5 trojans, other viruses, antivirus disabled, other programs

OK, this is with Kaspersky. File Scanner You're clean! Scanned file: Hmpg12.dll Statistics: Known viruses: 4169777 Updated: 23-05-2010 File size (Kb): 108 Virus bodies: 0 Files: 1 Warnings: 0 Archives: 0 Suspicious: 0 ———————————————— File Scanner You're clean! Scanned file: multiplex_vcd.dll Statistics: Known viruses: 4169777 Updated: 23-05-2010 File size (Kb): 64 Virus bodies: 0 Files: 1 Warnings: 0 Archives: 0 Suspicious: 0 ————————————————– File Scanner You're clean! Scanned file: HMPV2_ENC.dll Statistics: Known viruses: 4169777 Updated: 23-05-2010 File size (Kb): 116 Virus bodies: 0 Files: 1 Warnings: 0 Archives: 0 Suspicious: 0 —————————————————– File Scanner You're clean! Known viruses: 4169777 Updated: 23-05-2010 File size (Kb): 116 Virus bodies: 0 Files: 1 Warnings: 0 Archives: 0 Suspicious: 0 ———————————————————– File Scanner You're clean! Scanned file: Image.dll Statistics: Known viruses: 4169777 Updated: 23-05-2010 File size (Kb): 612 Virus bodies: 0 Files: 1 Warnings: 0 Archives: 0 Suspicious: 0

Can I ask you what this is? This is from a message board that I belong to. Thanks! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mjfanclub.net.\www\ deleted successfully.

Can I ask you what this is? This is from a message board that I belong to. Thanks!

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mjfanclub.net.\www\ deleted successfully.

This is for clearing off the trusted site list you have on your computer. You can always add it back through IE options.

I apologize, would you please re-up those files to either Jotti or Virus Total? Sorry for the inconvenience caused.

OK, from the Virus Total site: File multiplex_vcd.dll received on 2010.05.24 20:50:09 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/41 (0%) Loading server information… Your file is queued in position: 1. Estimated start time is between 42 and 60 seconds. Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Prevx 3.0 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 65536 bytes MD5…: 7a217516b33ff1bae1682935dcec35d3 SHA1..: 5bf09ab134b8476bf7e787911b9f4302c5196dce SHA256: 03d733f4282ad612e245aade4a62839ba29e6e8a92db2a4dd59282aadf0484a6 ssdeep: 768:AONaI7AIhGOtzRXCAY9UjTQZciB9pSNCvJfo4hz37N:AONbsIHRSAA00gko+ z PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x41a7 timedatestamp…..: 0x3c29785d (Wed Dec 26 07:12:29 2001) machinetype…….: 0x14c (I386) ( 4 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x850a 0x9000 6.39 182e589c99f2e2a6bc57a7ef9e7b7adb .rdata 0xa000 0x9d2 0x1000 3.77 f46900665aaf461e979f2bf97934d2f1 .data 0xb000 0x4900 0x4000 1.25 027d1b4ed3a035cc20a1d7b828bf7c2b .reloc 0x10000 0x8f8 0x1000 4.00 ca554feb1505fbd1770dc9073ba2335f ( 1 imports ) > KERNEL32.dll: TerminateProcess, WriteFile, CloseHandle, CreateFileA, DeleteFileA, HeapFree, HeapAlloc, GetCommandLineA, GetVersion, GetModuleHandleA, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, GetProcAddress, RaiseException, ExitProcess, ReadFile, GetCurrentProcess, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, DisableThreadLibraryCalls, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW, RtlUnwind ( 1 exports ) multiplex_vcd RDS…: NSRL Reference Data Set - trid..: Win32 Executable MS Visual C++ (generic) (65.2%) Win32 Executable Generic (14.7%) Win32 Dynamic Link Library (generic) (13.1%) Generic Win/DOS Executable (3.4%) DOS Executable Generic (3.4%) sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned pdfid.: - —————————————————– File Hmpg12.dll received on 2010.05.24 20:52:14 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/41 (0%) Loading server information… Your file is queued in position: 2. Estimated start time is between 49 and 70 seconds. Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Prevx 3.0 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 110592 bytes MD5…: fe34d72fbd99a4cd761c6465bee74487 SHA1..: 2c50cea650e5b03fb15f617ffd64b2983679e337 SHA256: da58f72233de07bd549bd760f1630b9328c8da577475f18e930113c18d1a4026 ssdeep: 1536:pojbjBsfVZlkT53OemsdOTYo2LBApFeCoN4i9HYsEQqa:AbjBsVZ695ASBn Co5 PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0xa00e timedatestamp…..: 0x3b944e9c (Tue Sep 04 03:46:36 2001) machinetype…….: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0xe9e0 0xf000 6.44 22f7795f0afa1ea3b68d662c54ba8e8c .rdata 0x10000 0xb7f 0x1000 4.42 3389eb66ed32a5d44ba0f0b0f3f564d6 .data 0x11000 0x961bc 0x7000 4.98 f4884a5b879b07601442654409b7da0b .data1 0xa8000 0x1c0 0x1000 0.29 2bd6aa7a8410609f542b689a199083ba .reloc 0xa9000 0x13b8 0x2000 3.47 0c0482393907587a72f2696d4f7eb558 ( 1 imports ) > KERNEL32.dll: HeapReAlloc, CloseHandle, ExitThread, CreateThread, ResumeThread, LockFile, UnlockFile, GetFileSize, WriteFile, VirtualFree, SetFilePointer, CreateFileA, VirtualAlloc, LeaveCriticalSection, ResetEvent, CreateEventA, DeleteCriticalSection, EnterCriticalSection, InitializeCriticalSection, SetEvent, HeapAlloc, HeapFree, ExitProcess, TerminateProcess, GetCurrentProcess, GetSystemTimeAsFileTime, GetCommandLineA, GetVersion, HeapDestroy, HeapCreate, WaitForSingleObject, GetProcAddress, GetModuleHandleA, GetLastError, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, DisableThreadLibraryCalls, FlushFileBuffers, SetStdHandle, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW, SetEndOfFile, ReadFile, RtlUnwind ( 7 exports ) HMPG12EA_deinit, HMPG12EA_encode, HMPG12EA_init, HMPG12ES_deinit, HMPG12ES_encodeaudio, HMPG12ES_encodevideo, HMPG12ES_init RDS…: NSRL Reference Data Set - trid..: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) pdfid.: - sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned ———————————————————— File HMPV2_ENC.dll received on 2010.05.24 20:59:14 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/40 (0%) Loading server information… Your file is queued in position: 2. Estimated start time is between 49 and 70 seconds. Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 118784 bytes MD5…: 38b78898c70e740bed0334bdc0c783ce SHA1..: 31a5a5e4229e61cf8c5e6043774fec275b0e0dd2 SHA256: 2f8f4175e4c819b4b7051bd103f4d05530404695240b1b221b9776c33946e8a2 ssdeep: 1536:y3b7WARmn00LBKUfcDh5sNtTDsEVLW09akWxkYKQHoFX/VIHF:yfWh00NKU fczWYg4Ho PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0xbc7c timedatestamp…..: 0x3b650de2 (Mon Jul 30 07:33:54 2001) machinetype…….: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x3000 0xf1f8 0x10000 6.50 ef1b1430dd7cabf8f0463682b6943a67 .rdata 0x13000 0xcf9 0x1000 4.83 8debfc3f365562a5c94c8f4dfcf957cb .data 0x14000 0x161c4 0x5000 2.33 7b8c8ceb8737241a1d162357cb738dc5 .data1 0x2b000 0x1260 0x2000 2.82 d45b4670c3f9bf90b06d607e7d0b4308 .reloc 0x2d000 0x1d08 0x2000 4.67 d485cada21d24decb56cee2cb076d990 ( 1 imports ) > KERNEL32.dll: TlsFree, VirtualAlloc, EnterCriticalSection, LeaveCriticalSection, ExitProcess, TerminateProcess, GetCurrentProcess, HeapFree, HeapAlloc, GetSystemTimeAsFileTime, GetCommandLineA, GetVersion, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, DeleteCriticalSection, InitializeCriticalSection, GetModuleHandleA, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, HeapReAlloc, RtlUnwind, GetLastError, CloseHandle, WriteFile, GetProcAddress, GetCurrentThreadId, TlsSetValue, TlsAlloc, VirtualFree, SetLastError, TlsGetValue, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, FlushFileBuffers, InterlockedDecrement, InterlockedIncrement, SetFilePointer, SetStdHandle, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW ( 3 exports ) hmpv2_deinit, hmpv2_encode, hmpv2_init RDS…: NSRL Reference Data Set - trid..: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned pdfid.: - ————————————————————- File HMPV2_ENC_MMX.dll received on 2010.05.24 21:01:20 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/40 (0%) Loading server information… Your file is queued in position: ___. Estimated start time is between ___ and ___ . Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 118784 bytes MD5…: d7d0fda4bca293ce1fb4dbaf4c39ac5b SHA1..: 31f6129ad8e25ec89be47dc9b94b96af73a5b887 SHA256: 79a3356b995dd16890734ff413abea4d24afeb72a173438a4472c401d3e40a94 ssdeep: 1536:amnpwDGdvXP49Op2kVbSmnNdcqmrI0TUCLeO7HABMMew9hhNcoGK/bIdiz/ L:nRJbln3cqmrIhaCfeK5coR/ PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0xbbf4 timedatestamp…..: 0x3b5c20e3 (Mon Jul 23 13:04:35 2001) machinetype…….: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x3000 0xf178 0x10000 6.53 8c03e6c50ae73d2b3e80a64d801f0926 .rdata 0x13000 0xc7d 0x1000 4.66 63a0e19286b2c21da89b1aad90505c47 .data 0x14000 0x16064 0x5000 2.25 7503f4c557aea9d76d53e26d17b5f6c1 .data1 0x2b000 0x1440 0x2000 2.91 9e8f57b23669ffe15e5d6514b8120674 .reloc 0x2d000 0x1c58 0x2000 4.91 b5648bb58d4079bb7663a63041991a8f ( 1 imports ) > KERNEL32.dll: TlsFree, VirtualAlloc, EnterCriticalSection, LeaveCriticalSection, ExitProcess, TerminateProcess, GetCurrentProcess, HeapFree, HeapAlloc, GetSystemTimeAsFileTime, GetCommandLineA, GetVersion, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, DeleteCriticalSection, InitializeCriticalSection, GetModuleHandleA, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, HeapReAlloc, RtlUnwind, GetLastError, CloseHandle, WriteFile, GetProcAddress, GetCurrentThreadId, TlsSetValue, TlsAlloc, VirtualFree, SetLastError, TlsGetValue, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, FlushFileBuffers, InterlockedDecrement, InterlockedIncrement, SetFilePointer, SetStdHandle, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW ( 3 exports ) hmpv2_deinit, hmpv2_encode, hmpv2_init RDS…: NSRL Reference Data Set - pdfid.: - trid..: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned ——————————————– File Image.dll received on 2010.05.24 19:49:15 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/41 (0%) Loading server information… Your file is queued in position: 2. Estimated start time is between 49 and 70 seconds. Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Prevx 3.0 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 626688 bytes MD5…: b0ad95433fbebe095be12eea3f8f3641 SHA1..: 0ed2d0e1998a387a136d1131ef58427cbe951083 SHA256: dddcbaff9a41083d1bfa4952026cf0f2786cb043cfe38ed97c3a2f8ba7789501 ssdeep: 12288:UardU3DUuKXRxG5fBPCZbYMIlQc66OFek:RdUzUuaRxsPCZ0MIlAek PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x612d4 timedatestamp…..: 0x460b7d50 (Thu Mar 29 08:48:16 2007) machinetype…….: 0x14c (I386) ( 4 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x6b9fa 0x6c000 6.68 265567681587214c0c8e37da9386b83a .rdata 0x6d000 0x1e75b 0x1f000 3.17 0040cd293a808483de0dbe6704ecf281 .data 0x8c000 0xc17c 0x9000 5.23 14a465c23b67fb82207c225439e0a17d .reloc 0x99000 0x37e2 0x4000 5.51 e50bec2c75aec02b55c10bdd18956a3b ( 1 imports ) > KERNEL32.dll: FreeLibrary, GetProcAddress, LoadLibraryA, EnterCriticalSection, Sleep, InitializeCriticalSection, InterlockedExchange, DeleteCriticalSection, LeaveCriticalSection, InterlockedDecrement, InterlockedIncrement, RtlUnwind, GetLastError, FindFirstFileA, FindNextFileA, FindClose, FileTimeToSystemTime, FileTimeToLocalFileTime, HeapFree, HeapAlloc, RaiseException, HeapReAlloc, GetCommandLineA, GetVersion, ExitProcess, TerminateProcess, GetCurrentProcess, WideCharToMultiByte, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetCurrentThreadId, TlsSetValue, TlsAlloc, TlsFree, SetLastError, TlsGetValue, CloseHandle, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, SetUnhandledExceptionFilter, GetModuleHandleA, ReadFile, WriteFile, SetFilePointer, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, FlushFileBuffers, HeapSize, GetCPInfo, GetStringTypeA, GetStringTypeW, IsBadReadPtr, IsBadCodePtr, GetTimeZoneInformation, SetStdHandle, CreateFileA, GetACP, GetOEMCP, CompareStringA, CompareStringW, SetEnvironmentVariableA, SetEndOfFile, GetFileInformationByHandle, PeekNamedPipe ( 137 exports ) _FreeImage_Allocate@24, _FreeImage_ColorQuantize@8, _FreeImage_ConvertFromRawBits@36, _FreeImage_ConvertLine16To24_555@12, _FreeImage_ConvertLine16To24_565@12, _FreeImage_ConvertLine16To32_555@12, _FreeImage_ConvertLine16To32_565@12, _FreeImage_ConvertLine16To8_555@12, _FreeImage_ConvertLine16To8_565@12, _FreeImage_ConvertLine16_555_To16_565@12, _FreeImage_ConvertLine16_565_To16_555@12, _FreeImage_ConvertLine1To16_555@16, _FreeImage_ConvertLine1To16_565@16, _FreeImage_ConvertLine1To24@16, _FreeImage_ConvertLine1To32@16, _FreeImage_ConvertLine1To8@12, _FreeImage_ConvertLine24To16_555@12, _FreeImage_ConvertLine24To16_565@12, _FreeImage_ConvertLine24To32@12, _FreeImage_ConvertLine24To8@12, _FreeImage_ConvertLine32To16_555@12, _FreeImage_ConvertLine32To16_565@12, _FreeImage_ConvertLine32To24@12, _FreeImage_ConvertLine32To8@12, _FreeImage_ConvertLine4To16_555@16, _FreeImage_ConvertLine4To16_565@16, _FreeImage_ConvertLine4To24@16, _FreeImage_ConvertLine4To32@16, _FreeImage_ConvertLine4To8@12, _FreeImage_ConvertLine8To16_555@16, _FreeImage_ConvertLine8To16_565@16, _FreeImage_ConvertLine8To24@16, _FreeImage_ConvertLine8To32@16, _FreeImage_ConvertTo16Bits555@4, _FreeImage_ConvertTo16Bits565@4, _FreeImage_ConvertTo24Bits@4, _FreeImage_ConvertTo32Bits@4, _FreeImage_ConvertTo8Bits@4, _FreeImage_ConvertToRawBits@32, _FreeImage_DeInitialise@0, _FreeImage_FIFSupportsExportBPP@8, _FreeImage_FIFSupportsReading@4, _FreeImage_FIFSupportsWriting@4, _FreeImage_Free@4, _FreeImage_GetBPP@4, _FreeImage_GetBits@4, _FreeImage_GetBitsRowCol@12, _FreeImage_GetBlueMask@4, _FreeImage_GetColorType@4, _FreeImage_GetColorsUsed@4, _FreeImage_GetCopyrightMessage@0, _FreeImage_GetDIBSize@4, _FreeImage_GetDotsPerMeterX@4, _FreeImage_GetDotsPerMeterY@4, _FreeImage_GetFIFCount@0, _FreeImage_GetFIFDescription@4, _FreeImage_GetFIFExtensionList@4, _FreeImage_GetFIFFromFilename@4, _FreeImage_GetFIFFromFormat@4, _FreeImage_GetFIFFromMime@4, _FreeImage_GetFIFRegExpr@4, _FreeImage_GetFileType@8, _FreeImage_GetFileTypeFromExt@4, _FreeImage_GetFileTypeFromFormat@4, _FreeImage_GetFileTypeFromHandle@12, _FreeImage_GetFormatFromFIF@4, _FreeImage_GetGreenMask@4, _FreeImage_GetHeight@4, _FreeImage_GetInfo@4, _FreeImage_GetInfoHeader@4, _FreeImage_GetLine@4, _FreeImage_GetPalette@4, _FreeImage_GetPitch@4, _FreeImage_GetRedMask@4, _FreeImage_GetScanLine@8, _FreeImage_GetTransparencyCount@4, _FreeImage_GetTransparencyTable@4, _FreeImage_GetVersion@0, _FreeImage_GetWidth@4, _FreeImage_Initialise@4, _FreeImage_IsPluginEnabled@4, _FreeImage_IsTransparent@4, _FreeImage_Load@12, _FreeImage_LoadBMP@8, _FreeImage_LoadBMPFromHandle@12, _FreeImage_LoadFromHandle@16, _FreeImage_LoadICO@8, _FreeImage_LoadICOFromHandle@12, _FreeImage_LoadIFF@8, _FreeImage_LoadIFFFromHandle@12, _FreeImage_LoadJPEG@8, _FreeImage_LoadJPEGFromHandle@12, _FreeImage_LoadKOALA@8, _FreeImage_LoadKOALAFromHandle@12, _FreeImage_LoadLBM@8, _FreeImage_LoadLBMFromHandle@12, _FreeImage_LoadMNG@8, _FreeImage_LoadMNGFromHandle@12, _FreeImage_LoadPCD@8, _FreeImage_LoadPCDFromHandle@12, _FreeImage_LoadPCX@8, _FreeImage_LoadPCXFromHandle@12, _FreeImage_LoadPNG@8, _FreeImage_LoadPNGFromHandle@12, _FreeImage_LoadPNM@8, _FreeImage_LoadPNMFromHandle@12, _FreeImage_LoadPSD@8, _FreeImage_LoadPSDFromHandle@12, _FreeImage_LoadRAS@8, _FreeImage_LoadRASFromHandle@12, _FreeImage_LoadTARGA@8, _FreeImage_LoadTARGAFromHandle@12, _FreeImage_LoadTIFF@8, _FreeImage_LoadTIFFFromHandle@12, _FreeImage_LoadWBMP@8, _FreeImage_LoadWBMPFromHandle@12, _FreeImage_RegisterExternalPlugin@20, _FreeImage_RegisterLocalPlugin@20, _FreeImage_Save@16, _FreeImage_SaveBMP@12, _FreeImage_SaveBMPToHandle@16, _FreeImage_SaveJPEG@12, _FreeImage_SaveJPEGToHandle@16, _FreeImage_SavePNG@12, _FreeImage_SavePNGToHandle@16, _FreeImage_SavePNM@12, _FreeImage_SavePNMToHandle@16, _FreeImage_SaveTIFF@12, _FreeImage_SaveTIFFToHandle@16, _FreeImage_SaveToHandle@20, _FreeImage_SaveWBMP@12, _FreeImage_SaveWBMPToHandle@16, _FreeImage_SetOutputMessage@4, _FreeImage_SetPluginEnabled@8, _FreeImage_SetTransparencyTable@12, _FreeImage_SetTransparent@8, _FreeImage_Unload@4 RDS…: NSRL Reference Data Set - pdfid.: - trid..: Win32 Executable MS Visual C++ (generic) (53.1%) Windows Screen Saver (18.4%) Win32 Executable Generic (12.0%) Win32 Dynamic Link Library (generic) (10.6%) Generic Win/DOS Executable (2.8%) sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned

OK, from the Virus Total site: File multiplex_vcd.dll received on 2010.05.24 20:50:09 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/41 (0%) Loading server information… Your file is queued in position: 1. Estimated start time is between 42 and 60 seconds. Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Prevx 3.0 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 65536 bytes MD5…: 7a217516b33ff1bae1682935dcec35d3 SHA1..: 5bf09ab134b8476bf7e787911b9f4302c5196dce SHA256: 03d733f4282ad612e245aade4a62839ba29e6e8a92db2a4dd59282aadf0484a6 ssdeep: 768:AONaI7AIhGOtzRXCAY9UjTQZciB9pSNCvJfo4hz37N:AONbsIHRSAA00gko+ z PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x41a7 timedatestamp…..: 0x3c29785d (Wed Dec 26 07:12:29 2001) machinetype…….: 0x14c (I386) ( 4 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x850a 0x9000 6.39 182e589c99f2e2a6bc57a7ef9e7b7adb .rdata 0xa000 0x9d2 0x1000 3.77 f46900665aaf461e979f2bf97934d2f1 .data 0xb000 0x4900 0x4000 1.25 027d1b4ed3a035cc20a1d7b828bf7c2b .reloc 0x10000 0x8f8 0x1000 4.00 ca554feb1505fbd1770dc9073ba2335f ( 1 imports ) > KERNEL32.dll: TerminateProcess, WriteFile, CloseHandle, CreateFileA, DeleteFileA, HeapFree, HeapAlloc, GetCommandLineA, GetVersion, GetModuleHandleA, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, GetProcAddress, RaiseException, ExitProcess, ReadFile, GetCurrentProcess, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, DisableThreadLibraryCalls, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW, RtlUnwind ( 1 exports ) multiplex_vcd RDS…: NSRL Reference Data Set - trid..: Win32 Executable MS Visual C++ (generic) (65.2%) Win32 Executable Generic (14.7%) Win32 Dynamic Link Library (generic) (13.1%) Generic Win/DOS Executable (3.4%) DOS Executable Generic (3.4%) sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned pdfid.: - —————————————————– File Hmpg12.dll received on 2010.05.24 20:52:14 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/41 (0%) Loading server information… Your file is queued in position: 2. Estimated start time is between 49 and 70 seconds. Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Prevx 3.0 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 110592 bytes MD5…: fe34d72fbd99a4cd761c6465bee74487 SHA1..: 2c50cea650e5b03fb15f617ffd64b2983679e337 SHA256: da58f72233de07bd549bd760f1630b9328c8da577475f18e930113c18d1a4026 ssdeep: 1536:pojbjBsfVZlkT53OemsdOTYo2LBApFeCoN4i9HYsEQqa:AbjBsVZ695ASBn Co5 PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0xa00e timedatestamp…..: 0x3b944e9c (Tue Sep 04 03:46:36 2001) machinetype…….: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0xe9e0 0xf000 6.44 22f7795f0afa1ea3b68d662c54ba8e8c .rdata 0x10000 0xb7f 0x1000 4.42 3389eb66ed32a5d44ba0f0b0f3f564d6 .data 0x11000 0x961bc 0x7000 4.98 f4884a5b879b07601442654409b7da0b .data1 0xa8000 0x1c0 0x1000 0.29 2bd6aa7a8410609f542b689a199083ba .reloc 0xa9000 0x13b8 0x2000 3.47 0c0482393907587a72f2696d4f7eb558 ( 1 imports ) > KERNEL32.dll: HeapReAlloc, CloseHandle, ExitThread, CreateThread, ResumeThread, LockFile, UnlockFile, GetFileSize, WriteFile, VirtualFree, SetFilePointer, CreateFileA, VirtualAlloc, LeaveCriticalSection, ResetEvent, CreateEventA, DeleteCriticalSection, EnterCriticalSection, InitializeCriticalSection, SetEvent, HeapAlloc, HeapFree, ExitProcess, TerminateProcess, GetCurrentProcess, GetSystemTimeAsFileTime, GetCommandLineA, GetVersion, HeapDestroy, HeapCreate, WaitForSingleObject, GetProcAddress, GetModuleHandleA, GetLastError, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, DisableThreadLibraryCalls, FlushFileBuffers, SetStdHandle, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW, SetEndOfFile, ReadFile, RtlUnwind ( 7 exports ) HMPG12EA_deinit, HMPG12EA_encode, HMPG12EA_init, HMPG12ES_deinit, HMPG12ES_encodeaudio, HMPG12ES_encodevideo, HMPG12ES_init RDS…: NSRL Reference Data Set - trid..: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) pdfid.: - sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned ———————————————————— File HMPV2_ENC.dll received on 2010.05.24 20:59:14 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/40 (0%) Loading server information… Your file is queued in position: 2. Estimated start time is between 49 and 70 seconds. Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 118784 bytes MD5…: 38b78898c70e740bed0334bdc0c783ce SHA1..: 31a5a5e4229e61cf8c5e6043774fec275b0e0dd2 SHA256: 2f8f4175e4c819b4b7051bd103f4d05530404695240b1b221b9776c33946e8a2 ssdeep: 1536:y3b7WARmn00LBKUfcDh5sNtTDsEVLW09akWxkYKQHoFX/VIHF:yfWh00NKU fczWYg4Ho PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0xbc7c timedatestamp…..: 0x3b650de2 (Mon Jul 30 07:33:54 2001) machinetype…….: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x3000 0xf1f8 0x10000 6.50 ef1b1430dd7cabf8f0463682b6943a67 .rdata 0x13000 0xcf9 0x1000 4.83 8debfc3f365562a5c94c8f4dfcf957cb .data 0x14000 0x161c4 0x5000 2.33 7b8c8ceb8737241a1d162357cb738dc5 .data1 0x2b000 0x1260 0x2000 2.82 d45b4670c3f9bf90b06d607e7d0b4308 .reloc 0x2d000 0x1d08 0x2000 4.67 d485cada21d24decb56cee2cb076d990 ( 1 imports ) > KERNEL32.dll: TlsFree, VirtualAlloc, EnterCriticalSection, LeaveCriticalSection, ExitProcess, TerminateProcess, GetCurrentProcess, HeapFree, HeapAlloc, GetSystemTimeAsFileTime, GetCommandLineA, GetVersion, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, DeleteCriticalSection, InitializeCriticalSection, GetModuleHandleA, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, HeapReAlloc, RtlUnwind, GetLastError, CloseHandle, WriteFile, GetProcAddress, GetCurrentThreadId, TlsSetValue, TlsAlloc, VirtualFree, SetLastError, TlsGetValue, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, FlushFileBuffers, InterlockedDecrement, InterlockedIncrement, SetFilePointer, SetStdHandle, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW ( 3 exports ) hmpv2_deinit, hmpv2_encode, hmpv2_init RDS…: NSRL Reference Data Set - trid..: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned pdfid.: - ————————————————————- File HMPV2_ENC_MMX.dll received on 2010.05.24 21:01:20 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/40 (0%) Loading server information… Your file is queued in position: ___. Estimated start time is between ___ and ___ . Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 118784 bytes MD5…: d7d0fda4bca293ce1fb4dbaf4c39ac5b SHA1..: 31f6129ad8e25ec89be47dc9b94b96af73a5b887 SHA256: 79a3356b995dd16890734ff413abea4d24afeb72a173438a4472c401d3e40a94 ssdeep: 1536:amnpwDGdvXP49Op2kVbSmnNdcqmrI0TUCLeO7HABMMew9hhNcoGK/bIdiz/ L:nRJbln3cqmrIhaCfeK5coR/ PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0xbbf4 timedatestamp…..: 0x3b5c20e3 (Mon Jul 23 13:04:35 2001) machinetype…….: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x3000 0xf178 0x10000 6.53 8c03e6c50ae73d2b3e80a64d801f0926 .rdata 0x13000 0xc7d 0x1000 4.66 63a0e19286b2c21da89b1aad90505c47 .data 0x14000 0x16064 0x5000 2.25 7503f4c557aea9d76d53e26d17b5f6c1 .data1 0x2b000 0x1440 0x2000 2.91 9e8f57b23669ffe15e5d6514b8120674 .reloc 0x2d000 0x1c58 0x2000 4.91 b5648bb58d4079bb7663a63041991a8f ( 1 imports ) > KERNEL32.dll: TlsFree, VirtualAlloc, EnterCriticalSection, LeaveCriticalSection, ExitProcess, TerminateProcess, GetCurrentProcess, HeapFree, HeapAlloc, GetSystemTimeAsFileTime, GetCommandLineA, GetVersion, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, DeleteCriticalSection, InitializeCriticalSection, GetModuleHandleA, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, HeapReAlloc, RtlUnwind, GetLastError, CloseHandle, WriteFile, GetProcAddress, GetCurrentThreadId, TlsSetValue, TlsAlloc, VirtualFree, SetLastError, TlsGetValue, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, FlushFileBuffers, InterlockedDecrement, InterlockedIncrement, SetFilePointer, SetStdHandle, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW ( 3 exports ) hmpv2_deinit, hmpv2_encode, hmpv2_init RDS…: NSRL Reference Data Set - pdfid.: - trid..: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned ——————————————– File Image.dll received on 2010.05.24 19:49:15 (UTC) Current status: Loading … queued waiting scanning finished NOT FOUND STOPPED Result: 0/41 (0%) Loading server information… Your file is queued in position: 2. Estimated start time is between 49 and 70 seconds. Do not close the window until scan is complete. The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result. If you are waiting for more than five minutes you have to resend your file. Your file is being scanned by VirusTotal in this moment, results will be shown as they're generated. Compact Compact Print results Print results Your file has expired or does not exists. Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished. Email: Antivirus Version Last Update Result a-squared 4.5.0.50 2010.05.10 - AhnLab-V3 2010.05.23.00 2010.05.22 - AntiVir 8.2.1.242 2010.05.24 - Antiy-AVL 2.0.3.7 2010.05.24 - Authentium 5.2.0.5 2010.05.23 - Avast 4.8.1351.0 2010.05.24 - Avast5 5.0.332.0 2010.05.24 - AVG 9.0.0.787 2010.05.24 - BitDefender 7.2 2010.05.24 - CAT-QuickHeal 10.00 2010.05.24 - ClamAV 0.96.0.3-git 2010.05.24 - Comodo 4932 2010.05.24 - DrWeb 5.0.2.03300 2010.05.24 - eSafe 7.0.17.0 2010.05.24 - eTrust-Vet 35.2.7507 2010.05.24 - F-Prot 4.6.0.103 2010.05.23 - F-Secure 9.0.15370.0 2010.05.24 - Fortinet 4.1.133.0 2010.05.23 - GData 21 2010.05.24 - Ikarus T3.1.1.84.0 2010.05.24 - Jiangmin 13.0.900 2010.05.24 - Kaspersky 7.0.0.125 2010.05.24 - McAfee 5.400.0.1158 2010.05.24 - McAfee-GW-Edition 2010.1 2010.05.24 - Microsoft 1.5802 2010.05.24 - NOD32 5142 2010.05.24 - Norman 6.04.12 2010.05.24 - nProtect 2010-05-24.01 2010.05.24 - Panda 10.0.2.7 2010.05.24 - PCTools 7.0.3.5 2010.05.24 - Prevx 3.0 2010.05.24 - Rising 22.49.00.03 2010.05.24 - Sophos 4.53.0 2010.05.24 - Sunbelt 6349 2010.05.24 - Symantec 20101.1.0.89 2010.05.24 - TheHacker 6.5.2.0.286 2010.05.24 - TrendMicro 9.120.0.1004 2010.05.24 - TrendMicro-HouseCall 9.120.0.1004 2010.05.24 - VBA32 3.12.12.5 2010.05.22 - ViRobot 2010.5.20.2326 2010.05.24 - VirusBuster 5.0.27.0 2010.05.24 - Additional information File size: 626688 bytes MD5…: b0ad95433fbebe095be12eea3f8f3641 SHA1..: 0ed2d0e1998a387a136d1131ef58427cbe951083 SHA256: dddcbaff9a41083d1bfa4952026cf0f2786cb043cfe38ed97c3a2f8ba7789501 ssdeep: 12288:UardU3DUuKXRxG5fBPCZbYMIlQc66OFek:RdUzUuaRxsPCZ0MIlAek PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x612d4 timedatestamp…..: 0x460b7d50 (Thu Mar 29 08:48:16 2007) machinetype…….: 0x14c (I386) ( 4 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x6b9fa 0x6c000 6.68 265567681587214c0c8e37da9386b83a .rdata 0x6d000 0x1e75b 0x1f000 3.17 0040cd293a808483de0dbe6704ecf281 .data 0x8c000 0xc17c 0x9000 5.23 14a465c23b67fb82207c225439e0a17d .reloc 0x99000 0x37e2 0x4000 5.51 e50bec2c75aec02b55c10bdd18956a3b ( 1 imports ) > KERNEL32.dll: FreeLibrary, GetProcAddress, LoadLibraryA, EnterCriticalSection, Sleep, InitializeCriticalSection, InterlockedExchange, DeleteCriticalSection, LeaveCriticalSection, InterlockedDecrement, InterlockedIncrement, RtlUnwind, GetLastError, FindFirstFileA, FindNextFileA, FindClose, FileTimeToSystemTime, FileTimeToLocalFileTime, HeapFree, HeapAlloc, RaiseException, HeapReAlloc, GetCommandLineA, GetVersion, ExitProcess, TerminateProcess, GetCurrentProcess, WideCharToMultiByte, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetCurrentThreadId, TlsSetValue, TlsAlloc, TlsFree, SetLastError, TlsGetValue, CloseHandle, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, SetUnhandledExceptionFilter, GetModuleHandleA, ReadFile, WriteFile, SetFilePointer, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, FlushFileBuffers, HeapSize, GetCPInfo, GetStringTypeA, GetStringTypeW, IsBadReadPtr, IsBadCodePtr, GetTimeZoneInformation, SetStdHandle, CreateFileA, GetACP, GetOEMCP, CompareStringA, CompareStringW, SetEnvironmentVariableA, SetEndOfFile, GetFileInformationByHandle, PeekNamedPipe ( 137 exports ) _FreeImage_Allocate@24, _FreeImage_ColorQuantize@8, _FreeImage_ConvertFromRawBits@36, _FreeImage_ConvertLine16To24_555@12, _FreeImage_ConvertLine16To24_565@12, _FreeImage_ConvertLine16To32_555@12, _FreeImage_ConvertLine16To32_565@12, _FreeImage_ConvertLine16To8_555@12, _FreeImage_ConvertLine16To8_565@12, _FreeImage_ConvertLine16_555_To16_565@12, _FreeImage_ConvertLine16_565_To16_555@12, _FreeImage_ConvertLine1To16_555@16, _FreeImage_ConvertLine1To16_565@16, _FreeImage_ConvertLine1To24@16, _FreeImage_ConvertLine1To32@16, _FreeImage_ConvertLine1To8@12, _FreeImage_ConvertLine24To16_555@12, _FreeImage_ConvertLine24To16_565@12, _FreeImage_ConvertLine24To32@12, _FreeImage_ConvertLine24To8@12, _FreeImage_ConvertLine32To16_555@12, _FreeImage_ConvertLine32To16_565@12, _FreeImage_ConvertLine32To24@12, _FreeImage_ConvertLine32To8@12, _FreeImage_ConvertLine4To16_555@16, _FreeImage_ConvertLine4To16_565@16, _FreeImage_ConvertLine4To24@16, _FreeImage_ConvertLine4To32@16, _FreeImage_ConvertLine4To8@12, _FreeImage_ConvertLine8To16_555@16, _FreeImage_ConvertLine8To16_565@16, _FreeImage_ConvertLine8To24@16, _FreeImage_ConvertLine8To32@16, _FreeImage_ConvertTo16Bits555@4, _FreeImage_ConvertTo16Bits565@4, _FreeImage_ConvertTo24Bits@4, _FreeImage_ConvertTo32Bits@4, _FreeImage_ConvertTo8Bits@4, _FreeImage_ConvertToRawBits@32, _FreeImage_DeInitialise@0, _FreeImage_FIFSupportsExportBPP@8, _FreeImage_FIFSupportsReading@4, _FreeImage_FIFSupportsWriting@4, _FreeImage_Free@4, _FreeImage_GetBPP@4, _FreeImage_GetBits@4, _FreeImage_GetBitsRowCol@12, _FreeImage_GetBlueMask@4, _FreeImage_GetColorType@4, _FreeImage_GetColorsUsed@4, _FreeImage_GetCopyrightMessage@0, _FreeImage_GetDIBSize@4, _FreeImage_GetDotsPerMeterX@4, _FreeImage_GetDotsPerMeterY@4, _FreeImage_GetFIFCount@0, _FreeImage_GetFIFDescription@4, _FreeImage_GetFIFExtensionList@4, _FreeImage_GetFIFFromFilename@4, _FreeImage_GetFIFFromFormat@4, _FreeImage_GetFIFFromMime@4, _FreeImage_GetFIFRegExpr@4, _FreeImage_GetFileType@8, _FreeImage_GetFileTypeFromExt@4, _FreeImage_GetFileTypeFromFormat@4, _FreeImage_GetFileTypeFromHandle@12, _FreeImage_GetFormatFromFIF@4, _FreeImage_GetGreenMask@4, _FreeImage_GetHeight@4, _FreeImage_GetInfo@4, _FreeImage_GetInfoHeader@4, _FreeImage_GetLine@4, _FreeImage_GetPalette@4, _FreeImage_GetPitch@4, _FreeImage_GetRedMask@4, _FreeImage_GetScanLine@8, _FreeImage_GetTransparencyCount@4, _FreeImage_GetTransparencyTable@4, _FreeImage_GetVersion@0, _FreeImage_GetWidth@4, _FreeImage_Initialise@4, _FreeImage_IsPluginEnabled@4, _FreeImage_IsTransparent@4, _FreeImage_Load@12, _FreeImage_LoadBMP@8, _FreeImage_LoadBMPFromHandle@12, _FreeImage_LoadFromHandle@16, _FreeImage_LoadICO@8, _FreeImage_LoadICOFromHandle@12, _FreeImage_LoadIFF@8, _FreeImage_LoadIFFFromHandle@12, _FreeImage_LoadJPEG@8, _FreeImage_LoadJPEGFromHandle@12, _FreeImage_LoadKOALA@8, _FreeImage_LoadKOALAFromHandle@12, _FreeImage_LoadLBM@8, _FreeImage_LoadLBMFromHandle@12, _FreeImage_LoadMNG@8, _FreeImage_LoadMNGFromHandle@12, _FreeImage_LoadPCD@8, _FreeImage_LoadPCDFromHandle@12, _FreeImage_LoadPCX@8, _FreeImage_LoadPCXFromHandle@12, _FreeImage_LoadPNG@8, _FreeImage_LoadPNGFromHandle@12, _FreeImage_LoadPNM@8, _FreeImage_LoadPNMFromHandle@12, _FreeImage_LoadPSD@8, _FreeImage_LoadPSDFromHandle@12, _FreeImage_LoadRAS@8, _FreeImage_LoadRASFromHandle@12, _FreeImage_LoadTARGA@8, _FreeImage_LoadTARGAFromHandle@12, _FreeImage_LoadTIFF@8, _FreeImage_LoadTIFFFromHandle@12, _FreeImage_LoadWBMP@8, _FreeImage_LoadWBMPFromHandle@12, _FreeImage_RegisterExternalPlugin@20, _FreeImage_RegisterLocalPlugin@20, _FreeImage_Save@16, _FreeImage_SaveBMP@12, _FreeImage_SaveBMPToHandle@16, _FreeImage_SaveJPEG@12, _FreeImage_SaveJPEGToHandle@16, _FreeImage_SavePNG@12, _FreeImage_SavePNGToHandle@16, _FreeImage_SavePNM@12, _FreeImage_SavePNMToHandle@16, _FreeImage_SaveTIFF@12, _FreeImage_SaveTIFFToHandle@16, _FreeImage_SaveToHandle@20, _FreeImage_SaveWBMP@12, _FreeImage_SaveWBMPToHandle@16, _FreeImage_SetOutputMessage@4, _FreeImage_SetPluginEnabled@8, _FreeImage_SetTransparencyTable@12, _FreeImage_SetTransparent@8, _FreeImage_Unload@4 RDS…: NSRL Reference Data Set - pdfid.: - trid..: Win32 Executable MS Visual C++ (generic) (53.1%) Windows Screen Saver (18.4%) Win32 Executable Generic (12.0%) Win32 Dynamic Link Library (generic) (10.6%) Generic Win/DOS Executable (2.8%) sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned

Kaspersky Online Scanner in IE

I recommend you to leave your computer on for the whole night as the scanning will take longer than you expected.

Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

Please go to Kaspersky website and click on Kaspersky Online Scanner to perform an online scan.

• Read through the requirements and privacy statement and click on Accept button.
• It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, Adware, Dialers, and other potentially dangerous programs
  • Archives
  • Mail databases
• Click on My Computer under Scan.
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As….
• Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
  
  [external image: Posted Image]
  
• Please post this log in your next reply.

**Note

For clearer guidance, here's the animated tutorial :-

Click here

To optimize scanning time and produce a more sensible report for review:

• Close any open programs.
• Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan. Once scan is finished remember to re-enable resident antivirus protection along with whatever antispyware app you use.

Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the license, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license is accepted, reset to 100%.

Oh boy, this computer goes into suspend every 15 minutes unless I am sitting right here with it. How can I disable suspend? Or Hibernate?

Hello, Right click anywhere on desktop -> Select Properties -> Click Screen Saver tab -> Under Monitor power click Power -> Under Settings for Always On power scheme, in the System Standby box select Never.

Ok, I *think* have located where to do it, now. BTW, you can't do it your way on Win Vista or at least on this Acer laptop. When you right click the desktop you get this. view sort by refresh paste paste shortcut graphics properties graphics option new personalize

Gosh…. I have been using for XP so long and I didn't know how much difference it would have on Vista. My apologies. Ok I think I found the way to really configure, go here http://www.howtogeek.com/howto/windows-vis…-windows-vista/

This is turning into a huge mess. I got Kaspersky to load, but the button for Settings, it was grayed out and nothing I could do would make it active. I went back on my message board about 30 minutes ago and the same *&^%$ virus/fake scanner, popped up on the screen and did the same darned thing! I had to go back into SAFE MODE in order to dump the cache or run any of the antivirus software, again. I just finished and have the mbam log here from Malwarebytes. After I am done here, I am going to try and open Kaspersky's site, again, from MSIE instead of Firefox and see if I can get it to load from there. Malwarebytes' Anti-Malware 1.45 www.malwarebytes.org Database version: 4118 Windows 6.0.6002 Service Pack 2 (Safe Mode) Internet Explorer 7.0.6002.18005 5/27/2010 8:56:25 PM mbam-log-2010-05-27 (20-56-25).txt Scan type: Quick scan Objects scanned: 109752 Time elapsed: 3 minute(s), 35 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 2 Registry Values Infected: 1 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ltjacpir (Rogue.AntivirusSuite.Gen) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Users\Ratopia\AppData\Local\xbdftonow\muyeceytssd.exe (Rogue.AntivirusSuite.Gen) -> Quarantined and deleted successfully.

ACK, I guess the virus attacked the computer and when it did, it disabled MSIE, again. I am running the Kaspersky scanner through AOL's browser but I guess I am going to have to go back and rerun those other programs, again, then run the Kaspersky scanner again. UGH. :-/

——————————————————————————– KASPERSKY ONLINE SCANNER 7.0: scan report Friday, May 28, 2010 Operating system: Microsoft Windows Vista Home Premium Edition, 64-bit Service Pack 2 (build 6002) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Thursday, May 27, 2010 17:33:33 Records in database: 4190279 ——————————————————————————– Scan settings: scan using the following database: extended Scan archives: yes Scan e-mail databases: yes Scan area - My Computer: C:\ D:\ F:\ Scan statistics: Objects scanned: 201027 Threats found: 4 Infected objects found: 9 Suspicious objects found: 0 Scan duration: 02:11:21 File name / Threat / Threats count C:\Program Files (x86)\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.g 1 C:\Users\Ratopia\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\720b4111-5e1337fb Infected: Exploit.Java.Agent.f 1 C:\Users\Ratopia\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\720b4111-5e1337fb Infected: Trojan-Downloader.Java.Agent.cd 1 C:\Users\Ratopia\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\720b4111-5e1337fb Infected: Trojan-Downloader.Java.OpenStream.al 1 C:\Users\Ratopia\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\6570075d-2a14713a Infected: Exploit.Java.Agent.f 1 C:\Users\Ratopia\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\784fe349-595c08aa Infected: Exploit.Java.Agent.f 1 C:\Users\Ratopia\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\784fe349-595c08aa Infected: Trojan-Downloader.Java.Agent.cd 1 C:\Users\Ratopia\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\784fe349-595c08aa Infected: Trojan-Downloader.Java.OpenStream.al 1 C:\Users\Ratopia\Downloads\mirc635.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.g 1 Selected area has been scanned.

exeHelper by Raktor Build 20100414 Run at 02:18:56 on 05/28/10 Now searching… Checking for numerical processes… Checking for sysguard processes… Checking for bad processes… Checking for bad files… Checking for bad registry entries… Resetting filetype association for .exe Resetting filetype association for .com Resetting userinit and shell values… Resetting policies… –Finished– exeHelper by Raktor Build 20100414 Run at 14:13:19 on 05/28/10 Now searching… Checking for numerical processes… Checking for sysguard processes… Checking for bad processes… exeHelper by Raktor Build 20100414 Run at 14:14:12 on 05/28/10 Now searching… Checking for numerical processes… Checking for sysguard processes… Checking for bad processes… Checking for bad files… Checking for bad registry entries… Resetting filetype association for .exe Resetting filetype association for .com Resetting userinit and shell values… Resetting policies… –Finished–