
)ĭisk \Device\Harddisk0\DR0 code has been found <- ROOTKIT !!!ĭisk \Device\Harddisk0\DR0 sector 00: rootkit-like behavior )ĪttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)ĪttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)ĪttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)ĪttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)ĪttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)ĪttachedDevice \FileSystem\Fastfat \Fat AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. ) ZwWriteVirtualMemory ĪttachedDevice \FileSystem\Ntfs \Ntfs AVGIDSFilter.Sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. SSDT \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o.

Running: zs7u7flp.exe Driver: C:\DOCUME~1\Ismael\LOCALS~1\Temp\kflcyfoc.sysĭisk \Device\Harddisk0\DR0 code has been found \Device\Ide\iaStor0 Intel_ rev.1.0. Windows Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 Intel_ rev.1.0. Time elapsed: 1 hour(s), 49 minute(s), 43 second(s)Ĭ:\system volume information\_restore\RP187\A0046579.exe () -> Quarantined and deleted successfully. Malwarebytes的日志- Malwarebytes' Anti-Malware 1. If yes, please check the properties of these files, and you will know if the file you need is 32-bit or 64-bit. If you encounter this situation, check the file path to see whether there are any other files located in.

There is a special case that, the operating system is a 64-bit system, but you are not sure whether the program is 32-bit or 64-bit. If your operating system is 32-bit, you must download 32-bit files, because 64-bit programs are unable to run in the 32-bit operating system. (Method: Click your original file, and then click on the right key to select "Properties" from the pop-up menu, you can see the version number of the files) If your original file is just corrupted but not lost, then please check the version number of your files. If you know MD5 value of the required files, it is the best approach to make choice Tip: How to correctly select the file you need
