This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] b.exe problem/autochk

61 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi there! Im new and I have this problem… The computer boots up with the message skipping autochk and constantly has the b.exe problem.

This is my HJT log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:53:40, on 30/07/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe
C:\Program Files\O2\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\DOCUME~1\Hans\LOCALS~1\Temp\b.exe
C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 216.217.98.100:8000
O2 - BHO: (no name) - {0404C333-35E8-4462-BB95-94B600AA8AF4} - (no file)
O2 - BHO: (no name) - {06E7832B-AA94-4ED8-AD74-5109241B3750} - (no file)
O2 - BHO: (no name) - {0a337c24-808f-45d0-b3c1-5e5254365a45} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {587d0a29-33c7-4bc9-b713-102337ab9535} - (no file)
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {BAEFA384-DB75-44FE-8C4B-6C6AC934B01E} - (no file)
O2 - BHO: (no name) - {D536E857-7B6F-4B31-9AEA-B1BBC7B40379} - (no file)
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [MSxmlHpr] RUNDLL32.EXE C:\WINDOWS\system32\msxm192z.dll,w
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
O4 - HKCU\..\Run: [Monopod] C:\DOCUME~1\Hans\LOCALS~1\Temp\b.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: iPhoneRingToneMaker.lnk = C:\Program Files\iPhoneRingToneMaker\iPhoneRingToneMaker.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\lspick.dll' missing
O15 - Trusted Zone: http://*.broadband.o2.co.uk
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-03.sun.com/s/ESD5/JSCDL/jre…ows-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6364DD6B-141F-464A-BB0F-148DB55305A4}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS1\Services\Tcpip\..\{6364DD6B-141F-464A-BB0F-148DB55305A4}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS2\Services\Tcpip\..\{6364DD6B-141F-464A-BB0F-148DB55305A4}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS3\Services\Tcpip\..\{6364DD6B-141F-464A-BB0F-148DB55305A4}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS4\Services\Tcpip\..\{6364DD6B-141F-464A-BB0F-148DB55305A4}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: rqRKdCSk - C:\WINDOWS\
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Helper Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: spkrmon - Unknown owner - C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe
O23 - Service: SupportSoft Sprocket Service (O2) (sprtsvc_O2) - SupportSoft, Inc. - C:\Program Files\O2\bin\sprtsvc.exe
O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe

–
End of file - 10671 bytes


Thank you in advance :)
[external image: Posted Image]

Hi, welcome to the WTT Forums. My username is Raktor, and I would be glad to take a look at your log.
Please be advised, as I am still in training, all my replies to you will be checked for accuracy by one of our experts to ensure that I am giving you the best possible advice.
This may cause a delay, but I will do my best to keep it as short as possible.

I will be back to you shortly with instructions. :)
[external image: Posted Image]

Hi, welcome to the WTT Forums. My username is Raktor, and I would be glad to help you with your malware issues. I'd be grateful if you would note the following:

  • Absence of symptoms does not always mean the computer is clean
  • Please do not run any scans or fixes without my direction.
  • Finally, stay with this topic until I give you the final 'All clear' post.

Note: You have an infostealer on your computer - Trojan.Gamethief. It steals online gaming passwords, but possibly more that just that. I would urge you to go to a clean computer and change all of your passwords immediately, and not use those accounts on this computer until it is all clean.

1) DDS
[external image: Posted Image]
Please download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.
  • When done, DDS will open two (2) logs:
    • DDS.txt
    • Attach.txt
  • Save both reports to your desktop.

2) GMER
Please download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • Sections
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and put it in your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries


3) What You Will Need To Post:
  • DDS logs
  • GMER log
Hi there! The computer froze whilst scanning with GMER (btw, how do I know when its finished? It looked like it was stuck on scanning one file) Here are the DDS logs though UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_09-07-30.01) Microsoft Windows XP Home Edition Boot Device: \Device\HarddiskVolume1 Install Date: 28/12/2007 11:54:25 System Uptime: 30/07/2009 16:10:53 (0 hours ago) Motherboard: Dell Inc. | | 0M3918 Processor: Intel® Pentium® 4 CPU 3.00GHz | Microprocessor | 2992/800mhz Processor: Intel® Pentium® 4 CPU 3.00GHz | Microprocessor | 2992/800mhz ==== Disk Partitions ========================= C: is FIXED (NTFS) - 59 GiB total, 38.648 GiB free. D: is FIXED (NTFS) - 90 GiB total, 77.664 GiB free. E: is CDROM () F: is CDROM () ==== Disabled Device Manager Items ============= ==== System Restore Points =================== RP1: 29/07/2009 14:24:07 - System Checkpoint RP2: 29/07/2009 14:24:07 - System Checkpoint ==== Installed Programs ====================== 2007 Microsoft Office Suite Service Pack 1 (SP1) Adobe Flash Player 10 Plugin Adobe Flash Player ActiveX Adobe Reader 8.1.1 Adobe Shockwave Player 11 AiO_Scan_CDA AiOSoftwareNPI Amazon MP3 Downloader 1.0.4 Apple Mobile Device Support Apple Software Update ATI - Software Uninstall Utility ATI Control Panel ATI Display Driver AVG 8.5 AviSynth 2.5 BlackBerry Desktop Software 4.6 Bonjour BufferChm C3100 c3100_Help CCleaner (remove only) ConvertXtoDVD 2.2.3.258h Licensed by AxMan ConvertXtoDVD [removed] Critical Update for Windows Media Player 11 (KB959772) CustomerResearchQFolder Dell ResourceCD Destinations DeviceManagementQFolder DivX Content Uploader DivX Web Player DocProc DocProcQFolder eSupportQFolder Fax_CDA Free YouTube to Mp3 Converter version 3.1 Google Chrome HijackThis 2.0.2 Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB914440) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB926239) Hotfix for Windows XP (KB952287) Hotspot Shield 1.17 HP Customer Participation Program 7.0 HP Imaging Device Functions 7.0 HP Photosmart Essential HP Photosmart, Officejet and Deskjet 7.0.A HP Software Update HP Solution Center 7.0 HPPhotoSmartExpress HPProductAssistant InstantShareDevicesMFC Intel® 537EP V9x DF PCI Modem Intel® PRO Network Adapters and Drivers iTunes Java™ 6 Update 10 Java™ 6 Update 2 Malwarebytes' Anti-Malware MarketResearch Microsoft .NET Framework 2.0 Service Pack 1 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Software Update for Web Folders (English) 12 Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Mozilla Firefox (3.0.11) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MSXML 6 Service Pack 2 (KB954459) NewCopy_CDA O2 Broadband Assistant OCR Software by I.R.I.S 7.0 PanoStandAlone PeerGuardian 2.0 PowerISO ProductContextNPI QuickTime Readme Roxio Media Manager Scan ScannerCopy Security Update for 2007 Microsoft Office System (KB951550) Security Update for 2007 Microsoft Office System (KB951944) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB969679) Security Update for Microsoft Office Excel 2007 (KB969682) Security Update for Microsoft Office OneNote 2007 (KB950130) Security Update for Microsoft Office PowerPoint 2007 (KB957789) Security Update for Microsoft Office Publisher 2007 (KB969693) Security Update for Microsoft Office system 2007 (KB954326) Security Update for Microsoft Office system 2007 (KB969613) Security Update for Microsoft Office Word 2007 (KB969604) Security Update for Visio 2007 (KB947590) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Internet Explorer 7 (KB953838) Security Update for Windows Internet Explorer 7 (KB956390) Security Update for Windows Internet Explorer 7 (KB958215) Security Update for Windows Internet Explorer 7 (KB960714) Security Update for Windows Internet Explorer 7 (KB961260) Security Update for Windows Internet Explorer 7 (KB963027) Security Update for Windows Internet Explorer 7 (KB969897) Security Update for Windows Internet Explorer 7 (KB972260) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 11 (KB954154) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB936782) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB923789) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB938464) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB941693) Security Update for Windows XP (KB943055) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944653) Security Update for Windows XP (KB945553) Security Update for Windows XP (KB946026) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB948590) Security Update for Windows XP (KB948881) Security Update for Windows XP (KB950749) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951066) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB953839) Security Update for Windows XP (KB954211) Security Update for Windows XP (KB954600) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956391) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956841) Security Update for Windows XP (KB957095) Security Update for Windows XP (KB957097) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958687) Security Update for Windows XP (KB958690) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960715) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB961371) Security Update for Windows XP (KB961373) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB968537) Security Update for Windows XP (KB969898) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB971633) Security Update for Windows XP (KB973346) SolutionCenter SoundMAX Spybot - Search & Destroy Status Toolbox TrayApp Uninstall 1.0.0.1 Unload Unlocker 1.8.7 Update for 2007 Microsoft Office System (KB967642) Update for Microsoft Office Outlook 2007 (KB969907) Update for Outlook 2007 Junk Email Filter (kb971933) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB904942) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB930916) Update for Windows XP (KB932823-v3) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Update for Windows XP (KB942763) Update for Windows XP (KB951072-v2) Update for Windows XP (KB955839) Update for Windows XP (KB967715) VideoLAN VLC media player 0.8.5 Videora iPod touch Converter 3.07 WebFldrs XP WebReg Windows Installer 3.1 (KB893803) Windows Internet Explorer 7 Windows Live installer Windows Live Messenger Windows Live Sign-in Assistant Windows Media Format 11 runtime Windows Media Player 11 Windows Resource Kit Tools Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 WinRAR archiver Yahoo! Messenger ==== Event Viewer Messages From Past Week ======== 29/07/2009 14:59:52, error: System Error [1003] - Error code 100000d1, parameter1 00000000, parameter2 00000002, parameter3 00000000, parameter4 af679c5e. 29/07/2009 14:44:32, error: Service Control Manager [7034] - The spkrmon service terminated unexpectedly. It has done this 1 time(s). 29/07/2009 14:44:32, error: Service Control Manager [7034] - The Roxio Upnp Server 9 service terminated unexpectedly. It has done this 1 time(s). 29/07/2009 14:44:32, error: Service Control Manager [7034] - The Pml Driver HPZ12 service terminated unexpectedly. It has done this 1 time(s). 29/07/2009 14:44:32, error: Service Control Manager [7034] - The LiveShare P2P Server 9 service terminated unexpectedly. It has done this 1 time(s). 29/07/2009 14:44:32, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s). 29/07/2009 14:44:32, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s). 29/07/2009 14:44:32, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s). 29/07/2009 14:44:32, error: Service Control Manager [7031] - The Hotspot Shield Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 29/07/2009 14:44:32, error: Service Control Manager [7031] - The Hotspot Shield Helper Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 29/07/2009 14:44:32, error: Service Control Manager [7031] - The AVG Free8 WatchDog service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 29/07/2009 14:44:32, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 29/07/2009 14:43:11, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the SupportSoft Sprocket Service (O2) service to connect. 29/07/2009 14:38:12, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AvgLdx86 AvgMfx86 bhisiyar Fips intelppm OMCI SASDIFSV SASKUTIL SCDEmu 29/07/2009 14:36:57, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} 24/07/2009 10:12:00, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: bhisiyar SASDIFSV SASKUTIL 24/07/2009 10:10:39, error: Service Control Manager [7023] - The Microsoft USB 2.0 Enhanced Host Controller Miniport Controller service terminated with the following error: The specified module could not be found. 24/07/2009 10:10:39, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Roxio Hard Drive Watcher 9 service to connect. 24/07/2009 10:10:39, error: Service Control Manager [7000] - The ndlnm service failed to start due to the following error: The system cannot find the file specified. ==== End Of File =========================== DDS (Ver_09-07-30.01) - NTFSx86 Run by [removed] at 16:14:35.45 on 30/07/2009 Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_10 Microsoft Windows XP Home Edition 5.1.2600.2.1252.44.1033.18.2046.1332 [GMT 1:00] AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} ============== Running Processes =============== C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Hotspot Shield\bin\openvpnas.exe C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\HPZipm12.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\WINDOWS\Explorer.EXE C:\DOCUME~1\Hans\LOCALS~1\Temp\b.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\PeerGuardian2\pg2.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe C:\Program Files\O2\bin\sprtsvc.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\Documents and Settings\Hans\Local Settings\Application Data\Google\Chrome\Application\chrome.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Hans\Desktop\dds.scr ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ uInternet Settings,ProxyServer = 216.217.98.100:8000 BHO: {0404C333-35E8-4462-BB95-94B600AA8AF4} - No File BHO: {06E7832B-AA94-4ED8-AD74-5109241B3750} - No File BHO: {0a337c24-808f-45d0-b3c1-5e5254365a45} - No File BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll BHO: {587d0a29-33c7-4bc9-b713-102337ab9535} - No File BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: {BAEFA384-DB75-44FE-8C4B-6C6AC934B01E} - No File BHO: {D536E857-7B6F-4B31-9AEA-B1BBC7B40379} - No File BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: Hotspot Shield Class: {f9e4a054-e9b1-4bc3-83a3-76a1ae736170} - c:\program files\hotspot shield\hssie\HssIE.dll uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe uRun: [PeerGuardian] c:\program files\peerguardian2\pg2.exe uRun: [Google Update] "c:\documents and settings\hans\local settings\application data\google\update\GoogleUpdate.exe" /c uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe uRun: [AdobeUpdater] "c:\program files\common files\adobe\updater5\AdobeUpdater.exe" uRun: [Monopod] c:\docume~1\hans\locals~1\temp\b.exe mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe" mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript mRun: [MSxmlHpr] RUNDLL32.EXE c:\windows\system32\msxm192z.dll,w dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE StartupFolder: c:\docume~1\hans\startm~1\programs\startup\iphone~1.lnk - c:\program files\iphoneringtonemaker\iPhoneRingToneMaker.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll Trusted Zone: o2.co.uk\*.broadband DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://dl8-cdn-03.sun.com/s/ESD5/JSCDL/jre/6u10-b92-b/jinstall-6u10-windows-i586-jc.cab?e=1227306199058&h=69d4550c78df93806584b2a1daaf6ba1/&filename=jinstall-6u10-windows-i586-jc.cab DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab TCP: {6364DD6B-141F-464A-BB0F-148DB55305A4} = 208.67.222.222,208.67.220.220 Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg8\avgpp.dll Notify: avgrsstarter - avgrsstx.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\hans\applic~1\mozilla\firefox\profiles\z4ygg7qy.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.digitalspy.co.uk/ FF - component: c:\program files\avg\avg8\firefox\components\avgssff.dll FF - plugin: c:\documents and settings\hans\local settings\application data\google\update\1.2.183.7\npGoogleOneClick8.dll FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} ============= SERVICES / DRIVERS =============== R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2008-11-16 335752] R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2007-12-28 27784] R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2008-11-16 298776] R2 HssSrv;Hotspot Shield Helper Service;c:\program files\hotspot shield\hsswpr\hsssrv.exe [2009-4-3 364008] R2 sprtsvc_O2;SupportSoft Sprocket Service (O2);c:\program files\o2\bin\sprtsvc.exe [2007-6-7 202280] R3 HssDrv;Hotspot Shield Helper Miniport;c:\windows\system32\drivers\hssdrv.sys [2009-4-7 33840] S0 bhisiyar;bhisiyar;c:\windows\system32\drivers\ykvtjvwz.sys [] S1 8c1585bf;8c1585bf;c:\windows\system32\drivers\8c1585bf.sys –> c:\windows\system32\drivers\8c1585bf.sys [?] S1 SASDIFSV;SASDIFSV;\??\c:\program files\superantispyware\sasdifsv.sys –> c:\program files\superantispyware\SASDIFSV.SYS [?] S1 SASKUTIL;SASKUTIL;\??\c:\program files\superantispyware\saskutil.sys –> c:\program files\superantispyware\SASKUTIL.sys [?] S2 ndlnm;ndlnm;c:\windows\system32\drivers\tmgkt.sys –> c:\windows\system32\drivers\tmgkt.sys [?] S2 xaunuihq;Microsoft USB 2.0 Enhanced Host Controller Miniport Controller;c:\windows\system32\svchost.exe -k netsvcs [2004-8-12 14336] S3 HssTrayService;Hotspot Shield Tray Service;c:\program files\hotspot shield\bin\HssTrayService.exe [2009-6-1 34352] S3 SASENUM;SASENUM;\??\c:\program files\superantispyware\sasenum.sys –> c:\program files\superantispyware\SASENUM.SYS [?] =============== Created Last 30 ================ 2009-07-29 15:04 –d—– c:\docume~1\hans\applic~1\Logs 2009-07-29 14:40 61,440 a——- c:\windows\system32\drivers\btrjggtc.sys 2009-07-29 14:34 91 a——- c:\windows\system32\vsfocefogodjge.dat 2009-07-29 14:25 –d—– c:\docume~1\alluse~1\applic~1\16755314 2009-07-29 14:24 1,699 a——- c:\windows\system32\vsfocexdoyrwaq.dat 2009-07-04 07:26 –d—– c:\program files\ACW ==================== Find3M ==================== 2009-07-29 14:40 230 a——- c:\program files\xnmkt.txt 2009-07-18 14:32 335,752 a——- c:\windows\system32\drivers\avgldx86.sys 2009-07-13 13:36 38,160 a——- c:\windows\system32\drivers\mbamswissarmy.sys 2009-07-13 13:36 19,096 a——- c:\windows\system32\drivers\mbam.sys 2009-06-29 17:12 827,392 a——- c:\windows\system32\wininet.dll 2009-06-29 17:12 78,336 a——- c:\windows\system32\ieencode.dll 2009-06-29 17:12 17,408 ——– c:\windows\system32\corpol.dll 2009-06-22 16:25 11,952 a——- c:\windows\system32\avgrsstx.dll 2009-06-16 15:55 119,808 a——- c:\windows\system32\t2embed.dll 2009-06-16 15:55 82,432 a——- c:\windows\system32\fontsub.dll 2009-06-10 15:40 209,203 a——- c:\windows\system32\kungsfodwitacj.dat 2009-06-03 20:27 1,290,752 a——- c:\windows\system32\quartz.dll 2009-05-07 16:44 344,064 a——- c:\windows\system32\localspl.dll 2008-01-13 19:19 47,360 a——- c:\docume~1\hans\applic~1\pcouffin.sys ============= FINISH: 16:15:24.75 ===============
Try GMER in Safe Mode instead.

====================================

Note: We recommend that you save these instructions to your desktop, or print them out, as we will be going into Safe Mode during part of this fix. Select all of the text, copy (Ctrl+C) and paste (Ctrl+V) to a Notepad (Start->Programs->Accessories) document, then save (Ctrl+S) to your desktop.

Please reboot your computer in Safe Mode by doing the following:
  • Restart your computer.
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually.
  • Instead of Windows loading as normal, a menu with options should appear.
  • Select the first option, to run Windows in Safe Mode, then press Enter.
  • Choose your usual account.

  • Rename GMER.exe to REMG.exe
  • Double click REMG.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • Sections
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and put it in your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
Hi there here is the GMER log.. Thanks again for your time!

GMER 1.0.15.15011 [REMG.exe.exe] - http://www.gmer.net
Rootkit scan 2009-07-31 06:32:35
Windows 5.1.2600 Service Pack 2


—- System - GMER 1.0.15 —-

Code F7658F92 ZwCreateDirectoryObject
Code F7658D47 ZwCreateFile
Code F76590E2 ZwCreateKey
Code F765924A ZwCreateSection
Code F7659D62 ZwEnumerateKey
Code F76599FB ZwEnumerateValueKey
Code 8A775508 ZwFlushInstructionCache
Code F765A5D5 ZwLoadDriver
Code F765903A ZwOpenDirectoryObject
Code F7658ED8 ZwOpenFile
Code F76591A2 ZwOpenKey
Code F765930A ZwOpenSection
Code F76593B2 ZwOpenSymbolicLinkObject
Code F765A6B8 ZwQueryDirectoryFile
Code F7659680 ZwQueryDirectoryObject
Code F765A091 ZwQueryValueKey
Code F7658E12 IoCreateFile
Code F7658E88 IoCreateStreamFileObject
Code 8A7365B6 IofCallDriver
Code 8A7365EE IofCompleteRequest
Code F7658D46 NtCreateFile
Code F7659249 NtCreateSection
Code F7658ED7 NtOpenFile
Code F765A6B7 NtQueryDirectoryFile
Code F7658FE4 ZwCreateDirectoryObject
Code F7658DA5 ZwCreateFile
Code F7659140 ZwCreateKey
Code F76592A8 ZwCreateSection
Code F7659EF6 ZwEnumerateKey
Code F7659BA9 ZwEnumerateValueKey
Code F765A643 ZwLoadDriver
Code F765908C ZwOpenDirectoryObject
Code F7658F33 ZwOpenFile
Code F76591F4 ZwOpenKey
Code F765935C ZwOpenSection
Code F7659404 ZwOpenSymbolicLinkObject
Code F765A764 ZwQueryDirectoryFile
Code F765983A ZwQueryDirectoryObject
Code F765A212 ZwQueryValueKey

—- Devices - GMER 1.0.15 —-

Device \Driver\bhisiyar \Device\SAMPLEDEV35 F7658416

—- Modules - GMER 1.0.15 —-

Module ykvtjvwz.sys (*** hidden *** ) F7657000-F7660000 (36864 bytes)

—- Services - GMER 1.0.15 —-

Service system32\drivers\kungsfoasunwme.sys (*** hidden *** ) [SYSTEM] kungsfydiiwong <– ROOTKIT !!!
Service C:\WINDOWS\system32\drivers\SKYNETvkbfpoqo.sys (*** hidden *** ) [SYSTEM] SKYNETpjqqfgqf <– ROOTKIT !!!

—- Registry - GMER 1.0.15 —-

Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong@start 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong@type 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong@group file system
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong@imagepath \systemroot\system32\drivers\kungsfoasunwme.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\main
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\main@aid 10002
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\main@sid 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\main@cmddelay 7200
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\main\delete
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\main\injector
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\main\injector@* kungsfwsp.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\main\tasks
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\modules
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\[removed] \systemroot\system32\drivers\kungsfoasunwme.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfccnyvhsa.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfodwitacj.dat
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfmtjnoqbp.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfuuoedjrp.dat
Reg HKLM\SYSTEM\CurrentControlSet\Services\SKYNETpjqqfgqf@start 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\SKYNETpjqqfgqf@type 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\SKYNETpjqqfgqf@group file system
Reg HKLM\SYSTEM\CurrentControlSet\Services\SKYNETpjqqfgqf@imagepath \systemroot\system32\drivers\SKYNETvkbfpoqo.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\SKYNETpjqqfgqf\main
Reg HKLM\SYSTEM\CurrentControlSet\Services\SKYNETpjqqfgqf\main\injector
Reg HKLM\SYSTEM\CurrentControlSet\Services\SKYNETpjqqfgqf\modules
Reg HKLM\SYSTEM\CurrentControlSet\Services\SKYNETpjqqfgqf\[removed] \systemroot\system32\drivers\SKYNETvkbfpoqo.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\SKYNETpjqqfgqf\[removed] \systemroot\system32\SKYNETmpetsspt.dll
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong@start 1
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong@type 1
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong@group file system
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong@imagepath \systemroot\system32\drivers\kungsfoasunwme.sys
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\main (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\main@aid 10002
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\main@sid 0
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\main@cmddelay 7200
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\main\delete (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\main\injector (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\main\injector@* kungsfwsp.dll
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\main\tasks (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\modules (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\[removed] \systemroot\system32\drivers\kungsfoasunwme.sys
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfccnyvhsa.dll
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfodwitacj.dat
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfmtjnoqbp.dll
Reg HKLM\SYSTEM\ControlSet002\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfuuoedjrp.dat
Reg HKLM\SYSTEM\ControlSet002\Services\SKYNETpjqqfgqf@start 1
Reg HKLM\SYSTEM\ControlSet002\Services\SKYNETpjqqfgqf@type 1
Reg HKLM\SYSTEM\ControlSet002\Services\SKYNETpjqqfgqf@group file system
Reg HKLM\SYSTEM\ControlSet002\Services\SKYNETpjqqfgqf@imagepath \systemroot\system32\drivers\SKYNETvkbfpoqo.sys
Reg HKLM\SYSTEM\ControlSet002\Services\SKYNETpjqqfgqf\main (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\SKYNETpjqqfgqf\main\injector (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\SKYNETpjqqfgqf\modules (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\SKYNETpjqqfgqf\[removed] \systemroot\system32\drivers\SKYNETvkbfpoqo.sys
Reg HKLM\SYSTEM\ControlSet002\Services\SKYNETpjqqfgqf\[removed] \systemroot\system32\SKYNETmpetsspt.dll
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong@start 1
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong@type 1
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong@group file system
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong@imagepath \systemroot\system32\drivers\kungsfoasunwme.sys
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\main (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\main@aid 10002
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\main@sid 0
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\main@cmddelay 7200
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\main\delete (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\main\injector (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\main\injector@* kungsfwsp.dll
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\main\tasks (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\modules (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\[removed] \systemroot\system32\drivers\kungsfoasunwme.sys
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfccnyvhsa.dll
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfodwitacj.dat
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfmtjnoqbp.dll
Reg HKLM\SYSTEM\ControlSet003\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfuuoedjrp.dat
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong@start 1
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong@type 1
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong@group file system
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong@imagepath \systemroot\system32\drivers\kungsfoasunwme.sys
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\main (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\main@aid 10002
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\main@sid 0
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\main@cmddelay 7200
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\main\delete (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\main\injector (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\main\injector@* kungsfwsp.dll
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\main\tasks (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\modules (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\[removed] \systemroot\system32\drivers\kungsfoasunwme.sys
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfccnyvhsa.dll
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfodwitacj.dat
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfmtjnoqbp.dll
Reg HKLM\SYSTEM\ControlSet004\Services\kungsfydiiwong\[removed] \systemroot\system32\kungsfuuoedjrp.dat
Reg HKLM\SYSTEM\ControlSet004\Services\SKYNETpjqqfgqf@start 1
Reg HKLM\SYSTEM\ControlSet004\Services\SKYNETpjqqfgqf@type 1
Reg HKLM\SYSTEM\ControlSet004\Services\SKYNETpjqqfgqf@group file system
Reg HKLM\SYSTEM\ControlSet004\Services\SKYNETpjqqfgqf@imagepath \systemroot\system32\drivers\SKYNETvkbfpoqo.sys
Reg HKLM\SYSTEM\ControlSet004\Services\SKYNETpjqqfgqf\main (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\SKYNETpjqqfgqf\main\injector (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\SKYNETpjqqfgqf\modules (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\SKYNETpjqqfgqf\[removed] \systemroot\system32\drivers\SKYNETvkbfpoqo.sys
Reg HKLM\SYSTEM\ControlSet004\Services\SKYNETpjqqfgqf\[removed] \systemroot\system32\SKYNETmpetsspt.dll
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw@start 1
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw@type 1
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw@group file system
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw@imagepath \systemroot\system32\drivers\vsfocetxumuycp.sys
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\main (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\main@aid 10002
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\main@sid 1
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\main@cmddelay 14400
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\main\delete (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\main\injector (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\main\injector@* vsfocewsp.dll
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\main\tasks (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\modules (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\[removed] \systemroot\system32\drivers\vsfocetxumuycp.sys
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\[removed] \systemroot\system32\vsfoceqfqqsbdj.dll
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\[removed] \systemroot\system32\vsfocexdoyrwaq.dat
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\[removed] \systemroot\system32\vsfocebirvkbmr.dll
Reg HKLM\SYSTEM\ControlSet004\Services\vsfocejoymcvbw\[removed] \systemroot\system32\vsfocefogodjge.dat

—- Files - GMER 1.0.15 —-

File C:\WINDOWS\system32\drivers\SKYNETvkbfpoqo.sys 19968 bytes executable <– ROOTKIT !!!
File C:\WINDOWS\system32\drivers\ykvtjvwz.sys 25088 bytes executable <– ROOTKIT !!!

—- Services - GMER 1.0.15 —-

Service C:\WINDOWS\system32\drivers\ykvtjvwz.sys [BOOT] bhisiyar <– ROOTKIT !!!

—- EOF - GMER 1.0.15 —-
Please read through the instructions to familiarize yourself with what to expect when the tool runs.

Please download Combofix from either of the links below, and save it to your desktop.
You must rename it before saving it. Save it as Combo-Fix.exe.

[external image: Posted Image]

Link 1
Link 2

**Note: It is important that it is saved directly to your desktop**

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link:How to Disable your Security Programs
  • Double click on Combo-Fix.exe & follow the prompts. Close all browsers/windows first.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
Hi! I did as asked… is it normal that ComboFix changed my desktop background? Here's the log

ComboFix 09-07-29.04 - Hans 31/07/2009 8:39.2.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.44.1033.18.2046.1621 [GMT 1:00]
Running from: c:\documents and settings\[removed]\Desktop\Combo-Fix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Fonts\mlog
c:\windows\Install.txt
c:\windows\Installer\1821e.msi
c:\windows\Installer\3f619.msp
c:\windows\Installer\4d54e.msi
c:\windows\Installer\57779.msi
c:\windows\Installer\db6ec.msi
c:\windows\system32\Drivers\btrjggtc.sys
c:\windows\system32\drivers\kungsfoasunwme.sys
c:\windows\system32\drivers\SKYNETvkbfpoqo.sys
c:\windows\system32\Iasex.dll
c:\windows\system32\Install.txt
c:\windows\system32\kungsfccnyvhsa.dll
c:\windows\system32\kungsfmtjnoqbp.dll
c:\windows\system32\kungsfodwitacj.dat
c:\windows\system32\kungsfuuoedjrp.dat
c:\windows\system32\SKYNETmpetsspt.dll
c:\windows\system32\vsfocefogodjge.dat
c:\windows\system32\vsfocexdoyrwaq.dat
c:\windows\Tasks\At1.job
c:\windows\Tasks\atiffjpd.job

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Service_kungsfydiiwong
——-\Service_SKYNETpjqqfgqf


((((((((((((((((((((((((( Files Created from 2009-06-28 to 2009-07-31 )))))))))))))))))))))))))))))))
.

2009-07-29 14:04 . 2009-07-29 14:04 ——– d—–w- c:\documents and settings\Hans\Application Data\Logs
2009-07-29 13:54 . 2009-07-29 13:54 3775175 —-a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-07-29 13:25 . 2009-07-29 13:25 ——– d—–w- c:\documents and settings\All Users\Application Data\16755314
2009-07-17 00:52 . 2009-07-31 05:52 ——– d—–w- c:\documents and settings\Hans\Local Settings\Application Data\Temp
2009-07-04 06:26 . 2009-07-04 06:40 ——– d—–w- c:\program files\ACW

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-31 07:35 . 2008-01-10 21:24 ——– d—–w- c:\program files\PeerGuardian2
2009-07-31 07:29 . 2008-11-24 10:20 ——– d—–w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-07-29 13:54 . 2008-11-07 18:10 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2009-07-29 13:40 . 2009-07-29 13:40 230 —-a-w- c:\program files\xnmkt.txt
2009-07-27 15:06 . 2008-01-13 18:19 ——– d—–w- c:\documents and settings\Hans\Application Data\Vso
2009-07-18 13:32 . 2008-11-16 00:15 335752 —-a-w- c:\windows\system32\drivers\avgldx86.sys
2009-07-15 21:17 . 2007-12-29 14:59 ——– d—–w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-07-13 12:36 . 2008-11-07 18:10 38160 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-13 12:36 . 2008-11-07 18:11 19096 —-a-w- c:\windows\system32\drivers\mbam.sys
2009-06-29 16:12 . 2004-08-12 14:09 827392 —-a-w- c:\windows\system32\wininet.dll
2009-06-29 16:12 . 2004-08-12 13:58 78336 —-a-w- c:\windows\system32\ieencode.dll
2009-06-29 16:12 . 2004-08-12 13:56 17408 ——w- c:\windows\system32\corpol.dll
2009-06-22 15:25 . 2008-11-16 00:15 11952 —-a-w- c:\windows\system32\avgrsstx.dll
2009-06-22 15:25 . 2007-12-28 19:51 27784 —-a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-06-16 14:55 . 2004-08-12 14:07 119808 —-a-w- c:\windows\system32\t2embed.dll
2009-06-16 14:55 . 2004-08-12 13:57 82432 —-a-w- c:\windows\system32\fontsub.dll
2009-06-04 12:51 . 2009-06-04 12:50 ——– d—–w- c:\program files\Unlocker
2009-06-03 19:27 . 2004-08-12 14:03 1290752 —-a-w- c:\windows\system32\quartz.dll
2009-06-03 03:19 . 2009-04-07 19:13 ——– d—–w- c:\program files\Hotspot Shield
2009-06-02 01:43 . 2008-11-16 00:15 ——– d—–w- c:\documents and settings\All Users\Application Data\avg8
2009-05-20 19:54 . 2009-04-07 19:13 33840 —-a-w- c:\windows\system32\drivers\hssdrv.sys
2009-05-07 15:44 . 2004-08-12 13:59 344064 —-a-w- c:\windows\system32\localspl.dll
2009-06-16 21:30 . 2009-01-30 17:34 134648 —-a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2009-04-07 19:13 332776 —-a-w- c:\program files\Hotspot Shield\hssie\HssIE.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-12 15360]
"PeerGuardian"="c:\program files\PeerGuardian2\pg2.exe" [2005-09-18 1421824]
"Google Update"="c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-12-18 133104]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]
"AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2009-03-16 2356088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-05-28 335872]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 39792]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-07-13 1287440]
"MSxmlHpr"="c:\windows\system32\msxm192z.dll" [2004-08-17 28672]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-12 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-06-22 15:25 11952 —-a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\O2\\bin\\wificfg.exe"=
"c:\\Program Files\\O2\\agent\\bin\\bcont.exe"=
"c:\\Program Files\\Common Files\\SupportSoft\\bin\\ssrc.exe"=
"c:\\Program Files\\O2\\agent\\bin\\bcont_nm.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [16/11/2008 01:15 335752]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [16/11/2008 01:15 298776]
R2 HssSrv;Hotspot Shield Helper Service;c:\program files\Hotspot Shield\HssWPR\hsssrv.exe [03/04/2009 19:18 364008]
R2 sprtsvc_O2;SupportSoft Sprocket Service (O2);c:\program files\O2\bin\sprtsvc.exe [07/06/2007 17:19 202280]
R3 HssDrv;Hotspot Shield Helper Miniport;c:\windows\system32\drivers\hssdrv.sys [07/04/2009 20:13 33840]
S0 bhisiyar;bhisiyar;c:\windows\system32\drivers\ykvtjvwz.sys []
S1 8c1585bf;8c1585bf;c:\windows\system32\drivers\8c1585bf.sys –> c:\windows\system32\drivers\8c1585bf.sys [?]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS –> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.sys –> c:\program files\SUPERAntiSpyware\SASKUTIL.sys [?]
S2 ndlnm;ndlnm;c:\windows\system32\drivers\tmgkt.sys –> c:\windows\system32\drivers\tmgkt.sys [?]
S2 xaunuihq;Microsoft USB 2.0 Enhanced Host Controller Miniport Controller;c:\windows\System32\svchost.exe -k netsvcs [12/08/2004 15:06 14336]
S3 HssTrayService;Hotspot Shield Tray Service;c:\program files\Hotspot Shield\bin\HssTrayService.exe [01/06/2009 19:58 34352]
S3 SASENUM;SASENUM;\??\c:\program files\SUPERAntiSpyware\SASENUM.SYS –> c:\program files\SUPERAntiSpyware\SASENUM.SYS [?]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
xaunuihq
.
Contents of the 'Scheduled Tasks' folder

2009-07-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 12:34]

2009-07-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-776561741-839522115-1004Core.job
- c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-18 23:39]

2009-07-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-776561741-839522115-1004UA.job
- c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-18 23:39]
.
- - - - ORPHANS REMOVED - - - -

BHO-{0404C333-35E8-4462-BB95-94B600AA8AF4} - (no file)
BHO-{06E7832B-AA94-4ED8-AD74-5109241B3750} - (no file)
BHO-{0a337c24-808f-45d0-b3c1-5e5254365a45} - (no file)
BHO-{587d0a29-33c7-4bc9-b713-102337ab9535} - (no file)
BHO-{BAEFA384-DB75-44FE-8C4B-6C6AC934B01E} - (no file)
BHO-{D536E857-7B6F-4B31-9AEA-B1BBC7B40379} - (no file)
HKCU-Run-SUPERAntiSpyware - c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Notify-rqRKdCSk - (no file)


.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyServer = 216.217.98.100:8000
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: o2.co.uk\*.broadband
TCP: {6364DD6B-141F-464A-BB0F-148DB55305A4} = 208.67.222.222,208.67.220.220
FF - ProfilePath - c:\documents and settings\Hans\Application Data\Mozilla\Firefox\Profiles\z4ygg7qy.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.digitalspy.co.uk/
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\1.2.183.7\npGoogleOneClick8.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-31 08:43
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …


c:\windows\system32\drivers\ykvtjvwz.sys 25088 bytes executable

scan completed successfully
hidden files: 1

**************************************************************************
.
Completion time: 2009-07-31 8:45
ComboFix-quarantined-files.txt 2009-07-31 07:45

Pre-Run: 41,374,896,128 bytes free
Post-Run: 41,878,802,432 bytes free

WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

Current=2 Default=2 Failed=1 LastKnownGood=5 Sets=1,2,3,4,5
174 — E O F — 2009-07-29 15:33
The desktop isn't much of an issue, that can be fixed later.

  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:

    http://forums.whatthetech.com/b_exe_problem_autochk_t105666.html
    
    Collect::
    c:\windows\system32\drivers\ykvtjvwz.sys
    c:\windows\system32\drivers\8c1585bf.sys
    c:\windows\system32\drivers\tmgkt.sys
    c:\windows\system32\msxm192z.dll
    
    File:: 
    c:\program files\xnmkt.txt
    
    Folder::
    c:\documents and settings\All Users\Application Data\16755314
    
    Driver:: 
    bhisiyar
    8c1585bf
    ndlnm
    xaunuihq
    
    NetSvc::
    xaunuihq
    
    Registry::
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MSxmlHpr"=-
  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

    [external image: Posted Image]
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • If you need help to disable your protection programs see here.
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
Hi.. here is the log

ComboFix 09-07-29.04 - Hans 31/07/2009 19:20.3.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.44.1033.18.2046.1561 [GMT 1:00]
Running from: c:\documents and settings\[removed]\Desktop\Combo-Fix.exe
Command switches used :: c:\documents and settings\Hans\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
* Created a new restore point

FILE ::
"c:\program files\xnmkt.txt"

file zipped: c:\windows\system32\drivers\ykvtjvwz.sys
file zipped: c:\windows\system32\msxm192z.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\16755314
c:\documents and settings\All Users\Application Data\16755314\16755314
c:\program files\xnmkt.txt
c:\windows\system32\msxm192z.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Legacy_BHISIYAR
——-\Legacy_XAUNUIHQ
——-\Service_8c1585bf
——-\Service_bhisiyar
——-\Service_ndlnm
——-\Service_xaunuihq


((((((((((((((((((((((((( Files Created from 2009-06-28 to 2009-07-31 )))))))))))))))))))))))))))))))
.

2009-07-29 14:04 . 2009-07-29 14:04 ——– d—–w- c:\documents and settings\Hans\Application Data\Logs
2009-07-29 13:54 . 2009-07-29 13:54 3775175 —-a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-07-17 00:52 . 2009-07-31 05:52 ——– d—–w- c:\documents and settings\Hans\Local Settings\Application Data\Temp
2009-07-04 06:26 . 2009-07-04 06:40 ——– d—–w- c:\program files\ACW

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-31 18:27 . 2008-01-10 21:24 ——– d—–w- c:\program files\PeerGuardian2
2009-07-31 18:20 . 2009-01-14 22:21 25088 —-a-w- c:\windows\system32\drivers\ykvtjvwz.sys
2009-07-31 08:29 . 2008-01-13 18:19 ——– d—–w- c:\documents and settings\Hans\Application Data\Vso
2009-07-31 07:29 . 2008-11-24 10:20 ——– d—–w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-07-29 13:54 . 2008-11-07 18:10 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2009-07-18 13:32 . 2008-11-16 00:15 335752 —-a-w- c:\windows\system32\drivers\avgldx86.sys
2009-07-15 21:17 . 2007-12-29 14:59 ——– d—–w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-07-13 12:36 . 2008-11-07 18:10 38160 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-13 12:36 . 2008-11-07 18:11 19096 —-a-w- c:\windows\system32\drivers\mbam.sys
2009-06-29 16:12 . 2004-08-12 14:09 827392 —-a-w- c:\windows\system32\wininet.dll
2009-06-29 16:12 . 2004-08-12 13:58 78336 —-a-w- c:\windows\system32\ieencode.dll
2009-06-29 16:12 . 2004-08-12 13:56 17408 ——w- c:\windows\system32\corpol.dll
2009-06-22 15:25 . 2008-11-16 00:15 11952 —-a-w- c:\windows\system32\avgrsstx.dll
2009-06-22 15:25 . 2007-12-28 19:51 27784 —-a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-06-16 14:55 . 2004-08-12 14:07 119808 —-a-w- c:\windows\system32\t2embed.dll
2009-06-16 14:55 . 2004-08-12 13:57 82432 —-a-w- c:\windows\system32\fontsub.dll
2009-06-04 12:51 . 2009-06-04 12:50 ——– d—–w- c:\program files\Unlocker
2009-06-03 19:27 . 2004-08-12 14:03 1290752 —-a-w- c:\windows\system32\quartz.dll
2009-06-03 03:19 . 2009-04-07 19:13 ——– d—–w- c:\program files\Hotspot Shield
2009-06-02 01:43 . 2008-11-16 00:15 ——– d—–w- c:\documents and settings\All Users\Application Data\avg8
2009-05-20 19:54 . 2009-04-07 19:13 33840 —-a-w- c:\windows\system32\drivers\hssdrv.sys
2009-05-07 15:44 . 2004-08-12 13:59 344064 —-a-w- c:\windows\system32\localspl.dll
2009-06-16 21:30 . 2009-01-30 17:34 134648 —-a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-07-31_07.43.39 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-31 18:24 . 2009-07-31 18:24 16384 c:\windows\Temp\Perflib_Perfdata_65c.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2009-04-07 19:13 332776 —-a-w- c:\program files\Hotspot Shield\hssie\HssIE.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-12 15360]
"PeerGuardian"="c:\program files\PeerGuardian2\pg2.exe" [2005-09-18 1421824]
"Google Update"="c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-12-18 133104]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]
"AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2009-03-16 2356088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-05-28 335872]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 39792]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-07-13 1287440]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-12 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-06-22 15:25 11952 —-a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\rqRKdCSk]
[BU]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\O2\\bin\\wificfg.exe"=
"c:\\Program Files\\O2\\agent\\bin\\bcont.exe"=
"c:\\Program Files\\Common Files\\SupportSoft\\bin\\ssrc.exe"=
"c:\\Program Files\\O2\\agent\\bin\\bcont_nm.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [16/11/2008 01:15 335752]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [16/11/2008 01:15 298776]
R2 HssSrv;Hotspot Shield Helper Service;c:\program files\Hotspot Shield\HssWPR\hsssrv.exe [03/04/2009 19:18 364008]
R2 sprtsvc_O2;SupportSoft Sprocket Service (O2);c:\program files\O2\bin\sprtsvc.exe [07/06/2007 17:19 202280]
R3 HssDrv;Hotspot Shield Helper Miniport;c:\windows\system32\drivers\hssdrv.sys [07/04/2009 20:13 33840]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS –> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.sys –> c:\program files\SUPERAntiSpyware\SASKUTIL.sys [?]
S3 HssTrayService;Hotspot Shield Tray Service;c:\program files\Hotspot Shield\bin\HssTrayService.exe [01/06/2009 19:58 34352]
S3 SASENUM;SASENUM;\??\c:\program files\SUPERAntiSpyware\SASENUM.SYS –> c:\program files\SUPERAntiSpyware\SASENUM.SYS [?]
.
Contents of the 'Scheduled Tasks' folder

2009-07-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 12:34]

2009-07-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-776561741-839522115-1004Core.job
- c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-18 23:39]

2009-07-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-776561741-839522115-1004UA.job
- c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-18 23:39]
.
- - - - ORPHANS REMOVED - - - -

BHO-{0404C333-35E8-4462-BB95-94B600AA8AF4} - (no file)
BHO-{06E7832B-AA94-4ED8-AD74-5109241B3750} - (no file)
BHO-{0a337c24-808f-45d0-b3c1-5e5254365a45} - (no file)
BHO-{587d0a29-33c7-4bc9-b713-102337ab9535} - (no file)
BHO-{BAEFA384-DB75-44FE-8C4B-6C6AC934B01E} - (no file)
BHO-{D536E857-7B6F-4B31-9AEA-B1BBC7B40379} - (no file)


.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyServer = 216.217.98.100:8000
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: o2.co.uk\*.broadband
TCP: {6364DD6B-141F-464A-BB0F-148DB55305A4} = 208.67.222.222,208.67.220.220
FF - ProfilePath - c:\documents and settings\Hans\Application Data\Mozilla\Firefox\Profiles\z4ygg7qy.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.digitalspy.co.uk/
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\1.2.183.7\npGoogleOneClick8.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-31 19:26
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'explorer.exe'(2244)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\windows\system32\ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Hotspot Shield\bin\openvpnas.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\HPZipm12.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\program files\Analog Devices\SoundMAX\spkrmon.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2009-07-31 19:29 - machine was rebooted
ComboFix-quarantined-files.txt 2009-07-31 18:29
ComboFix2.txt 2009-07-31 07:45

Pre-Run: 41,850,040,320 bytes free
Post-Run: 41,746,313,216 bytes free

179 — E O F — 2009-07-29 15:33
  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:

    Rootkit::
    c:\windows\system32\drivers\ykvtjvwz.sys
    
    Registry:: 
    [-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\rqRKdCSk]
  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

    [external image: Posted Image]
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • If you need help to disable your protection programs see here.
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
Hi here's the requested log… how's the computer looking? the b.exe message has gone away now!

ComboFix 09-07-29.04 - Hans 01/08/2009 8:47.4.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.44.1033.18.2046.1592 [GMT 1:00]
Running from: c:\documents and settings\[removed]\Desktop\Combo-Fix.exe
Command switches used :: c:\documents and settings\Hans\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\ykvtjvwz.sys

.
((((((((((((((((((((((((( Files Created from 2009-07-01 to 2009-08-01 )))))))))))))))))))))))))))))))
.

2009-07-29 14:04 . 2009-07-29 14:04 ——– d—–w- c:\documents and settings\Hans\Application Data\Logs
2009-07-29 13:54 . 2009-07-29 13:54 3775175 —-a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-07-17 00:52 . 2009-07-31 05:52 ——– d—–w- c:\documents and settings\Hans\Local Settings\Application Data\Temp
2009-07-04 06:26 . 2009-07-04 06:40 ——– d—–w- c:\program files\ACW

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-01 07:54 . 2008-01-10 21:24 ——– d—–w- c:\program files\PeerGuardian2
2009-07-31 19:45 . 2008-01-26 17:01 ——– d—–w- c:\program files\Common Files\Adobe
2009-07-31 08:29 . 2008-01-13 18:19 ——– d—–w- c:\documents and settings\Hans\Application Data\Vso
2009-07-31 07:29 . 2008-11-24 10:20 ——– d—–w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-07-29 13:54 . 2008-11-07 18:10 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2009-07-18 13:32 . 2008-11-16 00:15 335752 —-a-w- c:\windows\system32\drivers\avgldx86.sys
2009-07-15 21:17 . 2007-12-29 14:59 ——– d—–w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-07-13 12:36 . 2008-11-07 18:10 38160 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-13 12:36 . 2008-11-07 18:11 19096 —-a-w- c:\windows\system32\drivers\mbam.sys
2009-06-29 16:12 . 2004-08-12 14:09 827392 —-a-w- c:\windows\system32\wininet.dll
2009-06-29 16:12 . 2004-08-12 13:58 78336 —-a-w- c:\windows\system32\ieencode.dll
2009-06-29 16:12 . 2004-08-12 13:56 17408 ——w- c:\windows\system32\corpol.dll
2009-06-22 15:25 . 2008-11-16 00:15 11952 —-a-w- c:\windows\system32\avgrsstx.dll
2009-06-22 15:25 . 2007-12-28 19:51 27784 —-a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-06-16 14:55 . 2004-08-12 14:07 119808 —-a-w- c:\windows\system32\t2embed.dll
2009-06-16 14:55 . 2004-08-12 13:57 82432 —-a-w- c:\windows\system32\fontsub.dll
2009-06-04 12:51 . 2009-06-04 12:50 ——– d—–w- c:\program files\Unlocker
2009-06-03 19:27 . 2004-08-12 14:03 1290752 —-a-w- c:\windows\system32\quartz.dll
2009-06-03 03:19 . 2009-04-07 19:13 ——– d—–w- c:\program files\Hotspot Shield
2009-05-20 19:54 . 2009-04-07 19:13 33840 —-a-w- c:\windows\system32\drivers\hssdrv.sys
2009-05-07 15:44 . 2004-08-12 13:59 344064 —-a-w- c:\windows\system32\localspl.dll
2009-06-16 21:30 . 2009-01-30 17:34 134648 —-a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-07-31_07.43.39 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-08-01 07:51 . 2009-08-01 07:51 16384 c:\windows\Temp\Perflib_Perfdata_684.dat
+ 2009-07-31 19:46 . 2009-07-31 19:46 295606 c:\windows\Installer\{AC76BA86-7AD7-1033-7B44-A81300000003}\SC_Reader.exe
+ 2009-07-31 19:46 . 2009-07-31 19:46 4192256 c:\windows\Installer\27d18.msi
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2009-04-07 19:13 332776 —-a-w- c:\program files\Hotspot Shield\hssie\HssIE.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-12 15360]
"PeerGuardian"="c:\program files\PeerGuardian2\pg2.exe" [2005-09-18 1421824]
"Google Update"="c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-12-18 133104]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-05-28 335872]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-07-13 1287440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-12 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-06-22 15:25 11952 —-a-w- c:\windows\system32\avgrsstx.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\O2\\bin\\wificfg.exe"=
"c:\\Program Files\\O2\\agent\\bin\\bcont.exe"=
"c:\\Program Files\\Common Files\\SupportSoft\\bin\\ssrc.exe"=
"c:\\Program Files\\O2\\agent\\bin\\bcont_nm.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [16/11/2008 01:15 335752]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [16/11/2008 01:15 298776]
R2 HssSrv;Hotspot Shield Helper Service;c:\program files\Hotspot Shield\HssWPR\hsssrv.exe [03/04/2009 19:18 364008]
R2 sprtsvc_O2;SupportSoft Sprocket Service (O2);c:\program files\O2\bin\sprtsvc.exe [07/06/2007 17:19 202280]
R3 HssDrv;Hotspot Shield Helper Miniport;c:\windows\system32\drivers\hssdrv.sys [07/04/2009 20:13 33840]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS –> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.sys –> c:\program files\SUPERAntiSpyware\SASKUTIL.sys [?]
S3 HssTrayService;Hotspot Shield Tray Service;c:\program files\Hotspot Shield\bin\HssTrayService.exe [01/06/2009 19:58 34352]
S3 SASENUM;SASENUM;\??\c:\program files\SUPERAntiSpyware\SASENUM.SYS –> c:\program files\SUPERAntiSpyware\SASENUM.SYS [?]

— Other Services/Drivers In Memory —

*NewlyCreated* - PGFILTER
.
Contents of the 'Scheduled Tasks' folder

2009-07-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 12:34]

2009-07-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-776561741-839522115-1004Core.job
- c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-18 23:39]

2009-08-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1060284298-776561741-839522115-1004UA.job
- c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-18 23:39]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyServer = 216.217.98.100:8000
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: o2.co.uk\*.broadband
TCP: {6364DD6B-141F-464A-BB0F-148DB55305A4} = 208.67.222.222,208.67.220.220
FF - ProfilePath - c:\documents and settings\Hans\Application Data\Mozilla\Firefox\Profiles\z4ygg7qy.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.digitalspy.co.uk/
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\Hans\Local Settings\Application Data\Google\Update\1.2.183.7\npGoogleOneClick8.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-01 08:53
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'explorer.exe'(188)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\windows\system32\ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Hotspot Shield\bin\openvpnas.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\HPZipm12.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\program files\Analog Devices\SoundMAX\spkrmon.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2009-08-01 8:57 - machine was rebooted
ComboFix-quarantined-files.txt 2009-08-01 07:57
ComboFix2.txt 2009-07-31 18:29
ComboFix3.txt 2009-07-31 07:45

Pre-Run: 41,776,410,624 bytes free
Post-Run: 41,761,923,072 bytes free

157 — E O F — 2009-07-29 15:33
HVi,

It's looking cleaner than before. :)

1) Upload Quarantine Files
Please visit this site and follow the instructions for uploading the quarantine .zip file(s).
They will be located in C:\Qoobox\Quarantine and begin with [4]-Submit_2009. Please upload all of them.

2) Adobe Reader
Your current version of Adobe Reader is out of date, and may contain security issues. Please uninstall the version you have now from Add/Remove programs, and then download and install the latest Adobe Reader.

3) Kaspersky
Please do a scan with the Kaspersky Online Scanner

  • Click on the Accept button and install any components it needs.
  • The program will install and then begin downloading the latest definition
    files.
  • After the files have been downloaded on the left side of the page in the Scan section select My Computer.
  • This will start the program and scan your system.
  • The scan will take a long time, so be patient and let it run. (At times it may appear to stall)
  • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
  • Once the scan is complete, click on View scan report

To obtain the report:
  • Click on Save Report As
  • In the Save as prompt, Save in area, select: Desktop
  • In the File name area, use KScan, or something similar
  • In Save as type, click the drop arrow and select Text file [*.txt]
  • Click Save

(Note for Internet Explorer users: If at any time you have trouble with the "Accept" button of the license, click on the "Zoom" tool located at the bottom right of the IE window and set the zoom to 75%. Once the license has been accepted, reset to 100%.)

4) What You Will Need To Post:
  • Kaspersky log
  • How the machine is performing now
Hi… I think Ive been infected again as my Firefox homepgae has been changed to a Zotrim diet site. Also Google Chrome fails to initialize properly. Kaspersky found a lot of infected objects… worried about system restore so a new restore point is in order? ——————————————————————————– KASPERSKY ONLINE SCANNER 7.0 REPORT Monday, August 3, 2009 Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600) Kaspersky Online Scanner version: 7.0.26.13 Program database last update: Monday, August 03, 2009 01:07:43 Records in database: 2575944 ——————————————————————————– Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: C:\ D:\ E:\ F:\ Scan statistics: Files scanned: 60438 Threat name: 10 Infected objects: 2248 Suspicious objects: 0 Duration of the scan: 01:24:10 File name / Threat name / Threats count C:\WINDOWS\system32\spoolsv.exe/C:\WINDOWS\system32\spoolsv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Explorer.EXE/C:\WINDOWS\Explorer.EXE Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\HPZipm12.exe/C:\WINDOWS\system32\HPZipm12.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\HP Software Update\HPWuSchd2.exe/C:\Program Files\HP\HP Software Update\HPWuSchd2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ctfmon.exe/C:\WINDOWS\system32\ctfmon.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\PeerGuardian2\pg2.exe/C:\Program Files\PeerGuardian2\pg2.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Messenger\msmsgs.exe/C:\Program Files\Messenger\msmsgs.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe/C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\System32\alg.exe/C:\WINDOWS\System32\alg.exe Infected: Virus.Win32.Virut.ce 1 C:\Documents and Settings\Hans\Local Settings\temp\jkos-Hans\binaries\ScanningProcess.exe/C:\Documents and Settings\Hans\Local Settings\temp\jkos-Hans\binaries\ScanningProcess.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R74542\drvsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R76513\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\AEEnable.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\RemADI.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\SMAXWDM\SE\inst16.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\SMAXWDM\W2K_XP\install.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\SMAXWDM\W2K_XP\Remove.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\spkrmon.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\spkrmonx.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\Sys\CleanUp.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78477\Sys\DSndUp.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R78727\WinXP\PROUnstl.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R80408\AtiCimUn.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R80408\CheckVer.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R80408\CPanel\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R80408\Driver\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R80408\issetup.exe Infected: Virus.Win32.Virut.ce 1 C:\DELL\drivers\R80408\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\Documents and Settings\Hans\Application Data\U3\temp\cleanup.exe Infected: Virus.Win32.Virut.ce 1 C:\Documents and Settings\Hans\Desktop\hjsplit.exe Infected: Virus.Win32.Virut.ce 1 C:\Documents and Settings\Hans\Desktop\iDump.exe Infected: Virus.Win32.Virut.ce 1 C:\Documents and Settings\Hans\Desktop\REMG.exe.exe Infected: Virus.Win32.Virut.ce 1 C:\Documents and Settings\Hans\Local Settings\temp\jkos-Hans\binaries\ScanningProcess.exe Infected: Virus.Win32.Virut.ce 1 C:\Documents and Settings\Hans\Local Settings\temp\ras.tmp Infected: Trojan-Downloader.Win32.FraudLoad.fbs 1 C:\Documents and Settings\Hans\Local Settings\temp\stat.tmp Infected: Trojan-Downloader.Win32.FraudLoad.fck 1 C:\Documents and Settings\Hans\Local Settings\temp\UAC842a.tmp Infected: Trojan.Win32.Patched.hb 1 C:\Documents and Settings\Hans\My Documents\DVDVideoSoft\Cleaner.exe Infected: Virus.Win32.Virut.ce 1 C:\Documents and Settings\Jay\Desktop\ZiPhone\ziphone.exe Infected: Virus.Win32.Virut.ce 1 C:\Documents and Settings\Jay\Desktop\ZiPhone\ZiPhoneGUI.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Adobe\Adobe Help Viewer\1.0\ahv.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Amazon\MP3 Downloader\AmazonMP3Downloader.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Analog Devices\SoundMAX\AEEnable.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Analog Devices\SoundMAX\install.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Analog Devices\SoundMAX\RemADI.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Analog Devices\SoundMAX\Remove.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Analog Devices\SoundMAX\spkrmon.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Analog Devices\SoundMAX\spkrmonx.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\ATI Technologies\ATI Control Panel\atiadaxx.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\ATI Technologies\ATI Control Panel\atiiprxx.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\ATI Technologies\ATI Control Panel\atiphexx.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\ATI Technologies\ATI Control Panel\atiprbxx.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\AV Care\AVCare.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\DVDVideoSoft\Dll\ffmpeg.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\DVDVideoSoft\FixComponents.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\DVDVideoSoft\FixComponentsSilent.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\DVDVideoSoft\FreeStudioManager.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\DVDVideoSoft\Uninstall.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\Hewlett-Packard\Scanjet\bin\hpsjrreg.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriver.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriver2.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\InstallShield\engine\6\Intel 32\IKernel.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0_02.b06\launcher.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0_02.b06\zipper.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\DivX\DivX Web Player\dotdivxapp.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\DVDVideoSoft\Free YouTube to Mp3 Converter\FreeYouTubeToMP3Converter.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Hotspot Shield\bin\tapinstall.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\DestTest.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpospd08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hposvc08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqacdse.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqaol08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqclpbd.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqcsaha.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqdirec.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqdstcp.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqEmlsz.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqirs08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqisc01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqise01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqkiosk.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqpanos.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqpprop.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqprntw.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\HPQPSXP.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqptc08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqqpawp.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqtax08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqtbx01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqudc08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqusgl.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqvpswp.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpqvwr08.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\hpsjrreg.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\HPXMLPDF.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\ppcue.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\bin\svtf.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\devicemanagement\hpzmsi01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\devicemanagement\hpzscr01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\DocProc\DocProc.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\DocProc\dpe_ocr.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\DocProc\regipe.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\esupport\hpzmsi01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\esupport\hpzscr01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\extcapuninstall\hpzmsi01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\extcapuninstall\hpzscr01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\FlashPla.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\fscommand\C3100_load_env.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\fscommand\C3100_load_letter.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\fscommand\C3100_load_original.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\fscommand\C3100_load_small.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\fscommand\C3100_paperjam.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\fscommand\C3100_printcart.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\fscommand\C3100_proofsheet.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\fscommand\C3100_transfer_memcard.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Help\player\fscommand\C3100_transfer_scan.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\ocr\hpzmsi01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\ocr\hpzscr01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbui.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Product Assistant\scache\hprbhelp\hprbhelp.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Unload\HpqApkil.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Unload\HpqDIAS.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Unload\HpqPSmon.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Unload\HpqUnApl.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Unload\HpqUnSet.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\Unload\HpqXfer.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\hpzcdl01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\hpzsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\asyncall.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzcdl01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzdui01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzgat01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzmsi01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpznop01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzpsc01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzpsl01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzrcn01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzshl01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzwrp01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\HP Software Update\HPWUCli.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\HP Software Update\SelfUpdate.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Photosmart Essential\HP_IZE.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Photosmart Essential\photobackpluginsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Temp\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzmsi01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Temp\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzrcv01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\HP\Temp\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\InstallShield Installation Information\{43801800-CFEE-11D2-A41B-006097B55AD3}\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\InstallShield Installation Information\{7C21EEE0-E6FD-11D4-BD19-00D0B702AEC0}\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\InstallShield Installation Information\{9B94BE6F-7CA3-4C40-A266-62667FF746CC}\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\InstallShield Installation Information\{D78653C3-A8FF-415F-92E6-D774E634FF2D}\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\Setup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Internet Explorer\Connection Wizard\icwconn2.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Internet Explorer\Connection Wizard\icwrmind.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Internet Explorer\Connection Wizard\icwtutor.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Internet Explorer\Connection Wizard\inetwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Internet Explorer\Connection Wizard\isignup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Internet Explorer\iedw.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\java-rmi.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\java.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\javacpl.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\javaw.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\javaws.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\keytool.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\kinit.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\klist.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\ktab.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\orbd.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\pack200.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\policytool.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\rmid.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\rmiregistry.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\servertool.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\tnameserv.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Java\jre1.6.0_02\bin\unpack200.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Messenger\msmsgs.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Movie Maker\moviemk.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\MSN Gaming Zone\Windows\bckgzm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\MSN Gaming Zone\Windows\chkrzm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\MSN Gaming Zone\Windows\hrtzzm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\MSN Gaming Zone\Windows\Rvsezm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\MSN Gaming Zone\Windows\zClientm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\NetMeeting\cb32.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\NetMeeting\conf.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\NetMeeting\wb32.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\O2\bin\sdckillw.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\O2\bin\ssClearCache.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\O2\Utilities\O2 Static IP Tool\StaticIPtool.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Opera 9\Opera.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Outlook Express\msimn.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Outlook Express\oemig50.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Outlook Express\setup50.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Outlook Express\wab.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Outlook Express\wabmig.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\PeerGuardian2\pg2.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\PeerGuardian2\pgfix.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\PowerISO\piso.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\PowerISO\PowerISO.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\PowerISO\PWRISOVM.EXE Infected: Virus.Win32.Virut.ce 1 C:\Program Files\QuickTime\PictureViewer.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\QuickTime\QTInfo.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\QuickTime\QTSystem\ExportController.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\QuickTime\QTSystem\QuickTimeUpdateHelper.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\QuickTime\QTTask.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Red Kawa\Video Converter 3\RKVideoConverter.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Red Kawa\Video Converter 3\Tools\AddToItunes\AddToItunes.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Red Kawa\Video Converter 3\Tools\FFmpeg\ffmpeg.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Red Kawa\Video Converter 3\Tools\NicMP4Box\NicMP4Box.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Red Kawa\Video Converter 3\Tools\VideoInfo\VideoInfo.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Research In Motion\BlackBerry\IS71 Connectors\Lotus Notes5.0\ODSViewer.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Roxio\Audio Master 9\RXAutoMix9.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Trend Micro\HijackThis\HijackThis.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Unlocker\Unlocker.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Unlocker\UnlockerAssistant.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\VideoLAN\VLC\vlc.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\VSO\ConvertX\3\lang\EditLoc.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\VSO\ConvertXtoDVD\lang\Lang_Editor.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Live\installer\Dashboard.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Live\installer\WLSetupSvc.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Connect 2\wmccds.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Connect 2\WMCCFG.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\migrate.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\mplayer2.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\setup_wm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\wmdbexport.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\wmlaunch.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\wmpenc.exe Infected: Backdoor.Win32.IRCBot.nw 1 C:\Program Files\Windows Media Player\wmplayer.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\wmpnetwk.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\wmpnscfg.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\wmpshare.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Media Player\wmsetsdk.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows NT\Accessories\wordpad.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows NT\dialer.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows NT\hypertrm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows NT\Pinball\PINBALL.EXE Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\adlb.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\atmarp.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\atmlane.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\autoexnt.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\cdburn.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\chklnks.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\chknic.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\cleanspl.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\clearmem.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\clusterrecovery.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\compress.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\confdisk.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\consume.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\creatfil.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\csccmd.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\custreasonedit.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\delprof.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\dh.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\diskraid.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\diskuse.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\dnsdiag.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\dvdburn.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\empty.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\eventcombmt.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\fcsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\getcm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\gpmonitor.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\gpotool.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\hlscan.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\ifilttst.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\ifmember.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\iniman.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\instcm.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\instexnt.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\instsrv.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\intfiltr.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\kerbtray.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\kernrate.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\klist.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\krt.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\linkd.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\linkspeed.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\list.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\lockoutstatus.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\logtime.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\lsreport.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\lsview.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\mcast.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\memmonitor.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\memtriage.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\mibcc.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\moveuser.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\mqcast.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\mqcatch.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\nlsinfo.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\now.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\ntimer.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\ntrights.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\oh.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\oleview.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\pathman.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\permcopy.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\perms.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\pfmon.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\pmon.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\printdriverinfo.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\qgrep.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\qtcp.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\rassrvmon.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\rcontrolad.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\regini.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\regview.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\remapkey.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\reportgen.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\robocopy.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\rpccfg.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\rpcdump.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\rpcping.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\rpingc.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\rpings.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\rqc.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\rqs.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\setprinter.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\showacls.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\showperf.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\showpriv.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\sleep.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\sonar.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\splinfo.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\srvany.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\srvcheck.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\srvinfo.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\srvmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\ssdformat.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\subinacl.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\tail.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\tccom.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\tcmon.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\timeit.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\timezone.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\tsctst.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\tsscalling.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\uddicatschemeeditor.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\uddiconfig.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\uddidataexport.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\usrmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\vadump.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\vfi.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\volperf.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\volrest.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\vrfydsk.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\winexit.scr Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\winhttpcertcfg.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\winhttptracecfg.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Windows Resource Kits\Tools\winpolicies.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\WinRAR\Rar.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\WinRAR\RarExtLoader.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\WinRAR\Uninstall.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\WinRAR\UnRAR.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\WinRAR\WinRAR.exe Infected: Virus.Win32.Virut.ce 1 C:\Program Files\Yahoo!\Messenger\UNWISE.EXE Infected: Virus.Win32.Virut.ce 1 C:\Qoobox\Quarantine\C\WINDOWS\system32\Iasex.dll.vir Infected: Trojan-Spy.Win32.Agent.aytn 1 C:\Qoobox\Quarantine\[4]-Submit_2009-07-31_19.20.23.zip Infected: Rootkit.Win32.Agent.hqh 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000010.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000011.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000012.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000013.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000014.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000015.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000016.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000017.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000021.EXE Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000054.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000068.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000078.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000081.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000087.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000213.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000214.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000215.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000216.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000217.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000218.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000219.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP2\A0000220.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000223.EXE Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000253.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000258.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000263.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000264.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000265.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000266.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000267.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000269.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000307.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000322.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000332.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000335.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000342.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000496.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000497.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000498.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000499.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000500.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000501.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000502.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000503.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000505.EXE Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000550.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000565.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000575.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000578.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000585.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000619.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000620.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000621.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0000624.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001628.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001629.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001630.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001631.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001632.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001633.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001634.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001635.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001636.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001637.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001638.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001639.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001640.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001641.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001642.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001643.EXE Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001644.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001645.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001646.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001647.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001648.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001649.EXE Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001650.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001651.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001652.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001653.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001654.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001655.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001656.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001657.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001658.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001659.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001660.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001661.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001662.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001663.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001664.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001665.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001666.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001668.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001669.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001670.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001671.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001672.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001673.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001674.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001675.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001676.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001677.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001678.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001679.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001680.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001681.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001682.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001683.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001684.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001685.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001686.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001687.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001688.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001689.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001690.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001691.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001692.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001693.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001694.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001695.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001696.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001697.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001698.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001699.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001700.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001701.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001702.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001703.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001704.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001705.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001706.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001707.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001708.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001709.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001710.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001711.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001712.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001713.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001714.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001715.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001716.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001717.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001718.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001719.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001720.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001721.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001722.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001723.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001724.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001725.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001726.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001727.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001728.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001729.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001730.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001731.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001732.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001733.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001734.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001735.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001736.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001737.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001738.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001739.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001740.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001741.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001742.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001743.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001744.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001745.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001746.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001747.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001748.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001749.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001750.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001751.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001752.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001753.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001754.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001755.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001756.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001757.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001758.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001759.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001760.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001761.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001762.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001763.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001764.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001765.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001766.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001767.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001768.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001769.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001770.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001771.EXE Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001772.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001773.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001774.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001775.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001776.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001777.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001778.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001779.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001780.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001781.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001782.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001783.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001784.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001785.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001786.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001787.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001788.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001789.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001790.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001791.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001792.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001793.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001794.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001795.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001796.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001797.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001798.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001799.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001800.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001801.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001802.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001803.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001804.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001805.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001806.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001807.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001808.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001809.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001810.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001811.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001812.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001813.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001814.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001815.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001816.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001817.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001818.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001819.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001820.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001821.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001822.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001823.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001824.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001825.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001826.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001827.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001828.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001829.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001830.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001831.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001832.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001833.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001834.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001835.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001836.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001837.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001838.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001839.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001840.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001841.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001842.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001843.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001844.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001845.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001846.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001847.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001848.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001849.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001850.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001851.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001852.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001853.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001854.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001855.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001856.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001857.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001858.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001859.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001860.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001861.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001862.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001863.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001864.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001865.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001866.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001867.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001868.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001869.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001870.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001871.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001872.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001873.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001874.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001875.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001876.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001877.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001878.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001879.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001880.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001881.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001882.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001883.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001884.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001885.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001886.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001887.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001888.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001889.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001890.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001891.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001892.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001893.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001894.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001895.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001896.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001897.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001898.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001899.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001900.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001901.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001902.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001903.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001904.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001905.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001906.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001907.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001908.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001909.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001910.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001911.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001912.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001913.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001914.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001915.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001916.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001917.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001918.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001919.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001920.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001921.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001922.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001923.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001924.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001925.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001926.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001927.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001928.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001929.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001930.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001931.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001932.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001933.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001934.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001935.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001936.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001937.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001938.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001939.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001940.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001941.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001942.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001943.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001944.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001945.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001946.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001947.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001948.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001949.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001950.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001951.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001952.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001953.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001954.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001955.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001956.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001957.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001958.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001959.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001960.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001961.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001962.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001963.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001964.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001965.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001966.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001967.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001968.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001976.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001977.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001978.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001979.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001981.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001985.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001987.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001988.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001989.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001990.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001991.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001992.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001993.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001994.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001995.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001996.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001997.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001998.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0001999.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002000.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002001.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002002.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002003.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002004.EXE Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002005.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002007.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002021.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002022.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002023.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002033.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002065.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002066.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002067.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002068.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002069.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002070.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002071.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002072.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002073.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002074.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002075.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002076.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002077.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002078.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002079.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002080.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002081.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002082.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002083.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002084.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002086.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002087.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002088.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002089.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002090.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002091.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002092.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002093.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002094.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002095.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002096.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002097.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002098.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002099.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002100.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002101.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002102.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002103.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002104.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002105.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002106.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002107.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002108.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002109.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002110.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002111.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002112.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002113.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002114.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002115.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002116.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002117.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002118.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002119.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002120.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002121.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002122.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002123.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002124.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002125.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002126.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002127.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002128.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002129.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002130.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002131.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002132.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002133.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002134.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002135.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002136.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002137.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002138.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002139.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002140.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002141.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002142.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002143.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002144.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002145.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002146.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002147.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002148.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002149.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002150.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002151.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002152.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002153.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002154.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002155.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002156.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002157.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002158.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002159.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002160.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002161.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002162.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002163.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002164.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002165.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002166.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002167.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002168.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002169.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002170.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002171.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002172.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002173.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002174.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002175.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002176.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002177.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002178.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002179.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002180.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002181.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002182.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002183.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002184.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002185.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002186.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002187.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002188.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002189.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002190.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002191.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002192.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002193.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002194.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002195.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002196.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002197.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002198.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002199.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002200.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002201.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002202.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002203.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002204.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002205.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002206.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002207.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002208.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002209.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002210.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002211.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002212.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002213.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002214.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002215.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002216.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002217.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002218.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002219.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002220.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002221.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002222.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002223.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002224.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002225.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002226.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002227.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002228.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002229.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002230.EXE Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002231.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002232.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002233.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002234.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002235.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002236.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002237.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002238.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002239.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002240.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002241.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002242.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002243.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002244.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002245.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002246.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002247.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002248.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002249.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002250.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002251.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002252.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002253.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002254.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002255.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002256.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002257.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002258.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002259.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002260.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002261.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002262.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002263.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002264.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002265.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002266.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002267.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002268.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002269.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002270.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002271.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002272.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002273.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002274.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002275.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002276.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002277.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002278.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002279.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002280.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002281.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002282.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002283.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002284.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002285.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002286.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002287.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002288.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002289.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002290.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002291.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002292.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002293.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002294.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002295.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002296.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002297.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002298.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002299.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002300.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002301.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002302.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002303.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002304.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002305.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002306.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002307.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002308.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002309.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002310.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002311.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002312.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002313.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002314.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002315.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002316.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002317.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002318.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002319.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002320.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002321.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002322.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002323.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002324.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002325.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002326.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002327.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002328.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002329.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002330.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002331.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002332.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002333.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002334.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002335.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002336.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002337.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002338.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002339.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002340.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002341.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002342.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002343.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002344.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002345.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002346.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002347.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002348.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002349.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002350.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002351.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002352.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002353.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002354.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002355.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002356.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002357.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002358.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002359.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002360.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002361.scr Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002362.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002363.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002364.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002365.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002366.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002367.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002368.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002369.exe Infected: Virus.Win32.Virut.ce 1 C:\System Volume Information\_restore{112427BC-5214-4CA0-AA09-74724AD53B01}\RP3\A0002370.EXE Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB873339\update\update.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB885835\update\update.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB885836\update\update.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB886185\update\update.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB887472\update\update.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB888302\update\update.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB891781\update\update.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB923561\SP2QFE\wordpad.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB923561\SP3GDR\wordpad.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB923561\SP3QFE\wordpad.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB942763\SP2QFE\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB955839\SP2QFE\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB955839\SP3GDR\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB955839\SP3QFE\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\sc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\services.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\wmiprvse.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\sc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\wmiprvse.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\sc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\wmiprvse.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB972260-IE7\SP3QFE\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$hf_mig$\KB972260-IE7\SP3QFE\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$MSI31Uninstall_KB893803v2$\msiexec.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB887472$\msmsgs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB896358$\hh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB896423$\spoolsv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB896428$\telnet.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB902400$\migregdb.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB920213$\agentsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB922582$\fltmc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB923561$\wordpad.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB938828$\explorer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB939683$\unregmp2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB951072-v2$\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB952069_WM9$\logagent.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB955839$\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB956572$\sc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB956572$\services.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallKB956572$\wmiprvse.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallWMFDist11$\logagent.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallwmp11$\setup_wm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallwmp11$\unregmp2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\$NtUninstallwmp11$\wmplayer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ERDNT\Hiv-backup\ERDNT.EXE Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ERDNT\subs\ERDNT.EXE Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\explorer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\grep.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\hh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7\iedw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7\mshta.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7\spuninst\ieResetIcons.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB944533-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB944533-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB953838-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB953838-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB956390-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB956390-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB956390-IE7\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB958215-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB958215-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB961260-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB961260-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB963027-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB963027-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB969897-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB969897-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB972260-IE7\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\ie7updates\KB972260-IE7\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\inf\unregmp2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{14AD69CE-B59F-4EC2-BC3A-DB56105F3D62}\DesktopMgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}\places.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{6994491D-D491-48F1-AE1F-E179C1FFFC2F}\ARPPRODUCTICON.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{6994491D-D491-48F1-AE1F-E179C1FFFC2F}\NewShortcut2_D7CAE58E26DE49B7A75DEAEDF76726BE.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{6994491D-D491-48F1-AE1F-E179C1FFFC2F}\NewShortcut3_D7CAE58E26DE49B7A75DEAEDF76726BE_3.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{6994491D-D491-48F1-AE1F-E179C1FFFC2F}\NewShortcut7_856D48883B484D0C99D439AA7CF9DB2E.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut1.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut10.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut11.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut12.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut13.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut14.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut15_1.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut16.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut17.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut18.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut19.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut2.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut20.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut21.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut22.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut23.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut24.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut25.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut27.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut6.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut7.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut8.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}\NewShortcut9.DE9B046B_865A_4DEC_B555_7F4B3C92BD42.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}\ARPPRODUCTICON.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}\HPSUShortcut_BB85ED9CAFC943BDB8DC258C3C7DF72E.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Installer\{DBC20735-34E6-4E97-A9E5-2066B66B243D}\NewShortcut1.A6CC6977_F7B4_4C0B_9510_BCD847D4BDB2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\IsUninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\msagent\agentsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\network diagnostic\xpnetdiag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\NIRCMD.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\NOTEPAD.EXE Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\pchealth\helpctr\binaries\HelpHost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\pchealth\helpctr\binaries\HelpSvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\pchealth\helpctr\binaries\HscUpd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\pchealth\helpctr\binaries\notiflag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\pchealth\UploadLB\Binaries\UploadM.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\PEV.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\regedit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\sed.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\cfdf673d5f64980a67e3f1a551949306\sp3gdr\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\cfdf673d5f64980a67e3f1a551949306\sp3gdr\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\cfdf673d5f64980a67e3f1a551949306\sp3qfe\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\cfdf673d5f64980a67e3f1a551949306\sp3qfe\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\accwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\actmovie.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\admin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\agentsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ahui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\alg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\at.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\atmadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\attrib.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\auditusr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\author.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\blastcln.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cacls.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cfgwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cisvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cleanmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cliconfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\clipbrd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\clipsrv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cmd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cmdl32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cmmon32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\cmstp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\comrepl.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\comrereg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\conf.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\conime.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ctfmon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dcomcnfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ddeshare.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\defrag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dfrgfat.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dfrgntfs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dialer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\diantz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\diskpart.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dllhost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dmadmin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dmremote.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dplaysvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dpnsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dpvsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dumprep.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dvdupgrd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dwwin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\dxdiag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\eudcedit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\evntcmd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\evntwin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\explorer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\extrac32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\faxpatch.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\findstr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fltmc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fontview.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\forcedos.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fp98sadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fp98swin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fpadmcgi.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fpcount.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fpremadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fpsrvadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fsquirt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ftp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fxsclnt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fxscover.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\fxssvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\grpconv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\help.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\helpctr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\helpsvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\hh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\hscupd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\icwconn1.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\icwconn2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\icwrmind.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iedw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iexplore.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\iexpress.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\imapi.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\inetwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipconfig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipv6.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ipxroute.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\irftp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\cintsetp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\cplexe.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imjpdct.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imjpdsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imjpinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imjpmig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imjprw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imjputy.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\imscinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\pintlphr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\tintlphr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lang\tintsetp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lhmstsc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\locator.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\logman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\logon.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\logonui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\lsass.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\magnify.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\makecab.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\migload.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\migregdb.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\migwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\migwiza.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mmc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mmcperf.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mnmsrvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mobsync.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mofcomp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\moviemk.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mplay32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mplayer2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\msconfig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\msdtc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mshta.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\msiexec.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\msimn.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\msiregmv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\msmsgs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\msoobe.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mspaint.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mstinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\mtstocom.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\muisetup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\napstat.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\narrator.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\nddeapir.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\net.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\net1.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\netdde.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\netsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\netsh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\netstat.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\notepad.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\nppagent.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\nslookup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ntvdm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\odbcad32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\odbcconf.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\oemig50.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\oobebaln.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\osk.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\packager.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\perfmon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\pinball.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ping.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\powercfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\progman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\proquota.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\proxycfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\qprocess.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rasphone.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rcimlby.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rcp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rdpclip.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rdsaddin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rdshost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\reg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\regedit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\regsvr32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rexec.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rsh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rstrui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rtcshare.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\rundll32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\runonce.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\savedump.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\scardsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\scrcons.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\scrnsave.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sdbinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\services.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sessmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sethc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\setup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\setup50.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\setupn.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\shmgrate.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\shrpubw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\shtml.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\shutdown.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sigverif.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\skeys.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\slrundll.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\slserv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\smbinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\smi2smir.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\smlogsvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sndrec32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\snmp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\snmptrap.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sort.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\spdwnwxp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\spider.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\spnpinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\spoolsv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\spupdwxp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ss3dfo.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ssbezier.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ssflwbox.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ssmarque.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ssmypics.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ssmyst.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sspipes.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ssstars.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sstext3d.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\stimon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\stub_fpsrvadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\stub_fpsrvwin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\svchost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\sysocmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\taskmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\tcptest.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\telnet.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\tourstrt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\tp4mon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\tracert.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\update\fixccs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\update\nv4prep.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\update\spnpinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\uploadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\upnpcont.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\ups.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\userinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\utilman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\verclsid.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\vssvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wab.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wabmig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wbemtest.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wextract.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wiaacmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\winhlp32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\winlogon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\winver.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wmiadap.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wmiapsrv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wmiprvse.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wordpad.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wpabaln.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wpnpinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wscntfy.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wscript.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wuauclt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\wuauclt1.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\xcopy.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\dd9ab5193501484cf5e6884fa1d22f9e\xpnetdg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\fa58243222bcfe35e5467668df396003\sp2gdr\iedw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SoftwareDistribution\Download\fa58243222bcfe35e5467668df396003\sp2qfe\iedw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SWREG.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SWSC.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\SWXCACLS.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\accwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\actmovie.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Adobe\Shockwave 11\SwInit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Adobe\Shockwave 11\UNWISE.EXE Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ahui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\alg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\arp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\at.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Ati2mdxx.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ati2sgag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\atmadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\attrib.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\auditusr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\blastcln.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\bootok.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cacls.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\calc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\charmap.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\chkdsk.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\chkntfs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cidaemon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cisvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ckcnv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cleanmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\CleanUp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cliconfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\clipbrd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\clipsrv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cmd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cmdl32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cmmon32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cmstp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Com\comrepl.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Com\comrereg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\comp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\compact.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\conime.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\control.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\convert.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\cscript.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ctfmon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dcomcnfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ddeshare.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\defrag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dfrgfat.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dfrgntfs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\diantz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\diskpart.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\diskperf.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\accwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\actmovie.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\admin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\agentsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ahui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\alg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\arp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\at.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\atmadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\attrib.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\auditusr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\author.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\bckgzm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\blastcln.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\bootok.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\bootvrfy.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cache\ctfmon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cache\explorer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cache\lsass.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cache\services.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cache\spoolsv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cache\svchost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cache\userinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cache\winlogon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cacls.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\calc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cb32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cfgwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\change.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\charmap.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\chglogon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\chgport.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\chgusr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\chkdsk.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\chkntfs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\chkrzm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cidaemon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cintsetp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cisvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ckcnv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cleanmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\clipbrd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\clipsrv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cmd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cmdl32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cmmon32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cmstp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\comp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\compact.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\comrepl.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\comrereg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\conf.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\conime.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\control.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\convert.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cplexe.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cprofile.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\cscript.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ctfmon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dcomcnfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ddeshare.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\defrag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dfrgfat.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dfrgntfs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dialer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\diantz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\diskpart.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\diskperf.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dllhost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dllhst3g.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dmadmin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dmremote.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\doskey.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dplaysvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dpnsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dpvsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\drwtsn32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dumprep.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dvdupgrd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dwwin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\dxdiag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\esentutl.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\eudcedit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\eventvwr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\evntcmd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\evntwin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\expand.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\explorer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\extrac32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\find.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\findstr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\finger.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fixmapi.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\flattemp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fltmc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fontview.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\forcedos.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fp98sadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fp98swin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fpadmcgi.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fpcount.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fpremadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\freecell.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fsutil.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ftp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fxsclnt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fxscover.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fxssend.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\fxssvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\grpconv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\help.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\helpctr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\helphost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\helpsvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\hh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\hostname.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\hrtzzm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\hscupd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\icwconn1.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\icwconn2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\icwrmind.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\icwtutor.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\iedw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\iexpress.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imapi.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imekrmig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imepadsv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imjpdadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imjpdct.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imjpdsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imjpinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imjpmig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imjprw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imjpuex.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imjputy.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imkrinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\imscinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\inetwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ipconfig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ipsec6.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ipv6.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ipxroute.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\isignup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\label.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\lights.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\lnkstub.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\locator.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\lodctr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\logagent.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\logman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\logoff.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\logon.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\logonui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\lpq.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\lpr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\lsass.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\magnify.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\makecab.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\migisol.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\migload.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\migrate.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\migregdb.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\migwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\migwiz_a.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mmc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mnmsrvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mobsync.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mofcomp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mountvol.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\moviemk.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mplay32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mplayer2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mpnotify.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mrinfo.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\msconfig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\msdtc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\msg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mshearts.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mshta.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\msiexec.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\msimn.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\msinfo32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\msiregmv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\msoobe.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mspaint.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\msswchx.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mstinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mstsc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\mtstocom.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\narrator.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\nbtstat.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\nddeapir.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\net.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\net1.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\netdde.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\netsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\netsh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\netstat.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\notepad.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\notiflag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\nppagent.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\nslookup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ntsd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ntvdm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\odbcad32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\odbcconf.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\oemig50.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\oobebaln.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\osk.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\osuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\packager.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\pathping.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\pentnt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\perfmon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\pinball.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ping.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ping6.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\pintlphr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\powercfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\print.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\progman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\proquota.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\proxycfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\qappsrv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\qprocess.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\query.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\quser.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\qwinsta.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rasautou.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rasdial.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rasphone.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rcimlby.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rcp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rdpclip.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rdsaddin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rdshost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\recover.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\reg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\regedit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\regedt32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\regini.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\register.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\regsvr32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\regwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\replace.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\reset.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rexec.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\routemon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rsh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rsm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rsmsink.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rstrui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rsvp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rtcshare.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\runas.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rundll32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\runonce.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rvsezm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\rwinsta.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sapisvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\savedump.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\scardsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\scrcons.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\scrnsave.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sdbinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\services.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sessmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sethc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\setup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\setup50.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\setup_wm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sfc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\shadow.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\shmgrate.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\shrpubw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\shtml.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\shutdown.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\shvlzm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sigverif.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\skeys.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\smbinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\smi2smir.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\smlogsvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sndrec32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sndvol32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\snmp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\snmptrap.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sol.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sort.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\spider.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\spnpinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\spoolsv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\srdiag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ss3dfo.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ssbezier.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ssflwbox.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ssmarque.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ssmypics.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ssmyst.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sspipes.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ssstars.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sstext3d.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\stimon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\subst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\svchost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\syncapp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\syskey.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\sysocmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\systray.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\taskman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\taskmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tcmsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tcpsvcs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tcptest.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\telnet.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tftp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tintlphr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tintsetp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tourstrt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tracert.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tracert6.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tscon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tscupgrd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tsdiscon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tskill.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tsprof.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\tsshutdn.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\twunk_32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\unlodctr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\unregmp2.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\unsecapp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\uploadm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\upnpcont.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\ups.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\userinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\utilman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\verifier.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\vssadmin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\vssvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\w32tm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wab.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wabmig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wb32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wbemtest.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wextract.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wiaacmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\winhlp32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\winhstb.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\winlogon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\winmgmt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\winmine.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\winmsd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\winver.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wmiadap.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wmiapsrv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wmiprvse.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wmplayer.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wordpad.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wpabaln.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wpnpinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\write.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wscntfy.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wscript.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wuauclt1.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\wupdmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\xcopy.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllcache\zclientm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllhost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dllhst3g.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dmadmin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dmremote.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\doskey.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dplaysvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dpnsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dpvsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\drivers\etc\hosts Infected: Trojan.Win32.Qhost.lsc 1 C:\WINDOWS\system32\drmupgds.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\drwtsn32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\DSndUp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dumprep.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dvdplay.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dvdupgrd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dwwin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\dxdiag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\esentutl.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\eudcedit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\eventvwr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\expand.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\extrac32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\fc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\find.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\findstr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\finger.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\fixmapi.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\fltmc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\fontview.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\forcedos.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\freecell.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\fsquirt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\fsutil.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ftp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\grpconv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\help.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\hostname.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\HPZinw12.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\HPZipm12.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ie4uinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ieudinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\iexpress.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\imapi.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ipconfig.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ipsec6.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ipv6.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ipxroute.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\label.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\lights.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\lnkstub.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\locator.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\lodctr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\logagent.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\logman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\logoff.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\logon.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\logonui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\lpq.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\lpr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Macromed\Flash\genuinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Macromed\Shockwave 10\SwInit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Macromed\Shockwave 10\UNWISE.EXE Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\magnify.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\makecab.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\migpwd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mmc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mnmsrvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mobsync.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mountvol.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mplay32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mpnotify.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mrinfo.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\msdtc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\msfeedssync.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\msg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mshearts.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mshta.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\msiexec.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mspaint.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\msswchx.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mstinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\mstsc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\narrator.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\nbtstat.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\nddeapir.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\net.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\net1.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\netdde.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\netsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\netsh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\netstat.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\notepad.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\npp\nppagent.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\nslookup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ntsd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ntvdm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\odbcad32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\odbcconf.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\oldspool.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\oobe\msoobe.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\oobe\oobebaln.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\osk.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\osuninst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\packager.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\pathping.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\pentnt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\perfmon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ping.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ping6.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\powercfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\print.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\progman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\proquota.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Prounstl.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\proxycfg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\qappsrv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\qprocess.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\qwinsta.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rasautou.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rasdial.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rasphone.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rcimlby.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rcp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rdpclip.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rdsaddin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rdshost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\recover.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\reg.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\regedt32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\regini.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\regsvr32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\regwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\replace.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\reset.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Restore\rstrui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\Restore\srdiag.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rexec.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\route.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\routemon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rsh.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rsm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rsmsink.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rsmui.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rsvp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rtcshare.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\runas.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rundll32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\runonce.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\rwinsta.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\savedump.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\scardsvr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\scrnsave.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sdbinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sessmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sethc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\setup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sfc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\shadow.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\shmgrate.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\shrpubw.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\shutdown.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sigverif.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\skeys.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\smbinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\smlogsvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sndrec32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sndvol32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sol.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sort.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\spider.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\spnpinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\spoolsv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ss3dfo.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ssbezier.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ssflwbox.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ssmarque.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ssmypics.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ssmyst.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sspipes.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ssstars.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sstext3d.scr Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\stimon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\subst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\syncapp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\syskey.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\sysocmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\systray.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\taskman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\taskmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tcmsetup.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tcpsvcs.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\telnet.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tftp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tourstart.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tracert.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tracert6.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tscon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tscupgrd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tsdiscon.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tskill.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tsshutdn.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\tzchange.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\unlodctr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\upnpcont.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\ups.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\userinit.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\usmt\migload.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\usmt\migwiz.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\usmt\migwiz_a.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\usrmlnka.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\usrprbda.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\usrshuta.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\utilman.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\uwdf.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\verclsid.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\verifier.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\vssadmin.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\vssvc.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\w32tm.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wbem\mofcomp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wbem\scrcons.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wbem\unsecapp.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wbem\wbemtest.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wbem\winmgmt.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wbem\wmiadap.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wbem\wmiapsrv.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wbem\wmiprvse.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wdfmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wextract.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wiaacmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\WinFXDocObj.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\winhlp32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\winmine.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\winmsd.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\winver.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\WISPTIS.EXE Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wpabaln.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wpdshextautoplay.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wpnpinst.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\write.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wscntfy.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wscript.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wuauclt1.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\WudfHost.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\wupdmgr.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\system32\xcopy.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\TASKMAN.EXE Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\Temp\VRTAF.tmp Infected: Trojan-Downloader.Win32.Small.alqf 1 C:\WINDOWS\Temp\VRTB1.tmp Infected: Trojan.Win32.Pasta.bhr 1 C:\WINDOWS\twunk_32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\winhlp32.exe Infected: Virus.Win32.Virut.ce 1 C:\WINDOWS\zip.exe Infected: Virus.Win32.Virut.ce 1 The selected area was scanned.
:(

Your system is infected with a polymorphic file infector called Virut. Virut is capable of infecting all the machine's executable files (.exe) and screensaver files (.scr). However, the problem is that the virus has a number of bugs in its code, and as a result, it may misinfect a proportion of executable files and therefore, the files are corrupted beyond repair. As of now, security experts suggest that a format and clean install, or destructive recovery if you have an OEM recovery partition, is the best way to clean the infection and it is the best and safest way to return the machine to its normal working state.

Backup all your documents and important items (personal data, work documents, etc) only. DO NOT backup any executable files (softwares) and screensavers (*.scr). It attempts to infect any accessed .exe or .scr files by appending itself to the executable.

Also, avoid backing up compressed files (zip/cab/rar) files that have .exe or .scr files inside them. Virut can penetrate and infect .exe files inside compressed files too.

Recent variants also modify htm, html, asp and php files.

Do not back up to another machine, as it may become compromised. Burn to DVD/CD, or to an external drive which has nothing else on it, and which you can format should it happen to become infected from the backups.

See miekiemoes' blog for similar comments here:
Link

Feel free to ask any questions, but keep in mind a reformat is the only way to clean this computer.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI