StartupList report, 18/04/2021, 21:46:35

StartupList version: 1.52.2

Started from : C:\Users\cf\Desktop\HIJACKTHIS.EXE
Detected: Unknown Windows (WinNT 6.01.3505 SP1)
Detected: Internet Explorer v8.00 (8.00.7601.17514)
* Using default options
==================================================

Running processes:

C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Users\cf\Desktop\HIJACKTHIS.EXE
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera_crashreporter.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\svchost.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Windows\system32\mmc.exe
C:\Users\cf\AppData\Local\Programs\Opera\75.0.3969.171\opera.exe
C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe
C:\Windows\system32\SearchFilterHost.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\Windows\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

OmniPage Preload = "C:\Program Files\Nuance\OmniPage19\OmniPage19.exe" /preload

Startup Manager = ;C:\Program Files\Chaotic Systems\Startup Manager\StartMan.exe
/hide

--------------------------------------------------

Autorun entries in Registry subkeys of:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[OptionalComponents]
=

--------------------------------------------------

Shell & screensaver key from C:\Windows\SYSTEM.INI:

Shell=*INI section not found*

SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*

HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

Enumerating Browser Helper Objects:

AcroIEHelperStub - C:\Program Files\Common

Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll - {18DF081C-E8AD-4283-A596-
FA578C2EBDC3}
(no name) - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
- {AE7CD045-E861-484f-8273-0445EE161910}

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #1: C:\Windows\system32\NLAapi.dll

NameSpace #2: C:\Windows\system32\napinsp.dll
NameSpace #3: C:\Windows\system32\pnrpnsp.dll
NameSpace #4: C:\Windows\system32\pnrpnsp.dll
--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: *Registry key not found*

--------------------------------------------------
End of report, 5.620 bytes
Report generated in 0,016 seconds

Command line options:

/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only