quote:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 16:27:47, on 10.09.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\CML.exe
C:\Windows\System32\gctray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\ZSSnp211.exe
C:\Windows\Domino.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Users\ddd\AppData\Local\Google\Update\1.2.183.2 9\GoogleCrashHandler.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
c:\users\ddd\Desktop\program\HiJackThis_v2.exe
C:\Windows\system32\Taskmgr.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10i_Ac tiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =http://search.localstrike.com.ar/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =http://search.localstrike.com.ar/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =http://search.localstrike.com.ar/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =http://search.localstrike.com.ar/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =http://search.localstrike.com.ar/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: facetr Toolbar - {8b2cc651-2276-4864-8e44-ce10a2cb377d** - C:\Program Files\facetr\tbfac0.dll (file missing)
R3 - URLSearchHook: turk3 Toolbar - {5e7f9db2-3507-467d-aa2f-dccb5971b5af** - C:\Program Files\turk3\tbturk.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3** - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB** - (no file)
O2 - BHO: turk3 Toolbar - {5e7f9db2-3507-467d-aa2f-dccb5971b5af** - C:\Program Files\turk3\tbturk.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E** - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43** - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: facetr Toolbar - {8b2cc651-2276-4864-8e44-ce10a2cb377d** - C:\Program Files\facetr\tbfac0.dll (file missing)
O2 - BHO: Windows Live Oturum Açma Yardım Aracı - {9030D464-4C02-4ABF-8ECC-5164760863C6** - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7** - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D** - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\s wg.dll
O2 - BHO: Go!Zilla IE Helper - {E1FF080D-12A3-439A-A2EF-4BA95A3148E8** - C:\Program Files\GoZilla\GozCatch.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F** - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Alexa - {EA582743-9076-4178-9AA6-7393FDF4D5CE** - C:\Program Files\Alexa Toolbar\AlxTB2.9.0.0.28.dll
O3 - Toolbar: facetr Toolbar - {8b2cc651-2276-4864-8e44-ce10a2cb377d** - C:\Program Files\facetr\tbfac0.dll (file missing)
O3 - Toolbar: turk3 Toolbar - {5e7f9db2-3507-467d-aa2f-dccb5971b5af** - C:\Program Files\turk3\tbturk.dll (file missing)
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [tray2] C:\Windows\system32\CML.exe
O4 - HKLM\..\Run: [tray3] C:\Windows\system32\RecvMessage.exe
O4 - HKLM\..\Run: [tray1] C:\Windows\system32\gctray.exe
O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
O4 - HKLM\..\Run: [ComboMAX] C:\Program Files\ComboMax\ComboMaxUpdater.exe
O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe
O4 - HKLM\..\Run: [HG521 Kolay Kurulum] C:\Program Files\HG521 Kolay Kurulum\HG521 Kolay Kurulum.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\ddd\AppData\Local\Google\Update\GoogleUp date.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [FlashGet 3] "C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe" -minimize
O4 - HKCU\..\Run: [Yahoo Messengger] C:\Windows\system32\SSVICHOSST.exe
O8 - Extra context menu item: Alexa Web Search... -http://tbar.alexa.com/9.0.0.28/contextmenu/search.htm
O8 - Extra context menu item: Get Alexa Data... -http://tbar.alexa.com/9.0.0.28/contextmenu/sitedata.htm
O8 - Extra context menu item: See Related Links... -http://tbar.alexa.com/9.0.0.28/contextmenu/related.htm
O8 - Extra context menu item: Write a Review... -http://tbar.alexa.com/9.0.0.28/contextmenu/review.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501** - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501** - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Bunu Bloga Al - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600** - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: Windows Live Writer içinde &Bunu Web Günlüğüne Al - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600** - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: OneNote'a Gönder - {2670000A-7350-4f3c-8081-5663EE0C6C49** - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: OneNote'a G&önder - {2670000A-7350-4f3c-8081-5663EE0C6C49** - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263** - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a** - C:\Windows\web\related.htm (file missing)
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a** - C:\Windows\web\related.htm (file missing)
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3** - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3** - C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm
O13 - Gopher Prefix:
O15 - Trusted Zone:http://software.kuaiche.com
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537** (MSN Photo Upload Tool) -http://gfx1.hotmail.com/mail/w3/pr01...PUpldtr-tr.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93** (Java Runtime Environment 1.6.0) -http://dl8-cdn-01.sun.com/s/ESD44/JS...ws-i586-jc.cab
O16 - DPF: {A672558F-A878-4D5A-A921-627C091CEB63** (Flatcast Producer 4.16) -http://data.myflatcast.com/data/objects/NpFp41629.dll
O16 - DPF: {A672558F-A878-4D5A-A921-627C091CEB66** (Flatcast Producer 5.0) -http://www.flatcast-data.com/data/objects/NpFp501.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000** (Shockwave Flash Object) -http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7** -http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E55FD215-A32E-43FE-A777-A7E8F165F554** (Flatcast Viewer 4.16) -http://data.myflatcast.com/data/objects/NpFv41629.dll
O16 - DPF: {E55FD215-A32E-43FE-A777-A7E8F165F557** (Flatcast Viewer 5.0) -http://www.flatcast-data.com/data/objects/NpFv501.dll
O16 - DPF: {E55FD215-A32E-43FE-A777-A7E8F165F560** (Flatcast Viewer 5.2) -http://92.51.137.94/objects/NpFv522.dll
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147** (Windows Live Hotmail Photo Upload Tool) -http://gfx2.hotmail.com/mail/w4/m3/p...PUpldtr-tr.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6** (IWinAmpActiveX Class) -http://malatyaoren.bel.tr/canli/codec.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{38FA7BDF-50EF-42E8-99F4-78837B90E0B5**: NameServer = 208.67.222.22,208.67.220.220
O17 - HKLM\System\CS1\Services\Tcpip\..\{38FA7BDF-50EF-42E8-99F4-78837B90E0B5**: NameServer = 208.67.222.22,208.67.220.220
O17 - HKLM\System\CS2\Services\Tcpip\..\{38FA7BDF-50EF-42E8-99F4-78837B90E0B5**: NameServer = 208.67.222.22,208.67.220.220
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD** - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030** - C:\Windows\system32\browseui.dll
O23 - Service: COM Service - Unknown owner - C:\Program Files\GIGABYTE\C.O.M\GCSVR.EXE
O23 - Service: Google Güncelleme Hizmeti (gupdate1c9e8382b62c27f) (gupdate1c9e8382b62c27f) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MSSQLSERVER - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe (file missing)
O23 - Service: MSSQLServerADHelper - Unknown owner - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe (file missing)
O23 - Service: ProtexisLicensing - Unknown owner - C:\Program Files\Common Files\Protexis\License Service\PSIService.exe
O23 - Service: SQLSERVERAGENT - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE (file missing)

--
End of file - 10334 bytes