Tech Support Forum - View Single Post

goff47 · 07-05-2007, 12:53 PM

here is the kaspersky scan result

Thursday, July 05, 2007 7:52:24 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 5/07/2007
Kaspersky Anti-Virus database records: 358727

Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\

Scan Statistics
Total number of scanned objects 75698
Number of viruses found 33
Number of infected objects 100 / 0
Number of suspicious objects 8
Duration of the scan process 01:12:32

Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Application Data\Avg7\Log\emc.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistryCleaner.zip/soproc.exe Suspicious: Password-protected-EXE skipped

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistryCleaner.zip ZIP: suspicious - 1 skipped

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\SmitfraudC.zip/winstall.exe Suspicious: Password-protected-EXE skipped

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\SmitfraudC.zip ZIP: suspicious - 1 skipped

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoActiveXAccess1.zip/uninst.exe Suspicious: Password-protected-EXE skipped

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoActiveXAccess1.zip ZIP: suspicious - 1 skipped

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoActiveXObject.zip/imsmain.exe Suspicious: Password-protected-EXE skipped

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoActiveXObject.zip ZIP: suspicious - 1 skipped

C:\Documents and Settings\Geoff\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\Geoff\Desktop\dads\freeripmp3.exe/data0036 Infected: not-a-virus:AdTool.Win32.MyWebSearch.ak skipped

C:\Documents and Settings\Geoff\Desktop\dads\freeripmp3.exe Inno: infected - 1 skipped

C:\Documents and Settings\Geoff\Desktop\dads\Setup.exe Infected: not-a-virus:AdWare.Win32.180Solutions.as skipped

C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\CursorManiaSetup2.2.60.11-2.exe/mwsSetup.CommonCodebase.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped

C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\CursorManiaSetup2.2.60.11-2.exe CAB: infected - 1 skipped

C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\setup.exe/stream/data0006 Infected: Trojan-Downloader.Win32.Zlob.bvt skipped

C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\setup.exe/stream Infected: Trojan-Downloader.Win32.Zlob.bvt skipped

C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\setup.exe NSIS: infected - 2 skipped

C:\Documents and Settings\Geoff\Desktop\Spyware tools\SmitfraudFix\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Geoff\Local Settings\Application Data\Identities\{DFF16927-88E6-4EAA-A097-460B7E65289B}\Microsoft\Outlook Express\Deleted Items.dbx Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Application Data\Identities\{DFF16927-88E6-4EAA-A097-460B7E65289B}\Microsoft\Outlook Express\Folders.dbx Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Application Data\Identities\{DFF16927-88E6-4EAA-A097-460B7E65289B}\Microsoft\Outlook Express\Offline.dbx Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Application Data\Identities\{DFF16927-88E6-4EAA-A097-460B7E65289B}\Microsoft\Outlook Express\Sent [Mailinfo].dbx Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\History\History.IE5\MSHist012007070520070706\index.dat Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Temp\~DF410B.tmp Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Temp\~DF4667.tmp Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Temp\~DF4678.tmp Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped

C:\Documents and Settings\Geoff\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Geoff\My Documents\Downloaded Program Updates\BSINSTALL.exe/WISE0024.BIN Infected: not-a-virus:AdTool.Win32.WhenU.a skipped

C:\Documents and Settings\Geoff\My Documents\Downloaded Program Updates\BSINSTALL.exe WiseSFX: infected - 1 skipped

C:\Documents and Settings\Geoff\My Documents\Downloaded Program Updates\BSINSTALL.exe WiseSFX Dropper: infected - 1 skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe/WISE0044.BIN/stream/data0005 Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe/WISE0044.BIN/stream Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe/WISE0044.BIN Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe WiseSFX: infected - 3 skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe WiseSFX Dropper: infected - 3 skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\SmitfraudFix\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\SmitfraudFix.zip ZIP: infected - 1 skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe/data0018/data0002 Infected: not-a-virus:AdWare.Win32.180Solutions.ay skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe/data0018/data0003 Infected: not-a-virus:AdWare.Win32.180Solutions.ay skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe/data0018/data0004 Infected: not-a-virus:AdWare.Win32.HotBar.bi skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe/data0018 Infected: not-a-virus:AdWare.Win32.HotBar.bi skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe NSIS: infected - 4 skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\tetris_extreme.exe/setup.zip/4 Infected: not-a-virus:AdWare.Win32.Chiem.c skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\tetris_extreme.exe/setup.zip Infected: not-a-virus:AdWare.Win32.Chiem.c skipped

C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\tetris_extreme.exe SEA: infected - 2 skipped

C:\Documents and Settings\Geoff\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\Geoff\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Georgia\Local Settings\Temp\VVSNInst.exe Infected: not-a-virus:AdTool.Win32.WhenU.a skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\Peter\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-275eaf6f-1e9c7469.class Infected: Trojan-Downloader.Java.OpenStream.y skipped

C:\Documents and Settings\Peter\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-484623a-57328699.class Infected: Trojan-Downloader.Java.OpenStream.y skipped

C:\Documents and Settings\Peter\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-52d8b673-6f6c0f04.class Infected: Trojan-Downloader.Java.OpenStream.y skipped

C:\Documents and Settings\Peter\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-5a8a5bd2-2f9b911b.class Infected: Trojan-Downloader.Java.OpenStream.y skipped

C:\Documents and Settings\Peter.DDTW3V1J\Local Settings\Temp\hsperfdata_Peter\2508 Object is locked skipped

C:\Program Files\DAP\History\Geoff\_lasthist.dat Object is locked skipped

C:\Program Files\DAP\History\Georgia\20060924.dat Object is locked skipped

C:\Program Files\DAP\History\Georgia\_lasthist.dat Object is locked skipped

C:\Program Files\DAP\History\Peter\20070401.dat Object is locked skipped

C:\Program Files\DAP\History\Peter\20070603.dat Object is locked skipped

C:\Program Files\DAP\History\Peter\20070617.dat Object is locked skipped

C:\Program Files\DAP\History\Peter\_lasthist.dat Object is locked skipped

C:\Program Files\DAP\Log\DAP_REPORT.LOG Object is locked skipped

C:\Program Files\DAP\Offers\VA_11_DAPSO.1187_1.exe Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP402\A0206462.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP402\A0206464.scr Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0219741.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0219743.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0219767.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0219769.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0220773.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0220775.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0221766.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0221768.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0222767.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0222769.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223767.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223769.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223778.dll Object is locked skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223811.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223813.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224819.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224821.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224822.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224823.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224824.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224825.scr Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224833.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.at skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224835.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224836.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224837.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.l skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224838.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.af skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224839.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224840.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224841.SCR Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224842.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224843.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224844.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224845.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.an skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224846.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.aq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224847.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224849.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224850.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ax skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224852.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224854.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224855.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224856.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ad skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224858.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224859.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224860.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224861.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.i skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224958.dll Infected: not-a-virus:AdWare.Win32.Chiem.a skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224989.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224990.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224993.exe Infected: not-a-virus:FraudTool.Win32.SpyLocked.d skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224997.dll Infected: not-a-virus:AdWare.Win32.Agent.cu skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224998.exe Infected: Trojan-Downloader.Win32.Zlob.awv skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224999.exe Infected: Trojan-Dropper.Win32.Agent.bkq skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0225000.exe Infected: Trojan-Downloader.Win32.Zlob.bov skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0225001.exe Infected: Trojan-Downloader.Win32.Zlob.bvp skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0225005.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0225006.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0226005.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP405\A0229187.dll Object is locked skipped

C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP407\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\Internet Logs\DDTW3V1J.ldb Object is locked skipped

C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped

C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped

C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped

C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\DEFAULT Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SYSTEM Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\mi1.exe/data0009/stream/data0006 Infected: not-a-virus:AdWare.Win32.Softomate.e skipped

C:\WINDOWS\system32\mi1.exe/data0009/stream Infected: not-a-virus:AdWare.Win32.Softomate.e skipped

C:\WINDOWS\system32\mi1.exe/data0009 Infected: not-a-virus:AdWare.Win32.Softomate.e skipped

C:\WINDOWS\system32\mi1.exe NSIS: infected - 3 skipped

C:\WINDOWS\system32\mi2.exe/WISE0044.BIN/stream/data0005 Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped

C:\WINDOWS\system32\mi2.exe/WISE0044.BIN/stream Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped

C:\WINDOWS\system32\mi2.exe/WISE0044.BIN Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped

C:\WINDOWS\system32\mi2.exe WiseSFX: infected - 3 skipped

C:\WINDOWS\system32\mi2.exe WiseSFX Dropper: infected - 3 skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\Temp\ZLT01e15.TMP Object is locked skipped

C:\WINDOWS\Temp\ZLT01e18.TMP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

07-05-2007, 12:53 PM	#10 (permalink)
goff47 Registered User Join Date: Jul 2007 Posts: 15 OS: windows xp	Re: hijack log here is the kaspersky scan result Thursday, July 05, 2007 7:52:24 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 5/07/2007 Kaspersky Anti-Virus database records: 358727 Scan Settings Scan using the following antivirus database extended Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ E:\ F:\ G:\ H:\ I:\ Scan Statistics Total number of scanned objects 75698 Number of viruses found 33 Number of infected objects 100 / 0 Number of suspicious objects 8 Duration of the scan process 01:12:32 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\Avg7\Log\emc.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistryCleaner.zip/soproc.exe Suspicious: Password-protected-EXE skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\RegistryCleaner.zip ZIP: suspicious - 1 skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\SmitfraudC.zip/winstall.exe Suspicious: Password-protected-EXE skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\SmitfraudC.zip ZIP: suspicious - 1 skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoActiveXAccess1.zip/uninst.exe Suspicious: Password-protected-EXE skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoActiveXAccess1.zip ZIP: suspicious - 1 skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoActiveXObject.zip/imsmain.exe Suspicious: Password-protected-EXE skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoActiveXObject.zip ZIP: suspicious - 1 skipped C:\Documents and Settings\Geoff\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Geoff\Desktop\dads\freeripmp3.exe/data0036 Infected: not-a-virus:AdTool.Win32.MyWebSearch.ak skipped C:\Documents and Settings\Geoff\Desktop\dads\freeripmp3.exe Inno: infected - 1 skipped C:\Documents and Settings\Geoff\Desktop\dads\Setup.exe Infected: not-a-virus:AdWare.Win32.180Solutions.as skipped C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\CursorManiaSetup2.2.60.11-2.exe/mwsSetup.CommonCodebase.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\CursorManiaSetup2.2.60.11-2.exe CAB: infected - 1 skipped C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\setup.exe/stream/data0006 Infected: Trojan-Downloader.Win32.Zlob.bvt skipped C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\setup.exe/stream Infected: Trojan-Downloader.Win32.Zlob.bvt skipped C:\Documents and Settings\Geoff\Desktop\Peter\My Documents\My Completed Downloads\setup.exe NSIS: infected - 2 skipped C:\Documents and Settings\Geoff\Desktop\Spyware tools\SmitfraudFix\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Geoff\Local Settings\Application Data\Identities\{DFF16927-88E6-4EAA-A097-460B7E65289B}\Microsoft\Outlook Express\Deleted Items.dbx Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Application Data\Identities\{DFF16927-88E6-4EAA-A097-460B7E65289B}\Microsoft\Outlook Express\Folders.dbx Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Application Data\Identities\{DFF16927-88E6-4EAA-A097-460B7E65289B}\Microsoft\Outlook Express\Offline.dbx Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Application Data\Identities\{DFF16927-88E6-4EAA-A097-460B7E65289B}\Microsoft\Outlook Express\Sent [Mailinfo].dbx Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\History\History.IE5\MSHist012007070520070706\index.dat Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Temp\~DF410B.tmp Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Temp\~DF4667.tmp Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Temp\~DF4678.tmp Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Documents and Settings\Geoff\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Geoff\My Documents\Downloaded Program Updates\BSINSTALL.exe/WISE0024.BIN Infected: not-a-virus:AdTool.Win32.WhenU.a skipped C:\Documents and Settings\Geoff\My Documents\Downloaded Program Updates\BSINSTALL.exe WiseSFX: infected - 1 skipped C:\Documents and Settings\Geoff\My Documents\Downloaded Program Updates\BSINSTALL.exe WiseSFX Dropper: infected - 1 skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe/WISE0044.BIN/stream/data0005 Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe/WISE0044.BIN/stream Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe/WISE0044.BIN Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe WiseSFX: infected - 3 skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\iMeshV7int.exe WiseSFX Dropper: infected - 3 skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\SmitfraudFix\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\SmitfraudFix.zip ZIP: infected - 1 skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe/data0018/data0002 Infected: not-a-virus:AdWare.Win32.180Solutions.ay skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe/data0018/data0003 Infected: not-a-virus:AdWare.Win32.180Solutions.ay skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe/data0018/data0004 Infected: not-a-virus:AdWare.Win32.HotBar.bi skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe/data0018 Infected: not-a-virus:AdWare.Win32.HotBar.bi skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\spamblockerutility.exe NSIS: infected - 4 skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\tetris_extreme.exe/setup.zip/4 Infected: not-a-virus:AdWare.Win32.Chiem.c skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\tetris_extreme.exe/setup.zip Infected: not-a-virus:AdWare.Win32.Chiem.c skipped C:\Documents and Settings\Geoff\My Documents\My Completed Downloads\tetris_extreme.exe SEA: infected - 2 skipped C:\Documents and Settings\Geoff\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Geoff\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Georgia\Local Settings\Temp\VVSNInst.exe Infected: not-a-virus:AdTool.Win32.WhenU.a skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Peter\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-275eaf6f-1e9c7469.class Infected: Trojan-Downloader.Java.OpenStream.y skipped C:\Documents and Settings\Peter\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-484623a-57328699.class Infected: Trojan-Downloader.Java.OpenStream.y skipped C:\Documents and Settings\Peter\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-52d8b673-6f6c0f04.class Infected: Trojan-Downloader.Java.OpenStream.y skipped C:\Documents and Settings\Peter\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\omfg.class-5a8a5bd2-2f9b911b.class Infected: Trojan-Downloader.Java.OpenStream.y skipped C:\Documents and Settings\Peter.DDTW3V1J\Local Settings\Temp\hsperfdata_Peter\2508 Object is locked skipped C:\Program Files\DAP\History\Geoff\_lasthist.dat Object is locked skipped C:\Program Files\DAP\History\Georgia\20060924.dat Object is locked skipped C:\Program Files\DAP\History\Georgia\_lasthist.dat Object is locked skipped C:\Program Files\DAP\History\Peter\20070401.dat Object is locked skipped C:\Program Files\DAP\History\Peter\20070603.dat Object is locked skipped C:\Program Files\DAP\History\Peter\20070617.dat Object is locked skipped C:\Program Files\DAP\History\Peter\_lasthist.dat Object is locked skipped C:\Program Files\DAP\Log\DAP_REPORT.LOG Object is locked skipped C:\Program Files\DAP\Offers\VA_11_DAPSO.1187_1.exe Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP402\A0206462.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP402\A0206464.scr Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0219741.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0219743.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0219767.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0219769.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0220773.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0220775.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0221766.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0221768.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0222767.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0222769.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223767.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223769.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223778.dll Object is locked skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223811.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0223813.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224819.dll Infected: Trojan-Downloader.Win32.Zlob.btq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224821.exe Infected: Trojan-Downloader.Win32.Zlob.btj skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224822.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224823.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224824.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224825.scr Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224833.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.at skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224835.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224836.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224837.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.l skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224838.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.af skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224839.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224840.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224841.SCR Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224842.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224843.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224844.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224845.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.an skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224846.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.aq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224847.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224849.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224850.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ax skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224852.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224854.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224855.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224856.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ad skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224858.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224859.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224860.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224861.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.i skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224958.dll Infected: not-a-virus:AdWare.Win32.Chiem.a skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224989.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224990.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224993.exe Infected: not-a-virus:FraudTool.Win32.SpyLocked.d skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224997.dll Infected: not-a-virus:AdWare.Win32.Agent.cu skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224998.exe Infected: Trojan-Downloader.Win32.Zlob.awv skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0224999.exe Infected: Trojan-Dropper.Win32.Agent.bkq skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0225000.exe Infected: Trojan-Downloader.Win32.Zlob.bov skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0225001.exe Infected: Trojan-Downloader.Win32.Zlob.bvp skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0225005.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0225006.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP404\A0226005.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP405\A0229187.dll Object is locked skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP407\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Internet Logs\DDTW3V1J.ldb Object is locked skipped C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\DEFAULT Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SYSTEM Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\mi1.exe/data0009/stream/data0006 Infected: not-a-virus:AdWare.Win32.Softomate.e skipped C:\WINDOWS\system32\mi1.exe/data0009/stream Infected: not-a-virus:AdWare.Win32.Softomate.e skipped C:\WINDOWS\system32\mi1.exe/data0009 Infected: not-a-virus:AdWare.Win32.Softomate.e skipped C:\WINDOWS\system32\mi1.exe NSIS: infected - 3 skipped C:\WINDOWS\system32\mi2.exe/WISE0044.BIN/stream/data0005 Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped C:\WINDOWS\system32\mi2.exe/WISE0044.BIN/stream Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped C:\WINDOWS\system32\mi2.exe/WISE0044.BIN Infected: not-a-virus:AdWare.Win32.Softomate.aa skipped C:\WINDOWS\system32\mi2.exe WiseSFX: infected - 3 skipped C:\WINDOWS\system32\mi2.exe WiseSFX Dropper: infected - 3 skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Temp\ZLT01e15.TMP Object is locked skipped C:\WINDOWS\Temp\ZLT01e18.TMP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed.