API tools faq
paste
Advertisement
Horanon

hijack this 16.01 1220

Horanon
Jan 16th, 2018
339
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.64 KB | None | 0 0
raw download clone embed print report
  1. Logfile of Trend Micro HijackThis v2.0.5
  2. Scan saved at 12:17:43, on 16.01.2018
  3. Platform: Unknown Windows (WinNT 6.02.1008)
  4. MSIE: Internet Explorer v11.0 (11.00.16299.0015)
  5.  
  6.  
  7. Boot mode: Normal
  8.  
  9. Running processes:
  10. C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
  11. C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
  12. C:\Program Files (x86)\TeamViewer\TeamViewer.exe
  13. C:\Program Files (x86)\LightingService\1.00.35\AsRogAuraGpuDllServer.exe
  14. C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
  15. C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
  16. C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
  17. C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe
  18. C:\Program Files (x86)\ASUS\ASUS ROG Connect Plus\RC TweakIt Server\AsBCLK.exe
  19. C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe
  20. C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
  21. C:\Users\rani-\AppData\Local\Discord\app-0.0.300\Discord.exe
  22. C:\Users\rani-\AppData\Local\Discord\app-0.0.300\Discord.exe
  23. C:\Program Files (x86)\RamCache II\RamCache.exe
  24. C:\Users\rani-\AppData\Local\Discord\app-0.0.300\Discord.exe
  25. C:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe
  26. C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ledcontrolservice.exe
  27. C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ledcontrolservice.exe
  28. C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
  29. C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
  30. C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\AsPowerBar.exe
  31. C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ledcontrolservice.exe
  32. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  33. C:\Program Files (x86)\Opera\50.0.2762.58\opera_crashreporter.exe
  34. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  35. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  36. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  37. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  38. C:\Program Files (x86)\AIMP\AIMP.exe
  39. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  40. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  41. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  42. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  43. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  44. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  45. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  46. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  47. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  48. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  49. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  50. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  51. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  52. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  53. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  54. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  55. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  56. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  57. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  58. C:\Program Files (x86)\Opera\50.0.2762.58\opera.exe
  59. E:\HijackThis.exe
  60.  
  61. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  62. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE13&ocid=UE13DHP
  63. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
  64. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  65. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  66. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
  67. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  68. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  69. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
  70. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  71. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  72. O4 - HKLM\..\Run: [RamCache II ] "C:\Program Files (x86)\RamCache II\RamCache.exe"
  73. O4 - HKCU\..\Run: [OneDrive] "C:\Users\rani-\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
  74. O4 - HKCU\..\Run: [Steam] "D:\Program Files (x86)\Steam\steam.exe" -silent
  75. O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
  76. O4 - HKCU\..\Run: [Discord] C:\Users\rani-\AppData\Local\Discord\app-0.0.300\Discord.exe
  77. O4 - HKCU\..\Run: [GalaxyClient] C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe /launchViaAutoStart
  78. O4 - HKCU\..\RunOnce: [Application Restart #6] C:\Program Files (x86)\ASUS\AURA(GRAPHICS CARD)\ledcontrolservice.exe /RestartByRestartManager:08758E71-4B45-4f58-8607-D9F38FF765AB /RestartByRestartManager:1C3C7B29-F342-4b6b-A3BC-C73A0611A79C /RestartByRestartManager:D7AA187F-1082-4d14-BCF6-2FC83BF74D96 /RestartByRestartManager:CA993D1B-E73A-4cfa-8FCC-0A62788527C8
  79. O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
  80. O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
  81. O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
  82. O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
  83. O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
  84. O23 - Service: Emsisoft Protection Service (a2AntiMalware) - Emsisoft Ltd - C:\Program Files\Emsisoft Anti-Malware\a2service.exe
  85. O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  86. O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
  87. O23 - Service: ASUS Com Service (asComSvc) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe
  88. O23 - Service: ASUS HM Com Service (asHmComSvc) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMSvc.exe
  89. O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
  90. O23 - Service: AsusFanControlService - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.33\AsusFanControlService.exe
  91. O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
  92. O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - C:\Program Files\BitComet\tools\BitCometService.exe
  93. O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
  94. O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
  95. O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
  96. O23 - Service: GalaxyClientService - GOG.com - C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe
  97. O23 - Service: GalaxyCommunication - GOG.com - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
  98. O23 - Service: GameXPcom Service (gamexpcomsvc) - Unknown owner - C:\Program Files (x86)\GameXPComService\gamexpcomsvc.exe
  99. O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
  100. O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
  101. O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\WINDOWS\system32\IProsetMonitor.exe (file missing)
  102. O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  103. O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
  104. O23 - Service: KMS-R@1n - Unknown owner - C:\Windows\KMS-R@1n.exe
  105. O23 - Service: LightingService - ASUSTek Computer Inc. - C:\Program Files (x86)\LightingService\1.00.35\LightingService.exe
  106. O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  107. O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
  108. O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
  109. O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  110. O23 - Service: NVIDIA NetworkService Container (NvContainerNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  111. O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
  112. O23 - Service: NVIDIA Telemetry Container (NvTelemetryContainer) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
  113. O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
  114. O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
  115. O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
  116. O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
  117. O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
  118. O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
  119. O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
  120. O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
  121. O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
  122. O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  123. O23 - Service: TeamViewer 13 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  124. O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
  125. O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
  126. O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
  127. O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
  128. O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
  129. O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
  130. O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
  131. O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
  132. O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
  133. O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
  134. O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
  135.  
  136. --
  137. End of file - 12941 bytes
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!