|
|
Napisano: 06 Apr 2012 13:45
ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time: 2012/04/06 12:35
Program Version: Version 1.3.5.0
Windows Version: Windows XP SP3
==================================================
Drivers
-------------------
Name: pxtdipow.sys
Image Path: C:\DOCUME~1\Admin\LOCALS~1\Temp\pxtdipow.sys
Address: 0xA87D5000 Size: 100864 File Visible: No Signed: -
Status: -
Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xA93DB000 Size: 49152 File Visible: No Signed: -
Status: -
Hidden/Locked Files
-------------------
Path: C:\autorun.inf
Status: Locked to the Windows API!
Path: C:\hiberfil.sys
Status: Locked to the Windows API!
Path: C:\Documents and Settings\Admin\Cookies\admin@localhost[1].txt
Status: Invisible to the Windows API!
Path: C:\Documents and Settings\Admin\Cookies\admin@localhost[2].txt
Status: Visible to the Windows API, but not on disk.
Path: c:\documents and settings\admin\local settings\application data\mozilla\firefox\profiles\jaet949k.default\urlclassifier.pset
Status: Size mismatch (API: 1275108, Raw: 1275336)
SSDT
-------------------
#: 025 Function Name: NtClose
Status: Hooked by "<unknown>" at address 0xf7c3263c
#: 041 Function Name: NtCreateKey
Status: Hooked by "<unknown>" at address 0xf7c325f6
#: 050 Function Name: NtCreateSection
Status: Hooked by "<unknown>" at address 0xf7c32646
#: 053 Function Name: NtCreateThread
Status: Hooked by "<unknown>" at address 0xf7c325ec
#: 063 Function Name: NtDeleteKey
Status: Hooked by "<unknown>" at address 0xf7c325fb
#: 065 Function Name: NtDeleteValueKey
Status: Hooked by "<unknown>" at address 0xf7c32605
#: 068 Function Name: NtDuplicateObject
Status: Hooked by "<unknown>" at address 0xf7c32637
#: 098 Function Name: NtLoadKey
Status: Hooked by "<unknown>" at address 0xf7c3260a
#: 122 Function Name: NtOpenProcess
Status: Hooked by "<unknown>" at address 0xf7c325d8
#: 128 Function Name: NtOpenThread
Status: Hooked by "<unknown>" at address 0xf7c325dd
#: 177 Function Name: NtQueryValueKey
Status: Hooked by "<unknown>" at address 0xf7c3265f
#: 193 Function Name: NtReplaceKey
Status: Hooked by "<unknown>" at address 0xf7c32614
#: 200 Function Name: NtRequestWaitReplyPort
Status: Hooked by "<unknown>" at address 0xf7c32650
#: 204 Function Name: NtRestoreKey
Status: Hooked by "<unknown>" at address 0xf7c3260f
#: 213 Function Name: NtSetContextThread
Status: Hooked by "<unknown>" at address 0xf7c3264b
#: 237 Function Name: NtSetSecurityObject
Status: Hooked by "<unknown>" at address 0xf7c32655
#: 247 Function Name: NtSetValueKey
Status: Hooked by "<unknown>" at address 0xf7c32600
#: 255 Function Name: NtSystemDebugControl
Status: Hooked by "<unknown>" at address 0xf7c3265a
#: 257 Function Name: NtTerminateProcess
Status: Hooked by "<unknown>" at address 0xf7c325e7
Shadow SSDT
-------------------
#: 549 Function Name: NtUserSetWindowsHookEx
Status: Hooked by "<unknown>" at address 0xf7c3266e
#: 552 Function Name: NtUserSetWinEventHook
Status: Hooked by "<unknown>" at address 0xf7c32673
==EOF====EOF==
Dopuna: 06 Apr 2012 13:52
saljem opet poruku ako prve podatke nisam dobro skeniro.zahvalan
GMER 1.0.15.15641 - gmer.net
Rootkit scan 2012-04-06 11:23:41
Windows 5.1.2600 Service Pack 3
Running: 1058ib1l.exe; Driver: C:\DOCUME~1\Admin\LOCALS~1\Temp\pxtdipow.sys
---- Modules - GMER 1.0.15 ----
Module PxHelp20.sys (Px Engine Device Driver for Windows 2000/XP/Sonic Solutions) F75D8000-F75E2000 (40960 bytes)
Module SmartDefragDriver.sys F7A8E000-F7A90000 (8192 bytes)
Module \SystemRoot\system32\DRIVERS\igxpmp32.sys (Intel Graphics Miniport Driver/Intel Corporation) F67B7000-F6D4D000 (5857280 bytes)
Module \SystemRoot\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver v1.0a/Windows (R) Server 2003 DDK provider) F677B000-F67A3000 (163840 bytes)
Module \SystemRoot\system32\DRIVERS\b57xp32.sys (Broadcom NetXtreme Gigabit Ethernet NDIS5.1 Driver./Broadcom Corporation) F6750000-F677B000 (176128 bytes)
Module \SystemRoot\system32\DRIVERS\RT61.sys (Ralink 802.11 Wireless Adapter Driver/Ralink Technology Inc.) F66CF000-F672C000 (380928 bytes)
Module \SystemRoot\system32\DRIVERS\L8042Kbd.sys (Logitech PS2 Keyboard Filter Driver./Logitech Inc.) F727E000-F7282000 (16384 bytes)
Module \SystemRoot\system32\DRIVERS\ptilink.sys (Parallel Technologies DirectParallel IO Library/Parallel Technologies, Inc.) F78D8000-F78DD000 (20480 bytes)
Module \SystemRoot\system32\drivers\RtkHDAud.sys (Realtek(r) High Definition Audio Function Driver/Realtek Semiconductor Corp.) A9F89000-AA42F000 (4874240 bytes)
Module \SystemRoot\system32\DRIVERS\ssmdrv.sys (AVIRA SnapShot Driver/Avira GmbH) F7918000-F791E000 (24576 bytes)
Module \SystemRoot\System32\Drivers\LHidUsbK.Sys (Logitech USB Mouse Function Driver./Logitech Inc.) F7698000-F76A1000 (36864 bytes)
Module \SystemRoot\system32\DRIVERS\LHidKE.Sys (Logitech HID Filter Driver./Logitech Inc.) F7928000-F792F000 (28672 bytes)
Module \SystemRoot\system32\DRIVERS\LMouKE.Sys (Logitech Filter Driver for Mouse Class./Logitech Inc.) A9CCC000-A9CDE000 (73728 bytes)
Module \SystemRoot\system32\DRIVERS\avkmgr.sys (Avira Manager Driver/Avira GmbH) F76C8000-F76D4000 (49152 bytes)
Module \SystemRoot\system32\DRIVERS\avipbb.sys (Avira Driver for Security Enhancement/Avira GmbH) A9CA7000-A9CCC000 (151552 bytes)
Module \SystemRoot\System32\igxpgd32.dll (Intel Graphics 2D Driver/Intel Corporation) BF024000-BF04F000 (176128 bytes)
Module \SystemRoot\System32\igxprd32.dll (Intel Graphics 2D Rotation Driver/Intel Corporation) BF012000-BF024000 (73728 bytes)
Module \SystemRoot\System32\igxpdv32.DLL (Component GHAL Driver/Intel Corporation) BF04F000-BF1E7000 (1671168 bytes)
Module \SystemRoot\System32\igxpdx32.DLL (DirectDraw(R) Driver for Intel(R) Graphics Technology/Intel Corporation) BF1E7000-BF47A000 (2699264 bytes)
Module \SystemRoot\System32\ATMFD.DLL (Windows NT OpenType/Type 1 Font Driver/Adobe Systems Incorporated) BF47A000-BF4C1000 (290816 bytes)
Module \SystemRoot\system32\DRIVERS\avgntflt.sys (Avira Minifilter Driver/Avira GmbH) A9A86000-A9A9F000 (102400 bytes)
Module \??\C:\Program_Files\IObit\IObit_Malware_Fighter\drivers\wxp_x86\regfilter.sys (Registry Filter/IObit.com) F7858000-F785E000 (24576 bytes)
Module \??\C:\Program_Files\IObit\IObit_Malware_Fighter\Drivers\wxp_x86\FileMonitor.sys (IMF File MiniFilter Driver/IObit) A8B3C000-A8B77000 (241664 bytes)
Module \??\C:\Program_Files\IObit\IObit_Malware_Fighter\drivers\wxp_x86\UrlFilter.sys (URL Filter/IObit.com) A8C6D000-A8C70000 (12288 bytes)
Module \??\C:\DOCUME~1\Admin\LOCALS~1\Temp\pxtdipow.sys (GMER) A87D5000-A87EE000 (102400 bytes)
---- Processes - GMER 1.0.15 ----
Process C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe (System Configuration Utility/Microsoft Corporation) 340
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Library C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL (GrooveShellExtensions Module/Microsoft Corporation) 0x661C0000
Library C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL (GrooveSystemServices Module/Microsoft Corporation) 0x65E30000
Process C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe (Smart Defrag v2/IObit) 524
Library C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe (Smart Defrag v2/IObit) 0x00400000
Library C:\Program Files\IObit\Smart Defrag 2\rtl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50000000
Library C:\Program Files\IObit\Smart Defrag 2\vcl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50120000
Library C:\Program Files\IObit\Smart Defrag 2\vclx120.bpl (CodeGear Extended Component Package/Embarcadero Technologies, Inc.) 0x50310000
Library C:\Program Files\IObit\Smart Defrag 2\taskMgr.dll (Task Scheduler Dynamic Link Library/IObit) 0x10000000
Library C:\Program Files\IObit\Smart Defrag 2\NtfsData.dll 0x003A0000
Library C:\Program Files\IObit\Smart Defrag 2\SDDriverMgr.dll (SDDriverMgr/IObit) 0x003C0000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\WINDOWS\system32\winlogon.exe (Windows NT Logon Application/Microsoft Corporation) 844
Library C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll (WBSrv.dll/Stardock) 0x10000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\WINDOWS\system32\lsass.exe (LSA Shell (Export Version)/Microsoft Corporation) 900
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe (Advanced SystemCare Service/IObit) 1056
Library C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe (Advanced SystemCare Service/IObit) 0x00400000
Library C:\Program Files\IObit\Advanced SystemCare 5\rtl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50000000
Library C:\Program Files\IObit\Advanced SystemCare 5\madExcept_.bpl 0x59800000
Library C:\Program Files\IObit\Advanced SystemCare 5\madBasic_.bpl 0x57000000
Library C:\Program Files\IObit\Advanced SystemCare 5\vcl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50120000
Library C:\Program Files\IObit\Advanced SystemCare 5\madDisAsm_.bpl 0x57800000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira On-Access Service/Avira Operations GmbH & Co. KG) 1200
Library C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira On-Access Service/Avira Operations GmbH & Co. KG) 0x00400000
Library C:\Program Files\Avira\AntiVir Desktop\grdcore.dll (Avira Host Framework Core Library/Avira Operations GmbH & Co. KG) 0x10000000
Library c:\program files\avira\antivir desktop\cfglib.dll (Avira Configuration Library/Avira Operations GmbH & Co. KG) 0x00A60000
Library c:\program files\avira\antivir desktop\gpgen.dll (Avira Host Service General/Avira Operations GmbH & Co. KG) 0x00A80000
Library c:\program files\avira\antivir desktop\gpgrd.dll (Avira Host Service On-Access plugin/Avira Operations GmbH & Co. KG) 0x00DE0000
Library c:\program files\avira\antivir desktop\gpipc.dll (Avira Host Service Ipc plugin/Avira Operations GmbH & Co. KG) 0x00E00000
Library c:\program files\avira\antivir desktop\gpavgio.dll (Avira Host Service AVGIO plugin/Avira Operations GmbH & Co. KG) 0x00E50000
Library c:\program files\avira\antivir desktop\gpgui.dll (Avira Host Service Gui plugin/Avira Operations GmbH & Co. KG) 0x00EA0000
Library c:\program files\avira\antivir desktop\gplegacy.dll (Avira Host Service Legacy plugin/Avira Operations GmbH & Co. KG) 0x00ED0000
Library c:\program files\avira\antivir desktop\gpgenrep.dll (Avira Host Service Generic Repair/Avira Operations GmbH & Co. KG) 0x00F30000
Library c:\program files\avira\antivir desktop\onlcfg.dll (Avira Online Configuration plugin/Avira Operations GmbH & Co. KG) 0x00F60000
Library C:\Program Files\Avira\AntiVir Desktop\avevtlog.dll (Avira Event Logger/Avira Operations GmbH & Co. KG) 0x00A30000
Library C:\Program Files\Avira\AntiVir Desktop\guardmsg.dll (Avira On-Access Library/Avira Operations GmbH & Co. KG) 0x00F10000
Library C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll 0x01080000
Library C:\Program Files\Avira\AntiVir Desktop\avipc.dll (Avira IPC Library/Avira Operations GmbH & Co. KG) 0x01210000
Library C:\Program Files\Avira\AntiVir Desktop\AVGIO.DLL (Avira On-Access Scan Library/Avira Operations GmbH & Co. KG) 0x01230000
Library c:\program files\avira\antivir desktop\avpref.dll (Avira Prefix Library/Avira Operations GmbH & Co. KG) 0x01360000
Library C:\Program Files\Avira\AntiVir Desktop\aecore.dll (Avira Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x01380000
Library C:\Program Files\Avira\AntiVir Desktop\aevdf.dll (AntiVir Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x013D0000
Library C:\Program Files\Avira\AntiVir Desktop\aescript.dll (Avira Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x01600000
Library C:\Program Files\Avira\AntiVir Desktop\aescn.dll (AntiVir Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x01680000
Library C:\Program Files\Avira\AntiVir Desktop\aesbx.dll (Avira Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x016C0000
Library C:\Program Files\Avira\AntiVir Desktop\aerdl.dll (AntiVir Engine Module for Windows/Avira GmbH) 0x01770000
Library C:\Program Files\Avira\AntiVir Desktop\aepack.dll (Avira Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x01820000
Library C:\Program Files\Avira\AntiVir Desktop\aeoffice.dll (Avira Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x01900000
Library C:\Program Files\Avira\AntiVir Desktop\aeheur.dll (Avira Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x01950000
Library C:\Program Files\Avira\AntiVir Desktop\aehelp.dll (Avira Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x01DD0000
Library C:\Program Files\Avira\AntiVir Desktop\aegen.dll (Avira Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x01E20000
Library C:\Program Files\Avira\AntiVir Desktop\aeexp.dll (Avira Engine Module for Windows/Avira Operations GmbH & Co. KG) 0x01EA0000
Library C:\Program Files\Avira\AntiVir Desktop\aeemu.dll (AntiVir Engine Module for Windows/Avira GmbH) 0x01ED0000
Library C:\Program Files\Avira\AntiVir Desktop\aebb.dll (AntiVir Engine Module for Windows/Avira GmbH) 0x01F50000
Library c:\program files\avira\antivir desktop\avesvc.dll (Avira Engine Service Library/Avira Operations GmbH & Co. KG) 0x02080000
Library c:\program files\avira\antivir desktop\avesvcr.dll (Avira Engine Service Library Resources/Avira Operations GmbH & Co. KG) 0x020C0000
Library c:\program files\avira\antivir desktop\webcat.dll (Avira Web Categorization Library/Avira Operations GmbH & Co. KG) 0x020E0000
Library C:\Program Files\Avira\AntiVir Desktop\webcatrc.dll (Avira Web Categorization resources/Avira Operations GmbH & Co. KG) 0x022D0000
Library c:\program files\avira\antivir desktop\avreg.dll (Avira Registry Library/Avira Operations GmbH) 0x06DA0000
Process C:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 1244
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Shadow Copy Service/Avira Operations GmbH & Co. KG) 1328
Library C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Shadow Copy Service/Avira Operations GmbH & Co. KG) 0x00400000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Library C:\Program Files\Avira\AntiVir Desktop\avipc.dll (Avira IPC Library/Avira Operations GmbH & Co. KG) 0x10000000
Process C:\Program Files\Java\jre6\bin\jqs.exe (Java(TM) Quick Starter Service/Sun Microsystems, Inc.) 1380
Library C:\Program Files\Java\jre6\bin\jqs.exe (Java(TM) Quick Starter Service/Sun Microsystems, Inc.) 0x00400000
Process C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) 1448
Library C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation) 0x00400000
Library C:\Program Files\Mozilla Firefox\nspr4.dll (NSPR Library/Mozilla Foundation) 0x10000000
Library C:\Program Files\Mozilla Firefox\mozglue.dll (Mozilla Foundation) 0x008F0000
Library C:\Program Files\Mozilla Firefox\plc4.dll (PLC Library/Mozilla Foundation) 0x00AD0000
Library C:\Program Files\Mozilla Firefox\plds4.dll (PLDS Library/Mozilla Foundation) 0x00AF0000
Library C:\Program Files\Mozilla Firefox\mozalloc.dll (Mozilla Foundation) 0x00B10000
Library C:\Program Files\Mozilla Firefox\mozsqlite3.dll (SQLite Database Library/sqlite.org) 0x00B30000
Library C:\Program Files\Mozilla Firefox\nssutil3.dll (NSS Utility Library/Mozilla Foundation) 0x00C10000
Library C:\Program Files\Mozilla Firefox\softokn3.dll (NSS PKCS #11 Library/Mozilla Foundation) 0x00C40000
Library C:\Program Files\Mozilla Firefox\nss3.dll (NSS Base Library/Mozilla Foundation) 0x00C80000
Library C:\Program Files\Mozilla Firefox\ssl3.dll (NSS SSL Library/Mozilla Foundation) 0x00D30000
Library C:\Program Files\Mozilla Firefox\smime3.dll (NSS S/MIME Library/Mozilla Foundation) 0x00D70000
Library C:\Program Files\Mozilla Firefox\mozjs.dll 0x00DA0000
Library C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) 0x00F90000
Library C:\WINDOWS\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x74D90000
Library C:\Program Files\Mozilla Firefox\xpcom.dll (Mozilla Foundation) 0x01F40000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Library C:\Program Files\Mozilla Firefox\components\browsercomps.dll (Mozilla Foundation) 0x026F0000
Library C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\jaet949k.default\extensions\{013a635f-e3aa-4371-b682-ece95ca974b0}\components\RadioWMPCoreGecko11.dll 0x03160000
Library C:\Program Files\Mozilla Firefox\nssdbm3.dll (Legacy Database Driver/Mozilla Foundation) 0x031A0000
Library C:\Program Files\Mozilla Firefox\freebl3.dll (NSS freebl Library/Mozilla Foundation) 0x04600000
Library C:\Program Files\Mozilla Firefox\nssckbi.dll (NSS Builtin Trusted Root CAs/Mozilla Foundation) 0x04650000
Library C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL (GrooveShellExtensions Module/Microsoft Corporation) 0x10430000
Library C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL (GrooveSystemServices Module/Microsoft Corporation) 0x65E30000
Library C:\PROGRA~1\MICROS~1\Office12\GR326C~1.DLL (GrooveMisc Module/Microsoft Corporation) 0x66B40000
Process C:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation) 1732
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\WINDOWS\system32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation) 1772
Library C:\WINDOWS\system32\msonpmon.dll (Microsoft Office OneNote 2007 Printer Driver/Microsoft Corporation) 0x009E0000
Library C:\WINDOWS\System32\spool\PRTPROCS\W32X86\msonpppr.dll (Microsoft Office OneNote 2007 Printer Driver/Microsoft Corporation) 0x00DF0000
Process C:\WINDOWS\Explorer.EXE (Windows Explorer/Microsoft Corporation) 1792
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Library C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL (GrooveShellExtensions Module/Microsoft Corporation) 0x661C0000
Library C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL (GrooveSystemServices Module/Microsoft Corporation) 0x65E30000
Library C:\PROGRA~1\MICROS~1\Office12\GR326C~1.DLL (GrooveMisc Module/Microsoft Corporation) 0x66B40000
Library C:\WINDOWS\system32\igfxpph.dll (igfxpph Module/Intel Corporation) 0x02750000
Library C:\WINDOWS\system32\hccutils.DLL (hccutils Module/Intel Corporation) 0x034A0000
Library C:\WINDOWS\system32\igfxres.dll (igfxres Module/Intel Corporation) 0x03950000
Library C:\WINDOWS\system32\igfxress.dll (igfxress Module/Intel Corporation) 0x03980000
Library C:\WINDOWS\system32\igfxsrvc.dll (igfxsrvc Module/Intel Corporation) 0x03CC0000
Process C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Scheduler/Avira Operations GmbH & Co. KG) 1856
Library C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Scheduler/Avira Operations GmbH & Co. KG) 0x00400000
Library C:\Program Files\Avira\AntiVir Desktop\grdcore.dll (Avira Host Framework Core Library/Avira Operations GmbH & Co. KG) 0x10000000
Library c:\program files\avira\antivir desktop\cfglib.dll (Avira Configuration Library/Avira Operations GmbH & Co. KG) 0x00A60000
Library c:\program files\avira\antivir desktop\gpipc.dll (Avira Host Service Ipc plugin/Avira Operations GmbH & Co. KG) 0x00A80000
Library c:\program files\avira\antivir desktop\gpgen.dll (Avira Host Service General/Avira Operations GmbH & Co. KG) 0x00CE0000
Library c:\program files\avira\antivir desktop\gpschd.dll (Avira Host Service Scheduler Plugin/Avira Operations GmbH & Co. KG) 0x00D30000
Library C:\Program Files\Avira\AntiVir Desktop\avevtlog.dll (Avira Event Logger/Avira Operations GmbH & Co. KG) 0x00A30000
Library C:\Program Files\Avira\AntiVir Desktop\schedr.dll (Avira Scheduler resources/Avira Operations GmbH & Co. KG) 0x00F70000
Library C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll 0x00F90000
Library C:\Program Files\Avira\AntiVir Desktop\avipc.dll (Avira IPC Library/Avira Operations GmbH & Co. KG) 0x01330000
Process C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe (IObit Malware Fighter Service/IObit) 1868
Library C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe (IObit Malware Fighter Service/IObit) 0x00400000
Library C:\Program Files\IObit\IObit Malware Fighter\rtl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50000000
Library C:\Program Files\IObit\IObit Malware Fighter\vcl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50120000
Library C:\Program Files\IObit\IObit Malware Fighter\datastate.dll (Runtime Library/IObit) 0x10000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\WINDOWS\system32\wscntfy.exe (Windows Security Center Notification App/Microsoft Corporation) 2084
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\WINDOWS\system32\ctfmon.exe (CTF Loader/Microsoft Corporation) 2804
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira System Tray Tool/Avira Operations GmbH & Co. KG) 2876
Library C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira System Tray Tool/Avira Operations GmbH & Co. KG) 0x00400000
Library C:\Program Files\Avira\AntiVir Desktop\ccwkrlib.dll (Avira CC Common Worker Library/Avira Operations GmbH & Co. KG) 0x10000000
Library c:\program files\avira\antivir desktop\cfglib.dll (Avira Configuration Library/Avira Operations GmbH & Co. KG) 0x00D10000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Library c:\program files\avira\antivir desktop\ccguard.dll (Avira CC Guard plugin/Avira Operations GmbH & Co. KG) 0x00FA0000
Library c:\program files\avira\antivir desktop\ccgrdrc.dll (Avira CC Guard plugin resources/Avira Operations GmbH & Co. KG) 0x01020000
Library c:\program files\avira\antivir desktop\ccgrdw.dll (Avira CC Guard Worker plugin/Avira Operations GmbH & Co. KG) 0x01030000
Library C:\Program Files\Avira\AntiVir Desktop\grdcore.dll (Avira Host Framework Core Library/Avira Operations GmbH & Co. KG) 0x01280000
Library c:\program files\avira\antivir desktop\gpipc.dll (Avira Host Service Ipc plugin/Avira Operations GmbH & Co. KG) 0x012F0000
Library C:\Program Files\Avira\AntiVir Desktop\avipc.dll (Avira IPC Library/Avira Operations GmbH & Co. KG) 0x01340000
Library c:\program files\avira\antivir desktop\ccwgrd.dll (Avira CC WebGuard plugin/Avira Operations GmbH & Co. KG) 0x01360000
Library c:\program files\avira\antivir desktop\ccgen.dll (Avira CC General plugin/Avira Operations GmbH & Co. KG) 0x01450000
Library c:\program files\avira\antivir desktop\ccgenrc.dll (Avira CC General plugin resources/Avira Operations GmbH & Co. KG) 0x01510000
Library c:\program files\avira\antivir desktop\ccupdate.dll (Avira CC Updater Status plugin/Avira Operations GmbH & Co. KG) 0x01520000
Library c:\program files\avira\antivir desktop\ccupdrc.dll (Avira CC Updater plugin resources/Avira Operations GmbH & Co. KG) 0x01580000
Library c:\program files\avira\antivir desktop\cclic.dll (Avira CC License Status plugin/Avira Operations GmbH & Co. KG) 0x01590000
Library c:\program files\avira\antivir desktop\cclicrc.dll (Avira CC License Status plugin resources/Avira Operations GmbH & Co. KG) 0x015D0000
Library c:\program files\avira\antivir desktop\ccmsg.dll (Avira CC Message plugin/Avira Operations GmbH & Co. KG) 0x015E0000
Library c:\program files\avira\antivir desktop\ccmsgrc.dll (Avira CC Message plugin resources/Avira Operations GmbH & Co. KG) 0x01640000
Library C:\Program Files\Avira\AntiVir Desktop\rcimage.dll (Avira Resources/Avira Operations GmbH & Co. KG) 0x01960000
Library c:\program files\avira\antivir desktop\ccmainrc.dll (Avira Control Center resources/Avira Operations GmbH & Co. KG) 0x01F10000
Process C:\Program Files\Common Files\Java\Java Update\jusched.exe (Java(TM) Update Scheduler/Sun Microsystems, Inc.) 2916
Library C:\Program Files\Common Files\Java\Java Update\jusched.exe (Java(TM) Update Scheduler/Sun Microsystems, Inc.) 0x00400000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\Program Files\Skype\Phone\Skype.exe (Skype /Skype Technologies S.A.) 3148
Library C:\Program Files\Skype\Phone\Skype.exe (Skype /Skype Technologies S.A.) 0x00400000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Library C:\WINDOWS\system32\devenum.dll 0x75F40000
Library C:\WINDOWS\system32\msdmo.dll 0x736B0000
Library C:\WINDOWS\system32\Macromed\Flash\Flash11e.ocx (Adobe Flash Player 11.1 r102/Adobe Systems, Inc.) 0x10000000
Process C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe (Advanced SystemCare 5 Tray/IObit) 3184
Library C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe (Advanced SystemCare 5 Tray/IObit) 0x00400000
Library C:\Program Files\IObit\Advanced SystemCare 5\rtl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50000000
Library C:\Program Files\IObit\Advanced SystemCare 5\vcl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50120000
Library C:\Program Files\IObit\Advanced SystemCare 5\datastate.dll (Runtime Library/IObit) 0x10000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Library C:\Program Files\IObit\Advanced SystemCare 5\OFCommon.dll (IObit Library/IObit) 0x012D0000
Library C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL (GrooveShellExtensions Module/Microsoft Corporation) 0x661C0000
Library C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL (GrooveSystemServices Module/Microsoft Corporation) 0x65E30000
Process C:\Program Files\Mozilla Firefox\plugin-container.exe (Plugin Container for Firefox/Mozilla Corporation) 3480
Library C:\Program Files\Mozilla Firefox\plugin-container.exe (Plugin Container for Firefox/Mozilla Corporation) 0x00400000
Library C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation) 0x10000000
Library C:\Program Files\Mozilla Firefox\mozjs.dll 0x00410000
Library C:\Program Files\Mozilla Firefox\nspr4.dll (NSPR Library/Mozilla Foundation) 0x002F0000
Library C:\Program Files\Mozilla Firefox\mozglue.dll (Mozilla Foundation) 0x00330000
Library C:\Program Files\Mozilla Firefox\smime3.dll (NSS S/MIME Library/Mozilla Foundation) 0x00350000
Library C:\Program Files\Mozilla Firefox\nss3.dll (NSS Base Library/Mozilla Foundation) 0x005F0000
Library C:\Program Files\Mozilla Firefox\nssutil3.dll (NSS Utility Library/Mozilla Foundation) 0x00390000
Library C:\Program Files\Mozilla Firefox\plc4.dll (PLC Library/Mozilla Foundation) 0x003C0000
Library C:\Program Files\Mozilla Firefox\plds4.dll (PLDS Library/Mozilla Foundation) 0x003E0000
Library C:\Program Files\Mozilla Firefox\ssl3.dll (NSS SSL Library/Mozilla Foundation) 0x00690000
Library C:\Program Files\Mozilla Firefox\mozsqlite3.dll (SQLite Database Library/sqlite.org) 0x006D0000
Library C:\Program Files\Mozilla Firefox\mozalloc.dll (Mozilla Foundation) 0x007B0000
Library C:\WINDOWS\system32\USP10.dll (Uniscribe Unicode script processor/Microsoft Corporation) 0x74D90000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Library C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll 0x01E00000
Process C:\Program Files\IObit\IObit Malware Fighter\IMF.exe (IObit Malware Fighter/IObit) 3588
Library C:\Program Files\IObit\IObit Malware Fighter\IMF.exe (IObit Malware Fighter/IObit) 0x00400000
Library C:\Program Files\IObit\IObit Malware Fighter\rtl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50000000
Library C:\Program Files\IObit\IObit Malware Fighter\vcl120.bpl (CodeGear Component Package/Embarcadero Technologies, Inc.) 0x50120000
Library C:\Program Files\IObit\IObit Malware Fighter\datastate.dll (Runtime Library/IObit) 0x10000000
Library C:\Program Files\IObit\IObit Malware Fighter\Scan.dll 0x002B0000
Library C:\Program Files\IObit\IObit Malware Fighter\unrar.dll 0x00390000
Library C:\Program Files\IObit\IObit Malware Fighter\IntegrateFilter.dll (IObit.com) 0x011F0000
Library C:\Program Files\IObit\IObit Malware Fighter\zlibwapi.dll 0x04200000
Library C:\Program Files\IObit\IObit Malware Fighter\FileMonitor.dll (FileMonitor.dll/IObit) 0x04370000
Library C:\Program Files\IObit\IObit Malware Fighter\URLFilter.dll (IObit.com) 0x043A0000
Library C:\Program Files\IObit\IObit Malware Fighter\RegFilter.dll (IObit.com) 0x04590000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Library C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL (GrooveShellExtensions Module/Microsoft Corporation) 0x661C0000
Library C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL (GrooveSystemServices Module/Microsoft Corporation) 0x65E30000
Process C:\Documents 3956
Library C:\Documents and Settings\Admin\My Documents\ 0x00400000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\PROGRAM FILES\IOBIT\ADVANCED WINDOWSCARE V2\MEMCLEANER.EXE (Free more available memory/IObit) 3972
Library C:\PROGRAM FILES\IOBIT\ADVANCED WINDOWSCARE V2\MEMCLEANER.EXE (Free more available memory/IObit) 0x00400000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
Process C:\PROGRAM FILES\BITTORRENT\BITTORRENT.EXE (BitTorrent/BitTorrent, Inc.) 4020
Library C:\PROGRAM FILES\BITTORRENT\BITTORRENT.EXE (BitTorrent/BitTorrent, Inc.) 0x00400000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds/Stardock Corporation) 0x66000000
Library C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc) 0x66600000
---- Services - GMER 1.0.15 ----
Service C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe® Flash® Player Update Service 11.2 r202/Adobe Systems Incorporated) [MANUAL] AdobeFlashPlayerUpdateSvc
Service C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe (Advanced SystemCare Service/IObit) [AUTO] AdvancedSystemCareService5
Service C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Scheduler/Avira Operations GmbH & Co. KG) [AUTO] AntiVirSchedulerService
Service C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira On-Access Service/Avira Operations GmbH & Co. KG) [AUTO] AntiVirService
Service C:\WINDOWS\system32\DRIVERS\avgntflt.sys (Avira Minifilter Driver/Avira GmbH) [AUTO] avgntflt
Service C:\WINDOWS\system32\DRIVERS\avipbb.sys (Avira Driver for Security Enhancement/Avira GmbH) [SYSTEM] avipbb
Service C:\WINDOWS\system32\DRIVERS\avkmgr.sys (Avira Manager Driver/Avira GmbH) [SYSTEM] avkmgr
Service C:\WINDOWS\system32\DRIVERS\b57xp32.sys (Broadcom NetXtreme Gigabit Ethernet NDIS5.1 Driver./Broadcom Corporation) [MANUAL] b57w2k
Service C:\Program Files\SystemRequirementsLab\cpudrv.sys [MANUAL] cpudrv
Service C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\FileMonitor.sys (IMF File MiniFilter Driver/IObit) [MANUAL] FileMonitor
Service C:\Program Files\Google\Update\GoogleUpdate.exe (Google Installer/Google Inc.) [AUTO] gupdate
Service C:\Program Files\Google\Update\GoogleUpdate.exe (Google Installer/Google Inc.) [MANUAL] gupdatem
Service C:\WINDOWS\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver v1.0a/Windows (R) Server 2003 DDK provider) [MANUAL] HDAudBus
Service C:\WINDOWS\system32\DRIVERS\igxpmp32.sys (Intel Graphics Miniport Driver/Intel Corporation) [MANUAL] ialm
Service C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe (IObit Malware Fighter Service/IObit) [AUTO] IMFservice
Service C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek(r) High Definition Audio Function Driver/Realtek Semiconductor Corp.) [MANUAL] IntcAzAudAddService
Service C:\Program Files\Java\jre6\bin\jqs.exe (Java(TM) Quick Starter Service/Sun Microsystems, Inc.) [AUTO] JavaQuickStarterService
Service C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys (Logitech PS2 Keyboard Filter Driver./Logitech Inc.) [MANUAL] L8042Kbd
Service C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [MANUAL] Lavasoft Kernexplorer
Service C:\WINDOWS\system32\DRIVERS\LHidKE.Sys (Logitech HID Filter Driver./Logitech Inc.) [MANUAL] LHidKE
Service C:\WINDOWS\System32\Drivers\LHidUsbK.Sys (Logitech USB Mouse Function Driver./Logitech Inc.) [MANUAL] LHidUsbK
Service C:\WINDOWS\system32\DRIVERS\LMouKE.Sys (Logitech Filter Driver for Mouse Class./Logitech Inc.) [MANUAL] LMouKE
Service Outlook
Service C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies DirectParallel IO Library/Parallel Technologies, Inc.) [MANUAL] Ptilink
Service C:\WINDOWS\System32\Drivers\PxHelp20.sys (Px Engine Device Driver for Windows 2000/XP/Sonic Solutions) [BOOT] PxHelp20
Service C:\Program Files\IObit\IObit Malware Fighter\drivers\wxp_x86\regfilter.sys (Registry Filter/IObit.com) [MANUAL] RegFilter
Service C:\WINDOWS\system32\DRIVERS\RT61.sys (Ralink 802.11 Wireless Adapter Driver/Ralink Technology Inc.) [MANUAL] RT61
Service C:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [MANUAL] Secdrv
Service SmartDefragBootTime
Service C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [BOOT] SmartDefragDriver
Service C:\WINDOWS\system32\DRIVERS\ssmdrv.sys (AVIRA SnapShot Driver/Avira GmbH) [SYSTEM] ssmdrv
Service C:\WINDOWS\system32\DRIVERS\StreamIP.sys (Microsoft IP Test Driver/Microsoft Corporation) [MANUAL] streamip
Service C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (SwitchBoard Server (32 bit)/Adobe Systems Incorporated) [MANUAL] SwitchBoard
Service C:\Program Files\IObit\IObit Malware Fighter\drivers\wxp_x86\UrlFilter.sys (URL Filter/IObit.com) [MANUAL] UrlFilter
---- EOF - GMER 1.0.15 ----
Dopuna: 06 Apr 2012 15:04
molom vas nikako da vam posaljem poruku na pravo mijesto, ako mi moze administrator odgovoriti ovako-hvala !!!
|
