? Report of OSAM: Autorun Manager v5.0.11926.0

Report of OSAM: Autorun Manager v5.0.11926.0
http://www.online-solutions.ru/en/
Saved at 10:50:12 on 25.04.2012

OS: Windows XP Professional Service Pack 3 (Build 2600)
Default Browser: Google Inc. Google Chrome 18.0.1025.162

Scanner Settings
Rootkits detection (hidden registry)
Rootkits detection (hidden files)
Retrieve files information
Check Microsoft signatures

Filters
Trusted entries
Empty entries
Hidden registry entries (rootkit activity)
Exclusively opened files
Not found files
Files without detailed information
Existing files
Non-startable services
Non-startable drivers
Active entries
Disabled entries

  Risk Name Publisher Full Path Status
Common
%SystemRoot%\Tasks
||||   "Google Software Updater.job" "Google" C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe File exists
||||   "GoogleUpdateTaskMachineCore.job" "Google Inc." C:\Program Files\Google\Update\GoogleUpdate.exe File exists
||||   "GoogleUpdateTaskMachineUA.job" "Google Inc." C:\Program Files\Google\Update\GoogleUpdate.exe File exists
Control Panel Objects
%SystemRoot%\system32
|||||| "alsndmgr.cpl" C:\WINDOWS\system32\alsndmgr.cpl File signed by Microsoft | File found, but it contains no detailed information
|||||| "infocardcpl.cpl" "Microsoft Corporation" C:\WINDOWS\system32\infocardcpl.cpl File exists
|||||| "plotman.cpl" "Autodesk, Inc." C:\WINDOWS\system32\plotman.cpl File exists
|||||| "styleman.cpl" "Autodesk, Inc." C:\WINDOWS\system32\styleman.cpl File exists
Drivers
HKLM\SYSTEM\CurrentControlSet\Services
|||||| "aswFsBlk" (aswFsBlk) "AVAST Software" C:\WINDOWS\system32\drivers\aswFsBlk.sys File exists
|||||| "aswMon2" (aswMon2) "AVAST Software" C:\WINDOWS\system32\drivers\aswMon2.sys File exists
|||||| "aswRdr" (aswRdr) "AVAST Software" C:\WINDOWS\system32\drivers\aswRdr.sys File exists
|||||| "aswSnx" (aswSnx) "AVAST Software" C:\WINDOWS\system32\drivers\aswSnx.sys File exists
|||||| "aswSP" (aswSP) "AVAST Software" C:\WINDOWS\system32\drivers\aswSP.sys File exists
|||||| "avast! Asynchronous Virus Monitor" (Aavmker4) "AVAST Software" C:\WINDOWS\system32\drivers\Aavmker4.sys File exists
|||||| "avast! Network Shield Support" (aswTdi) "AVAST Software" C:\WINDOWS\system32\drivers\aswTdi.sys File exists
       "Changer" (Changer) C:\WINDOWS\system32\drivers\Changer.sys File not found
       "i2omgmt" (i2omgmt) C:\WINDOWS\system32\drivers\i2omgmt.sys File not found
       "lbrtfdc" (lbrtfdc) C:\WINDOWS\system32\drivers\lbrtfdc.sys File not found
       "MSI_MSIBIOS_010507" (MSI_MSIBIOS_010507) C:\Program Files\MSI\Live Update 5\msibios32_100507.sys File not found
       "NTIOLib_1_0_4" (NTIOLib_1_0_4) C:\Program Files\MSI\Live Update 5\NTIOLib.sys File not found
       "PCIDump" (PCIDump) C:\WINDOWS\system32\drivers\PCIDump.sys File not found
       "PDCOMP" (PDCOMP) C:\WINDOWS\system32\drivers\PDCOMP.sys File not found
       "PDFRAME" (PDFRAME) C:\WINDOWS\system32\drivers\PDFRAME.sys File not found
       "PDRELI" (PDRELI) C:\WINDOWS\system32\drivers\PDRELI.sys File not found
       "PDRFRAME" (PDRFRAME) C:\WINDOWS\system32\drivers\PDRFRAME.sys File not found
|||||| "PxHelp20" (PxHelp20) "Sonic Solutions" C:\WINDOWS\System32\Drivers\PxHelp20.sys File exists
       "WDICA" (WDICA) C:\WINDOWS\system32\drivers\WDICA.sys File not found
Explorer
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
|||||| {89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" "Microsoft Corporation" C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install File exists
HKLM\Software\Classes\Protocols\Filter
|||||| {1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" "Microsoft Corporation" C:\WINDOWS\system32\mscoree.dll File exists
|||||| {1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" "Microsoft Corporation" C:\WINDOWS\system32\mscoree.dll File exists
|||||| {1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" "Microsoft Corporation" C:\WINDOWS\system32\mscoree.dll File exists
|||||| {807553E5-5146-11D5-A672-00B0D022E945} "text/xml" "Microsoft Corporation" C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL File exists
HKLM\Software\Classes\Protocols\Handler
|||||| {32505114-5902-49B2-880A-1F7738E5A384} "Data Page Plugable Protocal mso-offdap11 Handler" "Microsoft Corporation" C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL File exists
|||||| {3D9F03FA-7A94-11D3-BE81-0050048385D1} "Data Page Pluggable Protocol mso-offdap Handler" "Microsoft Corporation" C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL File exists
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
|||||| {6DEA92E9-8682-4b6a-97DE-354772FE5727} "ACDWFTHMBPRXY" "Autodesk" C:\Program Files\Common Files\Autodesk Shared\Thumbnail\AcDwfThmbPrxy16.dll File exists
|||||| {36A21736-36C2-4C11-8ACB-D4136F2B57BD} "AcSignIcon" "Autodesk" C:\WINDOWS\system32\AcSignIcon.dll File exists
|||||| {AC1DB655-4F9A-4c39-8AD2-A65324A4C446} "ACTHUMBNAIL" "Autodesk" C:\Program Files\Common Files\Autodesk Shared\Thumbnail\AcThumbnail16.dll File exists
|||||| {472083B0-C522-11CF-8763-00608CC02F24} "avast" "AVAST Software" C:\Program Files\AVAST Software\Avast\ashShell.dll File exists
       {42071714-76d4-11d1-8b24-00a0c9068ff3} "Display Panning CPL Extension" File not found | COM-object registry key not found
       {853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Encryption Context Menu" File not found | COM-object registry key not found
       {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} "IE User Assist" File not found | COM-object registry key not found
|||||| {42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" "Microsoft Corporation" C:\Program Files\Microsoft Office\OFFICE11\msohev.dll File exists
|||||| {00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" "Microsoft Corporation" C:\PROGRA~1\MICROS~2\OFFICE11\MLSHEXT.DLL File exists
|||||| {0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" "Microsoft Corporation" C:\PROGRA~1\MICROS~2\OFFICE11\OLKFSTUB.DLL File exists
       {764BF0E1-F219-11ce-972D-00AA00A14F56} "Shell extensions for file compression" File not found | COM-object registry key not found
|||||| {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" "Microsoft Corporation" C:\WINDOWS\system32\dfshim.dll File exists
|||||| {e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" "Microsoft Corporation" C:\WINDOWS\system32\dfshim.dll File exists
|||||| {BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Web Folders" "Microsoft Corporation" C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL File exists
|||||| {45670FA8-ED97-4F44-BC93-305082590BFB} "Windows XPS Document Metadata Handler" "Microsoft Corporation" C:\WINDOWS\System32\XPSSHHDR.DLL File exists
|||||| {44121072-A222-48f2-A58A-6D9AD51EBBE9} "Windows XPS Document Thumbnail Handler" "Microsoft Corporation" C:\WINDOWS\System32\XPSSHHDR.DLL File exists
Internet Explorer
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
       ITBar7Height "ITBar7Height" File not found | COM-object registry key not found
       "ITBar7Layout" File not found | COM-object registry key not found
       "ITBarLayout" File not found | COM-object registry key not found
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
||||   {FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" "Microsoft Corporation" C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL File exists
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
|||||| "avast! WebRep" "AVAST Software" C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll File exists
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
|||||| {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} "avast! WebRep" "AVAST Software" C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll File exists
||||   {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} "Google Toolbar Notifier BHO" "Google Inc." C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll File exists
Logon
%AllUsersProfile%\Start Menu\Programs\Startup
||||   "AutoCAD Startup Accelerator.lnk" "Autodesk, Inc" C:\Program Files\Common Files\Autodesk Shared\acstart16.exe Shortcut exists | File exists
|||||| "desktop.ini" C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini File exists
%UserProfile%\Start Menu\Programs\Startup
|||||| "desktop.ini" C:\Documents and Settings\Citakovic\Start Menu\Programs\Startup\desktop.ini File exists
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
||||   "swg" "Google Inc." C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe File exists
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
|||||| "avast" "AVAST Software" "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui File exists
Print Monitors
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
|||||| "Microsoft Document Imaging Writer Monitor" "Microsoft Corporation" C:\WINDOWS\system32\mdimon.dll File exists
Services
HKLM\SYSTEM\CurrentControlSet\Services
|||||| ".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) "Microsoft Corporation" C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe File exists
|||||| "ASP.NET State Service" (aspnet_state) "Microsoft Corporation" C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe File exists
|||||| "Autodesk Licensing Service" (Autodesk Licensing Service) "Autodesk" C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe File exists
|||||| "avast! Antivirus" (avast! Antivirus) "AVAST Software" C:\Program Files\AVAST Software\Avast\AvastSvc.exe File exists
||||   "Google Software Updater" (gusvc) "Google" C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe File exists
||||   "Google Update Service (gupdate)" (gupdate) "Google Inc." C:\Program Files\Google\Update\GoogleUpdate.exe File exists
||||   "Google Update Service (gupdatem)" (gupdatem) "Google Inc." C:\Program Files\Google\Update\GoogleUpdate.exe File exists
|||||| "Office Source Engine" (ose) "Microsoft Corporation" C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE File exists
|||||| "Windows CardSpace" (idsvc) "Microsoft Corporation" C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe File exists
Winlogon
HKCU\Control Panel\IOProcs
       "MVB" mvfs32.dll File not found

If You have questions or want to get some help, You can visit http://forum.online-solutions.ru