logfile of trend micro hijackthis v2.0.2
scan saved at 03:11:37 ص, on 21/07/2009
platform: Windows xp sp3 (winnt 5.01.2600)
msie: Internet explorer v6.00 sp3 (6.00.2900.5512)
boot mode: Normal
running processes:
C:\windows\system32\smss.exe
c:\windows\system32\winlogon.exe
c:\windows\system32\services.exe
c:\windows\system32\lsass.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\explorer.exe
c:\windows\system32\spoolsv.exe
c:\program files\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\agent\mcagent.exe
c:\windows\system32\ctfmon.exe
c:\program files\google\googletoolbarnotifier\googletoolbarnotifier.exe
c:\program files\windows live\messenger\msnmsgr.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
c:\program files\techsmith\snagit 9\snagit32.exe
c:\program files\techsmith\snagit 9\tschelp.exe
c:\program files\techsmith\snagit 9\snagpriv.exe
c:\program files\techsmith\snagit 9\snagiteditor.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
c:\program files\messenger\msmsgs.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\progra~1\mcafee.com\vso\mcshield.exe
c:\progra~1\mcafee.com\agent\mctskshd.exe
c:\windows\system32\wscntfy.exe
c:\program files\windows live\contacts\wlcomm.exe
c:\windows\system32\svchost.exe
d:\photoshop.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\trend micro\hijackthis\hijackthis.exe
r0 - hkcu\software\microsoft\internet explorer\main,start page =
o4 - hklm\..\run: [vsochecktask] "c:\progra~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
o4 - hklm\..\run: [virusscan online] c:\program files\mcafee.com\vso\mcvsshld.exe
o4 - hklm\..\run: [oasclnt] c:\program files\mcafee.com\vso\oasclnt.exe
o4 - hklm\..\run: [mcagentexe] c:\progra~1\mcafee.com\agent\mcagent.exe
o4 - hklm\..\run: [mcupdateexe] c:\progra~1\mcafee.com\agent\mcupdate.exe
o4 - hkcu\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe
o4 - hkcu\..\run: [swg] c:\program files\google\googletoolbarnotifier\googletoolbarnotifier.exe
o4 - hkcu\..\run: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
o4 - hkus\s-1-5-19\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'local service')
o4 - hkus\s-1-5-20\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'network service')
o4 - hkus\s-1-5-18\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'system')
o4 - hkus\.default\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'default user')
o4 - global startup: Adobe gamma loader.lnk = c:\program files\common files\adobe\calibration\adobe gamma loader.exe
o4 - global startup: Snagit 9.lnk = c:\program files\techsmith\snagit 9\snagit32.exe
o9 - extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - c:\windows\network diagnostic\xpnetdiag.exe
o9 - extra 'tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - c:\windows\network diagnostic\xpnetdiag.exe
o9 - extra button: Messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o9 - extra 'tools' menuitem: Windows messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o16 - dpf: {4f1e5b1a-2a80-42ca-8532-2d05cb959537} (msn photo upload tool) -
o16 - dpf: {6414512b-b978-451d-a0d8-fcfdf33e833c} (wuwebcontrol class) -
o16 - dpf: {e2883e8f-472f-4fb0-9522-ac9bf37916a7} -
o18 - filter: X-sdch - {b1759355-3eec-4c1e-b0f1-b719fe26e377} - c:\program files\google\google toolbar\component\fastsearch_a8904fb862bd9564.dll
o23 - service: Google software updater (gusvc) - google - c:\program files\google\common\google updater\googleupdaterservice.exe
o23 - service: Mcafee wsc integration (mcdetect.exe) - mcafee, inc - c:\program files\mcafee.com\agent\mcdetect.exe
o23 - service: Mcafee.com mcshield (mcshield) - mcafee inc. - c:\progra~1\mcafee.com\vso\mcshield.exe
o23 - service: Mcafee task scheduler (mctskshd.exe) - mcafee, inc - c:\progra~1\mcafee.com\agent\mctskshd.exe
o23 - service: Mcafee securitycenter update manager (mcupdmgr.exe) - mcafee, inc - c:\progra~1\mcafee.com\agent\mcupdmgr.exe
--
end of file - 4402 bytes
