Results 1 to 3 of 3

Thread: Backdoor.Agent infected my computer

  1. #1
    Junior Member
    Join Date
    Jan 2012
    Posts
    2

    Default Backdoor.Agent infected my computer

    Hey guys,

    my avira antivir warned me that the "virus" called TR/ATRAPS.Gen2 infected my computer.
    I downloaded and ran ERUNT and DDS.

    DDS log:

    .
    DDS (Ver_2011-08-26.01) - NTFSAMD64
    Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_30
    Run by Tamu at 16:50:26 on 2012-01-07
    Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.16344.14512 [GMT 1:00]
    .
    AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
    SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
    SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\atieclxx.exe
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\Dwm.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\explorer.exe
    C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\DAODx.exe
    C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files (x86)\LOGILINK\WL0066\UI.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
    C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\IProsetMonitor.exe
    C:\Windows\SysWOW64\PnkBstrA.exe
    C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
    D:\Programme\Winamp\winampa.exe
    C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe
    C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\System32\svchost.exe -k LocalServicePeerNet
    C:\Windows\servicing\TrustedInstaller.exe
    C:\Windows\system32\wuauclt.exe
    D:\Programme\Mozilla Firefox\firefox.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\SysWOW64\cscript.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    .
    ============== Pseudo HJT Report ===============
    .
    mWinlogon: Userinit=userinit.exe,
    uWinlogon: Shell=C:\Users\Tamu\AppData\Local\1bcf01ff\X
    BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
    BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    uRun: [Tenda_UI] C:\Program Files (x86)\LOGILINK\WL0066\UI.exe /EndPrevInst /AutoHide
    uRun: [Steam] "D:\Spiele\Steam\steam.exe" -silent
    uRun: [DAEMON Tools Lite] "D:\Programme\DAEMON Tools Lite\DTLite.exe" -autorun
    mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
    mRun: [WinampAgent] D:\Programme\Winamp\winampa.exe
    mRun: [THX Audio Control Panel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe" /r
    mRun: [UpdReg] C:\Windows\UpdReg.EXE
    mRun: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe" /r
    mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    mPolicies-explorer: NoActiveDesktop = 1 (0x1)
    mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
    mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
    mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
    mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
    IE: Free YouTube Download - C:\Users\Tamu\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
    IE: Free YouTube to MP3 Converter - C:\Users\Tamu\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    TCP: DhcpNameServer = 192.168.0.1
    TCP: Interfaces\{91016776-D87C-4497-B810-E7FC8C028703} : DhcpNameServer = 192.168.0.1
    TCP: Interfaces\{DAB82AE3-13AC-4A4B-BC0D-8051ACA523FB} : DhcpNameServer = 192.168.0.1
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
    {326E768D-4182-46FD-9C16-1449A49795F4}
    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
    {DBC80044-A445-435b-BC74-9C25C1C588A9}
    mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
    mRun-x64: [WinampAgent] D:\Programme\Winamp\winampa.exe
    mRun-x64: [THX Audio Control Panel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\THXAudioCP\THXAudio.exe" /r
    mRun-x64: [UpdReg] C:\Windows\UpdReg.EXE
    mRun-x64: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi MB 2\Sound Blaster Panel\VolPanlu.exe" /r
    mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun-x64: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - C:\Users\Tamu\AppData\Roaming\Mozilla\Firefox\Profiles\zc3u9zmo.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
    FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll
    FF - plugin: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
    FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
    FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
    FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
    FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
    FF - plugin: D:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll
    FF - plugin: D:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
    FF - plugin: D:\Programme\Mozilla Firefox\plugins\npwachk.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 amd_sata;amd_sata;C:\Windows\system32\DRIVERS\amd_sata.sys --> C:\Windows\system32\DRIVERS\amd_sata.sys [?]
    R0 amd_xata;amd_xata;C:\Windows\system32\DRIVERS\amd_xata.sys --> C:\Windows\system32\DRIVERS\amd_xata.sys [?]
    R0 asahci64;asahci64;C:\Windows\system32\DRIVERS\asahci64.sys --> C:\Windows\system32\DRIVERS\asahci64.sys [?]
    R1 avkmgr;avkmgr;C:\Windows\system32\DRIVERS\avkmgr.sys --> C:\Windows\system32\DRIVERS\avkmgr.sys [?]
    R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
    R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
    R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-11-9 361984]
    R2 AntiVirSchedulerService;Avira Planer;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-11-11 86224]
    R2 AntiVirService;Avira Echtzeit Scanner;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-11-11 110032]
    R2 AODDriver4.01;AODDriver4.01;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2011-6-24 55424]
    R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgntflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?]
    R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;C:\Windows\system32\IProsetMonitor.exe --> C:\Windows\system32\IProsetMonitor.exe [?]
    R3 amdiox64;AMD IO Driver;C:\Windows\system32\DRIVERS\amdiox64.sys --> C:\Windows\system32\DRIVERS\amdiox64.sys [?]
    R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
    R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
    R3 asmthub3;ASMedia USB3 Hub Service;C:\Windows\system32\DRIVERS\asmthub3.sys --> C:\Windows\system32\DRIVERS\asmthub3.sys [?]
    R3 asmtxhci;ASMEDIA XHCI Service;C:\Windows\system32\DRIVERS\asmtxhci.sys --> C:\Windows\system32\DRIVERS\asmtxhci.sys [?]
    R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW76.sys --> C:\Windows\system32\drivers\AtihdW76.sys [?]
    R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys --> C:\Windows\system32\DRIVERS\dtsoftbus01.sys [?]
    R3 e1qexpress;Intel(R) PCI Express Network Connection Driver Q;C:\Windows\system32\DRIVERS\e1q62x64.sys --> C:\Windows\system32\DRIVERS\e1q62x64.sys [?]
    R3 usbfilter;AMD USB Filter Driver;C:\Windows\system32\DRIVERS\usbfilter.sys --> C:\Windows\system32\DRIVERS\usbfilter.sys [?]
    S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-11-27 79360]
    S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-11-27 79360]
    S3 dmvsc;dmvsc;C:\Windows\system32\drivers\dmvsc.sys --> C:\Windows\system32\drivers\dmvsc.sys [?]
    S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;C:\Windows\system32\DRIVERS\LEqdUsb.Sys --> C:\Windows\system32\DRIVERS\LEqdUsb.Sys [?]
    S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;C:\Windows\system32\DRIVERS\LHidEqd.Sys --> C:\Windows\system32\DRIVERS\LHidEqd.Sys [?]
    S3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;C:\Windows\system32\DRIVERS\MijXfilt.sys --> C:\Windows\system32\DRIVERS\MijXfilt.sys [?]
    S3 netr28x;Ralink 802.11n Extensible Wireless Driver;C:\Windows\system32\DRIVERS\netr28x.sys --> C:\Windows\system32\DRIVERS\netr28x.sys [?]
    S3 StorSvc;Speicherdienst;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
    S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
    S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]
    .
    =============== Created Last 30 ================
    .
    2012-01-07 15:43:55 -------- d-----w- C:\Program Files (x86)\ESET
    2012-01-07 10:31:06 -------- d-----w- C:\Users\Tamu\AppData\Roaming\.minecraft
    2012-01-06 11:16:34 -------- d-----w- C:\Users\Tamu\AppData\Roaming\Malwarebytes
    2012-01-06 11:16:24 -------- d-----w- C:\ProgramData\Malwarebytes
    2012-01-06 11:16:23 23152 ----a-w- C:\Windows\System32\drivers\mbam.sys
    2012-01-06 08:34:23 -------- d-sh--w- C:\Users\Tamu\AppData\Local\1bcf01ff
    2012-01-02 21:43:58 580096 ----a-w- C:\Windows\System32\ac3filter64.acm
    2012-01-02 21:43:58 497664 ----a-w- C:\Windows\SysWow64\ac3filter.acm
    2011-12-30 11:31:33 -------- d-----w- C:\Users\Tamu\AppData\Roaming\Code Force Limited
    2011-12-30 11:26:47 -------- d-----w- C:\Windows\Distant Worlds
    2011-12-28 17:35:55 -------- d-----w- C:\Users\Tamu\AppData\Local\PAYDAY
    2011-12-28 17:35:55 -------- d-----w- C:\ProgramData\RELOADED
    2011-12-28 17:35:41 -------- d-----w- C:\Program Files (x86)\NVIDIA Corporation
    2011-12-28 17:35:30 -------- d-----w- C:\Program Files (x86)\Common Files\Wise Installation Wizard
    2011-12-28 08:08:29 -------- d-----w- C:\Users\Tamu\AppData\Local\DDMSettings
    2011-12-27 23:39:34 -------- d-----w- C:\Program Files\DivX
    2011-12-27 23:39:32 -------- d-----w- C:\Program Files (x86)\Common Files\DivX Shared
    2011-12-27 23:39:13 -------- d-----w- C:\Program Files (x86)\DivX
    2011-12-27 23:38:47 -------- d-----w- C:\ProgramData\DivX
    2011-12-26 22:42:36 -------- d-----w- C:\Program Files (x86)\Microsoft Chart Controls
    2011-12-25 19:49:41 -------- d-----w- C:\Users\Tamu\riotsGamesLogs
    2011-12-25 19:49:15 -------- d-----w- C:\Users\Tamu\AppData\Roaming\LolClient
    2011-12-25 18:34:04 467984 ----a-w- C:\Windows\SysWow64\d3dx10_39.dll
    2011-12-25 18:34:04 3851784 ----a-w- C:\Windows\SysWow64\D3DX9_39.dll
    2011-12-25 18:34:04 1493528 ----a-w- C:\Windows\SysWow64\D3DCompiler_39.dll
    2011-12-25 13:09:45 -------- d-----w- C:\Users\Tamu\AppData\Local\PMB Files
    2011-12-25 13:09:44 -------- d-----w- C:\ProgramData\PMB Files
    2011-12-25 13:09:40 -------- d-----w- C:\Program Files (x86)\Pando Networks
    2011-12-22 19:25:39 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
    2011-12-22 07:56:56 -------- d-----w- C:\Program Files (x86)\Common Files\i4j_jres
    2011-12-21 08:29:47 -------- d-----w- C:\Program Files (x86)\AMD APP
    2011-12-21 08:28:19 279616 ----a-w- C:\Windows\System32\drivers\dtsoftbus01.sys
    2011-12-21 08:27:43 -------- d-----w- C:\Users\Tamu\AppData\Roaming\DAEMON Tools Lite
    2011-12-21 08:27:41 -------- d-----w- C:\ProgramData\DAEMON Tools Lite
    2011-12-11 08:15:49 -------- d-----w- C:\Users\Tamu\AppData\Roaming\Foxit Software
    .
    ==================== Find3M ====================
    .
    2012-01-07 11:05:04 281880 ----a-w- C:\Windows\SysWow64\PnkBstrB.xtr
    2012-01-07 11:05:04 281880 ----a-w- C:\Windows\SysWow64\PnkBstrB.exe
    2012-01-07 11:04:51 280904 ----a-w- C:\Windows\SysWow64\PnkBstrB.ex0
    2012-01-06 01:07:48 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2012-01-03 15:09:38 76888 ----a-w- C:\Windows\SysWow64\PnkBstrA.exe
    2011-11-27 17:26:32 2829 ----a-w- C:\Windows\War3Unin.pif
    2011-11-27 17:26:32 139264 ----a-w- C:\Windows\War3Unin.exe
    2011-11-27 11:24:47 466520 ----a-w- C:\Windows\System32\wrap_oal.dll
    2011-11-27 11:24:47 445016 ----a-w- C:\Windows\SysWow64\wrap_oal.dll
    2011-11-27 11:24:47 123480 ----a-w- C:\Windows\System32\OpenAL32.dll
    2011-11-27 11:24:47 109144 ----a-w- C:\Windows\SysWow64\OpenAL32.dll
    2011-11-10 19:11:17 30208 ----a-w- C:\Windows\System32\drivers\AegisP.sys
    2011-11-10 17:32:02 115272 ----a-w- C:\Windows\System32\drivers\MijXfilt.sys
    2011-11-10 03:45:30 10567680 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
    2011-11-10 03:20:50 25218048 ----a-w- C:\Windows\System32\atio6axx.dll
    2011-11-10 03:17:10 159744 ----a-w- C:\Windows\System32\atiapfxx.exe
    2011-11-10 03:16:56 774656 ----a-w- C:\Windows\SysWow64\aticfx32.dll
    2011-11-10 03:15:20 927232 ----a-w- C:\Windows\System32\aticfx64.dll
    2011-11-10 03:12:24 466944 ----a-w- C:\Windows\System32\ATIDEMGX.dll
    2011-11-10 03:12:10 516608 ----a-w- C:\Windows\System32\atieclxx.exe
    2011-11-10 03:11:32 204288 ----a-w- C:\Windows\System32\atiesrxx.exe
    2011-11-10 03:10:18 120320 ----a-w- C:\Windows\System32\atitmm64.dll
    2011-11-10 03:09:58 423424 ----a-w- C:\Windows\System32\atipdl64.dll
    2011-11-10 03:09:52 360448 ----a-w- C:\Windows\SysWow64\atipdlxx.dll
    2011-11-10 03:09:40 278528 ----a-w- C:\Windows\SysWow64\Oemdspif.dll
    2011-11-10 03:09:34 21504 ----a-w- C:\Windows\System32\atimuixx.dll
    2011-11-10 03:09:30 59392 ----a-w- C:\Windows\System32\atiedu64.dll
    2011-11-10 03:09:24 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
    2011-11-10 03:06:20 6077952 ----a-w- C:\Windows\SysWow64\atidxx32.dll
    2011-11-10 02:58:20 18996224 ----a-w- C:\Windows\SysWow64\atioglxx.dll
    2011-11-10 02:51:18 7405056 ----a-w- C:\Windows\System32\atidxx64.dll
    2011-11-10 02:40:52 1113088 ----a-w- C:\Windows\System32\atiumd6v.dll
    2011-11-10 02:40:18 1828864 ----a-w- C:\Windows\SysWow64\atiumdmv.dll
    2011-11-10 02:40:04 4061696 ----a-w- C:\Windows\System32\atiumd6a.dll
    2011-11-10 02:34:54 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
    2011-11-10 02:34:52 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
    2011-11-10 02:34:44 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
    2011-11-10 02:34:42 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
    2011-11-10 02:34:28 13552640 ----a-w- C:\Windows\System32\aticaldd64.dll
    2011-11-10 02:33:52 5852672 ----a-w- C:\Windows\SysWow64\atiumdag.dll
    2011-11-10 02:29:58 11300864 ----a-w- C:\Windows\SysWow64\aticaldd.dll
    2011-11-10 02:29:46 4200960 ----a-w- C:\Windows\SysWow64\atiumdva.dll
    2011-11-10 02:24:26 7439360 ----a-w- C:\Windows\System32\atiumd64.dll
    2011-11-10 02:18:44 58880 ----a-w- C:\Windows\System32\coinst.dll
    2011-11-10 02:13:32 494592 ----a-w- C:\Windows\System32\atiadlxx.dll
    2011-11-10 02:13:22 348160 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
    2011-11-10 02:13:08 17408 ----a-w- C:\Windows\System32\atig6pxx.dll
    2011-11-10 02:13:04 14336 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
    2011-11-10 02:13:04 14336 ----a-w- C:\Windows\System32\atiglpxx.dll
    2011-11-10 02:13:00 39936 ----a-w- C:\Windows\System32\atig6txx.dll
    2011-11-10 02:12:52 32768 ----a-w- C:\Windows\SysWow64\atigktxx.dll
    2011-11-10 02:12:44 325632 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
    2011-11-10 02:11:54 41984 ----a-w- C:\Windows\System32\atiuxp64.dll
    2011-11-10 02:11:46 32256 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
    2011-11-10 02:11:40 39424 ----a-w- C:\Windows\System32\atiu9p64.dll
    2011-11-10 02:11:32 54784 ----a-w- C:\Windows\System32\atimpc64.dll
    2011-11-10 02:11:32 54784 ----a-w- C:\Windows\System32\amdpcom64.dll
    2011-11-10 02:11:32 29184 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
    2011-11-10 02:11:26 53760 ----a-w- C:\Windows\SysWow64\atimpc32.dll
    2011-11-10 02:11:26 53760 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
    2011-11-10 02:10:54 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
    2011-11-09 21:39:50 69632 ----a-w- C:\Windows\System32\OpenVideo64.dll
    2011-11-09 21:39:44 59904 ----a-w- C:\Windows\SysWow64\OpenVideo.dll
    2011-11-09 21:39:36 61952 ----a-w- C:\Windows\System32\OVDecode64.dll
    2011-11-09 21:39:32 54784 ----a-w- C:\Windows\SysWow64\OVDecode.dll
    2011-11-09 21:39:22 17442304 ----a-w- C:\Windows\System32\amdocl64.dll
    2011-11-09 21:38:40 14375936 ----a-w- C:\Windows\SysWow64\amdocl.dll
    2011-11-09 21:37:46 44032 ----a-w- C:\Windows\SysWow64\OpenCL.dll
    2011-11-09 17:34:09 0 ----a-w- C:\Windows\ativpsrm.bin
    2011-10-25 20:21:40 66560 ----a-w- C:\Windows\System32\OVDecoder64.dll
    2011-10-25 20:21:34 56832 ----a-w- C:\Windows\SysWow64\OVDecoder.dll
    2011-10-21 19:16:12 1843200 ----a-w- C:\Windows\SysWow64\SlotMaximizerBe.dll
    2011-10-21 19:15:46 104448 ----a-w- C:\Windows\SysWow64\SlotMaximizerAg.dll
    2011-10-21 19:12:32 2763264 ----a-w- C:\Windows\System32\SlotMaximizerBe.dll
    2011-10-21 19:07:42 125440 ----a-w- C:\Windows\System32\SlotMaximizerAg.dll
    2011-10-20 23:26:22 94208 ----a-w- C:\Windows\SysWow64\dpl100.dll
    2011-10-19 15:56:15 97312 ----a-w- C:\Windows\System32\drivers\avgntflt.sys
    2011-10-19 15:56:15 27760 ----a-w- C:\Windows\System32\drivers\avkmgr.sys
    2011-10-17 17:40:50 93712 ----a-w- C:\Windows\System32\drivers\AtihdW76.sys
    2011-10-12 15:14:54 51200 ----a-w- C:\Windows\System32\OpenCL.dll
    .
    ============= FINISH: 16:50:37,65 ===============
    Hope you can help me.

    Sincerely Tamurial

  2. #2
    Security Expert: Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,288

    Default

    Hi,

    Download aswMBR to your desktop. Double click the aswMBR.exe to run it
    Click the Scan button to start scan

    On completion of the scan click save log, save it to your desktop and post in your next reply. Post fresh dds logs too.
    Microsoft Windows Insider MVP 2016-2020
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.

  3. #3
    Security Expert: Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,288

    Default

    Due to inactivity, this thread will now be closed.

    Note:If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh DDS log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

    If it has been less than three days since your last response and you need the thread re-opened, please send me or other MOD a private message (pm). A valid, working link to the closed topic is required.
    Microsoft Windows Insider MVP 2016-2020
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •