What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

About Blank

52 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Looking Good!

Do this:

Copy the following in the code box to notepad:

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\frame.crazywinnings.com]

[-HKEY_USERS\S-1-5-21-1454471165-764733703-839522115-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\frame.crazywinnings.com]



Click file -> save as…-> call it fixer.reg -> file type *all files*-> save it to the desktop

Run fixer.reg you saved to desktop
Ok the prompt to merge with registry
You should get success messege and reboot
Rescan with HJT, see if there gone.

If not do this:

Download this file to your desktop:
http://www.mvps.org/winhelp2002/DelDomains.inf

Right-click on the deldomains.inf file and select 'Install'

Once it is finished your Zones should be reset.

Note, if you use SpywareBlaster and/or IE/Spyads, it will be necessary to re-install the protection both afford. For SpywareBlaster, run the program and re-protect all items. For IE/Spyads, run the batch file and reinstall the protection

Let me know and post a new log, MrC
Post #17
Note- read above post first.


System randomly crashed again. Had to reboot. Here is a HJT log again after reboot. Some things have changed in the "04"'s.



Logfile of HijackThis v1.99.0
Scan saved at 2:06:03 PM, on 2/6/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\System32\qttask.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Creative\ShareDLL\CtNotify.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\PANICW~1\POP-UP~2\PSFree.exe
C:\Program Files\Creative\ShareDLL\MediaDet.Exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\ePlus48U\ScanPanel\ScnPanel.exe
C:\Documents and Settings\Tim S\My Documents\hijack.exe\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Optimum Online
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [POINTER] C:\Program Files\Microsoft Hardware\Mouse\point32.exe
O4 - HKLM\..\Run: [QuickTime Task] C:\WINDOWS\System32\qttask.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\RunOnce: [DELDIR0.EXE] "C:\DOCUME~1\TIMS~1\LOCALS~1\Temp\DELDIR0.EXE" "C:\Program Files\McAfee\McAfee Shared Components\Central"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~2\PSFree.exe"
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ScanPanel.lnk = C:\Program Files\ePlus48U\ScanPanel\ScnPanel.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.optonline.net
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: LexBce Server - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
O23 - Service: SymWMI Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Post #18
MrC,

Please disregard the previous post. I had trouble reading the forum thread and didn't realize it jumped to a page 2. I have been sitting here all weekend not knowing you replied.

Anyway, I did as instructed and it looks good. Here is the log…

(what is 012, anyway?)



BTW-Yes, My blocker is Pop Stopper free edition.

What about the random crashes I still get?

When we are done, can I run my normal clean-up and quick fix type programs like Norton SystemWorks one button check-up, Norton Speed Disk, Microsoft Update, defragmentation procedures, etc.?


Thanks,

Tim


Logfile of HijackThis v1.99.0
Scan saved at 2:38:04 PM, on 2/6/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\System32\qttask.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Creative\ShareDLL\CtNotify.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\PANICW~1\POP-UP~2\PSFree.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\ePlus48U\ScanPanel\ScnPanel.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Creative\ShareDLL\MediaDet.Exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Tim S\My Documents\hijack.exe\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Optimum Online
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [POINTER] C:\Program Files\Microsoft Hardware\Mouse\point32.exe
O4 - HKLM\..\Run: [QuickTime Task] C:\WINDOWS\System32\qttask.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\RunOnce: [DELDIR0.EXE] "C:\DOCUME~1\TIMS~1\LOCALS~1\Temp\DELDIR0.EXE" "C:\Program Files\McAfee\McAfee Shared Components\Central"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~2\PSFree.exe"
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ScanPanel.lnk = C:\Program Files\ePlus48U\ScanPanel\ScnPanel.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.optonline.net
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: LexBce Server - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
O23 - Service: SymWMI Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Post #19
The logs looks OK !
Which procedure did you use to get the 015s?

012 is a plugin for IE, this is what yours is:
http://www.liutilities.com/products/wintas…brary/NPDocBox/

I would just uninstall and reinstall PopupStopper free if you have a problem with it.
Pop-upStopperFree

Here's what I would suggest, you can do it what ever way you what.
Do forget to delete the system restore files and create a new restore point:
XP system restore


Lets do this:

Clean out all the temp files by downloading, install and run Easycleaner
http://personal.inet.fi/business/toniarts/ecleane.htm <—-Easycleaner
Clean up as much as possible

Delete all files in these folders.(if they exist)
C:\documents and settings\(your name)\local settings\temp
C:\documents and settings\(anyone)\local settings\temp
C:\windows\temp
C:\Temp

Empty recycle bin.

Reboot, now run scan disk and defrag.

If you want a better defrag program, use DiskKeeperLite.
XP uses a stripped down version of this and it's free.

Let me know, MrC
Post #20
I am working on this as we speak. The Easycleaner seems a little above me. I don't want to screw things up so I will take some time on this. In the meantime, how do I hide some of the files again. When I open my music folders, picture folders, etc., I have all of these gif and image files that I don't need to view. Basically I would like it as it was before.
Post #21

how do I hide some of the files again. When I open my music folders, picture folders, etc., I have all of these gif and image files that I don't need to view. Basically I would like it as it was before.



You can delete them, but I don't know how you can hide them. I would say you just have to delete them.
Let me know, maybe I'm not understanding you. MrC
Post #22
I could be wrong, but I thought they became exposed during one of our steps to show more files or hidden files. It is items such as album artwork now showing in my music folder, etc. I was thinking that it would just be a setting adjustment. Let me know what you think.
Post #23
I'm having problems with my Norton Antivirus, so I am uninstalling and reinstalling it. When I went to add/remove programs I did find "Windows Adstatus". Should I uninstall it? When I did a search for "Ad" on the "C" drive 2700 items came up. Many where adware related. I will post some examples, when I get home (at work now), so you can suggest whether to delete or not. Computer is About Blank free but very quirky right now. Trying to straighten out. Norton being the biggest problem. Thanks, Tim
Post #24 last edited
Windows Adstatus. - I had you delete it previously - but see if it uninstalls.

"Norton being the biggest problem." - Yes in always is.

You never answered my question about which method you used to get rid of the 015s - the reg file you made or the program?

Here's how we 'showed hidden files and folders' - so just reverse it in the procedure:

Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab.
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.

Let me know, MrC
Post #25
MrC, Thanks again, those where the instructions (hidden file enablement) I was looking for. I'll follow them when I'm done poking around. Finally debugged Norton (whew!). Was able to delete Adstatus from add/remove programs. The method I used for the 015's was the program. The first instruction didn't take. My previous mention of the search of "C:" for "ad" was attempted again. It looks as they are application data for Spybot in the recovery section. I also show things like "Ad_Type1.ini" in a Default/Default folder. I have a folder called "DeskAD Service" in C:\Program files, a file called DeskAdComm.dll and DeskAdKeep in C:\Program Files\Desk Ad Service, etc. There are so many in this search, that I have in question, is there a way I could just copy this search and post it for your review. I don't want to blow-out your bandwidth. Let me know. Thanks, Tim
Post #26

There are so many in this search, that I have in question, is there a way I could just copy this search and post it for your review. I don't want to blow-out your bandwidth. Let me know.


I don't think you can do that, btw - those you listed are all bad.

You can do this though:

Click here http://www.mwti.net/antivirus/free_utilities.asp to download mwavscan. Double-click it to run it, select all local drives, scan all files, press 'scan' and when it is completed, anything found will be displayed in the lower pane. Highlight it, CTRL C and paste it in your next reply.

This will scan the whole system for malware and give use a report. If you get a pop-up to buy, just X it out.

MrC
Post #27
Thanks, These random crashes are killing me! I got through half of the scan and "poof". I'll have to scan tonight and post. Stay tuned. Tim
Post #28
MrC, Here's the MWAVSCAN log. It is from the lower pane as you requested. I did save a full log (via the application toolbar) of the scan in Notepad if you need it. It's huge! Let me know what you think and to do next. Thanks, Tim File C:\WINDOWS\crwo.exe infected by "Backdoor.Win32.Small.dc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_iprbok.log infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\wolngeoj.exe infected by "Trojan-Downloader.Win32.IstBar.go" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\mac80ex.idf infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\mqexdlm.srg infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\netut80ex.vxd infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\SahHtml.exe infected by "not-a-virus:AdWare.Sahat.i" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\TIMS~1\LOCALS~1\TEMPOR~1\Content.IE5\QK4FPH8L\masta[1].htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DyFuCAInternetOptimizer2.zip infected by "Password-protected-EXE" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy1.zip infected by "Password-protected-EXE" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy16.zip infected by "Password-protected-EXE" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy32.zip infected by "Password-protected-EXE" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy35.zip infected by "Password-protected-EXE" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Tim S\Local Settings\Temporary Internet Files\Content.IE5\QK4FPH8L\masta[1].htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Tim S\My Documents\hijack.exe\backups\backup-20050203-101816-577.dll infected by "Trojan-Downloader.Win32.IstBar.gu" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Tim S\My Documents\hijack.exe\backups\backup-20050203-101816-988.dll infected by "not-a-virus:AdWare.WinAD.t" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Tim S\My Documents\hijack.exe\backups\backup-20050203-122108-884.dll infected by "not-a-virus:AdWare.WinAD.t" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Tim S\My Documents\hijack.exe\backups\backup-20050203-122109-562.dll infected by "Trojan-Downloader.Win32.IstBar.gu" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Tim S\My Documents\Kaza\kmd160_en.exe infected by "not-a-virus:AdWare.Cydoor" Virus. Action Taken: No Action Taken. File C:\installs\DivX502Bundle.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\RECYCLER\S-1-5-21-72185382-4212676017-31143968-1005\Dc122.exe infected by "not-a-virus:AdWare.WinAD.k" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-72185382-4212676017-31143968-1005\Dc123.dll infected by "not-a-virus:AdWare.WinAD.m" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP14\A0004341.cmd infected by "Trojan-Dropper.Win32.Small.rk" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP14\A0004359.exe infected by "Trojan-Downloader.Win32.Dyfuca.ds" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP14\A0004363.EXE infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP14\A0004372.EXE infected by "Trojan-Downloader.Win32.IstBar.gt" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP14\A0004374.VXD infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP14\A0004375.DLL infected by "not-a-virus:AdWare.Relevance.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP15\A0004387.exe tagged as not-a-virus:RiskWare.Tool.ServiceRunner.f. No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP15\A0004396.dll infected by "Trojan-Downloader.Win32.IstBar.gj" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP15\A0004401.exe infected by "not-a-virus:AdWare.ShopAtHome.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP15\A0004402.exe infected by "not-a-virus:AdWare.WebRebates.c" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP15\A0004404.exe infected by "not-a-virus:AdWare.WebRebates.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP15\A0004413.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP15\A0004443.EXE tagged as not-a-virus:RiskWare.Tool.ServiceRunner.f. No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP16\A0004632.exe tagged as not-a-virus:RiskWare.Tool.ServiceRunner.f. No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP16\A0004638.exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004667.DLL infected by "Trojan-Downloader.Win32.IstBar.gj" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004684.EXE infected by "not-a-virus:AdWare.ShopAtHome.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004709.EXE infected by "not-a-virus:AdWare.WebRebates.c" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004711.EXE infected by "not-a-virus:AdWare.WebRebates.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004714.exe infected by "Trojan-Downloader.Win32.IstBar.go" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004720.EXE tagged as not-a-virus:RiskWare.Tool.ServiceRunner.f. No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004746.EXE infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004763.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004764.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004765.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004766.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004767.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004768.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004769.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004770.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004771.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004772.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004773.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004774.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004775.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004776.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004777.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004778.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004779.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004780.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004781.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004782.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004783.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004784.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004785.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004786.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004787.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004788.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004789.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004790.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004791.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004792.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004793.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004794.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004795.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004796.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004797.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004798.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004799.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004800.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004801.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004802.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004803.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004804.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004805.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004806.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004807.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004808.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004809.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004810.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004811.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004812.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004813.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004814.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004815.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004816.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004817.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004818.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004819.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004820.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004821.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004822.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004823.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004824.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004825.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004826.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004827.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004828.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004829.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004830.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004831.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004832.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004833.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004834.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004835.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004836.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004837.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004838.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004839.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004840.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004841.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004842.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004843.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004844.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004845.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004846.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004847.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004848.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004849.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004850.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004851.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004852.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004853.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004854.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004855.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004856.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004857.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004858.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004859.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004860.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004861.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004862.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004863.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004864.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004865.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004866.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004867.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004868.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004869.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004870.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004871.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004872.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004873.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004874.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004875.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004876.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004877.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004878.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004879.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004880.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004881.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004882.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004883.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004884.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004885.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004886.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004887.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004888.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004889.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004890.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004891.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004892.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004893.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004894.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004895.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004896.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004897.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004898.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004899.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004900.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004901.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004945.exe tagged as not-a-virus:RiskWare.Tool.ServiceRunner.f. No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004950.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004955.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0004956.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0005144.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006261.exe tagged as not-a-virus:RiskWare.Tool.ServiceRunner.f. No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006262.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006263.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006264.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006265.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006266.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006267.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006285.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006286.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006287.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006288.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006292.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006293.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006294.EXE infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006301.VXD infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006303.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006306.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006325.EXE infected by "not-a-virus:AdWare.WinAD.m" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006326.exe infected by "not-a-virus:AdWare.BargainBuddy.l" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006328.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006329.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006333.exe infected by "Trojan-Downloader.Win32.TSUpdate.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006334.exe infected by "Trojan-Downloader.Win32.TSUpdate.g" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006336.exe infected by "Trojan-Downloader.Win32.TSUpdate.g" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006355.DLL infected by "Trojan-Downloader.Win32.IstBar.gu" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006364.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006365.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006366.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006367.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006368.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006369.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006371.exe infected by "Trojan-Downloader.Win32.Dyfuca.dp" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006372.EXE infected by "not-a-virus:AdWare.PowerScan.c" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006376.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006377.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006378.EXE infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006379.exe infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006385.VXD infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006388.DLL infected by "not-a-virus:AdWare.Relevance.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006391.VXD infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006392.DLL infected by "not-a-virus:AdWare.Relevance.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006393.dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP17\A0006394.dll infected by "Trojan-Downloader.Win32.Dyfuca.dt" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP19\A0006401.exe infected by "Trojan-Downloader.Win32.Dyfuca.dp" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP19\A0006402.exe infected by "Trojan-Downloader.Win32.Dyfuca.du" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP19\A0006405.exe tagged as not-a-virus:RiskWare.Tool.ServiceRunner.f. No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP19\A0006417.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP19\A0006418.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP19\A0006420.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP19\A0006433.EXE infected by "Trojan-Downloader.Win32.Dyfuca.dp" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP19\A0006435.EXE infected by "Trojan-Downloader.Win32.Dyfuca.du" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP19\A0006477.EXE tagged as not-a-virus:RiskWare.Tool.ServiceRunner.f. No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP20\A0007142.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0008172.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0008173.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009175.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009176.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009180.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009181.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009182.dll infected by "Trojan-Downloader.Win32.IstBar.gj" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009183.exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009185.dll infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009186.dll infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009187.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009188.exe infected by "not-a-virus:AdWare.WebRebates.c" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009190.exe infected by "not-a-virus:AdWare.WebRebates.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009201.exe infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009202.exe infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009203.exe infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009209.exe infected by "not-a-virus:AdWare.WinShow.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009210.exe infected by "not-a-virus:AdWare.BargainBuddy.l" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009212.EXE infected by "Trojan-Downloader.Win32.TSUpdate.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009213.EXE infected by "Trojan-Downloader.Win32.TSUpdate.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009214.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009217.exe infected by "Trojan-Downloader.Win32.Dyfuca.du" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009219.exe infected by "not-a-virus:AdWare.PowerScan.c" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009221.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009222.exe infected by "not-a-virus:AdWare.Relevance.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009226.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009229.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009230.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009231.exe infected by "Trojan-Downloader.Win32.TSUpdate.i" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009233.exe infected by "not-a-virus:AdWare.WebRebates.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009461.exe infected by "not-a-virus:AdWare.WinAD.k" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009462.dll infected by "not-a-virus:AdWare.WinAD.u" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009470.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009472.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009478.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009481.exe infected by "Trojan-Dropper.Win32.Tibsis.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009482.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009484.exe infected by "not-a-virus:AdWare.WinAD.s" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009485.exe infected by "Trojan-Downloader.Win32.Agent.gs" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009486.exe infected by "Trojan-Downloader.Win32.Agent.al" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009487.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0009488.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP23\A0010502.reg infected by "Trojan.WinREG.StartPage" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP25\A0010508.exe infected by "not-a-virus:AdWare.WinAD.s" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP25\A0010510.dll infected by "not-a-virus:AdWare.WinAD.u" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP25\A0010511.exe infected by "not-a-virus:AdWare.WinAD.k" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP31\A0011780.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011797.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011798.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011821.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011823.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011824.exe infected by "Trojan-Dropper.Win32.Tibsis.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011826.DLL infected by "not-a-virus:AdWare.Relevance.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011836.DLL infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011837.DLL infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011838.exe infected by "Backdoor.Win32.Small.dc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011841.exe infected by "Trojan-Downloader.Win32.Agent.al" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011842.exe infected by "Trojan-Downloader.Win32.Agent.al" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011843.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011844.exe infected by "Trojan-Downloader.Win32.Agent.al" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011845.exe infected by "Backdoor.Win32.Small.dc" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011846.dll infected by "Trojan-Downloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9-9E9D-AACE03A0D61B}\RP32\A0011847.dll infected by "Trojan-Downloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{14659502-6D34-49D9
Post #29
For some reason the end of the pane log didn't copy. Here is the rest… Taken. File C:\WINDOWS\Downloaded Program Files\SAHAgent_.exe infected by "not-a-virus:AdWare.ShopAtHome.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\SahHtml_.exe infected by "not-a-virus:AdWare.Sahat.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_iprbok.log infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\mac80ex.idf infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\mqexdlm.srg infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\netut80ex.vxd infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\SahHtml.exe infected by "not-a-virus:AdWare.Sahat.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\wolngeoj.exe infected by "Trojan-Downloader.Win32.IstBar.go" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crwo.exe infected by "Backdoor.Win32.Small.dc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\DeskAdX.dll infected by "not-a-virus:AdWare.WinAD.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\SAHAgent_.exe infected by "not-a-virus:AdWare.ShopAtHome.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\SahHtml_.exe infected by "not-a-virus:AdWare.Sahat.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_iprbok.log infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\mac80ex.idf infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\mqexdlm.srg infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\netut80ex.vxd infected by "not-a-virus:AdWare.ToolBar.Exact" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\SahHtml.exe infected by "not-a-virus:AdWare.Sahat.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\wolngeoj.exe infected by "Trojan-Downloader.Win32.IstBar.go" Virus. Action Taken: No Action Taken.
Post #30
Most of that is in your system restore files, I thought you deleted them.
Delete the system restore files and leave system restore turned off until you're clean.
XP system restore
Please note that when you turn off system restore you must reboot to delete the files, they get deleted when you do.

Once you delete them, rescan the system so we have a smaller list. MrC

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI