Oporavak sistema :: Pc Klinika ~ Doktori za vas kompjuter

Logfile of Trend Micro HijackThis v2. 0. 2
Scan saved at 23:06:11, on 30. 10. 2009
Platform: Windows XP SP2 (WinNT 5. 01. 2600)
MSIE: Internet Explorer v8. 00 (8. 00. 6001. 18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss. exe
C:\WINDOWS\system32\winlogon. exe
C:\WINDOWS\system32\services. exe
C:\WINDOWS\system32\lsass. exe
C:\WINDOWS\system32\svchost. exe
C:\WINDOWS\System32\svchost. exe
C:\WINDOWS\system32\spoolsv. exe
C:\WINDOWS\system32\WgaTray. exe
C:\WINDOWS\Explorer. EXE
C:\WINDOWS\system32\drivers\CDAC11BA. EXE
C:\Program Files\Eset\nod32krn. exe
C:\WINDOWS\system32\svchost. exe
C:\WINDOWS\SOUNDMAN. EXE
C:\WINDOWS\system32\VTTimer. exe
C:\Program Files\Eset\nod32kui. exe
C:\WINDOWS\PixArt\PAC207\Monitor. exe
C:\Program Files\Winamp\winampa. exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox. exe
C:\WINDOWS\system32\ctfmon. exe
C:\Program Files\McAfee Security Scan\1. 0. 150\SSScheduler. exe
C:\Program Files\Trend Micro\HijackThis\HijackThis. exe
C:\WINDOWS\system32\wuauclt. exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp:|| go. microsoft. com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:|| www. yahoo. com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp:|| us. rd. yahoo. com/customize/ie/defaults/su/msgr9/*hxxp:|| www. yahoo. com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp:|| us. rd. yahoo. com/customize/ie/defaults/sb/msgr9/*hxxp:|| www. yahoo. com/ext/search/search. html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp:|| us. rd. yahoo. com/customize/ie/defaults/sp/msgr9/*hxxp:|| www. yahoo. com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp:|| www. yahoo. com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Dealio Toolbar\SearchSettings. dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE. dll
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb. dll
O2 - BHO: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl. dll
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper. dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32. dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5. 3. 4501. 1418\swg. dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E. dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv. dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Dealio Toolbar\SearchSettings. dll
O2 - BHO: OTS Software Toolbar - {e41b29e5-88b5-40b1-903e-080e0f2c4b65} - C:\Program Files\OTS_Software\tbOTS0. dll
O3 - Toolbar: OTS Software Toolbar - {e41b29e5-88b5-40b1-903e-080e0f2c4b65} - C:\Program Files\OTS_Software\tbOTS0. dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb. dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE. dll
O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7. dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar. dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32. dll
O3 - Toolbar: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl. dll
O4 - HKLM\. . \Run: [SoundMan] SOUNDMAN. EXE
O4 - HKLM\. . \Run: [VTTimer] VTTimer. exe
O4 - HKLM\. . \Run: [nod32kui] "C:\Program Files\Eset\nod32kui. exe" /WAITSERVICE
O4 - HKLM\. . \Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck. exe
O4 - HKLM\. . \Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor. exe
O4 - HKLM\. . \Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor. exe
O4 - HKLM\. . \Run: [WinampAgent] "C:\Program Files\Winamp\winampa. exe"
O4 - HKLM\. . \Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox. exe" /autorun
O4 - HKLM\. . \Run: [SearchSettings] C:\Program Files\Dealio Toolbar\SearchSettings. exe
O4 - HKLM\. . \Run: [Synchronization Manager] %SystemRoot%\system32\mobsync. exe /logon
O4 - HKLM\. . \Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\7. bin\M3PLUGIN. DLL,UPF
O4 - HKCU\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\ctfmon. exe
O4 - HKUS\S-1-5-19\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\. . \RunOnce: [RunNarrator] Narrator. exe (User 'SYSTEM')
O4 - HKUS\. DEFAULT\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'Default user')
O4 - HKUS\. DEFAULT\. . \RunOnce: [RunNarrator] Narrator. exe (User 'Default user')
O4 - Global Startup: McAfee Security Scan. lnk = ?
O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR. DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\TWEETY\Start Menu\Programs\IMVU\Run IMVU. lnk
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau. dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - hxxp:|| update. microsoft. com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site. cab?1242592323734
O18 - Protocol: ebk - {1E411CE8-FE8B-4973-B8E0-6EA2CC3C6B06} - C:\WINDOWS\system32\ebkp. dll
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA. EXE
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService. exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService. exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn. exe

--
End of file - 7169 bytes