View Single Post
Old 05-17-2008, 09:27 AM   #3 (permalink)
Gemon
Registered User
 
Join Date: May 2008
Posts: 22
OS: XP Pro SP2


Re: flec006, srosa & co.

ActiveScan stopped working at around 70% ... in the end i managed to perform an online scan with kaspersky.
Here's the list of uninvited guests ...

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, May 17, 2008 5:07:50 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 16/05/2008
Kaspersky Anti-Virus database records: 779486
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\
H:\

Scan Statistics:
Total number of scanned objects: 933540
Number of viruses found: 48
Number of infected objects: 130
Number of suspicious objects: 0
Duration of the scan process: 16:17:03

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Nero\Nero8\Nero BackItUp\Cache\NeroBackItUpScheduler3.log Object is locked skipped
C:\Documents and Settings\it02403\Application Data\$_hpcst$.hpc Object is locked skipped
C:\Documents and Settings\it02403\Application Data\Babylon\log_file.txt Object is locked skipped
C:\Documents and Settings\it02403\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\it02403\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\it02403\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\it02403\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\it02403\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\it02403\Local Settings\History\History.IE5\MSHist012008051720080518\index.dat Object is locked skipped
C:\Documents and Settings\it02403\Local Settings\Temp\WCESLog.log Object is locked skipped
C:\Documents and Settings\it02403\Local Settings\Temp\~DFE722.tmp Object is locked skipped
C:\Documents and Settings\it02403\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\it02403\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\it02403\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\it02403\NTUSER.dat.LOG Object is locked skipped
C:\Documents and Settings\it02403\UserData\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\postgres\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\postgres\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\postgres\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Program Files\CA\BrightStor ARCserve Backup for Laptops & Desktops\Client\BAOF\LOGS\20080307.000 Object is locked skipped
C:\QooBox\Quarantine\C\Documents and Settings\it02403\Application Data\m\data.oct.vir Infected: Trojan-Downloader.Win32.Bagle.pf skipped
C:\QooBox\Quarantine\C\Documents and Settings\it02403\Application Data\m\flec006.exe.vir Infected: Email-Worm.Win32.Bagle.of skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\downld\1615823.exe.vir Infected: Email-Worm.Win32.Bagle.vr skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\downld\1817243.exe.vir Infected: Email-Worm.Win32.Bagle.of skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\downld\1843801.exe.vir Infected: Email-Worm.Win32.Bagle.of skipped
C:\QooBox\Quarantine\catchme2008-05-15_ 3.51.03,16.zip/wintems.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\QooBox\Quarantine\catchme2008-05-15_ 3.51.03,16.zip/mdelk.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\QooBox\Quarantine\catchme2008-05-15_ 3.51.03,16.zip/hldrrr.exe Infected: Trojan-Downloader.Win32.Bagle.oe skipped
C:\QooBox\Quarantine\catchme2008-05-15_ 3.51.03,16.zip/mdelk.exe.1 Infected: Trojan-Downloader.Win32.Bagle.oe skipped
C:\QooBox\Quarantine\catchme2008-05-15_ 3.51.03,16.zip ZIP: infected - 4 skipped
C:\QooBox\Quarantine\Registry_backups\Legacy_SROSA.reg.dat Infected: Trojan-Downloader.Win32.Bagle.hp skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0114684.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0114731.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0114825.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0114872.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0114917.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0115919.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0116917.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0117918.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0118918.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0119912.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP382\A0120917.sys Infected: Trojan-Downloader.Win32.Bagle.mm skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP383\A0120930.exe Infected: Email-Worm.Win32.Bagle.vr skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP383\A0120931.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP383\A0120933.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP383\A0121964.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP385\change.log Object is locked skipped
C:\WINDOWS\bthservsdp.dat Object is locked skipped
C:\WINDOWS\cafcr.db Object is locked skipped
C:\WINDOWS\CSC\00000001 Object is locked skipped
C:\WINDOWS\Debug\Netlogon.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SF2E1E9C2.tmp Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\CcmExec.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\CertificateMaintenance.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\ClientIDManagerStartup.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\FileSystemFile.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\InventoryAgent.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\LocationServices.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\mtrmgr.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\PatchInstall.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\PatchUIMonitor.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\PolicyAgent.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\PolicyAgentProvider.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\PolicyEvaluator.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\Scheduler.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\SrcUpdateMgr.log Object is locked skipped
C:\WINDOWS\system32\CCM\Logs\StatusAgent.log Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\CertificateMaintenanceEndpoint\0000000G.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\CertificateMaintenanceEndpoint\0000000G.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\CTMDTSReply\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\CTMDTSReply\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\execmgr\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\execmgr\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\InventoryAgent\00000008.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\InventoryAgent\00000008.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\LS_ReplyLocations\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\LS_ReplyLocations\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\LS_ScheduledCleanup\0000000K.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\LS_ScheduledCleanup\0000000K.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\MtrMgr\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\MtrMgr\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PatchUIMonitor\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PatchUIMonitor\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_Cleanup\00000004.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_Cleanup\00000004.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_PolicyDownload\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_PolicyDownload\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_PolicyEvaluator\0000002K.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_PolicyEvaluator\0000002K.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_ReplyAssignments\00000007.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_ReplyAssignments\00000007.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_RequestAssignments\0000000S.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_RequestAssignments\0000000S.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_ReRequestPolicy\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\PolicyAgent_ReRequestPolicy\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\RemoteToolsAgent\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\RemoteToolsAgent\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\SrcUpdateMgr\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\SrcUpdateMgr\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\SWMTRReportGen\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\SWMTRReportGen\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\UpdatesInstallMgr\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\UpdatesInstallMgr\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\UploadProtocol\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\EndpointQueues\UploadProtocol\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\amp_[http]mp_locationmanager\00000007.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\amp_[http]mp_locationmanager\00000007.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_mp_ddrendpoint\00000002.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_mp_ddrendpoint\00000002.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_mp_hinvendpoint\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_mp_hinvendpoint\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_mp_sinvendpoint\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_mp_sinvendpoint\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_statusreceiver\00000001.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_statusreceiver\00000001.que Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_[http]mp_policymanager\0000000O.msg Object is locked skipped
C:\WINDOWS\system32\CCM\ServiceData\Messaging\OutgoingQueues\mp_[http]mp_policymanager\0000000O.que Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\VirtualDNS.dll Infected: not-a-virus:AdWare.Win32.Webdir.b skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\Nero\Nero8\Nero BackItUp\BIU1.txt Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP385\change.log Object is locked skipped
F:\Program Files\Trend Micro\HijackThis\backups\backup-20080515-110540-125.dll Infected: not-a-virus:AdWare.Win32.Webdir.b skipped
F:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP385\A0124315.DLL Infected: not-a-virus:Monitor.Win32.KeyLogger.30 skipped
F:\System Volume Information\_restore{CA4187A9-C5FF-4ECA-AFF5-ECA7092B3744}\RP385\change.log Object is locked skipped
F:\Gif\gifs.ZIP/Cliparts-World.exe Infected: not-a-virus:Porn-Dialer.Win32.Generic skipped
F:\Gif\gifs.ZIP ZIP: infected - 1 skipped
F:\Emb\Sttcnv_Lib_1.1.exe Infected: Trojan-Downloader.Win32.Bagle.oe skipped
H:\AVI Codec\AVICodecPackPlus21.exe/stream/data0051 Infected: not-a-virus:AdWare.Win32.Webdir.b skipped
H:\AVI Codec\AVICodecPackPlus21.exe/stream Infected: not-a-virus:AdWare.Win32.Webdir.b skipped
H:\AVI Codec\AVICodecPackPlus21.exe NSIS: infected - 2 skipped
H:\Disk F HP\desktop\dmblnd_road_runner.exe/WISE0017.BIN Infected: not-a-virus:AdWare.Win32.180Solutions skipped
H:\Disk F HP\desktop\dmblnd_road_runner.exe/WISE0018.BIN/data0001.cab/VVSN.exe Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped
H:\Disk F HP\desktop\dmblnd_road_runner.exe/WISE0018.BIN/data0001.cab Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped
H:\Disk F HP\desktop\dmblnd_road_runner.exe/WISE0018.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.z skipped
H:\Disk F HP\desktop\dmblnd_road_runner.exe/WISE0019.BIN Infected: Backdoor.Win32.Ruledor.c skipped
H:\Disk F HP\desktop\dmblnd_road_runner.exe/WISE0020.BIN Infected: Trojan-Dropper.Win32.Mudrop.o skipped
H:\Disk F HP\desktop\dmblnd_road_runner.exe WiseSFX: infected - 6 skipped
H:\Disk F HP\desktop\rrandwedt.exe/WISE0017.BIN Infected: not-a-virus:AdWare.Win32.Quick.a skipped
H:\Disk F HP\desktop\rrandwedt.exe/WISE0018.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
H:\Disk F HP\desktop\rrandwedt.exe/WISE0019.BIN Infected: Trojan-Downloader.Win32.Small.akj skipped
H:\Disk F HP\desktop\rrandwedt.exe/WISE0020.BIN Infected: Trojan-Downloader.Win32.Agent.er skipped
H:\Disk F HP\desktop\rrandwedt.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.EZula.z skipped
H:\Disk F HP\desktop\rrandwedt.exe WiseSFX: infected - 5 skipped
H:\Disk F HP\desktop\rrbeepdt.exe/WISE0017.BIN Infected: not-a-virus:AdWare.Win32.Quick.a skipped
H:\Disk F HP\desktop\rrbeepdt.exe/WISE0018.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
H:\Disk F HP\desktop\rrbeepdt.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Gator.3103 skipped
H:\Disk F HP\desktop\rrbeepdt.exe/WISE0020.BIN Infected: Trojan-Downloader.Win32.Agent.er skipped
H:\Disk F HP\desktop\rrbeepdt.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.EZula.u skipped
H:\Disk F HP\desktop\rrbeepdt.exe WiseSFX: infected - 5 skipped
H:\manuals\internet\consf221.exe/WISE0410.BIN Infected: Trojan.JS.Loop skipped
H:\manuals\internet\consf221.exe WiseSFX: infected - 1 skipped
H:\Software\Sttcnv_Lib_1.1.zip/Sttcnv_Lib_1.1.exe Infected: Trojan-Downloader.Win32.Bagle.oe skipped
H:\Software\Sttcnv_Lib_1.1.zip ZIP: infected - 1 skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/GeneXus.chm/GeneXus/Java/Docum/ReleaseNotes/7.5/TransaccionesHTTP_files/Best Matrix Screensaver new.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/GeneXus.chm/GeneXus/Java/Docum/ReleaseNotes/7.5/TransaccionesHTTP_files/Dark Angels new.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/GeneXus.chm/GeneXus/Java/Docum/ReleaseNotes/7.5/TransaccionesHTTP_files/Full album all.mp3.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/GeneXus.chm/GeneXus/Java/Docum/ReleaseNotes/7.5/TransaccionesHTTP_files/netsky source code.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/GeneXus.chm/GeneXus/Java/Docum/ReleaseNotes/7.5/TransaccionesHTTP_files/Porno Screensaver britney.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/GeneXus.chm/GeneXus/Java/Docum/ReleaseNotes/7.5/TransaccionesHTTP_files/Screensaver2.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/GeneXus.chm/GeneXus/Java/Docum/ReleaseNotes/7.5/TransaccionesHTTP_files/Teen Porn 15.jpg.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/GeneXus.chm Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpCon_function_files/Best Matrix Screensaver new.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpCon_function_files/Dark Angels new.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpCon_function_files/Full album all.mp3.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpCon_function_files/netsky source code.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpCon_function_files/Porno Screensaver britney.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpCon_function_files/Screensaver2.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpCon_function_files/Teen Porn 15.jpg.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDelete_function_files/Best Matrix Screensaver new.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDelete_function_files/Dark Angels new.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDelete_function_files/Full album all.mp3.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDelete_function_files/netsky source code.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDelete_function_files/Porno Screensaver britney.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDelete_function_files/Screensaver2.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDelete_function_files/Teen Porn 15.jpg.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDis_function_files/Best Matrix Screensaver new.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDis_function_files/Dark Angels new.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDis_function_files/Full album all.mp3.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDis_function_files/netsky source code.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDis_function_files/Porno Screensaver britney.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDis_function_files/Screensaver2.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpDis_function_files/Teen Porn 15.jpg.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPError_function_files/Best Matrix Screensaver new.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPError_function_files/Dark Angels new.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPError_function_files/Full album all.mp3.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPError_function_files/netsky source code.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPError_function_files/Porno Screensaver britney.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPError_function_files/Screensaver2.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPError_function_files/Teen Porn 15.jpg.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPGet_function_files/Best Matrix Screensaver new.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPGet_function_files/Dark Angels new.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPGet_function_files/Full album all.mp3.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPGet_function_files/netsky source code.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPGet_function_files/Porno Screensaver britney.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPGet_function_files/Screensaver2.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPGet_function_files/Teen Porn 15.jpg.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPPut_function_files/Best Matrix Screensaver new.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPPut_function_files/Dark Angels new.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPPut_function_files/Full album all.mp3.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPPut_function_files/netsky source code.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPPut_function_files/Porno Screensaver britney.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPPut_function_files/Screensaver2.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFTPPut_function_files/Teen Porn 15.jpg.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpStat_function_files/Best Matrix Screensaver new.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpStat_function_files/Dark Angels new.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpStat_function_files/Full album all.mp3.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpStat_function_files/netsky source code.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpStat_function_files/Porno Screensaver britney.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpStat_function_files/Screensaver2.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Functions/GxFtpStat_function_files/Teen Porn 15.jpg.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Object_Properties/auto_compress_http_traffic_property_files/Best Matrix Screensaver new.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Object_Properties/auto_compress_http_traffic_property_files/Dark Angels new.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Object_Properties/auto_compress_http_traffic_property_files/Full album all.mp3.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Object_Properties/auto_compress_http_traffic_property_files/netsky source code.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Object_Properties/auto_compress_http_traffic_property_files/Porno Screensaver britney.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Object_Properties/auto_compress_http_traffic_property_files/Screensaver2.scr Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm/Genexus_8.0_Help_System/Object_Properties/auto_compress_http_traffic_property_files/Teen Porn 15.jpg.pif Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab/Gxw80.chm Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi/Cabs.w1.cab Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip/gxdl.msi Infected: Email-Worm.Win32.NetSky.q skipped
H:\Sw\download\genexus\developer library\gxdl.zip ZIP: infected - 67 skipped
H:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.


Any help would be highly appreciated.

Thanks in advance
Gemon is offline