QuickScan Beta 32-bit v0.9.9.99 ------------------------------- Scan date: Fri Aug 26 17:55:10 2011 Machine ID: 26D4E610 No infection found. ------------------- Processes --------- ctfmon.exe 1508 C:\Users\Folio\AppData\Roaming\ctfmon.exe HijackThis 4604 C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe Malwarebytes' Anti-Malware 3700 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe Skype 5184 C:\Program Files (x86)\Skype\Phone\Skype.exe (verified) Backup Manager 1340 C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (verified) Dritek WMI Service 1864 C:\Program Files (x86)\Launch Manager\dsiwmis.exe (verified) EgisTec In-Product Service 1220 C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (verified) EgisTec In-Product Service 3920 C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (verified) ESET Smart Security 1912 C:\Program Files (x86)\ESET Smart Security\x86\ekrn.exe (verified) Firefox 3820 C:\Program Files (x86)\Mozilla Firefox\firefox.exe (verified) Firefox 3692 C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (verified) Firefox 5488 C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (verified) Global Registration Service 2000 C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (verified) IAStorDataSvc 4780 C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (verified) IAStorIcon 3904 C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (verified) Intel(R) Active Management Technology L 4892 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (verified) Intel(R) Management and Security Applic 3792 C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (verified) Java(TM) Platform SE Auto Updater 2 0 4072 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (verified) Launch Manager 3992 C:\Program Files (x86)\Launch Manager\LManager.exe (verified) Launch Manager Worker 2916 C:\Program Files (x86)\Launch Manager\LMworker.exe (verified) MyWinLocker Suite 3912 C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (verified) NVIDIA Update Components 4964 C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (verified) Updater Service 1824 C:\Program Files\Acer\Acer Updater\UpdaterService.exe (verified) USB 3.0 Monitor 3976 C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe Network activity ---------------- Process firefox.exe (3820) connected on port 80 (HTTP) --> 213.254.17.31 Process firefox.exe (3820) connected on port 80 (HTTP) --> [removed] Process firefox.exe (3820) connected on port 80 (HTTP) --> [removed] Process Skype.exe (5184) connected on port 42746 --> [removed] Process Skype.exe (5184) connected on port 46158 --> [removed] Process Skype.exe (5184) connected on port 5666 --> [removed] Process Skype.exe (5184) listens on ports: 80 (HTTP), 443 (HTTP over SSL), 40895 Autoruns and critical files --------------------------- AcroTray - Adobe Acrobat Distiller help C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe Adobe Acrobat C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe AdobeCollabSync.exe C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe adobemasterkeygen55-multi C:\Users\Folio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobemasterkeygen55-multi.exe (unsigned) QuickTime C:\Program Files (x86)\QuickTime\QTTask.exe (verified) Adobe CS5.5 Service Manager C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe (verified) Adobe Reader and Acrobat Manager C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (verified) Adobe Updater Startup Utility C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (verified) EgisTec In-Product Service C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (verified) EgisTec In-Product Service C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (verified) ELAN Smart-Pad C:\Program Files\Elantech\ETDCtrl.exe (verified) ESET Smart Security C:\Program Files (x86)\ESET Smart Security\egui.exe (verified) Gestione Audio Realtek HD C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (verified) Google Update C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (verified) HD Audio Background Process C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (verified) IAStorIcon C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (verified) Java(TM) Platform SE Auto Updater 2 0 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (verified) Launch Manager C:\Program Files (x86)\Launch Manager\LManager.exe (verified) Microsoft ® Windows Script Host C:\Windows\system32\wscript.exe (verified) MyWinLocker Suite C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (verified) NVIDIA D3D shim drivers C:\Windows\SysWOW64\nvinit.dll (verified) Power Management C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (verified) SBSV 2010/02/19-11:02:07 C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (verified) Sistema operativo Microsoft® Windows® C:\Program Files\Windows Sidebar\sidebar.exe (verified) Sistema operativo Microsoft® Windows® C:\Windows\system32\userinit.exe (verified) USB 3.0 Monitor C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (verified) Virtual CloneDrive C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe Browser plugins --------------- Adobe Acrobat C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll Adobe PDF Toolbar for IE c:\program files (x86)\common files\adobe\acrobat\activex\acroiefavclient.dll nppdf32.DEU C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.DEU nppdf32.FRA C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.FRA (unsigned) Google Earth Plugin C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (unsigned) Java(TM) Platform SE 6 U26 C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (unsigned) QuickTime Plug-in 7.6.9 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (unsigned) QuickTime Plug-in 7.6.9 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (unsigned) QuickTime Plug-in 7.6.9 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (unsigned) QuickTime Plug-in 7.6.9 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (unsigned) QuickTime Plug-in 7.6.9 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (unsigned) QuickTime Plug-in 7.6.9 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (unsigned) QuickTime Plug-in 7.6.9 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (unsigned) VLC Multimedia Plug-in C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (unsigned) Winamp Application Detector C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll (verified) AcroIEHelperShim Library c:\program files (x86)\common files\adobe\acrobat\activex\acroiehelpershim.dll (verified) BitDefender QuickScan C:\Users\Folio\AppData\Roaming\Mozilla\Firefox\Profiles\ef7pgx96.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll (verified) Google Update C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll (verified) i-drop control C:\Windows\Downloaded Program Files\IDrop.ocx (verified) i-drop control C:\Windows\Downloaded Program Files\IDropENU.dll (verified) i-drop control C:\Windows\Downloaded Program Files\IDropx64.ocx (verified) Java Deployment Toolkit 6.0.260.3 C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll (verified) Java(TM) Platform SE 6 U26 c:\program files (x86)\java\jre6\bin\jp2ssv.dll (verified) Microsoft® CoReXT c:\program files (x86)\common files\microsoft shared\windows live\windowslivelogin.dll (verified) Microsoft® CoReXT C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (verified) Microsoft® CoReXT C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (verified) Microsoft® Windows® Operating System C:\Windows\system32\NLAapi.dll (verified) Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll (verified) NPSWF32.dll C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll (verified) Silverlight Plug-In c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll (verified) Sistema operativo Microsoft® Windows® C:\Windows\system32\MSWSOCK.dll (verified) Sistema operativo Microsoft® Windows® C:\Windows\system32\napinsp.dll (verified) Sistema operativo Microsoft® Windows® C:\Windows\system32\pnrpnsp.dll (verified) Windows® Internet Explorer C:\Windows\SysWOW64\ieframe.dll Missing files ------------- File not found: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe --> HKLM\Software\Microsoft\Windows\CurrentVersion\Run\"Adobe Reader Speed Launcher" Scan ---- MD5: 5d2c953fe671d29e8941b17265c74649 C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe MD5: a3a82800ff19b26b94d2327a2f11067e C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe MD5: 51e39ccc441abdd7ca9cf4f3d82c6f57 C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe MD5: 6c84a26dbaabdef3a921fb2cb0669377 c:\program files (x86)\common files\adobe\acrobat\activex\acroiefavclient.dll MD5: 0f445b821549f9ff471bba56c69953d4 C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll MD5: f7f49c8a29fcf523f98febad010f0fc8 C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll MD5: 9aa2e7bcc6b79c09def0abb1550ad4b9 C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\it-IT\IAStorDataMgr.resources.dll MD5: ec4e6188bc6c96a4fffc7d1ff807ce99 C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\it-IT\IAStorIcon.resources.dll MD5: 814d65add0c74d6b9653b376f000a02b C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\it-IT\IntelVisualDesign.resources.dll MD5: a79acaf619d5bf301373a6a2dbd7184b C:\Program Files (x86)\Internet Explorer\ieproxy.dll MD5: 1040bd9bf3ddab7cda2346f8375480a2 C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll MD5: 0b85e5d913d862e57abb4f9721b14d74 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll MD5: 2487c45b64790fc210547919f18fac71 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe MD5: 7a4adf8b2bafcef61e4c1e55bf1a3f82 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamcore.DLL MD5: 84271ba3b94323704f00730b7e6caeef C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamnet.DLL MD5: f039eee3c8914e3127b2e2161480ef0a C:\Program Files (x86)\Malwarebytes' Anti-Malware\ssubtmr6.dll MD5: 3474b49a2d186172d3002a71b12ed4ea C:\Program Files (x86)\Malwarebytes' Anti-Malware\vbalsgrid6.ocx MD5: 3e63bca6eea4153b32bd306997d8d622 C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.DEU MD5: ac05c6e4465bfbe6ef41fd6dd46e5b59 C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll MD5: f390930555dcd84cd01bde169429a4a9 C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.FRA MD5: bb5abe0b077395f1f44acea1161a3a90 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll MD5: bb5abe0b077395f1f44acea1161a3a90 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll MD5: bb5abe0b077395f1f44acea1161a3a90 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll MD5: bb5abe0b077395f1f44acea1161a3a90 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll MD5: bb5abe0b077395f1f44acea1161a3a90 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll MD5: bb5abe0b077395f1f44acea1161a3a90 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll MD5: bb5abe0b077395f1f44acea1161a3a90 C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll MD5: 0a05ff85426244567786d3453a3b64af C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll MD5: 0aee5668eb59912f32ff245bfa72465f C:\Program Files (x86)\QuickTime\QTTask.exe MD5: 29c81875332f7084321c3a82a9a7bf9f C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe MD5: c4d573e5bb58bf5d4883e08d947cef99 C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll MD5: e6c0ea194b4a98f6645502a52359e0ac C:\Program Files\Sandboxie\SbieDrv.sys MD5: b435855d3a6b221574000792b615b8ea C:\Program Files\Sandboxie\SbieSvc.exe MD5: 855d01dcc08eda06b71fefc7c3201afb C:\Users\Folio\AppData\Roaming\ctfmon.exe MD5: 3e08c34e0d98515930bce9ec41948acf C:\Users\Folio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobemasterkeygen55-multi.exe MD5: 70ad88d14e075638ac77972300ec427c C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\5331d3f795e5cbe9031a422fdd75e22b\IAStorCommon.ni.dll MD5: d8f1cb74ab037e3e700e84e7abb6699f C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\2a590fafacc4f639f0550e8297ccd201\IAStorDataMgr.ni.dll MD5: d13caf88ff22038162c37997830decd9 C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\e57c982f3f9691c6dc186694299d7ff7\IAStorDataMgrSvc.ni.exe MD5: a325a4da9e70d0e8e09524a3e2e9c1ed C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\015cf943509e633ae07b84cf40969fbc\IAStorUtil.ni.dll MD5: 91a910cebbd682ccc8137a0a17852c55 C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\46a3eca0326d52b75cdd1fd7fa09efb8\IsdiInterop.ni.dll MD5: fc96b10618bf4ad2b3eafd544ef06086 C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\16b68fcaff063835ae0ee348a1201f2a\mscorlib.ni.dll MD5: 65a8d2128f9a10d9b3ccec5c08e91bc5 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\36d0ed3f2a65b9d67933ed46dfcd2ccb\System.Configuration.ni.dll MD5: 507584a01d198a2ddc75879f3cecf10b C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\9e87dd8fe5d0f925d80a6a6eaf74fdb9\System.Drawing.ni.dll MD5: 0c9cfc05b00e65646cb21fb0d68e120f C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e3e3b399b69c569ab1ed3b0ace2c8c20\System.Runtime.Remoting.ni.dll MD5: 4861f6d3e65b6001941ad4812ceb7971 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\86a2ec5efbcfcd1105475364d7975b15\System.ServiceProcess.ni.dll MD5: 807fc7c82ee7d81a974667b398b6e66c C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\33b601c8e2cf4993e68d763389246197\System.Web.ni.dll MD5: f0b98c494a252c7da33941dac8099b72 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\0d43c5e77ee7b8466700b16d7e7d4bb7\System.Windows.Forms.ni.dll MD5: 3a5bd85ada45dd34c2ee4815ce19fc6b C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\16d2854bf69d59d94e64a918365705f1\System.Xml.ni.dll MD5: 25d377ff500d4817289f452b5285e6c2 C:\Windows\assembly\NativeImages_v2.0.50727_32\System\3da7c6c1a0f26ae91883fd8b03ec192d\System.ni.dll MD5: 953c31de3194728418f3f3306cbd789b C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6124dbbfd45927c4a6226d6e6bca6253\WindowsBase.ni.dll MD5: 088cf5b6380fb9002f2a4246f812225d C:\Windows\system32\asycfilt.dll MD5: 5fc2d30c05487b480c2a154d5d281ba0 C:\Windows\system32\connect.dll MD5: 28ca821606669bb9215ce010767720fa C:\Windows\system32\cryptui.dll MD5: 284b59d7b56fc76c80e622ab856b1fab C:\Windows\System32\davclnt.dll MD5: 162d247e995eaebf3ef4289069e1111c C:\Windows\system32\DEVRTL.dll MD5: 1060d60cca69a8136a87dbe3c8f4a467 C:\Windows\system32\EhStorAPI.dll MD5: 7069aab8536f29ed7323140973a2894b C:\Windows\system32\msdmo.dll MD5: 0ce4d3bd306da6d1f6f233c403f5b667 C:\Windows\system32\msi.dll MD5: eab975db4c2805927fe5bd047d05c9aa C:\Windows\system32\netshell.dll MD5: 3d57ffbad3ed16b63de3879bab0fb56f C:\Windows\system32\NetworkExplorer.dll MD5: d7b7159bc8374e87d8c45a30377a3440 C:\Windows\System32\ntlanman.dll MD5: 703ffd301ab900b047337c5d40fd6f96 C:\Windows\system32\olepro32.DLL MD5: 487f44b08efeaf5ad087878357b9403d C:\Windows\system32\pdh.dll MD5: e98278865e8daba21cfe5fe4be34210a C:\Windows\system32\PortableDeviceApi.dll MD5: 102cf6879887bbe846a00c459e6d4abc C:\Windows\system32\RICHED20.DLL MD5: 6581b52e133cc6d00661c58968c7e212 C:\Windows\system32\SearchFolder.dll MD5: 6a1e8deb746912df47cf651e138401d7 C:\Windows\System32\StructuredQuery.dll MD5: 919001d2bb17df06ca3f8ac16ad039f6 C:\Windows\system32\SXS.DLL MD5: d205c24a9d069049fe2df2a1b38726a7 C:\Windows\system32\wdmaud.drv MD5: edf2a5e96bec469da3f64e9bdd386111 C:\Windows\system32\xmllite.dll MD5: a2f0b6a45ef5b68173aaa2a39690904e C:\Windows\system32\zipfldr.dll MD5: d2958325c1ae1ae37a83334c6229e3bc C:\Windows\SysWOW64\actxprxy.dll MD5: 33d933951e1dd39ba9a973ca5651bc90 C:\Windows\SysWOW64\d3d11.dll MD5: 69c85737f4ca5634e7a19b818579d176 C:\Windows\SysWOW64\dxdiagn.dll MD5: 672d7c5080acb003343006405da2e621 C:\Windows\SysWOW64\thumbcache.dll The following file(s) must be uploaded for server-side scanning: C:\Users\Folio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\adobemasterkeygen55-multi.exe Upload started - 1 file(s) adobemasterkeygen55-multi.exe (851968) Upload speed - 76 KB/s Upload finished - 1 uploaded, 0 failed The uploaded file(s) were found clean. Scan finished - communication took 11 sec Total traffic - 0.82 MB sent, 0.28 KB recvd Scanned 455 files and modules - 20 seconds ==============================================================================