Rooter.exe (v1.0.2) by Eric_71
.
SeDebugPrivilege granted successfully ...
.
Windows XP . (5.1.2600) Service Pack 2
[32_bits] - x86 Family 6 Model 9 Stepping 5, GenuineIntel
.
[wscsvc] (Security Center) RUNNING (state:4)
[SharedAccess] RUNNING (state:4)
.
Internet Explorer 7.0.5730.11
.
C:\  [Fixed-NTFS] .. ( Total:37 Go - Free:24 Go )
D:\  [CD_Rom]
.
Scan : 08:02.09
Path : C:\temp\Rooter.exe
User : Tina ( Administrator -> YES )
.
----------------------\\ Processes
.
Locked [System Process] (0)
______ System (4)
______ \SystemRoot\System32\smss.exe (564)
______ \??\C:\WINDOWS\system32\csrss.exe (628)
______ \??\C:\WINDOWS\system32\winlogon.exe (656)
______ C:\WINDOWS\system32\services.exe (700)
______ C:\WINDOWS\system32\lsass.exe (712)
______ C:\WINDOWS\system32\Ati2evxx.exe (864)
______ C:\WINDOWS\system32\svchost.exe (896)
______ C:\WINDOWS\system32\svchost.exe (972)
______ C:\WINDOWS\System32\svchost.exe (1028)
______ C:\WINDOWS\system32\S24EvMon.exe (1136)
______ C:\WINDOWS\system32\svchost.exe (1204)
______ C:\WINDOWS\system32\svchost.exe (1296)
______ C:\WINDOWS\system32\ZCfgSvc.exe (1376)
______ C:\WINDOWS\system32\Ati2evxx.exe (1476)
______ C:\WINDOWS\Explorer.EXE (1700)
______ C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (1852)
______ C:\WINDOWS\system32\1XConfig.exe (1892)
______ C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (1984)
______ C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (188)
______ C:\WINDOWS\system32\spoolsv.exe (240)
______ C:\WINDOWS\System32\SCardSvr.exe (528)
______ C:\WINDOWS\system32\svchost.exe (592)
______ C:\Program Files\Symantec AntiVirus\DefWatch.exe (912)
______ C:\Program Files\Executive Software\Diskeeper\DkService.exe (904)
______ C:\WINDOWS\sYSteM32\SvchOst.eXE (1200)
______ C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe (1784)
______ C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (1336)
______ C:\WINDOWS\system32\RegSrvc.exe (2076)
______ C:\Program Files\Symantec AntiVirus\Rtvscan.exe (2168)
______ C:\WINDOWS\System32\alg.exe (3592)
______ C:\WINDOWS\system32\wuauclt.exe (3944)
______ C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe (4060)
______ C:\Program Files\Common Files\Symantec Shared\ccApp.exe (460)
______ C:\PROGRA~1\SYMANT~1\VPTray.exe (1424)
______ C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (1528)
______ C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe (1876)
______ C:\WINDOWS\system32\ctfmon.exe (2420)
______ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (2476)
______ C:\WINDOWS\System32\svchost.exe (2712)
______ C:\Program Files\Internet Explorer\iexplore.exe (3244)
______ C:\Program Files\Internet Explorer\iexplore.exe (3292)
______ C:\Program Files\Internet Explorer\iexplore.exe (3308)
______ C:\Program Files\Internet Explorer\iexplore.exe (3012)
______ C:\Program Files\Internet Explorer\iexplore.exe (1316)
______ C:\temp\Rooter.exe (324)
.
----------------------\\ Device\Harddisk0\
.
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
.
\Device\Harddisk0\Partition1 --[ MBR ]-- (Start_Offset:32256 | Length:40007729664)
.
----------------------\\ Scheduled Tasks
.
C:\WINDOWS\Tasks\desktop.ini
C:\WINDOWS\Tasks\Google Software Updater.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\SA.DAT
.
----------------------\\ Registry
.
.
----------------------\\ Files & Folders
.
----------------------\\ Scan completed at 08:02.23
.
C:\Rooter$\Rooter_1.txt - (30/10/2009 | 08:02.23)