3. Unwanted programs that are automatically being installed.

Unwanted programs that are automatically being installed.

Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 4:24:58 PM, on 6/4/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17801)

Boot mode: Normal

Running processes: C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe C:\Program Files (x86)\XFastUSB\XFastUsb.exe C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe C:\Program Files\Lucidlogix Technologies\VIRTU MVP\EKAG20NT.EXE C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Adam\Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trovi.com/?gd=&ctid=CT3333887&octid=EB_ORIGINAL_CTID&ISID=M0694EA35-5E3C-4BAF-A512-EACE526598D9&SearchSource=55&CUI=&UM=8&UP=SP9AB1A820-2ED6-44A6-A897-B7B7D83CDE69&D=060415&SSPV= R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: shopperz Helper - {21186475-d4df-43e2-9bba-0b52c00e0e27} - (no file) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60 O4 - HKLM..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" O4 - HKLM..\Run: [XFastUSB] "C:\Program Files (x86)\XFastUSB\XFastUsb.exe" O4 - HKLM..\Run: [THX TruStudio NB Settings] "C:\Program Files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe" /r O4 - HKLM..\Run: [UpdReg] C:\Windows\UpdReg.EXE O4 - HKLM..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM..\Run: [YTDownloader] "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot O4 - HKLM..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" O4 - HKLM..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU..\Run: [YTDownloader] "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot O4 - HKUS\S-1-5-19..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18..\Run: [PastaLeadsApplication] C:\Program Files (x86)\pastaleads\PastaLeadsApplication.exe (User 'SYSTEM') O4 - HKUS.DEFAULT..\Run: [PastaLeadsApplication] C:\Program Files (x86)\pastaleads\PastaLeadsApplication.exe (User 'Default user') O4 - Global Startup: GoPro Importer.lnk = C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: *.clonewarsadventures.com O15 - Trusted Zone: *.freerealms.com O15 - Trusted Zone: *.soe.com O15 - Trusted Zone: *.sony.com

/r/techsupport Thread Parent
Previous
Next

Recently removed from /r/techsupport

Adobe Reader DC installation complete… but failed [W11] How do I maximize the number of pinned apps shown in the start menu? I have an unknown device connected to my car Got hacked while playing a steam game without doing anything suspicious or installing/clicking anything. PC restarts ( reboot) only in PUBG. I tried everything. Can't get the icon completely removed after uninstallation. If someone gains access to my IP address, could they see that I have multiple different emails and then also see all the activity (like emails, documents etc) sent over those emails? How bad would it be to leave my PC on for like 16 hours a day, compared to like 8? Accessing an old laptop hard drive. Chrome Flickers When I Resize Or Move It Is there a way to migrate my Windows 10 to my new SSD from HDD without a backup drive. How to bypass a device ID ban on any social media service on smartphones? What things need to be changed to change the phone's identity? What to get/how can I make a phone mic more sensitive in order to pick up soft voices better in calls? Frequent Random Freezes and Crashes Without BSOD, Ran Verifier and NTOSKRNL.exe is Causing BSOD Request for Removal of Post

More Random Comments

Senator Kirsten Gillibrand Says It's Worrying Top Three 2020 Frontrunners Are All White Men Fake Gag Order What is the biggest "this relationship won't last" red flag you've ever seen at a wedding? Just became 'kind of' a vegetarian. Low barrier to entry guide to 3K history What do you think of 'Halloween 4-6' AKA the 'Thorn' trilogy? 'Do we want to survive or not?': Canadian Green Party leader Elizabeth May says climate change talks too focused on bureaucracy Need some help filling out a world I'm working on ELI5:Why is the house market so inflationary? Physical abuse from teachers in the past in Ireland Mercury enveloped in the Sun's coronal streamers What's the most humiliating way to die? I'm surprised she made it this far To those who keep posting about that guy quitting over the intercom... I had quite a few people do this for my wedding. I shouldn't have to chase you down for an answer....