API tools faq
paste
Advertisement
StayinPaid

Hijackthis log

StayinPaid
Mar 19th, 2021
947
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.11 KB | None | 0 0
raw download clone embed print report
  1. Logfile of Trend Micro HijackThis v2.0.5
  2. Scan saved at 18.31.16, on 19/03/2021
  3. Platform: Unknown Windows (WinNT 6.02.1008)
  4. MSIE: Unable to get Internet Explorer version!
  5.  
  6.  
  7. Boot mode: Normal
  8.  
  9. Running processes:
  10. C:\Program Files (x86)\Lenovo\LenovoDisplayControlCenterService\LenovoDisplayControlCenterService.exe
  11. C:\Program Files (x86)\Lenovo\LenovoDisplayControlCenterService\WndMsgHelper.exe
  12. C:\Program Files (x86)\Lenovo\LenovoDisplayControlCenterService\DCCPIPCtrlWnd.exe
  13. C:\Program Files (x86)\Lenovo\LenovoDisplayControlCenterService\DesktopParts.exe
  14. C:\Program Files (x86)\Lenovo\LenovoDisplayControlCenterService\PrintAssitWnd.exe
  15. C:\Program Files (x86)\Lenovo\LenovoDisplayControlCenterService\MousePositioningWnd.exe
  16. C:\Program Files (x86)\GlassWire\GWIdlMon.exe
  17. C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
  18. C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPN.exe
  19. C:\Program Files (x86)\GlassWire\GlassWire.exe
  20. C:\Program Files (x86)\Steam\Steam.exe
  21. C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationService.exe
  22. C:\Security\HijackThis.exe
  23. C:\WINDOWS\SysWOW64\DllHost.exe
  24.  
  25. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  26. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
  27. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
  28. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  29. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  30. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
  31. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
  32. R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
  33. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  34. F2 - REG:system.ini: UserInit=userinit.exe,
  35. O2 - BHO: Bitdefender Trackers Blocking - {159ff5d5-55f1-4d2f-b706-767a55f77abb} - C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll
  36. O2 - BHO: Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll
  37. O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\89.0.774.54\BHO\ie_to_edge_bho.dll
  38. O3 - Toolbar: Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll
  39. O4 - HKLM\..\Run: [ExpressVPNNotificationService] "C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe"
  40. O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
  41. O4 - HKCU\..\Run: [Wox] C:\Users\StayinPaid\AppData\Local\Wox\app-1.4.1196\Wox.exe
  42. O4 - HKCU\..\Run: [ExpressVPN4] C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPN.exe
  43. O4 - HKUS\S-1-5-18\..\Run: [MicrosoftEdgeAutoLaunch_B1D93827B4E14D73573841C0F063C7FC] "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window /prefetch:5 (User 'SYSTEM')
  44. O4 - HKUS\.DEFAULT\..\Run: [MicrosoftEdgeAutoLaunch_B1D93827B4E14D73573841C0F063C7FC] "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window /prefetch:5 (User 'Default user')
  45. O4 - Startup: AutorunsDisabled
  46. O4 - Startup: Discord.lnk = C:\Users\StayinPaid\AppData\Local\Discord\Update.exe
  47. O4 - Startup: GlassWire.lnk = C:\Program Files (x86)\GlassWire\GlassWire.exe
  48. O4 - Startup: HWiNFO64.lnk = C:\Program Files\HWiNFO64\HWiNFO64.EXE
  49. O4 - Startup: Intel(R) Extreme Tuning Utility.lnk = ?
  50. O4 - Startup: NetLimiter 4 64 bit.lnk = C:\Program Files\Locktime Software\NetLimiter 4\NLClientApp.exe
  51. O4 - Startup: Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe
  52. O4 - Startup: RogueKiller.lnk = C:\Program Files\RogueKiller\RogueKiller64.exe
  53. O4 - Startup: Search Everything.lnk = C:\Program Files\Everything\Everything.exe
  54. O4 - Startup: Steam.lnk = C:\Program Files (x86)\Steam\Steam.exe
  55. O4 - Startup: Wox.lnk = C:\Users\StayinPaid\AppData\Local\Wox\Wox.exe
  56. O4 - Global Startup: AutorunsDisabled
  57. O9 - Extra button: Bitdefender Anti-tracker - {159ff5d5-55f1-4d2f-b706-767a55f77abb} - C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll
  58. O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
  59. O17 - HKLM\System\CCS\Services\Tcpip\..\{4962b50f-15c2-4cba-9905-f53f9d7b9190}: NameServer = 127.0.0.1
  60. O17 - HKLM\System\CCS\Services\Tcpip\..\{890d086b-e637-4925-91a1-1f5015808221}: NameServer = 127.0.0.1
  61. O17 - HKLM\System\CCS\Services\Tcpip\..\{f93d6a27-8392-473e-bf1a-d139ad1bdc92}: NameServer = 10.103.0.1
  62. O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
  63. O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
  64. O21 - SSODL: CallbackTechMountNotificator-cbfsconnect2017 - {01E603EC-D81B-4340-B584-77B605ED1062} - C:\WINDOWS\SysWOW64\cbfsconnectMntNtf2017.dll
  65. O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {01E603EC-D81B-4340-B584-77B605ED1062} - C:\WINDOWS\SysWOW64\cbfsconnectMntNtf2017.dll
  66. O23 - Service: AfVpnService - AnchorFree Inc. - C:\Program Files\Bitdefender\Bitdefender VPN\hydra.sdk.windows.service.exe
  67. O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  68. O23 - Service: ASUS Com Service (asComSvc) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe
  69. O23 - Service: ASUS HM Com Service (asHmComSvc) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMSvc.exe
  70. O23 - Service: AsusFanControlService - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsusFanControlService\1.08.17\AsusFanControlService.exe
  71. O23 - Service: AOMEI Backupper Scheduler Service (Backupper Service) - AOMEI International Network Limited - C:\Program Files (x86)\AOMEI\ABService.exe
  72. O23 - Service: Bitdefender Auxiliary Service (BDAuxSrv) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
  73. O23 - Service: Bitdefender Protected Service (BDProtSrv) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
  74. O23 - Service: Bitdefender RedLine Service (bdredline) - Bitdefender - C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
  75. O23 - Service: Bitdefender Vpn Service (BdVpnService) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnservice.exe
  76. O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
  77. O23 - Service: Brave Update Service (brave) (brave) - BraveSoftware Inc. - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  78. O23 - Service: Brave Update Service (bravem) (bravem) - BraveSoftware Inc. - C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
  79. O23 - Service: @C:\Program Files (x86)\Google\Chrome Remote Desktop\89.0.4389.25\remoting_core.dll,-101 (chromoting) - Google LLC - C:\Program Files (x86)\Google\Chrome Remote Desktop\89.0.4389.25\remoting_host.exe
  80. O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
  81. O23 - Service: CredentialEnrollmentManagerUserSvc_fb09d - Unknown owner - C:\WINDOWS\system32\CredentialEnrollmentManager.exe (file missing)
  82. O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
  83. O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
  84. O23 - Service: DbxSvc - Unknown owner - C:\WINDOWS\system32\DbxSvc.exe (file missing)
  85. O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
  86. O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
  87. O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
  88. O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
  89. O23 - Service: ExpressVPN Service (ExpressVPNService) - ExpressVPN - C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe
  90. O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe
  91. O23 - Service: NVIDIA FrameView SDK service (FvSvc) - NVIDIA - C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe
  92. O23 - Service: GlassWire Control Service (GlassWire) - SecureMix LLC - C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
  93. O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) (GoogleChromeElevationService) - Google LLC - C:\Program Files\Google\Chrome\Application\89.0.4389.90\elevation_service.exe
  94. O23 - Service: Google Update Service (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  95. O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  96. O23 - Service: @oem14.inf,%SocketHECIServiceName%;Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) - Intel(R) Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\SocketHeciServer.exe
  97. O23 - Service: @oem14.inf,%TPMProvisioningServiceName%;Intel(R) TPM Provisioning Service (Intel(R) TPM Provisioning Service) - Intel(R) Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\TPMProvisioningService.exe
  98. O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
  99. O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
  100. O23 - Service: Lenovo Display Control Center Service (LenovoDisplayControlCenterService) - Lenovo - C:\Program Files (x86)\Lenovo\LenovoDisplayControlCenterService\LenovoDCCBackGroundService.exe
  101. O23 - Service: Macrium Service (MacriumService) - Paramount Software UK Ltd - C:\Program Files\Macrium\Common\MacriumService.exe
  102. O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
  103. O23 - Service: MRAC Service (mracsvc) - Unknown owner - C:\WINDOWS\System32\mracsvc.exe (file missing)
  104. O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
  105. O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
  106. O23 - Service: NetLimiter 4 Service (nlsvc) - Locktime Software - C:\Program Files\Locktime Software\NetLimiter 4\NLSvc.exe
  107. O23 - Service: NVIDIA LocalSystem Container (NvContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  108. O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5be8de9f3373beaf\Display.NvContainer\NVDisplay.Container.exe
  109. O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
  110. O23 - Service: ProductAgentService - Bitdefender - C:\Program Files\Bitdefender Agent\ProductAgentService.exe
  111. O23 - Service: RogueKiller RTP (rkrtservice) - Unknown owner - C:\Program Files\RogueKiller\RogueKillerSvc.exe
  112. O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
  113. O23 - Service: RstMwService - Intel Corporation - C:\WINDOWS\System32\DriverStore\FileRepository\iastorac.inf_amd64_a9a8972288e9f3b5\RstMwService.exe
  114. O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
  115. O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
  116. O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
  117. O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
  118. O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
  119. O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
  120. O23 - Service: SpyShelterSrv - Datpol - C:\Program Files (x86)\SpyShelter Free\SpyShelterSrv.exe
  121. O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
  122. O23 - Service: sw_service - Eagle Eye Digital Solutions - C:\Program Files\StealthWalker\sw_service.exe
  123. O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
  124. O23 - Service: TunnelBear Maintenance (TunnelBearMaintenance) - TunnelBear - C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe
  125. O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
  126. O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
  127. O23 - Service: VirtualBox system service (VBoxSDS) - Oracle Corporation - C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe
  128. O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
  129. O23 - Service: @%systemroot%\system32\vmcompute.exe,-100 (vmcompute) - Unknown owner - C:\WINDOWS\system32\vmcompute.exe (file missing)
  130. O23 - Service: @%systemroot%\system32\vmms.exe,-10 (vmms) - Unknown owner - C:\WINDOWS\system32\vmms.exe (file missing)
  131. O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
  132. O23 - Service: Bitdefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe
  133. O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
  134. O23 - Service: Wise Boot Assistant (WiseBootAssistant) - WiseCleaner.com - C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe
  135. O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
  136.  
  137. --
  138. End of file - 15467 bytes
  139.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!