Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.
Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.
Проблеми с Rootkit Zero Access [решен]

8 ноември 201114 г.
Да, 7% при idle все пак е товар. Но диаграмата показва хаотично натоварване, Нека да проверим още нещо:
Изтеглете System Repair Engineer от тук и разархивирайте ZIP файла на вашия работен плот (desktop).
Стартирайте файла SREngLdR.exe.
След стартиране на програмата натиснете бутона Smart Scan. Вижте дали са направени следните настройки (по подразбиране), снимка:
Натиснете бутона Scan.
Когато програмата завърши работата си, натиснете бутона Save Reports и запишете този файл (SREngLOG.log) на работния плот (desktop).
Отворете SREngLOG.log с Notepad, копирайте съдържанието му с Копирай (Copy) и с Постави (Paste) го поставете в следващия си коментар.
Забележка: System Repair Engineer се блокира от някои програми за сигурност. Просто разрешете на вашата програма за сигурност стартирането на System Repair Engineer.
8 ноември 201114 г.
Автор

2011-11-08,17:54:35

System Repair Engineer 2.8.4.1331
Smallfrogs (http://www.KZTechs.com)

Windows Vista Home Premium Edition Service Pack 2 (Build 6002) - Administrative User - Completed Functions Allowed

Follow item(s) have been selected:
    All Boot Items (Including Registry, Startup Folders, Services and so on)
    Browser Add-ons
    Running Processes (Including process model information)
    File Associations
    Winsock Provider
    Autorun.Inf
    HOSTS File
    Process Privileges Scan
    Scheduled Tasks
    Windows Security Update Check
    API HOOK
    Hidden Process


Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ehTray.exe><C:\Windows\ehome\ehTray.exe>  [(Verified)Microsoft Windows]
    <Google Update><"C:\Users\ACER 6930\AppData\Local\Google\Update\GoogleUpdate.exe" /c>  [(Verified)Google Inc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IAAnotif><C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe>  [(Verified)Intel Corporation]
    <RtHDVCpl><RtHDVCpl.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>  [(Verified)Synaptics Incorporated]
    <eAudio><"C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe">  [Acer Incorporated]
    <WarReg_PopUp><C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe>  [Acer Incorporated]
    <NvCplDaemon><RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <PLFSetI><C:\Windows\PLFSetI.exe>  []
    <LManager><C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE>  [(Verified)Dritek System Inc.]
    <ePower_DMC><C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe>  [Acer Inc.]
    <Gnetmous><C:\Program Files\Samsung\Samsung Optical Wheel Mouse\gnetmous.exe>  [ ]
    <Adobe Reader Speed Launcher><"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe">  [(Verified)Adobe Systems, Incorporated]
    <Adobe ARM><"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe">  [(Verified)Adobe Systems, Incorporated]
    <avgnt><"C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min>  [(Verified)Avira Operations GmbH & Co. KG]
    <SunJavaUpdateSched><"C:\Program Files\Common Files\Java\Java Update\jusched.exe">  [(Verified)Sun Microsystems, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows]
    <Userinit><C:\Windows\system32\userinit.exe,>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><C:\Windows\System32\avgrsstx.dll>  [(Verified)AVG Technologies]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WebCheck><C:\Windows\System32\webcheck.dll>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AWinNotifyVitaKey MC3000]
    <WinlogonNotify: AWinNotifyVitaKey MC3000><C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll>  [Arachnoid Biometrics Identification Group Corp.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\spba]
    <WinlogonNotify: spba><C:\Program Files\Common Files\SPBA\homefus2.dll>  [(Verified)UPEK Inc.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Microsoft Windows Media Player><C:\Windows\system32\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><C:\Windows\system32\ie4uinit.exe -UserIconConfig>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
    <Browser Customizations><"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Windows Mail 7><"%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    <Windows Desktop Update><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Web Platform Customizations><C:\Windows\system32\ie4uinit.exe -BaseSettings>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <N/A><C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\Windows\system32\Aurora.scr>  [(Verified)Microsoft Windows]

==================================
Startup Folders
N/A

==================================
Services
[Avira Scheduler / AntiVirSchedulerService][Running/Auto Start]
  <"C:\Program Files\Avira\AntiVir Desktop\sched.exe"><Avira Operations GmbH & Co. KG>
[Avira Realtime Protection / AntiVirService][Running/Auto Start]
  <"C:\Program Files\Avira\AntiVir Desktop\avguard.exe"><Avira Operations GmbH & Co. KG>
[Bonjour Service / Bonjour Service][Stopped/Auto Start]
  <"C:\Program Files\Bonjour\mDNSResponder.exe"><(File is missing)>
[NTI Backup Now 5 Agent Service / BUNAgentSvc][Running/Auto Start]
  <"C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe"><NewTech Infosystems, Inc.>
[eDataSecurity Service / eDataSecurity Service][Running/Auto Start]
  <"C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe"><Egis Incorporated>
[Empowering Technology Service / ETService][Stopped/Auto Start]
  <C:\Program Files\Acer\Empowering Technology\Service\ETService.exe><(File is missing)>
[Услуга Google Update (gupdate) / gupdate][Stopped/Auto Start]
  <C:\Program Files\Google\Update\GoogleUpdate.exe /svc><(File is missing)>
[Услуга на Google Актуализация (gupdatem) / gupdatem][Stopped/Manual Start]
  <C:\Program Files\Google\Update\GoogleUpdate.exe /medsvc><(File is missing)>
[Intel(R) Matrix Storage Event Monitor / IAANTMON][Running/Auto Start]
  <C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe><Intel Corporation>
[iGroupTec Service / IGBASVC][Running/Auto Start]
  <C:\Program Files\Acer\Acer Bio Protection\BASVC.exe><N/A>
[LightScribeService Direct Disc Labeling Service / LightScribeService][Running/Auto Start]
  <"C:\Program Files\Common Files\LightScribe\LSSrvc.exe"><Hewlett-Packard Company>
[MBAMService / MBAMService][Running/Auto Start]
  <"C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe"><Malwarebytes Corporation>
[MobilityService / MobilityService][Running/Auto Start]
  <C:\Acer\Mobility Center\MobilityService.exe -p><>
[Nero BackItUp Scheduler 3 / Nero BackItUp Scheduler 3][Running/Auto Start]
  <C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe><Nero AG>
[NMIndexingService / NMIndexingService][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe"><Nero AG>
[NTI Backup Now 5 Backup Service / NTIBackupSvc][Running/Auto Start]
  <C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe><NewTech InfoSystems, Inc.>
[NTI Backup Now 5 Scheduler Service / NTISchedulerSvc][Stopped/Auto Start]
  <C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe><(File is missing)>
[NVIDIA Display Driver Service / nvsvc][Running/Auto Start]
  <C:\Windows\system32\nvvsvc.exe><NVIDIA Corporation>
[Office Source Engine / ose][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"><Microsoft Corporation>
[PLFlash DeviceIoControl Service / PLFlash DeviceIoControl Service][Running/Auto Start]
  <C:\Windows\system32\IoctlSvc.exe><Prolific Technology Inc.>
[Raw Socket Service / RS_Service][Running/Auto Start]
  <C:\Program Files\Acer\Acer VCM\RS_Service.exe><Acer Incorporated>
[XAudioService / XAudioService][Running/Auto Start]
  <C:\Windows\system32\DRIVERS\xaudio.exe><Conexant Systems, Inc.>

==================================
Drivers
[adp94xx / adp94xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adp94xx.sys><Adaptec, Inc.>
[adpahci / adpahci][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adpahci.sys><Adaptec, Inc.>
[adpu160m / adpu160m][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adpu160m.sys><Adaptec, Inc.>
[adpu320 / adpu320][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adpu320.sys><Adaptec, Inc.>
[aic78xx / aic78xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\djsvs.sys><Adaptec, Inc.>
[AlfaFF File System mini-filter / AlfaFF][Running/Boot Start]
  <\SystemRoot\system32\Drivers\AlfaFF.sys><Alfa Corporation>
[aliide / aliide][Stopped/Disabled]
  <\SystemRoot\system32\drivers\aliide.sys><Acer Laboratories Inc.>
[arc / arc][Stopped/Disabled]
  <\SystemRoot\system32\drivers\arc.sys><Adaptec, Inc.>
[arcsas / arcsas][Stopped/Disabled]
  <\SystemRoot\system32\drivers\arcsas.sys><Adaptec, Inc.>
[ArcSec / ArcSec][Running/System Start]
  <system32\drivers\ArcSec.sys><N/A>
[Atheros Extensible Wireless LAN device driver / athr][Stopped/Manual Start]
  <system32\DRIVERS\athr.sys><Atheros Communications, Inc.>
[AVG AVI Loader Driver x86 / AvgLdx86][Stopped/System Start]
  <\SystemRoot\System32\Drivers\avgldx86.sys><N/A>
[AVG On-access Scanner Minifilter Driver x86 / AvgMfx86][Running/System Start]
  <\SystemRoot\System32\Drivers\avgmfx86.sys><AVG Technologies CZ, s.r.o.>
[avgntflt / avgntflt][Running/Auto Start]
  <system32\DRIVERS\avgntflt.sys><Avira GmbH>
[avgrkx86.sys / AvgRkx86][Running/Boot Start]
  <\SystemRoot\System32\Drivers\avgrkx86.sys><AVG Technologies CZ, s.r.o.>
[AVG8 Network Redirector / AvgTdiX][Stopped/System Start]
  <\SystemRoot\System32\Drivers\avgtdix.sys><N/A>
[avipbb / avipbb][Running/System Start]
  <system32\DRIVERS\avipbb.sys><Avira GmbH>
[avkmgr / avkmgr][Running/System Start]
  <system32\DRIVERS\avkmgr.sys><Avira GmbH>
[Brother USB Mass-Storage Lower Filter Driver / BrFiltLo][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\brfiltlo.sys><Brother Industries, Ltd.>
[Brother USB Mass-Storage Upper Filter Driver / BrFiltUp][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\brfiltup.sys><Brother Industries, Ltd.>
[Brother MFC Serial Port Interface Driver (WDM) / Brserid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\brserid.sys><Brother Industries Ltd.>
[Brother WDM Serial driver / BrSerWdm][Stopped/Disabled]
  <\SystemRoot\system32\drivers\brserwdm.sys><Brother Industries Ltd.>
[Brother MFC USB Fax Only Modem / BrUsbMdm][Stopped/Disabled]
  <\SystemRoot\system32\drivers\brusbmdm.sys><Brother Industries Ltd.>
[Brother MFC USB Serial WDM Driver / BrUsbSer][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\brusbser.sys><Brother Industries Ltd.>
[Bluetooth Audio Device Service / btwaudio][Stopped/Manual Start]
  <system32\drivers\btwaudio.sys><Broadcom Corporation.>
[Bluetooth AVDT / btwavdt][Stopped/Manual Start]
  <system32\drivers\btwavdt.sys><Broadcom Corporation.>
[btwrchid / btwrchid][Stopped/Manual Start]
  <system32\DRIVERS\btwrchid.sys><Broadcom Corporation.>
[cmdide / cmdide][Stopped/Disabled]
  <\SystemRoot\system32\drivers\cmdide.sys><CMD Technology, Inc.>
[Dritek Keyboard Filter Driver / DKbFltr][Running/Manual Start]
  <system32\DRIVERS\DKbFltr.sys><Dritek System Inc.>
[Intel(R) PRO/1000 NDIS 6 Adapter Driver / E1G60][Stopped/Manual Start]
  <system32\DRIVERS\E1G60I32.sys><Intel Corporation>
[elxstor / elxstor][Stopped/Disabled]
  <\SystemRoot\system32\drivers\elxstor.sys><Emulex>
[Scroll Mouse Driver / genmcmn][Running/Manual Start]
  <system32\DRIVERS\gmfiltr.sys><KYE Systems Corp.>
[HpCISSs / HpCISSs][Stopped/Disabled]
  <\SystemRoot\system32\drivers\hpcisss.sys><Hewlett-Packard Company>
[HSFHWAZL / HSFHWAZL][Stopped/Manual Start]
  <system32\DRIVERS\VSTAZL3.SYS><Conexant Systems, Inc.>
[HSF_DPV / HSF_DPV][Running/Manual Start]
  <system32\DRIVERS\HSX_DPV.sys><Conexant Systems, Inc.>
[HSXHWAZL / HSXHWAZL][Running/Manual Start]
  <system32\DRIVERS\HSXHWAZL.sys><Conexant Systems, Inc.>
[Intel AHCI Controller / iaStor][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\iaStor.sys><Intel Corporation>
[Intel RAID Controller Vista / iaStorV][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iastorv.sys><Intel Corporation>
[iirsp / iirsp][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iirsp.sys><Intel Corp./ICP vortex GmbH>
[int15 / int15][Running/Auto Start]
  <\??\C:\Windows\system32\drivers\int15.sys><N/A>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
  <system32\drivers\RTKVHDA.sys><Realtek Semiconductor Corp.>
[IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start]
  <system32\DRIVERS\ipinip.sys><N/A>
[ITEATAPI_Service_Install / iteatapi][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iteatapi.sys><Integrated Technology Express, Inc.>
[ITERAID_Service_Install / iteraid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iteraid.sys><Integrated Technology Express, Inc.>
[NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller / L1E][Running/Manual Start]
  <system32\DRIVERS\L1E60x86.sys><Atheros Communications, Inc.>
[LSI_FC / LSI_FC][Stopped/Disabled]
  <\SystemRoot\system32\drivers\lsi_fc.sys><LSI Logic>
[LSI_SAS / LSI_SAS][Stopped/Disabled]
  <\SystemRoot\system32\drivers\lsi_sas.sys><LSI Logic>
[LSI_SCSI / LSI_SCSI][Stopped/Disabled]
  <\SystemRoot\system32\drivers\lsi_scsi.sys><LSI Logic>
[MBAMProtector / MBAMProtector][Running/Manual Start]
  <\??\C:\Windows\system32\drivers\mbam.sys><Malwarebytes Corporation>
[MBAMSwissArmy / MBAMSwissArmy][Stopped/Manual Start]
  <\??\C:\Windows\system32\drivers\mbamswissarmy.sys><N/A>
[mdmxsdk / mdmxsdk][Running/Auto Start]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[megasas / megasas][Stopped/Disabled]
  <\SystemRoot\system32\drivers\megasas.sys><LSI Corporation>
[MegaSR / MegaSR][Stopped/Disabled]
  <\SystemRoot\system32\drivers\megasr.sys><LSI Corporation, Inc.>
[Mraid35x / Mraid35x][Stopped/Disabled]
  <\SystemRoot\system32\drivers\mraid35x.sys><LSI Logic Corporation>
[Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit  / NETw5v32][Running/Manual Start]
  <system32\DRIVERS\NETw5v32.sys><Intel Corporation>
[nfrd960 / nfrd960][Stopped/Disabled]
  <\SystemRoot\system32\drivers\nfrd960.sys><IBM Corporation>
[Upper Class Filter Driver / NTIDrvr][Running/Manual Start]
  <system32\DRIVERS\NTIDrvr.sys><NewTech Infosystems, Inc.>
[N-trig HID Tablet Driver / ntrigdigi][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ntrigdigi.sys><N-trig Innovative Technologies>
[Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start]
  <system32\drivers\nvhda32v.sys><NVIDIA Corporation>
[nvlddmkm / nvlddmkm][Running/Manual Start]
  <system32\DRIVERS\nvlddmkm.sys><NVIDIA Corporation>
[NVIDIA nForce RAID Driver    / nvraid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\nvraid.sys><NVIDIA Corporation>
[nvstor / nvstor][Stopped/Disabled]
  <\SystemRoot\system32\drivers\nvstor.sys><NVIDIA Corporation>
[IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start]
  <system32\DRIVERS\nwlnkflt.sys><N/A>
[IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start]
  <system32\DRIVERS\nwlnkfwd.sys><N/A>
[PSDFilter / PSDFilter][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\psdfilter.sys><Egis Incorporated>
[PSDNServ / PSDNServ][Running/Auto Start]
  <system32\DRIVERS\PSDNServ.sys><Egis Incorporated>
[psdvdisk / psdvdisk][Running/Auto Start]
  <system32\DRIVERS\PSDVdisk.sys><Egis Incorporated>
[PxHelp20 / PxHelp20][Running/Boot Start]
  <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Modem Interface USB Device for Legacy Serial Communication / qcusbser][Stopped/Manual Start]
  <system32\DRIVERS\qcusbser.sys><TCT International Mobile Ltd>
[QLogic Fibre Channel Miniport Driver / ql2300][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ql2300.sys><QLogic Corporation>
[QLogic iSCSI Miniport Driver / ql40xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ql40xx.sys><QLogic Corporation>
[Revoflt / Revoflt][Stopped/Manual Start]
  <system32\DRIVERS\revoflt.sys><VS Revo Group>
[Realtek USB 2.0 Card Reader / RTSTOR][Running/Manual Start]
  <system32\drivers\RTSTOR.SYS><Realtek Semiconductor Corp.>
[SiSRaid4 / SiSRaid4][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sisraid4.sys><Silicon Integrated Systems>
[sptd / sptd][Running/Boot Start]
  <\SystemRoot\System32\Drivers\sptd.sys><N/A>
[ssmdrv / ssmdrv][Running/System Start]
  <system32\DRIVERS\ssmdrv.sys><Avira GmbH>
[Symc8xx / Symc8xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\symc8xx.sys><LSI Logic>
[Sym_hi / Sym_hi][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sym_hi.sys><LSI Logic>
[Sym_u3 / Sym_u3][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sym_u3.sys><LSI Logic>
[Synaptics TouchPad Driver / SynTP][Stopped/Manual Start]
  <system32\DRIVERS\SynTP.sys><Synaptics, Inc.>
[TC USB Kernel Driver / TcUsb][Running/Manual Start]
  <System32\Drivers\tcusb.sys><UPEK Inc.>
[uliahci / uliahci][Stopped/Disabled]
  <\SystemRoot\system32\drivers\uliahci.sys><ULi Electronics Inc.>
[UlSata / UlSata][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ulsata.sys><Promise Technology, Inc.>
[ulsata2 / ulsata2][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ulsata2.sys><Promise Technology, Inc.>
[viaide / viaide][Stopped/Disabled]
  <\SystemRoot\system32\drivers\viaide.sys><VIA Technologies, Inc.>
[vsmraid / vsmraid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\vsmraid.sys><VIA Technologies Inc.,Ltd>
[winachsf / winachsf][Running/Manual Start]
  <system32\DRIVERS\HSX_CNXT.sys><Conexant Systems, Inc.>
[Winbond IR Transceiver / winbondcir][Running/Manual Start]
  <system32\DRIVERS\winbondcir.sys><Winbond Electronics Corporation>
[XAudio / XAudio][Running/Auto Start]
  <system32\DRIVERS\xaudio.sys><Conexant Systems, Inc.>
[ZTE Proprietary USB Driver / ZTEusbmdm6k][Stopped/Manual Start]
  <system32\DRIVERS\ZTEusbmdm6k.sys><ZTE Incorporated>
[ZTE NMEA Port / ZTEusbnmea][Stopped/Manual Start]
  <system32\DRIVERS\ZTEusbnmea.sys><ZTE Incorporated>
[ZTE Diagnostic Port / ZTEusbser6k][Stopped/Manual Start]
  <system32\DRIVERS\ZTEusbser6k.sys><ZTE Incorporated>

==================================
Browser Add-ons
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
  {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} <, >
[ShowBarObj Class]
  {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} <C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll, (Signed) Egis>
[Java(tm) Plug-In 2 SSV Helper]
  {DBC80044-A445-435b-BC74-9C25C1C588A9} <C:\Program Files\Java\jre7\bin\jp2ssv.dll, (Signed) Oracle Corporation>
[Quick-Launching Area]
  {10954C80-4F0F-11d3-B17C-00C0DFE39736} <C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe, (Signed) >
[&Research]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[@btrez.dll,-4015]
  {CCA281CA-C863-46ef-9331-5C8D4460577F} <, >
[Acer eDataSecurity Management]
  {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} <C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll, (Signed) Egis Incorporated.>
[System Requirements Lab Class]
  {1E54D648-B804-468d-BC78-4AFFED8E262F} <, >
[Java Plug-in 10.0.0]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre7\bin\jp2iexp.dll, (Signed) >
[Java Plug-in 1.6.0_29]
  {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} <C:\Program Files\Java\jre6\bin\jp2iexp.dll, (Signed) >
[Java Plug-in 1.7.0]
  {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} <C:\Program Files\Java\jre7\bin\jp2iexp.dll, (Signed) >
[Java Plug-in 1.7.0]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre7\bin\npjpi170.dll, (Signed) Oracle Corporation>
[]
  {E2883E8F-472F-4FB0-9522-AC9BF37916A7} <, >
[]
  {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <, >
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <, >
[]
  {10954C80-4F0F-11D3-B17C-00C0DFE39736} <, >
[System Requirements Lab Class]
  {1E54D648-B804-468D-BC78-4AFFED8E262F} <, >
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\Windows\System32\wmpdxm.dll, (Signed) Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <C:\Windows\system32\mshtml.dll, (Signed) Microsoft Corporation>
[XML DOM Document]
  {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[IETag Factory]
  {38481807-CA0E-42D2-BF39-B33AF135CC4D} <C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, (Signed) Microsoft Corporation>
[]
  {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} <, >
[XML Document]
  {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[]
  {53707962-6F74-2D53-2644-206D7942484F} <, >
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <C:\Windows\system32\ieframe.dll, (Signed) Microsoft Corporation>
[Acer eDataSecurity Management]
  {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} <C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll, (Signed) Egis Incorporated.>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <%SystemRoot%\system32\wmp.dll, (Signed) N/A>
[ShowBarObj Class]
  {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} <C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll, (Signed) Egis>
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\Windows\system32\ieframe.dll, (Signed) Microsoft Corporation>
[XML DOM Document 4.0]
  {88D969C0-F192-11D4-A65F-0040963251E5} <c:\Windows\system32\msxml4.dll, (Signed) Microsoft Corporation>
[Free Threaded XML DOM Document 4.0]
  {88D969C1-F192-11D4-A65F-0040963251E5} <c:\Windows\system32\msxml4.dll, (Signed) Microsoft Corporation>
[XSL Template 4.0]
  {88D969C3-F192-11D4-A65F-0040963251E5} <c:\Windows\system32\msxml4.dll, (Signed) Microsoft Corporation>
[XML HTTP 4.0]
  {88D969C5-F192-11D4-A65F-0040963251E5} <c:\Windows\system32\msxml4.dll, (Signed) Microsoft Corporation>
[XML DOM Document 5.0]
  {88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, (Signed) Microsoft Corporation>
[Free Threaded XML DOM Document 5.0]
  {88D969E6-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, (Signed) Microsoft Corporation>
[XSL Template 5.0]
  {88D969E8-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, (Signed) Microsoft Corporation>
[XML HTTP 5.0]
  {88D969EA-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, (Signed) Microsoft Corporation>
[XML DOM Document 6.0]
  {88D96A05-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A>
[Free Threaded XML DOM Document 6.0]
  {88D96A06-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A>
[XSL Template 6.0]
  {88D96A08-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A>
[XML HTTP 6.0]
  {88D96A0A-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A>
[]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[VideoLAN VLC ActiveX Plugin v2]
  {9BE31822-FDAD-461B-AD51-BE1D1C159921} <C:\Program Files\VideoLAN\VLC\axvlc.dll, >
[]
  {9E385F0A-0BA2-430C-96AA-4399C5E40F6C} <, >
[Google Update Plugin]
  {C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D} <C:\Users\ACER 6930\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll, (Signed) Google Inc.>
[Google Update Plugin]
  {C442AC41-9200-4770-8CC0-7CDB4F245C55} <C:\Users\ACER 6930\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll, (Signed) Google Inc.>
[]
  {C7D153ED-26A9-11D4-BD8A-915594DC902D} <, >
[Adobe PDF Reader]
  {CA8A9780-280D-11CF-A24D-444553540000} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll, (Signed) Adobe Systems, Inc.>
[]
  {CCA281CA-C863-46EF-9331-5C8D4460577F} <, >
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <%SystemRoot%\system32\wmp.dll, (Signed) N/A>
[VIDEO__AVI Moniker Class]
  {CD3AFA88-B84F-48F0-9393-7EDC34128127} <%SystemRoot%\system32\wmp.dll, (Signed) N/A>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <%SystemRoot%\system32\wmp.dll, (Signed) N/A>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <%SystemRoot%\system32\wmp.dll, (Signed) N/A>
[]
  {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} <, >
[Microsoft Url Search Hook]
  {CFBFAE00-17A6-11D0-99CB-00C04FD64497} <C:\Windows\system32\ieframe.dll, (Signed) Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\Windows\system32\Macromed\Flash\Flash10t.ocx, (Signed) Adobe Systems, Inc.>
[Microsoft Agent Control 2.0]
  {D45FD31B-5C6E-11D1-9EC1-00C04FD7081F} <%SystemRoot%\MSAgent\agentctl.dll, (Signed) N/A>
[Java(tm) Plug-In 2 SSV Helper]
  {DBC80044-A445-435B-BC74-9C25C1C588A9} <C:\Program Files\Java\jre7\bin\jp2ssv.dll, (Signed) Oracle Corporation>
[VideoLAN VLC ActiveX Plugin v1]
  {E23FE9C6-778E-49D4-B537-38FCDE4887D8} <C:\Program Files\VideoLAN\VLC\axvlc.dll, >
[XML HTTP Request]
  {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[JScript Language]
  {F414C260-6AC0-11CF-B6D1-00AA00BBBB58} <C:\Windows\system32\jscript.dll, (Signed) Microsoft Corporation>
[XML HTTP 3.0]
  {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[XML DOM Document]
  {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[XML HTTP]
  {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A>
[E&xport to Microsoft Excel]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[Google Sidewiki...]
  <res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html, N/A>
[Send image to &Bluetooth Device...]
  <C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm, N/A>
[Send page to &Bluetooth Device...]
  <C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm, N/A>

==================================
Running Processes
[PID: 512 / SYSTEM][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 6.0.6002.18005 (lh_sp2rtm.090410-1830)]
[PID: 584 / SYSTEM][C:\Windows\system32\csrss.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 632 / SYSTEM][C:\Windows\system32\wininit.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 648 / SYSTEM][C:\Windows\system32\csrss.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 684 / SYSTEM][C:\Windows\system32\services.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 696 / SYSTEM][C:\Windows\system32\lsass.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 712 / SYSTEM][C:\Windows\system32\lsm.exe]  [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[PID: 868 / SYSTEM][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 924 / SYSTEM][C:\Windows\system32\nvvsvc.exe]  [NVIDIA Corporation, 7.15.11.7620]
[PID: 952 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1048 / LOCAL SERVICE][C:\Windows\System32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1076 / SYSTEM][C:\Windows\System32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1088 / SYSTEM][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1188 / SYSTEM][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1204 / NETWORK SERVICE][C:\Windows\system32\SLsvc.exe]  [(Verified) Microsoft Corporation, 6.0.6002.18005 (lh_sp2rtm.090410-1830)]
[PID: 1252 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1296 / SYSTEM][C:\Windows\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[PID: 1400 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1584 / SYSTEM][C:\Windows\System32\spoolsv.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1608 / SYSTEM][C:\Program Files\Avira\AntiVir Desktop\sched.exe]  [Avira Operations GmbH & Co. KG, 12.1.0.18]
    [C:\Program Files\Avira\AntiVir Desktop\grdcore.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\cfglib.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gpipc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gpgen.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gpschd.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.18]
    [C:\Program Files\Avira\AntiVir Desktop\avevtlog.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\schedr.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll]  [, 3.07.00.00]
    [C:\Program Files\Avira\AntiVir Desktop\avipc.dll]  [Avira Operations GmbH & Co. KG, 12.1.6.4]
[PID: 1624 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1736 / SYSTEM][C:\Windows\system32\rundll32.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\system32\NVSVC.DLL]  [NVIDIA Corporation, 7.15.11.7620]
    [C:\Windows\system32\nvapi.dll]  [NVIDIA Corporation, 7.15.11.7620]
[PID: 388 / SYSTEM][C:\Program Files\Avira\AntiVir Desktop\avguard.exe]  [Avira Operations GmbH & Co. KG, 12.1.0.18]
    [C:\Program Files\Avira\AntiVir Desktop\grdcore.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\cfglib.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gpgen.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gpgrd.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gpipc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gpavgio.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.18]
    [c:\program files\avira\antivir desktop\gpgui.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gplegacy.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gpgenrep.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\onlcfg.dll]  [Avira Operations GmbH & Co. KG, 12.1.1.17]
    [C:\Program Files\Avira\AntiVir Desktop\avevtlog.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\guardmsg.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll]  [, 3.07.00.00]
    [C:\Program Files\Avira\AntiVir Desktop\AVGIO.DLL]  [Avira Operations GmbH & Co. KG, 12.1.19.17]
    [C:\Program Files\Avira\AntiVir Desktop\avipc.dll]  [Avira Operations GmbH & Co. KG, 12.1.6.4]
    [c:\program files\avira\antivir desktop\avpref.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\aecore.dll]  [Avira Operations GmbH & Co. KG, 8.1.24.0]
    [C:\Program Files\Avira\AntiVir Desktop\aevdf.dll]  [Avira Operations GmbH & Co. KG, 8.1.2.2]
    [C:\Program Files\Avira\AntiVir Desktop\aescript.dll]  [Avira Operations GmbH & Co. KG, 8.1.3.84]
    [C:\Program Files\Avira\AntiVir Desktop\aescn.dll]  [Avira GmbH, 8.1.7.2]
    [C:\Program Files\Avira\AntiVir Desktop\aesbx.dll]  [Avira GmbH, 8.2.1.34]
    [C:\Program Files\Avira\AntiVir Desktop\aerdl.dll]  [Avira GmbH, 8.1.9.15]
    [C:\Program Files\Avira\AntiVir Desktop\aepack.dll]  [Avira Operations GmbH & Co. KG, 8.2.13.3]
    [C:\Program Files\Avira\AntiVir Desktop\unacev2.dll]  [ACE Compression Software, 2.6.0.3]
    [C:\Program Files\Avira\AntiVir Desktop\aeoffice.dll]  [Avira Operations GmbH & Co. KG, 8.1.2.19]
    [C:\Program Files\Avira\AntiVir Desktop\aeheur.dll]  [Avira Operations GmbH & Co. KG, 8.1.2.188]
    [C:\Program Files\Avira\AntiVir Desktop\aehelp.dll]  [Avira Operations GmbH & Co. KG, 8.1.18.0]
    [C:\Program Files\Avira\AntiVir Desktop\aegen.dll]  [Avira Operations GmbH & Co. KG, 8.1.5.13]
    [C:\Program Files\Avira\AntiVir Desktop\aeemu.dll]  [Avira GmbH, 8.1.3.0]
    [C:\Program Files\Avira\AntiVir Desktop\aebb.dll]  [Avira GmbH, 8.1.1.0]
    [c:\program files\avira\antivir desktop\avesvc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\avesvcr.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\webcat.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\webcatrc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\avreg.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.22]
[PID: 452 / SYSTEM][C:\Program Files\Common Files\SPBA\upeksvr.exe]  [UPEK Inc., 5.8.2.4217]
    [C:\Program Files\Common Files\SPBA\infql2.dll]  [UPEK Inc., 5.8.2.4217]
    [C:\Program Files\Common Files\SPBA\provider.dll]  [UPEK Inc., 5.8.2.4217]
    [C:\Program Files\Common Files\SPBA\qlbase.dll]  [UPEK Inc., 5.8.2.4217]
    [C:\Program Files\Common Files\SPBA\homepass.dll]  [UPEK Inc., 5.8.2.4217]
    [C:\Program Files\Common Files\SPBA\homefus2.dll]  [UPEK Inc., 5.8.2.4217]
    [C:\Program Files\Common Files\SPBA\bio.dll]  [UPEK Inc., 5.8.2.4217]
[PID: 544 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 12 / SYSTEM][C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe]  [NewTech Infosystems, Inc., 5.1.2.1]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\ACE.dll]  [, 5.5.1]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\locator.dll]  [NewTech Infosystems, Inc., 5.1.2.1]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\listor.dll]  [NewTech Infosystems, Inc., 5.1.2.1]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\ACEXML.dll]  [N/A, ]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\ACEXML_Parser.dll]  [N/A, ]
[PID: 1800 / SYSTEM][C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe]  [Egis Incorporated, 3, 0, 92, 4]
[PID: 1928 / SYSTEM][C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe]  [Arachnoid Biometrics Identification Group Corp., 5.0.0.0]
    [C:\Program Files\Acer\Acer Bio Protection\CustomRes.dll]  [Arachnoid Biometrics Identification Group Corp., 5.0.0.0]
    [C:\Windows\system32\bsapi.dll]  [UPEK, Inc., 3.0.0.160]
    [C:\Program Files\Common Files\SPBA\vtapip.dll]  [UPEK Inc., 5.8.2.4217]
    [C:\Program Files\Common Files\SPBA\infql2.dll]  [UPEK Inc., 5.8.2.4217]
[PID: 1980 / SYSTEM][C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe]  [Intel Corporation, 8.5.0.1032]
    [C:\Program Files\Intel\Intel Matrix Storage Manager\ISDI.dll]  [Intel Corporation, 8.5.0.1032]
    [C:\Program Files\Intel\Intel Matrix Storage Manager\ENU\PlugInRAID_ENU.dll]  [Intel Corporation, 8.5.0.1032]
[PID: 640 / SYSTEM][C:\Program Files\Acer\Acer Bio Protection\BASVC.exe]  [N/A, ]
    [C:\Program Files\Acer\Acer Bio Protection\CustomRes.dll]  [Arachnoid Biometrics Identification Group Corp., 5.0.0.0]
    [C:\Windows\system32\bsapi.dll]  [UPEK, Inc., 3.0.0.160]
    [C:\Program Files\Common Files\SPBA\vtapip.dll]  [UPEK Inc., 5.8.2.4217]
    [C:\Program Files\Common Files\SPBA\infql2.dll]  [UPEK Inc., 5.8.2.4217]
[PID: 2092 / SYSTEM][C:\Program Files\Common Files\LightScribe\LSSrvc.exe]  [Hewlett-Packard Company, 1.4.142.1]
    [C:\Program Files\Common Files\LightScribe\LSSProxy.dll]  [Hewlett-Packard Company, 1.4.142.1]
    [C:\Program Files\Common Files\LightScribe\LSLog.dll]  [Hewlett-Packard Company, 1.4.142.1]
[PID: 2196 / SYSTEM][C:\Acer\Mobility Center\MobilityService.exe]  [, 3, 0, 3000, 0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985d\msvcm80.dll]  [Microsoft Corporation, 8.00.50727.4053]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll]  [Microsoft Corporation, 2.0.50727.4216 (VistaSP2GDR.050727-4200)]
    [C:\Windows\assembly\NativeImages_v2.0.50727_32\System\f9c36ea806e77872dce891c77b68fac3\System.ni.dll]  [Microsoft Corporation, 2.0.50727.4215 (VistaSP2GDR.050727-4200)]
    [C:\Acer\Mobility Center\MobilityInterface.dll]  [N/A, ]
[PID: 2220 / SYSTEM][C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe]  [Nero AG, 3, 5, 1, 0]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\NB.dll]  [Nero AG, 3, 5, 1, 0]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\NeroAPIGlueLayerUnicode.dll]  [Nero AG, 8.3.3.1]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\LBFC.dll]  [Nero AG, 3, 5, 1, 0]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\NBHDMgr.dll]  [Nero AG, 3, 5, 1, 0]
[PID: 2320 / SYSTEM][C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe]  [NewTech InfoSystems, Inc., 5.1.0.3]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BKaux.dll]  [NewTech InfoSystems, Inc., 5.1.0.3]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Data32.dll]  [NewTech Infosystems, Inc., 5.1.0.3]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Cdrw32.dll]  [NewTech Infosystems, Inc., 3, 1, 1, 91]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\CdrMmc32.dll]  [NewTech Infosystems, Inc., 3, 1, 1, 173]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\CdrwEx32.dll]  [NewTech Infosystems, Inc., 3, 1, 1, 95]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\ImagFile.dll]  [NewTech Infosystems, Inc., 5.1.0.3]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BKauxLOC.dll]  [NewTech InfoSystems, Inc., 5.1.0.3]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BKImage.dll]  [NewTech InfoSystems, Inc., 5.1.0.3]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Hddrw32.dll]  [NewTech Infosystems, Inc., 5.1.0.3]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Scd32.dll]  [NewTech Infosystems, Inc., 5.1.0.3]
    [C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BKImageLOC.dll]  [NewTech InfoSystems, Inc., 5.1.0.3]
[PID: 2472 / ACER 6930][C:\Windows\system32\Dwm.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\system32\nvd3dum.dll]  [NVIDIA Corporation, 7.15.11.7620]
[PID: 2536 / ACER 6930][C:\Windows\Explorer.EXE]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll]  [Egis Inc., 3, 0, 0, 4]
    [C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll]  [Egis Incorporated., 3, 0, 164, 7]
    [C:\Windows\system32\btncopy.dll]  [Broadcom Corporation., 6.0.1.6400]
    [C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll]  [Malwarebytes Corporation, 1.50.1.0000]
    [C:\Program Files\Acer\Acer Bio Protection\FPLaunchCache.dll]  [Arachnoid Biometrics Identification Group Corp., 5, 0, 4, 0]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\NBShell.dll]  [Nero AG, 3, 5, 1, 0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.4053]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_03ca5532205cb096\MFC80ENU.DLL]  [Microsoft Corporation, 8.00.50727.4053]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\Program Files\Avira\AntiVir Desktop\shlext.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSshellExt.dll]  [Egis Incorporated., 3, 0, 1, 4]
    [C:\Program Files\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll]  [Nero AG, 3, 3, 1, 1]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_cbf21254470d8752\MFC80.DLL]  [Microsoft Corporation, 8.00.50727.4053]
    [C:\Program Files\7-Zip\7-zip.dll]  [Igor Pavlov, 4.65]
    [C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll]  [VS Revo Group, 1.0.0.2]
    [C:\Windows\system32\CmdLineExt.dll]  [Sony DADC Austria AG., 1,1,225,0]
    [C:\Windows\system32\nvcpl.dll]  [NVIDIA Corporation, 7.15.11.7620]
    [C:\Windows\system32\nvapi.dll]  [NVIDIA Corporation, 7.15.11.7620]
[PID: 2612 / SYSTEM][C:\Windows\system32\IoctlSvc.exe]  [Prolific Technology Inc., 1, 6, 0, 0]
[PID: 2628 / ACER 6930][C:\Windows\system32\taskeng.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\system32\nvapi.dll]  [NVIDIA Corporation, 7.15.11.7620]
[PID: 2652 / SYSTEM][C:\Program Files\Acer\Acer VCM\RS_Service.exe]  [Acer Incorporated, 3, 0, 3000, 8025]
[PID: 2712 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 2840 / SYSTEM][C:\Windows\System32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 2916 / SYSTEM][C:\Windows\system32\DRIVERS\xaudio.exe]  [Conexant Systems, Inc., 1.00.15.00]
[PID: 3312 / ACER 6930][C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe]  [Intel Corporation, 8.5.0.1032]
    [C:\Program Files\Intel\Intel Matrix Storage Manager\ISDI.dll]  [Intel Corporation, 8.5.0.1032]
    [C:\Program Files\Intel\Intel Matrix Storage Manager\ENU\IAAMon_ENU.dll]  [Intel Corporation, 8.5.0.1032]
[PID: 3320 / ACER 6930][C:\Windows\RtHDVCpl.exe]  [Realtek Semiconductor, 1, 0, 0, 183]
[PID: 3328 / ACER 6930][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]  [Synaptics, Inc., 11.1.4 25Apr08]
    [C:\Windows\system32\SynCOM.dll]  [Synaptics, Inc., 11.1.4 25Apr08]
[PID: 3336 / ACER 6930][C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe]  [Acer Incorporated, 3.0.3008]
    [C:\Program Files\Acer\Empowering Technology\eAudio\Language\ENU\LangEnu.dll]  [CyberLink, 1, 0, 207, 0]
    [C:\Program Files\Acer\Empowering Technology\eAudio\AcrRtAud.dll]  [Realtek Semiconductor, 1, 0, 0, 6]
[PID: 3360 / ACER 6930][C:\Windows\PLFSetI.exe]  [, 1, 0, 1, 0]
[PID: 3368 / ACER 6930][C:\Program Files\Launch Manager\QtZgAcer.EXE]  [Dritek System Inc., 1, 0, 18, 604]
    [C:\Program Files\Launch Manager\CDRomUtl.dll]  [Dritek System Inc., 1.00]
    [C:\Program Files\Launch Manager\ComFnUtl.dll]  [Dritek System Inc., 1, 0, 0, 711]
    [C:\Program Files\Launch Manager\MixerUtl.dll]  [Dritek System Inc., 1.00]
    [C:\Program Files\Launch Manager\OSDUtl.dll]  [Dritek System Inc., 1, 0, 3, 309]
    [C:\Program Files\Launch Manager\RgnMaker.dll]  [Dritek System Inc., 1, 0, 0, 309]
    [C:\Program Files\Launch Manager\SzUPFUtl.dll]  [Dritek System Inc., 1.00]
    [C:\Program Files\Launch Manager\Wnd2File.dll]  [Dritek System Inc., 3.00]
    [C:\Program Files\Launch Manager\SzPtcUtl.dll]  [Dritek System Inc., 1.00]
    [C:\Program Files\Launch Manager\LgKCUtl.Dll]  [Dritek System Inc., 2, 0, 2, 1007]
    [C:\Program Files\Launch Manager\DialCnt.Dll]  [Dritek System Inc., 2, 1, 0, 1]
    [C:\Program Files\Launch Manager\VistaVol.DLL]  [Dritek System Inc., 1, 0, 0, 514]
    [C:\Program Files\Launch Manager\MMDUtl.DLL]  [Dritek System Inc., 1.2.15.5525]
    [C:\Windows\system32\nvapi.dll]  [NVIDIA Corporation, 7.15.11.7620]
    [C:\Windows\system32\Syncom.dll]  [Synaptics, Inc., 11.1.4 25Apr08]
    [C:\Program Files\Launch Manager\NTKCUtl.dll]  [Dritek System Inc., 2, 0, 0, 207]
    [C:\Program Files\Launch Manager\WHookCtl.dll]  [Dritek System Inc., 2, 2, 8, 328]
[PID: 3420 / ACER 6930][C:\Program Files\Avira\AntiVir Desktop\avgnt.exe]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\ccwkrlib.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.18]
    [c:\program files\avira\antivir desktop\cfglib.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\ccguard.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\ccgrdrc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\ccgrdw.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\grdcore.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\gpipc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\avipc.dll]  [Avira Operations GmbH & Co. KG, 12.1.6.4]
    [c:\program files\avira\antivir desktop\ccwgrd.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\ccgen.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.18]
    [c:\program files\avira\antivir desktop\ccgenrc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\ccupdate.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.20]
    [c:\program files\avira\antivir desktop\ccupdrc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\cclic.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.18]
    [c:\program files\avira\antivir desktop\cclicrc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\ccmsg.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\ccmsgrc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [C:\Program Files\Avira\AntiVir Desktop\rcimage.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
    [c:\program files\avira\antivir desktop\ccmainrc.dll]  [Avira Operations GmbH & Co. KG, 12.1.0.17]
[PID: 3436 / ACER 6930][C:\Windows\ehome\ehtray.exe]  [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[PID: 3456 / ACER 6930][C:\Program Files\Windows Media Player\wmpnscfg.exe]  [Microsoft Corporation, 11.0.6000.6324 (vista_rtm.061101-2205)]
[PID: 3776 / ACER 6930][C:\Windows\ehome\ehmsas.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\System32\MCEPlugin.dll]  [Acer Inc., 3, 0, 3013, 0]
[PID: 3844 / SYSTEM][C:\Program Files\Avira\AntiVir Desktop\avshadow.exe]  [Avira Operations GmbH & Co. KG, 12.1.0.10]
    [C:\Program Files\Avira\AntiVir Desktop\avipc.dll]  [Avira Operations GmbH & Co. KG, 12.1.6.4]
[PID: 3924 / SYSTEM][C:\Windows\system32\wbem\wmiprvse.exe]  [(Verified) Microsoft Corporation, 6.0.6002.18005 (lh_sp2rtm.090410-1830)]
[PID: 3944 / NETWORK SERVICE][C:\Program Files\Windows Media Player\wmpnetwk.exe]  [Microsoft Corporation, 11.0.6000.6324 (vista_rtm.061101-2205)]
[PID: 4084 / ACER 6930][C:\Windows\system32\wbem\unsecapp.exe]  [(Verified) Microsoft Corporation, 6.0.6002.18005 (lh_sp2rtm.090410-1830)]
[PID: 3448 / ACER 6930][C:\Users\ACER69~1\AppData\Local\Temp\RtkBtMnt.exe]  [Realtek Semiconductor Corp., 1, 0, 0, 10]
[PID: 992 / SYSTEM][C:\Windows\system32\taskeng.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 1808 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 3548 / SYSTEM][C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe]  [Malwarebytes Corporation, 1.51.1.0000]
    [C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll]  [Malwarebytes Corporation, 1.51.0.0023]
    [C:\Program Files\Malwarebytes' Anti-Malware\mbamnet.dll]  [Malwarebytes Corporation, 1.51.2.0000]
[PID: 5296 / ACER 6930][C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\chrome.exe]  [Google Inc., 15.0.874.106]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\chrome.dll]  [Google Inc., 15.0.874.106]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\icudt.dll]  [The ICU Project, 4, 6, 0, 0]
    [C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll]  [Egis Inc., 3, 0, 0, 4]
    [C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll]  [Egis Incorporated., 3, 0, 164, 7]
[PID: 3544 / ACER 6930][C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\chrome.exe]  [Google Inc., 15.0.874.106]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\chrome.dll]  [Google Inc., 15.0.874.106]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\icudt.dll]  [The ICU Project, 4, 6, 0, 0]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\pdf.dll]  [, 1, 0, 0, 1]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll]  [N/A, ]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\avcodec-53.dll]  [N/A, ]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\avutil-51.dll]  [N/A, ]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\avformat-53.dll]  [N/A, ]
[PID: 3400 / ACER 6930][C:\Windows\system32\rundll32.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Users\ACER69~1\AppData\Local\Google\Chrome\APPLIC~1\150874~1.106\gcswf32.dll]  [, ]
    [C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll]  [Egis Inc., 3, 0, 0, 4]
    [C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll]  [Egis Incorporated., 3, 0, 164, 7]
[PID: 5272 / ACER 6930][C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\chrome.exe]  [Google Inc., 15.0.874.106]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\chrome.dll]  [Google Inc., 15.0.874.106]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\icudt.dll]  [The ICU Project, 4, 6, 0, 0]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\gcswf32.dll]  [, ]
[PID: 5128 / ACER 6930][C:\Program Files\WinRAR\WinRAR.exe]  [N/A, ]
    [C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll]  [Egis Inc., 3, 0, 0, 4]
    [C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll]  [Egis Incorporated., 3, 0, 164, 7]
    [C:\Windows\system32\btncopy.dll]  [Broadcom Corporation., 6.0.1.6400]
[PID: 5180 / ACER 6930][C:\Users\ACER69~1\AppData\Local\Temp\Rar$EX00.055\SREngLdr.EXE]  [Smallfrogs Studio, 2.8.4.1331]
[PID: 3476 / ACER 6930][C:\Users\ACER69~1\AppData\Local\Temp\Rar$EX00.055\SRE349be888.EXE]  [Smallfrogs Studio, 2.8.4.1331]
[PID: 2876 / ACER 6930][C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\chrome.exe]  [Google Inc., 15.0.874.106]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\chrome.dll]  [Google Inc., 15.0.874.106]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\icudt.dll]  [The ICU Project, 4, 6, 0, 0]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\pdf.dll]  [, 1, 0, 0, 1]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll]  [N/A, ]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\avcodec-53.dll]  [N/A, ]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\avutil-51.dll]  [N/A, ]
    [C:\Users\ACER 6930\AppData\Local\Google\Chrome\Application\15.0.874.106\avformat-53.dll]  [N/A, ]

==================================
File Associations
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["%SystemRoot%\hh.exe" %1]
.HLP  OK. [%SystemRoot%\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  Error. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock Provider
N/A

==================================
Autorun.Inf
N/A

==================================
HOSTS File
127.0.0.1       localhost

==================================
Process Privileges Scan
N/A

==================================
Scheduled Tasks
[Enabled] \\Adobe Reader and Acrobat Manager
        C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
[Enabled] \\CreateChoiceProcessTask
        C:\Windows\System32\browserchoice.exe /launch
[Enabled] \\Google Updater and Installer
        C:\Users\ACER 6930\AppData\Local\Google\Update\GoogleUpdate.exe /c
[Enabled] \\GoogleUpdateTaskUserS-1-5-21-615531898-3775969475-203111388-1000Core
        C:\Users\ACER 6930\AppData\Local\Google\Update\GoogleUpdate.exe /c
[Enabled] \\GoogleUpdateTaskUserS-1-5-21-615531898-3775969475-203111388-1000UA
        C:\Users\ACER 6930\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
[Enabled] \\Java Update Scheduler
        C:\Program Files\Common Files\Java\Java Update\jusched.exe /ua /installsource scheduler
[Enabled] \\TuneUpUtilities_Task_BkGndMaintenance
        C:\Program Files\TuneUp Utilities 2010\OneClick.exe $(Arg0)
[Enabled] \\{1A7FAA5F-D91D-4792-80D7-82C46782B01B}
        C:\Windows\system32\pcalua.exe -a "C:\Program Files\Netlog Music Tool\Uninstaller.exe"
[Enabled] \\{201F923E-0B01-4A47-8B70-2FE535644B3C}
        "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/4.2.0.169/bg/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;alreadyoffered
[Enabled] \\{218EAE4C-26F3-490F-BFC5-1F2C7BCD3045}
        "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/4.2.0.169/bg/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;alreadyoffered
[Enabled] \\{7A43E44F-452A-49BF-BCE8-1B6164186450}
        "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/4.2.0.169/bg/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:offered-notinstalled
[Enabled] \\{7F1489A6-FE51-40B2-94D0-B2DA209B2297}
        "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/4.2.0.169/bg/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;alreadyoffered
[Enabled] \\{9399FBB7-359B-4FBF-BEB0-5047B159748C}
        C:\Windows\system32\pcalua.exe -a "C:\Users\ACER 6930\Desktop\BG\Daemon Tools\daemon410-x86.exe" -d "C:\Users\ACER 6930\Desktop\BG\Daemon Tools"
[Enabled] \\{9AD24A35-0ABA-490E-9A6B-8E6C94099E9D}
        "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/4.2.0.169/bg/go/help.faq.installer?LastError=1618
[Enabled] \\{9E7AB076-F8EE-4DC9-AC3E-CCFF78E352CD}
        C:\Windows\system32\pcalua.exe -a "C:\Program Files\ImTOO\Video Editor\Uninstall.exe"
[Enabled] \\{BF587DD5-20DE-44ED-9104-DA16396B6408}
        "C:\Program Files\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/4.2.0.169/bg/abandoninstall?page=tsDownload&installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;alreadyoffered
[Enabled] \\{D8A56A6D-4C8E-45B9-AC80-B3D582A666B9}
        "c:\users\acer 6930\appdata\local\google\chrome\application\chrome.exe" http://ui.skype.com/ui/0/5.1.0.112/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;ienotdefaultbrowser2
[Disabled] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
        N/A 
[Enabled] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)
        N/A 
[Enabled] \Microsoft\Windows\Bluetooth\UninstallDeviceTask
        BthUdTask.exe $(Arg0)
[Enabled] \Microsoft\Windows\CertificateServicesClient\SystemTask
        N/A 
[Enabled] \Microsoft\Windows\CertificateServicesClient\UserTask
        N/A 
[Enabled] \Microsoft\Windows\CertificateServicesClient\UserTask-Roam
        N/A 
[Enabled] \Microsoft\Windows\Customer Experience Improvement Program\Consolidator
        %SystemRoot%\System32\wsqmcons.exe 
[Enabled] \Microsoft\Windows\Customer Experience Improvement Program\OptinNotification
        %SystemRoot%\System32\wsqmcons.exe -n 0x1C577FA2B69CAD0
[Enabled] \Microsoft\Windows\Defrag\ManualDefrag
        %windir%\system32\defrag.exe -c
[Enabled] \Microsoft\Windows\Defrag\ScheduledDefrag
        %windir%\system32\defrag.exe -c -i
[Enabled] \Microsoft\Windows\Media Center\ehDRMInit
        %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
[Enabled] \Microsoft\Windows\Media Center\OCURActivate
        %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
[Enabled] \Microsoft\Windows\Media Center\OCURDiscovery
        %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery
[Enabled] \Microsoft\Windows\Media Center\UpdateRecordPath
        %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
[Enabled] \Microsoft\Windows\MobilePC\HotStart
        N/A 
[Enabled] \Microsoft\Windows\MobilePC\TMM
        N/A 
[Enabled] \Microsoft\Windows\MUI\LPRemove
        %windir%\system32\lpremove.exe 
[Enabled] \Microsoft\Windows\Multimedia\SystemSoundsService
        N/A 
[Enabled] \Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
        N/A 
[Disabled] \Microsoft\Windows\Shell\CrawlStartPages
        N/A 
[Disabled] \Microsoft\Windows\SideShow\AutoWake
        N/A 
[Enabled] \Microsoft\Windows\SideShow\GadgetManager
        N/A 
[Disabled] \Microsoft\Windows\SideShow\SessionAgent
        N/A 
[Disabled] \Microsoft\Windows\SideShow\SystemDataProviders
        N/A 
[Enabled] \Microsoft\Windows\SystemRestore\SR
        %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
[Enabled] \Microsoft\Windows\Tcpip\IpAddressConflict1
        rundll32 ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
[Enabled] \Microsoft\Windows\Tcpip\IpAddressConflict2
        rundll32 ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
[Enabled] \Microsoft\Windows\UPnP\UPnPHostConfig
        sc.exe config upnphost start= auto
[Enabled] \Microsoft\Windows\Windows Error Reporting\QueueReporting
        %windir%\system32\wermgr.exe -queuereporting
[Enabled] \Microsoft\Windows\Wired\GatherWiredInfo
        %windir%\system32\gatherWiredInfo.vbs 
[Enabled] \Microsoft\Windows\Wireless\GatherWirelessInfo
        %windir%\system32\gatherWirelessInfo.vbs 

==================================
Windows Security Update Check
KB972145,  Update for Windows Vista (KB972145) 
KB976470,  Update for Windows Vista (KB976470) 
KB975929,  Update for Windows Vista (KB975929) 
KB979099,  Update for Rights Management Services Client for Windows Vista (KB979099) 
KB980248,  Update for Windows Vista (KB980248) 
KB982480,  Cumulative Update for Media Center for Windows Vista (KB982480) 
KB971644,  Platform Update for Windows Vista (KB971644) 
KB2505189,  Update for Windows Vista (KB2505189) 
KB2388210,  Update for Windows Vista (KB2388210) 
KB968930,  Windows PowerShell 2.0 and WinRM 2.0 for Windows Vista (KB968930) 
KB2522422,  Update for Windows Vista (KB2522422) 
KB2545698,  Update for Windows Vista (KB2545698) 
KB2533623,  Update for Windows Vista (KB2533623) 
KB2563227,  Update for Windows Vista (KB2563227) 
KB982670,  Microsoft .NET Framework 4 Client Profile for Windows Vista x86 (KB982670) 
KB905866,  Update for Windows Mail Junk E-mail Filter [October 2011] (KB905866) 

==================================
API HOOK
N/A

==================================
Hidden Process
N/A

==================================
8 ноември 201114 г.
Има остатъци от AVG 8. Нека да пробваме един инструмент: avg8.zip
Разархивирайте avg8.zip и стартирайте AVG8_Kleaner.exe
На следващия екран натиснете ОК. След като програмата почисти остатъците от AVG, рестартирайте и пишете за резултата.
8 ноември 201114 г.
Автор
Направих това , което ме посъветва и след това си инсталирах CCleaner , който също намери доста невалидни регистри. И сега процесорът се държи доста по-добре Мисля , че успяхме да се справим с проблема....Благодаря ти много за помощта....... Ако имаш път към Добрич
8 ноември 201114 г.
Супер! Радвам се, че нещата се оправиха. Маркирам проблема като решен.
Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.
Няма регистрирани потребители разглеждащи тази страница.
Подкрепи съществуването на форума - направи дарение
32%

Дарени 315 € от нужните 1 000 €
- +21
Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се
Добре дошли!

Проблеми с Rootkit Zero Access [решен]

Featured Replies

Архивирана тема

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)
