| KASPERSKY ONLINE SCANNER REPORT | |
|
Saturday, November 10, 2007 12:41:39 AM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 10/11/2007 Kaspersky Anti-Virus database records: 455857 |
|
| Scan Settings | |
| Scan using the following antivirus database | extended |
| Scan Archives | true |
| Scan Mail Bases | true |
| Scan Target | My Computer |
|
C:\ D:\ |
|
| Scan Statistics | |
| Total number of scanned objects | 44015 |
| Number of viruses found | 9 |
| Number of infected objects | 14 |
| Number of suspicious objects | 6 |
| Duration of the scan process | 00:58:45 |
| Infected Object Name | Virus Name | Last Action |
| C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log | Object is locked | skipped |
| C:\Documents and Settings\All Users\Application Data\McAfee.com\Agent\Logs\TaskScheduler\McTskshd002.log | Object is locked | skipped |
| C:\Documents and Settings\All Users\Application Data\McAfee.com\VSO\OASLogs\OAS.log | Object is locked | skipped |
| C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat | Object is locked | skipped |
| C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat | Object is locked | skipped |
| C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdBreak10.zip/hcwprn.exe | Suspicious: Password-protected-EXE | skipped |
| C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdBreak10.zip | ZIP: suspicious - 1 | skipped |
| C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdBreak3.zip/wbeInst$.exe | Suspicious: Password-protected-EXE | skipped |
| C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdBreak3.zip | ZIP: suspicious - 1 | skipped |
| C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde1.zip/winBE.tmp.exe | Suspicious: Password-protected-EXE | skipped |
| C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde1.zip | ZIP: suspicious - 1 | skipped |
| C:\Documents and Settings\Anthony D. Craun\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\cert8.db | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\history.dat | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\key3.db | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\parent.lock | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\search.sqlite | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\urlclassifier2.sqlite | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Cookies\INDEX.DAT | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\Cache\_CACHE_001_ | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\Cache\_CACHE_002_ | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\Cache\_CACHE_003_ | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Application Data\Mozilla\Firefox\Profiles\1p3wl75y.default\Cache\_CACHE_MAP_ | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\History\History.IE5\INDEX.DAT | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Temp\~DFB4AB.tmp | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Temp\~DFB853.tmp | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\Local Settings\Temporary Internet Files\Content.IE5\index.dat | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\ntuser.dat | Object is locked | skipped |
| C:\Documents and Settings\Anthony D. Craun\ntuser.dat.LOG | Object is locked | skipped |
| C:\Documents and Settings\Celeste L. Malia\Local Settings\Temp\hsperfdata_Celeste L. Malia\2460 | Object is locked | skipped |
| C:\Documents and Settings\LocalService\Cookies\INDEX.DAT | Object is locked | skipped |
| C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat | Object is locked | skipped |
| C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG | Object is locked | skipped |
| C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INDEX.DAT | Object is locked | skipped |
| C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\INDEX.DAT | Object is locked | skipped |
| C:\Documents and Settings\LocalService\ntuser.dat | Object is locked | skipped |
| C:\Documents and Settings\LocalService\ntuser.dat.LOG | Object is locked | skipped |
| C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat | Object is locked | skipped |
| C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG | Object is locked | skipped |
| C:\Documents and Settings\NetworkService\NTUSER.DAT | Object is locked | skipped |
| C:\Documents and Settings\NetworkService\ntuser.dat.LOG | Object is locked | skipped |
| C:\Program Files\E404 Helper\e404.v1.dll | Infected: not-a-virus:AdWare.Win32.BHO.je | skipped |
| C:\Program Files\Grisoft\AVG7\avg7log.log | Object is locked | skipped |
| C:\Program Files\Grisoft\AVG7\avg7log.log.lck | Object is locked | skipped |
| C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\bvgevqai\bvgevqai2.exe.vir | Infected: not-a-virus:FraudTool.Win32.UltimateDefender.v | skipped |
| C:\qoobox\Quarantine\C\WINDOWS\SYSTEM32\drvcug.dll.vir | Infected: Trojan.Win32.Dialer.qn | skipped |
| C:\System Volume Information\MountPointManagerRemoteDatabase | Object is locked | skipped |
| C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP2\A0000005.exe | Infected: not-a-virus:FraudTool.Win32.UltimateDefender.v | skipped |
| C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP2\A0000012.dll | Infected: Trojan.Win32.Dialer.qn | skipped |
| C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP2\change.log | Object is locked | skipped |
| C:\temp\ocli.exe/data0002 | Infected: Trojan-Downloader.Win32.Small.buy | skipped |
| C:\temp\ocli.exe/data0003/data0002 | Infected: not-a-virus:AdWare.Win32.TTC.a | skipped |
| C:\temp\ocli.exe/data0003 | Infected: not-a-virus:AdWare.Win32.TTC.a | skipped |
| C:\temp\ocli.exe/data0004 | Infected: Trojan-Downloader.Win32.Small.gll | skipped |
| C:\temp\ocli.exe | NSIS: infected - 4 | skipped |
| C:\WINDOWS\acdt-pid72.exe/data0004 | Infected: Trojan-Clicker.Win32.Small.jf | skipped |
| C:\WINDOWS\acdt-pid72.exe | NSIS: infected - 1 | skipped |
| C:\WINDOWS\Debug\PASSWD.LOG | Object is locked | skipped |
| C:\WINDOWS\Q2VsZXN0ZSBMLiBNYWxpYQ\kZpPtrhXtm1gM21hsqUDsk.vbs | Object is locked | skipped |
| C:\WINDOWS\SchedLgU.Txt | Object is locked | skipped |
| C:\WINDOWS\SoftwareDistribution\EventCache\{A0360915-4F95-4D2B-8E63-F37BD8D67CA8}.bin | Object is locked | skipped |
| C:\WINDOWS\SoftwareDistribution\ReportingEvents.log | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CatRoot2\edb.log | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CatRoot2\tmp.edb | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\Internet.evt | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SAM | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SECURITY | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\H323LOG.TXT | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\toepllbd.dll | Infected: not-a-virus:AdWare.Win32.SecToolBar.h | skipped |
| C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.MAP | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING.VER | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING1.MAP | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING2.MAP | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.MAP | Object is locked | skipped |
| C:\WINDOWS\SYSTEM32\yokoypsh.dll | Infected: not-a-virus:AdWare.Win32.SecToolBar.h | skipped |
| C:\WINDOWS\WindowsUpdate.log | Object is locked | skipped |
| Scan process completed. | ||