Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.26
Platform: x64 Windows 7 (Pro), 6.1.7601.23710, Service Pack: 1
Time: 14.02.2021 - 17:35 (UTC+01:00)
Language: OS: Italian (0x410). Display: Italian (0x410). Non-Unicode: Italian (0x410)
Elevated: Yes
Ran by: utente (group: Administrator) on UTENTE-PC, FirstRun: yes
Chrome: 73.0.3683.86
Internet Explorer: 11.0.9600.18618
Default: "C:\Users\utente\AppData\Local\Programs\Opera\launcher.exe" -noautoupdate -- "%1" (Opera Internet Browser)
Boot mode: Normal
Running processes:
Number | Path
1 C:\Program Files (x86)\Chiavetta Internet 21.1\WirelessModem.exe
1 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
1 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
1 C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
1 C:\Program Files\Microsoft Security Client\MsMpEng.exe
1 C:\Program Files\Microsoft Security Client\NisSrv.exe
1 C:\Program Files\Microsoft Security Client\msseces.exe
1 C:\Users\utente\AppData\Local\FluxSoftware\Flux\flux.exe
9 C:\Users\utente\AppData\Local\Programs\Opera\58.0.3135.118\opera.exe
1 C:\Users\utente\Desktop\HiJackThis\HiJackThis.exe
1 C:\Windows\KMS-QAD.exe
1 C:\Windows\System32\IPROSetMonitor.exe
1 C:\Windows\System32\SearchFilterHost.exe
1 C:\Windows\System32\SearchIndexer.exe
1 C:\Windows\System32\SearchProtocolHost.exe
1 C:\Windows\System32\WUDFHost.exe
1 C:\Windows\System32\audiodg.exe
2 C:\Windows\System32\csrss.exe
1 C:\Windows\System32\dwm.exe
1 C:\Windows\System32\hkcmd.exe
1 C:\Windows\System32\lsass.exe
1 C:\Windows\System32\lsm.exe
1 C:\Windows\System32\services.exe
1 C:\Windows\System32\smss.exe
1 C:\Windows\System32\spoolsv.exe
10 C:\Windows\System32\svchost.exe
1 C:\Windows\System32\taskhost.exe
1 C:\Windows\System32\wbem\WmiPrvSE.exe
1 C:\Windows\System32\wininit.exe
1 C:\Windows\System32\winlogon.exe
1 C:\Windows\explorer.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page Redirect Cache] =
https://www.msn.com/it-it/?ocid=iehpO1 - Hosts: 178.79.191.161
www.gstatic.comO2-32 - HKLM\..\BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKCU\..\Run: [f.lux] = C:\Users\utente\AppData\Local\FluxSoftware\Flux\flux.exe /noshow
O4 - HKLM\..\Run: [HotKeysCmds] = C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [MSC] = C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey
O4 - MSConfig\startupreg: Adobe Reader Speed Launcher [command] = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (HKLM) (2018/10/15)
O4 - MSConfig\startupreg: CCleaner Smart Cleaning [command] = C:\Program Files\CCleaner\CCleaner64.exe /MONITOR (HKCU) (2018/10/15)
O4 - MSConfig\startupreg: IMSS [command] = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (HKLM) (2020/01/16)
O4 - MSConfig\startupreg: IgfxTray [command] = C:\Windows\system32\igfxtray.exe (HKLM) (2020/01/16)
O4 - MSConfig\startupreg: Persistence [command] = C:\Windows\system32\igfxpers.exe (HKLM) (2018/10/20)
O4 - User Startup: C:\Users\utente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Chiavetta Internet 21.1.lnk -> C:\Program Files (x86)\Chiavetta Internet 21.1\WirelessModem.exe
O15 - Trusted Zone: *.dell.com
O17 - DHCP DNS 1: 151.5.216.225
O17 - HKLM\System\CCS\Services\Tcpip\..\{24317039-80F5-41BC-9FBC-4ED2700FC479}: [NameServer] = 151.5.216.225
O17 - HKLM\System\CCS\Services\Tcpip\..\{2D1D7C3F-2EDA-4A73-AB81-3786BE837515}: [NameServer] = 151.5.216.225
O17 - HKLM\System\CCS\Services\Tcpip\..\{AECA979A-2A54-4963-89E5-5EAD571AB14D}: [NameServer] = 151.5.216.225
O17 - HKLM\System\CCS\Services\Tcpip\..\{E2485FE9-01BD-4200-BF21-66EE3BBCB707}: [NameServer] = 151.5.216.225
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{24317039-80F5-41BC-9FBC-4ED2700FC479}: [NameServer] = 151.5.216.225
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{2D1D7C3F-2EDA-4A73-AB81-3786BE837515}: [NameServer] = 151.5.216.225
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{AECA979A-2A54-4963-89E5-5EAD571AB14D}: [NameServer] = 151.5.216.225
O17 - HKLM\System\ControlSet002\Services\Tcpip\..\{E2485FE9-01BD-4200-BF21-66EE3BBCB707}: [NameServer] = 151.5.216.225
O21 - HKLM\..\ShellIconOverlayIdentifiers\00asw: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O22 - Task: (activation) \Microsoft\Windows\Windows Activation Technologies\ValidationTask - C:\Windows\system32\Wat\WatAdminSvc.exe /run (Microsoft)
O22 - Task: (activation) \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - C:\Windows\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
O22 - Task: (disabled) CCleaner Update - C:\Program Files\CCleaner\CCUpdate.exe (file missing)
O22 - Task: (disabled) CCleanerSkipUAC - C:\Program Files\CCleaner\CCleaner.exe $(Arg0)
O22 - Task: (disabled) GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c (file missing)
O22 - Task: (disabled) GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler (file missing)
O22 - Task: (disabled) Opera scheduled Autoupdate 1539991013 - C:\Users\utente\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0)
O22 - Task: (telemetry) \Microsoft\Office\Office 15 Subscription Heartbeat - C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe (file missing)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentFallBack - C:\Program Files\Microsoft Office\Office15\msoia.exe scan upload mininterval:2880 (Microsoft)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentLogOn - C:\Program Files\Microsoft Office\Office15\msoia.exe scan upload (Microsoft)
O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\CompatTelRunner.exe (Microsoft)
O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly (Microsoft)
O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\ProgramDataUpdater - C:\Windows\system32\compattelrunner.exe -maintenance (Microsoft)
O22 - Task: Adobe Flash Player PPAPI Notifier - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_223_pepper.exe -check pepperplugin
O22 - Task: \Avast Software\Overseer - C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe /from_scheduler:1
O23 - Service R2: Intel(R) Management and Security Application Local Management Service - (LMS) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service R2: Intel(R) Management and Security Application User Notification Service - (UNS) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service R2: Intel(R) PROSet Monitoring Service - C:\Windows\system32\IProsetMonitor.exe
O23 - Service R2: KMS-R@1n - C:\Windows\KMS-QAD.exe
O23 - Service R2: TeamViewer 13 - (TeamViewer) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service S3: Google Chrome Elevation Service - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.86\elevation_service.exe
O23 - Service S3: Intel(R) Content Protection HECI Service - (cphs) - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service S3: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS - (ICCS) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
--
End of file - Time spent: 18,5 sec. - 15982 bytes, CRC32: FFFFFFFF. Sign: 谯綥
