Jump to content

Hidden objects, do you see any infections?

schecter

By schecter
in Resolved Malware Removal Logs

 Share

Recommended Posts

schecter

schecter

Posted
Posted

Hi, I use malwarebytes and avira to scan for any bugs, and after an avira scan today I have a whopping 82 hidden objects from my avira report. Some items I recognize but many are invisible. Are there any experts here who can look this over to tell me if there seems to be any kind of infection?

Thanks

Avira Free Antivirus

Report file date: November-20-11 14:00

Scanning for 3569559 virus strains and unwanted programs.

The program is running as an unrestricted full version.

Online services are available:

Licensee : Avira AntiVir Personal - Free Antivirus

Serial number : 0000149996-ADJIE-0000001

Platform : Windows Vista x64

Windows version : (Service Pack 2) [6.0.6002]

Boot mode : Normally booted

Username : SYSTEM

Computer name : POSTE-PC

Version information:

BUILD.DAT : 12.0.0.861 41826 Bytes 19/10/2011 19:24:00

AVSCAN.EXE : 12.1.0.18 490448 Bytes 25/10/2011 14:40:50

AVSCAN.DLL : 12.1.0.17 54224 Bytes 23/09/2011 17:34:56

LUKE.DLL : 12.1.0.17 68304 Bytes 11/10/2011 19:00:17

AVSCPLR.DLL : 12.1.0.19 99536 Bytes 11/10/2011 19:00:09

AVREG.DLL : 12.1.0.22 226512 Bytes 25/10/2011 14:40:52

VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 00:18:34

VBASE001.VDF : 7.11.0.0 13342208 Bytes 14/12/2010 15:07:39

VBASE002.VDF : 7.11.3.0 1950720 Bytes 09/02/2011 21:08:51

VBASE003.VDF : 7.11.5.225 1980416 Bytes 07/04/2011 16:00:55

VBASE004.VDF : 7.11.8.178 2354176 Bytes 31/05/2011 16:18:22

VBASE005.VDF : 7.11.10.251 1788416 Bytes 07/07/2011 18:12:53

VBASE006.VDF : 7.11.13.60 6411776 Bytes 16/08/2011 13:26:09

VBASE007.VDF : 7.11.15.106 2389504 Bytes 05/10/2011 19:00:25

VBASE008.VDF : 7.11.15.107 2048 Bytes 05/10/2011 19:00:25

VBASE009.VDF : 7.11.15.108 2048 Bytes 05/10/2011 19:00:25

VBASE010.VDF : 7.11.15.109 2048 Bytes 05/10/2011 19:00:25

VBASE011.VDF : 7.11.15.110 2048 Bytes 05/10/2011 19:00:25

VBASE012.VDF : 7.11.15.111 2048 Bytes 05/10/2011 19:00:25

VBASE013.VDF : 7.11.15.144 161792 Bytes 07/10/2011 19:00:25

VBASE014.VDF : 7.11.15.177 130048 Bytes 10/10/2011 19:00:25

VBASE015.VDF : 7.11.15.213 113664 Bytes 11/10/2011 19:35:57

VBASE016.VDF : 7.11.16.1 163328 Bytes 14/10/2011 13:37:39

VBASE017.VDF : 7.11.16.34 187904 Bytes 18/10/2011 13:37:40

VBASE018.VDF : 7.11.16.77 139264 Bytes 20/10/2011 13:38:15

VBASE019.VDF : 7.11.16.112 162816 Bytes 24/10/2011 14:39:50

VBASE020.VDF : 7.11.16.150 167424 Bytes 26/10/2011 14:40:12

VBASE021.VDF : 7.11.16.187 171520 Bytes 28/10/2011 14:40:24

VBASE022.VDF : 7.11.16.209 190976 Bytes 31/10/2011 14:40:20

VBASE023.VDF : 7.11.16.243 158208 Bytes 02/11/2011 14:40:25

VBASE024.VDF : 7.11.17.21 194560 Bytes 06/11/2011 14:40:33

VBASE025.VDF : 7.11.17.101 202752 Bytes 09/11/2011 15:58:37

VBASE026.VDF : 7.11.17.137 214528 Bytes 11/11/2011 16:01:05

VBASE027.VDF : 7.11.17.154 278528 Bytes 14/11/2011 17:42:24

VBASE028.VDF : 7.11.17.197 175616 Bytes 16/11/2011 17:42:22

VBASE029.VDF : 7.11.17.233 281088 Bytes 20/11/2011 17:42:41

VBASE030.VDF : 7.11.17.234 2048 Bytes 20/11/2011 17:42:41

VBASE031.VDF : 7.11.17.235 2048 Bytes 20/11/2011 17:42:41

Engineversion : 8.2.6.116

AEVDF.DLL : 8.1.2.2 106868 Bytes 25/10/2011 14:40:48

AESCRIPT.DLL : 8.1.3.86 471420 Bytes 18/11/2011 17:51:53

AESCN.DLL : 8.1.7.2 127349 Bytes 02/09/2011 03:46:02

AESBX.DLL : 8.2.1.34 323957 Bytes 02/09/2011 03:46:02

AERDL.DLL : 8.1.9.15 639348 Bytes 09/09/2011 03:16:06

AEPACK.DLL : 8.2.13.4 684406 Bytes 11/11/2011 16:05:02

AEOFFICE.DLL : 8.1.2.20 201083 Bytes 18/11/2011 17:51:40

AEHEUR.DLL : 8.1.2.192 3838328 Bytes 18/11/2011 17:51:32

AEHELP.DLL : 8.1.18.0 254327 Bytes 25/10/2011 14:40:41

AEGEN.DLL : 8.1.5.14 405877 Bytes 18/11/2011 17:43:38

AEEMU.DLL : 8.1.3.0 393589 Bytes 02/09/2011 03:46:01

AECORE.DLL : 8.1.24.0 196983 Bytes 25/10/2011 14:40:39

AEBB.DLL : 8.1.1.0 53618 Bytes 02/09/2011 03:46:01

AVWINLL.DLL : 12.1.0.17 27344 Bytes 11/10/2011 19:00:11

AVPREF.DLL : 12.1.0.17 51920 Bytes 11/10/2011 19:00:09

AVREP.DLL : 12.1.0.17 179408 Bytes 11/10/2011 19:00:09

AVARKT.DLL : 12.1.0.17 223184 Bytes 11/10/2011 19:00:07

AVEVTLOG.DLL : 12.1.0.17 169168 Bytes 11/10/2011 19:00:08

SQLITE3.DLL : 3.7.0.0 398288 Bytes 11/10/2011 19:00:22

AVSMTP.DLL : 12.1.0.17 62928 Bytes 11/10/2011 19:00:10

NETNT.DLL : 12.1.0.17 17104 Bytes 11/10/2011 19:00:18

RCIMAGE.DLL : 12.1.0.17 4450000 Bytes 11/10/2011 19:00:31

RCTEXT.DLL : 12.1.0.16 96208 Bytes 23/09/2011 17:37:24

Configuration settings for the scan:

Jobname.............................: Complete system scan

Configuration file..................: C:\program files (x86)\avira\antivir desktop\sysscan.avp

Logging.............................: default

Primary action......................: interactive

Secondary action....................: ignore

Scan master boot sector.............: on

Scan boot sector....................: on

Boot sectors........................: C:, Q:,

Process scan........................: on

Extended process scan...............: on

Scan registry.......................: on

Search for rootkits.................: on

Integrity checking of system files..: off

Scan all files......................: All files

Scan archives.......................: on

Recursion depth.....................: 20

Smart extensions....................: on

Macro heuristic.....................: on

File heuristic......................: extended

Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+PFS,+SPR,

Start of the scan: November-20-11 14:00

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'Q:\'

[iNFO] No virus was found!

[iNFO] Please restart the search with Administrator rights

Starting search for hidden objects.

HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\localizedstring

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\localizedstring

C:\Windows\system32\unregmp2.exe /ShowWMP

C:\Windows\system32\unregmp2.exe

[NOTE] The registry entry is invisible.

C:\Program Files\Common Files\Microsoft Shared\Windows Live

C:\Program Files\Common Files\Microsoft Shared\Windows Live

[NOTE] The registry entry is invisible.

C:\Program Files\Windows Media Player

C:\Program Files\Windows Media Player

[NOTE] The registry entry is invisible.

C:\Program Files\Windows Media Player

C:\Windows\system32\wbem\Logs\WMITracing.log

C:\Windows\system32\wbem\Logs\WMITracing.log

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\symboliclinkvalue

[NOTE] The registry entry is invisible.

C:\Windows\IME\SpTip.DLL

C:\Windows\IME\SpTip.DLL

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile\0x0000ffff\{6A114E62-E11B-447F-9A58-2D354F5C9204}\display description

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Fonts\dokchampa (truetype)

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Fonts\impact (truetype

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Fonts\calibri (truetype

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Fonts\consolas (truetype

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Fonts\constantia (truetype

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Fonts\corbel (truetype

[NOTE] The registry entry is invisible.

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Fonts\palatino linotype (truetype

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\updatexnow

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\qtversion

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/quicktime

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/x-macpaint

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/x-quicktime

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\application/sdp

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\application/sdp

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\application/x-rtsp

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/flc

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/x-wav

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/x-wav

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/aiff

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/aiff

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/basic

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/mid

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/mid

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/mid

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/vnd.qcelp

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/x-gsm

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/amr

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/aac

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/aac

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/x-caf

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/ac3

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/ac3

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/x-mpeg

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/x-mpeg

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/mpeg

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/mpeg

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/3gpp

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/3gpp

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/3gpp2

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/3gpp2

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/sd-video

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\application/x-mpeg

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/mp4

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/mp4

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/x-m4a

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/x-m4p

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\audio/x-m4b

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\video/x-m4v

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/pict

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/pict

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/png

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/png

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/x-sgi

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/x-targa

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/tiff

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/tiff

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/jp2

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/jp2

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/jp2

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\ActiveX\Installed MIME Types\image/jp2

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies\pirate lagoon

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies\tables_css

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies\javascript_css

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies\interface_slicing

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies\m4tc5jtv

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies\zj8ar88e

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies\jhxyfpzq

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies\cxu7exv4

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Apple Computer, Inc.\QuickTime\Recent Movies\css_basics

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Direct3D\MostRecentApplication\name

[NOTE] The registry entry is invisible.

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Direct3D\MostRecentApplication\name

HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\DirectDraw\MostRecentApplication\id

[NOTE] The registry entry is invisible.

The scan of running processes will be started

Scan process 'avscan.exe' - '82' Module(s) have been scanned

Scan process 'avscan.exe' - '30' Module(s) have been scanned

Scan process 'avcenter.exe' - '71' Module(s) have been scanned

Scan process 'mbamservice.exe' - '44' Module(s) have been scanned

Scan process 'AVWEBGRD.EXE' - '42' Module(s) have been scanned

Scan process 'CVHSVC.EXE' - '66' Module(s) have been scanned

Scan process 'iTunesHelper.exe' - '68' Module(s) have been scanned

Scan process 'jusched.exe' - '24' Module(s) have been scanned

Scan process 'avgnt.exe' - '66' Module(s) have been scanned

Scan process 'mbamgui.exe' - '32' Module(s) have been scanned

Scan process 'Updater.exe' - '36' Module(s) have been scanned

Scan process 'OEM02Mon.exe' - '30' Module(s) have been scanned

Scan process 'PDVDServ.exe' - '23' Module(s) have been scanned

Scan process 'sftlist.exe' - '63' Module(s) have been scanned

Scan process 'sftvsa.exe' - '28' Module(s) have been scanned

Scan process 'RichVideo.exe' - '22' Module(s) have been scanned

Scan process 'AppleMobileDeviceService.exe' - '66' Module(s) have been scanned

Scan process 'avguard.exe' - '66' Module(s) have been scanned

Scan process 'armsvc.exe' - '25' Module(s) have been scanned

Scan process 'sched.exe' - '52' Module(s) have been scanned

Starting to scan executable files (registry).

The registry was scanned ( '1711' files ).

Starting the file scan:

Begin scan in 'C:\'

Begin scan in 'Q:\'

Error opening the file <\\?\Q:\>

Search path Q:\ could not be opened!

End of the scan: November-20-11 15:58

Used time: 1:58:01 Hour(s)

The scan has been done completely.

37879 Scanned directories

1004354 Files were scanned

0 Viruses and/or unwanted programs were found

0 Files were classified as suspicious

0 Files were deleted

0 Viruses and unwanted programs were repaired

0 Files were moved to quarantine

0 Files were renamed

0 Files cannot be scanned

1004354 Files not concerned

13768 Archives were scanned

0 Warnings

61 Notes

568327 Objects were scanned with rootkit scan

82 Hidden objects were found

Anybody have an answer for this?

Link to post
Share on other sites
schecter

schecter

Posted
  • Author
Posted

I tried avira support but I'm having some password issues with the forum, and for some reason they don't email me a new password when I ask for one, so I can't get in touch with them right now. I figured maybe the administrators here might know something about avira logs.

My computer isn't behaving abnormally in any way so these hidden objects are probably harmless. They tend to increase whenever I use Quicktime or download fonts, so it's probably just that.

I'll head down to avira forums again and see if I can get the password sent.

Link to post
Share on other sites
  • 2 weeks later...
  • Staff
screen317

screen317

Posted
  • Staff
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.