Here are the suspicious log entries. I've included both the Vitro hits and two other recent entries that gave me chills. Thanks for pointing this out.
1/12/2009 5:47 a.m. AAVM - scanning warning: x_AavmCheckFileDirectEx: Http:guildportal.com/ScriptResource.axd?d=ktu8AZGZYeOFn7iXiJruy6do6nqdrOGnX.
1/25/2009 9:37 a.m. Sign of JS:FakeAV-F[trJ] has been found in "
http://antispywareinternetscan.com/ScriptResource.com/promo/1/freescan.php?nu=77025301" file
2/25/2009 6:45 a.m. Sign of "Win32:vitro has been found in C:\Dell\drivers \R174572\nvlddmkm.sy_\nvlddmkm.sy file
2/25/2009 6:46 a.m. Sign of "Win32:vitro has been found in C:\Dell\drivers \R179640\nvlddmkm.sy_\nvlddmkm.sy file
2/25/2009 6:47 a.m. Sign of "Win32:vitro has been found in C:\Dell\drivers \R174572\nvlddmkm.sy_\nvlddmkm.sy file
2/25/2009 7:05 a.m. Sign of "Win32:vitro has been found in C:\Windows\System32\DriverStore\FileRepository\nvdd.inf_5c3ce63\nvlddmkm.sys file
2/25/2009 7:07 a.m. Sign of "Win32:vitro has been found in C:\Windows\System32\DriverStore\FileRepository\nvdd.inf_e129fabf\nvlddmkm.sys file
Thanks for the help so far guys. Hopefully this can shed some light on things.
Edit:
After reading this thread:
http://forum.avast.com/index.php?topic=42926.0I'm wondering if this could be a false positive. I'm looking at a reformat of my hardrive either way. My real concern is with some of the horror stories about Vitro circulating that have implied that it could have infected my entire network. Both computers are running fine after nearly 36 hours. No other .exe files have come up as infected. Regular and boot scans with every AV and Anti-spware tool I can lay hands on turn up nothing.
From the way others have described Vitro, I should be in serious trouble right now...right?
I plan to reformat tomorrow. What ever it is it can't be found and my account has been hijacked a second time after having the password reset.
Nothing else, banks, other subscription sites, etc. has been messed with. This leads me to believe that only the one computer is infected and the laptop and networked drive are fine.
We're getting a little off topic, but any further insight you guys could offer would be awesome.