API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 14th, 2012
87
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.53 KB | None | 0 0
raw download clone embed print report
  1. Logfile of Trend Micro HijackThis v2.0.4
  2. Scan saved at 18:38:04, on 14-04-2012
  3. Platform: Windows XP SP2 (WinNT 5.01.2600)
  4. MSIE: Internet Explorer v8.00 (8.00.6001.18702)
  5. Boot mode: Normal
  6.  
  7. Running processes:
  8. C:\WINDOWS\System32\smss.exe
  9. C:\WINDOWS\system32\winlogon.exe
  10. C:\WINDOWS\system32\services.exe
  11. C:\WINDOWS\system32\lsass.exe
  12. C:\WINDOWS\system32\svchost.exe
  13. C:\WINDOWS\System32\svchost.exe
  14. C:\WINDOWS\system32\svchost.exe
  15. C:\Programmer\AVAST Software\Avast\AvastSvc.exe
  16. C:\WINDOWS\Explorer.EXE
  17. C:\WINDOWS\system32\spoolsv.exe
  18. C:\WINDOWS\RTHDCPL.EXE
  19. C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe
  20. C:\Programmer\IObit\Advanced SystemCare 4\PMonitor.exe
  21. C:\WINDOWS\system32\RunDLL32.exe
  22. C:\Programmer\AVAST Software\Avast\avastUI.exe
  23. C:\Programmer\Fælles filer\Java\Java Update\jusched.exe
  24. C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe
  25. C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe
  26. C:\WINDOWS\system32\ctfmon.exe
  27. C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe
  28. C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe
  29. C:\Programmer\EDIMAX\Common\RaUI.exe
  30. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe
  31. C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe
  32. C:\Programmer\LogMeIn Hamachi\hamachi-2.exe
  33. C:\Programmer\Java\jre6\bin\jqs.exe
  34. C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe
  35. C:\WINDOWS\system32\nvsvc32.exe
  36. C:\WINDOWS\system32\PnkBstrA.exe
  37. C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe
  38. C:\WINDOWS\system32\svchost.exe
  39. C:\WINDOWS\system32\wbem\wmiapsrv.exe
  40. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe
  41. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe
  42. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe
  43. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe
  44. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe
  45. C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe
  46. C:\Programmer\Malwarebytes' Anti-Malware\mbam.exe
  47. C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe
  48. C:\Program Files\PC Tools\PC Tools Security\TFEngine\TFService.exe
  49. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe
  50. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe
  51. C:\WINDOWS\system32\NOTEPAD.EXE
  52. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe
  53. C:\WINDOWS\system32\NOTEPAD.EXE
  54. C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Chrome\Application\chrome.exe
  55. C:\Documents and Settings\Vedel\Skrivebord\HijackThis.exe
  56.  
  57. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  58. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  59. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  60. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  61. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
  62. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
  63. R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :80
  64. R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
  65. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hyperlinks
  66. R3 - URLSearchHook: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Programmer\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll (file missing)
  67. R3 - URLSearchHook: PC Tools Browser Defender - {472734EA-242A-422b-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll
  68. O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll
  69. O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programmer\AVAST Software\Avast\aswWebRepIE.dll
  70. O2 - BHO: Hjælp til tilmelding til Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmer\Fælles filer\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  71. O2 - BHO: RewardsArcadeSuite - {B6EF6C45-5E8D-4c3b-B580-A5073261A381} - C:\Programmer\RewardsArcadeSuite\RewardsArcadeSuite.dll
  72. O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmer\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll
  73. O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmer\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
  74. O2 - BHO: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Programmer\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll (file missing)
  75. O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Programmer\Yontoo\YontooIEClient.dll
  76. O3 - Toolbar: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Programmer\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll (file missing)
  77. O3 - Toolbar: PC Tools Browser Defender - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\PC Tools\PC Tools Security\BDT\PCTBrowserDefender.dll
  78. O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
  79. O4 - HKLM\..\Run: [SearchSettings] "C:\Programmer\Fælles filer\Spigot\Search Settings\SearchSettings.exe"
  80. O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
  81. O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
  82. O4 - HKLM\..\Run: [nwiz] C:\Programmer\NVIDIA Corporation\nview\nwiz.exe /installquiet
  83. O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
  84. O4 - HKLM\..\Run: [avast] "C:\Programmer\AVAST Software\Avast\avastUI.exe" /nogui
  85. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmer\Fælles filer\Java\Java Update\jusched.exe"
  86. O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Programmer\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
  87. O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Programmer\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
  88. O4 - HKLM\..\Run: [ISTray] "C:\Program Files\PC Tools\PC Tools Security\pctsGui.exe" /hideGUI
  89. O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
  90. O4 - HKCU\..\Run: [Advanced SystemCare 4] "C:\Programmer\IObit\Advanced SystemCare 4\ASCTray.exe"
  91. O4 - HKCU\..\Run: [msnmsgr] "C:\Programmer\Windows Live\Messenger\msnmsgr.exe" /background
  92. O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Vedel\Lokale indstillinger\Application Data\Google\Update\GoogleUpdate.exe" /c
  93. O4 - HKCU\..\Run: [Clownfish] "C:\Programmer\Clownfish\Clownfish.exe"
  94. O4 - HKCU\..\Run: [Xvid] C:\Programmer\Xvid\CheckUpdate.exe
  95. O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKAL TJENESTE')
  96. O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETVÆRKSTJENESTE')
  97. O4 - HKUS\S-1-5-21-1801674531-2049760794-682003330-1007\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
  98. O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
  99. O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
  100. O4 - Global Startup: Wireless Utility.lnk = C:\Programmer\EDIMAX\Common\RaUI.exe
  101. O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Vedel\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
  102. O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\Vedel\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
  103. O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
  104. O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
  105. O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
  106. O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
  107. O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FLLESF~1\Skype\SKYPE4~1.DLL
  108. O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
  109. O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
  110. O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - C:\Programmer\IObit\Advanced SystemCare 4\ASCService.exe
  111. O23 - Service: avast! Antivirus - AVAST Software - C:\Programmer\AVAST Software\Avast\AvastSvc.exe
  112. O23 - Service: Browser Defender Update Service - Unknown owner - C:\Program Files\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe
  113. O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Programmer\LogMeIn Hamachi\hamachi-2.exe
  114. O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmer\Java\jre6\bin\jqs.exe
  115. O23 - Service: MBAMService - Malwarebytes Corporation - C:\Programmer\Malwarebytes' Anti-Malware\mbamservice.exe
  116. O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
  117. O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
  118. O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Programmer\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
  119. O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
  120. O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
  121. O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\PC Tools\PC Tools Security\pctsAuxs.exe
  122. O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\PC Tools\PC Tools Security\pctsSvc.exe
  123. O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Programmer\Skype\Updater\Updater.exe
  124. O23 - Service: Steam Client Service - Valve Corporation - C:\Programmer\Fælles filer\Steam\SteamService.exe
  125. O23 - Service: ThreatFire - PC Tools - C:\Program Files\PC Tools\PC Tools Security\TFEngine\TFService.exe
  126.  
  127. --
  128. End of file - 10768 bytes
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!