Logfile of HijackThis v1.99.1 Scan saved at 22:30:52, on 2007-06-24 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss***** C:\WINDOWS\system32\winlogon***** C:\WINDOWS\system32\services***** C:\WINDOWS\system32\lsass***** C:\WINDOWS\system32\svchost***** C:\WINDOWS\System32\svchost***** D:\Programy\Sygate Personal Firewall\smc***** C:\WINDOWS\system32\spoolsv***** C:\Program Files\Common Files\Symantec Shared\ccSetMgr***** C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc***** C:\Program Files\Norton AntiVirus\navapsvc***** C:\Program Files\Norton AntiVirus\IWP\NPFMntor***** C:\Program Files\Intel\Wireless\Bin\RegSrvc***** C:\WINDOWS\system32\tcpsvcs***** C:\Program Files\Common Files\Symantec Shared\SNDSrvc***** C:\Program Files\Analog Devices\SoundMAX\SMAgent***** C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc***** C:\Program Files\Common Files\Symantec Shared\ccEvtMgr***** C:\Program Files\Intel\Wireless\Bin\ZcfgSvc***** C:\WINDOWS\Explorer***** C:\Program Files\Common Files\Symantec Shared\ccApp***** C:\Program Files\Analog Devices\SoundMAX\SMax4PNP***** C:\Program Files\Microsoft IntelliType Pro\itype***** D:\Programy\Amoumain***** C:\WINDOWS\services***** C:\WINDOWS\system32\hkcmd***** C:\WINDOWS\system32\dla\tfswctrl***** D:\Programy\Gadu-Gadu\gg***** C:\WINDOWS\system32\ctfmon***** C:\Program Files\Internet Explorer\IEXPLORE***** D:\Programy\Winamp\winamp***** C:\PROGRA~1\NORTON~1\navw32***** C:\Documents and Settings\Maćko\Pulpit\hijackthis\HijackThis***** C:\Program Files\Messenger\msmsgs***** R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp*****" O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP***** O4 - HKLM\..\Run: [SmcService] D:\Programy\SYGATE~1\smc***** -startgui O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype*****" O4 - HKLM\..\Run: [WheelMouse] d:\Programy\Amoumain***** O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4*****" /tray O4 - HKLM\..\Run: [orcToByloLatwe] C:\WINDOWS\services***** O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd***** O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl***** O4 - HKCU\..\Run: [Gadu-Gadu] "D:\Programy\Gadu-Gadu\gg*****" /tray O4 - HKCU\..\Run: [ctfmon*****] C:\WINDOWS\system32\ctfmon***** O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs***** O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs***** O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr***** O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr***** O23 - Service: Harmonogram automatycznej usługi LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc***** O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1***** O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc***** O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor***** O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc***** O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon***** O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - D:\Programy\Sygate Personal Firewall\smc***** O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc***** O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent***** O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc*****