(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe (3Dconnexion) C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\Mgl3DCtlrRPCService.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Aladdin Knowledge Systems Ltd.) C:\Windows\SysWOW64\HLS32SVC.EXE (SafeNet Inc.) C:\Windows\System32\hasplms.exe (Aladdin Knowledge Systems Ltd.) C:\Windows\SysWOW64\nhsrvice.exe
#Nvidia nview 146.33 license
(Dassault Systemes) C:\Program Files\Dassault Systemes\DS License Server\win_b64\code\bin\DSLicSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Dassault Systemes) C:\Program Files (x86)\Dassault Systemes\B22\intel_a\code\bin\CATSysDemon.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe (Schneider Electric) C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (If an entry is included in the fixlist, the process will be closed. Internet Explorer Version 11 (Default browser: FF)
#Nvidia nview 146.33 windows 7
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States) Loaded Profiles: Antec-179 (Available Profiles: Antec-179) Running from C:\Users\Antec-179\Documents Scan result of Farbar Recovery Scan Tool (FRST) (圆4) Version: 02-07-2016
#Nvidia nview 146.33 Pc
I read the post and was in the process of downloading both programs (link to FRST is broken so had to find alternate source) and running them, but I work from home on another pc and I haven't had a chance to get back to the infected pc until now. Is there anything else I can do to be sure I'm either not infected or I got rid of the infection? I've scanned with MAB as well and I didn't see any mention of Vawtrak/Pony or Zeus. I've scanned my pc with Spybot S&D including a rootscan and nothing seemed to stick out, but there was a lot of files in the rootkit scan. I have CIS installed and do a weekly scan.
The usernames and associated websites are legit and match. He emailed me a list of usernames that he found in a file on a C&C server his company recently hacked. I got an email the other day from a guy who works for a company in Canada that believes my pc has been infected with Vawtrak/Pont trojan.
0 kommentar(er)
