Dostałem nowy komputer HP z preinstalowanym systemem Windows XP prof. Jak można się domyślić HP zainstalował tam masę swoich programów. Część już usunąłem. Nie chciałbym jednak za dużo usunąć, więc zamieszczam loga z Hijacka z prośbą o podpowiedź co bez szkody dla funkcjonalności można usunąć. Log wydaje mi się za długi. [code] 1. Logfile of Trend Micro HijackThis v2.0.2 2. Scan saved at 11:59:08, on 2008-04-18 3. Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) 4. MSIE: Internet Explorer v7.00 (7.00.6000.16640) 5. Boot mode: Normal 6. 7. Running processes: 8. C:\WINDOWS\System32\smss.exe 9. C:\WINDOWS\system32\winlogon.exe 10. C:\WINDOWS\system32\services.exe 11. C:\WINDOWS\system32\lsass.exe 12. C:\WINDOWS\System32\svchost.exe 13. C:\WINDOWS\system32\svchost.exe 14. c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe 15. C:\WINDOWS\System32\svchost.exe 16. C:\WINDOWS\system32\spoolsv.exe 17. C:\Program Files\Intel\AMT\atchksrv.exe 18. C:\WINDOWS\system32\ifxspmgt.exe 19. C:\WINDOWS\system32\ifxtcs.exe 20. C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe 21. C:\Program Files\Intel\AMT\LMS.exe 22. C:\Program Files\PDF Complete\pdfsvc.exe 23. C:\WINDOWS\system32\IfxPsdSv.exe 24. C:\Program Files\Intel\AMT\UNS.exe 25. C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 26. c:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe 27. C:\WINDOWS\Explorer.EXE 28. C:\WINDOWS\system32\igfxtray.exe 29. C:\WINDOWS\system32\hkcmd.exe 30. C:\WINDOWS\system32\igfxpers.exe 31. C:\Program Files\Analog Devices\Core\smax4pnp.exe 32. C:\Program Files\Analog Devices\SoundMAX\Smax4.exe 33. C:\Program Files\Intel\AMT\atchk.exe 34. C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE 35. C:\WINDOWS\system32\igfxsrvc.exe 36. C:\Program Files\PDF Complete\pdfsty.exe 37. C:\WINDOWS\SMINST\Scheduler.exe 38. C:\Program Files\Hewlett-Packard\Embedded Security Software\PSDrt.exe 39. \galactica\Programy\Tools\HijackThis\HiJackThis.exe 40. 41. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=PL_PL&c=74&bd=smb&pf=desktop 42. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=PL_PL&c=74&bd=smb&pf=desktop 43. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 44. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 45. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 46. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 47. R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=PL_PL&c=74&bd=smb&pf=desktop 48. R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza 49. O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll 50. O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll 51. O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe 52. O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe 53. O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe 54. O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe 55. O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray 56. O4 - HKLM\..\Run: [atchk] "C:\Program Files\Intel\AMT\atchk.exe" 57. O4 - HKLM\..\Run: [PTHOSTTR] c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start 58. O4 - HKLM\..\Run: [IFXSPMGT] C:\WINDOWS\system32\ifxspmgt.exe /NotifyLogon 59. O4 - HKLM\..\Run: [PDF Complete] "C:\Program Files\PDF Complete\pdfsty.exe" 60. O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe 61. O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule 62. O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe 63. O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe 64. O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe 65. O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll 66. O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll 67. O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 68. O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 69. O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com 70. O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1208435858275 71. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = adm.net 72. O17 - HKLM\Software\..\Telephony: DomainName = adm.net 73. O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = adm.net 74. O20 - AppInit_DLLs: APSHook.dll 75. O20 - Winlogon Notify: OneCard - c:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll 76. O23 - Service: Intel(R) Active Management Technology System Status Service (atchksrv) - Intel Corporation - C:\Program Files\Intel\AMT\atchksrv.exe 77. O23 - Service: Drive Encryption Service (HpFkCryptService) - SafeBoot International - c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe 78. O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 79. O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\WINDOWS\system32\ifxspmgt.exe 80. O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\WINDOWS\system32\ifxtcs.exe 81. O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe 82. O23 - Service: Intel(R) Active Management Technology Local Management Service (LMS) - Intel - C:\Program Files\Intel\AMT\LMS.exe 83. O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe 84. O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe 85. O23 - Service: Personal Secure Drive service (PersonalSecureDriveService) - Infineon Technologies AG - C:\WINDOWS\system32\IfxPsdSv.exe 86. O23 - Service: Intel(R) Active Management Technology User Notification Service (UNS) - Intel - C:\Program Files\Intel\AMT\UNS.exe[/code]