ROOTREPEAL (c) AD, 2007-2009 ================================================== Scan Start Time: 2010/06/03 20:45 Program Version: Version 1.3.5.0 Windows Version: Windows Vista SP2 ================================================== Processes ------------------- Path: System PID: 4 Status: Locked to the Windows API! Path: C:\Windows\System32\smss.exe PID: 468 Status: - Path: C:\Windows\System32\csrss.exe PID: 532 Status: - Path: C:\Windows\System32\wininit.exe PID: 580 Status: - Path: C:\Windows\System32\csrss.exe PID: 592 Status: - Path: C:\Windows\System32\services.exe PID: 624 Status: - Path: C:\Windows\System32\lsass.exe PID: 652 Status: - Path: C:\Program Files\AVG\AVG9\avgnsx.exe PID: 656 Status: - Path: C:\Windows\System32\lsm.exe PID: 660 Status: - Path: C:\Windows\System32\winlogon.exe PID: 724 Status: - Path: C:\Windows\System32\svchost.exe PID: 828 Status: - Path: C:\Windows\System32\nvvsvc.exe PID: 876 Status: - Path: C:\Windows\System32\svchost.exe PID: 904 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 948 Status: - Path: C:\Windows\System32\svchost.exe PID: 1020 Status: - Path: C:\Windows\System32\svchost.exe PID: 1064 Status: - Path: C:\Windows\System32\svchost.exe PID: 1076 Status: - Path: C:\Windows\System32\audiodg.exe PID: 1152 Status: Locked to the Windows API! Path: C:\Users\BRENDE~1\AppData\Local\temp\Rar$EX00.278\RootRepeal.exe PID: 1172 Status: - Path: C:\Windows\System32\svchost.exe PID: 1176 Status: - Path: C:\Windows\System32\SLsvc.exe PID: 1192 Status: - Path: C:\Windows\System32\svchost.exe PID: 1232 Status: - Path: C:\Windows\System32\svchost.exe PID: 1268 Status: - Path: C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe PID: 1312 Status: - Path: C:\Windows\System32\svchost.exe PID: 1332 Status: - Path: C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe PID: 1380 Status: - Path: C:\Windows\System32\nvvsvc.exe PID: 1528 Status: - Path: C:\Windows\System32\wlanext.exe PID: 1568 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 1592 Status: - Path: C:\Windows\System32\stacsv.exe PID: 1612 Status: - Path: C:\Windows\System32\spoolsv.exe PID: 1716 Status: - Path: C:\Windows\System32\svchost.exe PID: 1740 Status: - Path: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe PID: 1824 Status: - Path: C:\Windows\System32\AEstSrv.exe PID: 1980 Status: - Path: C:\Program Files\AVG\AVG9\avgwdsvc.exe PID: 1992 Status: - Path: C:\Windows\System32\svchost.exe PID: 2004 Status: - Path: C:\Program Files\Intel\Wireless\Bin\EvtEng.exe PID: 2040 Status: - Path: C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe PID: 2108 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 2172 Status: - Path: C:\Windows\System32\svchost.exe PID: 2196 Status: - Path: C:\Windows\System32\SearchIndexer.exe PID: 2216 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 2504 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 2524 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe PID: 2616 Status: - Path: C:\Users\BRENDE~1\AppData\Local\temp\Rar$EX00.966\gmer.exe PID: 2640 Status: - Path: C:\Windows\System32\wbem\WmiPrvSE.exe PID: 2804 Status: - Path: C:\Program Files\AVG\AVG9\avgrsx.exe PID: 2900 Status: - Path: C:\Program Files\AVG\AVG9\avgchsvx.exe PID: 2908 Status: - Path: C:\Program Files\AVG\AVG9\avgcsrvx.exe PID: 2960 Status: - Path: C:\Windows\System32\taskeng.exe PID: 3252 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 3320 Status: - Path: C:\Windows\System32\SearchFilterHost.exe PID: 3340 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 3364 Status: - Path: C:\Windows\System32\taskeng.exe PID: 3380 Status: - Path: C:\Windows\System32\dwm.exe PID: 3396 Status: - Path: C:\Windows\explorer.exe PID: 3452 Status: - Path: C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe PID: 3540 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 3724 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 3768 Status: - Path: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe PID: 3792 Status: - Path: C:\Windows\OEM02Mon.exe PID: 3800 Status: - Path: C:\Program Files\Common Files\Java\Java Update\jusched.exe PID: 3896 Status: - Path: C:\Windows\System32\rundll32.exe PID: 3992 Status: - Path: C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe PID: 4036 Status: - Path: C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe PID: 4060 Status: - Path: C:\Windows\System32\SearchProtocolHost.exe PID: 4704 Status: - Path: C:\Users\Brenden Wilson\AppData\Local\Google\Chrome\Application\chrome.exe PID: 4984 Status: - Path: C:\Program Files\WinRAR\WinRAR.exe PID: 5108 Status: -