API tools faq
paste
lilGarou

Untitled

lilGarou
Apr 19th, 2020
415
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.75 KB | None | 0 0
raw download clone embed print report
  1. Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.18
  2.  
  3. Platform: x64 Windows 10 (Pro), 10.0.18363.778 (ReleaseId: 1909), Service Pack: 0
  4. Time: 19.04.2020 - 16:55 (UTC+01:00)
  5. Language: OS: English (0x809). Display: English (0x809). Non-Unicode: English (0x809)
  6. Elevated: Yes
  7. Ran by: Joe (group: Administrator) on DESKTOP-2LSP8MB, FirstRun: yes
  8.  
  9. Chrome: 80.0.3987.163
  10. Edge: 11.0.18362.752
  11. Internet Explorer: 11.0.18362.1
  12. Default: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Chrome)
  13.  
  14. Boot mode: Normal
  15.  
  16. Running processes:
  17. Number | Path
  18. 1 C:\Program Files (x86)\CryptoCompany\Update\1.3.99.31\CryptoTabCrashHandler.exe
  19. 1 C:\Program Files (x86)\CryptoCompany\Update\1.3.99.31\CryptoTabCrashHandler64.exe
  20. 1 C:\Program Files (x86)\ExpressVPN\bootstrap\AMD64\nssm.exe
  21. 1 C:\Program Files (x86)\ExpressVPN\xvpnd\xvpnd.exe
  22. 2 C:\Program Files (x86)\Google\Chrome Remote Desktop\83.0.4103.2\remoting_host.exe
  23. 10 C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  24. 1 C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
  25. 1 C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
  26. 1 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  27. 1 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  28. 1 C:\Program Files (x86)\MSI\Dragon Center\APP_Dragon_Center_Keeper.exe
  29. 1 C:\Program Files (x86)\MSI\Dragon Center\CC_Engine_x64.exe
  30. 1 C:\Program Files (x86)\MSI\Dragon Center\DragonCenter_Service.exe
  31. 1 C:\Program Files (x86)\MSI\Dragon Center\Mystic_Light\LEDKeeper2.exe
  32. 1 C:\Program Files (x86)\MSI\Dragon Center\Mystic_Light\LightKeeperService.exe
  33. 1 C:\Program Files (x86)\MSI\Dragon Center\StorageMonitor\StorageMonitor.exe
  34. 1 C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
  35. 2 C:\Program Files (x86)\NZXT\CAM\Launcher\CAM.exe
  36. 1 C:\Program Files (x86)\NordVPN\nordvpn-service.exe
  37. 1 C:\Program Files (x86)\Origin\OriginWebHelperService.exe
  38. 1 C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
  39. 1 C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
  40. 1 C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
  41. 2 C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe
  42. 1 C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
  43. 1 C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
  44. 1 C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
  45. 1 C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
  46. 1 C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
  47. 1 C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe
  48. 1 C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
  49. 1 C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
  50. 1 C:\Program Files\Bitdefender Agent\ProductAgentService.exe
  51. 1 C:\Program Files\Bitdefender Antivirus Free\bdagent.exe
  52. 1 C:\Program Files\Bitdefender Antivirus Free\bdredline.exe
  53. 1 C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe
  54. 1 C:\Program Files\Bitdefender Antivirus Free\vsserv.exe
  55. 1 C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe
  56. 1 C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
  57. 1 C:\Program Files\Microvirt\MEmu\MemuService.exe
  58. 3 C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
  59. 1 C:\Program Files\Rainmeter\Rainmeter.exe
  60. 1 C:\Program Files\WindowsApps\Microsoft.WindowsStore_12004.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
  61. 1 C:\Program Files\cFosSpeed\spd.exe
  62. 6 C:\Users\Joe\AppData\Local\Discord\app-0.0.306\Discord.exe
  63. 1 C:\Users\Joe\Downloads\HiJackThis.exe
  64. 1 C:\Windows\ImmersiveControlPanel\SystemSettings.exe
  65. 1 C:\Windows\SysWOW64\XtuService.exe
  66. 2 C:\Windows\SysWOW64\muachost.exe
  67. 1 C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
  68. 1 C:\Windows\System32\ApplicationFrameHost.exe
  69. 1 C:\Windows\System32\BtwRSupportService.exe
  70. 2 C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e0a5a1b06de180e3\Display.NvContainer\NVDisplay.Container.exe
  71. 2 C:\Windows\System32\RtkAudUService64.exe
  72. 6 C:\Windows\System32\RuntimeBroker.exe
  73. 1 C:\Windows\System32\SearchFilterHost.exe
  74. 1 C:\Windows\System32\SearchIndexer.exe
  75. 1 C:\Windows\System32\SearchProtocolHost.exe
  76. 1 C:\Windows\System32\SecurityHealthService.exe
  77. 1 C:\Windows\System32\SecurityHealthSystray.exe
  78. 1 C:\Windows\System32\SettingSyncHost.exe
  79. 1 C:\Windows\System32\SgrmBroker.exe
  80. 1 C:\Windows\System32\SystemSettingsBroker.exe
  81. 1 C:\Windows\System32\Taskmgr.exe
  82. 1 C:\Windows\System32\WWAHost.exe
  83. 1 C:\Windows\System32\audiodg.exe
  84. 2 C:\Windows\System32\conhost.exe
  85. 2 C:\Windows\System32\csrss.exe
  86. 1 C:\Windows\System32\ctfmon.exe
  87. 3 C:\Windows\System32\dllhost.exe
  88. 1 C:\Windows\System32\dwm.exe
  89. 2 C:\Windows\System32\fontdrvhost.exe
  90. 1 C:\Windows\System32\lsass.exe
  91. 1 C:\Windows\System32\rundll32.exe
  92. 1 C:\Windows\System32\services.exe
  93. 1 C:\Windows\System32\sihost.exe
  94. 1 C:\Windows\System32\smartscreen.exe
  95. 1 C:\Windows\System32\smss.exe
  96. 1 C:\Windows\System32\spoolsv.exe
  97. 85 C:\Windows\System32\svchost.exe
  98. 1 C:\Windows\System32\taskhostw.exe
  99. 2 C:\Windows\System32\wbem\WmiPrvSE.exe
  100. 1 C:\Windows\System32\wininit.exe
  101. 1 C:\Windows\System32\winlogon.exe
  102. 1 C:\Windows\SystemApps\InputApp_cw5n1h2txyewy\WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe
  103. 1 C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
  104. 1 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
  105. 1 C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
  106. 1 C:\Windows\explorer.exe
  107.  
  108. O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_251\bin\jp2ssv.dll
  109. O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_251\bin\ssv.dll
  110. O4 - HKCU\..\Run: [CAM] = C:\Program Files (x86)\NZXT\CAM\Launcher\CAM.exe
  111. O4 - HKCU\..\Run: [Discord] = C:\Users\Joe\AppData\Local\Discord\app-0.0.306\Discord.exe
  112. O4 - HKCU\..\Run: [EpicGamesLauncher] = C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe -silent
  113. O4 - HKCU\..\Run: [Synapse3] = C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe /StartMinimized
  114. O4 - HKCU\..\Run: [utweb] = C:\Users\Joe\AppData\Roaming\uTorrent Web\utweb.exe /MINIMIZED
  115. O4 - HKCU\..\StartupApproved\Run: [NordVPN] = C:\Program Files (x86)\NordVPN\NordVPN.exe (2020/04/09)
  116. O4 - HKCU\..\StartupApproved\Run: [Spotify] = C:\Users\Joe\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized (2020/04/09)
  117. O4 - HKCU\..\StartupApproved\StartupFolder: C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Twitch.lnk -> C:\Users\Joe\AppData\Roaming\Twitch\Bin\Twitch.exe /startup (2020/04/13)
  118. O4 - HKLM\..\Run: [RtkAudUService] = C:\Windows\System32\RtkAudUService64.exe -background
  119. O4 - HKLM\..\Run: [SecurityHealth] = C:\Windows\system32\SecurityHealthSystray.exe
  120. O4 - HKLM\..\StartupApproved\Run32: [CryptoTab Browser] = C:\Program Files (x86)\CryptoTab Browser\Application\browser.exe (2020/04/02)
  121. O4 - HKLM\..\StartupApproved\Run32: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (2019/07/23)
  122. O4 - HKLM\..\StartupApproved\Run32: [TeamsMachineInstaller] = C:\Program Files\Teams Installer\Teams.exe --checkInstall --source=PROPLUS (file missing) (2020/01/27)
  123. O4 - HKU\.DEFAULT\..\Run: [Synapse3] = C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe /StartMinimized
  124. O15 - Trusted Zone: *.localhost
  125. O15 - Trusted Zone: http://webcompanion.com
  126. O17 - DHCP DNS 1: 192.168.0.1
  127. O17 - HKLM\System\CCS\Services\Tcpip\..\{76dd9584-89f1-4eb9-9ede-e2e0c122b649}: [NameServer] = 103.86.96.100
  128. O17 - HKLM\System\CCS\Services\Tcpip\..\{76dd9584-89f1-4eb9-9ede-e2e0c122b649}: [NameServer] = 103.86.99.100
  129. O21 - HKLM\..\ShellIconOverlayIdentifiers\ MEGA (Pending):  MEGA (Pending) - {056D528D-CE28-4194-9BA3-BA2E9197FF8C} - C:\Users\PC\AppData\Local\MEGAsync\ShellExtX64.dll (file missing)
  130. O21 - HKLM\..\ShellIconOverlayIdentifiers\ MEGA (Synced):  MEGA (Synced) - {05B38830-F4E9-4329-978B-1DD28605D202} - C:\Users\PC\AppData\Local\MEGAsync\ShellExtX64.dll (file missing)
  131. O21 - HKLM\..\ShellIconOverlayIdentifiers\ MEGA (Syncing):  MEGA (Syncing) - {0596C850-7BDD-4C9D-AFDF-873BE6890637} - C:\Users\PC\AppData\Local\MEGAsync\ShellExtX64.dll (file missing)
  132. O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ MEGA (Pending):  MEGA (Pending) - {056D528D-CE28-4194-9BA3-BA2E9197FF8C} - C:\Users\PC\AppData\Local\MEGAsync\ShellExtX32.dll (file missing)
  133. O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ MEGA (Synced):  MEGA (Synced) - {05B38830-F4E9-4329-978B-1DD28605D202} - C:\Users\PC\AppData\Local\MEGAsync\ShellExtX32.dll (file missing)
  134. O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ MEGA (Syncing):  MEGA (Syncing) - {0596C850-7BDD-4C9D-AFDF-873BE6890637} - C:\Users\PC\AppData\Local\MEGAsync\ShellExtX32.dll (file missing)
  135. O23 - Service R2: Bitdefender Correlation Service - (vsservppl) - C:\Program Files\Bitdefender Antivirus Free\vsservppl.exe /service
  136. O23 - Service R2: Bitdefender Security Service - (vsserv) - C:\Program Files\Bitdefender Antivirus Free\vsserv.exe /service
  137. O23 - Service R2: Bitdefender Update Service - (updatesrv) - C:\Program Files\Bitdefender Antivirus Free\updatesrv.exe /service
  138. O23 - Service R2: Bluetooth Driver Management Service - (BcmBtRSupport) - C:\Windows\system32\BtwRSupportService.exe
  139. O23 - Service R2: Chrome Remote Desktop Service - (chromoting) - C:\Program Files (x86)\Google\Chrome Remote Desktop\83.0.4103.2\remoting_host.exe --type=daemon --host-config="C:\ProgramData\Google\Chrome Remote Desktop\host.json"
  140. O23 - Service R2: Dragon Center Service - (DragonCenter_Service) - C:\Program Files (x86)\MSI\Dragon Center\DragonCenter_Service.exe
  141. O23 - Service R2: ExpressVpn Service - (ExpressVpnService) - C:\Program Files (x86)\ExpressVPN\bootstrap\AMD64\nssm.exe
  142. O23 - Service R2: Intel(R) Dynamic Application Loader Host Interface Service - (jhi_service) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  143. O23 - Service R2: Intel(R) Extreme Tuning Utility Service - (XTU3SERVICE) - C:\Windows\SysWOW64\XtuService.exe
  144. O23 - Service R2: Intel(R) Management and Security Application Local Management Service - (LMS) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  145. O23 - Service R2: LightKeeperService - C:\Program Files (x86)\MSI\Dragon Center\Mystic_Light\LightKeeperService.exe
  146. O23 - Service R2: MEmuSVC - C:\Program Files\Microvirt\MEmu\MemuService.exe
  147. O23 - Service R2: Microsoft Office Click-to-Run Service - (ClickToRunSvc) - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe /service
  148. O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e0a5a1b06de180e3\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e0a5a1b06de180e3\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
  149. O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
  150. O23 - Service R2: Origin Web Helper Service - C:\Program Files (x86)\Origin\OriginWebHelperService.exe
  151. O23 - Service R2: ProductAgentService - C:\Program Files\Bitdefender Agent\ProductAgentService.exe
  152. O23 - Service R2: Razer Central Service - (RzActionSvc) - C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
  153. O23 - Service R2: Razer Chroma SDK Server - C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
  154. O23 - Service R2: Razer Chroma SDK Service - C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
  155. O23 - Service R2: Razer Game Manager - (Razer Game Manager Service) - C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
  156. O23 - Service R2: Razer Synapse Service - C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
  157. O23 - Service R2: Realtek Audio Universal Service - (RtkAudioUniversalService) - C:\Windows\System32\RtkAudUService64.exe
  158. O23 - Service R2: Wallpaper Engine Service - C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe
  159. O23 - Service R2: bdredline - C:\Program Files\Bitdefender Antivirus Free\bdredline.exe
  160. O23 - Service R2: cFosSpeed System Service - (cFosSpeedS) - C:\Program Files\cFosSpeed\spd.exe -service
  161. O23 - Service R2: nordvpn-service - C:\Program Files (x86)\NordVPN\nordvpn-service.exe
  162. O23 - Service S2: CryptoTab Update Service (cryptobrowser) - (cryptobrowser) - C:\Program Files (x86)\CryptoCompany\Update\CryptoTabUpdate.exe /svc
  163. O23 - Service S2: Google Update Service (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
  164. O23 - Service S2: Intel(R) TPM Provisioning Service - C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe
  165. O23 - Service S3: CryptoTab Update Service (cryptobrowserm) - (cryptobrowserm) - C:\Program Files (x86)\CryptoCompany\Update\CryptoTabUpdate.exe /medsvc
  166. O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
  167. O23 - Service S3: Google Chrome Elevation Service - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.163\elevation_service.exe
  168. O23 - Service S3: Google Update Service (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
  169. O23 - Service S3: Intel(R) Capability Licensing Service TCP IP Interface - C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe
  170. O23 - Service S3: NVIDIA NetworkService Container - (NvContainerNetworkService) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
  171. O23 - Service S3: Office 64 Source Engine - (ose64) - c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
  172. O23 - Service S3: Origin Client Service - C:\Program Files (x86)\Origin\OriginClientService.exe
  173. O23 - Service S3: ProtonVPN Service - C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe
  174. O23 - Service S3: ProtonVPN Update Service - C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe
  175. O23 - Service S3: Rockstar Game Library Service - (Rockstar Service) - C:\Program Files\Rockstar Games\Launcher\RockstarService.exe
  176. O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
  177. O23 - Service S3: vgc - C:\Program Files\Riot Vanguard\vgc.exe
  178.  
  179.  
  180. --
  181. End of file - Time spent: 15.6 sec. - 32246 bytes, CRC32: FFFFFFFF. Sign: 軔
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!