gmer - Sicurezza Informatica - NoTrace Security Forum

NoTrace Security Forum

Nome Utente:	Password:
Salva Password
Password Dimenticata?

Tutti i Forum

Virus

Computer Virus

gmer

Forum Bloccato

Versione Stampabile

Aggiungi Segnalibro

Autore

Discussione

luigi88
New Member

37 Messaggi

Inserito il - 27/05/2008 : 22:22:48

GMER 1.0.14.14205 - htt*://[www].gmer.net
Rootkit scan 2008-05-27 21:57:43
Windows 5.1.2600 Service Pack 2

---- System - GMER 1.0.14 ----

SSDT F7E51194 ZwCreateThread
SSDT F7E51180 ZwOpenProcess
SSDT F7E51185 ZwOpenThread
SSDT \??\C:\Programmi\SUPERAntiSpyware\SASKUTIL.sys ZwTerminateProcess [0xF11CEF20]
SSDT F7E5118A ZwWriteVirtualMemory

---- Kernel code sections - GMER 1.0.14 ----

? C:\Programmi\SUPERAntiSpyware\SASKUTIL.sys Impossibile trovare il file specificato. !
? C:\Programmi\SUPERAntiSpyware\SASDIFSV.SYS Impossibile trovare il file specificato. !
? C:\Programmi\SUPERAntiSpyware\SASENUM.SYS Impossibile trovare il file specificato. !

---- User code sections - GMER 1.0.14 ----

.text C:\Programmi\Windows Live\Messenger\msnmsgr.exe[412] kernel32.dll!SetUnhandledExceptionFilter 7C84467D 5 Bytes JMP 0056DBBD C:\Programmi\Windows Live\Messenger\msnmsgr.exe (Windows Live Messenger/Microsoft Corporation)

---- Devices - GMER 1.0.14 ----

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
---- Processes - GMER 1.0.14 ----

Library C:\Programmi\SUPERAntiSpyware\SASWINLO.dll (*** hidden *** ) [No-Spam] C:\WINDOWS\system32\winlogon.exe [636] 0x10000000
Library C:\Programmi\SUPERAntiSpyware\SASSEH.DLL (*** hidden *** ) [No-Spam] C:\WINDOWS\Explorer.EXE [1572] 0x10000000

---- Registry - GMER 1.0.14 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\ssmdrv\Products[No-Spam]Avira AntiVir Personal \x2013 Free Antivirus C:\Programmi\Avira\AntiVir PersonalEdition Classic\??????????????????????????????????????????????????????????????????????????????
Reg HKLM\SYSTEM\ControlSet002\Services\ssmdrv\Products[No-Spam]Avira AntiVir Personal \x2013 Free Antivirus C:\Programmi\Avira\AntiVir PersonalEdition Classic\??????????????????????????????????????????????????????????????????????????????
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cpls[No-Spam]Avira AntiVir Personal \x2013 Free Antivirus C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl

---- EOF - GMER 1.0.14 ----

Leleago
Advanced Member