R2 avast! Antivirus avast! Antivirus c:\program files\alwil software\avast5\AvastSvc.exe R2 aswFsBlk aswFsBlk c:\windows\system32\drivers\aswFsBlk.sys R1 aswSP aswSP c:\windows\system32\drivers\aswSP.sys USearch Bar = hxxp://uStart Page = hxxp:/// = Running Processes =Ĭ:\WINDOWS\system32\svchost -k DcomLaunchĬ:\WINDOWS\System32\svchost.exe -k netsvcsĬ:\Program Files\Alwil Software\Avast5\AvastSvc.exeĬ:\WINDOWS\system32\svchost.exe -k hpdevmgmtĬ:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYSĬ:\WINDOWS\system32\svchost.exe -k imgsvcĬ:\Program Files\Digital Media Reader\shwiconem.exeĬ:\Program Files\CyberLink\PowerDVD\PDVDServ.exeĬ:\Program Files\HP\HP Software Update\HPWuSchd2.exeĬ:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeĬ:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exeĬ:\Program Files\HP\Digital Imaging\bin\hpqbam08.exeĬ:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exeĬ:\DOCUME~1\Paul\LOCALS~1\Temp\TeamViewer\Version5\TeamViewer.exeĬ:\Documents and Settings\Paul\My Documents\Ray\dds.scr Microsoft Windows XP Home Edition 5.1.2.18.382.103 ĪV: Data Protection *On-access scanning enabled* (Outdated)ĪV: avast! Antivirus *On-access scanning enabled* (Updated) Any help/advice you can give would be appreciated. GMER also shows a hidden service "PRAGMAnnqqfnlbyf". I downloaded and ran DeFogger, DDS, and GMER Rootkit scanner. I am not sure if this is a false positive or not sice both applications show no infections. Clicking the "OK" button does not seem to remove this rootkit. There is no "Clean" button with this message only an "OK". I get a warning shortly after startup from AVAST (see attached screen shot) "SVC: PRAGMAnnqqfnlbyf Rootkit hidden service". Both applications show the machine is clean when doing a full scan.
I installed and ran AVAST anti virus, and MAB on a friend's PC.
0 kommentar(er)
