smilez

AntiVir PersonalEdition Classic
Report file date: Sunday, December 02, 2007 16:09

Scanning for 955520 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: Administrator
Computer name: RAYMOND-D8FBE0E

Version information:
BUILD.DAT : 270 15603 Bytes 9/19/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 8/23/2007 22:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 8/16/2007 21:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 8/15/2007 00:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 8/21/2007 21:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 23:27:15
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 9/13/2007 23:26:55
ANTIVIR2.VDF : 7.0.1.30 1575424 Bytes 11/30/2007 00:07:10
ANTIVIR3.VDF : 7.0.1.31 2048 Bytes 11/30/2007 00:07:10
AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 12/3/2007 00:07:10
AVWINLL.DLL : 1.0.0.7 14376 Bytes 2/26/2007 19:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 7/18/2007 16:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 4/16/2007 22:16:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 8/3/2007 17:46:00
AVREG.DLL : 7.0.1.6 30760 Bytes 7/18/2007 16:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 8/28/2007 21:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 7/18/2007 16:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 3/8/2007 20:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 8/7/2007 21:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 8/21/2007 21:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 7/23/2007 18:37:21

Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: Sunday, December 02, 2007 16:09

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'notepad.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'QTTask.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'dllhost.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'mcrdsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ehSched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
28 processes with 28 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'E:\'
[NOTE] No virus was found!

Starting to scan the registry.
The registry was scanned ( '28' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Deckard\System Scanner\backup\WINDOWS\temp\16power.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\lookserver.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\serversyn.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\svmon.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\svserver.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\sys16.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\syswin.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\win2A7.exe
[DETECTION] Is the Trojan horse TR/Dldr.Alphabet.LH1
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\win34.exe
[DETECTION] Is the Trojan horse TR/Dldr.Alphabet.LH1
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\win37.exe
[DETECTION] Is the Trojan horse TR/Dldr.Alphabet.LH1
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\winA4D.exe
[DETECTION] Is the Trojan horse TR/Dldr.Alphabet.LH1
[INFO] The file was deleted!
C:\Deckard\System Scanner\backup\WINDOWS\temp\winmon.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\Program Files\spoolsv.exe
[DETECTION] Is the Trojan horse TR/Downloader.Gen
[INFO] The file was deleted!
C:\Program Files\Common Files\Microsoft Shared\MSInfo\msnfo32.exe
[DETECTION] Is the Trojan horse TR/Drop.IRC.TKB.1
[INFO] The file was deleted!
C:\Program Files\Common Files\Microsoft Shared\MSInfo\TaskUpdate.exe
[DETECTION] Is the Trojan horse TR/Drop.IRC.TKB.1
[INFO] The file was deleted!
C:\Program Files\E404 Helper\e404.v5.dll
[DETECTION] Is the Trojan horse TR/Dldr.BHO.BT.1
[INFO] The file was deleted!
C:\Program Files\E404 Helper\e404.v6.dll
[DETECTION] Is the Trojan horse TR/Dldr.BHO.BT.1
[INFO] The file was deleted!
C:\Program Files\kcyhfzxx\azkwxhfy.dll
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[WARNING] The file could not be deleted!
C:\qoobox\Quarantine\catchme2007-12-02_152355.56.zip
[0] Archive type: ZIP
--> awtstut.dll
[DETECTION] Is the Trojan horse TR/Agent.38912
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\Documents and Settings\Administrator.RAYMOND-D8FBE0E\Start Menu\Programs\Startup\findfast.exe.vir
[DETECTION] Is the Trojan horse TR/Dldr.Agent.eus.19
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\pqxcbwra.dll.vir
[DETECTION] Is the Trojan horse TR/Vundo.Gen
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\Documents and Settings\All Users\Start Menu\Programs\Startup\autorun.exe.vir
[DETECTION] Is the Trojan horse TR/Dldr.Agent.eus.19
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\Program Files\3269.exe.vir
[DETECTION] Is the Trojan horse TR/Small.Crypted.Gen
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\Program Files\xloader10181.exe.vir
[DETECTION] Is the Trojan horse TR/Dldr.Agent.eus.19
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\shell.exe.vir
[DETECTION] Is the Trojan horse TR/Dldr.Agent.eus.19
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\awtstut.dll.vir
[DETECTION] Is the Trojan horse TR/Trash.Gen
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\cuaricrp.exe.vir
[DETECTION] Is the Trojan horse TR/Click.MNB
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\gebcy.dll.vir
[DETECTION] Is the Trojan horse TR/Trash.Gen
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\ndawfcgr.exe.vir
[DETECTION] Is the Trojan horse TR/Click.MNB
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\nflodaua.exe.vir
[DETECTION] Is the Trojan horse TR/Fotomoto.F.1
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\printer.exe.vir
[DETECTION] Is the Trojan horse TR/Dldr.Agent.eus.19
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\puvgjmxc.exe.vir
[DETECTION] Is the Trojan horse TR/Fotomoto.F.1
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\spoolvs.exe.vir
[DETECTION] Is the Trojan horse TR/Dldr.Agent.eus.19
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\winpdc32.dll.vir
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
[INFO] The file was deleted!
C:\qoobox\Quarantine\C\WINDOWS\system32\xlibgfl254.dll.vir
[DETECTION] Is the Trojan horse TR/Dldr.Agent.bfj.7
[INFO] The file was deleted!
C:\WINDOWS\system32\e404d.dll
[DETECTION] Is the Trojan horse TR/Drop.Agent.ctx
[WARNING] The file could not be deleted!
C:\WINDOWS\system32\ActiveScan\pskavs.dll
[DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
[INFO] The file was deleted!
Begin scan in 'E:\'
Begin scan in 'D:\'
Search path D:\ could not be opened!
The device is not ready.



End of the scan: Sunday, December 02, 2007 17:36
Used time: 1:27:37 min

The scan has been done completely.

5850 Scanning directories
207758 Files were scanned
37 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
35 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
207721 Files not concerned
832 Archives were scanned
4 Warnings
0 Notes