KASPERSKY ONLINE SCANNER REPORT
Wednesday, April 02, 2008 6:31:37 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 1/04/2008
Kaspersky Anti-Virus database records: 676500
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
A:\
C:\
D:\
E:\
G:\
H:\
Scan Statistics
Total number of scanned objects 396547
Number of viruses found 18
Number of infected objects 54
Number of suspicious objects 0
Duration of the scan process 12:09:31

Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\109C0000\57FEB2B9.VBN Infected: Backdoor.Win32.Xhaker.b skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F00000\57F07E8B.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F00001\57F08C47.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F00002\57F09A57.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F00003\57F0A867.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F00004\57F0B674.VBN Infected: Backdoor.Win32.Xhaker.b skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F0000B\57F3284C.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F0000C\57F32862.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F0000D\57F32877.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F0000E\57F3288B.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F00011\57F329DF.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F00012\57F329F4.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F00013\57F32A0A.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11F00014\57F32A20.VBN Infected: Backdoor.Win32.VB.bnx skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\17440000\57675A5A.VBN Infected: Backdoor.Win32.Xhaker.b skipped
C:\Documents and Settings\All Users\Application Data\VMware\vmnetdhcp.leases Object is locked skipped
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp Object is locked skipped
C:\Documents and Settings\All Users\DRM\drmstore.hds Object is locked skipped
C:\Documents and Settings\Cory\Application Data\Ideazon\ZEngine\data\mods\IDeazon.ldb Object is locked skipped
C:\Documents and Settings\Cory\Application Data\Ideazon\ZEngine\data\mods\IDeazon.zbd Object is locked skipped
C:\Documents and Settings\Cory\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Ardamax.Keylogger.v2.85.rar/setup_akl.exe/stream/data0005 Infected: not-a-virus:Monitor.Win32.Ardamax.ac skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Ardamax.Keylogger.v2.85.rar/setup_akl.exe/stream/data0006 Infected: not-a-virus:Monitor.Win32.Ardamax.s skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Ardamax.Keylogger.v2.85.rar/setup_akl.exe/stream/data0007 Infected: not-a-virus:Monitor.Win32.Ardamax.o skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Ardamax.Keylogger.v2.85.rar/setup_akl.exe/stream/data0008 Infected: not-a-virus:Monitor.Win32.Ardamax.r skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Ardamax.Keylogger.v2.85.rar/setup_akl.exe/stream/data0009 Infected: Trojan-Spy.Win32.Ardamax.n skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Ardamax.Keylogger.v2.85.rar/setup_akl.exe/stream/data0010 Infected: not-a-virus:Monitor.Win32.Ardamax.w skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Ardamax.Keylogger.v2.85.rar/setup_akl.exe/stream Infected: not-a-virus:Monitor.Win32.Ardamax.w skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Ardamax.Keylogger.v2.85.rar/setup_akl.exe Infected: not-a-virus:Monitor.Win32.Ardamax.w skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Ardamax.Keylogger.v2.85.rar RAR: infected - 8 skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Perfect_keylogger.rar/Perfect keylogger/i_bpk2003.exe/bpk.exe Infected: not-a-virus:Monitor.Win32.Perflogger.ad skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Perfect_keylogger.rar/Perfect keylogger/i_bpk2003.exe/bpkun.exe Infected: not-a-virus:Monitor.Win32.Perflogger.an skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Perfect_keylogger.rar/Perfect keylogger/i_bpk2003.exe/bpkvw.exe Infected: not-a-virus:Monitor.Win32.Perflogger.bx skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Perfect_keylogger.rar/Perfect keylogger/i_bpk2003.exe/Setup.exe Infected: not-a-virus:Monitor.Win32.Perflogger.bx skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Perfect_keylogger.rar/Perfect keylogger/i_bpk2003.exe/bpkhk.dll Infected: not-a-virus:Monitor.Win32.Perflogger.163 skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Perfect_keylogger.rar/Perfect keylogger/i_bpk2003.exe/bpkr.exe Infected: not-a-virus:Monitor.Win32.Perflogger.bx skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Perfect_keylogger.rar/Perfect keylogger/i_bpk2003.exe/bpkwb.dll Infected: not-a-virus:Monitor.Win32.Perflogger.ab skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Perfect_keylogger.rar/Perfect keylogger/i_bpk2003.exe Infected: not-a-virus:Monitor.Win32.Perflogger.ab skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Perfect_keylogger.rar RAR: infected - 8 skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Powered_Klgr_2.2.rar/Powered Keylogger 2.2.1.1920/powered_keylogger.exe/data0001 Infected: not-a-virus:Monitor.Win32.PowerLogger.220 skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Powered_Klgr_2.2.rar/Powered Keylogger 2.2.1.1920/powered_keylogger.exe/data0005 Infected: not-a-virus:Monitor.Win32.PowerLogger.220 skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Powered_Klgr_2.2.rar/Powered Keylogger 2.2.1.1920/powered_keylogger.exe/data0006 Infected: not-a-virus:Monitor.Win32.PowerLogger.220 skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Powered_Klgr_2.2.rar/Powered Keylogger 2.2.1.1920/powered_keylogger.exe Infected: not-a-virus:Monitor.Win32.PowerLogger.220 skipped
C:\Documents and Settings\Cory\Desktop\Downloads\Powered_Klgr_2.2.rar RAR: infected - 4 skipped
C:\Documents and Settings\Cory\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Cory\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Cory\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Cory\Local Settings\Temp\Free Download Manager\tic185.tmp Object is locked skipped
C:\Documents and Settings\Cory\Local Settings\Temp\JETA123.tmp Object is locked skipped
C:\Documents and Settings\Cory\Local Settings\Temp\vmware-Cory\vmware-vix-Cory-3788.log Object is locked skipped
C:\Documents and Settings\Cory\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Cory\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Cory\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LogMeInRemoteUser\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LogMeInRemoteUser\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Zune\ZuneNSSStore.sdf Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\TEMP\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TEMP\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TEMP\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\TEMP\ntuser.dat.LOG Object is locked skipped
C:\Downloads\Software\WoW-BurningCrusade-enUS-Installer-downloader.exe Infected: Trojan-PSW.Win32.WOW.ars skipped
C:\ircd\bewareircd-win32.zip/bircd.exe Infected: not-a-virus:Client-IRC.Win32.Delf.a skipped
C:\ircd\bewareircd-win32.zip ZIP: infected - 1 skipped
C:\ircd\bircd.exe Infected: not-a-virus:Client-IRC.Win32.Delf.a skipped
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\logs\sw_ae-20080331-214555.log Object is locked skipped
C:\Program Files\Apache Group\Apache2\logs\access.log Object is locked skipped
C:\Program Files\Apache Group\Apache2\logs\error.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBConfig.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDebug.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDetect.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBNotify.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBRefr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg2.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetDev.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetLoc.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetUsr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMNot.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMReg.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMRSt.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStHash.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStMSI.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBValid.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPPolicy.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStart.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStop.log Object is locked skipped
C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.63 skipped
C:\Program Files\NettalkIRCD\NettalkIRCD.ndb Object is locked skipped
C:\Program Files\RealVNC\VNC4\wm_hooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
C:\Program Files\Symantec AntiVirus\SAVRT\0357NAV~.TMP Object is locked skipped
C:\Program Files\Symantec AntiVirus\SAVRT\0941NAV~.TMP Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{9C093F73-C629-4EC7-91A6-6D33BFCED073}\RP275\A0075142.exe Object is locked skipped
C:\System Volume Information\_restore{9C093F73-C629-4EC7-91A6-6D33BFCED073}\RP275\A0075178.exe Object is locked skipped
C:\System Volume Information\_restore{9C093F73-C629-4EC7-91A6-6D33BFCED073}\RP275\A0075241.exe Object is locked skipped
C:\System Volume Information\_restore{9C093F73-C629-4EC7-91A6-6D33BFCED073}\RP275\A0075242.exe Object is locked skipped
C:\System Volume Information\_restore{9C093F73-C629-4EC7-91A6-6D33BFCED073}\RP326\A0100403.exe Object is locked skipped
C:\System Volume Information\_restore{9C093F73-C629-4EC7-91A6-6D33BFCED073}\RP327\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{D65425CF-188D-4683-87AD-7519F92C32BB}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_4e0.dat Object is locked skipped
C:\WINDOWS\Temp\vmware-vmount.log Object is locked skipped
C:\WINDOWS\Temp\~DF82F3.tmp Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
G:\Downloads\RealVNC.rar/RealVNC/vnc-E4_2_9-x86_win32.exe/file3 Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
G:\Downloads\RealVNC.rar/RealVNC/vnc-E4_2_9-x86_win32.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
G:\Downloads\RealVNC.rar RAR: infected - 2 skipped
G:\Downloads\RealVNC\RealVNC\vnc-E4_2_9-x86_win32.exe/file3 Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
G:\Downloads\RealVNC\RealVNC\vnc-E4_2_9-x86_win32.exe Inno: infected - 1 skipped
G:\Downloads\mirc63.exe/stream/data0001/stream/data0014 Infected: not-a-virus:Client-IRC.Win32.mIRC.63 skipped
G:\Downloads\mirc63.exe/stream/data0001/stream Infected: not-a-virus:Client-IRC.Win32.mIRC.63 skipped
G:\Downloads\mirc63.exe/stream/data0001 Infected: not-a-virus:Client-IRC.Win32.mIRC.63 skipped
G:\Downloads\mirc63.exe/stream Infected: not-a-virus:Client-IRC.Win32.mIRC.63 skipped
G:\Downloads\mirc63.exe NSIS: infected - 4 skipped
G:\Downloads\Keylogger\Powered Keylogger 2.2.1.1920\powered_keylogger.exe Object is locked skipped
G:\System Volume Information\_restore{9C093F73-C629-4EC7-91A6-6D33BFCED073}\RP327\change.log Object is locked skipped
G:\System Volume Information\_restore{9C093F73-C629-4EC7-91A6-6D33BFCED073}\RP327\A0100419.exe Object is locked skipped
Scan process completed.