Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16.34.12, on 01/05/2015 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: F:\WINDOWS\System32\smss.exe F:\WINDOWS\system32\winlogon.exe F:\WINDOWS\system32\services.exe F:\WINDOWS\system32\lsass.exe F:\WINDOWS\system32\svchost.exe F:\WINDOWS\System32\svchost.exe F:\WINDOWS\system32\svchost.exe F:\Program Files\Intel\Wireless\Bin\EvtEng.exe F:\WINDOWS\Explorer.EXE F:\WINDOWS\system32\spoolsv.exe F:\WINDOWS\system32\acs.exe F:\WINDOWS\system32\cisvc.exe F:\WINDOWS\system32\EscSvc.exe F:\WINDOWS\system32\inetsrv\inetinfo.exe F:\WINDOWS\system32\netdde.exe F:\WINDOWS\system32\nvsvc32.exe F:\Program Files\Intel\Wireless\Bin\RegSrvc.exe F:\WINDOWS\System32\snmp.exe F:\WINDOWS\system32\svchost.exe F:\WINDOWS\system32\wscntfy.exe F:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe F:\Program Files\NETGEAR\WN111v2\WN111V2.exe F:\Program Files\Mozilla Firefox\firefox.exe F:\Program Files\NETGEAR\WN111v2\jswpsapi.exe F:\Program Files\Mozilla Firefox\plugin-container.exe F:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE F:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE F:\Program Files\Trend Micro\HiJackThis.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O4 - HKLM\..\Run: [IntelZeroConfig] "F:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [NokiaSuite.exe] F:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: NETGEAR WN111v2 Smart Wizard.lnk = F:\Program Files\NETGEAR\WN111v2\WN111V2.exe O10 - Unknown file in Winsock LSP: f:\windows\system32\nwprovau.dll O14 - IERESET.INF: SEARCH_PAGE_URL= O14 - IERESET.INF: START_PAGE_URL= O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone (HKLM) O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone (HKLM) O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone (HKLM) O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM) O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone (HKLM) O23 - Service: Atheros Configuration Service (ACS) - Atheros - F:\WINDOWS\system32\acs.exe O23 - Service: Adobe LM Service - Adobe Systems - F:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Epson Scanner Service (EpsonScanSvc) - Seiko Epson Corporation - F:\WINDOWS\system32\EscSvc.exe O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - F:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - F:\Program Files\NETGEAR\WN111v2\jswpsapi.exe O23 - Service: NVIDIA Compatible Windows 2000 Miniport Driver, Version 71.90 (nv4_mini) - NVIDIA Corporation - F:\Program Files\NVIDIA GeForce Go 6600\nv4_mini.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - F:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - F:\Program Files\Intel\Wireless\Bin\S24EvMon.exe -- End of file - 4227 bytes