Logfile of HijackThis v1.99.1 Scan saved at 20:32:10, on 2007-02-13 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS2\System32\smss.exe C:\WINDOWS2\system32\csrss.exe C:\WINDOWS2\system32\winlogon.exe C:\WINDOWS2\system32\services.exe C:\WINDOWS2\system32\lsass.exe C:\WINDOWS2\system32\Ati2evxx.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\System32\svchost.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\system32\svchost.exe C:\WINDOWS2\system32\spoolsv.exe C:\Program Files\G DATA\InternetSecurity 2007\AVK\AVKService.exe C:\Program Files\G DATA\InternetSecurity 2007\AVK\AVKWCtl.exe C:\WINDOWS2\System32\GEARSec.exe C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe D:\Program Files\Spyware Doctor\sdhelp.exe D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS2\system32\wdfmgr.exe E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe C:\Program Files\G DATA\InternetSecurity 2007\Firewall\GDFwSvc.exe C:\WINDOWS2\System32\alg.exe C:\WINDOWS2\system32\Ati2evxx.exe C:\WINDOWS2\Explorer.EXE C:\WINDOWS2\RTHDCPL.EXE C:\Program Files\G DATA\InternetSecurity 2007\AVKTray\AVKTray.exe E:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe C:\WINDOWS2\system32\ctfmon.exe D:\Program Files\Spyware Doctor\swdoctor.exe E:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\G DATA\InternetSecurity 2007\Firewall\GDFirewallTray.exe D:\Program Files\AutoConnect\AutoConnect.exe D:\PROGRA~1\MOZILL~1\FIREFOX.EXE E:\Program Files\Webroot\Spy Sweeper\SSU.EXE C:\PROGRA~1\GDATA~1\INTERN~1\AVK\avk.exe D:\Program Files\Gadu-Gadu\gg.exe C:\WINDOWS2\system32\NOTEPAD.EXE G:\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AVKTray] "C:\Program Files\G DATA\InternetSecurity 2007\AVKTray\AVKTray.exe" O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [SpySweeper] "E:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS2\system32\ctfmon.exe O4 - HKCU\..\Run: [Spyware Doctor] "D:\Program Files\Spyware Doctor\swdoctor.exe" /Q O4 - HKCU\..\Run: [SUPERAntiSpyware] "E:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" O4 - Global Startup: G DATA Firewall Tray.lnk = ? O9 - Extra button: Pop-Up Blocker - {84536FE2-ABCD-3586-DCAB-40E286323737} - D:\Program Files\WINnerTweak3\PopUp Blocker.exe O9 - Extra 'Tools' menuitem: Pop-Up Blocker - {84536FE2-ABCD-3586-DCAB-40E286323737} - D:\Program Files\WINnerTweak3\PopUp Blocker.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O17 - HKLM\System\CCS\Services\Tcpip\..\{1EE40EDF-632B-4F67-A2FA-8FC898898363}: NameServer = 194.204.152.34 217.98.63.164 O17 - HKLM\System\CS1\Services\Tcpip\..\{1EE40EDF-632B-4F67-A2FA-8FC898898363}: NameServer = 194.204.152.34 217.98.63.164 O17 - HKLM\System\CS2\Services\Tcpip\..\{1EE40EDF-632B-4F67-A2FA-8FC898898363}: NameServer = 194.204.152.34 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: !SASWinLogon - E:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: WRNotifier - C:\WINDOWS2\SYSTEM32\WRLogonNTF.dll O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS2\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS2\system32\ati2sgag.exe O23 - Service: AVKProxy - G DATA Software AG - C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe O23 - Service: AVK Service (AVKService) - G DATA Software AG - C:\Program Files\G DATA\InternetSecurity 2007\AVK\AVKService.exe O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - C:\Program Files\G DATA\InternetSecurity 2007\AVK\AVKWCtl.exe O23 - Service: G DATA Personal Firewall (GDFwSvc) - Unknown owner - C:\Program Files\G DATA\InternetSecurity 2007\Firewall\GDFwSvc.exe O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS2\System32\GEARSec.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - D:\Program Files\Spyware Doctor\sdhelp.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS2\system32\ZoneLabs\vsmon.exe O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe