log file Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:27:36 PM, on 6/25/2011 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\idt\wdm\STacSV.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\sajowoogi.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\DOCUME~1\user\LOCALS~1\Temp\bengdzld4DD2E556.tmp C:\WINDOWS\system32\svchost.exe C:\WINDOWS\explorer.exe C:\WINDOWS\explorer.exe C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\DOCUME~1\user\LOCALS~1\Temp\hrl2062.tmp C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\DOCUME~1\user\LOCALS~1\Temp\hrl2072.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl2075.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl2076.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl2077.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl2078.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl207A.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl207D.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl207E.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl207F.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl2080.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl2084.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl2085.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl2087.tmp C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\DOCUME~1\user\LOCALS~1\Temp\hrl2090.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl209D.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl209E.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl209F.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl20A3.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl20A8.tmp C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\DOCUME~1\user\LOCALS~1\Temp\hrl20BD.tmp C:\DOCUME~1\user\LOCALS~1\Temp\hrl20BE.tmp C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Corel\Corel Graphics 12\Programs\CorelDRW.exe C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe C:\DOCUME~1\user\LOCALS~1\Temp\hrl20D2.tmp C:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\Application\chrome.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\program files\idt\wdm\STacSV.exe -- End of file - 3336 bytes

Recca77 -[ 25 มิ.ย. 54 - 23:34:44 ]