Sequence of components involved in creating the connection Multiple independent components, and in these cases the In some cases well-known executables host b Displays the executable involved in creating each connection or a Displays all connections and listening ports. for example: netstat -tabn 10 | find ":80" R3 stdriver Sound Tap Upper Class Filter Driver v2.0.0.Netstat command is good for tcp / udp traffic. R3 RushTopDevice2 RushTopDevice2 c:\program files\ati technologies\ati.ace\RushTop.sys R3 MBAMProtector MBAMProtector c:\windows\system32\drivers\mbam.sys R3 DualCoreCenter DualCoreCenter c:\program files\ati technologies\ati.ace\NTGLM7X.sys R3 DigiCellDriver DigiCellDriver c:\program files\msi\digicell\NTGLM7X.sys R2 VRSService VRS Recording System c:\program files\nch swift sound\vrs\vrs.exe R2 MBAMService MBAMService c:\program files\malwarebytes' anti-malware\mbamservice.exe R2 AdobeActiveFileMonitor8.0 Adobe Active File Monitor V8 c:\program files\adobe\elements organizer 8.0\PhotoshopElementsFileAgent.exe
ĪV: Microsoft Security Essentials *Enabled/Updated* \MpKslf5eee746.sys Microsoft Windows XP Professional 5.1.26. The requested logs from DDS, TCPVIEW, GMER, MBAM and MSE are attached/copied. If I need to do that please let me know and i'll redo this. I didn't run the diagnostic programs in the exact order specified in the 'im infected' post. I'm running Microsoft Security Essentials and MBAM only. I also have PE Builder on my system with an address of 156280345.įor all of the above reasons I'd like your assistance to determine whether I have a reason to be concerned. Whan I ran GMER rootkit I got an error saying I had a malicious win32.mbroot code 156280323. After a few minutes that procedure line in TCPVIEW suddenly turned RED and disappeared. When I ran TCPVIEW I saw a procedure labelled 'unknown' which I was unable to display th properties of. I'm also trying to receive audio streaming from "Broadwave' unsuccessfully. My system has been running slow but i'm also hearing a sound, probably from "C", that is an abnormal clicking. I'm following the 'im infected' procedure in the forum.
0 kommentar(er)
