Tech Support Forum - View Single Post - Warning! Spyware detected on your computer!

mredraye82 · 06-14-2008, 05:07 PM

Avira AntiVir Personal
Report file date: Saturday, June 14, 2008 17:05

Scanning for 1331584 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: [removed]
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: X

Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 4/9/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 3/18/2008 16:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 2/7/2008 15:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 2/28/2008 15:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 2/21/2008 15:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 17:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 3/7/2008 20:08:58
ANTIVIR2.VDF : 7.0.4.195 2546176 Bytes 6/14/2008 21:16:20
ANTIVIR3.VDF : 7.0.4.196 2048 Bytes 6/14/2008 21:16:20
Engineversion : 8.1.0.55
AEVDF.DLL : 8.1.0.5 102772 Bytes 2/25/2008 16:58:21
AESCRIPT.DLL : 8.1.0.40 266618 Bytes 6/14/2008 21:18:34
AESCN.DLL : 8.1.0.21 119156 Bytes 6/14/2008 21:18:25
AERDL.DLL : 8.1.0.20 418165 Bytes 6/14/2008 21:18:20
AEPACK.DLL : 8.1.1.5 364918 Bytes 6/14/2008 21:18:00
AEOFFICE.DLL : 8.1.0.18 192890 Bytes 6/14/2008 21:17:45
AEHEUR.DLL : 8.1.0.30 1253750 Bytes 6/14/2008 21:17:38
AEHELP.DLL : 8.1.0.15 115063 Bytes 6/14/2008 21:16:52
AEGEN.DLL : 8.1.0.28 307572 Bytes 6/14/2008 21:16:46
AEEMU.DLL : 8.1.0.6 430451 Bytes 6/14/2008 21:16:36
AECORE.DLL : 8.1.0.31 168310 Bytes 6/14/2008 21:16:29
AVWINLL.DLL : 1.0.0.7 14593 Bytes 1/24/2008 00:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 2/18/2008 17:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 4/16/2007 20:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 1/24/2008 00:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 2/12/2008 15:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 2/28/2008 15:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 1/23/2008 00:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 1/24/2008 00:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 1/25/2008 19:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 3/10/2008 21:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 3/6/2008 19:02:11

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: Saturday, June 14, 2008 17:05

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'orbitnet.exe' - '1' Module(s) have been scanned
Scan process 'Dot1XCfg.exe' - '1' Module(s) have been scanned
Scan process 'BTSTAC~1.EXE' - '1' Module(s) have been scanned
Scan process 'orbitdm.exe' - '1' Module(s) have been scanned
Scan process 'FantasticFlameAgent.exe' - '1' Module(s) have been scanned
Scan process 'BTTray.exe' - '1' Module(s) have been scanned
Scan process 'rapimgr.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'wcescomm.exe' - '1' Module(s) have been scanned
Scan process 'psqltray.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'WVAMain.exe' - '1' Module(s) have been scanned
Scan process 'iFrmewrk.exe' - '1' Module(s) have been scanned
Scan process 'ZCfgSvc.exe' - '1' Module(s) have been scanned
Scan process 'WLSS.exe' - '1' Module(s) have been scanned
Scan process 'vsnp2uvc.exe' - '1' Module(s) have been scanned
Scan process 'KTP.EXE' - '1' Module(s) have been scanned
Scan process 'sm56hlpr.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'tlntsvr.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'RegSrvc.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'EvtEng.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'S24EvMon.exe' - '1' Module(s) have been scanned
Scan process 'btwdins.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
47 processes with 47 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '36' files ).

Starting the file scan:

Begin scan in 'C:\'
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Deckard\System Scanner\backup\DOCUME~1\misty\LOCALS~1\Temp\.tt7.tmp.vbs
[DETECTION] Contains detection pattern of the VBS script virus VBS/Agent.1002
[NOTE] The file was moved to '48c8412c.qua'!
C:\Program Files\Panda Security\ActiveScan 2.0\pskavs.dll
[DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
[NOTE] The file was moved to '48bf478c.qua'!
C:\System Volume Information\_restore{FC0B9B82-B9A8-4F0A-B75E-555C566D2C4B}\RP12\A0001408.vbs
[DETECTION] Contains detection pattern of the VBS script virus VBS/Agent.1002
[NOTE] The file was moved to '488447b9.qua'!
C:\System Volume Information\_restore{FC0B9B82-B9A8-4F0A-B75E-555C566D2C4B}\RP12\A0001414.dll
[DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738
[NOTE] The file was moved to '488447bf.qua'!
C:\System Volume Information\_restore{FC0B9B82-B9A8-4F0A-B75E-555C566D2C4B}\RP6\A0000071.exe
[DETECTION] Is the Trojan horse TR/Peed.JLG
[NOTE] The file was moved to '488447c5.qua'!

End of the scan: Saturday, June 14, 2008 17:40
Used time: 35:17 min

The scan has been done completely.

3700 Scanning directories
383388 Files were scanned
5 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
5 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
383383 Files not concerned
8305 Archives were scanned
2 Warnings
5 Notes

How do i delete files that are quarantined by this pr0g?

06-14-2008, 05:07 PM	#7 (permalink)
mredraye82 Registered User Join Date: Jun 2008 Posts: 30 OS: WinXP SP2	Re: Warning! Spyware detected on your computer! Avira AntiVir Personal Report file date: Saturday, June 14, 2008 17:05 Scanning for 1331584 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: [removed] Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Boot mode: Normally booted Username: SYSTEM Computer name: X Version information: BUILD.DAT : 8.1.00.295 16479 Bytes 4/9/2008 16:24:00 AVSCAN.EXE : 8.1.2.12 311553 Bytes 3/18/2008 16:02:56 AVSCAN.DLL : 8.1.1.0 53505 Bytes 2/7/2008 15:43:37 LUKE.DLL : 8.1.2.9 151809 Bytes 2/28/2008 15:41:23 LUKERES.DLL : 8.1.2.1 12033 Bytes 2/21/2008 15:28:40 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 17:33:34 ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 3/7/2008 20:08:58 ANTIVIR2.VDF : 7.0.4.195 2546176 Bytes 6/14/2008 21:16:20 ANTIVIR3.VDF : 7.0.4.196 2048 Bytes 6/14/2008 21:16:20 Engineversion : 8.1.0.55 AEVDF.DLL : 8.1.0.5 102772 Bytes 2/25/2008 16:58:21 AESCRIPT.DLL : 8.1.0.40 266618 Bytes 6/14/2008 21:18:34 AESCN.DLL : 8.1.0.21 119156 Bytes 6/14/2008 21:18:25 AERDL.DLL : 8.1.0.20 418165 Bytes 6/14/2008 21:18:20 AEPACK.DLL : 8.1.1.5 364918 Bytes 6/14/2008 21:18:00 AEOFFICE.DLL : 8.1.0.18 192890 Bytes 6/14/2008 21:17:45 AEHEUR.DLL : 8.1.0.30 1253750 Bytes 6/14/2008 21:17:38 AEHELP.DLL : 8.1.0.15 115063 Bytes 6/14/2008 21:16:52 AEGEN.DLL : 8.1.0.28 307572 Bytes 6/14/2008 21:16:46 AEEMU.DLL : 8.1.0.6 430451 Bytes 6/14/2008 21:16:36 AECORE.DLL : 8.1.0.31 168310 Bytes 6/14/2008 21:16:29 AVWINLL.DLL : 1.0.0.7 14593 Bytes 1/24/2008 00:07:53 AVPREF.DLL : 8.0.0.1 25857 Bytes 2/18/2008 17:37:50 AVREP.DLL : 7.0.0.1 155688 Bytes 4/16/2007 20:26:47 AVREG.DLL : 8.0.0.0 30977 Bytes 1/24/2008 00:07:49 AVARKT.DLL : 1.0.0.23 307457 Bytes 2/12/2008 15:29:23 AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 2/28/2008 15:31:31 SQLITE3.DLL : 3.3.17.1 339968 Bytes 1/23/2008 00:28:02 SMTPLIB.DLL : 1.2.0.19 28929 Bytes 1/24/2008 00:08:39 NETNT.DLL : 8.0.0.1 7937 Bytes 1/25/2008 19:05:10 RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 3/10/2008 21:37:25 RCTEXT.DLL : 8.0.32.0 86273 Bytes 3/6/2008 19:02:11 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: Saturday, June 14, 2008 17:05 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'orbitnet.exe' - '1' Module(s) have been scanned Scan process 'Dot1XCfg.exe' - '1' Module(s) have been scanned Scan process 'BTSTAC~1.EXE' - '1' Module(s) have been scanned Scan process 'orbitdm.exe' - '1' Module(s) have been scanned Scan process 'FantasticFlameAgent.exe' - '1' Module(s) have been scanned Scan process 'BTTray.exe' - '1' Module(s) have been scanned Scan process 'rapimgr.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'wcescomm.exe' - '1' Module(s) have been scanned Scan process 'psqltray.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'WVAMain.exe' - '1' Module(s) have been scanned Scan process 'iFrmewrk.exe' - '1' Module(s) have been scanned Scan process 'ZCfgSvc.exe' - '1' Module(s) have been scanned Scan process 'WLSS.exe' - '1' Module(s) have been scanned Scan process 'vsnp2uvc.exe' - '1' Module(s) have been scanned Scan process 'KTP.EXE' - '1' Module(s) have been scanned Scan process 'sm56hlpr.exe' - '1' Module(s) have been scanned Scan process 'RTHDCPL.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'tlntsvr.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'RegSrvc.exe' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'MDM.EXE' - '1' Module(s) have been scanned Scan process 'EvtEng.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'S24EvMon.exe' - '1' Module(s) have been scanned Scan process 'btwdins.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 47 processes with 47 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '36' files ). Starting the file scan: Begin scan in 'C:\' C:\hiberfil.sys [WARNING] The file could not be opened! C:\pagefile.sys [WARNING] The file could not be opened! C:\Deckard\System Scanner\backup\DOCUME~1\misty\LOCALS~1\Temp\.tt7.tmp.vbs [DETECTION] Contains detection pattern of the VBS script virus VBS/Agent.1002 [NOTE] The file was moved to '48c8412c.qua'! C:\Program Files\Panda Security\ActiveScan 2.0\pskavs.dll [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738 [NOTE] The file was moved to '48bf478c.qua'! C:\System Volume Information\_restore{FC0B9B82-B9A8-4F0A-B75E-555C566D2C4B}\RP12\A0001408.vbs [DETECTION] Contains detection pattern of the VBS script virus VBS/Agent.1002 [NOTE] The file was moved to '488447b9.qua'! C:\System Volume Information\_restore{FC0B9B82-B9A8-4F0A-B75E-555C566D2C4B}\RP12\A0001414.dll [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738 [NOTE] The file was moved to '488447bf.qua'! C:\System Volume Information\_restore{FC0B9B82-B9A8-4F0A-B75E-555C566D2C4B}\RP6\A0000071.exe [DETECTION] Is the Trojan horse TR/Peed.JLG [NOTE] The file was moved to '488447c5.qua'! End of the scan: Saturday, June 14, 2008 17:40 Used time: 35:17 min The scan has been done completely. 3700 Scanning directories 383388 Files were scanned 5 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 5 files were moved to quarantine 0 files were renamed 2 Files cannot be scanned 383383 Files not concerned 8305 Archives were scanned 2 Warnings 5 Notes How do i delete files that are quarantined by this pr0g? Last edited by mredraye82; 06-14-2008 at 05:10 PM.