API tools faq
paste
Advertisement
riking

hijackthis

riking
May 14th, 2012
187
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.62 KB | None | 0 0
raw download clone embed print report
  1. Logfile of Trend Micro HijackThis v2.0.4
  2. Scan saved at 12:13:08 PM, on 5/14/2012
  3. Platform: Windows XP SP3 (WinNT 5.01.2600)
  4. MSIE: Internet Explorer v8.00 (8.00.6001.18702)
  5. Boot mode: Normal
  6.  
  7. Running processes:
  8. C:\WINDOWS\Explorer.EXE
  9. C:\Program Files\Cyber High Browser\exec\cyberhighlauncher-win32.exe
  10. C:\Program Files\Analog Devices\Core\smax4pnp.exe
  11. C:\WINDOWS\system32\igfxsrvc.exe
  12. C:\WINDOWS\system32\igfxpers.exe
  13. C:\Program Files\Intel\AMT\atchk.exe
  14. C:\Program Files\Common Files\Java\Java Update\jusched.exe
  15. C:\Program Files\Kaspersky Lab\Kaspersky Endpoint Security 8 for Windows\avp.exe
  16. C:\WINDOWS\system32\ctfmon.exe
  17. C:\Program Files\FOG\FOGTray.exe
  18. C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe
  19. C:\WINDOWS\system32\taskmgr.exe
  20. C:\Program Files\Cyber High Browser\seamonkey.exe
  21. C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  22. C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  23. C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  24. C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  25. C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  26. C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  27. C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  28. C:\WINDOWS\CCM\SCNotification.exe
  29. C:\WINDOWS\system32\NOTEPAD.EXE
  30. C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
  31. H:\My Documents\Downloads\HijackThis.exe
  32.  
  33. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  34. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  35. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  36. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  37. O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
  38. O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  39. O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
  40. O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
  41. O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
  42. O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
  43. O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
  44. O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
  45. O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
  46. O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
  47. O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
  48. O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
  49. O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
  50. O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
  51. O4 - HKLM\..\Run: [atchk] "C:\Program Files\Intel\AMT\atchk.exe"
  52. O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
  53. O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
  54. O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  55. O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
  56. O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
  57. O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Endpoint Security 8 for Windows\avp.exe"
  58. O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
  59. O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
  60. O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  61. O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  62. O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\1904587\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
  63. O4 - HKLM\..\Policies\Explorer\Run: [1] \\jfkdc03\NETLOGON\MapY.vbs
  64. O4 - Global Startup: FOGTray.exe.lnk = ?
  65. O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  66. O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  67. O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
  68. O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
  69. O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
  70. O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
  71. O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
  72. O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
  73. O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
  74. O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
  75. O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
  76. O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  77. O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  78. O15 - Trusted Zone: http://jfksccm.jfk.fmtusd.org
  79. O15 - ESC Trusted Zone: http://jfksccm.jfk.fmtusd.org
  80. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = jfk.fmtusd.org
  81. O17 - HKLM\Software\..\Telephony: DomainName = jfk.fmtusd.org
  82. O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = jfk.fmtusd.org
  83. O20 - Winlogon Notify: sccmrdplauncher - SccmRdpLauncher.dll (file missing)
  84. O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
  85. O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
  86. O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
  87. O23 - Service: Intel(R) Active Management Technology System Status Service (atchksrv) - Intel Corporation - C:\Program Files\Intel\AMT\atchksrv.exe
  88. O23 - Service: Kaspersky Endpoint Security Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Endpoint Security 8 for Windows\avp.exe
  89. O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
  90. O23 - Service: FOG Service (Fog Service) - FOG - C:\Program Files\FOG\FOGService.exe
  91. O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
  92. O23 - Service: Kaspersky Lab Network Agent (klnagent) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\NetworkAgent\klnagent.exe
  93. O23 - Service: Intel(R) Active Management Technology Local Management Service (LMS) - Intel - C:\Program Files\Intel\AMT\LMS.exe
  94. O23 - Service: ConfigMgr Task Sequence Agent (smstsmgr) - Unknown owner - C:\WINDOWS\CCM\TSManager.exe
  95. O23 - Service: Intel(R) Active Management Technology User Notification Service (UNS) - Intel - C:\Program Files\Intel\AMT\UNS.exe
  96.  
  97. --
  98. End of file - 8821 bytes
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!