C:\WINNT\system32\07B81EF572.sys doesn't exist on my computer, i searched for it, and showed hidden files, still nothing.
Deleted C:\Program Files\Zvsrul
Here's the WebScanner Report:
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, August 11, 2006 9:39:26 AM
Operating System: Microsoft Windows 2000 Professional, Service Pack 4 (Build 2195)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 11/08/2006
Kaspersky Anti-Virus database records: 214005
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
Scan Statistics:
Total number of scanned objects: 105931
Number of viruses found: 17
Number of infected objects: 47 / 0
Number of suspicious objects: 0
Duration of the scan process: 03:27:20
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP0.bin Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP0.dll Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP0.exe Infected: Trojan-Dropper.Win32.Agent.bv skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP1.bin Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP1.dll Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP1.exe Infected: Trojan-Dropper.Win32.Agent.bv skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP2.bin Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP2.dll Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP2.exe Infected: Trojan-Dropper.Win32.Agent.bv skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP3.bin Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP3.dll Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP3.exe Infected: Trojan-Dropper.Win32.Agent.bv skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP4.bin Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP4.dll Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP4.exe Infected: Trojan-Dropper.Win32.Agent.bv skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP5.bin Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP5.dll Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP5.exe Infected: Trojan-Dropper.Win32.Agent.bv skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP6.bin Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP6.dll Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP6.exe Infected: Trojan-Dropper.Win32.Agent.bv skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP7.bin Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP7.dll Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP8.bin Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\APTemp\AP8.dll Infected: Trojan.Win32.StartPage.is skipped
C:\Documents and Settings\mangemeer\Application Data\Mozilla\Firefox\Profiles\default.wmp\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\mangemeer\Application Data\Mozilla\Firefox\Profiles\default.wmp\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\mangemeer\Application Data\Mozilla\Firefox\Profiles\default.wmp\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\mangemeer\Application Data\Mozilla\Firefox\Profiles\default.wmp\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\mangemeer\Application Data\Mozilla\Firefox\Profiles\default.wmp\history.dat Object is locked skipped
C:\Documents and Settings\mangemeer\Application Data\Mozilla\Firefox\Profiles\default.wmp\parent.lock Object is locked skipped
C:\Documents and Settings\mangemeer\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\mangemeer\Desktop\Desktop\iMeshV4.exe/WISE0019.BIN Infected: not-a-virus:Server-Proxy.Win32.MarketScore.f skipped
C:\Documents and Settings\mangemeer\Desktop\Desktop\iMeshV4.exe/WISE0026.BIN Infected: not-a-virus:AdWare.Win32.MyWay.k skipped
C:\Documents and Settings\mangemeer\Desktop\Desktop\iMeshV4.exe/WISE0027.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet.d skipped
C:\Documents and Settings\mangemeer\Desktop\Desktop\iMeshV4.exe/WISE0029.BIN Infected: not-a-virus:AdWare.Win32.Gator.4104 skipped
C:\Documents and Settings\mangemeer\Desktop\Desktop\iMeshV4.exe WiseSFX: infected - 4 skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\ApplicationHistory\hpqgalry.exe.cf8dd223.ini.inuse Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\Identities\{5419AD30-EEE7-4A6C-A932-42FE8A92778A}\Microsoft\Outlook Express\Deleted Items.dbx/[From FlagStar <aw-survey@flagstar.com>][Date Fri, 04 Aug 2006 06:19:55 -0400]/UNNAMED/UNNAMED/html Infected: Trojan-Spy.HTML.Fraud.l skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\Identities\{5419AD30-EEE7-4A6C-A932-42FE8A92778A}\Microsoft\Outlook Express\Deleted Items.dbx/[From FlagStar <aw-survey@flagstar.com>][Date Fri, 04 Aug 2006 06:19:55 -0400]/UNNAMED/UNNAMED Infected: Trojan-Spy.HTML.Fraud.l skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\Identities\{5419AD30-EEE7-4A6C-A932-42FE8A92778A}\Microsoft\Outlook Express\Deleted Items.dbx/[From FlagStar <aw-survey@flagstar.com>][Date Fri, 04 Aug 2006 06:19:55 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Fraud.l skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\Identities\{5419AD30-EEE7-4A6C-A932-42FE8A92778A}\Microsoft\Outlook Express\Deleted Items.dbx Mail MS Outlook 5: infected - 3 skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Temp\~DF6BFD.tmp Object is locked skipped
C:\Documents and Settings\mangemeer\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\mangemeer\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\mangemeer\ntuser.dat.LOG Object is locked skipped
C:\Media\sys\system\config\Firewall.bat Infected: Trojan.BAT.KillAV.aj skipped
C:\Media\sys\system\config\WinMedia.exe Infected: not-a-virus:Server-FTP.Win32.Serv-U.5000 skipped
C:\Program Files\MSN Messenger\riched20.dll Infected: not-a-virus:AdWare.Win32.MyWebSearch.d skipped
C:\RECYCLER\S-1-5-21-1757981266-113007714-1343024091-1001\Dc14\AudioBodyReal.exe Infected: Trojan-Downloader.Win32.Swizzor.dt skipped
C:\RECYCLER\S-1-5-21-1757981266-113007714-1343024091-1001\Dc15.exe Infected: not-a-virus:AdWare.Win32.MyWebSearch skipped
C:\RECYCLER\S-1-5-21-1757981266-113007714-1343024091-1001\Dc6\INTRA DELETE.dll Infected: not-a-virus:AdWare.Win32.Lop skipped
C:\RECYCLER\S-1-5-21-1757981266-113007714-1343024091-1001\Dc6\Warn active.dll Infected: not-a-virus:AdWare.Win32.Lop skipped
C:\WINNT\Cheats24.org[cheats24-org,de,1].exe Infected: not-a-virus:Porn-Dialer.Win32.Star skipped
C:\WINNT\CSC\00000001 Object is locked skipped
C:\WINNT\Debug\ipsecpa.log Object is locked skipped
C:\WINNT\Debug\oakley.log Object is locked skipped
C:\WINNT\Debug\PASSWD.LOG Object is locked skipped
C:\WINNT\SchedLgU.Txt Object is locked skipped
C:\WINNT\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINNT\Sti_Trace.log Object is locked skipped
C:\WINNT\system32\config\ACEEvent.evt Object is locked skipped
C:\WINNT\system32\config\AppEvent.Evt Object is locked skipped
C:\WINNT\system32\config\default Object is locked skipped
C:\WINNT\system32\config\default.LOG Object is locked skipped
C:\WINNT\system32\config\SAM Object is locked skipped
C:\WINNT\system32\config\SAM.LOG Object is locked skipped
C:\WINNT\system32\config\SecEvent.Evt Object is locked skipped
C:\WINNT\system32\config\SECURITY Object is locked skipped
C:\WINNT\system32\config\SECURITY.LOG Object is locked skipped
C:\WINNT\system32\config\software Object is locked skipped
C:\WINNT\system32\config\software.LOG Object is locked skipped
C:\WINNT\system32\config\SysEvent.Evt Object is locked skipped
C:\WINNT\system32\config\system Object is locked skipped
C:\WINNT\system32\config\SYSTEM.ALT Object is locked skipped
C:\WINNT\system32\Perflib_Perfdata_440.dat Object is locked skipped
C:\WINNT\system32\rmtcfg\files\copy\rmtcfg.exe Infected: not-a-virus:Server-FTP.Win32.Serv-U.25.d skipped
C:\WINNT\system32\rmtcfg\files\mdll.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.603 skipped
C:\WINNT\system32\rmtcfg\files\randoms.mrc Infected: Backdoor.IRC.Cloner skipped
C:\WINNT\system32\rmtcfg\files\scanrand2.mrc Infected: Backdoor.IRC.Cloner skipped
C:\WINNT\system32\rmtcfg\rmtcfg.exe Infected: not-a-virus:Server-FTP.Win32.Serv-U.25.d skipped
C:\WINNT\system32\wbem\Repository\CIM.REP Object is locked skipped
C:\WINNT\WindowsUpdate.log Object is locked skipped
Scan process completed.