Spyware / Malware / Virus Removal

[Resolved] Trojan horse Generic 13.BKQN removal

11 min read

Looking for the outcome? Ask AI

TLoATDaE Topic Starter

Post #1June 20, 2009, 12:53 AM UTC

Greetings!

Allow me start with the following info:
I'm running WinXP Pro Ver 2002, SP3 on a Compaq Presario A900 (A9C38CA) [No Floppy Drive available]
It came with Vista. I 'fixed' that (with help from a friend of mine). I still have the original Vista HD, as an emergency backup, and to test for hardware failure, but it is otherwise 'untouched'.

That being said, I am experiencing the following issues:
1) When I boot up, I will occasionally get just my desktop with no Icons or Start menu, and have to 'force' Explorer into action.
2) AVG Free detects the Trojan horse Generic 13.BKQN on file "C:\WINDOWS\System32\3361\Services.exe"
3) I get the following error message: "To help protect your computer, Windows has closed this program. Name: Userinit Logon Application
4) Additional error message: "The instruction at "0x008b020d" referred at memory "0x008b020d". The memory could not be "written" "

Performed the following actions to resolve the problem thus far.

A) Fetched the instructions "You might want to print these instructions out", and followed them as follows…
B ) Temporarily returned the Vista drive to verify that there are no Hardware issues, such as corrupted physical memory, then returned my XP drive
C) Downloaded and ran the ATF Cleaner as per instructions
D) Downloaded, installed and ran the Malwarebytes Anti-Malware as per instructions
E) Downloaded, installed and ran the Highjack This program as referenced in other threads

Logs as follows:

mbam-log-2009-06-19 (19-46-59).txt
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Malwarebytes' Anti-Malware 1.38
Database version: 2297
Windows 5.1.2600 Service Pack 3

6/19/2009 7:46:59 PM
mbam-log-2009-06-19 (19-46-59).txt

Scan type: Quick Scan
Objects scanned: 93799
Time elapsed: 13 minute(s), 21 second(s)

Memory Processes Infected: 2
Memory Modules Infected: 1
Registry Keys Infected: 6
Registry Values Infected: 18
Registry Data Items Infected: 5
Folders Infected: 2
Files Infected: 37

Memory Processes Infected:
C:\WINDOWS\system32\sopidkc.exe (Trojan.Downloader) -> Unloaded process successfully.
C:\Program Files\Manson\liser.exe (Trojan.Agent) -> Unloaded process successfully.

Memory Modules Infected:
c:\WINDOWS\system32\msncache.dll (Backdoor.Bot) -> Delete on reboot.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msncache (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sopidkc (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sopidkc (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sopidkc (Trojan.Downloader) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kell (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysldtray (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\BuildW (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\FirstInstallFlag (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\guid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\i (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mms (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\mso (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\udso (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\uid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Ulrn (Malware.Trace) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Update (Malware.Trace) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\UpdateNew (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\load (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\run (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\load (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\run (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\run (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Agent) -> Data: c:\progra~1\manson\liser.dll -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.bat\(default) (Hijacked.BatFile) -> Bad: (csfile) Good: (batfile) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.com\(default) (Hijacked.ComFile) -> Bad: (csfile) Good: (comfile) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.exe\(default) (Hijacked.exeFile) -> Bad: (csfile) Good: (exefile) -> Quarantined and deleted successfully.

Folders Infected:
C:\Program Files\Manson (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\3361 (Trojan.Downloader) -> Quarantined and deleted successfully.

Files Infected:
c:\WINDOWS\system32\msncache.dll (Backdoor.Bot) -> Delete on reboot.
C:\WINDOWS\system32\sopidkc.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\11.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\12.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\1E3.tmp (Trojann.Rlsloup) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\E.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\tpsaxyd.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\tpszxyd.sys (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\wtukd32.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\reader_s(2).exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\D.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\40.tmp (Trojan.Rlsloup) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\5.tmp (Trojan.Rlsloupa) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\7.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\A.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\reader_s.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Val\reader_s(2).exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\program files\Manson\liser.dll (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files\Manson\liser.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\3361\mlog (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\3361\services.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\comsa32.sys (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lsass.dll (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\3.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\4.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\6.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\8.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\9.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\B.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\C.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\F.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\ld10.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\FInstall.sys (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dncyool32.sys (Trojan.Backdoor) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\svchost.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winexec.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winres.dll (Trojan.Agent) -> Quarantined and deleted successfully.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
End Log

Hijack This log
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:03:40 PM, on 6/19/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
F3 - REG:win.ini: load=C:\WINDOWS\system32\msmyrrub.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [MOD] C:\Program Files\Microangelo\On Display\MODmgr.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Policies\Explorer\Run: [exec] C:\WINDOWS\system32\mslpvvsu.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1209354104458
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/inst…ctDetection.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1209354216942
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/inst…ctDetection.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://plugin.driveragent.com/files/driveragent.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ksrsr6ikruhjstjash353haaaa2hd80 - Unknown owner - C:\WINDOWS\ksrsr6ikruhjstjash353haaaa2hd81.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NetMeeting Remote Desktop Sharing (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: mser54waejsrahaetjs6ikaash80 - Unknown owner - C:\WINDOWS\mser54waejsrahaetjs6ikaash81.exe
O23 - Service: Windows Installer (MSIServer) - Unknown owner - (no file)
O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe
O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
O23 - Service: QoS RSVP (RSVP) - Unknown owner - C:\WINDOWS\system32\rsvp.exe
O23 - Service: SessionLauncher - Prolific Technology Inc. - (no file)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
O23 - Service: plasservice (ZeppelinService) - ParetoLogic Inc. - C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe

–
End of file - 9442 bytes
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Is this the point where I plead for help?

Thanks in advance!

Raktor

Post #2June 20, 2009, 1:09 AM UTC

[external image: Posted Image]

Hi TLoATDaE, welcome to the WTT Forums. My username is Raktor, and I would be glad to take a look at your log.
Please be advised, as I am still in training, all my replies to you will be checked for accuracy by one of our experts to ensure that I am giving you the best possible advise.
This may cause a delay, but I will do my best to keep it as short as possible.

I will be back to you shortly with instructions.

TLoATDaE

Post #3June 20, 2009, 2:26 AM UTC

Thanks for the Quick Response! A couple of new wrinkles to report though: AVG Free 8.5 detected the following Threat: Files Name: C:\System Volume Information\_restore{A6ECBAB-C750.4E97-A9C9-42A64C7F652}\RP419\A0060122.sys Threat Type: Trojan horse Clicker.ZXB And when I open my browser, I get the following error: Threat: jl.chura.pl/rc/ Threat Name: Exploit Java Script Obfuscation (type 604) Nothing else to report… it all seems to be spreading like a worm now. Other than that, well, it's slow going, with occasional threat warnings. Sorry for the additional info flood. Here's hoping for a nice, easy fix…

Raktor

Post #4June 20, 2009, 10:48 AM UTC

Hi TLoATDaE,

First, we need to check some files out.

Go to My Computer-> Tools-> Folder Options-> View tab:

Under the Hidden files and folders heading:
Select - Show hidden files and folders.
Uncheck- Hide protected operating system files (recommended) option.
Also, make sure there is no checkmark beside Hide file extensions for known file types.
Click OK. (Remember to Hide files and folders once done)

Please go to one of the below sites to scan the following files:
Jotti
Virus Total

Click on Browse, and upload the following file for analysis:
c:\windows\system32\userinit.exe
C:\WINDOWS\System32\reader_s.exe
c:\windows\system32\svchost.exe
c:\windows\system32\explorer.exe

Then click Submit. Allow the file to be scanned, and then please copy and paste the results here for me to see.
If it says already scanned – click "reanalyze now"
Please post the results in your next reply.

TLoATDaE

Post #5June 20, 2009, 4:22 PM UTC

Greeting again, Raktor!

Either both sites are down at the moment, or the virus is blocking access to them in both MSIE 6 and FireFox 3.0.1.1
Any other sites to choose from? I'll try those before I do anything else…

TLoATDaE

Post #6June 20, 2009, 5:07 PM UTC

Quick note: AVG has picked up "Trojan horse SHeur2.AKTT" on "C:\WINDOWS\System32\reader_s.exe" Sorry to be such a pest about this. I realize those two sites can get flooded on Saturday at around noon-ish…

Raktor

Post #7June 21, 2009, 2:37 AM UTC

Let's try a different avenue.

Please download gmer.zip from Gmer and save it to your desktop.

Right click on gmer.zip and select Extract All….
Click Next on seeing the Welcome to the Compressed (zipped) Folders Extraction Wizard.
Click on the Browse button. Click on Desktop. Then click OK.
Click Next. It will start extracting.
Once done, check (tick) the Show extracted files box and click Finish.

Double click on gmer.exe to run it. It will start running a scan. If it detects rootkit activity, you will receive a prompt to run a full scan. Click Yes.

When done, you may receive another notice. Click OK.
Click on Save … to save a log.
Copy and paste in Gmer.txt and click Save.
Close Gmer.

If you receive no notice, click on the Scan button.

It will start scanning again.
When done, click on Save … to save a log.
Copy and paste in Gmer.txt and click Save.
Close Gmer.

TLoATDaE

Post #8June 21, 2009, 11:43 AM UTC

OK Raktor, here's the log from the initial run of Gmer:

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

GMER 1.0.15.14972 - http://www.gmer.net
Rootkit scan 2009-06-21 07:36:32
Windows 5.1.2600 Service Pack 3

—- Devices - GMER 1.0.15 —-

Device \Driver\Tcpip \Device\Ip 89C1EA31

AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device \Driver\Tcpip \Device\Tcp 89C1EA31

AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device \Driver\Tcpip \Device\Udp 89C1EA31

AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device \Driver\Tcpip \Device\RawIp 89C1EA31

AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

—- Threads - GMER 1.0.15 —-

Thread System [4:800] 89C204B1
Thread System [4:804] 89C204B1
Thread System [4:808] 89C204B1
Thread System [4:812] 89C204B1
Thread System [4:816] 89C204B1

—- EOF - GMER 1.0.15 —-
=-=-=-=-=-=-=-=-=-=-=-=-=-=

So far, the two different attempts at running a Scan have crashed my machine before completion, so I post this in hopes it's helpful.

If I can get the scan to complete, I'll post that log as well, but I am not holding my breath

Raktor

Post #9June 21, 2009, 1:26 PM UTC

Try GMER again, but run it from safe mode.

——————

Please reboot your computer in Safe Mode by doing the following:

Restart your computer.
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually.
Instead of Windows loading as normal, a menu with options should appear.
Select the first option, to run Windows in Safe Mode, then press Enter.
Choose your usual account.

TLoATDaE

Post #10June 21, 2009, 6:34 PM UTC

Managed to get it to complete in Normal Mode before I saw your reply, and have the log here:

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

GMER 1.0.15.14972 - http://www.gmer.net
Rootkit scan 2009-06-21 14:27:02
Windows 5.1.2600 Service Pack 3

—- User code sections - GMER 1.0.15 —-

.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[192] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[192] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[192] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[192] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[192] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe[192] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\taskswitch.exe[216] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\taskswitch.exe[216] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\taskswitch.exe[216] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\taskswitch.exe[216] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\taskswitch.exe[216] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\taskswitch.exe[216] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Program Files\AVG\AVG8\avgcsrvx.exe[352] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\AVG\AVG8\avgcsrvx.exe[352] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\AVG\AVG8\avgcsrvx.exe[352] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\AVG\AVG8\avgcsrvx.exe[352] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\AVG\AVG8\avgcsrvx.exe[352] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\AVG\AVG8\avgcsrvx.exe[352] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\svchost.exe[364] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\svchost.exe[364] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\svchost.exe[364] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\svchost.exe[364] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\svchost.exe[364] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\svchost.exe[364] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\svchost.exe[432] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\svchost.exe[432] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\svchost.exe[432] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\svchost.exe[432] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\svchost.exe[432] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\svchost.exe[432] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe[460] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FF84775
.text C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe[460] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FF84804
.text C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe[460] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FF84811
.text C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe[460] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FF84A95
.text C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe[460] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FF847FA
.text C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe[460] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FF84852
.text C:\Program Files\Java\jre6\bin\jqs.exe[524] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\Java\jre6\bin\jqs.exe[524] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\Java\jre6\bin\jqs.exe[524] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\Java\jre6\bin\jqs.exe[524] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\Java\jre6\bin\jqs.exe[524] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\Java\jre6\bin\jqs.exe[524] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\PROGRA~1\AVG\AVG8\avgrsx.exe[612] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\PROGRA~1\AVG\AVG8\avgrsx.exe[612] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\PROGRA~1\AVG\AVG8\avgrsx.exe[612] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\PROGRA~1\AVG\AVG8\avgrsx.exe[612] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\PROGRA~1\AVG\AVG8\avgrsx.exe[612] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\PROGRA~1\AVG\AVG8\avgrsx.exe[612] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\PROGRA~1\AVG\AVG8\avgnsx.exe[624] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\PROGRA~1\AVG\AVG8\avgnsx.exe[624] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\PROGRA~1\AVG\AVG8\avgnsx.exe[624] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\PROGRA~1\AVG\AVG8\avgnsx.exe[624] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\PROGRA~1\AVG\AVG8\avgnsx.exe[624] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\PROGRA~1\AVG\AVG8\avgnsx.exe[624] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\winlogon.exe[920] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FF94775
.text C:\WINDOWS\system32\winlogon.exe[920] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FF94804
.text C:\WINDOWS\system32\winlogon.exe[920] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FF94811
.text C:\WINDOWS\system32\winlogon.exe[920] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FF94A95
.text C:\WINDOWS\system32\winlogon.exe[920] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FF947FA
.text C:\WINDOWS\system32\winlogon.exe[920] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FF94852
.text C:\WINDOWS\system32\services.exe[964] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FF94775
.text C:\WINDOWS\system32\services.exe[964] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FF94804
.text C:\WINDOWS\system32\services.exe[964] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FF94811
.text C:\WINDOWS\system32\services.exe[964] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FF94A95
.text C:\WINDOWS\system32\services.exe[964] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FF947FA
.text C:\WINDOWS\system32\services.exe[964] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FF94852
.text C:\WINDOWS\system32\lsass.exe[1000] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FF94775
.text C:\WINDOWS\system32\lsass.exe[1000] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FF94804
.text C:\WINDOWS\system32\lsass.exe[1000] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FF94811
.text C:\WINDOWS\system32\lsass.exe[1000] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FF94A95
.text C:\WINDOWS\system32\lsass.exe[1000] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FF947FA
.text C:\WINDOWS\system32\lsass.exe[1000] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FF94852
.text C:\WINDOWS\system32\svchost.exe[1136] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FF94775
.text C:\WINDOWS\system32\svchost.exe[1136] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FF94804
.text C:\WINDOWS\system32\svchost.exe[1136] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FF94811
.text C:\WINDOWS\system32\svchost.exe[1136] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FF94A95
.text C:\WINDOWS\system32\svchost.exe[1136] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FF947FA
.text C:\WINDOWS\system32\svchost.exe[1136] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FF94852
.text C:\WINDOWS\system32\svchost.exe[1216] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\svchost.exe[1216] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\svchost.exe[1216] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\svchost.exe[1216] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\svchost.exe[1216] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\svchost.exe[1216] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Program Files\Windows Defender\MsMpEng.exe[1260] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FF94775
.text C:\Program Files\Windows Defender\MsMpEng.exe[1260] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FF94804
.text C:\Program Files\Windows Defender\MsMpEng.exe[1260] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FF94811
.text C:\Program Files\Windows Defender\MsMpEng.exe[1260] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FF94A95
.text C:\Program Files\Windows Defender\MsMpEng.exe[1260] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FF947FA
.text C:\Program Files\Windows Defender\MsMpEng.exe[1260] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FF94852
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1320] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1320] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1320] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1320] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1320] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\Common Files\LightScribe\LSSrvc.exe[1320] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\svchost.exe[1388] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\svchost.exe[1388] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\svchost.exe[1388] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\svchost.exe[1388] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\svchost.exe[1388] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\svchost.exe[1388] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\svchost.exe[1436] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\svchost.exe[1436] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\svchost.exe[1436] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\svchost.exe[1436] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\svchost.exe[1436] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\svchost.exe[1436] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\spoolsv.exe[1708] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\spoolsv.exe[1708] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\spoolsv.exe[1708] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\spoolsv.exe[1708] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\spoolsv.exe[1708] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\spoolsv.exe[1708] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\svchost.exe[1912] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\svchost.exe[1912] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\svchost.exe[1912] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\svchost.exe[1912] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\svchost.exe[1912] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\svchost.exe[1912] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe[1956] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe[1956] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe[1956] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe[1956] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe[1956] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe[1956] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\PROGRA~1\AVG\AVG8\avgemc.exe[1976] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FF94775
.text C:\PROGRA~1\AVG\AVG8\avgemc.exe[1976] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FF94804
.text C:\PROGRA~1\AVG\AVG8\avgemc.exe[1976] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FF94811
.text C:\PROGRA~1\AVG\AVG8\avgemc.exe[1976] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FF94A95
.text C:\PROGRA~1\AVG\AVG8\avgemc.exe[1976] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FF947FA
.text C:\PROGRA~1\AVG\AVG8\avgemc.exe[1976] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FF94852
.text C:\WINDOWS\system32\1A.tmp[2020] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\1A.tmp[2020] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\1A.tmp[2020] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\1A.tmp[2020] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\1A.tmp[2020] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\1A.tmp[2020] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\hkcmd.exe[2116] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\hkcmd.exe[2116] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\hkcmd.exe[2116] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\hkcmd.exe[2116] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\hkcmd.exe[2116] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\hkcmd.exe[2116] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Program Files\Apoint2K\Apntex.exe[2136] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\Apoint2K\Apntex.exe[2136] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\Apoint2K\Apntex.exe[2136] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\Apoint2K\Apntex.exe[2136] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\Apoint2K\Apntex.exe[2136] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\Apoint2K\Apntex.exe[2136] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Program Files\Apoint2K\Apoint.exe[2208] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\Apoint2K\Apoint.exe[2208] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\Apoint2K\Apoint.exe[2208] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\Apoint2K\Apoint.exe[2208] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\Apoint2K\Apoint.exe[2208] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\Apoint2K\Apoint.exe[2208] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\PROGRA~1\AVG\AVG8\avgtray.exe[2224] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\PROGRA~1\AVG\AVG8\avgtray.exe[2224] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\PROGRA~1\AVG\AVG8\avgtray.exe[2224] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\PROGRA~1\AVG\AVG8\avgtray.exe[2224] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\PROGRA~1\AVG\AVG8\avgtray.exe[2224] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\PROGRA~1\AVG\AVG8\avgtray.exe[2224] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Documents and Settings\Val\Desktop\gmer\gmer.exe[2228] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Documents and Settings\Val\Desktop\gmer\gmer.exe[2228] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Documents and Settings\Val\Desktop\gmer\gmer.exe[2228] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Documents and Settings\Val\Desktop\gmer\gmer.exe[2228] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Documents and Settings\Val\Desktop\gmer\gmer.exe[2228] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Documents and Settings\Val\Desktop\gmer\gmer.exe[2228] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Program Files\Java\jre6\bin\jusched.exe[2332] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\Java\jre6\bin\jusched.exe[2332] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\Java\jre6\bin\jusched.exe[2332] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\Java\jre6\bin\jusched.exe[2332] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\Java\jre6\bin\jusched.exe[2332] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\Java\jre6\bin\jusched.exe[2332] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Program Files\Windows Defender\MSASCui.exe[2416] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\Windows Defender\MSASCui.exe[2416] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\Windows Defender\MSASCui.exe[2416] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\Windows Defender\MSASCui.exe[2416] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\Windows Defender\MSASCui.exe[2416] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\Windows Defender\MSASCui.exe[2416] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Program Files\PowerISO\PWRISOVM.EXE[2496] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\PowerISO\PWRISOVM.EXE[2496] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\PowerISO\PWRISOVM.EXE[2496] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\PowerISO\PWRISOVM.EXE[2496] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\PowerISO\PWRISOVM.EXE[2496] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\PowerISO\PWRISOVM.EXE[2496] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\Program Files\Mozilla Firefox\firefox.exe[2744] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\Program Files\Mozilla Firefox\firefox.exe[2744] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\Program Files\Mozilla Firefox\firefox.exe[2744] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\Program Files\Mozilla Firefox\firefox.exe[2744] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\Program Files\Mozilla Firefox\firefox.exe[2744] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\Program Files\Mozilla Firefox\firefox.exe[2744] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\igfxpers.exe[2928] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\igfxpers.exe[2928] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\igfxpers.exe[2928] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\igfxpers.exe[2928] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\igfxpers.exe[2928] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\igfxpers.exe[2928] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\taskmgr.exe[3428] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\taskmgr.exe[3428] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\taskmgr.exe[3428] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\taskmgr.exe[3428] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\taskmgr.exe[3428] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\taskmgr.exe[3428] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.reloc C:\WINDOWS\explorer.exe[3568] C:\WINDOWS\explorer.exe section is executable [0x010FB000, 0x8800, 0xE0000040]
.reloc C:\WINDOWS\explorer.exe[3568] C:\WINDOWS\explorer.exe entry point in ".reloc" section [0x01103649]
.text C:\WINDOWS\explorer.exe[3568] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\explorer.exe[3568] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\explorer.exe[3568] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\explorer.exe[3568] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\explorer.exe[3568] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\explorer.exe[3568] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852
.text C:\WINDOWS\system32\igfxsrvc.exe[3948] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes CALL 7FFA4775
.text C:\WINDOWS\system32\igfxsrvc.exe[3948] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes CALL 7FFA4804
.text C:\WINDOWS\system32\igfxsrvc.exe[3948] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes CALL 7FFA4811
.text C:\WINDOWS\system32\igfxsrvc.exe[3948] ntdll.dll!NtDeviceIoControlFile 7C90D27E 5 Bytes CALL 7FFA4A95
.text C:\WINDOWS\system32\igfxsrvc.exe[3948] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes CALL 7FFA47FA
.text C:\WINDOWS\system32\igfxsrvc.exe[3948] ntdll.dll!NtQueryInformationProcess 7C90D7FE 5 Bytes CALL 7FFA4852

—- Devices - GMER 1.0.15 —-

Device \Driver\Tcpip \Device\Ip 89C1EA31

AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device \Driver\Tcpip \Device\Tcp 89C1EA31

AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device \Driver\Tcpip \Device\Udp 89C1EA31

AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device \Driver\Tcpip \Device\RawIp 89C1EA31

AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device \Driver\Tcpip \Device\IPMULTICAST 89C1EA31

—- Threads - GMER 1.0.15 —-

Thread System [4:800] 89C204B1
Thread System [4:804] 89C204B1
Thread System [4:808] 89C204B1
Thread System [4:812] 89C204B1
Thread System [4:816] 89C204B1

—- Files - GMER 1.0.15 —-

File C:\WINDOWS\IE4 Error Log.txt 244 bytes

—- EOF - GMER 1.0.15 —-
=-=-=-=-=-=-=-=-=-=-=-=-=-=

Should I still run another in Safe Mode, or will this be enough?

Raktor

Post #11June 22, 2009, 8:10 AM UTC

That log's complete, thanks.

One more try at our scanners… pick one of these and post the results.

Option 1
Run this free online scan using Internet Explorer:
Kaspersky Online Virus Scanner

Next Click on Launch Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

The program will launch and then begin downloading the latest definition files:
Once the files have been downloaded click on NEXT
Now click on Scan Settings
In the scan settings make that the following are selected:
Scan using the following Anti-Virus database:
Standard
Scan Options:
Scan Archives
Scan Mail Bases
Click OK
Now under select a target to scan: Select My Computer
This will program will start and scan your system.
The scan will take a while so be patient and let it run.
Once the scan is complete it will display if your system has been infected.
Now click on the Save as Text button:
Save the file to your desktop.

Post the log along with a New HJT Log into your next reply.

Option 2
Download to the desktop: Dr.Web CureIt

Doubleclick the drweb-cureit.exe file and Allow to run the express scan
This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
Once the short scan has finished, Click Options > Change settings
Choose the Scan-tab, remove the mark at Heuristic analysis.
Back at the main window, mark the drives that you want to scan.
Select all drives. A red dot shows which drives have been chosen.
Click the green arrow at the right, and the scan will start.
Click 'Yes to all' if it asks if you want to cure/move the file.
When the scan has finished, look if you can click next icon next to the files found:
[external image: Posted Image]
If so, click it and then click the next icon right below and select Move incurable as you'll see in next image:
[external image: Posted Image]
This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
Save the report to your desktop. The report will be called DrWeb.csv
Close Dr.Web Cureit.
Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
After reboot, post the contents of the log from Dr.Web you saved previously in your next reply with a new hijackthis log.

TLoATDaE

Post #12June 22, 2009, 7:47 PM UTC

Ok, I had to go with Option #2, as the virus seems to block access to the web-based scans and links provided. I can access those tools and sites from other computers on my network, just not the infected one, it seems.

After the reboot, my system could not find file "C:\WINDOWS\system32\msmyrrub.exe" and gave a registry error that followed the error.
The scan itself was promising, though. I am really starting to loathe this virus…

The Summary of the CureIt.log file is Here:

Total session statistics
=============================================================================
Scanned: 492919
Infected: 1895
Modifications: 17
Suspicious: 0
Adware: 0
Dialers: 0
Jokes: 0
Riskware: 0
Hacktools: 6
Cured: 1838
Deleted: 54
Renamed: 0
Moved: 26
Ignored: 0
Scan speed: 3 Kb/s
Scan time: 05:59:30
=============================================================================

I chose only the summary simply because it's HUGE, and made the browser crash when I tried to post it. If you need it, I'll attempt to post it from one of my non-infected systems.

Contents of the DrWeb.csv file (as converted to txt) are as follows:

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

apntex.exe;c:\program files\apoint2k;Win32.Virut.56;Cured.;
apoint.exe;c:\program files\apoint2k;Win32.Virut.56;Cured.;
lssrvc.exe;c:\program files\common files\lightscribe;Win32.Virut.56;Cured.;
fnplicensingservice.exe;c:\program files\common files\macrovision shared\flexnet publisher;Win32.Virut.56;Cured.;
hpqwmiex.exe;c:\program files\hewlett-packard\shared;Win32.Virut.56;Cured.;
modmgr.exe;c:\program files\microangelo\on display;Win32.Virut.56;Cured.;
setup50.exe;c:\program files\outlook express;Win32.Virut.56;Cured.;
pwrisovm.exe;c:\program files\poweriso;Win32.Virut.56;Cured.;
wlsetupsvc.exe;c:\program files\windows live\installer;Win32.Virut.56;Cured.;
explorer.exe;c:\windows;Win32.Virut.56;Cured.;
ksrsr6ikruhjstjash353haaaa2hd81.exe;c:\windows;Win32.Virut.56;Cured.;
mser54waejsrahaetjs6ikaash81.exe;c:\windows;Win32.Virut.56;Cured.;
xpnetdiag.exe;c:\windows\network diagnostic;Win32.Virut.56;Cured.;
alg.exe;c:\windows\system32;Win32.Virut.56;Cured.;
cisvc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
clipsrv.exe;c:\windows\system32;Win32.Virut.56;Cured.;
dllhost.exe;c:\windows\system32;Win32.Virut.56;Cured.;
protect.sys;c:\windows\system32\drivers;Trojan.NtRootKit.429;Deleted.;
hkcmd.exe;c:\windows\system32;Win32.Virut.56;Cured.;
ie4uinit.exe;c:\windows\system32;Win32.Virut.56;Cured.;
igfxpers.exe;c:\windows\system32;Win32.Virut.56;Cured.;
igfxsrvc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
igfxtray.exe;c:\windows\system32;Win32.Virut.56;Cured.;
imapi.exe;c:\windows\system32;Win32.Virut.56;Cured.;
locator.exe;c:\windows\system32;Win32.Virut.56;Cured.;
logon.scr;c:\windows\system32;Win32.Virut.56;Cured.;
msdtc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
mslpvvsu.exe;c:\windows\system32;Win32.Virut.56;Cured.;
msmte.exe;c:\windows\system32;Win32.Virut.56;Cured.;
msmyrrub.exe;c:\windows\system32;Win32.Virut.56;Cured.;
netdde.exe;c:\windows\system32;Win32.Virut.56;Cured.;
ntsd.exe;c:\windows\system32;Win32.Virut.56;Cured.;
regsvr32.exe;c:\windows\system32;Win32.Virut.56;Cured.;
rundll32.exe;c:\windows\system32;Win32.Virut.56;Cured.;
scardsvr.exe;c:\windows\system32;Win32.Virut.56;Cured.;
sessmgr.exe;c:\windows\system32;Win32.Virut.56;Cured.;
shmgrate.exe;c:\windows\system32;Win32.Virut.56;Cured.;
smlogsvc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
hpztsb09.exe;c:\windows\system32\spool\drivers\w32x86\3;Win32.Virut.56;Cured.;
spoolsv.exe;c:\windows\system32;Win32.Virut.56;Cured.;
taskmgr.exe;c:\windows\system32;Win32.Virut.56;Cured.;
tlntsvr.exe;c:\windows\system32;Win32.Virut.56;Cured.;
ups.exe;c:\windows\system32;Win32.Virut.56;Cured.;
userinit.exe;c:\windows\system32;Win32.Virut.56;Cured.;
vssvc.exe;c:\windows\system32;Win32.Virut.56;Cured.;
winmgmt.exe;c:\windows\system32\wbem;Win32.Virut.56;Cured.;
wmiapsrv.exe;c:\windows\system32\wbem;Win32.Virut.56;Cured.;
TaskbarRepairToolPlus!.exe;C:\Archive;Win32.Virut.56;Cured.;
2b) lhttseng.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
bear.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
birdie.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
cathie.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
check.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
claude.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
debbie.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
e-man.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
e-woman.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
felini.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
Felix.EXE;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
isabella.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
mash57.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
max.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
mush.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
oscar.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
santa.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
vrgirl.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
wartnose.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
yvette.exe;C:\Archive\Agent Files;Win32.Virut.56;Cured.;
chmod.exe;C:\Archive\Codec Expansions\gamrcodecpack-20031128\tools;Win32.Virut.56;Cured.;
unzip.exe;C:\Archive\Codec Expansions\gamrcodecpack-20031128\tools;Win32.Virut.56;Cured.;
Corel Draw - Graphics Suite 12 - cdrsuitkg.exe;C:\Archive\Corel Draw - Graphics Suite 12;Win32.Virut.56;Cured.;
Sonique.exe;C:\Archive\Sonique;Win32.Virut.56;Cured.;
SkinMaker.exe;C:\Archive\Sonique\skins;Win32.Virut.56;Cured.;
groofvis.exe;C:\Archive\Sonique\vis;Win32.Virut.56;Cured.;
Sphere.exe;C:\Archive\Sonique\vis;Win32.Virut.56;Cured.;
keygen.exe;C:\Archive\Winzip.12.4.07.Pro;Win32.Virut.56;Cured.;
winzip120_.exe;C:\Archive\Winzip.12.4.07.Pro;Win32.Virut.56;Cured.;
winzip120_.exe\winzip120_.exe;C:\Archive\Winzip.12.4.07.Pro\winzip120_.exe;BackDoor.Bio.14;;
winzip120_.exe;C:\Archive\Winzip.12.4.07.Pro;Archive contains infected objects;Moved.;
reader_s.exe;C:\Documents and Settings\Val;Trojan.DownLoad.29459;Deleted.;
Icon8255BBAC1.exe;C:\Documents and Settings\Val\Application Data\Microsoft\Installer\{8F99E711-CE74-4718-BE04-19D1A53A735C};Win32.Virut.56;Cured.;
Icon83F12F734.exe;C:\Documents and Settings\Val\Application Data\Microsoft\Installer\{8F99E711-CE74-4718-BE04-19D1A53A735C};Win32.Virut.56;Cured.;
Icon83F12F738.exe;C:\Documents and Settings\Val\Application Data\Microsoft\Installer\{8F99E711-CE74-4718-BE04-19D1A53A735C};Win32.Virut.56;Cured.;
Icon8F99E711.exe;C:\Documents and Settings\Val\Application Data\Microsoft\Installer\{8F99E711-CE74-4718-BE04-19D1A53A735C};Win32.Virut.56;Cured.;
1-ATF_Cleaner.exe;C:\Documents and Settings\Val\Desktop;Win32.Virut.56;Cured.;
gmer.exe;C:\Documents and Settings\Val\Desktop\gmer;Win32.Virut.56;Cured.;
Toggle Images.exe;C:\Documents and Settings\Val\Favorites\Links;Win32.Virut.56;Cured.;
em[1].txt;C:\Documents and Settings\Val\Local Settings\Temporary Internet Files\Content.IE5\O5Q70DAB;Trojan.Spambot.2424;Deleted.;
abb[1].txt;C:\Documents and Settings\Val\Local Settings\Temporary Internet Files\Content.IE5\S5Y74DE3;Trojan.DownLoad.29459;Deleted.;
BattlePlanner_MW.exe;C:\Documents and Settings\Val\My Documents\Games\MechWarrior;Win32.Virut.56;Cured.;
BP_mw_ss.exe;C:\Documents and Settings\Val\My Documents\Games\MechWarrior;Win32.Virut.56;Cured.;
Sims2.Keygen.CC.exe;C:\Documents and Settings\Val\My Documents\Keyz;Win32.Virut.56;Cured.;
regcure_1.6_5_regcure_1.6_key.exe;C:\Drop-Zone;Win32.Virut.56;Cured.;
ChipUtil.exe;C:\Drop-Zone\XP Drivers;Win32.Virut.56;Cured.;
1701.exe;C:\Games\1701 A.D;Win32.Virut.56;Cured.;
FirewallCfg.exe;C:\Games\1701 A.D\Tools\Firewall;Win32.Virut.56;Cured.;
DrvSetup.exe;C:\Games\1701 A.D\Tools\Tages;Win32.Virut.56;Cured.;
DrvSetup_x64.exe;C:\Games\1701 A.D\Tools\Tages;Win32.Virut.56;Cured.;
American McGee's Alice_Code.exe;C:\Games\American McGee's Alice\eReg;Win32.Virut.56;Cured.;
American McGee's Alice_eReg.exe;C:\Games\American McGee's Alice\eReg;Win32.Virut.56;Cured.;
American McGee's Alice_EZ.exe;C:\Games\American McGee's Alice\eReg;Win32.Virut.56;Cured.;
American McGee's Alice_uninst.exe;C:\Games\American McGee's Alice\eReg;Win32.Virut.56;Cured.;
autorun.exe;C:\Games\Evil Genius\Patch Assortment\Bonus CD;Win32.Virut.56;Cured.;
WorldDominationStarterPack.exe;C:\Games\Evil Genius\Patch Assortment\Bonus CD;Win32.Virut.56;Cured.;
dxsetup.exe;C:\Games\Evil Genius\Patch Assortment\Bonus CD\DirectX\DirectX9;Win32.Virut.56;Cured.;
DeleteSavedGames.exe;C:\Games\Evil Genius\ReleaseExe;Win32.Virut.56;Cured.;
EvilGeniusExeStub-Release.exe;C:\Games\Evil Genius\ReleaseExe;Win32.Virut.56;Cured.;
Hmlite.exe;C:\Games\HeavyMetal\Lite;Win32.Virut.56;Cured.;
hvypro.exe;C:\Games\HeavyMetal\Pro;Win32.Virut.56;Cured.;
Lancelot LNC25-02.hmp;C:\Games\HeavyMetal\Pro\Mechs;Modification of Trojan.Kalamar.1851;Moved.;
Lancelot LNC25-02.hmp;C:\Games\HeavyMetal\Pro\Mechs\RS-3025;Modification of Trojan.Kalamar.1851;Moved.;
rus.exe;C:\Games\HeavyMetal\RUS;Win32.Virut.56;Cured.;
hmvee.exe;C:\Games\HeavyMetal\Vee;Win32.Virut.56;Cured.;
KANGOUS.EXE;C:\Games\KANGOUS;Win32.Virut.56;Cured.;
FaceMaker.exe;C:\Games\Magic;Win32.Virut.56;Cured.;
ManaLink.exe;C:\Games\Magic;Win32.Virut.56;Cured.;
Shandalar.exe;C:\Games\Magic;Win32.Virut.56;Cured.;
No-CD PatchFX.EXE;C:\Games\Mucky Foot\StarTopia;Win32.Virut.56;Cured.;
No-CD PatchFX.EXE;C:\Games\Mucky Foot\StarTopia;Tool.GameCrack;;
PatchTopia.exe;C:\Games\Mucky Foot\StarTopia;Win32.Virut.56;Cured.;
startopia.exe;C:\Games\Mucky Foot\StarTopia;Win32.Virut.56;Cured.;
Wonders.exe;C:\Games\MumboJumbo\7 Wonders;Win32.Virut.56;Cured.;
MINYANML.EXE;C:\Games\Repository\Lets Meow Meow;Win32.Virut.56;Cured.;
KANGOUS.EXE;C:\Games\Repository\Nurse;Win32.Virut.56;Cured.;
Anno1701.exe;C:\Games\Repository\Patches\1701 AD;Win32.Virut.56;Cured.;
DoW_Trainer.exe;C:\Games\Repository\Patches\Dawn of War;Win32.Virut.56;Cured.;
autorun.exe;C:\Games\Repository\Patches\Evil Genus\Bonus Resources;Win32.Virut.56;Cured.;
WorldDominationStarterPack.exe;C:\Games\Repository\Patches\Evil Genus\Bonus Resources;Win32.Virut.56;Cured.;
dxsetup.exe;C:\Games\Repository\Patches\Evil Genus\Bonus Resources\DirectX\DirectX9;Win32.Virut.56;Cured.;
EvilGeniusExeStub-Release.exe;C:\Games\Repository\Patches\Evil Genus\No-CD Patch;Win32.Virut.56;Cured.;
No_CD_PatchFX.EXE;C:\Games\Repository\Patches\StarTopia Patches and Extras;Win32.Virut.56;Cured.;
No_CD_PatchFX.EXE;C:\Games\Repository\Patches\StarTopia Patches and Extras;Tool.GameCrack;;
ta1x-31c.exe;C:\Games\Repository\Patches\Total Annihilation;Win32.Virut.56;Cured.;
update.exe;C:\Games\Repository\Patches\Total Annihilation\Conflict Crusher;Win32.Virut.56;Cured.;
SETUP.EXE;C:\Games\Return of Arcade\setup;Win32.Virut.56;Cured.;
Space Colony.exe;C:\Games\Space Colony;Win32.Virut.56;Cured.;
xdelta.exe;C:\Games\Space Colony;Win32.Virut.56;Cured.;
bnupdate.exe;C:\Games\StarCraft\StarCraft;Win32.Virut.56;Cured.;
StarCraft.exe;C:\Games\StarCraft\StarCraft;Win32.Virut.56;Cured.;
StarEdit.exe;C:\Games\StarCraft\StarCraft;Win32.Virut.56;Cured.;
BugReport.exe;C:\Games\THQ\DarkCrusade\BugReport;Win32.Virut.56;Cured.;
GraphicsConfig.exe;C:\Games\THQ\Dawn Of War;Win32.Virut.56;Cured.;
W40k.exe;C:\Games\THQ\Dawn Of War;Win32.Virut.56;Cured.;
W40kWA.exe;C:\Games\THQ\Dawn Of War;Win32.Virut.56;Cured.;
WinterAssault.exe;C:\Games\THQ\Dawn Of War;Win32.Virut.56;Cured.;
BugReport.exe;C:\Games\THQ\Dawn Of War\BugReport;Win32.Virut.56;Cured.;
BsSndRpt.exe;C:\Games\THQ\Gas Powered Games\GPGNet;Win32.Virut.56;Cured.;
BsSndRptD.exe;C:\Games\THQ\Gas Powered Games\GPGNet;Win32.Virut.56;Cured.;
SupremeCommander.exe;C:\Games\THQ\Gas Powered Games\Supreme Commander\bin;Win32.Virut.56;Cured.;
Blip.exe;C:\Games\W-Games;Win32.Virut.56;Cured.;
epoker.exe;C:\Games\W-Games;Win32.Virut.56;Cured.;
Memory.exe;C:\Games\W-Games;Win32.Virut.56;Cured.;
Othello.exe;C:\Games\W-Games;Win32.Virut.56;Cured.;
PMachine.exe;C:\Games\W-Games;Win32.Virut.56;Cured.;
YAHTZEE.EXE;C:\Games\W-Games;Win32.Virut.56;Cured.;
MINYANML.EXE;C:\Games\YAMIKUMO\MINYANML;Win32.Virut.56;Cured.;
BUNNYUS.EXE;C:\Games\ZyX\BUNNYUS;Win32.Virut.56;Cured.;
convert.exe;C:\Program Files\Accessories;Win32.Virut.56;Cured.;
creator.exe;C:\Program Files\Accessories\Hero Creator;Win32.Virut.56;Cured.;
cvhromkr.exe;C:\Program Files\Accessories\Hero Creator;Win32.Virut.56;Cured.;
uninst.exe;C:\Program Files\Accessories\Hero Creator;Win32.Virut.56;Cured.;
Dell_LogonUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens;Win32.Virut.56;Cured.;
dragonc.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens;Win32.Virut.56;Cured.;
Tales of Destiny.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens;Win32.Virut.56;Cured.;
The Wolfs Family.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens;Win32.Virut.56;Cured.;
EnterpriseDUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\1701D;Win32.Virut.56;Cured.;
EnterpriseEUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\1701E;Win32.Virut.56;Cured.;
FirstSpaceTrip.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\1stSpace;Win32.Virut.56;Cured.;
FirstSpaceTrip.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\1stSpace;Win32.Virut.56;Cured.;
LOGONUI.EXE;C:\Program Files\Accessories\Logon Loader\Logon Screens\2250;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\2Advanced;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\2Advanced2;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\3rd Millenium 1024;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Aioria_Logon;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\air1_en_1024x768;Win32.Virut.56;Cured.;
Logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Allience;Win32.Virut.56;Cured.;
Amazon.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Amazon World;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\AMD;Win32.Virut.56;Cured.;
andromedaUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Andromeda;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Angel-01;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Anime Bunny;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Anime Maid;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\AquaXP;Win32.Virut.56;Cured.;
logonui1024x768.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\AquaXPlogin_15;Win32.Virut.56;Cured.;
logonui1600x1200.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\AquaXPlogin_15;Win32.Virut.56;Cured.;
logonui800x600.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\AquaXPlogin_15;Win32.Virut.56;Cured.;
bicentenary.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\BiCentMan;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\BioHaz;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Black XP;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\BlackMatrix;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Blue Fire;Win32.Virut.56;Cured.;
BlueBotui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\BlueBot;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\BlueSwoosh;Win32.Virut.56;Cured.;
LOGONUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\BookOfTime;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Borg;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\ButterFly;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\BWB;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Canada;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\CanadianGel;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\CanadianGel;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\ChErRyeD Xp;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Chobits_Logon;Win32.Virut.56;Cured.;
logonui_cia_black.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\CIA_Terminal;Win32.Virut.56;Cured.;
logonui_cia_white.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\CIA_Terminal;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Defiant;Win32.Virut.56;Cured.;
logonui_dod_1024x768.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\DoD Terminal;Win32.Virut.56;Cured.;
Ds9UI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\DS9;Win32.Virut.56;Cured.;
Enterprise.LogOnUI.Exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Enterprise 2;Win32.Virut.56;Cured.;
logonui-europol-v0-1.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\EuroPol v01;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Fantasia2000;Win32.Virut.56;Cured.;
logonui_fbi.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\FBI_Terminal;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\FF TSW;Win32.Virut.56;Cured.;
Firefox.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Firefox;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\FlameFINAL;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Fuorescence;Win32.Virut.56;Cured.;
futurama.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Futurama;Win32.Virut.56;Cured.;
game-cubed 1024x768.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Game^2;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Goddess I;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\GreenGraphic;Win32.Virut.56;Cured.;
hal9000logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\HAL9000;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Harry;Win32.Virut.56;Cured.;
Holiday Gal.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Holiday Gal;Win32.Virut.56;Cured.;
Hplogonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\HP Logon;Win32.Virut.56;Cured.;
humor.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Humor;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Identiti;Win32.Virut.56;Cured.;
Indigo.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\indigo;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\jojos Theme;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Kasumi Logon;Win32.Virut.56;Cured.;
Logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Lcars;Win32.Virut.56;Cured.;
LogOnUI.Exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Legend of Black Kat;Win32.Virut.56;Cured.;
lightning (sai krishna).exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\lightning (sai krishna);Win32.Virut.56;Cured.;
Logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Lizard;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\LonghornLogonscreenv1;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Loony_Silver;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Lord of the Rings;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Magic Mushroom;Win32.Virut.56;Cured.;
Matrix XP.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Matrix XP;Win32.Virut.56;Cured.;
LOGONUI.EXE;C:\Program Files\Accessories\Logon Loader\Logon Screens\Matrix-Orig;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Maya Robot;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\MidGar;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Minotavrs Comet lg;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\MSN 0;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\MSN 7;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Nebula;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Neverwinter Nights 1024x768;Win32.Virut.56;Cured.;
new matrix.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\New Matrix;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Night City;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Oculus;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Pirated Ed;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\PlanetX;Win32.Virut.56;Cured.;
Onegai Teacher.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Please Teacher;Win32.Virut.56;Cured.;
POOHLOGON.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Pooh Bear;Win32.Virut.56;Cured.;
QuartzXP_logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\QuartzXP;Win32.Virut.56;Cured.;
red pill(sai krishna).exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\red pill (sai krishna);Win32.Virut.56;Cured.;
logonUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Rhodium2;Win32.Virut.56;Cured.;
Kenshin.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Rurouni Kenshin - 01;Win32.Virut.56;Cured.;
Logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Sabrina-Online Logon;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Sentinels;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Singularity;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\SniperKitty;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Spacewalk;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\StarCraft(Final);Win32.Virut.56;Cured.;
Logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Starfleet;Win32.Virut.56;Cured.;
StarfleetUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Starfleet;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\StarTrek;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Sun and Mountains;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\SunSet;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\TearDrop;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\TheGreyOne;Win32.Virut.56;Cured.;
time.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\time 2;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\TJay's Logon;Win32.Virut.56;Cured.;
Trek1.LogOnUI.Exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Trek1;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\TwilightXP;Win32.Virut.56;Cured.;
udic.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\udic;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Vinnie;Win32.Virut.56;Cured.;
Voyger_II.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\VoygerII;Win32.Virut.56;Cured.;
WOG II.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\War of Geneses;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Warcraft III;Win32.Virut.56;Cured.;
LogonUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Watercolor Green B 1280x1024;Win32.Virut.56;Cured.;
LogonUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Watercolor Tiles L;Win32.Virut.56;Cured.;
LogonUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Watercolor Tiles M;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\WCIIIbyCerb;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Whistler;Win32.Virut.56;Cured.;
WindowsWorldUI.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Windows World;Win32.Virut.56;Cured.;
LogonUi-WindowsExp.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\WinExp v05;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\WinXP 3D;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\WinXp01;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\WorldAtNight;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\wwwxp;Modification of Win32.Virut.56;Moved.;
LOGONUI.EXE;C:\Program Files\Accessories\Logon Loader\Logon Screens\Xbox_b;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\xEgyPt;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Xfiles02;Win32.Virut.56;Cured.;
XP Chrome 1024x768.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\XP Chrome;Win32.Virut.56;Cured.;
XpGlassLogo.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\XP Glass;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\XP Tour;Win32.Virut.56;Cured.;
XP White_1024x768.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\XP White;Win32.Virut.56;Cured.;
Logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\Xp Zone;Win32.Virut.56;Cured.;
logon ui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\xp47;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\XPA;Win32.Virut.56;Cured.;
XpBlueLogo.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\XpBlueLogo;Win32.Virut.56;Cured.;
logonui.exe;C:\Program Files\Accessories\Logon Loader\Logon Screens\XPE;Win32.Virut.56;Cured.;
ElfBowling-1.exe;C:\Program Files\Accessories\Shockwave Stuff;Win32.Virut.56;Cured.;
ElfBowling-1.exe;C:\Program Files\Accessories\Shockwave Stuff;Win32.Virut.56;Cured.;
ElfBowling-2.exe;C:\Program Files\Accessories\Shockwave Stuff;Win32.Virut.56;Cured.;
Sonique.exe;C:\Program Files\Accessories\Sonique;Win32.Virut.56;Cured.;
SkinMaker.exe;C:\Program Files\Accessories\Sonique\skins;Win32.Virut.56;Cured.;
GroofConfig.exe;C:\Program Files\Accessories\Sonique\vis\vis;Win32.Virut.56;Cured.;
groofvis.exe;C:\Program Files\Accessories\Sonique\vis\vis;Win32.Virut.56;Cured.;
Sphere.exe;C:\Program Files\Accessories\Sonique\vis\vis;Win32.Virut.56;Cured.;
PDFMAec.exe;C:\Program Files\Adobe\Acrobat 8.0\PDFMaker\AutoCAD;Win32.Virut.56;Cured.;
Ezcapt.exe;C:\Program Files\Apoint2K;Win32.Virut.56;Cured.;
EzPopup.exe;C:\Program Files\Apoint2K;Win32.Virut.56;Cured.;
hidfind.exe;C:\Program Files\Apoint2K;Win32.Virut.56;Cured.;
Uninstap.exe;C:\Program Files\Apoint2K;Win32.Virut.56;Cured.;
Cleanup.exe;C:\Program Files\CleanUp!;Win32.Virut.56;Cured.;
uninstall.exe;C:\Program Files\CleanUp!;Win32.Virut.56;Cured.;
IDriver.exe;C:\Program Files\Common Files\InstallShield\Driver\10\Intel 32;Win32.Virut.56;Cured.;
IDriver2.exe;C:\Program Files\Common Files\InstallShield\Driver\10\Intel 32;Win32.Virut.56;Cured.;
IDriver.exe;C:\Program Files\Common Files\InstallShield\Driver\7\Intel 32;Win32.Virut.56;Cured.;
IDriver.exe;C:\Program Files\Common Files\InstallShield\Driver\9\Intel 32;Win32.Virut.56;Cured.;
IDriver2.exe;C:\Program Files\Common Files\InstallShield\Driver\9\Intel 32;Win32.Virut.56;Cured.;
IKernel.exe;C:\Program Files\Common Files\InstallShield\engine\6\Intel 32;Win32.Virut.56;Cured.;
knlwrap.exe;C:\Program Files\Common Files\InstallShield\engine\6\Intel 32;Win32.Virut.56;Cured.;
DotNetInstaller.exe;C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32;Win32.Virut.56;Cured.;
PlusApp.exe;C:\Program Files\Common Files\Microsoft Shared\Microsoft Plus!;Win32.Virut.56;Cured.;
udinstaller32.exe;C:\Program Files\Common Files\ParetoLogic\PLAVEngine;Win32.Virut.56;Cured.;
UIU32m.exe;C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_HERMOSA_HSF;Win32.Virut.56;Cured.;
BarCode.exe;C:\Program Files\Corel\Corel Graphics 12\Programs;Win32.Virut.56;Cured.;
CorelDRW.exe;C:\Program Files\Corel\Corel Graphics 12\Programs;Win32.Virut.56;Cured.;
CorelPP.exe;C:\Program Files\Corel\Corel Graphics 12\Programs;Win32.Virut.56;Cured.;
CorUpd.exe;C:\Program Files\Corel\Corel Graphics 12\Programs;Win32.Virut.56;Cured.;
RAVE.exe;C:\Program Files\Corel\Corel Graphics 12\Programs;Win32.Virut.56;Cured.;
Trace.exe;C:\Program Files\Corel\Corel Graphics 12\Programs;Win32.Virut.56;Cured.;
SnapSync.exe;C:\Program Files\FutureDial\Bell SnapSync;Win32.Virut.56;Cured.;
FD_DUninstall.exe;C:\Program Files\FutureDial\FutureDial USB Modem;Win32.Virut.56;Cured.;
hpcmpmgr.exe;C:\Program Files\HP\hpcoretech;Win32.Virut.56;Cured.;
hpdarc.exe;C:\Program Files\HP\hpcoretech\comp;Win32.Virut.56;Cured.;
hptskmgr.exe;C:\Program Files\HP\hpcoretech\comp;Win32.Virut.56;Cured.;
hpuihost.exe;C:\Program Files\HP\hpcoretech\comp;Win32.Virut.56;Cured.;
HPOSM.exe;C:\Program Files\HP\hpcoretech\soln;Win32.Virut.56;Cured.;
Setup.exe;C:\Program Files\InstallShield Installation Information\{42C402C3-F95B-4BA2-BC90-99816AAF8159};Win32.Virut.56;Cured.;
Setup.exe;C:\Program Files\InstallShield Installation Information\{EBC0E8C0-63AC-11D4-BEF2-00A0C9E0B324};Win32.Virut.56;Cured.;
iedw.exe;C:\Program Files\Internet Explorer;Win32.Virut.56;Cured.;
iexplore.exe;C:\Program Files\Internet Explorer;Modification of Win32.Virut.56;Moved.;
WinDVD.exe;C:\Program Files\InterVideo\DVD6;Win32.Virut.56;Cured.;
javaws.exe;C:\Program Files\Java\jre1.6.0_05\bin;Win32.Virut.56;Cured.;
javaws.exe;C:\Program Files\Java\jre1.6.0_07\bin;Win32.Virut.56;Cured.;
ac3config.exe;C:\Program Files\K-Lite Codec Pack\Filters;Win32.Virut.56;Cured.;
mplayerc.exe;C:\Program Files\K-Lite Codec Pack\Media Player Classic;Win32.Virut.56;Cured.;
graphedit.exe;C:\Program Files\K-Lite Codec Pack\Tools;Win32.Virut.56;Cured.;
mediainfo.exe;C:\Program Files\K-Lite Codec Pack\Tools;Win32.Virut.56;Cured.;
StatsReader.exe;C:\Program Files\K-Lite Codec Pack\Tools;Win32.Virut.56;Cured.;
VobSubStrip.exe;C:\Program Files\K-Lite Codec Pack\Tools;Win32.Virut.56;Cured.;
gspot.exe;C:\Program Files\K-Lite Codec Pack\Tools\gspot;Win32.Virut.56;Cured.;
creation.exe;C:\Program Files\Microangelo;Win32.Virut.56;Cured.;
MODPanel.exe;C:\Program Files\Microangelo\On Display;Win32.Virut.56;Cured.;
m6animator.exe;C:\Program Files\Microangelo\Toolset 6;Win32.Virut.56;Cured.;
m6explorer.exe;C:\Program Files\Microangelo\Toolset 6;Win32.Virut.56;Cured.;
m6librarian.exe;C:\Program Files\Microangelo\Toolset 6;Win32.Virut.56;Cured.;
RussSqr.exe;C:\Program Files\Microsoft Plus!\Games\Russian Square;Win32.Virut.56;Cured.;
TheLabyrinth.exe;C:\Program Files\Microsoft Plus!\Games\The Labyrinth Plus! Edition;Win32.Virut.56;Cured.;
MpSpeak.exe;C:\Program Files\Microsoft Plus!\Voice Command;Win32.Virut.56;Cured.;
moviemk.exe;C:\Program Files\Movie Maker;Win32.Virut.56;Cured.;
chkrzm.exe;C:\Program Files\MSN Gaming Zone\Windows;Win32.Virut.56;Cured.;
zClientm.exe;C:\Program Files\MSN Gaming Zone\Windows;Win32.Virut.56;Cured.;
cb32.exe;C:\Program Files\NetMeeting;Win32.Virut.56;Cured.;
conf.exe;C:\Program Files\NetMeeting;Win32.Virut.56;Cured.;
wb32.exe;C:\Program Files\NetMeeting;Win32.Virut.56;Cured.;
msimn.exe;C:\Program Files\Outlook Express;Win32.Virut.56;Cured.;
oemig50.exe;C:\Program Files\Outlook Express;Win32.Virut.56;Cured.;
wab.exe;C:\Program Files\Outlook Express;Win32.Virut.56;Cured.;
wabmig.exe;C:\Program Files\Outlook Express;Win32.Virut.56;Cured.;
PowerISO.exe;C:\Program Files\PowerISO;Win32.Virut.56;Cured.;
HijackThis.exe;C:\Program Files\Trend Micro\HijackThis;Win32.Virut.56;Cured.;
migrate.exe;C:\Program Files\Windows Media Player;Win32.Virut.56;Cured.;
mplayer2.exe;C:\Program Files\Windows Media Player;Win32.Virut.56;Cured.;
setup_wm.exe;C:\Program Files\Windows Media Player;Win32.Virut.56;Cured.;
wmdbexport.exe;C:\Program Files\Windows Media Player;Win32.Virut.56;Cured.;
wmlaunch.exe;C:\Program Files\Windows Media Player;Win32.Virut.56;Cured.;
wmpenc.exe;C:\Program Files\Windows Media Player;Win32.Virut.56;Cured.;
wmpnscfg.exe;C:\Program Files\Windows Media Player;Win32.Virut.56;Cured.;
wmpshare.exe;C:\Program Files\Windows Media Player;Win32.Virut.56;Cured.;
wmsetsdk.exe;C:\Program Files\Windows Media Player;Win32.Virut.56;Cured.;
dialer.exe;C:\Program Files\Windows NT;Win32.Virut.56;Cured.;
hypertrm.exe;C:\Program Files\Windows NT;Win32.Virut.56;Cured.;
wordpad.exe;C:\Program Files\Windows NT\Accessories;Win32.Virut.56;Cured.;
pinball.exe;C:\Program Files\Windows NT\Pinball;Win32.Virut.56;Cured.;
Uninstall.exe;C:\Program Files\WinRAR;Win32.Virut.56;Cured.;
WinRAR.exe;C:\Program Files\WinRAR;Win32.Virut.56;Cured.;
A0058886.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058887.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058888.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058889.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058891.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058892.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058893.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058911.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058912.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058913.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058914.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058916.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058917.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058918.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058919.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058920.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058921.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058923.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058924.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058925.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058926.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058927.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058928.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058930.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058931.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058932.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058933.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058934.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058935.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058936.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058937.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058938.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058939.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058941.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058942.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058943.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058944.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058945.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058946.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058947.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058948.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058949.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058950.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058951.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058952.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058953.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058954.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058955.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058956.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058957.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058958.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058959.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058960.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058961.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058962.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058963.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058964.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058965.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058966.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058967.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058968.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058969.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058971.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058972.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058973.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058974.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058975.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058976.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058977.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058978.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058979.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058980.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058981.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058982.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058983.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058984.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058985.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058986.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058987.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058988.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058990.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058991.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058992.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058993.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058994.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058995.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058996.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058997.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058998.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0058999.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059000.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059001.scr;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059002.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059003.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059004.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059005.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059006.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059007.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059008.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059009.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059010.scr;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059011.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059012.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059013.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059015.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059016.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059017.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059018.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059019.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059020.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059021.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059022.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059023.scr;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059024.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059025.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059026.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059027.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059028.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059029.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059030.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059031.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059032.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059033.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059034.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059035.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059036.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059037.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059038.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059039.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059040.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059041.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059042.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059043.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059044.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059045.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059046.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059047.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059048.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059049.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059052.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059053.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059054.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059056.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059057.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059058.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059059.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059060.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059061.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059061.exe\winzip120_.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419\A0059061.exe;BackDoor.Bio.14;;
A0059061.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Archive contains infected objects;Moved.;
A0059062.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059064.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059065.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059066.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059067.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059068.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059069.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059070.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059071.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059072.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059073.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059074.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059075.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059076.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059077.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059077.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Tool.GameCrack;;
A0059078.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059079.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059080.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059081.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059082.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059083.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059084.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059085.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059086.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059087.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059088.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059088.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Tool.GameCrack;;
A0059089.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059090.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059090.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059091.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059092.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059093.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059094.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059095.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059096.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059097.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059098.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059099.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059100.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059101.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059102.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059103.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059104.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059105.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059106.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0059110.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Trojan.Siggen.2449;Deleted.;
A0060111.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Trojan.Siggen.2449;Deleted.;
A0060116.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Trojan.Siggen.2449;Deleted.;
A0060117.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0060118.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0060119.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0060120.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0060123.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0060125.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Win32.Virut.56;Cured.;
A0060125.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP419;Trojan.DownLoad.29459;Deleted.;
A0061116.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Trojan.Siggen.2449;Deleted.;
A0061117.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Win32.Virut.56;Cured.;
A0061119.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Win32.Virut.56;Cured.;
A0061120.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Win32.Virut.56;Cured.;
A0061123.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Win32.Virut.56;Cured.;
A0061124.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Trojan.DownLoad.29459;Deleted.;
A0061125.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Win32.Virut.56;Cured.;
A0061125.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Trojan.DownLoad.29459;Deleted.;
A0061144.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Trojan.Siggen.2449;Deleted.;
A0061150.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Win32.Virut.56;Cured.;
A0061154.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP420;Trojan.DownLoad.29459;Deleted.;
A0061164.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061165.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061166.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061167.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061169.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Modification of Win32.Virut.56;Moved.;
A0061170.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061171.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061172.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061173.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061174.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061175.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061176.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061177.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061179.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061180.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061181.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061182.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061183.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Modification of Win32.Virut.56;Moved.;
A0061184.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061185.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061186.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061187.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061188.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Modification of Win32.Virut.56;Moved.;
A0061189.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061190.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061191.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Modification of Win32.Virut.56;Moved.;
A0061192.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061193.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061194.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061195.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061196.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061197.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061202.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Trojan.Siggen.2449;Deleted.;
A0061207.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Trojan.DownLoad.29459;Deleted.;
A0061208.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Trojan.DownLoad.29459;Deleted.;
A0061209.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Modification of Win32.Virut.56;Moved.;
A0061218.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP421;Win32.Virut.56;Cured.;
A0061224.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061225.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061226.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061227.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061228.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061229.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061230.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061231.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061232.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061233.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061234.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061235.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061236.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061237.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061238.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061239.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061240.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061241.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061242.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061243.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061249.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061250.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.DownLoad.29459;Deleted.;
A0061251.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.DownLoad.29459;Deleted.;
A0061252.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061253.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061254.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061255.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061256.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.Siggen.2449;Deleted.;
A0061260.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061261.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061262.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061264.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061265.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061266.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061267.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061268.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061269.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061270.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061271.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061273.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061274.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061275.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061276.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061277.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Modification of Win32.Virut.56;Moved.;
A0061278.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061279.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061280.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061281.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061282.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Modification of Win32.Virut.56;Moved.;
A0061283.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061284.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061285.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Modification of Win32.Virut.56;Moved.;
A0061286.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061287.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061288.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061289.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061290.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061291.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061295.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.Siggen.2449;Deleted.;
A0061304.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.Siggen.2449;Deleted.;
A0061320.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061328.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061344.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.Siggen.2449;Deleted.;
A0061354.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061430.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.Siggen.2449;Deleted.;
A0061432.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061435.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061450.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.Siggen.2449;Deleted.;
A0061452.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061453.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.DownLoad.29459;Deleted.;
A0061454.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.DownLoad.29459;Deleted.;
A0061473.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061474.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061475.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061480.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.Siggen.2449;Deleted.;
A0061481.dll;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.Siggen.2449;Deleted.;
A0061483.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0061490.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0062044.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0062045.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0062046.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0062048.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0062049.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0062050.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0062051.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0062052.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Win32.Virut.56;Cured.;
A0062883.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.DownLoad.29459;Deleted.;
A0062884.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP422;Trojan.DownLoad.29459;Deleted.;
A0063888.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Trojan.DownLoad.29459;Deleted.;
A0063889.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Trojan.DownLoad.29459;Deleted.;
A0063922.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063922.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Trojan.DownLoad.29459;Deleted.;
A0063923.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063923.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Trojan.DownLoad.29459;Deleted.;
A0063934.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063934.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Trojan.DownLoad.29459;Deleted.;
A0063949.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063949.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Trojan.DownLoad.29459;Deleted.;
A0063950.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063950.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Trojan.DownLoad.29459;Deleted.;
A0063957.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063958.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063959.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063960.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063961.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063962.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063963.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063964.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063965.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063966.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063967.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063968.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063969.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063970.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063971.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063972.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063973.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063974.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063975.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063976.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063977.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063978.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063979.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063980.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063981.scr;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063982.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063983.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063984.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063985.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063986.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063987.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063988.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063989.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063990.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063991.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063992.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063993.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063994.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063995.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063996.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063997.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063998.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0063999.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0064000.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0064001.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0064002.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP423;Win32.Virut.56;Cured.;
A0064005.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064006.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064007.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064008.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064009.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064010.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064011.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064012.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064013.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064014.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064015.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064016.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064017.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064018.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064019.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064020.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064021.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064022.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064023.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064024.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064025.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064026.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064027.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064028.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064029.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064030.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064031.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064032.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064033.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064034.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064034.exe\winzip120_.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424\A0064034.exe;BackDoor.Bio.14;;
A0064034.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Archive contains infected objects;Moved.;
A0064035.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Trojan.DownLoad.29459;Deleted.;
A0064036.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064037.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064038.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064039.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064040.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064041.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064043.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064044.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064045.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064046.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064047.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064048.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064062.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064063.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064064.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064065.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064066.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064067.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064068.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064069.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064070.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064071.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064072.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064073.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064074.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064075.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064076.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064077.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064078.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064079.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064079.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Tool.GameCrack;;
A0064080.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064081.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064082.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064083.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064084.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064085.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064086.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064087.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064088.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064089.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064090.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064091.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064091.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Tool.GameCrack;;
A0064092.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064093.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064094.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064095.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064096.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064097.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064098.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064099.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064100.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064101.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064102.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064103.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064104.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064105.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064106.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064107.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064108.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064109.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064110.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064111.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064112.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064113.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064114.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064115.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064116.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064117.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064118.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064119.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064120.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064121.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064122.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064123.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064124.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064125.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064126.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064127.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064127.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064128.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064129.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064130.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064131.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064132.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064133.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064134.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064135.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064136.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064137.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064138.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064139.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064140.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064141.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064142.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064143.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064144.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064145.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064146.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064147.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064148.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064149.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064150.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064151.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064152.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064153.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064154.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064155.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064156.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064157.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064157.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064158.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064159.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064160.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064161.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064162.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064163.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064164.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064165.Exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064166.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064167.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064168.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064169.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064170.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064171.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064172.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064173.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064174.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064175.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064176.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064177.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064178.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064179.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064180.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064181.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064182.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064183.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064184.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064185.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064186.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064187.Exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064188.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064189.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064190.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064191.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064192.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064193.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064194.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064195.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064196.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064197.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064198.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064199.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064200.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064201.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064202.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064203.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064204.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064205.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064206.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064207.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064208.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064209.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064210.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064211.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064212.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064213.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064214.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064215.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064216.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064217.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064218.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064219.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064220.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064221.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064222.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064223.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064224.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064225.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064226.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064227.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064228.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064229.Exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064230.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064231.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064232.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064233.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064234.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064235.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064236.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064237.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064238.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064239.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064240.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064241.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064242.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064243.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064244.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064245.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064246.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Modification of Win32.Virut.56;Moved.;
A0064247.EXE;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064248.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064249.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064250.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064251.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064252.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064253.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064254.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064255.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064256.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064257.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064258.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064259.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064259.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064260.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064261.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064262.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064263.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064264.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064265.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064266.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064267.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064268.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064269.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064270.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064271.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064272.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064273.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064274.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064275.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064276.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064277.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064278.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064279.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064280.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064281.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064282.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064283.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064284.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064285.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064286.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064287.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064288.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064289.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064290.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064291.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064292.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064293.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064294.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064295.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064296.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064297.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064298.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064299.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064300.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Modification of Win32.Virut.56;Moved.;
A0064301.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064302.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064303.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064304.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064305.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064306.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064307.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064308.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064309.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064310.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064311.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064312.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064313.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064314.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064315.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064316.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064317.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064318.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064319.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064320.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064321.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064322.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064323.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064324.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064325.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064326.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064327.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064328.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064329.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064330.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064331.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064332.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064333.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064334.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064335.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064336.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064337.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064338.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064339.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064340.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064341.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064342.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064343.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064344.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
A0064345.exe;C:\System Volume Information\_restore{A6ECBA4B-C750-4E97-A9C9-42A64C7F6252}\RP424;Win32.Virut.56;Cured.;
delttsul.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
hh.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
IsUninst.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
ld10.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
notepad.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
regedit.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
slrundll.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
TASKMAN.EXE;C:\WINDOWS;Win32.Virut.56;Cured.;
twunk_32.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
VimicroCam.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
VM303UninstNT.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
VMInstNT.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
winhlp32.exe;C:\WINDOWS;Win32.Virut.56;Cured.;
_MSRSTRT.EXE;C:\WINDOWS;Win32.Virut.56;Cured.;
update.exe;C:\WINDOWS\$hf_mig$\KB886185\update;Win32.Virut.56;Cured.;
arpidfix.exe;C:\WINDOWS\$hf_mig$\KB893756\update;Win32.Virut.56;Cured.;
hh.exe;C:\WINDOWS\$hf_mig$\KB896358\SP2QFE;Win32.Virut.56;Cured.;
msiexec.exe;C:\WINDOWS\$MSI31Uninstall_KB893803v2$;Win32.Virut.56;Cured.;
accwiz.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
actmovie.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
admin.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
agentsvr.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ahui.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
alg.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
asr_fmt.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
asr_pfu.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
at.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
atmadm.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
attrib.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
auditusr.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
author.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
blastcln.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
bootcfg.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cacls.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cfgwiz.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cipher.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cisvc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cleanmgr.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cliconfg.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
clipbrd.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
clipsrv.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cmd.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cmdl32.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cmmon32.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cmstp.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
comrepl.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
comrereg.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
conf.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
conime.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
cscript.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ctfmon.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
davcdata.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dcomcnfg.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ddeshare.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
defrag.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dfrgfat.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dfrgntfs.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dialer.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
diantz.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
diskpart.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dllhost.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dmadmin.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dmremote.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dplaysvr.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dpnsvr.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dpvsetup.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
driverquery.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
drvqry.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dumprep.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dvdupgrd.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dwwin.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
dxdiag.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
eudcedit.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
evcreate.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
eventcreate.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
eventtriggers.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
evntcmd.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
evntwin.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
evtrig.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
explorer.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
extrac32.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
findstr.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fltmc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fontview.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
forcedos.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fp98sadm.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fp98swin.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fpadmcgi.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fpcount.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fpremadm.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fsquirt.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ftp.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fxsclnt.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fxscover.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
fxssvc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
getmac.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
gpresult.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
gprslt.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
grpconv.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
help.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
helpctr.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
helpsvc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
hh.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
hscupd.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
icwconn1.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
icwconn2.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
icwrmind.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ie4uinit.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
iedw.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
iexplore.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
iexpress.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
iisrstas.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
imapi.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
inetin51.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
inetwiz.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ipconfig.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ipv6.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ipxroute.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
locator.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
logman.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
logonui.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
lsass.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
magnify.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
makecab.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
migload.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
migregdb.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
migwiz.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
migwiza.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mmc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mnmsrvc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mobsync.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mofcomp.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
moviemk.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mplay32.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mplayer2.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mqbkup.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mqsvc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mqtgsvc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
msconfig.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
msdtc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mshta.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
msiexec.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
msimn.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
msiregmv.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
msoobe.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mspaint.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mstinit.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mstsc.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
mtstocom.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
muisetup.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
narrator.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
nddeapir.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
net.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
net1.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
netdde.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
netsetup.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
netsh.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
netstat.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
notepad.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
nppagent.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
nslookup.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ntbackup.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ntvdm.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
odbcad32.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
odbcconf.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
oemig50.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
oobebaln.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
openfiles.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
opnfiles.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
osk.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
packager.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
perfmon.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
pinball.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
ping.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
pintlphr.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
powercfg.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
progman.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
proquota.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
proxycfg.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
qprocess.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rasphone.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rcimlby.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rcp.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rdpclip.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rdsaddin.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rdshost.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
reg.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
regedit.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
regsvr32.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rexec.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rsh.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rsnotify.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rstrui.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rtcshare.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
rundll32.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
runonce.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
savedump.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
scardsvr.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
schtasks.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
scrcons.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
sctasks.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
sdbinst.exe;C:\WINDOWS\$NtServicePackUninstall$;Win32.Virut.56;Cured.;
LightScribeWebsite_9607541794D946E89D5752F753E35CC4.exe;C:\WINDOWS\Installer\{004C5DA2-2051-4D25-94BA-51CF810C91EB};Win32.Virut.56;Cured.;
NewShortcut1_FE82206EF6124B479F4EDD27A1E056A4.exe;C:\WINDOWS\Installer\{004C5DA2-2051-4D25-94BA-51CF810C91EB};Win32.Virut.56;Cured.;
NewShortcut2_C673DF680CDE41FC9DFBF63D31DE4F28.exe;C:\WINDOWS\Installer\{004C5DA2-2051-4D25-94BA-51CF810C91EB};Win32.Virut.56;Cured.;
QuickDemoUrl_E9752251A5AD4678977047FD65566D18.exe;C:\WINDOWS\Installer\{004C5DA2-2051-4D25-94BA-51CF810C91EB};Win32.Virut.56;Cured.;
ARPPRODUCTICON.exe;C:\WINDOWS\Installer\{505AFDC0-5E72-4928-8368-5DEA385E3647};Win32.Virut.56;Cured.;
NewShortcut3.exe;C:\WINDOWS\Installer\{505AFDC0-5E72-4928-8368-5DEA385E3647};Win32.Virut.56;Cured.;
NewShortcut4.exe;C:\WINDOWS\Installer\{505AFDC0-5E72-4928-8368-5DEA385E3647};Win32.Virut.56;Cured.;
NewShortcut5.exe;C:\WINDOWS\Installer\{505AFDC0-5E72-4928-8368-5DEA385E3647};Win32.Virut.56;Cured.;
NewShortcut901.exe;C:\WINDOWS\Installer\{505AFDC0-5E72-4928-8368-5DEA385E3647};Win32.Virut.56;Cured.;
ARPPRODUCTICON.exe;C:\WINDOWS\Installer\{80B744FE-8712-4D44-A239-EBB7B8979F7E};Win32.Virut.56;Cured.;
Pareto_AV.exe11_929EE7C553EE49E089E8424E7A686770.exe;C:\WINDOWS\Installer\{80B744FE-8712-4D44-A239-EBB7B8979F7E};Win32.Virut.56;Cured.;
Pareto_AV.exe1_211A4BFCB3354EFABD9F5DA30D8820E8.exe;C:\WINDOWS\Installer\{80B744FE-8712-4D44-A239-EBB7B8979F7E};Win32.Virut.56;Cured.;
cagicon.exe;C:\WINDOWS\Installer\{90110409-6000-11D3-8CFE-0150048383C9};Win32.Virut.56;Cured.;
misc.exe;C:\WINDOWS\Installer\{90110409-6000-11D3-8CFE-0150048383C9};Win32.Virut.56;Cured.;
mspicons.exe;C:\WINDOWS\Installer\{90110409-6000-11D3-8CFE-0150048383C9};Win32.Virut.56;Cured.;
oisicon.exe;C:\WINDOWS\Installer\{90110409-6000-11D3-8CFE-0150048383C9};Win32.Virut.56;Cured.;
pptico.exe;C:\WINDOWS\Installer\{90110409-6000-11D3-8CFE-0150048383C9};Win32.Virut.56;Cured.;
wordicon.exe;C:\WINDOWS\Installer\{90110409-6000-11D3-8CFE-0150048383C9};Win32.Virut.56;Cured.;
xlicons.exe;C:\WINDOWS\Installer\{90110409-6000-11D3-8CFE-0150048383C9};Win32.Virut.56;Cured.;
IconCD95F66110.exe;C:\WINDOWS\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C240B5};Win32.Virut.56;Cured.;
aspnet_regiis.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
aspnet_state.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
aspnet_wp.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
CasPol.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
ConfigWizards.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
csc.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
cvtres.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
gacutil.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
IEExec.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
ilasm.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
InstallUtil.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
jsc.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
MigPol.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
MigPolWin.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
netfxupdate.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
ngen.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
RegAsm.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
RegSvcs.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
vbc.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;Win32.Virut.56;Cured.;
hotfix.exe;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates;Win32.Virut.56;Cured.;
aspnet_compiler.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
aspnet_regbrowsers.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
aspnet_regsql.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
CasPol.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
dfsvc.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
IEExec.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
InstallUtil.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
jsc.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
MSBuild.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
RegAsm.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
RegSvcs.exe;C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727;Win32.Virut.56;Cured.;
agentsvr.exe;C:\WINDOWS\msagent;Win32.Virut.56;Cured.;
helpctr.exe;C:\WINDOWS\pchealth\helpctr\binaries;Modification of Win32.Virut.56;Moved.;
12.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
19.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
1E.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
21.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
25.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
26.tmp;C:\WINDOWS\system32;Trojan.Spambot.2424;Deleted.;
29.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
2A.tmp;C:\WINDOWS\system32;Trojan.Spambot.2424;Deleted.;
3.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
8.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
accwiz.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
actmovie.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ahui.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
arp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
asr_ldm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
asr_pfu.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
at.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
atmadm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
attrib.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
auditusr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
B.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
blastcln.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
bootcfg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
bootok.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
bootvrfy.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
cacls.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
calc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
chkdsk.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
chkntfs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
cidaemon.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
cipher.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ckcnv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
cleanmgr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
cliconfg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
clipbrd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
cmdl32.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
cmmon32.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
cmstp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
comp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
compact.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
comsdupd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
conime.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
control.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
convert.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
cscript.exe;C:\WINDOWS\system32;Modification of Win32.Virut.56;Moved.;
ctfmon.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
D.tmp;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
dcomcnfg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dfrgfat.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dfrgntfs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
diantz.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
diskpart.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
diskperf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dllhst3g.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dmremote.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
doskey.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dplaysvr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dpnsvr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dpvsetup.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
driverquery.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
drmupgds.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
drwtsn32.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dumprep.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dvdplay.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dvdupgrd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
dxdiag.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
esentutl.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
eudcedit.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
eventcreate.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
eventvwr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
expand.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
extrac32.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
fc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
find.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
findstr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
finger.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
fixmapi.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
fltmc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
fontview.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
forcedos.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
freecell.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
fsquirt.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
fsutil.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ftp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
getmac.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
Goldfish.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
gpresult.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
gpupdate.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
grpconv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
HdAShCut.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
help.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
Honda ASIMO.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
hostname.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
iexpress.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
igfxcfg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
igfxext.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
igfxzoom.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
install.log;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ipconfig.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ipsec6.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ipv6.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ipxroute.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
JETCOMP.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
label.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
lights.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
lnkstub.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
lodctr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
logagent.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
logman.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
logoff.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
lpq.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
lpr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
lsass.dll;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
makecab.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
Marine Aquarium 2.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
migpwd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mmc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mmcperf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mobsync.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mountvol.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mplay32.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mpnotify.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mqbkup.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mqsvc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mqtgsvc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mrinfo.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msawonkq.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mscgerif.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mscjqdek.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mscjw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mscntd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mscvw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mscxt.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msdhjrk.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msdscg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msdzhoi.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mseknhkc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msemwnyv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msepe.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msepli.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msepor.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msertvta.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msess.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msevqp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msfdrxs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msfpc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msfqlwft.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msfrqga.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msfsori.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msfym.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msfztajx.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msgawe.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msgjpd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msgnbhbo.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msgrokq.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msgvezor.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msgzi.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshckcn.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshcs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshde.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshearts.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshjtnke.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshle.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshlik.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshlr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshov.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshovdke.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshpjsn.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshqj.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshrvgj.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mshta.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msiargd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msigeed.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msigjyfn.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msihao.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msijk.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msiklotd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msilv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msiop.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msipdoly.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msitajx.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msixwq.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msizp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msizw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msjafzmw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msjaxr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msjbvsm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msjfot.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msjkdzze.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msjlc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msjrzq.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskac.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskcdx.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskclfxm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskglm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskhes.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskifa.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskmluz.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskoit.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskqgy.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskrobkp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskttzy.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mskwn.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mslbxrbw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mslfh.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mslfs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mslhvub.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mslkgcm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msllu.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msllvet.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mslpoe.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mslrdpli.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mslrzjv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmbz.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmdkpyl.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmef.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmgdvta.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmkydyj.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmmwrsr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmpu.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmstt.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmuu.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msmvpbs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnaxx.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnazf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnbhe.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnbrl.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msncpq.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnjs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnmrkgu.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnmud.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnnd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnnwi.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msnvtd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msoclafw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msofnji.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msogagck.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msogziwd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msohqgu.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msolqz.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msopyzpx.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msoqp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msosli.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msosmak.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msosmfux.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspaint.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspbbwt.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspdvayk.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspelk.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspezf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspfwhg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msplk.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspoxvr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msppra.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspsydu.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspwf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mspxvfoe.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msqbxuuw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msqcit.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msqjbl.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msqjjexg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msqoj.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msqqzqr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msqra.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msqrvitz.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msqttk.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msrftoca.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msrfujys.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msrfz.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msrga.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msrib.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msripf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msrjgs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msrjpc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msrzocq.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mssdkwo.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mssemtu.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mssgvrym.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mssrdi.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mssryokv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mssuh.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mssvfl.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msswchx.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstghsh.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstinit.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstkrxam.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstqhdzo.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstsc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstte.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstub.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstuqrn.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstvpde.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstwo.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mstyfkw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msuangio.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msuars.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msumn.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msumuwcr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msumyms.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msuqj.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msuqtbbt.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msusss.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msuvmzw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msuvvbg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msvmh.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msvsbd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msvsqjc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msvwvop.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msvzf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msvzth.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswdzv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswert.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswfnm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswilox.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswivxok.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswlhoee.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswtzq.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswvjwot.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswvkp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswvvvxo.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mswwbg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxblgkb.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxcnky.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxdsr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxfl.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxgcm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxgprx.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxhqw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxkat.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxmss.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxojp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxsydto.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxvrx.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxypfse.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxzpobg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msxzr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msycdj.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msycfub.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msyhnkq.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
msyrzs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszamgrt.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszcnkv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszdava.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszexfl.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszgcc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszkl.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszlwto.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszozht.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszvfbu.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszxdrd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszxh.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
mszzwafy.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
napstat.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
narrator.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
nbtstat.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
nddeapir.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
net.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
netsetup.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
netsh.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
netstat.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
notepad.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
nslookup.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ntbackup.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ntvdm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
nwscript.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
odbcad32.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
odbcconf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
openfiles.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
osk.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
osuninst.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
packager.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
pathping.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
pentnt.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
perfmon.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ping.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ping6.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
pintool.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
pluscirc.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
plusdavn.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
plusmcry.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
plusmpix.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
plusnatr.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
plussand.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
plusspac.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
powercfg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
print.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
progman.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
proquota.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
proxycfg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
qappsrv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
qprocess.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
qwinsta.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rasautou.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rasdial.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rasphone.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rcp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rdpclip.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rdsaddin.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rdshost.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
reader_s.exe;C:\WINDOWS\system32;Trojan.DownLoad.29459;Deleted.;
recover.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
reg.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
regedt32.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
regini.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
regwiz.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
relog.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
replace.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
reset.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rexec.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
route.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
routemon.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rsh.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rsm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rsmsink.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rsmui.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rsnotify.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rsopprov.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rtcshare.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
runas.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
runonce.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
rwinsta.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
savedump.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
schtasks.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
scrnsave.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sdbinst.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
secedit.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sethc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
setup.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
setupn.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sfc.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
shadow.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
shrpubw.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
shutdown.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sigverif.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
skeys.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
slrundll.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
slserv.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
smbinst.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sndvol32.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sol.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sort.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
spdwnwxp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
spider.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
spiisupd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
spnpinst.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
spupdwxp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ss3dfo.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ssbezier.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ssflwbox.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ssmarque.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ssmypics.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ssmyst.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sspipes.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
ssstars.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sstext3d.scr;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
stimon.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
subst.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
svchost.dll;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
syncapp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
syskey.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
sysocmgr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
systeminfo.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
systray.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
taskkill.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tasklist.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
taskman.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tcmsetup.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tcpsvcs.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
telnet.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tftp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tlntadmn.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tlntsess.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tourstart.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tracerpt.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tracert.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tracert6.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tscon.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tscupgrd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tsdiscon.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tskill.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tsshutdn.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tswpfwrp.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
typeperf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
tzchange.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
unlodctr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
upnpcont.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
usrmlnka.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
usrprbda.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
usrshuta.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
utilman.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
uwdf.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
verclsid.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
verifier.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
vssadmin.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
w32tm.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wdfmgr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wextract.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wiaacmgr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
winexec.dll;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
winhlp32.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
winmine.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
winmsd.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
winres.dll;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
winver.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
WISPTIS.EXE;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wpabaln.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wpdshextautoplay.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wpnpinst.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
write.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wscntfy.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wscript.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wuauclt1.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
WudfHost.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
wupdmgr.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
xcopy.exe;C:\WINDOWS\system32;Win32.Virut.56;Cured.;
SwInit.exe;C:\WINDOWS\system32\Adobe\Shockwave 11;Modification of Win32.Virut.56;Moved.;
comrepl.exe;C:\WINDOWS\system32\Com;Win32.Virut.56;Cured.;
comrereg.exe;C:\WINDOWS\system32\Com;Win32.Virut.56;Cured.;
winrar[1].exe;C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\GACFMQQ0;BackDoor.BlackHole.3413;Deleted.;
click[1].jpg;C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KK84G7HM;Trojan.Siggen.2449;Deleted.;
hkcmd.exe;C:\WINDOWS\system32\DRVSTORE\igxp32_DD7E8B6F51389EF83D9294935C67902A37AE4508;Win32.Virut.56;Cured.;
igfxcfg.exe;C:\WINDOWS\system32\DRVSTORE\igxp32_DD7E8B6F51389EF83D9294935C67902A37AE4508;Win32.Virut.56;Cured.;
igfxext.exe;C:\WINDOWS\system32\DRVSTORE\igxp32_DD7E8B6F51389EF83D9294935C67902A37AE4508;Win32.Virut.56;Cured.;
igfxpers.exe;C:\WINDOWS\system32\DRVSTORE\igxp32_DD7E8B6F51389EF83D9294935C67902A37AE4508;Win32.Virut.56;Cured.;
igfxtray.exe;C:\WINDOWS\system32\DRVSTORE\igxp32_DD7E8B6F51389EF83D9294935C67902A37AE4508;Win32.Virut.56;Cured.;
genuinst.exe;C:\WINDOWS\system32\Macromed\Flash;Win32.Virut.56;Cured.;
msoobe.exe;C:\WINDOWS\system32\oobe;Win32.Virut.56;Cured.;
oobebaln.exe;C:\WINDOWS\system32\oobe;Win32.Virut.56;Cured.;
rstrui.exe;C:\WINDOWS\system32\Restore;Win32.Virut.56;Cured.;
hpztbu09.exe;C:\WINDOWS\system32\spool\drivers\w32x86\3;Win32.Virut.56;Cured.;
printfilterpipelinesvc.exe;C:\WINDOWS\system32\spool\prtprocs\w32x86;Win32.Virut.56;Cured.;
regtlib.exe;C:\WINDOWS\system32\URTTemp;Win32.Virut.56;Cured.;
migwiz.exe;C:\WINDOWS\system32\usmt;Win32.Virut.56;Cured.;
mofcomp.exe;C:\WINDOWS\system32\wbem;Win32.Virut.56;Cured.;
scrcons.exe;C:\WINDOWS\system32\wbem;Win32.Virut.56;Cured.;
unsecapp.exe;C:\WINDOWS\system32\wbem;Win32.Virut.56;Cured.;
wbemtest.exe;C:\WINDOWS\system32\wbem;Win32.Virut.56;Cured.;
wmic.exe;C:\WINDOWS\system32\wbem;Win32.Virut.56;Cured.;
wmiprvse.exe;C:\WINDOWS\system32\wbem;Win32.Virut.56;Cured.;
VRT1.tmp;C:\WINDOWS\Temp;Trojan.DownLoad.35934;Deleted.;

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Hopefully, you only wanted the .csv file, and not the aforementioned .log file.

I look forward to the next step(s) with anticipation!

So far, very few stumbling blocks to deal with. Still not gone, though.

Let's swat this pesky Virus but good, shall we?

TLoATDaE

Post #13June 22, 2009, 8:04 PM UTC

Almost forgot the new HijackThis log! (Sorry!)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:51:19 PM, on 6/22/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\windows\ld10.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
F3 - REG:win.ini: load=C:\WINDOWS\system32\msmyrrub.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [MOD] C:\Program Files\Microangelo\On Display\MODmgr.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [sysldtray] C:\windows\ld10.exe
O4 - HKLM\..\Policies\Explorer\Run: [exec] C:\WINDOWS\system32\mslpvvsu.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1209354104458
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/inst…ctDetection.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1209354216942
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/inst…ctDetection.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://plugin.driveragent.com/files/driveragent.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ksrsr6ikruhjstjash353haaaa2hd80 - Unknown owner - C:\WINDOWS\ksrsr6ikruhjstjash353haaaa2hd81.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NetMeeting Remote Desktop Sharing (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe (file missing)
O23 - Service: mser54waejsrahaetjs6ikaash80 - Unknown owner - C:\WINDOWS\mser54waejsrahaetjs6ikaash81.exe
O23 - Service: Windows Installer (MSIServer) - Unknown owner - (no file)
O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe
O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
O23 - Service: QoS RSVP (RSVP) - Unknown owner - C:\WINDOWS\system32\rsvp.exe (file missing)
O23 - Service: SessionLauncher - Prolific Technology Inc. - (no file)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)
O23 - Service: plasservice (ZeppelinService) - ParetoLogic Inc. - C:\Program Files\Common Files\ParetoLogic\PLAS\plasservice.exe

–
End of file - 9537 bytes

TLoATDaE

Post #14June 22, 2009, 9:10 PM UTC last edited June 22, 2009, 9:15 PM UTC

Quick update: I use MSIE 6 (when I use Internet Explorer it at all) on my system, but it's no longer working. After the last set of scans, all MSIE shortcuts are dead (as in, File Not Found errors). So, this begs my next set of questions: 1) Should I reinstall MSIE? 2) Should it be MSIE 6 again, or should I bite the bullet, and make it 8 (or whatever the latest, greatest version is)? 3) Should I just keep FireFox, until I'm declared 'Clean'? (This is my preferred browser, and I keep it as current as possible) Sorry to be such a pest… I'm not Trying to bump my post, either! Honest! It's just sort of working out that way. I'll keep any other odd system behaviour to myself until I have more to report, and have had a chance to further fix things, per your instructions. In future, I think I'll keep such posts to 1 per instruction set, unless I have some sort of melt-down

Thanks in advance!

Raktor

Post #15June 23, 2009, 11:36 AM UTC

As I thought, we eventually found Virut hiding in the midst…

Your system is infected with a polymorphic file infector called Virut. Virut is capable of infecting all the machine's executable files (.exe) and screensaver files (.scr). However, the problem is that the virus has a number of bugs in its code, and as a result, it may misinfect a proportion of executable files and therefore, the files are corrupted beyond repair. As of now, security experts suggest that a format and clean install, or destructive recovery if you have an OEM recovery partition, is the best way to clean the infection and it is the best and safest way to return the machine to its normal working state.

Backup all your documents and important items (personal data, work documents, etc) only. DO NOT backup any executable files (softwares) and screensavers (*.scr). It attempts to infect any accessed .exe or .scr files by appending itself to the executable.

Also, avoid backing up compressed files (zip/cab/rar) files that have .exe or .scr files inside them. Virut can penetrate and infect .exe files inside compressed files too.

Recent variants also modify htm, html, asp and php files.

Do not back up to another machine, as it may become compromised. Burn to DVD/CD, or to an external drive which has nothing else on it, and which you can format should it happen to become infected from the backups.

See miekiemoes' blog for similar comments here:
Link

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] Trojan horse Generic 13.BKQN removal

✨ Ask AI

Ask AI