRA~1\Sophos\SOPHOS~1\SOPHOS~1.DLL
  124. O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
  125. O23 - Service: DisplayLinkManager (DisplayLinkService) - DisplayLink Corp. - C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
  126. O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\Windows\SYSTEM32\DWRCS.EXE
  127. O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
  128. O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
  129. O23 - Service: NIHardwareService - Native Instruments GmbH - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
  130. O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
  131. O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
  132. O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
  133. O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
  134. O23 - Service: Sophos Agent - Sophos Limited - C:\Program Files\Sophos\Remote Management System\ManagementAgentNT.exe
  135. O23 - Service: Sophos AutoUpdate Service - Sophos Limited - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe
  136. O23 - Service: Sophos Message Router - Sophos Limited - C:\Program Files\Sophos\Remote Management System\RouterNT.exe
  137. O23 - Service: Sophos Web Intelligence Service (swi_service) - Sophos Limited - C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
  138. O23 - Service: Sophos Web Intelligence Update (swi_update) - Sophos Limited - C:\ProgramData\Sophos\Web Intelligence\swi_update.exe
  139. O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
  140. O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe
  141. O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
  142. O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
  143. O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
  144. O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
  145. O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
  146.  
  147. --
  148. End of file - 11609 bytes
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!