URun: "c:\users\primary\appdata\local\google\update\GoogleUpdate.exe" /c URun: "c:\program files\toshiba\my toshiba\MyToshiba.exe" /AUTO URun: c:\program files\spybot - search & destroy\TeaTimer.exe
#Adobe premier portable driver
Running: 0jdpc0gp.exe Driver: C:\Users\primary\AppData\Local\Temp\kwtirpoc.sysĭisk \Device\Harddisk0\DR0 sectors 625142192 (+254): rootkit-like behavior Ĭode \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateProcessEx Ĭode \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateSection Ĭode \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwLoadDriver Ĭode \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) NtCreateSectionĬode \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObMakeTemporaryObjectĭevice \Driver\atapi -> DriverStartIo \Device\Ide\IdeDeviceP2T0L0-2 866BAAEAĭevice \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-2 853BA1F8ĭevice \Driver\atapi -> DriverStartIo \Device\Ide\IdePort0 866BAAEAĭevice \Driver\atapi \Device\Ide\IdePort0 853BA1F8ĭevice \Driver\atapi -> DriverStartIo \Device\Ide\IdePort1 866BAAEAĭevice \Driver\atapi \Device\Ide\IdePort1 853BA1F8ĭevice \Driver\atapi -> DriverStartIo \Device\Ide\IdePort2 866BAAEAĭevice \Driver\atapi \Device\Ide\IdePort2 853BA1F8ĭevice \Driver\atapi -> DriverStartIo \Device\Ide\IdePort3 866BAAEAĭevice \Driver\atapi \Device\Ide\IdePort3 853BA1F8ĭevice \Driver\atapi -> DriverStartIo \Device\Ide\IdePort4 866BAAEAĭevice \Driver\atapi \Device\Ide\IdePort4 853BA1F8ĭevice \Driver\atapi -> DriverStartIo \Device\Ide\IdePort5 866BAAEAĭevice \Driver\atapi \Device\Ide\IdePort5 853BA1F8ĭevice \Driver\msahci \Device\Ide\PciIde0Channel0 853BB1F8ĭevice \Driver\msahci \Device\Ide\PciIde0Channel1 853BB1F8ĭevice \Driver\msahci \Device\Ide\PciIde0Channel2 853BB1F8ĭevice \Driver\msahci \Device\Ide\PciIde0Channel3 853BB1F8ĭevice \Driver\msahci \Device\Ide\PciIde0Channel4 853BB1F8ĭevice \Driver\msahci \Device\Ide\PciIde0Channel5 853BB1F8ĭevice \Driver\awaa96fb \Device\Scsi\awaa96fb1 867C71F8ĪttachedDevice \Driver\tdx \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)ĪttachedDevice \Driver\tdx \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)ĪttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation)ĪttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation)ĭevice \Device\Ide\IdeDeviceP1T0L0-1 -> \?\IDE#DiskTOSHIBA_MK3263GSX_FG020M_#5&1ac922e7&0&1.0.0# - c:\progra~1\dap\DAPIEL~1.DLL
#Adobe premier portable windows
Windows Harddisk0\DR0 -> \Device\Ide\IdePort1 TOSHIBA_MK3263GSX rev.FG020M
I've followed the 8-Step instructions and have the requested log files. Finally decided to bite the bullet and see if I can get some help here. I've tried multiple times to remove the infection with no success.
My Avast! has been reporting this infection for about two weeks now.
0 kommentar(er)
