Scan saved at 12:18:05 AM, on 6/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\LEXBCES.EXE
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\system32\LEXPPS.EXE
H:\Program Files\ArcaBit\Common\ArcaBit.Core.Configurator2.exe
H:\Program Files\ArcaBit\ArcaUpdate\update.exe
H:\WINDOWS\System32\FTRTSVC.exe
H:\WINDOWS\system32\inetsrv\inetinfo.exe
H:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
H:\WINDOWS\system32\tcpsvcs.exe
H:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
H:\WINDOWS\system32\svchost.exe
H:\Program Files\ArcaBit\ArcaVir\FileMonSV.exe
H:\Program Files\ArcaBit\ArcaVir\NetMonSV.exe
H:\Program Files\ArcaBit\Common\TaskScheduler.exe
H:\WINDOWS\system32\mqsvc.exe
H:\WINDOWS\system32\mqtgsvc.exe
H:\WINDOWS\Explorer.EXE
H:\WINDOWS\system32\ctfmon.exe
H:\WINDOWS\system32\keyhook.exe
H:\WINDOWS\tsnp2std.exe
H:\WINDOWS\vsnp2std.exe
H:\PROGRA~1\NEOSTR~1\TaskBarIcon.exe
H:\WINDOWS\SOUNDMAN.EXE
F:\java ang xp\bin\jusched.exe
H:\Program Files\ArcaBit\ArcaVir\AVMenu.exe
H:\Program Files\ArcaBit\ArcaVir\ABregmon.exe
H:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
H:\Program Files\ArcaBit\Common\ArcaBit.Core.LoggingService.exe
H:\PROGRA~1\NEOSTR~1\neostradatp.exe
H:\PROGRA~1\NEOSTR~1\ComComp.exe
H:\PROGRA~1\NEOSTR~1\Toaster.exe
H:\PROGRA~1\NEOSTR~1\Inactivity.exe
H:\PROGRA~1\NEOSTR~1\PollingModule.exe
H:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
H:\PROGRA~1\NEOSTR~1\Watch.exe
H:\Program Files\eMule\emule.exe
H:\Program Files\Opera 9\Opera.exe
H:\WINDOWS\system32\NOTEPAD.EXE
E:\pobierane z netu\programy\KillBox.exe
E:\pobierane z netu\programy\hijackthis.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = neostrada tp
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - H:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\java ang xp\bin\ssv.dll
O3 - Toolbar: (no name) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - (no file)
O3 - Toolbar: &Tlumaczenie - {2F7DB8D7-9BE7-4666-901E-F380555BCAC7} - D:\Nauka Jezyków\rosyjski\translator\Russkij Translator\InternetTranslatorRusPol.dll
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [WOOWATCH] H:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] H:\PROGRA~1\NEOSTR~1\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] H:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [tsnp2std] H:\WINDOWS\tsnp2std.exe
O4 - HKLM\..\Run: [snp2std] H:\WINDOWS\vsnp2std.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "H:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] H:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] H:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] H:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "F:\java ang xp\bin\jusched.exe"
O4 - HKLM\..\Run: [AvMenu] H:\Program Files\ArcaBit\ArcaVir\AVMenu.exe
O4 - HKLM\..\Run: [ABRegmon] H:\Program Files\ArcaBit\ArcaVir\ABregmon.exe
O4 - HKLM\..\Run: [ArcaCheck] H:\Program Files\ArcaBit\ArcaVir\ArcaCheck.exe /startup
O4 - HKCU\..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = H:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: &Winamp Toolbar Search - H:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://H:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\java ang xp\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\java ang xp\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {94C70A96-012C-4171-98FC-C1971511F20D} - D:\Nauka Jezyków\rosyjski\translator\Russkij Translator\InternetTranslatorRusPol.dll
O9 - Extra 'Tools' menuitem: @D:\Nauka Jezyków\rosyjski\translator\Russkij Translator\InternetTranslatorRusPol.dll,-103 - {94C70A96-012C-4171-98FC-C1971511F20D} - D:\Nauka Jezyków\rosyjski\translator\Russkij Translator\InternetTranslatorRusPol.dll
O10 - Unknown file in Winsock LSP: h:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{487816C2-F0EB-448E-9779-FE3074D82E72}: NameServer = 194.204.159.1 217.98.63.164
O20 - Winlogon Notify: TS_LogonListener - H:\WINDOWS\SYSTEM32\TS_LogonListener.dll
O23 - Service: ArcaBit FileMonitor (ABFileMon) - ArcaBit - H:\Program Files\ArcaBit\ArcaVir\FileMonSV.exe
O23 - Service: ArcaBit NetMonitor (ABNetMon) - ArcaBit - H:\Program Files\ArcaBit\ArcaVir\NetMonSV.exe
O23 - Service: ArcaBit.Core.Configurator - ArcaBit - H:\Program Files\ArcaBit\Common\ArcaBit.Core.Configurator2.exe
O23 - Service: ArcaBit.Core.LoggingService - ArcaBit - H:\Program Files\ArcaBit\Common\ArcaBit.Core.LoggingService.exe
O23 - Service: ArcaBit.TaskScheduler - ArcaBit sp. z o.o. - H:\Program Files\ArcaBit\Common\TaskScheduler.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - H:\Program Files\Ares\chatServer.exe
O23 - Service: ArcaBit Update Service (AVUpdate) - ArcaBit - H:\Program Files\ArcaBit\ArcaUpdate\update.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - H:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - H:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - H:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 7347 bytes
