爱华网＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
Logfile of Trend Micro HijackThis v2.0.4Scan saved at 9:37:18 AM, on 11/8/2011Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: Normal
Running processes:C:WINDOWSSystem32smss.exeC:WINDOWSsystem32winlogon.exeC:WINDOWSsystem32services.exeC:WINDOWSsystem32lsass.exeC:Program FilesHewlett-PackardFileSanitizerHPFSService.exeC:WINDOWSsystem32svchost.exeC:Program FilesHewlett-PackardDriveEncryptionHpFkCrypt.exeC:WINDOWSSystem32svchost.exeC:Program FilesDisplayLink CoreSoftwareDisplayLinkManager.exeC:Program FilesDisplayLink CoreSoftwareDisplayLinkUserAgent.exeC:WINDOWSsystem32vcsFPService.exeC:Program FilesCiscoCisco AnyConnect VPNClientvpnagent.exeC:WINDOWSSystem32WLTRYSVC.EXEC:WINDOWSSystem32bcmwltry.exeC:WINDOWSsystem32spoolsv.exeC:Program FilesIDTWDMSTacSV.exeC:Program FilesCommonFilesActivIdentityac.sharedstore.exeC:Program FilesLSI SoftModemagrsmsvc.exeC:Program FilesCommon FilesAppleMobile DeviceSupportAppleMobileDeviceService.exeC:Program FilesBonjourmDNSResponder.exeC:Program FilesHewlett-PackardSharedHPDrvMntSvc.exeC:Program FilesHewlett-PackardEmbedded SecuritySoftwareifxspmgt.exeC:Program FilesHewlett-PackardEmbedded SecuritySoftwareifxtcs.exeC:Program FilesJavajre6binjqs.exeC:Program FilesCommon FilesLightScribeLSSrvc.exeC:Program FilesIntelIntel(R) Management EngineComponentsLMSLMS.exeC:Program FilesPDF Completepdfsvc.exeC:Program FilesHewlett-PackardEmbedded SecuritySoftwareIfxPsdSv.exeC:WINDOWSSYSTEM32SPOOLDRIVERSW32X863HPZipm12.exeC:Program FilesSophosSophosAnti-VirusSAVAdminService.exeC:Program FilesSophosRemote ManagementSystemManagementAgentNT.exeC:Program FilesSophosAutoUpdateALsvc.exeC:Program FilesSophosRemote ManagementSystemRouterNT.exeC:WINDOWSsystem32svchost.exeC:Program FilesIntelIntel(R) Management EngineComponentsUNSUNS.exeC:WINDOWSsystem32SearchIndexer.exeC:WINDOWSsystem32CCMCcmExec.exeC:Program FilesHewlett-PackardHP PowerAssistantHPPA_Service.exeC:Program FilesHewlett-PackardHP WirelessAssistantHPWA_Service.exeC:Program FilesWIDCOMMBluetoothSoftwarebinbtwdins.exeC:Program FilesHewlett-PackardSharedhpqwmiex.exeC:WINDOWSExplorer.EXEC:Program FilesDisplayLink CoreSoftwareDisplayLinkUI.exeC:Program FilesiTunesiTunesHelper.exeC:Program FilesSynapticsSynTPSynTPEnh.exeC:Program FilesHewlett-PackardHP Quick LaunchButtonsQlbCtrl.exeC:WINDOWSsystem32WLTRAY.exeC:Program FilesHewlett-PackardFileSanitizerCoreShredder.exeC:Program FilesHewlett-PackardHP PowerAssistantHPPA_Main.exeC:WINDOWSsystem32AESTFltr.exeC:Program FilesHewlett-PackardEmbedded SecuritySoftwarePSDrt.exeC:Program FilesActivIdentityActivClientacevents.exeC:Program FilesActivIdentityActivClientaccrdsub.exeC:Program FilesGoogleGoogle Talkgoogletalk.exeC:WINDOWSsystem32igfxtray.exeC:WINDOWSsystem32hkcmd.exeC:WINDOWSsystem32igfxpers.exeC:Program FilesCommon FilesJavaJavaUpdatejusched.exeC:Program FilesSophosAutoUpdatealmon.exeC:Program FilesCommonFilesLightScribeLightScribeControlPanel.exeC:WINDOWSsystem32ctfmon.exeC:Program FilesAIMaim.exeC:Program FilesHewlett-PackardHP Quick LaunchButtonsCom4QLBEx.exeC:Program FilesWIDCOMMBluetooth SoftwareBTTray.exeC:Program FilesiPodbiniPodService.exeC:Program FilesTechSmithSnagIt 8SnagIt32.exeC:Program FilesWindows DesktopSearchWindowsSearch.exeC:Program FilesTechSmithSnagIt 8TSCHelp.exeC:Documents and SettingsmhuiApplicationDataDropboxbinDropbox.exeC:Program FilesTechSmithSnagIt 8SnagPriv.exeC:PROGRA~1WIDCOMMBLUETO~1BTSTAC~1.EXEC:Program FilesIntelIntel(R) Management EngineComponentsIMSSPrivacyIconClient.exeC:Program FilesHewlett-PackardHP WirelessAssistantHPWA_Main.exeC:ProgramFilesHewlett-PackardSharedhpCaslNotification.exeC:Program FilesMicrosoft OfficeOffice14OUTLOOK.EXEC:Program FilesCommon FilesJavaJavaUpdatejucheck.exeC:WINDOWSsystem32SearchProtocolHost.exeC:Program FilesInternet Exploreriexplore.exeC:Program FilesInternet Exploreriexplore.exeC:WINDOWSsystem32msiexec.exeC:WINDOWSsystem32SearchProtocolHost.exeC:Program FilesTrend MicroHiJackThisHiJackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,SearchPage = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page= http://inside.organic.com/R1 - HKLMSoftwareMicrosoftInternetExplorerMain,Default_Page_URL =http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLMSoftwareMicrosoftInternetExplorerMain,Default_Search_URL =http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,SearchPage = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page= http://go.microsoft.com/fwlink/?LinkId=69157R3 - URLSearchHook: AOL Messaging Toolbar Search Class -{03402f96-3dc7-4285-bc50-9e81fefafe43} - C:Program FilesAIMToolbaraimtb.dllO2 - BHO: SnagIt Toolbar Loader -{00C6482D-C502-44C8-8409-FCE54AD9C208} - C:ProgramFilesTechSmithSnagIt 8SnagItBHO.dllO2 - BHO: AcroIEHelperStub -{18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommonFilesAdobeAcrobatActiveXAcroIEHelperShim.dllO2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601}- C:Program FilesHewlett-PackardFile SanitizerIEBHO.dllO2 - BHO: Sophos Web Content Scanner -{39EA7695-B3F2-4C44-A4BC-297ADA8FD235} - C:ProgramFilesSophosSophos Anti-VirusSophosBHO.dllO2 - BHO: Groove GFS Browser Helper -{72853161-30C5-4D22-B7F9-0BBC1D38A37E} -C:PROGRA~1MICROS~3Office14GROOVEEX.DLLO2 - BHO: AOL Messaging Toolbar Loader -{b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:Program FilesAIMToolbaraimtb.dllO2 - BHO: URLRedirectionBHO -{B4F3A835-0E21-4959-BA22-42B3008E02FF} -C:PROGRA~1MICROS~3Office14URLREDIR.DLLO2 - BHO: Java(tm) Plug-In 2 SSV Helper -{DBC80044-A445-435b-BC74-9C25C1C588A9} - C:ProgramFilesJavajre6binjp2ssv.dllO2 - BHO: JQSIEStartDetectorImpl -{E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:ProgramFilesJavajre6libdeployjqsiejqs_plugin.dllO3 - Toolbar: AOL Messaging Toolbar -{61539ecd-cc67-4437-a03c-9aaccbd14326} - C:Program FilesAIMToolbaraimtb.dllO3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3}- C:Program FilesTechSmithSnagIt 8SnagItIEAddin.dllO4 - HKLM..Run: [QuickTime Task] "C:ProgramFilesQuickTimeQTTask.exe" -atboottimeO4 - HKLM..Run: [iTunesHelper] "C:ProgramFilesiTunesiTunesHelper.exe"O4 - HKLM..Run: [AppleSyncNotifier] C:Program FilesCommonFilesAppleMobile Device SupportAppleSyncNotifier.exeO4 - HKLM..Run: [PDF Complete] C:Program FilesPDFCompletepdfsty.exeO4 - HKLM..Run: [SynTPEnh]%ProgramFiles%SynapticsSynTPSynTPEnh.exeO4 - HKLM..Run: [QlbCtrl.exe] C:ProgramFilesHewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe/StartO4 - HKLM..Run: [Broadcom Wireless Manager UI]C:WINDOWSsystem32WLTRAY.exeO4 - HKLM..Run: [IFXSPMGT] "C:ProgramFilesHewlett-PackardEmbedded Security Softwareifxspmgt.exe"/NotifyLogonO4 - HKLM..Run: [File Sanitizer] C:ProgramFilesHewlett-PackardFile SanitizerCoreShredder.exeO4 - HKLM..Run: [snp2uvc] rundll32.exeC:WINDOWSsystem32csnp2uvc.dll,ResetCIDSO4 - HKLM..Run: [HPPowerAssistant] C:ProgramFilesHewlett-PackardHP Power AssistantHPPA_Main.exe/hiddenO4 - HKLM..Run: [Cpqset] "C:ProgramFilesHewlett-PackardDefault Settingscpqset.exe"O4 - HKLM..Run: [AESTFltr]%SystemRoot%system32AESTFltr.exe /NoDlgO4 - HKLM..Run: [IMSS] "C:Program FilesIntelIntel(R)Management Engine ComponentsIMSSPIconStartup.exe"O4 - HKLM..Run: [HPWirelessAssistant] C:ProgramFilesHewlett-PackardHP Wireless AssistantDelayedAppStarter.exe120 C:Program FilesHewlett-PackardHP WirelessAssistantHPWA_Main.exe /hiddenO4 - HKLM..Run: [acevents] "C:ProgramFilesActivIdentityActivClientacevents.exe"O4 - HKLM..Run: [accrdsub] "C:ProgramFilesActivIdentityActivClientaccrdsub.exe"O4 - HKLM..Run: [BCSSync] "C:Program FilesMicrosoftOfficeOffice14BCSSync.exe" /DelayServicesO4 - HKLM..Run: [googletalk] C:Program FilesGoogleGoogleTalkgoogletalk.exe /autostartO4 - HKLM..Run: [IgfxTray]C:WINDOWSsystem32igfxtray.exeO4 - HKLM..Run: [HotKeysCmds]C:WINDOWSsystem32hkcmd.exeO4 - HKLM..Run: [Persistence]C:WINDOWSsystem32igfxpers.exeO4 - HKLM..Run: [SunJavaUpdateSched] "C:ProgramFilesCommon FilesJavaJava Updatejusched.exe"O4 - HKLM..Run: [Sophos AutoUpdate Monitor] C:ProgramFilesSophosAutoUpdatealmon.exeO4 - HKLM..Run: [Adobe ARM] "C:Program FilesCommonFilesAdobeARM1.0AdobeARM.exe"O4 - HKCU..Run: [LightScribe Control Panel] C:ProgramFilesCommon FilesLightScribeLightScribeControlPanel.exe-hiddenO4 - HKCU..Run: [QuickTime Task] "C:ProgramFilesQuickTimeQTTask.exe" -atboottimeO4 - HKCU..Run: [ctfmon.exe]C:WINDOWSsystem32ctfmon.exeO4 - HKCU..Run: [Aim] "C:Program FilesAIMaim.exe" /dlocale=en-USO4 - Startup: Dropbox.lnk = C:Documents andSettingsmhuiApplication DataDropboxbinDropbox.exeO4 - Startup: Spoon Sandbox Manager 3.21.lnk = Documents andSettingsmhuiLocal SettingsApplicationDataSpoon3.21.0.22Spoon-Sandbox-Native.exeO4 - Startup: Spoon Sandbox Manager 3.23.lnk = Documents andSettingsmhuiLocal SettingsApplicationDataSpoon3.23.0.12Spoon-Sandbox-Native.exeO4 - Startup: Spoon Sandbox Manager 3.24.lnk = Documents andSettingsmhuiLocal SettingsApplicationDataSpoon3.24.0.9Spoon-Sandbox-Native.exeO4 - Global Startup: Bluetooth.lnk = ?O4 - Global Startup: SnagIt 8.lnk = C:ProgramFilesTechSmithSnagIt 8SnagIt32.exeO4 - Global Startup: Windows Search.lnk = C:ProgramFilesWindows Desktop SearchWindowsSearch.exeO8 - Extra context menu item: E&xport toMicrosoft Excel -res://C:PROGRA~1MICROS~3Office14EXCEL.EXE/3000O8 - Extra context menu item: Se&nd to OneNote- res://C:PROGRA~1MICROS~3Office14ONBttnIE.dll/105O8 - Extra context menu item: Send to&Bluetooth Device... - C:ProgramFilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htmO8 - Extra context menu item: Send To Bluetooth - C:ProgramFilesWIDCOMMBluetooth Softwarebtsendto_ie.htmO9 - Extra button: Send to OneNote -{2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Program FilesMicrosoftOfficeOffice14ONBttnIE.dllO9 - Extra 'Tools' menuitem: Se&nd to OneNote- {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:ProgramFilesMicrosoft OfficeOffice14ONBttnIE.dllO9 - Extra button: OneNote Lin&ked Notes -{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Program FilesMicrosoftOfficeOffice14ONBttnIELinkedNotes.dllO9 - Extra 'Tools' menuitem: OneNote Lin&kedNotes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:ProgramFilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dllO9 - Extra button: @btrez.dll,-4015 -{CCA281CA-C863-46ef-9331-5C8D4460577F} - C:ProgramFilesWIDCOMMBluetooth Softwarebtsendto_ie.htmO9 - Extra 'Tools' menuitem: @btrez.dll,-12650 -{CCA281CA-C863-46ef-9331-5C8D4460577F} - C:ProgramFilesWIDCOMMBluetooth Softwarebtsendto_ie.htmO9 - Extra button: (no name) -{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetworkDiagnosticxpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetworkDiagnosticxpnetdiag.exeO9 - Extra button: Messenger -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramFilesMessengermsmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgramFilesMessengermsmsgs.exeO16 - DPF: {41861299-EAB2-4DCC-986C-802AE12AC499}(RSClientPrint 2005 Class) -http://cprpt3-sfo/ReportServer/Reserved.ReportViewerWebControl.axd?ExecutionID=lkvkegazwtprb1j15ygnbsap&ControlID=0c5fec091f7041648060655776d0e344&Culture=127&UICulture=9&ReportStack=1&OpType=PrintCabO16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}(MUWebControl Class) -http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1297108330203O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}(GpcContainer Class) -https://digitas.webex.com/client/T27L10NSP21/webex/ieatgpc.cabO16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabO17 - HKLMSystemCCSServicesTcpipParameters: Domain =windows.organic.comO17 - HKLMSoftware..Telephony: DomainName =windows.organic.comO17 - HKLMSystemCS1ServicesTcpipParameters: Domain =windows.organic.comO17 - HKLMSystemCS2ServicesTcpipParameters: Domain =windows.organic.comO18 - Filter hijack: text/xml -{807573E5-5146-11D5-A672-00B0D022E945} - C:Program FilesCommonFilesMicrosoft SharedOFFICE14MSOXMLMF.DLLO20 - AppInit_DLLs:C:PROGRA~1SophosSOPHOS~1SOPHOS~1.DLLO20 - Winlogon Notify: ackpbsc - C:ProgramFilesActivIdentityActivClientackpbsc.dllO20 - Winlogon Notify: acunlock - C:ProgramFilesActivIdentityActivClientacunlock.dllO20 - Winlogon Notify: DeviceNP - DeviceNP.dll (filemissing)O22 - SharedTaskScheduler: Browseui preloader -{438755C2-A8BA-11D1-B96B-00A0C90312E1} -C:WINDOWSsystem32browseui.dllO22 - SharedTaskScheduler: Component Categories cache daemon -{8C7461EF-2B13-11d2-BE35-3078302C2030} -C:WINDOWSsystem32browseui.dllO23 - Service: ActivIdentity Shared Store Service(ac.sharedstore) - ActivIdentity - C:Program FilesCommonFilesActivIdentityac.sharedstore.exeO23 - Service: Agere Modem Call Progress Audio(AgereModemAudio) - LSI Corporation - C:Program FilesLSISoftModemagrsmsvc.exeO23 - Service: Apple Mobile Device - Apple Inc. - C:ProgramFilesCommon FilesAppleMobile DeviceSupportAppleMobileDeviceService.exeO23 - Service: Bonjour Service - Apple Inc. - C:ProgramFilesBonjourmDNSResponder.exeO23 - Service: Bluetooth Service (btwdins) - BroadcomCorporation. - C:Program FilesWIDCOMMBluetoothSoftwarebinbtwdins.exeO23 - Service: Com4QLBEx - Hewlett-Packard DevelopmentCompany, L.P. - C:Program FilesHewlett-PackardHP Quick LaunchButtonsCom4QLBEx.exeO23 - Service: DisplayLinkManager (DisplayLinkService) -DisplayLink Corp. - C:Program FilesDisplayLink CoreSoftwareDisplayLinkManager.exeO23 - Service: HP ProtectTools Device Locking / Auditing(FLCDLOCK) - Hewlett-Packard Ltd -C:WINDOWSsystem32flcdlock.exeO23 - Service: HP Power Assistant Service - Hewlett-PackardCompany - C:Program FilesHewlett-PackardHP PowerAssistantHPPA_Service.exeO23 - Service: HP Wireless Assistant Service - Hewlett-PackardCompany - C:Program FilesHewlett-PackardHP WirelessAssistantHPWA_Service.exeO23 - Service: HP Quick Synchronization Service(HPDrvMntSvc.exe) - Hewlett-Packard Company - C:ProgramFilesHewlett-PackardSharedHPDrvMntSvc.exeO23 - Service: Drive Encryption Service (HpFkCryptService) -McAfee, Inc. - C:Program FilesHewlett-PackardDriveEncryptionHpFkCrypt.exeO23 - Service: File Sanitizer for HP ProtectTools(HPFSService) - Hewlett-Packard - C:ProgramFilesHewlett-PackardFile SanitizerHPFSService.exeO23 - Service: HP Software Framework Service (hpqwmiex) -Hewlett-Packard Company - C:ProgramFilesHewlett-PackardSharedhpqwmiex.exeO23 - Service: Security Platform Management Service(IFXSpMgtSrv) - Infineon Technologies AG - C:ProgramFilesHewlett-PackardEmbedded Security Softwareifxspmgt.exeO23 - Service: Trusted Platform Core Service (IFXTCS) -Infineon Technologies AG - C:ProgramFilesHewlett-PackardEmbedded Security Softwareifxtcs.exeO23 - Service: iPod Service - Apple Inc. - C:ProgramFilesiPodbiniPodService.exeO23 - Service: Java Quick Starter (JavaQuickStarterService) -Sun Microsystems, Inc. - C:ProgramFilesJavajre6binjqs.exeO23 - Service: LightScribeService Direct Disc Labeling Service(LightScribeService) - Hewlett-Packard Company - C:ProgramFilesCommon FilesLightScribeLSSrvc.exeO23 - Service: Intel(R) Management and Security ApplicationLocal Management Service (LMS) - Intel Corporation - C:ProgramFilesIntelIntel(R) Management Engine ComponentsLMSLMS.exeO23 - Service: PDF Document Manager (pdfcDispatcher) - PDFComplete Inc - C:Program FilesPDF Completepdfsvc.exeO23 - Service: Personal Secure Drive Service(PersonalSecureDriveService) - Infineon Technologies AG -C:Program FilesHewlett-PackardEmbedded SecuritySoftwareIfxPsdSv.exeO23 - Service: Pml Driver HPZ12 - HP -C:WINDOWSSYSTEM32SPOOLDRIVERSW32X863HPZipm12.exeO23 - Service: Sophos Anti-Virus status reporter(SAVAdminService) - Sophos Plc - C:Program FilesSophosSophosAnti-VirusSAVAdminService.exeO23 - Service: Sophos Anti-Virus (SAVService) - Sophos Plc -C:Program FilesSophosSophos Anti-VirusSavService.exeO23 - Service: Sophos Agent - Sophos Plc - C:ProgramFilesSophosRemote Management SystemManagementAgentNT.exeO23 - Service: Sophos AutoUpdate Service - Sophos Plc -C:Program FilesSophosAutoUpdateALsvc.exeO23 - Service: Sophos Message Router - Sophos Plc - C:ProgramFilesSophosRemote Management SystemRouterNT.exeO23 - Service: Audio Service (STacSV) - IDT, Inc. - C:ProgramFilesIDTWDMSTacSV.exeO23 - Service: Sophos Web Intelligence Service (swi_service) -Sophos Plc - C:Program FilesSophosSophos Anti-VirusWebIntelligenceswi_service.exeO23 - Service: Intel(R) Management & SecurityApplication User Notification Service (UNS) - Intel Corporation -C:Program FilesIntelIntel(R) Management EngineComponentsUNSUNS.exeO23 - Service: Validity VCS Fingerprint Service (vcsFPService)- Validity Sensors, Inc. -C:WINDOWSsystem32vcsFPService.exeO23 - Service: Cisco AnyConnect VPN Agent (vpnagent) - CiscoSystems, Inc. - C:Program FilesCiscoCisco AnyConnect VPNClientvpnagent.exeO23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) -Unknown owner - C:WINDOWSSystem32WLTRYSVC.EXE
--End of file - 18375 bytes
