Samoczynne otwieranie się napędu DVD przy podłączonej sieci

Dla specjalistów Bezpieczeństwo
#1

Prosiłbym o sprawdzenie loga z HiJack This i wskazanie, które wpisy za malware mogą odpowiadać. Ostatnio przy podłączonej sieci często mi się otwiera napęd dvd. Podejrzanie często.

Sam podejrzewam wpisy oznaczone “017” ale prosił bym o weryfikację czy dobrze kombinuję.

Log:
Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.26

Platform: x64 Windows 7 (Home Premium), 6.1.7600.0, Service Pack: 0 <=== Attention! (outdated SP)
Time: 11.08.2020 - 21:15 (UTC+02:00)
Language: OS: Polish (0x415). Display: Polish (0x415). Non-Unicode: Polish (0x415)
Elevated: Yes
Ran by: Roman (group: Administrator) on MAZDAA, FirstRun: yes

Chrome: 12.0.742.112
Firefox: 80.0.0.7514
Internet Explorer: 8.0.7600.17051
Default: “C:\Program Files (x86)\Internet Explorer\iexplore.exe” -nohome (Internet Explorer)

Boot mode: Normal

Running processes:
Number | Path

  • 1 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe*
  • 1 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe*
  • 1 C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe*
  • 1 C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe*
  • 1 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe*
  • 1 C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe*
  • 1 C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor.exe*
  • 1 C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE*
  • 1 C:\Program Files (x86)\Cyfrowy Polsat\MF60\CancelAutoPlay_df.exe*
  • 1 C:\Program Files (x86)\Cyfrowy Polsat\MF60\CheckNDISPort_df.exe*
  • 1 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe*
  • 1 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe*
  • 1 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe*
  • 1 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe*
  • 1 C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe*
  • 1 C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe*
  • 1 C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe*
  • 1 C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe*
  • 1 C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe*
  • 1 C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe*
  • 1 C:\Program Files (x86)\Lenovo\Energy Management\utility.exe*
  • 1 C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe*
  • 1 C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe*
  • 1 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe*
  • 1 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe*
  • 1 C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE*
  • 1 C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe*
  • 1 C:\Program Files (x86)\Skypenowy\Phone\Skype.exe*
  • 1 C:\Program Files (x86)\USB Camera2\VM332_STI.EXE*
  • 1 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE*
  • 1 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE*
  • 6 C:\Program Files\Firefox Developer Edition\firefox.exe*
  • 1 C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe*
  • 1 C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe*
  • 1 C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe*
  • 1 C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe*
  • 1 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe*
  • 1 C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe*
  • 1 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe*
  • 1 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe*
  • 1 C:\Program Files\Windows Media Player\wmpnetwk.exe*
  • 1 C:\Program Files\Windows Sidebar\sidebar.exe*
  • 1 C:\ProgramData\DataCardService\DCSHelper.exe*
  • 1 C:\ProgramData\DataCardService\DCService.exe*
  • 1 C:\Users\Roman\Downloads\HiJackThis.exe*
  • 1 C:\Windows\SysWOW64\rundll32.exe*
  • 1 C:\Windows\SysWOW64\svchost.exe*
  • 1 C:\Windows\System32\SearchFilterHost.exe*
  • 1 C:\Windows\System32\SearchIndexer.exe*
  • 1 C:\Windows\System32\SearchProtocolHost.exe*
  • 1 C:\Windows\System32\atieclxx.exe*
  • 1 C:\Windows\System32\atiesrxx.exe*
  • 1 C:\Windows\System32\audiodg.exe*
  • 2 C:\Windows\System32\csrss.exe*
  • 1 C:\Windows\System32\dwm.exe*
  • 1 C:\Windows\System32\lsass.exe*
  • 1 C:\Windows\System32\lsm.exe*
  • 1 C:\Windows\System32\rundll32.exe*
  • 1 C:\Windows\System32\services.exe*
  • 1 C:\Windows\System32\smss.exe*
  • 1 C:\Windows\System32\spoolsv.exe*
  • 12 C:\Windows\System32\svchost.exe*
  • 1 C:\Windows\System32\taskhost.exe*
  • 1 C:\Windows\System32\taskmgr.exe*
  • 2 C:\Windows\System32\wbem\WmiPrvSE.exe*
  • 1 C:\Windows\System32\wininit.exe*
  • 1 C:\Windows\System32\winlogon.exe*
  • 1 C:\Windows\explorer.exe*

R0 - HKCU\Software\Microsoft\Internet Explorer\Main: [Start Page] = http://lenovo.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main: [Start Page] = http://lenovo.msn.com
R0-32 - HKLM\Software\Microsoft\Internet Explorer\Main: [Start Page] = http://lenovo.msn.com
O2 - HKLM…\BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll
O2 - HKLM…\BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - HKLM…\BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (file missing)
O2-32 - HKLM…\BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2-32 - HKLM…\BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
O2-32 - HKLM…\BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2-32 - HKLM…\BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O2-32 - HKLM…\BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll
O2-32 - HKLM…\BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2-32 - HKLM…\BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2-32 - HKLM…\BHO: Pomocnik logowania za pomocą identyfikatora Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2-32 - HKLM…\BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O3 - HKLM…\Toolbar: Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll
O3 - HKLM…\Toolbar: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (file missing)
O3-32 - HKLM…\Toolbar: Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
O3-32 - HKLM…\Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O4 - Global User Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk -> C:\Program Files (x86)\Lenovo\Bluetooth Software\BTTray.exe
O4 - Global User Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O4 - HKCU…\Run: [Skype] = C:\Program Files (x86)\Skypenowy\Phone\Skype.exe /minimized /regrun
O4 - HKCU…\Run: [vidnotifier.exe] = C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\vidnotifier\vidnotifier.exe
O4 - HKCU…\RunOnce: [FlashPlayerUpdate] = C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_330_Plugin.exe -update plugin
O4 - HKLM…\Run: [Energy Management] = C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
O4 - HKLM…\Run: [EnergyUtility] = C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe
O4 - HKLM…\Run: [Lenovo EE Boot Optimizer] = C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe
O4 - HKLM…\Run: [SynTPEnh] = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM…\Run: [UpdatePRCShortCut] = C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe “C:\Program Files\Lenovo\OneKey App\OneKey Recovery” UpdateWithCreateOnce “Software\Lenovo\OneKey App\OneKey Recovery”
O4 - MSConfig\startupreg: ALLUpdate [command] = C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe “sleep” (HKCU) (2014/05/06)
O4-32 - HKLM…\Run: [332BigDog] = C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
O4-32 - HKLM…\Run: [AVGUI.exe] = C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe /gui (file missing)
O4-32 - HKLM…\Run: [Adobe ARM] = C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4-32 - HKLM…\Run: [Adobe Reader Speed Launcher] = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4-32 - HKLM…\Run: [AvgUi] = C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe /lps=fmw (file missing)
O4-32 - HKLM…\Run: [CancelAutoPlay_df] = C:\Program Files (x86)\Cyfrowy Polsat\MF60\CancelAutoPlay_df.exe run
O4-32 - HKLM…\Run: [CheckNDISPort_df] = C:\Program Files (x86)\Cyfrowy Polsat\MF60\CheckNDISPort_df.exe
O4-32 - HKLM…\Run: [HP Software Update] = C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4-32 - HKLM…\Run: [IAStorIcon] = C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
O4-32 - HKLM…\Run: [StartCCC] = C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun
O4-32 - HKLM…\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4-32 - HKLM…\Run: [Ulead AutoDetector v2] = C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe
O4-32 - HKLM…\Run: [UpdateP2GShortCut] = C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe “C:\Program Files (x86)\Lenovo\Power2Go” UpdateWithCreateOnce “SOFTWARE\CyberLink\Power2Go\5.0”
O4-32 - HKLM…\Run: [UpdatePRCShortCut] = C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe “C:\Program Files\Lenovo\OneKey App\OneKey Recovery” UpdateWithCreateOnce “Software\Lenovo\OneKey App\OneKey Recovery”
O4-32 - HKLM…\Run: [VeriFaceManager] = C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4-32 - HKLM…\Run: [YouCam Mirage] = C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
O4-32 - HKLM…\Run: [YouCam Tray] = C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe /s
O4-32 - HKLM…\Run: [hpqSRMon] = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O8 - Context menu item: HKCU…\Internet Explorer\MenuExt\Wyślij obraz do urządzenia &Bluetooth…: (default) = C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Context menu item: HKCU…\Internet Explorer\MenuExt\Wyślij stronę do urządzenia &Bluetooth…: (default) = C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Button: HKLM…{CCA281CA-C863-46ef-9331-5C8D4460577F}: Wyślij do interfejsu Bluetooth - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Tools menu item: HKLM…{CCA281CA-C863-46ef-9331-5C8D4460577F}: Wyślij do urządzenia &Bluetooth… - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9-32 - Button: HKLM…{219C3416-8CB2-491a-A3C7-D9FCDDC9D600}: Wpis w blogu - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9-32 - Button: HKLM…{CCA281CA-C863-46ef-9331-5C8D4460577F}: Wyślij do interfejsu Bluetooth - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9-32 - Button: HKLM…{DDE87865-83C5-48c4-8357-2F5B1AA84522}: Pokaż lub ukryj HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9-32 - Tools menu item: HKLM…{219C3416-8CB2-491a-A3C7-D9FCDDC9D600}: Wpis w &blogu w Edytorze w usłudze Windows Live - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9-32 - Tools menu item: HKLM…{CCA281CA-C863-46ef-9331-5C8D4460577F}: Wyślij do urządzenia &Bluetooth… - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O17 - DHCP DNS 1: 192.168.43.1
O17 - HKLM\System\CCS\Services\Tcpip…{1B220E2A-971F-42F4-BD7E-DA3E11B12B1C}: [NameServer] = 212.2.96.51
O17 - HKLM\System\CCS\Services\Tcpip…{1B220E2A-971F-42F4-BD7E-DA3E11B12B1C}: [NameServer] = 212.2.96.52
O17 - HKLM\System\CCS\Services\Tcpip…{7A07565E-B294-4261-B14C-15CD1DA45B1B}: [NameServer] = 212.2.96.53
O17 - HKLM\System\CCS\Services\Tcpip…{7A07565E-B294-4261-B14C-15CD1DA45B1B}: [NameServer] = 212.2.96.54
O17 - HKLM\System\CCS\Services\Tcpip…{A3B4104C-515F-4530-BEE8-F111FCA70448}: [NameServer] = 212.2.127.254
O17 - HKLM\System\CCS\Services\Tcpip…{A3B4104C-515F-4530-BEE8-F111FCA70448}: [NameServer] = 212.2.96.54
O18 - HKLM\Software\Classes\Protocols\Filter\deflate: [CLSID] = {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll
O18 - HKLM\Software\Classes\Protocols\Filter\gzip: [CLSID] = {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll
O18 - HKLM\Software\Classes\Protocols\Handler\about: [CLSID] = {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
O18 - HKLM\Software\Classes\Protocols\Handler\cdl: [CLSID] = {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\Windows\system32\urlmon.dll
O18 - HKLM\Software\Classes\Protocols\Handler\file: [CLSID] = {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\Windows\system32\urlmon.dll
O18 - HKLM\Software\Classes\Protocols\Handler\ftp: [CLSID] = {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\Windows\system32\urlmon.dll
O18 - HKLM\Software\Classes\Protocols\Handler\http: [CLSID] = {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\Windows\system32\urlmon.dll
O18 - HKLM\Software\Classes\Protocols\Handler\https: [CLSID] = {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\Windows\system32\urlmon.dll
O18 - HKLM\Software\Classes\Protocols\Handler\javascript: [CLSID] = {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
O18 - HKLM\Software\Classes\Protocols\Handler\livecall: [CLSID] = {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - HKLM\Software\Classes\Protocols\Handler\local: [CLSID] = {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\Windows\system32\urlmon.dll
O18 - HKLM\Software\Classes\Protocols\Handler\mailto: [CLSID] = {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
O18 - HKLM\Software\Classes\Protocols\Handler\mk: [CLSID] = {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\Windows\system32\urlmon.dll
O18 - HKLM\Software\Classes\Protocols\Handler\msnim: [CLSID] = {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll
O18 - HKLM\Software\Classes\Protocols\Handler\res: [CLSID] = {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
O18 - HKLM\Software\Classes\Protocols\Handler\vbscript: [CLSID] = {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
O18 - HKLM\Software\Classes\Protocols\Handler\wlpg: [CLSID] = {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O21 - HKLM…\ShellIconOverlayIdentifiers\00avast: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O21 - HKLM…\ShellIconOverlayIdentifiers\00avg: (no name) - {472083B0-C522-11CF-8763-00608CC02F24} - (no file)
O21 - HKLM…\ShellIconOverlayIdentifiers\VeriFace Enc: VeriFace Enc - {771C7324-DA80-49D3-8017-753B0AF60951} - C:\windows\system32\IcnOvrly.dll
O22 - Task: (activation) \Microsoft\Windows\Windows Activation Technologies\ValidationTask - C:\windows\system32\Wat\WatAdminSvc.exe /run (Microsoft)
O22 - Task: (activation) \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - C:\windows\system32\schtasks.exe /run /I /TN “\Microsoft\Windows\Windows Activation Technologies\ValidationTask”
O22 - Task: Adobe Flash Player NPAPI Notifier - C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_330_Plugin.exe -check plugin
O22 - Task: Antivirus Emergency Update - C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe (file missing)
O22 - Task: CreateChoiceProcessTask - C:\Windows\System32\browserchoice.exe /launch
O22 - Task: MirageAgent - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
O22 - Task: \AVG\Overseer - C:\Program Files\Common Files\AVG\Overseer\overseer.exe /from_scheduler:1
O22 - Task: \Microsoft\Windows Live\SOXE\Extractor Definitions Update Task - {3519154C-227E-47F3-9CC9-12C3F05817F1} - (no file)
O22 - Task: \Mozilla\Firefox Developer Edition Default Browser Agent CA9422711AE1A81C - C:\Program Files\Firefox Developer Edition\default-browser-agent.exe do-task “CA9422711AE1A81C”
O22 - Task: e-pity2019_styczen - C:\Program Files (x86)\e-file\e-pity 2017\Assets\signxml.exe notify 1 02.03.2021
O22 - Task: e-pity2019a_kwiecien - C:\Program Files (x86)\e-file\e-pity 2017\Assets\signxml.exe notify 2 30.04.2021
O23 - Service R2: AMD External Events Utility - C:\windows\system32\atiesrxx.exe
O23 - Service R2: Application Virtualization Client - (sftlist) - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
O23 - Service R2: Bluetooth Service - (btwdins) - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service R2: Client Virtualization Handler - (cvhsvc) - C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
O23 - Service R2: DCService.exe - C:\ProgramData\DatacardService\DCService.exe
O23 - Service R2: Digital Wave Update Service - (DigitalWave.Update.Service) - C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
O23 - Service R2: FABS - Helping agent for MAGIX media database - (Fabs) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe /DisableUI
O23 - Service R2: Intel® Management and Security Application Local Management Service - (LMS) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service R2: Intel® Management and Security Application User Notification Service - (UNS) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service R2: Intel® Rapid Storage Technology - (IAStorDataMgrSvc) - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service R2: Malwarebytes Service - (MBAMService) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service R2: Usługa HP CUE DeviceDiscovery - (hpqddsvc) - C:\windows\SysWOW64\svchost.exe -k hpdevmgmt; “ServiceDll” = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
O23 - Service R3: BBUpdate - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe
O23 - Service R3: hpqcxs08 - C:\windows\SysWOW64\svchost.exe -k hpdevmgmt; “ServiceDll” = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
O23 - Service S2: BingBar Service - (BBSvc) - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe
O23 - Service S2: Skype Updater - (SkypeUpdate) - C:\Program Files (x86)\Skypenowy\Updater\Updater.exe
O23 - Service S3: Firebird Server - MAGIX Instance - (FirebirdServerMAGIXInstance) - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

–
End of file - Time spent: 76,9 sec. - 39966 bytes, CRC32: FFFFFFFF. Sign: «ㄿ

#2

Nikt nie będzie tego sprawdzał - pomoc niby udziela autor forka w sekcji issues:

https://github.com/dragokas/hijackthis/issues/new?assignees=&labels=Cure+PC&template=cure-pc.md&title=DVD-infection

teraz na forach używa się FRST:

raporty wstaw jako załączniki np. metodą przeciągnij i upuść na pole do pisania posta (może nie działać na XP mimo używania Firefox 52 / Chrome 49 - ale niby masz Windows 7). Opcjonalnie ikonką: strzałka w górę

Na 99% nie zmieszczą się w limitach około 38 tysięcy znaków na post.