Spyware / Malware / Virus Removal

numerous problems, trekblue + others, persistent

85 min read

Looking for the outcome? Ask AI

abmcwilliams Topic Starter

Post #1July 18, 2005, 7:25 PM UTC

Hi,
I have a number of problems showing up on spybot and ad aware, including

coolwwwsearch.aff.winshow
trek blue error nuker

I keep fixing these problems in spybot and ad aware, but they keep re-appearing.

my homepage is continually being reset, and umpteen popups keep appearing (ironically enough, lots of them are for anti spyware / anti virus software)
I have Norton Internet Security 2005 running, as well as Microsoft AntiSpyware
The MS Anti Spyware is allowing me to block lots of .exe and .dll that try to run (popping up every 5 minutes or so) lots of them from my system32 folder.

My biggest problem in seeing what is going on is that my system32 folder is now invisible when using Windows Explorer. I can find from the C:> , but running a dir\w command only works intermittently, on other occasions it returns a directory not found error.

below is my Hijackthis log.

Any assistance would be gratefully received.

Thanks,

alasdair

Logfile of HijackThis v1.99.1
Scan saved at 19:52:55, on 18/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Iomega\AutoDisk\ADService.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Apps\ActivBoard\OSD.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\sysmy32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Documents and Settings\ali\My Documents\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\oqllb.dll/sp.html#55135
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\oqllb.dll/sp.html#55135
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\oqllb.dll/sp.html#55135
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\oqllb.dll/sp.html#55135
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\oqllb.dll/sp.html#55135
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ohlwq.dll/sp.html#55135
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ohlwq.dll/sp.html#55135
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\PCHEALTH\HELPCTR\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer brought to you by Planetis
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {195BA72F-DA22-1957-D020-EC24E9E17632} - C:\WINDOWS\system32\sysdb32.dll
O2 - BHO: Class - {1A16A3A4-1BEE-8A0E-14B3-E0317AD98793} - C:\WINDOWS\ntsz32.dll
O2 - BHO: Class - {20970929-741B-E524-6A22-7A8BD24B33B9} - C:\WINDOWS\ienf.dll
O2 - BHO: Class - {22AA1D62-BF79-5938-3671-97B49B283E34} - C:\WINDOWS\system32\mfclw32.dll
O2 - BHO: Class - {22C0BAD1-095B-49C4-41A3-C7D9B4D4A8C2} - C:\WINDOWS\system32\d3wv32.dll
O2 - BHO: Class - {2758F99E-08BC-DA77-4F98-2AD18D33C547} - C:\WINDOWS\atljm32.dll
O2 - BHO: Class - {2B3C21C5-35C4-E405-D6E0-2D6D1DF94B2C} - C:\WINDOWS\system32\atlhd.dll
O2 - BHO: Class - {2BAB9DCF-AB6E-FD19-25BB-4FA3012F78E1} - C:\WINDOWS\system32\apptq.dll
O2 - BHO: Class - {31952D98-201F-E44F-99D8-B80E37D78431} - C:\WINDOWS\appvs.dll
O2 - BHO: Class - {321F7904-194F-9A0F-04B0-2C3F916C8D1D} - C:\WINDOWS\system32\netvj.dll
O2 - BHO: Class - {463DCF53-DDAA-350C-CE7E-F4E459940897} - C:\WINDOWS\system32\sdkgu.dll
O2 - BHO: Class - {50E8A13C-2A6A-007E-B813-2EC0A63B8202} - C:\WINDOWS\system32\ierq.dll
O2 - BHO: Class - {5124EE7F-A8D3-8173-AEAF-0C210143DA6C} - C:\WINDOWS\ipmf.dll
O2 - BHO: Class - {7897E57C-2EB1-E8C5-4D9C-C227B55C1142} - C:\WINDOWS\system32\mskw32.dll
O2 - BHO: Class - {7B4A8261-0A80-402A-F1BE-9B2ACBFECDD5} - C:\WINDOWS\system32\msyl32.dll
O2 - BHO: Class - {7C23478B-E64D-0153-181A-A208684B040F} - C:\WINDOWS\system32\apieb.dll
O2 - BHO: Class - {881D36D4-4603-4226-02AE-A47B63CD75A1} - C:\WINDOWS\system32\ntcj32.dll
O2 - BHO: Class - {934785DB-C826-C699-1B51-85371F56AC8A} - C:\WINDOWS\system32\sdkid.dll
O2 - BHO: Class - {9E5D1F6C-E11C-5BA5-3020-D1F4A8B9D84A} - C:\WINDOWS\apprh.dll
O2 - BHO: Class - {A181ACFF-FFBD-E523-A66B-69B29278B02A} - C:\WINDOWS\system32\ntqy32.dll
O2 - BHO: Class - {A46D4DB5-B0A0-3266-CF6F-8A74F80D5E37} - C:\WINDOWS\sysfk32.dll
O2 - BHO: Class - {AA22FEC5-204E-D1C9-8EAB-F1C63F3BCE8D} - C:\WINDOWS\ipxs.dll
O2 - BHO: Class - {AA491F48-0D90-4881-0C44-147E5A24D309} - C:\WINDOWS\system32\ntoo32.dll
O2 - BHO: Class - {AEADE211-1738-D170-94D4-88BB276E7B57} - C:\WINDOWS\d3ua32.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Class - {C29B2852-3733-DE06-C399-8E0A964E2124} - C:\WINDOWS\system32\d3wb32.dll
O2 - BHO: Class - {C5149068-08D4-7379-7115-E35C21E90399} - C:\WINDOWS\system32\ipkd.dll
O2 - BHO: Class - {C91C6A50-4E18-389A-6EEB-F0FC5AC3AC38} - C:\WINDOWS\system32\addnw32.dll
O2 - BHO: Class - {D572A88C-5F1B-7EFE-45C7-5E070937FBFC} - C:\WINDOWS\system32\d3sq.dll
O2 - BHO: Class - {D8017933-B2A5-8733-0290-960149CE4D0D} - C:\WINDOWS\mfcnx32.dll
O2 - BHO: Class - {E204EF11-CD69-3F53-1DBB-0B868E905A4A} - C:\WINDOWS\d3qh.dll
O2 - BHO: Class - {EC2CE72D-3A01-7B4A-1F9B-FABF8EB79BD0} - C:\WINDOWS\msiu32.dll
O2 - BHO: Class - {F6956773-B906-6B4E-BC0B-5426597C4595} - C:\WINDOWS\system32\atlfb.dll
O2 - BHO: Class - {F9E29CC4-1227-618F-1C88-9AAE86C8EE70} - C:\WINDOWS\apppx32.dll
O2 - BHO: Class - {FD28144A-BE74-ABB6-5C2B-E60BF82588B7} - C:\WINDOWS\addpr.dll
O2 - BHO: Class - {FFB59007-30E2-88D1-986B-566D8510B4B3} - C:\WINDOWS\ieba.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [Deskup] C:\Program Files\Iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
O4 - HKLM\..\Run: [BCWipeTM Startup] "C:\Program Files\Jetico\BCWipe\BCWipeTM.exe" startup
O4 - HKLM\..\Run: [iexplore.exe] C:\Program Files\Internet Explorer\iexplore.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [sysmy32.exe] C:\WINDOWS\system32\sysmy32.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [p2pnetworking] p2pnetworking.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\RunServices: [p2pnetworking] p2pnetworking.exe
O4 - HKLM\..\RunOnce: [javatc32.exe] C:\WINDOWS\javatc32.exe
O4 - HKLM\..\RunOnce: [netwb32.exe] C:\WINDOWS\system32\netwb32.exe
O4 - HKLM\..\RunOnce: [d3zh.exe] C:\WINDOWS\d3zh.exe
O4 - HKLM\..\RunOnce: [d3jv.exe] C:\WINDOWS\system32\d3jv.exe
O4 - HKLM\..\RunOnce: [winbe32.exe] C:\WINDOWS\winbe32.exe
O4 - HKLM\..\RunOnce: [mszz32.exe] C:\WINDOWS\system32\mszz32.exe
O4 - HKLM\..\RunOnce: [appmc32.exe] C:\WINDOWS\appmc32.exe
O4 - HKLM\..\RunOnce: [winsk.exe] C:\WINDOWS\system32\winsk.exe
O4 - HKLM\..\RunOnce: [sdkrb.exe] C:\WINDOWS\sdkrb.exe
O4 - HKLM\..\RunOnce: [mseb32.exe] C:\WINDOWS\system32\mseb32.exe
O4 - HKLM\..\RunOnce: [ipgt.exe] C:\WINDOWS\ipgt.exe
O4 - HKLM\..\RunOnce: [iemm.exe] C:\WINDOWS\system32\iemm.exe
O4 - HKLM\..\RunOnce: [iejm32.exe] C:\WINDOWS\iejm32.exe
O4 - HKLM\..\RunOnce: [crnm.exe] C:\WINDOWS\system32\crnm.exe
O4 - HKLM\..\RunOnce: [winsj.exe] C:\WINDOWS\system32\winsj.exe
O4 - HKLM\..\RunOnce: [appud.exe] C:\WINDOWS\system32\appud.exe
O4 - HKLM\..\RunOnce: [apifg32.exe] C:\WINDOWS\system32\apifg32.exe
O4 - HKLM\..\RunOnce: [ipnz32.exe] C:\WINDOWS\system32\ipnz32.exe
O4 - HKLM\..\RunOnce: [msea.exe] C:\WINDOWS\msea.exe
O4 - HKLM\..\RunOnce: [ipei32.exe] C:\WINDOWS\ipei32.exe
O4 - HKLM\..\RunOnce: [ipgo.exe] C:\WINDOWS\system32\ipgo.exe
O4 - HKLM\..\RunOnce: [ntlk32.exe] C:\WINDOWS\system32\ntlk32.exe
O4 - HKLM\..\RunOnce: [msyz.exe] C:\WINDOWS\msyz.exe
O4 - HKLM\..\RunOnce: [apiub.exe] C:\WINDOWS\system32\apiub.exe
O4 - HKLM\..\RunOnce: [ipod32.exe] C:\WINDOWS\ipod32.exe
O4 - HKLM\..\RunOnce: [syszt.exe] C:\WINDOWS\system32\syszt.exe
O4 - HKLM\..\RunOnce: [ntfo.exe] C:\WINDOWS\ntfo.exe
O4 - HKLM\..\RunOnce: [javayq32.exe] C:\WINDOWS\javayq32.exe
O4 - HKLM\..\RunOnce: [apimi32.exe] C:\WINDOWS\system32\apimi32.exe
O4 - HKLM\..\RunOnce: [winfr32.exe] C:\WINDOWS\winfr32.exe
O4 - HKLM\..\RunOnce: [iexg.exe] C:\WINDOWS\iexg.exe
O4 - HKLM\..\RunOnce: [netub.exe] C:\WINDOWS\netub.exe
O4 - HKLM\..\RunOnce: [sdknc32.exe] C:\WINDOWS\sdknc32.exe
O4 - HKLM\..\RunOnce: [apimp32.exe] C:\WINDOWS\apimp32.exe
O4 - HKLM\..\RunOnce: [msug32.exe] C:\WINDOWS\system32\msug32.exe
O4 - HKLM\..\RunOnce: [d3dw.exe] C:\WINDOWS\d3dw.exe
O4 - HKLM\..\RunOnce: [apilk32.exe] C:\WINDOWS\apilk32.exe
O4 - HKLM\..\RunOnce: [ntla32.exe] C:\WINDOWS\ntla32.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Update Service] C:\WINDOWS\SoftwareDistribution\Download\5ea54eecb8f22acf9bd02bc36e049bf3\update\update.exe /startup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Free WebSite Tools.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.planetis.com/uk
O15 - Trusted Zone: http://www.erdreja.com
O15 - Trusted Zone: http://www.facemeet.com
O15 - Trusted Zone: www.live365.com
O15 - Trusted Zone: www.msn.com
O15 - Trusted Zone: www.passport.com
O15 - Trusted Zone: www.trendmicro.com
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by101fd.bay101.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotion…ctor/WebAAS.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - https://a248.e.akamai.net/f/248/5462/2h/www…ol/SymDlBrg.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/insaniqua…aploader_v6.cab
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Program Files\Iomega\AutoDisk\ADService.exe

abmcwilliams

Post #2July 21, 2005, 6:48 AM UTC

more of a nudge than a bump… but…. Bump

alsocom

Post #3July 21, 2005, 7:02 AM UTC

You a the newest version of About:Blank on your computer. Please post a fresh HijackThis log as a reply to this thread. After posting the new log do not reboot the computer nor use Internet Explorer if possible. I'll have a reply for you soon after I see the new log.

abmcwilliams

Post #4July 21, 2005, 7:34 AM UTC

Hi, I'm at work at the moment. I'll post a new log as soon as I get home. thanks for taking a look

alsocom

Post #5July 21, 2005, 7:44 AM UTC

I'll be going to bed shortly so I will check back as soon as I get up. Be sure not to reboot the computer or use Internet Explorer if possible as this will cause the file names to change.

abmcwilliams

Post #6July 21, 2005, 5:22 PM UTC

new hijackthis log
using gf's pc, not on infected pc (so will not be using ie)

Logfile of HijackThis v1.99.1
Scan saved at 18:11:31, on 21/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Iomega\AutoDisk\ADService.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\WINDOWS\system32\sysmy32.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Apps\ActivBoard\OSD.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Gluz\Main.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Documents and Settings\ali\My Documents\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\PCHEALTH\HELPCTR\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer brought to you by Planetis
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {683DA086-8E62-5396-D4EF-2401FF58EB59} - C:\WINDOWS\system32\ipzv.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Class - {FFB59007-30E2-88D1-986B-566D8510B4B3} - C:\WINDOWS\ieba.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [Deskup] C:\Program Files\Iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
O4 - HKLM\..\Run: [BCWipeTM Startup] "C:\Program Files\Jetico\BCWipe\BCWipeTM.exe" startup
O4 - HKLM\..\Run: [iexplore.exe] C:\Program Files\Internet Explorer\iexplore.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [sysmy32.exe] C:\WINDOWS\system32\sysmy32.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [p2pnetworking] p2pnetworking.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\RunServices: [p2pnetworking] p2pnetworking.exe
O4 - HKLM\..\RunOnce: [javatc32.exe] C:\WINDOWS\javatc32.exe
O4 - HKLM\..\RunOnce: [ntws32.exe] C:\WINDOWS\ntws32.exe
O4 - HKLM\..\RunOnce: [crar32.exe] C:\WINDOWS\system32\crar32.exe
O4 - HKLM\..\RunOnce: [atlto.exe] C:\WINDOWS\system32\atlto.exe
O4 - HKLM\..\RunOnce: [sdkhw32.exe] C:\WINDOWS\system32\sdkhw32.exe
O4 - HKLM\..\RunOnce: [d3ma.exe] C:\WINDOWS\d3ma.exe
O4 - HKLM\..\RunOnce: [addbk.exe] C:\WINDOWS\system32\addbk.exe
O4 - HKLM\..\RunOnce: [crwk.exe] C:\WINDOWS\crwk.exe
O4 - HKLM\..\RunOnce: [d3cg.exe] C:\WINDOWS\d3cg.exe
O4 - HKLM\..\RunOnce: [msku32.exe] C:\WINDOWS\msku32.exe
O4 - HKLM\..\RunOnce: [atloe32.exe] C:\WINDOWS\atloe32.exe
O4 - HKLM\..\RunOnce: [ntsg32.exe] C:\WINDOWS\ntsg32.exe
O4 - HKLM\..\RunOnce: [addyc.exe] C:\WINDOWS\system32\addyc.exe
O4 - HKLM\..\RunOnce: [syswx32.exe] C:\WINDOWS\system32\syswx32.exe
O4 - HKLM\..\RunOnce: [netku.exe] C:\WINDOWS\netku.exe
O4 - HKLM\..\RunOnce: [ntbc.exe] C:\WINDOWS\system32\ntbc.exe
O4 - HKLM\..\RunOnce: [atlom32.exe] C:\WINDOWS\system32\atlom32.exe
O4 - HKLM\..\RunOnce: [ntyf32.exe] C:\WINDOWS\ntyf32.exe
O4 - HKLM\..\RunOnce: [sdktw.exe] C:\WINDOWS\system32\sdktw.exe
O4 - HKLM\..\RunOnce: [netil.exe] C:\WINDOWS\system32\netil.exe
O4 - HKLM\..\RunOnce: [d3gy.exe] C:\WINDOWS\d3gy.exe
O4 - HKLM\..\RunOnce: [javahz32.exe] C:\WINDOWS\system32\javahz32.exe
O4 - HKLM\..\RunOnce: [addqf.exe] C:\WINDOWS\system32\addqf.exe
O4 - HKLM\..\RunOnce: [ipnc32.exe] C:\WINDOWS\ipnc32.exe
O4 - HKLM\..\RunOnce: [d3sm32.exe] C:\WINDOWS\d3sm32.exe
O4 - HKLM\..\RunOnce: [wintd32.exe] C:\WINDOWS\wintd32.exe
O4 - HKLM\..\RunOnce: [sysxl32.exe] C:\WINDOWS\system32\sysxl32.exe
O4 - HKLM\..\RunOnce: [mfcax32.exe] C:\WINDOWS\system32\mfcax32.exe
O4 - HKLM\..\RunOnce: [winzm.exe] C:\WINDOWS\system32\winzm.exe
O4 - HKLM\..\RunOnce: [javayc32.exe] C:\WINDOWS\javayc32.exe
O4 - HKLM\..\RunOnce: [addbm32.exe] C:\WINDOWS\addbm32.exe
O4 - HKLM\..\RunOnce: [mfcrt.exe] C:\WINDOWS\mfcrt.exe
O4 - HKLM\..\RunOnce: [ntvx32.exe] C:\WINDOWS\ntvx32.exe
O4 - HKLM\..\RunOnce: [javaed.exe] C:\WINDOWS\system32\javaed.exe
O4 - HKLM\..\RunOnce: [atlsg.exe] C:\WINDOWS\atlsg.exe
O4 - HKLM\..\RunOnce: [syswk.exe] C:\WINDOWS\system32\syswk.exe
O4 - HKLM\..\RunOnce: [apilz32.exe] C:\WINDOWS\apilz32.exe
O4 - HKLM\..\RunOnce: [sdkbo.exe] C:\WINDOWS\sdkbo.exe
O4 - HKLM\..\RunOnce: [javapt.exe] C:\WINDOWS\javapt.exe
O4 - HKLM\..\RunOnce: [javaje32.exe] C:\WINDOWS\javaje32.exe
O4 - HKLM\..\RunOnce: [ntjb32.exe] C:\WINDOWS\ntjb32.exe
O4 - HKLM\..\RunOnce: [addeb.exe] C:\WINDOWS\addeb.exe
O4 - HKLM\..\RunOnce: [mfcrf32.exe] C:\WINDOWS\mfcrf32.exe
O4 - HKLM\..\RunOnce: [iekg32.exe] C:\WINDOWS\system32\iekg32.exe
O4 - HKLM\..\RunOnce: [d3up32.exe] C:\WINDOWS\system32\d3up32.exe
O4 - HKLM\..\RunOnce: [mswo32.exe] C:\WINDOWS\mswo32.exe
O4 - HKLM\..\RunOnce: [sdkpn.exe] C:\WINDOWS\system32\sdkpn.exe
O4 - HKLM\..\RunOnce: [netec.exe] C:\WINDOWS\system32\netec.exe
O4 - HKLM\..\RunOnce: [sdkre32.exe] C:\WINDOWS\sdkre32.exe
O4 - HKLM\..\RunOnce: [atlru.exe] C:\WINDOWS\system32\atlru.exe
O4 - HKLM\..\RunOnce: [addps.exe] C:\WINDOWS\system32\addps.exe
O4 - HKLM\..\RunOnce: [msol.exe] C:\WINDOWS\msol.exe
O4 - HKLM\..\RunOnce: [apicq32.exe] C:\WINDOWS\apicq32.exe
O4 - HKLM\..\RunOnce: [iekq.exe] C:\WINDOWS\system32\iekq.exe
O4 - HKLM\..\RunOnce: [sysko32.exe] C:\WINDOWS\sysko32.exe
O4 - HKLM\..\RunOnce: [syszb32.exe] C:\WINDOWS\system32\syszb32.exe
O4 - HKLM\..\RunOnce: [crtd32.exe] C:\WINDOWS\crtd32.exe
O4 - HKLM\..\RunOnce: [iegf32.exe] C:\WINDOWS\system32\iegf32.exe
O4 - HKLM\..\RunOnce: [apilt32.exe] C:\WINDOWS\system32\apilt32.exe
O4 - HKLM\..\RunOnce: [javake.exe] C:\WINDOWS\system32\javake.exe
O4 - HKLM\..\RunOnce: [mfcmb.exe] C:\WINDOWS\mfcmb.exe
O4 - HKLM\..\RunOnce: [mfchs32.exe] C:\WINDOWS\mfchs32.exe
O4 - HKLM\..\RunOnce: [iejh32.exe] C:\WINDOWS\system32\iejh32.exe
O4 - HKLM\..\RunOnce: [sdkjt32.exe] C:\WINDOWS\system32\sdkjt32.exe
O4 - HKLM\..\RunOnce: [crlq.exe] C:\WINDOWS\crlq.exe
O4 - HKLM\..\RunOnce: [winkl32.exe] C:\WINDOWS\winkl32.exe
O4 - HKLM\..\RunOnce: [netie32.exe] C:\WINDOWS\system32\netie32.exe
O4 - HKLM\..\RunOnce: [wincv.exe] C:\WINDOWS\wincv.exe
O4 - HKLM\..\RunOnce: [ntfq.exe] C:\WINDOWS\system32\ntfq.exe
O4 - HKLM\..\RunOnce: [appuk.exe] C:\WINDOWS\appuk.exe
O4 - HKLM\..\RunOnce: [javarl.exe] C:\WINDOWS\javarl.exe
O4 - HKLM\..\RunOnce: [ipbr.exe] C:\WINDOWS\ipbr.exe
O4 - HKLM\..\RunOnce: [winpm.exe] C:\WINDOWS\system32\winpm.exe
O4 - HKLM\..\RunOnce: [ntys32.exe] C:\WINDOWS\system32\ntys32.exe
O4 - HKLM\..\RunOnce: [apiiz32.exe] C:\WINDOWS\apiiz32.exe
O4 - HKLM\..\RunOnce: [addhg.exe] C:\WINDOWS\system32\addhg.exe
O4 - HKLM\..\RunOnce: [syscq.exe] C:\WINDOWS\syscq.exe
O4 - HKLM\..\RunOnce: [atlgu32.exe] C:\WINDOWS\atlgu32.exe
O4 - HKLM\..\RunOnce: [crvw32.exe] C:\WINDOWS\crvw32.exe
O4 - HKLM\..\RunOnce: [mfcdu.exe] C:\WINDOWS\system32\mfcdu.exe
O4 - HKLM\..\RunOnce: [addtj.exe] C:\WINDOWS\addtj.exe
O4 - HKLM\..\RunOnce: [d3dc32.exe] C:\WINDOWS\d3dc32.exe
O4 - HKLM\..\RunOnce: [apirf32.exe] C:\WINDOWS\apirf32.exe
O4 - HKLM\..\RunOnce: [msbl.exe] C:\WINDOWS\system32\msbl.exe
O4 - HKLM\..\RunOnce: [javalj.exe] C:\WINDOWS\system32\javalj.exe
O4 - HKLM\..\RunOnce: [ieei.exe] C:\WINDOWS\system32\ieei.exe
O4 - HKLM\..\RunOnce: [msng.exe] C:\WINDOWS\system32\msng.exe
O4 - HKLM\..\RunOnce: [ipmw32.exe] C:\WINDOWS\system32\ipmw32.exe
O4 - HKLM\..\RunOnce: [d3qg32.exe] C:\WINDOWS\d3qg32.exe
O4 - HKLM\..\RunOnce: [d3fj.exe] C:\WINDOWS\system32\d3fj.exe
O4 - HKLM\..\RunOnce: [msct.exe] C:\WINDOWS\system32\msct.exe
O4 - HKLM\..\RunOnce: [ipqe.exe] C:\WINDOWS\ipqe.exe
O4 - HKLM\..\RunOnce: [apikw.exe] C:\WINDOWS\apikw.exe
O4 - HKLM\..\RunOnce: [winll32.exe] C:\WINDOWS\system32\winll32.exe
O4 - HKLM\..\RunOnce: [mfcct32.exe] C:\WINDOWS\system32\mfcct32.exe
O4 - HKLM\..\RunOnce: [ievk.exe] C:\WINDOWS\system32\ievk.exe
O4 - HKLM\..\RunOnce: [d3ta.exe] C:\WINDOWS\system32\d3ta.exe
O4 - HKLM\..\RunOnce: [ipym.exe] C:\WINDOWS\system32\ipym.exe
O4 - HKLM\..\RunOnce: [crcq32.exe] C:\WINDOWS\system32\crcq32.exe
O4 - HKLM\..\RunOnce: [appir32.exe] C:\WINDOWS\appir32.exe
O4 - HKLM\..\RunOnce: [wingm.exe] C:\WINDOWS\wingm.exe
O4 - HKLM\..\RunOnce: [mfcqf32.exe] C:\WINDOWS\mfcqf32.exe
O4 - HKLM\..\RunOnce: [ippv.exe] C:\WINDOWS\ippv.exe
O4 - HKLM\..\RunOnce: [d3lr32.exe] C:\WINDOWS\system32\d3lr32.exe
O4 - HKLM\..\RunOnce: [sdkuz.exe] C:\WINDOWS\sdkuz.exe
O4 - HKLM\..\RunOnce: [adddf.exe] C:\WINDOWS\system32\adddf.exe
O4 - HKLM\..\RunOnce: [d3cn32.exe] C:\WINDOWS\system32\d3cn32.exe
O4 - HKLM\..\RunOnce: [apprs32.exe] C:\WINDOWS\apprs32.exe
O4 - HKLM\..\RunOnce: [netsz32.exe] C:\WINDOWS\netsz32.exe
O4 - HKLM\..\RunOnce: [ntgu.exe] C:\WINDOWS\ntgu.exe
O4 - HKLM\..\RunOnce: [ieeh.exe] C:\WINDOWS\system32\ieeh.exe
O4 - HKLM\..\RunOnce: [msza.exe] C:\WINDOWS\system32\msza.exe
O4 - HKLM\..\RunOnce: [atlwi.exe] C:\WINDOWS\system32\atlwi.exe
O4 - HKLM\..\RunOnce: [crii.exe] C:\WINDOWS\crii.exe
O4 - HKLM\..\RunOnce: [mspg32.exe] C:\WINDOWS\mspg32.exe
O4 - HKLM\..\RunOnce: [sysjf32.exe] C:\WINDOWS\sysjf32.exe
O4 - HKLM\..\RunOnce: [netyu.exe] C:\WINDOWS\netyu.exe
O4 - HKLM\..\RunOnce: [mfcij.exe] C:\WINDOWS\mfcij.exe
O4 - HKLM\..\RunOnce: [iejs32.exe] C:\WINDOWS\iejs32.exe
O4 - HKLM\..\RunOnce: [iegv32.exe] C:\WINDOWS\system32\iegv32.exe
O4 - HKLM\..\RunOnce: [d3bg.exe] C:\WINDOWS\system32\d3bg.exe
O4 - HKLM\..\RunOnce: [crcl.exe] C:\WINDOWS\system32\crcl.exe
O4 - HKLM\..\RunOnce: [sysaj32.exe] C:\WINDOWS\system32\sysaj32.exe
O4 - HKLM\..\RunOnce: [appqq32.exe] C:\WINDOWS\system32\appqq32.exe
O4 - HKLM\..\RunOnce: [iepd32.exe] C:\WINDOWS\iepd32.exe
O4 - HKLM\..\RunOnce: [d3kh.exe] C:\WINDOWS\system32\d3kh.exe
O4 - HKLM\..\RunOnce: [crtc32.exe] C:\WINDOWS\system32\crtc32.exe
O4 - HKLM\..\RunOnce: [sdktp32.exe] C:\WINDOWS\system32\sdktp32.exe
O4 - HKLM\..\RunOnce: [ipum.exe] C:\WINDOWS\system32\ipum.exe
O4 - HKLM\..\RunOnce: [crqq32.exe] C:\WINDOWS\crqq32.exe
O4 - HKLM\..\RunOnce: [sdknn32.exe] C:\WINDOWS\sdknn32.exe
O4 - HKLM\..\RunOnce: [apijn.exe] C:\WINDOWS\apijn.exe
O4 - HKLM\..\RunOnce: [msdz.exe] C:\WINDOWS\system32\msdz.exe
O4 - HKLM\..\RunOnce: [crbs32.exe] C:\WINDOWS\system32\crbs32.exe
O4 - HKLM\..\RunOnce: [iedh.exe] C:\WINDOWS\iedh.exe
O4 - HKLM\..\RunOnce: [crjn32.exe] C:\WINDOWS\system32\crjn32.exe
O4 - HKLM\..\RunOnce: [ipwf32.exe] C:\WINDOWS\system32\ipwf32.exe
O4 - HKLM\..\RunOnce: [msuk32.exe] C:\WINDOWS\msuk32.exe
O4 - HKLM\..\RunOnce: [mslh.exe] C:\WINDOWS\system32\mslh.exe
O4 - HKLM\..\RunOnce: [iect32.exe] C:\WINDOWS\system32\iect32.exe
O4 - HKLM\..\RunOnce: [sdkbr.exe] C:\WINDOWS\system32\sdkbr.exe
O4 - HKLM\..\RunOnce: [sysqg32.exe] C:\WINDOWS\sysqg32.exe
O4 - HKLM\..\RunOnce: [apppn32.exe] C:\WINDOWS\apppn32.exe
O4 - HKLM\..\RunOnce: [winkz.exe] C:\WINDOWS\system32\winkz.exe
O4 - HKLM\..\RunOnce: [iefb32.exe] C:\WINDOWS\system32\iefb32.exe
O4 - HKLM\..\RunOnce: [mfcfa.exe] C:\WINDOWS\system32\mfcfa.exe
O4 - HKLM\..\RunOnce: [msgn32.exe] C:\WINDOWS\system32\msgn32.exe
O4 - HKLM\..\RunOnce: [netnd.exe] C:\WINDOWS\netnd.exe
O4 - HKLM\..\RunOnce: [crlj.exe] C:\WINDOWS\crlj.exe
O4 - HKLM\..\RunOnce: [atlae.exe] C:\WINDOWS\atlae.exe
O4 - HKLM\..\RunOnce: [sdksm32.exe] C:\WINDOWS\sdksm32.exe
O4 - HKLM\..\RunOnce: [d3gf.exe] C:\WINDOWS\d3gf.exe
O4 - HKLM\..\RunOnce: [msnd32.exe] C:\WINDOWS\msnd32.exe
O4 - HKLM\..\RunOnce: [winhg.exe] C:\WINDOWS\system32\winhg.exe
O4 - HKLM\..\RunOnce: [iehh32.exe] C:\WINDOWS\iehh32.exe
O4 - HKLM\..\RunOnce: [ntba32.exe] C:\WINDOWS\ntba32.exe
O4 - HKLM\..\RunOnce: [msit32.exe] C:\WINDOWS\msit32.exe
O4 - HKLM\..\RunOnce: [sysat.exe] C:\WINDOWS\system32\sysat.exe
O4 - HKLM\..\RunOnce: [syshg.exe] C:\WINDOWS\syshg.exe
O4 - HKLM\..\RunOnce: [atllk32.exe] C:\WINDOWS\atllk32.exe
O4 - HKLM\..\RunOnce: [atlcg32.exe] C:\WINDOWS\system32\atlcg32.exe
O4 - HKLM\..\RunOnce: [javare32.exe] C:\WINDOWS\system32\javare32.exe
O4 - HKLM\..\RunOnce: [javauv32.exe] C:\WINDOWS\system32\javauv32.exe
O4 - HKLM\..\RunOnce: [sdkao.exe] C:\WINDOWS\system32\sdkao.exe
O4 - HKLM\..\RunOnce: [netkn.exe] C:\WINDOWS\system32\netkn.exe
O4 - HKLM\..\RunOnce: [crgl32.exe] C:\WINDOWS\crgl32.exe
O4 - HKLM\..\RunOnce: [apize.exe] C:\WINDOWS\apize.exe
O4 - HKLM\..\RunOnce: [appdq.exe] C:\WINDOWS\system32\appdq.exe
O4 - HKLM\..\RunOnce: [ipsg32.exe] C:\WINDOWS\ipsg32.exe
O4 - HKLM\..\RunOnce: [d3ce32.exe] C:\WINDOWS\system32\d3ce32.exe
O4 - HKLM\..\RunOnce: [mfclu32.exe] C:\WINDOWS\system32\mfclu32.exe
O4 - HKLM\..\RunOnce: [mstk.exe] C:\WINDOWS\system32\mstk.exe
O4 - HKLM\..\RunOnce: [apiin32.exe] C:\WINDOWS\system32\apiin32.exe
O4 - HKLM\..\RunOnce: [msqd32.exe] C:\WINDOWS\system32\msqd32.exe
O4 - HKLM\..\RunOnce: [msfa.exe] C:\WINDOWS\msfa.exe
O4 - HKLM\..\RunOnce: [netno32.exe] C:\WINDOWS\system32\netno32.exe
O4 - HKLM\..\RunOnce: [ipfg.exe] C:\WINDOWS\ipfg.exe
O4 - HKLM\..\RunOnce: [ntcj32.exe] C:\WINDOWS\system32\ntcj32.exe
O4 - HKLM\..\RunOnce: [atlkv32.exe] C:\WINDOWS\system32\atlkv32.exe
O4 - HKLM\..\RunOnce: [mfcqs.exe] C:\WINDOWS\mfcqs.exe
O4 - HKLM\..\RunOnce: [ieif.exe] C:\WINDOWS\ieif.exe
O4 - HKLM\..\RunOnce: [atlfx.exe] C:\WINDOWS\atlfx.exe
O4 - HKLM\..\RunOnce: [sysxy.exe] C:\WINDOWS\system32\sysxy.exe
O4 - HKLM\..\RunOnce: [appfe32.exe] C:\WINDOWS\appfe32.exe
O4 - HKLM\..\RunOnce: [ntvo.exe] C:\WINDOWS\ntvo.exe
O4 - HKLM\..\RunOnce: [iecw.exe] C:\WINDOWS\iecw.exe
O4 - HKLM\..\RunOnce: [apphx.exe] C:\WINDOWS\apphx.exe
O4 - HKLM\..\RunOnce: [ieuc.exe] C:\WINDOWS\ieuc.exe
O4 - HKLM\..\RunOnce: [apiab.exe] C:\WINDOWS\apiab.exe
O4 - HKLM\..\RunOnce: [appsc.exe] C:\WINDOWS\system32\appsc.exe
O4 - HKLM\..\RunOnce: [mfcpl32.exe] C:\WINDOWS\system32\mfcpl32.exe
O4 - HKLM\..\RunOnce: [javasn.exe] C:\WINDOWS\system32\javasn.exe
O4 - HKLM\..\RunOnce: [appge.exe] C:\WINDOWS\appge.exe
O4 - HKLM\..\RunOnce: [addxq32.exe] C:\WINDOWS\system32\addxq32.exe
O4 - HKLM\..\RunOnce: [ipca32.exe] C:\WINDOWS\ipca32.exe
O4 - HKLM\..\RunOnce: [sysfh32.exe] C:\WINDOWS\system32\sysfh32.exe
O4 - HKLM\..\RunOnce: [crdp.exe] C:\WINDOWS\crdp.exe
O4 - HKLM\..\RunOnce: [netce32.exe] C:\WINDOWS\netce32.exe
O4 - HKLM\..\RunOnce: [appsu32.exe] C:\WINDOWS\system32\appsu32.exe
O4 - HKLM\..\RunOnce: [winwd.exe] C:\WINDOWS\system32\winwd.exe
O4 - HKLM\..\RunOnce: [mfcsz.exe] C:\WINDOWS\mfcsz.exe
O4 - HKLM\..\RunOnce: [crai.exe] C:\WINDOWS\system32\crai.exe
O4 - HKLM\..\RunOnce: [sysem32.exe] C:\WINDOWS\sysem32.exe
O4 - HKLM\..\RunOnce: [iptp32.exe] C:\WINDOWS\iptp32.exe
O4 - HKLM\..\RunOnce: [apios.exe] C:\WINDOWS\apios.exe
O4 - HKLM\..\RunOnce: [winni32.exe] C:\WINDOWS\winni32.exe
O4 - HKLM\..\RunOnce: [winee.exe] C:\WINDOWS\system32\winee.exe
O4 - HKLM\..\RunOnce: [atlyf32.exe] C:\WINDOWS\system32\atlyf32.exe
O4 - HKLM\..\RunOnce: [ipwb.exe] C:\WINDOWS\system32\ipwb.exe
O4 - HKLM\..\RunOnce: [apiug32.exe] C:\WINDOWS\apiug32.exe
O4 - HKLM\..\RunOnce: [winzv.exe] C:\WINDOWS\system32\winzv.exe
O4 - HKLM\..\RunOnce: [ipid.exe] C:\WINDOWS\system32\ipid.exe
O4 - HKLM\..\RunOnce: [crmh.exe] C:\WINDOWS\system32\crmh.exe
O4 - HKLM\..\RunOnce: [javapz32.exe] C:\WINDOWS\system32\javapz32.exe
O4 - HKLM\..\RunOnce: [mfcas32.exe] C:\WINDOWS\system32\mfcas32.exe
O4 - HKLM\..\RunOnce: [iphq32.exe] C:\WINDOWS\iphq32.exe
O4 - HKLM\..\RunOnce: [addbh.exe] C:\WINDOWS\system32\addbh.exe
O4 - HKLM\..\RunOnce: [apixl32.exe] C:\WINDOWS\apixl32.exe
O4 - HKLM\..\RunOnce: [atlgl.exe] C:\WINDOWS\system32\atlgl.exe
O4 - HKLM\..\RunOnce: [atlui32.exe] C:\WINDOWS\atlui32.exe
O4 - HKLM\..\RunOnce: [msfb32.exe] C:\WINDOWS\system32\msfb32.exe
O4 - HKLM\..\RunOnce: [sysqi.exe] C:\WINDOWS\sysqi.exe
O4 - HKLM\..\RunOnce: [ipcu.exe] C:\WINDOWS\system32\ipcu.exe
O4 - HKLM\..\RunOnce: [javapw32.exe] C:\WINDOWS\javapw32.exe
O4 - HKLM\..\RunOnce: [crjx.exe] C:\WINDOWS\system32\crjx.exe
O4 - HKLM\..\RunOnce: [addgc32.exe] C:\WINDOWS\addgc32.exe
O4 - HKLM\..\RunOnce: [syscm.exe] C:\WINDOWS\system32\syscm.exe
O4 - HKLM\..\RunOnce: [mfcgi32.exe] C:\WINDOWS\system32\mfcgi32.exe
O4 - HKLM\..\RunOnce: [addqr.exe] C:\WINDOWS\system32\addqr.exe
O4 - HKLM\..\RunOnce: [mfcdr32.exe] C:\WINDOWS\mfcdr32.exe
O4 - HKLM\..\RunOnce: [ipuy32.exe] C:\WINDOWS\ipuy32.exe
O4 - HKLM\..\RunOnce: [apipc.exe] C:\WINDOWS\system32\apipc.exe
O4 - HKLM\..\RunOnce: [atlsl32.exe] C:\WINDOWS\system32\atlsl32.exe
O4 - HKLM\..\RunOnce: [addnp.exe] C:\WINDOWS\addnp.exe
O4 - HKLM\..\RunOnce: [d3mf32.exe] C:\WINDOWS\d3mf32.exe
O4 - HKLM\..\RunOnce: [ntan.exe] C:\WINDOWS\ntan.exe
O4 - HKLM\..\RunOnce: [mfcez.exe] C:\WINDOWS\system32\mfcez.exe
O4 - HKLM\..\RunOnce: [appwx.exe] C:\WINDOWS\system32\appwx.exe
O4 - HKLM\..\RunOnce: [ntpg.exe] C:\WINDOWS\ntpg.exe
O4 - HKLM\..\RunOnce: [appku.exe] C:\WINDOWS\system32\appku.exe
O4 - HKLM\..\RunOnce: [nths32.exe] C:\WINDOWS\nths32.exe
O4 - HKLM\..\RunOnce: [crxz.exe] C:\WINDOWS\crxz.exe
O4 - HKLM\..\RunOnce: [apphf32.exe] C:\WINDOWS\apphf32.exe
O4 - HKLM\..\RunOnce: [mslc32.exe] C:\WINDOWS\system32\mslc32.exe
O4 - HKLM\..\RunOnce: [apiae.exe] C:\WINDOWS\system32\apiae.exe
O4 - HKLM\..\RunOnce: [apiot32.exe] C:\WINDOWS\system32\apiot32.exe
O4 - HKLM\..\RunOnce: [mfcrk.exe] C:\WINDOWS\system32\mfcrk.exe
O4 - HKLM\..\RunOnce: [syscd32.exe] C:\WINDOWS\syscd32.exe
O4 - HKLM\..\RunOnce: [apira.exe] C:\WINDOWS\system32\apira.exe
O4 - HKLM\..\RunOnce: [d3vs.exe] C:\WINDOWS\d3vs.exe
O4 - HKLM\..\RunOnce: [atlda.exe] C:\WINDOWS\atlda.exe
O4 - HKLM\..\RunOnce: [ntze32.exe] C:\WINDOWS\ntze32.exe
O4 - HKLM\..\RunOnce: [sysng32.exe] C:\WINDOWS\sysng32.exe
O4 - HKLM\..\RunOnce: [msij.exe] C:\WINDOWS\msij.exe
O4 - HKLM\..\RunOnce: [addbq.exe] C:\WINDOWS\addbq.exe
O4 - HKLM\..\RunOnce: [atlur32.exe] C:\WINDOWS\atlur32.exe
O4 - HKLM\..\RunOnce: [atljo32.exe] C:\WINDOWS\system32\atljo32.exe
O4 - HKLM\..\RunOnce: [msol32.exe] C:\WINDOWS\msol32.exe
O4 - HKLM\..\RunOnce: [ieik.exe] C:\WINDOWS\system32\ieik.exe
O4 - HKLM\..\RunOnce: [appbl.exe] C:\WINDOWS\appbl.exe
O4 - HKLM\..\RunOnce: [d3ss32.exe] C:\WINDOWS\system32\d3ss32.exe
O4 - HKLM\..\RunOnce: [atlgh32.exe] C:\WINDOWS\system32\atlgh32.exe
O4 - HKLM\..\RunOnce: [addyq32.exe] C:\WINDOWS\addyq32.exe
O4 - HKLM\..\RunOnce: [atlmi.exe] C:\WINDOWS\atlmi.exe
O4 - HKLM\..\RunOnce: [msat.exe] C:\WINDOWS\system32\msat.exe
O4 - HKLM\..\RunOnce: [winhd32.exe] C:\WINDOWS\winhd32.exe
O4 - HKLM\..\RunOnce: [apila.exe] C:\WINDOWS\system32\apila.exe
O4 - HKLM\..\RunOnce: [crui32.exe] C:\WINDOWS\system32\crui32.exe
O4 - HKLM\..\RunOnce: [atlvo32.exe] C:\WINDOWS\atlvo32.exe
O4 - HKLM\..\RunOnce: [apioh.exe] C:\WINDOWS\system32\apioh.exe
O4 - HKLM\..\RunOnce: [sdknv32.exe] C:\WINDOWS\system32\sdknv32.exe
O4 - HKLM\..\RunOnce: [d3sx32.exe] C:\WINDOWS\d3sx32.exe
O4 - HKLM\..\RunOnce: [mfcbb32.exe] C:\WINDOWS\system32\mfcbb32.exe
O4 - HKLM\..\RunOnce: [apigu32.exe] C:\WINDOWS\system32\apigu32.exe
O4 - HKLM\..\RunOnce: [iprn32.exe] C:\WINDOWS\system32\iprn32.exe
O4 - HKLM\..\RunOnce: [javasc32.exe] C:\WINDOWS\javasc32.exe
O4 - HKLM\..\RunOnce: [ntrv.exe] C:\WINDOWS\ntrv.exe
O4 - HKLM\..\RunOnce: [atlzc.exe] C:\WINDOWS\atlzc.exe
O4 - HKLM\..\RunOnce: [iesp.exe] C:\WINDOWS\iesp.exe
O4 - HKLM\..\RunOnce: [appqd32.exe] C:\WINDOWS\appqd32.exe
O4 - HKLM\..\RunOnce: [javanq.exe] C:\WINDOWS\javanq.exe
O4 - HKLM\..\RunOnce: [javatm.exe] C:\WINDOWS\system32\javatm.exe
O4 - HKLM\..\RunOnce: [appqx32.exe] C:\WINDOWS\system32\appqx32.exe
O4 - HKLM\..\RunOnce: [atlyv.exe] C:\WINDOWS\system32\atlyv.exe
O4 - HKLM\..\RunOnce: [mfcgd.exe] C:\WINDOWS\system32\mfcgd.exe
O4 - HKLM\..\RunOnce: [winlo.exe] C:\WINDOWS\system32\winlo.exe
O4 - HKLM\..\RunOnce: [syscu.exe] C:\WINDOWS\syscu.exe
O4 - HKLM\..\RunOnce: [sdkne.exe] C:\WINDOWS\system32\sdkne.exe
O4 - HKLM\..\RunOnce: [javaab.exe] C:\WINDOWS\javaab.exe
O4 - HKLM\..\RunOnce: [sdkhu32.exe] C:\WINDOWS\sdkhu32.exe
O4 - HKLM\..\RunOnce: [d3xc.exe] C:\WINDOWS\d3xc.exe
O4 - HKLM\..\RunOnce: [wintg32.exe] C:\WINDOWS\system32\wintg32.exe
O4 - HKLM\..\RunOnce: [ieqd32.exe] C:\WINDOWS\system32\ieqd32.exe
O4 - HKLM\..\RunOnce: [netzj.exe] C:\WINDOWS\netzj.exe
O4 - HKLM\..\RunOnce: [sysfo.exe] C:\WINDOWS\sysfo.exe
O4 - HKLM\..\RunOnce: [atljk32.exe] C:\WINDOWS\atljk32.exe
O4 - HKLM\..\RunOnce: [addyh32.exe] C:\WINDOWS\addyh32.exe
O4 - HKLM\..\RunOnce: [apixc.exe] C:\WINDOWS\apixc.exe
O4 - HKLM\..\RunOnce: [d3gk.exe] C:\WINDOWS\d3gk.exe
O4 - HKLM\..\RunOnce: [syszl32.exe] C:\WINDOWS\syszl32.exe
O4 - HKLM\..\RunOnce: [atlxz.exe] C:\WINDOWS\atlxz.exe
O4 - HKLM\..\RunOnce: [ipia.exe] C:\WINDOWS\ipia.exe
O4 - HKLM\..\RunOnce: [sdkrz32.exe] C:\WINDOWS\system32\sdkrz32.exe
O4 - HKLM\..\RunOnce: [ipnd.exe] C:\WINDOWS\system32\ipnd.exe
O4 - HKLM\..\RunOnce: [apiim.exe] C:\WINDOWS\apiim.exe
O4 - HKLM\..\RunOnce: [ntbg32.exe] C:\WINDOWS\ntbg32.exe
O4 - HKLM\..\RunOnce: [ipqc32.exe] C:\WINDOWS\system32\ipqc32.exe
O4 - HKLM\..\RunOnce: [appvh32.exe] C:\WINDOWS\appvh32.exe
O4 - HKLM\..\RunOnce: [sysnn.exe] C:\WINDOWS\sysnn.exe
O4 - HKLM\..\RunOnce: [addhp32.exe] C:\WINDOWS\addhp32.exe
O4 - HKLM\..\RunOnce: [crai32.exe] C:\WINDOWS\crai32.exe
O4 - HKLM\..\RunOnce: [mswr32.exe] C:\WINDOWS\mswr32.exe
O4 - HKLM\..\RunOnce: [addxx32.exe] C:\WINDOWS\addxx32.exe
O4 - HKLM\..\RunOnce: [criq32.exe] C:\WINDOWS\system32\criq32.exe
O4 - HKLM\..\RunOnce: [apiwi32.exe] C:\WINDOWS\system32\apiwi32.exe
O4 - HKLM\..\RunOnce: [appzc32.exe] C:\WINDOWS\system32\appzc32.exe
O4 - HKLM\..\RunOnce: [ipgk32.exe] C:\WINDOWS\ipgk32.exe
O4 - HKLM\..\RunOnce: [iepq.exe] C:\WINDOWS\iepq.exe
O4 - HKLM\..\RunOnce: [sdkcd.exe] C:\WINDOWS\sdkcd.exe
O4 - HKLM\..\RunOnce: [msyh32.exe] C:\WINDOWS\system32\msyh32.exe
O4 - HKLM\..\RunOnce: [msgb32.exe] C:\WINDOWS\system32\msgb32.exe
O4 - HKLM\..\RunOnce: [d3yy.exe] C:\WINDOWS\d3yy.exe
O4 - HKLM\..\RunOnce: [sdkcc.exe] C:\WINDOWS\system32\sdkcc.exe
O4 - HKLM\..\RunOnce: [winqh32.exe] C:\WINDOWS\system32\winqh32.exe
O4 - HKLM\..\RunOnce: [mfcgo.exe] C:\WINDOWS\system32\mfcgo.exe
O4 - HKLM\..\RunOnce: [ntks32.exe] C:\WINDOWS\ntks32.exe
O4 - HKLM\..\RunOnce: [addfk.exe] C:\WINDOWS\addfk.exe
O4 - HKLM\..\RunOnce: [ipos32.exe] C:\WINDOWS\system32\ipos32.exe
O4 - HKLM\..\RunOnce: [mfcse.exe] C:\WINDOWS\system32\mfcse.exe
O4 - HKLM\..\RunOnce: [netrg.exe] C:\WINDOWS\netrg.exe
O4 - HKLM\..\RunOnce: [javavk32.exe] C:\WINDOWS\javavk32.exe
O4 - HKLM\..\RunOnce: [ntkh32.exe] C:\WINDOWS\ntkh32.exe
O4 - HKLM\..\RunOnce: [sdkzk.exe] C:\WINDOWS\system32\sdkzk.exe
O4 - HKLM\..\RunOnce: [msdo32.exe] C:\WINDOWS\msdo32.exe
O4 - HKLM\..\RunOnce: [ipzh.exe] C:\WINDOWS\system32\ipzh.exe
O4 - HKLM\..\RunOnce: [crdl32.exe] C:\WINDOWS\crdl32.exe
O4 - HKLM\..\RunOnce: [sdkti32.exe] C:\WINDOWS\sdkti32.exe
O4 - HKLM\..\RunOnce: [atlmb32.exe] C:\WINDOWS\system32\atlmb32.exe
O4 - HKLM\..\RunOnce: [netwh32.exe] C:\WINDOWS\netwh32.exe
O4 - HKLM\..\RunOnce: [mfcrs.exe] C:\WINDOWS\mfcrs.exe
O4 - HKLM\..\RunOnce: [crrs.exe] C:\WINDOWS\crrs.exe
O4 - HKLM\..\RunOnce: [addas32.exe] C:\WINDOWS\system32\addas32.exe
O4 - HKLM\..\RunOnce: [syswe.exe] C:\WINDOWS\system32\syswe.exe
O4 - HKLM\..\RunOnce: [atlad32.exe] C:\WINDOWS\system32\atlad32.exe
O4 - HKLM\..\RunOnce: [iehb.exe] C:\WINDOWS\system32\iehb.exe
O4 - HKLM\..\RunOnce: [appaz.exe] C:\WINDOWS\system32\appaz.exe
O4 - HKLM\..\RunOnce: [msks32.exe] C:\WINDOWS\system32\msks32.exe
O4 - HKLM\..\RunOnce: [javaiq.exe] C:\WINDOWS\javaiq.exe
O4 - HKLM\..\RunOnce: [ieeu32.exe] C:\WINDOWS\system32\ieeu32.exe
O4 - HKLM\..\RunOnce: [d3br32.exe] C:\WINDOWS\system32\d3br32.exe
O4 - HKLM\..\RunOnce: [sdkam32.exe] C:\WINDOWS\system32\sdkam32.exe
O4 - HKLM\..\RunOnce: [d3qt.exe] C:\WINDOWS\d3qt.exe
O4 - HKLM\..\RunOnce: [addux32.exe] C:\WINDOWS\addux32.exe
O4 - HKLM\..\RunOnce: [sysjv32.exe] C:\WINDOWS\sysjv32.exe
O4 - HKLM\..\RunOnce: [d3kr32.exe] C:\WINDOWS\d3kr32.exe
O4 - HKLM\..\RunOnce: [d3yo32.exe] C:\WINDOWS\system32\d3yo32.exe
O4 - HKLM\..\RunOnce: [netdl32.exe] C:\WINDOWS\netdl32.exe
O4 - HKLM\..\RunOnce: [msyw32.exe] C:\WINDOWS\system32\msyw32.exe
O4 - HKLM\..\RunOnce: [windb.exe] C:\WINDOWS\windb.exe
O4 - HKLM\..\RunOnce: [apivh.exe] C:\WINDOWS\system32\apivh.exe
O4 - HKLM\..\RunOnce: [sysbm.exe] C:\WINDOWS\sysbm.exe
O4 - HKLM\..\RunOnce: [atleq32.exe] C:\WINDOWS\system32\atleq32.exe
O4 - HKLM\..\RunOnce: [addun32.exe] C:\WINDOWS\system32\addun32.exe
O4 - HKLM\..\RunOnce: [winik32.exe] C:\WINDOWS\winik32.exe
O4 - HKLM\..\RunOnce: [crng32.exe] C:\WINDOWS\crng32.exe
O4 - HKLM\..\RunOnce: [d3bi.exe] C:\WINDOWS\d3bi.exe
O4 - HKLM\..\RunOnce: [ntod32.exe] C:\WINDOWS\ntod32.exe
O4 - HKLM\..\RunOnce: [d3mv32.exe] C:\WINDOWS\d3mv32.exe
O4 - HKLM\..\RunOnce: [wincc.exe] C:\WINDOWS\wincc.exe
O4 - HKLM\..\RunOnce: [syslb.exe] C:\WINDOWS\system32\syslb.exe
O4 - HKLM\..\RunOnce: [iext32.exe] C:\WINDOWS\system32\iext32.exe
O4 - HKLM\..\RunOnce: [d3sw.exe] C:\WINDOWS\d3sw.exe
O4 - HKLM\..\RunOnce: [netrm32.exe] C:\WINDOWS\netrm32.exe
O4 - HKLM\..\RunOnce: [winld.exe] C:\WINDOWS\system32\winld.exe
O4 - HKLM\..\RunOnce: [mfcph32.exe] C:\WINDOWS\mfcph32.exe
O4 - HKLM\..\RunOnce: [appee32.exe] C:\WINDOWS\appee32.exe
O4 - HKLM\..\RunOnce: [appsb32.exe] C:\WINDOWS\system32\appsb32.exe
O4 - HKLM\..\RunOnce: [d3xx32.exe] C:\WINDOWS\system32\d3xx32.exe
O4 - HKLM\..\RunOnce: [atlsj32.exe] C:\WINDOWS\system32\atlsj32.exe
O4 - HKLM\..\RunOnce: [d3bx.exe] C:\WINDOWS\system32\d3bx.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Update Service] C:\WINDOWS\SoftwareDistribution\Download\5ea54eecb8f22acf9bd02bc36e049bf3\update\update.exe /startup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Free WebSite Tools.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.planetis.com/uk
O15 - Trusted Zone: http://www.erdreja.com
O15 - Trusted Zone: http://www.facemeet.com
O15 - Trusted Zone: www.live365.com
O15 - Trusted Zone: www.msn.com
O15 - Trusted Zone: www.passport.com
O15 - Trusted Zone: www.trendmicro.com
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by101fd.bay101.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotion…ctor/WebAAS.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - https://a248.e.akamai.net/f/248/5462/2h/www…ol/SymDlBrg.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/insaniqua…aploader_v6.cab
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Program Files\Iomega\AutoDisk\ADService.exe

alsocom

Post #7July 21, 2005, 10:00 PM UTC

Before beginning the fix, we need to disable your Microsoft AntiSpyware Real-time Protection as it may interfere with the fixes that we need to make.

Open Microsoft AntiSpyware.
Click on Options, Settings.
In the left pane, click on Real-time Protection.
Under Startup Options uncheck Enable the Microsoft AntiSpyware Security Agents on startup (recommended).
Under Real-time spyware threat protection uncheck Enable real-time spyware threat protection (recommended).
After you uncheck these, click on the Save button and close Microsoft AntiSpyware.
Right click on the Microsoft AntiSpyware icon on the taskbar and select Shutdown Microsoft AntiSpyware.

Step#1:Getting Ready

Please save these instructions to WordPad so that you have them accessible while following the steps. You also may want to print out these directions as the Internet will not be available.

After downloading the tools, you must disconnect from the internet totally, because staying connected while fixing will prevent the fix from working. Also please keep Internet Explorer and Outlook Express closed throughout as opening either will reinstall the infection.

To replace Internet Explorer to use during this fix, please use Internet Explorer once to download and install FireFox, to be used as your alternate browser throughout this fix.

Close Outlook Express and Internet Explorer for the duration of this fix

Please start by downloading the tools you will need to clean this infection with FireFox. If you have a problem or question with any please continue to follow the list step by step to the end and ask the questions when you are asked to reply. Just be sure to let us know what the problem was when you finally reply.

Step#2:Show All Hidden Files Very Important

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Clear "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Clear "Hide protected operating system files."
Click Apply, and then click OK.

Step#3:Download CWShredder

1. Please Download the most recent version of CWShredder, from CWSInstall.exe

2. Check for Updates but please Do NOT use it yet

Step#4:Download About Buster

1. Please download About:Buster from here: http://www.malwarebytes.biz/AboutBuster5.zip.

2. Once it is downloaded extract it to c:\aboutbuster.

3. Check to make sure it is up-to-date. Please Do NOT use it yet

Step#5:Download Registrar Lite

Another program to download is Registrar Lite for use later: Please download Registrar Lite and install it to C:\Program Files\RegLite\ . This is a registry editor that is very easy to use. Caution should be exercised when editing the registry as it is very easy to render a Computer unbootable by deleting the wrong key

Step#6:Download Ewido Security Suite

Download and install Ewido security suite
Right Click on the “E” icon in your taskbar and open Ewido Security Suite then click “update” to get the most recent definitions for it to use.
When it prompts you to update, click the OK button.
download the updates and when they are finished installing, close the window
Please Do Not Use It Yet

Step#7:Download A Registry File to Remove Registry Entries

Please download the following zip file to your desktop:
HSfix
Double Click on HSfix.zip and it will unzip to a new folder it makes on your desktop, called HSfix
Do Not Use It Yet

Please disconnect from the Internet

Reboot your computer into Safe Mode by tapping F8 while booting up and continue for the rest of the fix in SAFE MODE

Step#8:Disable The Bad Service ** Very Important!!**Skip this step.

Step#9:Stop The Running Processes

Press control-alt-delete to get into the task manager and end the following processes if they exist:

sysmy32.exe

Step#10:Delete the Offending Files

I now need you to delete the following files:

C:\WINDOWS\ieba.dll
C:\WINDOWS\javatc32.exe
C:\WINDOWS\ntws32.exe
C:\WINDOWS\d3ma.exe
C:\WINDOWS\crwk.exe
C:\WINDOWS\d3cg.exe
C:\WINDOWS\msku32.exe
C:\WINDOWS\atloe32.exe
C:\WINDOWS\ntsg32.exe
C:\WINDOWS\netku.exe
C:\WINDOWS\ntyf32.exe
C:\WINDOWS\d3gy.exe
C:\WINDOWS\ipnc32.exe
C:\WINDOWS\d3sm32.exe
C:\WINDOWS\wintd32.exe
C:\WINDOWS\javayc32.exe
C:\WINDOWS\addbm32.exe
C:\WINDOWS\mfcrt.exe
C:\WINDOWS\ntvx32.exe
C:\WINDOWS\atlsg.exe
C:\WINDOWS\apilz32.exe
C:\WINDOWS\sdkbo.exe
C:\WINDOWS\javapt.exe
C:\WINDOWS\javaje32.exe
C:\WINDOWS\ntjb32.exe
C:\WINDOWS\addeb.exe
C:\WINDOWS\mfcrf32.exe
C:\WINDOWS\mswo32.exe
C:\WINDOWS\sdkre32.exe
C:\WINDOWS\msol.exe
C:\WINDOWS\apicq32.exe
C:\WINDOWS\sysko32.exe
C:\WINDOWS\crtd32.exe
C:\WINDOWS\mfcmb.exe
C:\WINDOWS\mfchs32.exe
C:\WINDOWS\crlq.exe
C:\WINDOWS\winkl32.exe
C:\WINDOWS\wincv.exe
C:\WINDOWS\appuk.exe
C:\WINDOWS\javarl.exe
C:\WINDOWS\ipbr.exe
C:\WINDOWS\apiiz32.exe
C:\WINDOWS\syscq.exe
C:\WINDOWS\atlgu32.exe
C:\WINDOWS\crvw32.exe
C:\WINDOWS\addtj.exe
C:\WINDOWS\d3dc32.exe
C:\WINDOWS\apirf32.exe
C:\WINDOWS\d3qg32.exe
C:\WINDOWS\ipqe.exe
C:\WINDOWS\apikw.exe
C:\WINDOWS\appir32.exe
C:\WINDOWS\wingm.exe
C:\WINDOWS\mfcqf32.exe
C:\WINDOWS\ippv.exe
C:\WINDOWS\sdkuz.exe
C:\WINDOWS\apprs32.exe
C:\WINDOWS\netsz32.exe
C:\WINDOWS\ntgu.exe
C:\WINDOWS\crii.exe
C:\WINDOWS\mspg32.exe
C:\WINDOWS\sysjf32.exe
C:\WINDOWS\netyu.exe
C:\WINDOWS\mfcij.exe
C:\WINDOWS\iejs32.exe
C:\WINDOWS\iepd32.exe
C:\WINDOWS\crqq32.exe
C:\WINDOWS\sdknn32.exe
C:\WINDOWS\apijn.exe
C:\WINDOWS\iedh.exe
C:\WINDOWS\msuk32.exe
C:\WINDOWS\sysqg32.exe
C:\WINDOWS\apppn32.exe
C:\WINDOWS\netnd.exe
C:\WINDOWS\crlj.exe
C:\WINDOWS\atlae.exe
C:\WINDOWS\sdksm32.exe
C:\WINDOWS\d3gf.exe
C:\WINDOWS\msnd32.exe
C:\WINDOWS\iehh32.exe
C:\WINDOWS\ntba32.exe
C:\WINDOWS\msit32.exe
C:\WINDOWS\syshg.exe
C:\WINDOWS\atllk32.exe
C:\WINDOWS\crgl32.exe
C:\WINDOWS\apize.exe
C:\WINDOWS\ipsg32.exe
C:\WINDOWS\msfa.exe
C:\WINDOWS\ipfg.exe
C:\WINDOWS\mfcqs.exe
C:\WINDOWS\ieif.exe
C:\WINDOWS\atlfx.exe
C:\WINDOWS\appfe32.exe
C:\WINDOWS\ntvo.exe
C:\WINDOWS\iecw.exe
C:\WINDOWS\apphx.exe
C:\WINDOWS\ieuc.exe
C:\WINDOWS\apiab.exe
C:\WINDOWS\appge.exe
C:\WINDOWS\ipca32.exe
C:\WINDOWS\crdp.exe
C:\WINDOWS\netce32.exe
C:\WINDOWS\mfcsz.exe
C:\WINDOWS\sysem32.exe
C:\WINDOWS\iptp32.exe
C:\WINDOWS\apios.exe
C:\WINDOWS\winni32.exe
C:\WINDOWS\apiug32.exe
C:\WINDOWS\iphq32.exe
C:\WINDOWS\apixl32.exe
C:\WINDOWS\atlui32.exe
C:\WINDOWS\sysqi.exe
C:\WINDOWS\javapw32.exe
C:\WINDOWS\addgc32.exe
C:\WINDOWS\mfcdr32.exe
C:\WINDOWS\ipuy32.exe
C:\WINDOWS\addnp.exe
C:\WINDOWS\d3mf32.exe
C:\WINDOWS\ntan.exe
C:\WINDOWS\ntpg.exe
C:\WINDOWS\nths32.exe
C:\WINDOWS\crxz.exe
C:\WINDOWS\apphf32.exe
C:\WINDOWS\syscd32.exe
C:\WINDOWS\d3vs.exe
C:\WINDOWS\atlda.exe
C:\WINDOWS\ntze32.exe
C:\WINDOWS\sysng32.exe
C:\WINDOWS\msij.exe
C:\WINDOWS\addbq.exe
C:\WINDOWS\atlur32.exe
C:\WINDOWS\msol32.exe
C:\WINDOWS\appbl.exe
C:\WINDOWS\addyq32.exe
C:\WINDOWS\atlmi.exe
C:\WINDOWS\winhd32.exe
C:\WINDOWS\atlvo32.exe
C:\WINDOWS\d3sx32.exe
C:\WINDOWS\javasc32.exe
C:\WINDOWS\ntrv.exe
C:\WINDOWS\atlzc.exe
C:\WINDOWS\iesp.exe
C:\WINDOWS\appqd32.exe
C:\WINDOWS\javanq.exe
C:\WINDOWS\syscu.exe
C:\WINDOWS\javaab.exe
C:\WINDOWS\sdkhu32.exe
C:\WINDOWS\d3xc.exe
C:\WINDOWS\netzj.exe
C:\WINDOWS\sysfo.exe
C:\WINDOWS\atljk32.exe
C:\WINDOWS\addyh32.exe
C:\WINDOWS\apixc.exe
C:\WINDOWS\d3gk.exe
C:\WINDOWS\syszl32.exe
C:\WINDOWS\atlxz.exe
C:\WINDOWS\ipia.exe
C:\WINDOWS\apiim.exe
C:\WINDOWS\ntbg32.exe
C:\WINDOWS\appvh32.exe
C:\WINDOWS\sysnn.exe
C:\WINDOWS\addhp32.exe
C:\WINDOWS\crai32.exe
C:\WINDOWS\mswr32.exe
C:\WINDOWS\addxx32.exe
C:\WINDOWS\ipgk32.exe
C:\WINDOWS\iepq.exe
C:\WINDOWS\sdkcd.exe
C:\WINDOWS\d3yy.exe
C:\WINDOWS\ntks32.exe
C:\WINDOWS\addfk.exe
C:\WINDOWS\netrg.exe
C:\WINDOWS\javavk32.exe
C:\WINDOWS\ntkh32.exe
C:\WINDOWS\msdo32.exe
C:\WINDOWS\crdl32.exe
C:\WINDOWS\sdkti32.exe
C:\WINDOWS\netwh32.exe
C:\WINDOWS\mfcrs.exe
C:\WINDOWS\crrs.exe
C:\WINDOWS\d3qt.exe
C:\WINDOWS\addux32.exe
C:\WINDOWS\sysjv32.exe
C:\WINDOWS\d3kr32.exe
C:\WINDOWS\netdl32.exe
C:\WINDOWS\windb.exe
C:\WINDOWS\sysbm.exe
C:\WINDOWS\winik32.exe
C:\WINDOWS\crng32.exe
C:\WINDOWS\d3bi.exe
C:\WINDOWS\ntod32.exe
C:\WINDOWS\d3mv32.exe
C:\WINDOWS\wincc.exe
C:\WINDOWS\d3sw.exe
C:\WINDOWS\netrm32.exe
C:\WINDOWS\mfcph32.exe
C:\WINDOWS\appee32.exe
C:\WINDOWS\javaiq.exe

C:\WINDOWS\system32\ojpsg.dll
C:\WINDOWS\system32\ipzv.dll
C:\WINDOWS\system32\sysmy32.exe
C:\WINDOWS\system32\p2pnetworking.exe
C:\WINDOWS\system32\crar32.exe
C:\WINDOWS\system32\atlto.exe
C:\WINDOWS\system32\sdkhw32.exe
C:\WINDOWS\system32\addbk.exe
C:\WINDOWS\system32\addyc.exe
C:\WINDOWS\system32\syswx32.exe
C:\WINDOWS\system32\ntbc.exe
C:\WINDOWS\system32\atlom32.exe
C:\WINDOWS\system32\sdktw.exe
C:\WINDOWS\system32\netil.exe
C:\WINDOWS\system32\javahz32.exe
C:\WINDOWS\system32\addqf.exe
C:\WINDOWS\system32\sysxl32.exe
C:\WINDOWS\system32\mfcax32.exe
C:\WINDOWS\system32\winzm.exe
C:\WINDOWS\system32\javaed.exe
C:\WINDOWS\system32\syswk.exe
C:\WINDOWS\system32\iekg32.exe
C:\WINDOWS\system32\d3up32.exe
C:\WINDOWS\system32\sdkpn.exe
C:\WINDOWS\system32\netec.exe
C:\WINDOWS\system32\atlru.exe
C:\WINDOWS\system32\addps.exe
C:\WINDOWS\system32\iekq.exe
C:\WINDOWS\system32\syszb32.exe
C:\WINDOWS\system32\iegf32.exe
C:\WINDOWS\system32\apilt32.exe
C:\WINDOWS\system32\javake.exe
C:\WINDOWS\system32\iejh32.exe
C:\WINDOWS\system32\sdkjt32.exe
C:\WINDOWS\system32\netie32.exe
C:\WINDOWS\system32\ntfq.exe
C:\WINDOWS\system32\winpm.exe
C:\WINDOWS\system32\ntys32.exe
C:\WINDOWS\system32\addhg.exe
C:\WINDOWS\system32\mfcdu.exe
C:\WINDOWS\system32\msbl.exe
C:\WINDOWS\system32\javalj.exe
C:\WINDOWS\system32\ieei.exe
C:\WINDOWS\system32\msng.exe
C:\WINDOWS\system32\ipmw32.exe
C:\WINDOWS\system32\d3fj.exe
C:\WINDOWS\system32\msct.exe
C:\WINDOWS\system32\winll32.exe
C:\WINDOWS\system32\mfcct32.exe
C:\WINDOWS\system32\ievk.exe
C:\WINDOWS\system32\d3ta.exe
C:\WINDOWS\system32\ipym.exe
C:\WINDOWS\system32\crcq32.exe
C:\WINDOWS\system32\d3lr32.exe
C:\WINDOWS\system32\adddf.exe
C:\WINDOWS\system32\d3cn32.exe
C:\WINDOWS\system32\ieeh.exe
C:\WINDOWS\system32\msza.exe
C:\WINDOWS\system32\atlwi.exe
C:\WINDOWS\system32\iegv32.exe
C:\WINDOWS\system32\d3bg.exe
C:\WINDOWS\system32\crcl.exe
C:\WINDOWS\system32\sysaj32.exe
C:\WINDOWS\system32\appqq32.exe
C:\WINDOWS\system32\d3kh.exe
C:\WINDOWS\system32\crtc32.exe
C:\WINDOWS\system32\sdktp32.exe
C:\WINDOWS\system32\ipum.exe
C:\WINDOWS\system32\msdz.exe
C:\WINDOWS\system32\crbs32.exe
C:\WINDOWS\system32\crjn32.exe
C:\WINDOWS\system32\ipwf32.exe
C:\WINDOWS\system32\mslh.exe
C:\WINDOWS\system32\iect32.exe
C:\WINDOWS\system32\sdkbr.exe
C:\WINDOWS\system32\winkz.exe
C:\WINDOWS\system32\iefb32.exe
C:\WINDOWS\system32\mfcfa.exe
C:\WINDOWS\system32\msgn32.exe
C:\WINDOWS\system32\winhg.exe
C:\WINDOWS\system32\sysat.exe
C:\WINDOWS\system32\atlcg32.exe
C:\WINDOWS\system32\javare32.exe
C:\WINDOWS\system32\javauv32.exe
C:\WINDOWS\system32\sdkao.exe
C:\WINDOWS\system32\netkn.exe
C:\WINDOWS\system32\appdq.exe
C:\WINDOWS\system32\d3ce32.exe
C:\WINDOWS\system32\mfclu32.exe
C:\WINDOWS\system32\mstk.exe
C:\WINDOWS\system32\apiin32.exe
C:\WINDOWS\system32\msqd32.exe
C:\WINDOWS\system32\netno32.exe
C:\WINDOWS\system32\ntcj32.exe
C:\WINDOWS\system32\atlkv32.exe
C:\WINDOWS\system32\sysxy.exe
C:\WINDOWS\system32\appsc.exe
C:\WINDOWS\system32\mfcpl32.exe
C:\WINDOWS\system32\javasn.exe
C:\WINDOWS\system32\addxq32.exe
C:\WINDOWS\system32\sysfh32.exe
C:\WINDOWS\system32\appsu32.exe
C:\WINDOWS\system32\winwd.exe
C:\WINDOWS\system32\crai.exe
C:\WINDOWS\system32\winee.exe
C:\WINDOWS\system32\atlyf32.exe
C:\WINDOWS\system32\ipwb.exe
C:\WINDOWS\system32\winzv.exe
C:\WINDOWS\system32\ipid.exe
C:\WINDOWS\system32\crmh.exe
C:\WINDOWS\system32\javapz32.exe
C:\WINDOWS\system32\mfcas32.exe
C:\WINDOWS\system32\addbh.exe
C:\WINDOWS\system32\atlgl.exe
C:\WINDOWS\system32\msfb32.exe
C:\WINDOWS\system32\ipcu.exe
C:\WINDOWS\system32\crjx.exe
C:\WINDOWS\system32\syscm.exe
C:\WINDOWS\system32\mfcgi32.exe
C:\WINDOWS\system32\addqr.exe
C:\WINDOWS\system32\apipc.exe
C:\WINDOWS\system32\atlsl32.exe
C:\WINDOWS\system32\mfcez.exe
C:\WINDOWS\system32\appwx.exe
C:\WINDOWS\system32\appku.exe
C:\WINDOWS\system32\mslc32.exe
C:\WINDOWS\system32\apiae.exe
C:\WINDOWS\system32\apiot32.exe
C:\WINDOWS\system32\mfcrk.exe
C:\WINDOWS\system32\apira.exe
C:\WINDOWS\system32\atljo32.exe
C:\WINDOWS\system32\ieik.exe
C:\WINDOWS\system32\d3ss32.exe
C:\WINDOWS\system32\atlgh32.exe
C:\WINDOWS\system32\msat.exe
C:\WINDOWS\system32\apila.exe
C:\WINDOWS\system32\crui32.exe
C:\WINDOWS\system32\apioh.exe
C:\WINDOWS\system32\sdknv32.exe
C:\WINDOWS\system32\mfcbb32.exe
C:\WINDOWS\system32\apigu32.exe
C:\WINDOWS\system32\iprn32.exe
C:\WINDOWS\system32\javatm.exe
C:\WINDOWS\system32\appqx32.exe
C:\WINDOWS\system32\atlyv.exe
C:\WINDOWS\system32\mfcgd.exe
C:\WINDOWS\system32\winlo.exe
C:\WINDOWS\system32\sdkne.exe
C:\WINDOWS\system32\wintg32.exe
C:\WINDOWS\system32\ieqd32.exe
C:\WINDOWS\system32\sdkrz32.exe
C:\WINDOWS\system32\ipnd.exe
C:\WINDOWS\system32\ipqc32.exe
C:\WINDOWS\system32\criq32.exe
C:\WINDOWS\system32\apiwi32.exe
C:\WINDOWS\system32\appzc32.exe
C:\WINDOWS\system32\msyh32.exe
C:\WINDOWS\system32\msgb32.exe
C:\WINDOWS\system32\sdkcc.exe
C:\WINDOWS\system32\winqh32.exe
C:\WINDOWS\system32\mfcgo.exe
C:\WINDOWS\system32\ipos32.exe
C:\WINDOWS\system32\mfcse.exe
C:\WINDOWS\system32\sdkzk.exe
C:\WINDOWS\system32\ipzh.exe
C:\WINDOWS\system32\atlmb32.exe
C:\WINDOWS\system32\addas32.exe
C:\WINDOWS\system32\syswe.exe
C:\WINDOWS\system32\atlad32.exe
C:\WINDOWS\system32\iehb.exe
C:\WINDOWS\system32\appaz.exe
C:\WINDOWS\system32\msks32.exe
C:\WINDOWS\system32\ieeu32.exe
C:\WINDOWS\system32\d3br32.exe
C:\WINDOWS\system32\sdkam32.exe
C:\WINDOWS\system32\d3yo32.exe
C:\WINDOWS\system32\msyw32.exe
C:\WINDOWS\system32\apivh.exe
C:\WINDOWS\system32\atleq32.exe
C:\WINDOWS\system32\addun32.exe
C:\WINDOWS\system32\syslb.exe
C:\WINDOWS\system32\iext32.exe
C:\WINDOWS\system32\winld.exe
C:\WINDOWS\system32\appsb32.exe
C:\WINDOWS\system32\d3xx32.exe
C:\WINDOWS\system32\atlsj32.exe
C:\WINDOWS\system32\d3bx.exe

If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. if it is uncheck it and try again.

Step#11:Cleaning With HijackThis

Open HijackThis, run a scan and put a checkmark next to each of these entries (some may be gone after uninstalling some programs):

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\ojpsg.dll/sp.html#37049
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\PCHEALTH\HELPCTR\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {683DA086-8E62-5396-D4EF-2401FF58EB59} - C:\WINDOWS\system32\ipzv.dll
O2 - BHO: Class - {FFB59007-30E2-88D1-986B-566D8510B4B3} - C:\WINDOWS\ieba.dll
O4 - HKLM\..\Run: [iexplore.exe] C:\Program Files\Internet Explorer\iexplore.exe
O4 - HKLM\..\Run: [sysmy32.exe] C:\WINDOWS\system32\sysmy32.exe
O4 - HKLM\..\Run: [p2pnetworking] p2pnetworking.exe
O4 - HKLM\..\RunServices: [p2pnetworking] p2pnetworking.exe
O4 - HKLM\..\RunOnce: [javatc32.exe] C:\WINDOWS\javatc32.exe
O4 - HKLM\..\RunOnce: [ntws32.exe] C:\WINDOWS\ntws32.exe
O4 - HKLM\..\RunOnce: [crar32.exe] C:\WINDOWS\system32\crar32.exe
O4 - HKLM\..\RunOnce: [atlto.exe] C:\WINDOWS\system32\atlto.exe
O4 - HKLM\..\RunOnce: [sdkhw32.exe] C:\WINDOWS\system32\sdkhw32.exe
O4 - HKLM\..\RunOnce: [d3ma.exe] C:\WINDOWS\d3ma.exe
O4 - HKLM\..\RunOnce: [addbk.exe] C:\WINDOWS\system32\addbk.exe
O4 - HKLM\..\RunOnce: [crwk.exe] C:\WINDOWS\crwk.exe
O4 - HKLM\..\RunOnce: [d3cg.exe] C:\WINDOWS\d3cg.exe
O4 - HKLM\..\RunOnce: [msku32.exe] C:\WINDOWS\msku32.exe
O4 - HKLM\..\RunOnce: [atloe32.exe] C:\WINDOWS\atloe32.exe
O4 - HKLM\..\RunOnce: [ntsg32.exe] C:\WINDOWS\ntsg32.exe
O4 - HKLM\..\RunOnce: [addyc.exe] C:\WINDOWS\system32\addyc.exe
O4 - HKLM\..\RunOnce: [syswx32.exe] C:\WINDOWS\system32\syswx32.exe
O4 - HKLM\..\RunOnce: [netku.exe] C:\WINDOWS\netku.exe
O4 - HKLM\..\RunOnce: [ntbc.exe] C:\WINDOWS\system32\ntbc.exe
O4 - HKLM\..\RunOnce: [atlom32.exe] C:\WINDOWS\system32\atlom32.exe
O4 - HKLM\..\RunOnce: [ntyf32.exe] C:\WINDOWS\ntyf32.exe
O4 - HKLM\..\RunOnce: [sdktw.exe] C:\WINDOWS\system32\sdktw.exe
O4 - HKLM\..\RunOnce: [netil.exe] C:\WINDOWS\system32\netil.exe
O4 - HKLM\..\RunOnce: [d3gy.exe] C:\WINDOWS\d3gy.exe
O4 - HKLM\..\RunOnce: [javahz32.exe] C:\WINDOWS\system32\javahz32.exe
O4 - HKLM\..\RunOnce: [addqf.exe] C:\WINDOWS\system32\addqf.exe
O4 - HKLM\..\RunOnce: [ipnc32.exe] C:\WINDOWS\ipnc32.exe
O4 - HKLM\..\RunOnce: [d3sm32.exe] C:\WINDOWS\d3sm32.exe
O4 - HKLM\..\RunOnce: [wintd32.exe] C:\WINDOWS\wintd32.exe
O4 - HKLM\..\RunOnce: [sysxl32.exe] C:\WINDOWS\system32\sysxl32.exe
O4 - HKLM\..\RunOnce: [mfcax32.exe] C:\WINDOWS\system32\mfcax32.exe
O4 - HKLM\..\RunOnce: [winzm.exe] C:\WINDOWS\system32\winzm.exe
O4 - HKLM\..\RunOnce: [javayc32.exe] C:\WINDOWS\javayc32.exe
O4 - HKLM\..\RunOnce: [addbm32.exe] C:\WINDOWS\addbm32.exe
O4 - HKLM\..\RunOnce: [mfcrt.exe] C:\WINDOWS\mfcrt.exe
O4 - HKLM\..\RunOnce: [ntvx32.exe] C:\WINDOWS\ntvx32.exe
O4 - HKLM\..\RunOnce: [javaed.exe] C:\WINDOWS\system32\javaed.exe
O4 - HKLM\..\RunOnce: [atlsg.exe] C:\WINDOWS\atlsg.exe
O4 - HKLM\..\RunOnce: [syswk.exe] C:\WINDOWS\system32\syswk.exe
O4 - HKLM\..\RunOnce: [apilz32.exe] C:\WINDOWS\apilz32.exe
O4 - HKLM\..\RunOnce: [sdkbo.exe] C:\WINDOWS\sdkbo.exe
O4 - HKLM\..\RunOnce: [javapt.exe] C:\WINDOWS\javapt.exe
O4 - HKLM\..\RunOnce: [javaje32.exe] C:\WINDOWS\javaje32.exe
O4 - HKLM\..\RunOnce: [ntjb32.exe] C:\WINDOWS\ntjb32.exe
O4 - HKLM\..\RunOnce: [addeb.exe] C:\WINDOWS\addeb.exe
O4 - HKLM\..\RunOnce: [mfcrf32.exe] C:\WINDOWS\mfcrf32.exe
O4 - HKLM\..\RunOnce: [iekg32.exe] C:\WINDOWS\system32\iekg32.exe
O4 - HKLM\..\RunOnce: [d3up32.exe] C:\WINDOWS\system32\d3up32.exe
O4 - HKLM\..\RunOnce: [mswo32.exe] C:\WINDOWS\mswo32.exe
O4 - HKLM\..\RunOnce: [sdkpn.exe] C:\WINDOWS\system32\sdkpn.exe
O4 - HKLM\..\RunOnce: [netec.exe] C:\WINDOWS\system32\netec.exe
O4 - HKLM\..\RunOnce: [sdkre32.exe] C:\WINDOWS\sdkre32.exe
O4 - HKLM\..\RunOnce: [atlru.exe] C:\WINDOWS\system32\atlru.exe
O4 - HKLM\..\RunOnce: [addps.exe] C:\WINDOWS\system32\addps.exe
O4 - HKLM\..\RunOnce: [msol.exe] C:\WINDOWS\msol.exe
O4 - HKLM\..\RunOnce: [apicq32.exe] C:\WINDOWS\apicq32.exe
O4 - HKLM\..\RunOnce: [iekq.exe] C:\WINDOWS\system32\iekq.exe
O4 - HKLM\..\RunOnce: [sysko32.exe] C:\WINDOWS\sysko32.exe
O4 - HKLM\..\RunOnce: [syszb32.exe] C:\WINDOWS\system32\syszb32.exe
O4 - HKLM\..\RunOnce: [crtd32.exe] C:\WINDOWS\crtd32.exe
O4 - HKLM\..\RunOnce: [iegf32.exe] C:\WINDOWS\system32\iegf32.exe
O4 - HKLM\..\RunOnce: [apilt32.exe] C:\WINDOWS\system32\apilt32.exe
O4 - HKLM\..\RunOnce: [javake.exe] C:\WINDOWS\system32\javake.exe
O4 - HKLM\..\RunOnce: [mfcmb.exe] C:\WINDOWS\mfcmb.exe
O4 - HKLM\..\RunOnce: [mfchs32.exe] C:\WINDOWS\mfchs32.exe
O4 - HKLM\..\RunOnce: [iejh32.exe] C:\WINDOWS\system32\iejh32.exe
O4 - HKLM\..\RunOnce: [sdkjt32.exe] C:\WINDOWS\system32\sdkjt32.exe
O4 - HKLM\..\RunOnce: [crlq.exe] C:\WINDOWS\crlq.exe
O4 - HKLM\..\RunOnce: [winkl32.exe] C:\WINDOWS\winkl32.exe
O4 - HKLM\..\RunOnce: [netie32.exe] C:\WINDOWS\system32\netie32.exe
O4 - HKLM\..\RunOnce: [wincv.exe] C:\WINDOWS\wincv.exe
O4 - HKLM\..\RunOnce: [ntfq.exe] C:\WINDOWS\system32\ntfq.exe
O4 - HKLM\..\RunOnce: [appuk.exe] C:\WINDOWS\appuk.exe
O4 - HKLM\..\RunOnce: [javarl.exe] C:\WINDOWS\javarl.exe
O4 - HKLM\..\RunOnce: [ipbr.exe] C:\WINDOWS\ipbr.exe
O4 - HKLM\..\RunOnce: [winpm.exe] C:\WINDOWS\system32\winpm.exe
O4 - HKLM\..\RunOnce: [ntys32.exe] C:\WINDOWS\system32\ntys32.exe
O4 - HKLM\..\RunOnce: [apiiz32.exe] C:\WINDOWS\apiiz32.exe
O4 - HKLM\..\RunOnce: [addhg.exe] C:\WINDOWS\system32\addhg.exe
O4 - HKLM\..\RunOnce: [syscq.exe] C:\WINDOWS\syscq.exe
O4 - HKLM\..\RunOnce: [atlgu32.exe] C:\WINDOWS\atlgu32.exe
O4 - HKLM\..\RunOnce: [crvw32.exe] C:\WINDOWS\crvw32.exe
O4 - HKLM\..\RunOnce: [mfcdu.exe] C:\WINDOWS\system32\mfcdu.exe
O4 - HKLM\..\RunOnce: [addtj.exe] C:\WINDOWS\addtj.exe
O4 - HKLM\..\RunOnce: [d3dc32.exe] C:\WINDOWS\d3dc32.exe
O4 - HKLM\..\RunOnce: [apirf32.exe] C:\WINDOWS\apirf32.exe
O4 - HKLM\..\RunOnce: [msbl.exe] C:\WINDOWS\system32\msbl.exe
O4 - HKLM\..\RunOnce: [javalj.exe] C:\WINDOWS\system32\javalj.exe
O4 - HKLM\..\RunOnce: [ieei.exe] C:\WINDOWS\system32\ieei.exe
O4 - HKLM\..\RunOnce: [msng.exe] C:\WINDOWS\system32\msng.exe
O4 - HKLM\..\RunOnce: [ipmw32.exe] C:\WINDOWS\system32\ipmw32.exe
O4 - HKLM\..\RunOnce: [d3qg32.exe] C:\WINDOWS\d3qg32.exe
O4 - HKLM\..\RunOnce: [d3fj.exe] C:\WINDOWS\system32\d3fj.exe
O4 - HKLM\..\RunOnce: [msct.exe] C:\WINDOWS\system32\msct.exe
O4 - HKLM\..\RunOnce: [ipqe.exe] C:\WINDOWS\ipqe.exe
O4 - HKLM\..\RunOnce: [apikw.exe] C:\WINDOWS\apikw.exe
O4 - HKLM\..\RunOnce: [winll32.exe] C:\WINDOWS\system32\winll32.exe
O4 - HKLM\..\RunOnce: [mfcct32.exe] C:\WINDOWS\system32\mfcct32.exe
O4 - HKLM\..\RunOnce: [ievk.exe] C:\WINDOWS\system32\ievk.exe
O4 - HKLM\..\RunOnce: [d3ta.exe] C:\WINDOWS\system32\d3ta.exe
O4 - HKLM\..\RunOnce: [ipym.exe] C:\WINDOWS\system32\ipym.exe
O4 - HKLM\..\RunOnce: [crcq32.exe] C:\WINDOWS\system32\crcq32.exe
O4 - HKLM\..\RunOnce: [appir32.exe] C:\WINDOWS\appir32.exe
O4 - HKLM\..\RunOnce: [wingm.exe] C:\WINDOWS\wingm.exe
O4 - HKLM\..\RunOnce: [mfcqf32.exe] C:\WINDOWS\mfcqf32.exe
O4 - HKLM\..\RunOnce: [ippv.exe] C:\WINDOWS\ippv.exe
O4 - HKLM\..\RunOnce: [d3lr32.exe] C:\WINDOWS\system32\d3lr32.exe
O4 - HKLM\..\RunOnce: [sdkuz.exe] C:\WINDOWS\sdkuz.exe
O4 - HKLM\..\RunOnce: [adddf.exe] C:\WINDOWS\system32\adddf.exe
O4 - HKLM\..\RunOnce: [d3cn32.exe] C:\WINDOWS\system32\d3cn32.exe
O4 - HKLM\..\RunOnce: [apprs32.exe] C:\WINDOWS\apprs32.exe
O4 - HKLM\..\RunOnce: [netsz32.exe] C:\WINDOWS\netsz32.exe
O4 - HKLM\..\RunOnce: [ntgu.exe] C:\WINDOWS\ntgu.exe
O4 - HKLM\..\RunOnce: [ieeh.exe] C:\WINDOWS\system32\ieeh.exe
O4 - HKLM\..\RunOnce: [msza.exe] C:\WINDOWS\system32\msza.exe
O4 - HKLM\..\RunOnce: [atlwi.exe] C:\WINDOWS\system32\atlwi.exe
O4 - HKLM\..\RunOnce: [crii.exe] C:\WINDOWS\crii.exe
O4 - HKLM\..\RunOnce: [mspg32.exe] C:\WINDOWS\mspg32.exe
O4 - HKLM\..\RunOnce: [sysjf32.exe] C:\WINDOWS\sysjf32.exe
O4 - HKLM\..\RunOnce: [netyu.exe] C:\WINDOWS\netyu.exe
O4 - HKLM\..\RunOnce: [mfcij.exe] C:\WINDOWS\mfcij.exe
O4 - HKLM\..\RunOnce: [iejs32.exe] C:\WINDOWS\iejs32.exe
O4 - HKLM\..\RunOnce: [iegv32.exe] C:\WINDOWS\system32\iegv32.exe
O4 - HKLM\..\RunOnce: [d3bg.exe] C:\WINDOWS\system32\d3bg.exe
O4 - HKLM\..\RunOnce: [crcl.exe] C:\WINDOWS\system32\crcl.exe
O4 - HKLM\..\RunOnce: [sysaj32.exe] C:\WINDOWS\system32\sysaj32.exe
O4 - HKLM\..\RunOnce: [appqq32.exe] C:\WINDOWS\system32\appqq32.exe
O4 - HKLM\..\RunOnce: [iepd32.exe] C:\WINDOWS\iepd32.exe
O4 - HKLM\..\RunOnce: [d3kh.exe] C:\WINDOWS\system32\d3kh.exe
O4 - HKLM\..\RunOnce: [crtc32.exe] C:\WINDOWS\system32\crtc32.exe
O4 - HKLM\..\RunOnce: [sdktp32.exe] C:\WINDOWS\system32\sdktp32.exe
O4 - HKLM\..\RunOnce: [ipum.exe] C:\WINDOWS\system32\ipum.exe
O4 - HKLM\..\RunOnce: [crqq32.exe] C:\WINDOWS\crqq32.exe
O4 - HKLM\..\RunOnce: [sdknn32.exe] C:\WINDOWS\sdknn32.exe
O4 - HKLM\..\RunOnce: [apijn.exe] C:\WINDOWS\apijn.exe
O4 - HKLM\..\RunOnce: [msdz.exe] C:\WINDOWS\system32\msdz.exe
O4 - HKLM\..\RunOnce: [crbs32.exe] C:\WINDOWS\system32\crbs32.exe
O4 - HKLM\..\RunOnce: [iedh.exe] C:\WINDOWS\iedh.exe
O4 - HKLM\..\RunOnce: [crjn32.exe] C:\WINDOWS\system32\crjn32.exe
O4 - HKLM\..\RunOnce: [ipwf32.exe] C:\WINDOWS\system32\ipwf32.exe
O4 - HKLM\..\RunOnce: [msuk32.exe] C:\WINDOWS\msuk32.exe
O4 - HKLM\..\RunOnce: [mslh.exe] C:\WINDOWS\system32\mslh.exe
O4 - HKLM\..\RunOnce: [iect32.exe] C:\WINDOWS\system32\iect32.exe
O4 - HKLM\..\RunOnce: [sdkbr.exe] C:\WINDOWS\system32\sdkbr.exe
O4 - HKLM\..\RunOnce: [sysqg32.exe] C:\WINDOWS\sysqg32.exe
O4 - HKLM\..\RunOnce: [apppn32.exe] C:\WINDOWS\apppn32.exe
O4 - HKLM\..\RunOnce: [winkz.exe] C:\WINDOWS\system32\winkz.exe
O4 - HKLM\..\RunOnce: [iefb32.exe] C:\WINDOWS\system32\iefb32.exe
O4 - HKLM\..\RunOnce: [mfcfa.exe] C:\WINDOWS\system32\mfcfa.exe
O4 - HKLM\..\RunOnce: [msgn32.exe] C:\WINDOWS\system32\msgn32.exe
O4 - HKLM\..\RunOnce: [netnd.exe] C:\WINDOWS\netnd.exe
O4 - HKLM\..\RunOnce: [crlj.exe] C:\WINDOWS\crlj.exe
O4 - HKLM\..\RunOnce: [atlae.exe] C:\WINDOWS\atlae.exe
O4 - HKLM\..\RunOnce: [sdksm32.exe] C:\WINDOWS\sdksm32.exe
O4 - HKLM\..\RunOnce: [d3gf.exe] C:\WINDOWS\d3gf.exe
O4 - HKLM\..\RunOnce: [msnd32.exe] C:\WINDOWS\msnd32.exe
O4 - HKLM\..\RunOnce: [winhg.exe] C:\WINDOWS\system32\winhg.exe
O4 - HKLM\..\RunOnce: [iehh32.exe] C:\WINDOWS\iehh32.exe
O4 - HKLM\..\RunOnce: [ntba32.exe] C:\WINDOWS\ntba32.exe
O4 - HKLM\..\RunOnce: [msit32.exe] C:\WINDOWS\msit32.exe
O4 - HKLM\..\RunOnce: [sysat.exe] C:\WINDOWS\system32\sysat.exe
O4 - HKLM\..\RunOnce: [syshg.exe] C:\WINDOWS\syshg.exe
O4 - HKLM\..\RunOnce: [atllk32.exe] C:\WINDOWS\atllk32.exe
O4 - HKLM\..\RunOnce: [atlcg32.exe] C:\WINDOWS\system32\atlcg32.exe
O4 - HKLM\..\RunOnce: [javare32.exe] C:\WINDOWS\system32\javare32.exe
O4 - HKLM\..\RunOnce: [javauv32.exe] C:\WINDOWS\system32\javauv32.exe
O4 - HKLM\..\RunOnce: [sdkao.exe] C:\WINDOWS\system32\sdkao.exe
O4 - HKLM\..\RunOnce: [netkn.exe] C:\WINDOWS\system32\netkn.exe
O4 - HKLM\..\RunOnce: [crgl32.exe] C:\WINDOWS\crgl32.exe
O4 - HKLM\..\RunOnce: [apize.exe] C:\WINDOWS\apize.exe
O4 - HKLM\..\RunOnce: [appdq.exe] C:\WINDOWS\system32\appdq.exe
O4 - HKLM\..\RunOnce: [ipsg32.exe] C:\WINDOWS\ipsg32.exe
O4 - HKLM\..\RunOnce: [d3ce32.exe] C:\WINDOWS\system32\d3ce32.exe
O4 - HKLM\..\RunOnce: [mfclu32.exe] C:\WINDOWS\system32\mfclu32.exe
O4 - HKLM\..\RunOnce: [mstk.exe] C:\WINDOWS\system32\mstk.exe
O4 - HKLM\..\RunOnce: [apiin32.exe] C:\WINDOWS\system32\apiin32.exe
O4 - HKLM\..\RunOnce: [msqd32.exe] C:\WINDOWS\system32\msqd32.exe
O4 - HKLM\..\RunOnce: [msfa.exe] C:\WINDOWS\msfa.exe
O4 - HKLM\..\RunOnce: [netno32.exe] C:\WINDOWS\system32\netno32.exe
O4 - HKLM\..\RunOnce: [ipfg.exe] C:\WINDOWS\ipfg.exe
O4 - HKLM\..\RunOnce: [ntcj32.exe] C:\WINDOWS\system32\ntcj32.exe
O4 - HKLM\..\RunOnce: [atlkv32.exe] C:\WINDOWS\system32\atlkv32.exe
O4 - HKLM\..\RunOnce: [mfcqs.exe] C:\WINDOWS\mfcqs.exe
O4 - HKLM\..\RunOnce: [ieif.exe] C:\WINDOWS\ieif.exe
O4 - HKLM\..\RunOnce: [atlfx.exe] C:\WINDOWS\atlfx.exe
O4 - HKLM\..\RunOnce: [sysxy.exe] C:\WINDOWS\system32\sysxy.exe
O4 - HKLM\..\RunOnce: [appfe32.exe] C:\WINDOWS\appfe32.exe
O4 - HKLM\..\RunOnce: [ntvo.exe] C:\WINDOWS\ntvo.exe
O4 - HKLM\..\RunOnce: [iecw.exe] C:\WINDOWS\iecw.exe
O4 - HKLM\..\RunOnce: [apphx.exe] C:\WINDOWS\apphx.exe
O4 - HKLM\..\RunOnce: [ieuc.exe] C:\WINDOWS\ieuc.exe
O4 - HKLM\..\RunOnce: [apiab.exe] C:\WINDOWS\apiab.exe
O4 - HKLM\..\RunOnce: [appsc.exe] C:\WINDOWS\system32\appsc.exe
O4 - HKLM\..\RunOnce: [mfcpl32.exe] C:\WINDOWS\system32\mfcpl32.exe
O4 - HKLM\..\RunOnce: [javasn.exe] C:\WINDOWS\system32\javasn.exe
O4 - HKLM\..\RunOnce: [appge.exe] C:\WINDOWS\appge.exe
O4 - HKLM\..\RunOnce: [addxq32.exe] C:\WINDOWS\system32\addxq32.exe
O4 - HKLM\..\RunOnce: [ipca32.exe] C:\WINDOWS\ipca32.exe
O4 - HKLM\..\RunOnce: [sysfh32.exe] C:\WINDOWS\system32\sysfh32.exe
O4 - HKLM\..\RunOnce: [crdp.exe] C:\WINDOWS\crdp.exe
O4 - HKLM\..\RunOnce: [netce32.exe] C:\WINDOWS\netce32.exe
O4 - HKLM\..\RunOnce: [appsu32.exe] C:\WINDOWS\system32\appsu32.exe
O4 - HKLM\..\RunOnce: [winwd.exe] C:\WINDOWS\system32\winwd.exe
O4 - HKLM\..\RunOnce: [mfcsz.exe] C:\WINDOWS\mfcsz.exe
O4 - HKLM\..\RunOnce: [crai.exe] C:\WINDOWS\system32\crai.exe
O4 - HKLM\..\RunOnce: [sysem32.exe] C:\WINDOWS\sysem32.exe
O4 - HKLM\..\RunOnce: [iptp32.exe] C:\WINDOWS\iptp32.exe
O4 - HKLM\..\RunOnce: [apios.exe] C:\WINDOWS\apios.exe
O4 - HKLM\..\RunOnce: [winni32.exe] C:\WINDOWS\winni32.exe
O4 - HKLM\..\RunOnce: [winee.exe] C:\WINDOWS\system32\winee.exe
O4 - HKLM\..\RunOnce: [atlyf32.exe] C:\WINDOWS\system32\atlyf32.exe
O4 - HKLM\..\RunOnce: [ipwb.exe] C:\WINDOWS\system32\ipwb.exe
O4 - HKLM\..\RunOnce: [apiug32.exe] C:\WINDOWS\apiug32.exe
O4 - HKLM\..\RunOnce: [winzv.exe] C:\WINDOWS\system32\winzv.exe
O4 - HKLM\..\RunOnce: [ipid.exe] C:\WINDOWS\system32\ipid.exe
O4 - HKLM\..\RunOnce: [crmh.exe] C:\WINDOWS\system32\crmh.exe
O4 - HKLM\..\RunOnce: [javapz32.exe] C:\WINDOWS\system32\javapz32.exe
O4 - HKLM\..\RunOnce: [mfcas32.exe] C:\WINDOWS\system32\mfcas32.exe
O4 - HKLM\..\RunOnce: [iphq32.exe] C:\WINDOWS\iphq32.exe
O4 - HKLM\..\RunOnce: [addbh.exe] C:\WINDOWS\system32\addbh.exe
O4 - HKLM\..\RunOnce: [apixl32.exe] C:\WINDOWS\apixl32.exe
O4 - HKLM\..\RunOnce: [atlgl.exe] C:\WINDOWS\system32\atlgl.exe
O4 - HKLM\..\RunOnce: [atlui32.exe] C:\WINDOWS\atlui32.exe
O4 - HKLM\..\RunOnce: [msfb32.exe] C:\WINDOWS\system32\msfb32.exe
O4 - HKLM\..\RunOnce: [sysqi.exe] C:\WINDOWS\sysqi.exe
O4 - HKLM\..\RunOnce: [ipcu.exe] C:\WINDOWS\system32\ipcu.exe
O4 - HKLM\..\RunOnce: [javapw32.exe] C:\WINDOWS\javapw32.exe
O4 - HKLM\..\RunOnce: [crjx.exe] C:\WINDOWS\system32\crjx.exe
O4 - HKLM\..\RunOnce: [addgc32.exe] C:\WINDOWS\addgc32.exe
O4 - HKLM\..\RunOnce: [syscm.exe] C:\WINDOWS\system32\syscm.exe
O4 - HKLM\..\RunOnce: [mfcgi32.exe] C:\WINDOWS\system32\mfcgi32.exe
O4 - HKLM\..\RunOnce: [addqr.exe] C:\WINDOWS\system32\addqr.exe
O4 - HKLM\..\RunOnce: [mfcdr32.exe] C:\WINDOWS\mfcdr32.exe
O4 - HKLM\..\RunOnce: [ipuy32.exe] C:\WINDOWS\ipuy32.exe
O4 - HKLM\..\RunOnce: [apipc.exe] C:\WINDOWS\system32\apipc.exe
O4 - HKLM\..\RunOnce: [atlsl32.exe] C:\WINDOWS\system32\atlsl32.exe
O4 - HKLM\..\RunOnce: [addnp.exe] C:\WINDOWS\addnp.exe
O4 - HKLM\..\RunOnce: [d3mf32.exe] C:\WINDOWS\d3mf32.exe
O4 - HKLM\..\RunOnce: [ntan.exe] C:\WINDOWS\ntan.exe
O4 - HKLM\..\RunOnce: [mfcez.exe] C:\WINDOWS\system32\mfcez.exe
O4 - HKLM\..\RunOnce: [appwx.exe] C:\WINDOWS\system32\appwx.exe
O4 - HKLM\..\RunOnce: [ntpg.exe] C:\WINDOWS\ntpg.exe
O4 - HKLM\..\RunOnce: [appku.exe] C:\WINDOWS\system32\appku.exe
O4 - HKLM\..\RunOnce: [nths32.exe] C:\WINDOWS\nths32.exe
O4 - HKLM\..\RunOnce: [crxz.exe] C:\WINDOWS\crxz.exe
O4 - HKLM\..\RunOnce: [apphf32.exe] C:\WINDOWS\apphf32.exe
O4 - HKLM\..\RunOnce: [mslc32.exe] C:\WINDOWS\system32\mslc32.exe
O4 - HKLM\..\RunOnce: [apiae.exe] C:\WINDOWS\system32\apiae.exe
O4 - HKLM\..\RunOnce: [apiot32.exe] C:\WINDOWS\system32\apiot32.exe
O4 - HKLM\..\RunOnce: [mfcrk.exe] C:\WINDOWS\system32\mfcrk.exe
O4 - HKLM\..\RunOnce: [syscd32.exe] C:\WINDOWS\syscd32.exe
O4 - HKLM\..\RunOnce: [apira.exe] C:\WINDOWS\system32\apira.exe
O4 - HKLM\..\RunOnce: [d3vs.exe] C:\WINDOWS\d3vs.exe
O4 - HKLM\..\RunOnce: [atlda.exe] C:\WINDOWS\atlda.exe
O4 - HKLM\..\RunOnce: [ntze32.exe] C:\WINDOWS\ntze32.exe
O4 - HKLM\..\RunOnce: [sysng32.exe] C:\WINDOWS\sysng32.exe
O4 - HKLM\..\RunOnce: [msij.exe] C:\WINDOWS\msij.exe
O4 - HKLM\..\RunOnce: [addbq.exe] C:\WINDOWS\addbq.exe
O4 - HKLM\..\RunOnce: [atlur32.exe] C:\WINDOWS\atlur32.exe
O4 - HKLM\..\RunOnce: [atljo32.exe] C:\WINDOWS\system32\atljo32.exe
O4 - HKLM\..\RunOnce: [msol32.exe] C:\WINDOWS\msol32.exe
O4 - HKLM\..\RunOnce: [ieik.exe] C:\WINDOWS\system32\ieik.exe
O4 - HKLM\..\RunOnce: [appbl.exe] C:\WINDOWS\appbl.exe
O4 - HKLM\..\RunOnce: [d3ss32.exe] C:\WINDOWS\system32\d3ss32.exe
O4 - HKLM\..\RunOnce: [atlgh32.exe] C:\WINDOWS\system32\atlgh32.exe
O4 - HKLM\..\RunOnce: [addyq32.exe] C:\WINDOWS\addyq32.exe
O4 - HKLM\..\RunOnce: [atlmi.exe] C:\WINDOWS\atlmi.exe
O4 - HKLM\..\RunOnce: [msat.exe] C:\WINDOWS\system32\msat.exe
O4 - HKLM\..\RunOnce: [winhd32.exe] C:\WINDOWS\winhd32.exe
O4 - HKLM\..\RunOnce: [apila.exe] C:\WINDOWS\system32\apila.exe
O4 - HKLM\..\RunOnce: [crui32.exe] C:\WINDOWS\system32\crui32.exe
O4 - HKLM\..\RunOnce: [atlvo32.exe] C:\WINDOWS\atlvo32.exe
O4 - HKLM\..\RunOnce: [apioh.exe] C:\WINDOWS\system32\apioh.exe
O4 - HKLM\..\RunOnce: [sdknv32.exe] C:\WINDOWS\system32\sdknv32.exe
O4 - HKLM\..\RunOnce: [d3sx32.exe] C:\WINDOWS\d3sx32.exe
O4 - HKLM\..\RunOnce: [mfcbb32.exe] C:\WINDOWS\system32\mfcbb32.exe
O4 - HKLM\..\RunOnce: [apigu32.exe] C:\WINDOWS\system32\apigu32.exe
O4 - HKLM\..\RunOnce: [iprn32.exe] C:\WINDOWS\system32\iprn32.exe
O4 - HKLM\..\RunOnce: [javasc32.exe] C:\WINDOWS\javasc32.exe
O4 - HKLM\..\RunOnce: [ntrv.exe] C:\WINDOWS\ntrv.exe
O4 - HKLM\..\RunOnce: [atlzc.exe] C:\WINDOWS\atlzc.exe
O4 - HKLM\..\RunOnce: [iesp.exe] C:\WINDOWS\iesp.exe
O4 - HKLM\..\RunOnce: [appqd32.exe] C:\WINDOWS\appqd32.exe
O4 - HKLM\..\RunOnce: [javanq.exe] C:\WINDOWS\javanq.exe
O4 - HKLM\..\RunOnce: [javatm.exe] C:\WINDOWS\system32\javatm.exe
O4 - HKLM\..\RunOnce: [appqx32.exe] C:\WINDOWS\system32\appqx32.exe
O4 - HKLM\..\RunOnce: [atlyv.exe] C:\WINDOWS\system32\atlyv.exe
O4 - HKLM\..\RunOnce: [mfcgd.exe] C:\WINDOWS\system32\mfcgd.exe
O4 - HKLM\..\RunOnce: [winlo.exe] C:\WINDOWS\system32\winlo.exe
O4 - HKLM\..\RunOnce: [syscu.exe] C:\WINDOWS\syscu.exe
O4 - HKLM\..\RunOnce: [sdkne.exe] C:\WINDOWS\system32\sdkne.exe
O4 - HKLM\..\RunOnce: [javaab.exe] C:\WINDOWS\javaab.exe
O4 - HKLM\..\RunOnce: [sdkhu32.exe] C:\WINDOWS\sdkhu32.exe
O4 - HKLM\..\RunOnce: [d3xc.exe] C:\WINDOWS\d3xc.exe
O4 - HKLM\..\RunOnce: [wintg32.exe] C:\WINDOWS\system32\wintg32.exe
O4 - HKLM\..\RunOnce: [ieqd32.exe] C:\WINDOWS\system32\ieqd32.exe
O4 - HKLM\..\RunOnce: [netzj.exe] C:\WINDOWS\netzj.exe
O4 - HKLM\..\RunOnce: [sysfo.exe] C:\WINDOWS\sysfo.exe
O4 - HKLM\..\RunOnce: [atljk32.exe] C:\WINDOWS\atljk32.exe
O4 - HKLM\..\RunOnce: [addyh32.exe] C:\WINDOWS\addyh32.exe
O4 - HKLM\..\RunOnce: [apixc.exe] C:\WINDOWS\apixc.exe
O4 - HKLM\..\RunOnce: [d3gk.exe] C:\WINDOWS\d3gk.exe
O4 - HKLM\..\RunOnce: [syszl32.exe] C:\WINDOWS\syszl32.exe
O4 - HKLM\..\RunOnce: [atlxz.exe] C:\WINDOWS\atlxz.exe
O4 - HKLM\..\RunOnce: [ipia.exe] C:\WINDOWS\ipia.exe
O4 - HKLM\..\RunOnce: [sdkrz32.exe] C:\WINDOWS\system32\sdkrz32.exe
O4 - HKLM\..\RunOnce: [ipnd.exe] C:\WINDOWS\system32\ipnd.exe
O4 - HKLM\..\RunOnce: [apiim.exe] C:\WINDOWS\apiim.exe
O4 - HKLM\..\RunOnce: [ntbg32.exe] C:\WINDOWS\ntbg32.exe
O4 - HKLM\..\RunOnce: [ipqc32.exe] C:\WINDOWS\system32\ipqc32.exe
O4 - HKLM\..\RunOnce: [appvh32.exe] C:\WINDOWS\appvh32.exe
O4 - HKLM\..\RunOnce: [sysnn.exe] C:\WINDOWS\sysnn.exe
O4 - HKLM\..\RunOnce: [addhp32.exe] C:\WINDOWS\addhp32.exe
O4 - HKLM\..\RunOnce: [crai32.exe] C:\WINDOWS\crai32.exe
O4 - HKLM\..\RunOnce: [mswr32.exe] C:\WINDOWS\mswr32.exe
O4 - HKLM\..\RunOnce: [addxx32.exe] C:\WINDOWS\addxx32.exe
O4 - HKLM\..\RunOnce: [criq32.exe] C:\WINDOWS\system32\criq32.exe
O4 - HKLM\..\RunOnce: [apiwi32.exe] C:\WINDOWS\system32\apiwi32.exe
O4 - HKLM\..\RunOnce: [appzc32.exe] C:\WINDOWS\system32\appzc32.exe
O4 - HKLM\..\RunOnce: [ipgk32.exe] C:\WINDOWS\ipgk32.exe
O4 - HKLM\..\RunOnce: [iepq.exe] C:\WINDOWS\iepq.exe
O4 - HKLM\..\RunOnce: [sdkcd.exe] C:\WINDOWS\sdkcd.exe
O4 - HKLM\..\RunOnce: [msyh32.exe] C:\WINDOWS\system32\msyh32.exe
O4 - HKLM\..\RunOnce: [msgb32.exe] C:\WINDOWS\system32\msgb32.exe
O4 - HKLM\..\RunOnce: [d3yy.exe] C:\WINDOWS\d3yy.exe
O4 - HKLM\..\RunOnce: [sdkcc.exe] C:\WINDOWS\system32\sdkcc.exe
O4 - HKLM\..\RunOnce: [winqh32.exe] C:\WINDOWS\system32\winqh32.exe
O4 - HKLM\..\RunOnce: [mfcgo.exe] C:\WINDOWS\system32\mfcgo.exe
O4 - HKLM\..\RunOnce: [ntks32.exe] C:\WINDOWS\ntks32.exe
O4 - HKLM\..\RunOnce: [addfk.exe] C:\WINDOWS\addfk.exe
O4 - HKLM\..\RunOnce: [ipos32.exe] C:\WINDOWS\system32\ipos32.exe
O4 - HKLM\..\RunOnce: [mfcse.exe] C:\WINDOWS\system32\mfcse.exe
O4 - HKLM\..\RunOnce: [netrg.exe] C:\WINDOWS\netrg.exe
O4 - HKLM\..\RunOnce: [javavk32.exe] C:\WINDOWS\javavk32.exe
O4 - HKLM\..\RunOnce: [ntkh32.exe] C:\WINDOWS\ntkh32.exe
O4 - HKLM\..\RunOnce: [sdkzk.exe] C:\WINDOWS\system32\sdkzk.exe
O4 - HKLM\..\RunOnce: [msdo32.exe] C:\WINDOWS\msdo32.exe
O4 - HKLM\..\RunOnce: [ipzh.exe] C:\WINDOWS\system32\ipzh.exe
O4 - HKLM\..\RunOnce: [crdl32.exe] C:\WINDOWS\crdl32.exe
O4 - HKLM\..\RunOnce: [sdkti32.exe] C:\WINDOWS\sdkti32.exe
O4 - HKLM\..\RunOnce: [atlmb32.exe] C:\WINDOWS\system32\atlmb32.exe
O4 - HKLM\..\RunOnce: [netwh32.exe] C:\WINDOWS\netwh32.exe
O4 - HKLM\..\RunOnce: [mfcrs.exe] C:\WINDOWS\mfcrs.exe
O4 - HKLM\..\RunOnce: [crrs.exe] C:\WINDOWS\crrs.exe
O4 - HKLM\..\RunOnce: [addas32.exe] C:\WINDOWS\system32\addas32.exe
O4 - HKLM\..\RunOnce: [syswe.exe] C:\WINDOWS\system32\syswe.exe
O4 - HKLM\..\RunOnce: [atlad32.exe] C:\WINDOWS\system32\atlad32.exe
O4 - HKLM\..\RunOnce: [iehb.exe] C:\WINDOWS\system32\iehb.exe
O4 - HKLM\..\RunOnce: [appaz.exe] C:\WINDOWS\system32\appaz.exe
O4 - HKLM\..\RunOnce: [msks32.exe] C:\WINDOWS\system32\msks32.exe
O4 - HKLM\..\RunOnce: [javaiq.exe] C:\WINDOWS\javaiq.exe
O4 - HKLM\..\RunOnce: [ieeu32.exe] C:\WINDOWS\system32\ieeu32.exe
O4 - HKLM\..\RunOnce: [d3br32.exe] C:\WINDOWS\system32\d3br32.exe
O4 - HKLM\..\RunOnce: [sdkam32.exe] C:\WINDOWS\system32\sdkam32.exe
O4 - HKLM\..\RunOnce: [d3qt.exe] C:\WINDOWS\d3qt.exe
O4 - HKLM\..\RunOnce: [addux32.exe] C:\WINDOWS\addux32.exe
O4 - HKLM\..\RunOnce: [sysjv32.exe] C:\WINDOWS\sysjv32.exe
O4 - HKLM\..\RunOnce: [d3kr32.exe] C:\WINDOWS\d3kr32.exe
O4 - HKLM\..\RunOnce: [d3yo32.exe] C:\WINDOWS\system32\d3yo32.exe
O4 - HKLM\..\RunOnce: [netdl32.exe] C:\WINDOWS\netdl32.exe
O4 - HKLM\..\RunOnce: [msyw32.exe] C:\WINDOWS\system32\msyw32.exe
O4 - HKLM\..\RunOnce: [windb.exe] C:\WINDOWS\windb.exe
O4 - HKLM\..\RunOnce: [apivh.exe] C:\WINDOWS\system32\apivh.exe
O4 - HKLM\..\RunOnce: [sysbm.exe] C:\WINDOWS\sysbm.exe
O4 - HKLM\..\RunOnce: [atleq32.exe] C:\WINDOWS\system32\atleq32.exe
O4 - HKLM\..\RunOnce: [addun32.exe] C:\WINDOWS\system32\addun32.exe
O4 - HKLM\..\RunOnce: [winik32.exe] C:\WINDOWS\winik32.exe
O4 - HKLM\..\RunOnce: [crng32.exe] C:\WINDOWS\crng32.exe
O4 - HKLM\..\RunOnce: [d3bi.exe] C:\WINDOWS\d3bi.exe
O4 - HKLM\..\RunOnce: [ntod32.exe] C:\WINDOWS\ntod32.exe
O4 - HKLM\..\RunOnce: [d3mv32.exe] C:\WINDOWS\d3mv32.exe
O4 - HKLM\..\RunOnce: [wincc.exe] C:\WINDOWS\wincc.exe
O4 - HKLM\..\RunOnce: [syslb.exe] C:\WINDOWS\system32\syslb.exe
O4 - HKLM\..\RunOnce: [iext32.exe] C:\WINDOWS\system32\iext32.exe
O4 - HKLM\..\RunOnce: [d3sw.exe] C:\WINDOWS\d3sw.exe
O4 - HKLM\..\RunOnce: [netrm32.exe] C:\WINDOWS\netrm32.exe
O4 - HKLM\..\RunOnce: [winld.exe] C:\WINDOWS\system32\winld.exe
O4 - HKLM\..\RunOnce: [mfcph32.exe] C:\WINDOWS\mfcph32.exe
O4 - HKLM\..\RunOnce: [appee32.exe] C:\WINDOWS\appee32.exe
O4 - HKLM\..\RunOnce: [appsb32.exe] C:\WINDOWS\system32\appsb32.exe
O4 - HKLM\..\RunOnce: [d3xx32.exe] C:\WINDOWS\system32\d3xx32.exe
O4 - HKLM\..\RunOnce: [atlsj32.exe] C:\WINDOWS\system32\atlsj32.exe
O4 - HKLM\..\RunOnce: [d3bx.exe] C:\WINDOWS\system32\d3bx.exe

With all other programs and browsers closed, click Fix Checked.

Step#12: Backup The Registry

In the next step we are going to remove a service that gets installed by this malware.

1. Open Registrar Lite and run it.

2. Copy and paste the bold text below into the address bar of Registrar Lite:(this is making a Registry backup for safety in case of error)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\

Go to File> Export and and save as (in the C:\Program Files\Registrar Lite (Reglite) folder):

1.) Winkey.reg (Save as type: regedit4 .reg type)
2.) Winkey.hiv (Save as type: Scroll to select-regetd32/WinAPI *hiv *dat files)

Step#13: Use the HSfix.reg file

Navigate to the HSfix folder on your Desktop
Then double-click on the HSfix.reg file, and when it prompts to merge say yes, and this will clear some registry entries left behind by the process.
if you have a popup from any of your protection programs asking if you want to make a change to the registry, say Yes or Accept it

Step#14:Fixing With CWShredder

CLOSE ALL WINDOWS except CWShredder
Run the program by clicking 'fix' and letting it fix all CWS remnants.

Step#15:Fixing With About Buster

This is the step where we will use About:Buster that you had downloaded previously.

Navigate to the c:\aboutbuster directory
double-click on aboutbuster.exe
When the tool opens press the OK button, then Start button, then the OK button
then finally the Yes button. It will start scanning your computer for files.
If it asks if you would like to do a second pass, allow it to do so.
Post the log file in your next reply

Step#16:Scan With Ewido Security Suite

Launch Ewido again
Click on Scanner>Complete System Scan.
Let the program scan your PC.
When the scan asks to clean files click OK.
When scan is completed, click Save report. to your desktop.
Post the report in your next reply.

Reboot your computer back to normal mode

Step#17:Scan and Post a New HJT log with other logs

Scan again with HijackThis and save log.

Reconnect To The Internet
Post your logs from HijackThis, About Buster, and Ewido Security Suite here in this thread with any questions or problems that you have run into.
There are still some steps that are necessary to clear out all of the malware. There will be necessary files that it has deleted that will need to be replaced.

abmcwilliams

Post #8July 25, 2005, 6:38 PM UTC

Hi,
Sorry taken so long, had to drive to Wales this weekend :-(

Hijack log:

Logfile of HijackThis v1.99.1
Scan saved at 16:22:06, on 25/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Iomega\AutoDisk\ADService.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Apps\ActivBoard\MMKeybd.exe
C:\WINDOWS\System32\svchost.exe
C:\Apps\ActivBoard\TrayMon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Apps\ActivBoard\OSD.exe
C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\MetaCreations\Poser 4\Poser.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Adobe\Premiere 6.5\premiere.exe
C:\Documents and Settings\ali\My Documents\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer brought to you by Planetis
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [Deskup] C:\Program Files\Iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
O4 - HKLM\..\Run: [BCWipeTM Startup] "C:\Program Files\Jetico\BCWipe\BCWipeTM.exe" startup
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Update Service] C:\WINDOWS\SoftwareDistribution\Download\5ea54eecb8f22acf9bd02bc36e049bf3\update\update.exe /startup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Free WebSite Tools.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.planetis.com/uk
O15 - Trusted Zone: http://www.erdreja.com
O15 - Trusted Zone: http://www.facemeet.com
O15 - Trusted Zone: www.live365.com
O15 - Trusted Zone: www.msn.com
O15 - Trusted Zone: www.passport.com
O15 - Trusted Zone: www.trendmicro.com
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid;=0x409
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by101fd.bay101.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotion…ctor/WebAAS.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - https://a248.e.akamai.net/f/248/5462/2h/www…ol/SymDlBrg.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/insaniqua…aploader_v6.cab
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Program Files\Iomega\AutoDisk\ADService.exe

About Buster log:

AboutBuster 5.0 reference file 28
Scan started on [24/07/2005] at [22:11:48]
————————————————
Removed Stream! C:\WINDOWS\axfhx.log:yfnkrl
Removed Stream! C:\WINDOWS\C-30Set.ini:jhrdoy
Removed Stream! C:\WINDOWS\Cmousecc.ini:bhjiqi
Removed Stream! C:\WINDOWS\Cmousecc.ini:fpnls
Removed Stream! C:\WINDOWS\comsetup.log:odclv
Removed Stream! C:\WINDOWS\eogvx.txt:cfqogw
Removed Stream! C:\WINDOWS\FeatherTexture.bmp:ugiuiz
Removed Stream! C:\WINDOWS\gcrse.txt:rzznw
Removed Stream! C:\WINDOWS\Greenstone.bmp:owbcv
Removed Stream! C:\WINDOWS\imsins.log:jirmod
Removed Stream! C:\WINDOWS\jautoexp.dat:bjjzin
Removed Stream! C:\WINDOWS\KB893066.log:lsscii
Removed Stream! C:\WINDOWS\KB893803.log:yhbav
Removed Stream! C:\WINDOWS\KB896428.log:wtdvev
Removed Stream! C:\WINDOWS\ljfwr.txt:klcqv
Removed Stream! C:\WINDOWS\lseig.log:puoazf
Removed Stream! C:\WINDOWS\msgsocm.log:ngucri
Removed Stream! C:\WINDOWS\nakal.dat:fhnpls
Removed Stream! C:\WINDOWS\nuhtl.txt:tzbox
Removed Stream! C:\WINDOWS\PROTOCOL.INI:sgfgi
Removed Stream! C:\WINDOWS\Q311967.log:hjagt
Removed Stream! C:\WINDOWS\Q314862.log:satyl
Removed Stream! C:\WINDOWS\Q329170.log:oagno
Removed Stream! C:\WINDOWS\Q811630.log:rywalm
Removed Stream! C:\WINDOWS\Q817606.log:kzggno
Removed Stream! C:\WINDOWS\qjbug.dat:mydtbn
Removed Stream! C:\WINDOWS\qwghd.txt:ubsyt
Removed Stream! C:\WINDOWS\RESTORE.INS:cxsia
Removed Stream! C:\WINDOWS\Rhododendron.bmp:fmuiha
Removed Stream! C:\WINDOWS\s3setup.log:xffnbk
Removed Stream! C:\WINDOWS\setupact.log:ntgbj
Removed Stream! C:\WINDOWS\smscfg.ini:vkwhpm
Removed Stream! C:\WINDOWS\Sti_Trace.log:nlpmro
Removed Stream! C:\WINDOWS\svcpack.log:vgpdoa
Removed Stream! C:\WINDOWS\VORTEX.INI:xultkm
Removed Stream! C:\WINDOWS\VORTEX2.INI:bpafu
Removed Stream! C:\WINDOWS\WALL.HLP:nfhdvi
Removed Stream! C:\WINDOWS\WindowsUpdate.log:xbzmx
Removed Stream! C:\WINDOWS\xpsp1hfm.log:fzesj
Removed Stream! C:\WINDOWS\yoklj.log:wbdid
Removed Stream! C:\WINDOWS\Zapotec.bmp:epuzqo
Removed Stream! C:\WINDOWS\ZZZ7D9.tmp:wiffky
Removed Stream! C:\WINDOWS\ZZZ7D9.tmp:zvxjzk
Removed Stream! C:\WINDOWS\_default.pif:aiqyp
————————————————
Removed File! : C:\Windows\axsxd.dll
Removed File! : C:\Windows\botwl.dat
Removed File! : C:\Windows\dwqrh.dat
Removed File! : C:\Windows\gljpz.dat
Removed File! : C:\Windows\gvvyr.dat
Removed File! : C:\Windows\ikwxr.dll
Removed File! : C:\Windows\mlbau.dat
Removed File! : C:\Windows\nbsqh.dll
Removed File! : C:\Windows\rfaoi.dat
Removed File! : C:\Windows\sdscm.dat
Removed File! : C:\Windows\suahh.dll
Removed File! : C:\Windows\varyj.dat
Removed File! : C:\Windows\vipui.dll
Removed File! : C:\Windows\wyyyb.dat
Removed File! : C:\Windows\ztfzg.dat
Removed File! : C:\Windows\System32\annnm.dat
Removed File! : C:\Windows\System32\crwd32.exe
Removed File! : C:\Windows\System32\gdurp.dat
Removed File! : C:\Windows\System32\iinft.dll
Removed File! : C:\Windows\System32\lekem.dat
Removed File! : C:\Windows\System32\odcfg.dll
Removed File! : C:\Windows\System32\qhaqd.dat
Removed File! : C:\Windows\System32\wdigq.dll
Removed File! : C:\Windows\System32\wmght.dat
Removed File! : C:\Windows\System32\ybchl.dat
————————————————
Scan was COMPLETED SUCCESSFULLY at 22:13:13

AboutBuster 5.0 reference file 31
Scan started on [25/07/2005] at [16:24:16]
————————————————
Removed Stream! C:\WINDOWS\DESK01.jpg:gdurpz
Removed Stream! C:\WINDOWS\hgiro.txt:ghobsq
Removed Stream! C:\WINDOWS\MAGIX.INI:kmrrvv
Removed Stream! C:\WINDOWS\Q329048.log:gwlior
Removed Stream! C:\WINDOWS\Q814995.log:bfsiea
Removed Stream! C:\WINDOWS\Q828026.log:ukjpkn
Removed Stream! C:\WINDOWS\sessmgr.setup.log:krtosr
Removed Stream! C:\WINDOWS\WALL.HLP:puuae
Removed Stream! C:\WINDOWS\xpsp1hfm.log:ribux
Removed Stream! C:\WINDOWS\_default.pif:ajunvs
Removed Stream! C:\WINDOWS\_default.pif:ampij
————————————————
Removed File! : C:\Windows\cjdcv.dat
Removed File! : C:\Windows\ftets.dat
Removed File! : C:\Windows\icuti.dat
Removed File! : C:\Windows\kczhh.dat
Removed File! : C:\Windows\mjyqn.dat
Removed File! : C:\Windows\sldmh.dat
Removed File! : C:\Windows\tsdow.dat
Removed File! : C:\Windows\xdbrg.dat
Removed File! : C:\Windows\xuyqc.dat
Removed File! : C:\Windows\System32\alkis.dat
Removed File! : C:\Windows\System32\cycbt.dat
Removed File! : C:\Windows\System32\gmjek.dat
Removed File! : C:\Windows\System32\gsbmk.dat
Removed File! : C:\Windows\System32\qxgwm.dat
Removed File! : C:\Windows\System32\svsyy.dat
Removed File! : C:\Windows\System32\ynwag.dat
————————————————
Scan was COMPLETED SUCCESSFULLY at 16:28:31

Esido security scan report

———————————————————
ewido security suite - Scan report
———————————————————

+ Created on: 08:18:27, 25/07/2005
+ Report-Checksum: D87E58B0

+ Scan result:

C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc10.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc100.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc101.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc102.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc103.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc104.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc105.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc106.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc107.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc108.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc109.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc11.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc110.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc111.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc112.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc113.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc114.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc115.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc116.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc117.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc118.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc119.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc12.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc120.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc121.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc122.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc123.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc124.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc125.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc126.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc127.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc128.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc129.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc13.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc130.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc131.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc132.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc133.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc134.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc135.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc136.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc137.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc138.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc139.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc14.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc140.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc141.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc142.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc143.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc144.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc145.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc146.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc147.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc148.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc149.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc15.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc150.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc151.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc152.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc153.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc154.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc155.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc156.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc157.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc158.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc159.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc16.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc160.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc161.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc162.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc163.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc164.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc165.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc166.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc167.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc168.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc169.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc17.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc170.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc171.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc172.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc173.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc174.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc175.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc176.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc177.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc178.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc179.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc18.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc180.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc181.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc182.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc183.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc184.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc185.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc186.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc187.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc188.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc189.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc19.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc190.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc191.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc192.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc193.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc194.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc195.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc196.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc197.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc198.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc199.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc20.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc200.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc201.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc202.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc203.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc204.dll -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc205.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc206.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc207.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc208.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc209.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc21.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc210.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc211.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc212.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc213.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc214.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc215.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc216.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc217.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc218.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc219.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc22.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc220.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc221.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc222.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc223.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc224.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc225.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc226.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc227.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc228.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc229.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc23.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc230.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc231.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc232.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc233.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc234.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc235.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc236.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc237.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc238.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc239.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc24.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc240.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc241.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc242.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc243.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc244.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc245.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc246.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc247.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc248.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc249.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc25.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc250.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc251.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc252.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc253.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc254.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc255.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc256.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc257.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc258.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc259.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc26.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc260.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc261.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc262.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc263.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc264.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc265.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc266.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc267.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc268.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc269.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc27.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc270.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc271.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc272.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc273.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc274.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc275.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc276.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc277.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc278.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc279.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc28.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc280.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc281.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc282.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc283.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc284.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc285.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc286.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc287.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc288.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc289.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc29.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc290.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc291.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc292.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc293.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc294.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc295.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc296.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc297.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc298.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc299.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc30.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc300.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc301.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc302.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc303.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc304.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc305.dll -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc306.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc307.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc308.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc309.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc31.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc310.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc311.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc312.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc313.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc314.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc315.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc316.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc317.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc318.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc319.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc320.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc321.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc322.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc323.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc324.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc325.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc326.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc327.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc328.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc329.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc33.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc330.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc331.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc332.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc333.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc334.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc335.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc336.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc337.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc338.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc339.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc34.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc340.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc341.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc342.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc343.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc344.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc345.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc346.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc347.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc348.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc349.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc35.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc350.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc351.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc352.dll -> Spyware.SearchPage : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc353.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc354.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc355.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc356.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc357.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc358.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc359.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc36.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc360.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc361.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc362.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc363.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc364.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc365.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc366.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc367.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc368.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc369.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc37.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc370.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc371.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc372.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc373.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc374.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc375.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc376.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc377.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc378.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc379.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc38.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc380.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc381.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc382.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc383.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc384.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc385.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc386.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc387.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc39.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc40.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc41.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc42.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc43.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc44.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc45.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc46.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc47.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc48.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc49.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc50.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc51.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc52.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc53.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc54.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc55.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc56.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc57.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc58.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc59.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc60.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc61.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc62.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc63.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc64.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc65.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-682003330-1004\Dc66.exe -> Trojan.Agent.bi : Cleaned with backup
C:\RECYCLER\S-1-5-21-2052111302-706699826-

abmcwilliams

Post #9July 25, 2005, 6:57 PM UTC

C:\WINDOWS\atlgi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlgl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlgn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlgu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlgx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlgz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlhj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlhk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlhm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlim32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlio.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atliq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atljm32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\atljv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlli.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atllu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atllx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlmc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlme32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlmm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlna.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlna32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlnl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlnt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlnt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlnu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlnv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlny32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atloc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlog32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlol.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlos32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlot32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlpa.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlpe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlpl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlpv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlqa.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlqd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlqp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlqs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlrk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlrr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlru.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlrx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlry.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlsf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlsl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlsn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlsz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atltl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atltp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atltv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlub32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atluh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlut32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlvk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlvo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlvs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlvy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlwa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlwe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlwk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlww32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlwz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlxc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlxl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlxq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlxr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlxv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlyc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlyk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlyo.dll -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\atlzc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlzd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlzh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlzo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlzv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlzv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\atlzz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\aucfg.ini:dhtxo -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\aucfg.ini:fmjvs -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\aucfg.ini:lkgmc -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\aucfg.ini:mqllh -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\aucfg.ini:riwek -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\bqoxp.txt:oytxq -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\bqoxp.txt:uncaw -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\C-30Def.src:gegib -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\C-30Def.src:llntzt -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\C-30Def.src:nddez -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\C-30Def.src:qsehm -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\C-30Def.src:tndsq -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\C-30Def.src:uhtcy -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\C-30Def.src:urfhj -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\C-30Def.src:vqprg -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\C-30Def.src:xrxed -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\C-30Set.ini:felsq -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\C-30Set.ini:mvrmg -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\C-30Set.ini:pstab -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\C-30Set.ini:yrwdz -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Cmousecc.ini:afgzj -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Cmousecc.ini:cmdin -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Cmousecc.ini:cwwam -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Cmousecc.ini:eavax -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Cmousecc.ini:gdurpz -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\Cmousecc.ini:iamyj -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Cmousecc.ini:vhmpi -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Cmousecc.ini:xmrvk -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Cmousecc.ini:xujce -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\control.ini:auwtx -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\control.ini:etfby -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\control.ini:iwvby -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\control.ini:jkiwq -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\control.ini:qmtvw -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\control.ini:ughwi -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\crah32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cral.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cram.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\craq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crar.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crau32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cray32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crbb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crbd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crbj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crbk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crbn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crbq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crcd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crcf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crcp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crcx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crcx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crcy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crcz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crdb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crdf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crdg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crdq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crea.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\creb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cret.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crfa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crfc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crfo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crfq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crfx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crgb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crge32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crgh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crgr.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\crgs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crgt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crgu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crha32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crhb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crhx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crhx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cria32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crid.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crif.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\criq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crjb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crjt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crka32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crkb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crkc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crke32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crkg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crld.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crlw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crmc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crmk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crmr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crmv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crmz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crnf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crny.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\croa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\croi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crou.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crow.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crpg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crpj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crpn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crpq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crpy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crpz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crqb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crqe.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crqe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crqr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crqv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crrb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crrc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crrd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crri.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crrj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crrl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crro.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crrw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crrz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crsc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crsc32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\crsh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crsk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crsl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crsr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crsw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crsx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crta.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crtg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crtl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crtl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crtn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crtu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crtv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crty32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crud32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cruh32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\cruh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crup32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cruv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cruw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crve32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crvh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crvm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crvz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crvz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crwn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crwx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crwz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crxa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crxg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crxk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crxp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cryd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cryi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cryk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cryt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\cryz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crzd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crzh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crzj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crzn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\crzv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3aw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3bs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3bx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3by32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ci.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ci32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3cn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3cz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3da.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3dh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3do32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3dr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3dw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3dz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ef32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3et32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ev.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ey.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3fm.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\d3fv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3fx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ge32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3gl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3go32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3gs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ig.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ig32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3im.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3is.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3iw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3jf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3jq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3jr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3jt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3kc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3kl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3kp.dll -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\d3kp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3kq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3lh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3li.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3lr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3lu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ly.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\d3ly.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3mi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3mj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3mr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ni.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3nk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3nk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3np.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3nw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ol32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3or32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3pa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3pf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3pp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3pr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3qh.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\d3qo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3rh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3rn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3rn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3rp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3rr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3rs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3sh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3sj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3st.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3st32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3su32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3sy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3tb32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\d3tf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3tg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3tm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3to32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3tp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3tx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ua32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\d3ua32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ul32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\d3um.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ut32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3uz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3va.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3vf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3vm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3vo.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\d3vo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3vt.dll -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\d3vv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3vy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3vz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3wc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3wv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3xc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3xi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3xs.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\d3ye.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3ym32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3yr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3yu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3zb32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\d3zb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3zh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3zn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\d3zr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\DESK01.jpg:dbvjc -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\DESK01.jpg:mubyz -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\DESK01.jpg:zhrkc -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\desktop.ini:ccexi -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\desktop.ini:gfyqf -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\desktop.ini:kwcix -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\desktop.ini:vjvuh -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\desktop.ini:vlplg -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\desktop.ini:wymxt -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\desktop.ini:xbowsv -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\drjkp.txt:ivqul -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\drjkp.txt:ugiuiz -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\drnra.txt:ovycz -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\drnra.txt:yoiyed -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\eogvx.txt:cjadf -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\eogvx.txt:flsdf -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\filespec:nynbt -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\filespec:pyxpa -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\filespec:qjuex -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\filespec:rhjac -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\filespec:rmzeb -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\filespec:smico -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\filespec:tehfu -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\filespec:uuzvr -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\filespec:wmvfk -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\filespec:xaeszw -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\gcrse.txt:qbxxbg -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\gcvlp.txt:nllnb -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\IE4 Error Log.txt:gmldg -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\IE4 Error Log.txt:kmdir -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\IE4 Error Log.txt:lyhvm -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\IE4 Error Log.txt:utmsi -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\IE4 Error Log.txt:vrngl -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\IE4 Error Log.txt:xyvum -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\IE4 Error Log.txt:yhnac -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\ieai32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ieai32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieaj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieau32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iebh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iebq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iebx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieca32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iech32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieda32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieeg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieey.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iefa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iefe.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\iefl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iefv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iefz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iegh.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\iegi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iegl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iego32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iegp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iegr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iegr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iegz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieha.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iehg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iehj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iehq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieih.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieik.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieip.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iejg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iejh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iejk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iejm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iejn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iejq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iejt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieju32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iejz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieka.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iekd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iekg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iekg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieko32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iekw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieky32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ielh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ielj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iell32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ielx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ielz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ienf.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ienk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ienq32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ienu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieof32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieol.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieoq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieos.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieoy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iepb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieph32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iepn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iepr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iepy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieqg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieqm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieqs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieqw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iern32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iers32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iery32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iesg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iesi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iesk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iesn32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ietf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieth.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ietp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iett32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieuf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ievb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ievd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ievl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ievl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ievn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ievu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iewl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iewu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iexg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iexz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieyb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieye.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieyu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieyy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ieyz32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\iezj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iezk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iezx32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\iezy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipaj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipbb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipbc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipbd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipbg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipbi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipbm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipbq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipbs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipbu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipby.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipch.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipch32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipdl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipee32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipei32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipfa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipfl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipga32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipgm32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ipgt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipha.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iphc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iphz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipir32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipix32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipjd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipjf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipjl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipjm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipjv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipkk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipkk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipko.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipla.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iplb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iplg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipll32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iplw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iplz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipmf.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ipmr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipmz.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ipnt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipod32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipoi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipom.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ippi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ippk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipps32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ippw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ippz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipqa.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipqk32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ipqo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipqq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipqq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipqr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipqv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iprb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iprv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipsl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipsm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipso32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipsp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipsy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iptc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iptd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iptg32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\ipti.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iptj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iptl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iptl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\iptn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipuc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipue32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipuh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipui.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipun32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\iput.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipuv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipvr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipvu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipwr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipwv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipwx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipxi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipxj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipxm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipxs.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ipyd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipyi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipyl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipyu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipyy32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ipzb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipzd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipzi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipzk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipzm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipzs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\ipzz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\itnkl.txt:gdyzl -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\itnkl.txt:yrzpd -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\iynjw.txt:jbnrr -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\iynjw.txt:kabsb -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\iynjw.txt:rcslk -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\iynjw.txt:urphd -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\iynjw.txt:zaaiz -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\iynjw.txt:zwwyd -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\javaag.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaak32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaan32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaao32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaau32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javabh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javabn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javabt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javacd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javacf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javacs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javada32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javadd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javade.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javadg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javadj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javadp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaea32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaep32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaey32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javafj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javafk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javafk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javafm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javafp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javafr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaft.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javagk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javagu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javahi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javahp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaif32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaij32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javain32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javair32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javait32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaiv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javajk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javajt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javakm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaks32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javakt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaku.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javala32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javalb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javale.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javalf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaln.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javami32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javamp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javamr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javams32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javamt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javanb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javanj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javanq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javans.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javant32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaos.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaov.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaoz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javapk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javapn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javapr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javapr32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\javaps32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\javapv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javapz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaqh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaqn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javarb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javarg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javarh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javarq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javarr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javars32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaru32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javarw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javarw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javasa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javasd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javasf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javask.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javasv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javasw32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\javatg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javatn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javatq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javatz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaud.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaup.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaut.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javava32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javavk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javavl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javavl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javavu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javavv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javawf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javawg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javawo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaww32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaxg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaxh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaxh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaxu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javaxx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javayp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javayq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javayx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javazb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javazm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javazq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javazv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\javazx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\JCMkr32.INI:iryfi -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\JCMkr32.INI:jqzsw -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\JCMkr32.INI:mzspl -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\JCMkr32.INI:qmjtd -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\JCMkr32.INI:xcykb -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\kdexr.txt:jjllk -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\kdexr.txt:suemh -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\kgscl.txt:bugnu -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\kswbp.txt:cepot -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\MAGIX.INI:cxrgg -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\MAGIX.INI:llfre -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\MAGIX.INI:vgkel -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\MAGIX.INI:wvkqb -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\MAGIX.INI:yrwrj -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\MAXLINK.INI:gfecv -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\MAXLINK.INI:hydsk -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\MAXLINK.INI:ivate -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\MAXLINK.INI:wwlbb -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\MAXLINK.INI:ygsja -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\mdm.ini:gwksc -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\mdm.ini:iwpgo -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\mdm.ini:xziyj -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\mfcae.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcao32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcaq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcat32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcaw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcbh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcbp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcbz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcca32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfccd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfccn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcco32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfccu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcdb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcdh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcdo.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\mfcdp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcdq32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\mfcdx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcdx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcea.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcea32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfceh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcej32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcen32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfceq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfces.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\mfcet32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcex32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcez32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcfb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcfr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcft.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcgq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcgs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcgt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcgv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfcgy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfchi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\mfchu.exe -> Trojan.Agent.bi : Cleaned with backup

abmcwilliams

Post #10July 25, 2005, 6:58 PM UTC

C:\WINDOWS\nuhtl.txt:szvgo -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\nwpoq.txt:cmbtg -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\nwpoq.txt:vfkqk -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\ODBC.INI:fjglf -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\ODBC.INI:hhqva -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\ODBC.INI:mjwkr -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\ODBC.INI:waezu -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\ODBCINST.INI:jtvac -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\ODBCINST.INI:lqybg -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\ODBCINST.INI:pqrtz -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\ODBCINST.INI:uxazv -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\OEWABLog.txt:bmkqgm -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\OEWABLog.txt:etmrl -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\OEWABLog.txt:hecol -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\OEWABLog.txt:llvoo -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\OEWABLog.txt:pourg -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\OEWABLog.txt:yxqen -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\orun32.ini:awrfh -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\orun32.ini:eliyg -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\orun32.ini:lmvvi -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\orun32.ini:qaxqr -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\orun32.ini:rrllg -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\orun32.ini:udoyy -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\pcdlab.ini:hxass -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\pcdlab.ini:khpxb -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\pcdlab.ini:mqriw -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\pcdlab.ini:wjfrg -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\pcdlab.ini:yvczs -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\pcdlab.ini:zffhn -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\pnzgw.txt:fsfsa -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\pnzgw.txt:khtig -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\pnzgw.txt:uzdrn -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\PROTOCOL.INI:pnlrd -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\PROTOCOL.INI:rqkas -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\PROTOCOL.INI:sqxcd -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\PROTOCOL.INI:wogof -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\qmsmon.hlp:evlyo -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\qmsmon.hlp:fmnzq -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\qmsmon.hlp:misjj -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\qmsmon.hlp:oqnrw -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\qmsmon.hlp:pmhvw -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\qmsmon.hlp:pvkkb -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\qmsmon.hlp:ttqjw -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\qmsmon.hlp:xchlq -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\qmsmon.hlp:ykthg -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\rgnbs.txt:pcary -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\rsuoy.txt:fcwjp -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\rsuoy.txt:gggrv -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\SchedLgU.Txt:kkizq -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\SchedLgU.Txt:msara -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\SchedLgU.Txt:nnvvd -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\screen.html:dkcnt -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\screen.html:kmkca -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\sdkaj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkas32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkbe.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkbq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkbv32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\sdkbv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkcp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkcr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkct32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkcx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkcz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkdb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkde.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkdg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkdh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkdk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkdl.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\sdkdm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkef.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkef32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkeh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkek32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdker32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkes32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\sdkeu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkff.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkfk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkfn.dll -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\sdkfq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkfx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkgi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkgn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkgt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkgt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkha.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkhd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkhy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkia32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkib32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkic32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkif.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkii.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\sdkir32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkjd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkjp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkjr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkjs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkka32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkkk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkkr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdklb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdklc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdklf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdklr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkmb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkmf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkna.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdknc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdknd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdknh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdknh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdknk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkoa.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkoc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkod.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkoe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkoq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkor32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkpd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkpf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkpi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkpt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkpv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkpx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkpz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkqf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkql.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkqv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkqw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkrb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkrb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkrd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkri32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkrs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkru32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkrv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdksc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdksi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdksq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdktm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkty32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkub32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkue.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkug32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkui.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkul.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkum.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkut32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkuv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkvf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkvq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkvx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkwj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkwj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkwl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkwo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkxh.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\sdkxk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkxp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkye32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkyf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkyp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkyq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkyw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sdkzq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\SIERRA.INI:nbdvc -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\SIERRA.INI:qutmh -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\SIERRA.INI:xpygz -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\SIERRA.INI:zpfba -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\smscfg.ini:bimxo -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\smscfg.ini:hrpqm -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\smscfg.ini:mrtpp -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\smscfg.ini:nbffk -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\smscfg.ini:omogq -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\smscfg.ini:yngrw -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Swift3D.INI:dmplz -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Swift3D.INI:ihagl -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Swift3D.INI:pukvw -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Swift3D.INI:ssbjj -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Swift3D.INI:zbutp -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\sysae32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysai32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysaj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysan32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysar.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysbn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysbq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syscg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysck32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syscm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syscu32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\sysde32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysdn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysdr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysds32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syseb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysel32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\syseo.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\sysfb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysfj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysfk32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\sysfl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysfo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysfp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysfq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syshh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syshm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syshr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syshx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syshy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysiq32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\sysiq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysis32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysit.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\sysiv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysiw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysiy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysjc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysjk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysjo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysjq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysjv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syskd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syskl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysld32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysle32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syslh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysll32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syslw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysmb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysmd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysmo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysmt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysnc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysnm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysnw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysol32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysoo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysor.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syspb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syspc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syspd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syspg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syspj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syspm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syspo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysqf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysqi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysrr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysru32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysrv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysry.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syssl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysso.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32:epaa.dll -> TrojanDownloader.Small.azk : Cleaned with backup C:\WINDOWS\system32\addai32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addaj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addax.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addbd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addbi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addbr32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\addcc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addcd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addce32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addck32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addcn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\adddm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addeu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addfa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addfb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addfc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addfk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addfn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addft32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addfy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addga.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addgb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addgf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addgm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addgo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addhf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addhs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addhw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addia.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addic32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addim.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addiq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addir.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addit.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addit32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addjd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addjj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addjk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addjx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addkb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addke.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addkw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addlc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addld32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addle32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addlg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addlj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addls.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addly32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addlz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addmb32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\addme32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addmi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addmu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addnt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addnw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addnw32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\addnx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addof.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addol.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addoo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addox.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addpd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addpe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addpi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addpl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addql32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addqr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addra.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addri.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addrs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addrt.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\addrz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addsh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addsn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addsq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addsq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addsx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addtc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addtf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addtk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addtq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\adduc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\adduh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addum.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\adduo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addup.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\adduz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addve.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addve32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addvg32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\addvm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addvo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addvr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addvt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addvt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addvy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addwc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addwo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addwq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addwu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addwv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addwz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addwz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addxm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addxp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addxr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addxz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addyt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addyu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addzr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addzv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\addzw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiab.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiae32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiaf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiai32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiaj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiaq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiau.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apibp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apicf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apicg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apich32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apicm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apicp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apicr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apict32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apidb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apidg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apidh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apieb.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\apied32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\apiei32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiej.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apieo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apies32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiew32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiex32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apifa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apifc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apife.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiff32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apifg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apifk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apifl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apifv.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\apifw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiga.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apigm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apigo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apigs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apigy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiha32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apihy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiic.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiic32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiif.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiii.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiij.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apijd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiji.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiki.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apikk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apikp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiky.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apilf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apimf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apimg.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\apimi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apimm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apimv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apimy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apine.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apinm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apinq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apinz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiob32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiol32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apios32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apipd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apipq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apips32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apipy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiqd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiqk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiql.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiqm32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\apiqs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apirb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apirc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apirg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apirp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiry.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apisc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apish32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiso.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apisy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apitc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apitl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apitm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apits.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apits32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apitt32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\apitx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiub.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiug32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiuo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiut.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiut32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiux.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiva.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apivc.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\apive32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apivz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiwb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiwe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiwr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiwz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apixc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apixe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apixh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apixv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apixw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiyd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiyk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apiyk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apizd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apize.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apizu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appaa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appaj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appas.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appax.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appbf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appce.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appcp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appcw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appdc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appde.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appdm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appdp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appdu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appeb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apped32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appee32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appej32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appeq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apper.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apper32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appff.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appfl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appfr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appga.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appgc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appgl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appgl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appgn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appgs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appgu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appgz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apphm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apphn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appho.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appir.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appix.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\appix.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appjm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appjo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appjr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appkb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appkl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appko32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appkw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\applb.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\applg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\applo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appmd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appmm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appmo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appms32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appna32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appnb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appnr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appoq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appoq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appow.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apppb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apppb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apppe.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apppg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apppq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apppu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appqj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appqq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appqr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appqu.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\appqy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apprj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apprj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appro32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appsc.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\appsg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appsg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appsj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appsl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appsp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appst.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appsv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apptb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apptj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apptq.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\apptq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apptr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\apptu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appud.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appue.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appug.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appum.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appuo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appur32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appvc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appvk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appvm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appvu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appwj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appxc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appxn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appxy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appxz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appyf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appyi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appyk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appys32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appyt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appzf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appzi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appzj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appzm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appzo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appzp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appzu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appzx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\appzz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlaa.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlah.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlao32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlap.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlaz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlbf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlbg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlbu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlbv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlbw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlce32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlcw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlcy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atldu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlec32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atled32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlee.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlep32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atler.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atley32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlfb.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\atlfi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlfl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlgf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlgr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlha32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlhd.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\atlhl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlid.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlie32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlig.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\atliv.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\atliz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlja32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atljd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atljf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atljl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atljp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlju32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atljz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlkd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlkw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlla.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atllh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atllk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atllp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atllq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlly32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atllz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlmx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlnf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlnj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlnp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlnr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atloa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlor.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlpj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlqi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlqj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlqr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlrc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlrr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlrt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlse32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlsi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlsq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlsx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlsz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atltq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atltv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlub32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\atluc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlul.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlum32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlwe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlwf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlwj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlwo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlwt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlwz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlxe.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlxg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlxj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlxm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlxx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlxz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlyk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlyl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlyn.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\atlyn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlyn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlyz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlzf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlzg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlzp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlzq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlzr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\atlzt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\crac.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\crae32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\crah.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\crak.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\cral.exe -> T

abmcwilliams

Post #11July 25, 2005, 7:02 PM UTC

C:\WINDOWS\system32\javaac32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaad.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaaf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaan32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaas.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaax32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaaz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javabg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javabn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javabn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javabq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javacc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javacd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javacg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javach.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaci32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javacl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaco.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javacs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javact32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javacz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javadb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javadc.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\javadl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javadn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javadp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javadr32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\javadx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaee.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaen.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaeu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaez.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javafd.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\javafn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javafn32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\javafw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaga.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javagh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javagl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javagm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javago32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javagt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javahb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javahd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javahi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javahj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaie.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaie32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaih32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javail.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javain32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaiq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javait32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javajb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javajc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javajd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javajh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javakg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaki.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javakm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javakw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javald.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javale.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javali32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javalq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javamf.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\javamp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javamv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javamw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javanb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javanm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javant32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\javanv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javanv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaod.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaok32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaot32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javape32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javapi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javapm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javapr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaqd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javarc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javarx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javase.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javasf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javash32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javasl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javasp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javatd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javati32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javatj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javatu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaty32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javauh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javavs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javavu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javavw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javavx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javavy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javavz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javawf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javawq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaws.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javawv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javaxl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javayg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javayu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javayx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javazc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javazd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javazh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javazr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javazs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javazt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\javazv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcad32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcak32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcal32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcam32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcar32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcau.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcba32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcbc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcbi.dll -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\mfcbq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcci32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfccj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcck.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfccm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfccp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcct.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfccw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfccz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcde.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcdw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcea32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfceh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfces.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcfb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcfe.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcfm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcft32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcfv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcgl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcgn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfchp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcip.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfciv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcjg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcji32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcjk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcjn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcjx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfckc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfckp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcle32.dll -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\mfcli32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfclm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcln.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\mfclw32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\mfcmg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcms.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcng32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcnh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcni.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcnk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcnp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcnp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcob32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcoe.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcoi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcol.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\mfcom32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcoo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcoq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcot32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcow32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcph32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcqk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcqn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcqr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcqw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcrd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcrf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcrj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcrx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcsg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcsn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcsp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcss32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcsx.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\mfctc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfctl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfctq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfctz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcuz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcvm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcvp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcvs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcvw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcvy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcwc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcwi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcwj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcwl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcwo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcwv32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\mfcww.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcxe.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcxk32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\mfcxl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcxz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcya.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcyr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcys.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcyx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcyz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfcze32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mfczt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msag32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msah32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msaj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msax.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msbf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msbi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msbj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msbj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msbx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msco.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\mscp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mscv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mscx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mscy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msda32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msdm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mseb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msel.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mseq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msew32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msez.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msfc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msff32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msfi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msfk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msfo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msfp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msfw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msfx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msfz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msgi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msgn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msgt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msgt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msgy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mshd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mshl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mshu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msik.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msiq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msiw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msiy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msjc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msjg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msji32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msjr32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\msjv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msjw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mskb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mskl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mskq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mskw32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\mslc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msld.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\mslx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msly32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msmj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msmr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msmy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msna32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msni32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msnj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msnw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msog.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msoj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msok.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mson32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msop.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msox32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mspa.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\mspb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mspx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mspy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msqd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msqo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msqp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msqy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msrc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msrg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msrm.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\msrm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msrr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msrt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mssr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mssz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msta32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mste.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mstv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msuc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msug32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msuq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msvf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msvn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msvs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mswa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mswi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mswp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mswx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mswz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msxd32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\msxp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msxs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msyi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msyl32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\msyw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\msza32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mszd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mszf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mszl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mszv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\mszz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netaa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netag.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\netag.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netav.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netaw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netax.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netbi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netbp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netbz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netcc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netcg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netcv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netcx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netdh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netdi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netea.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netec.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netec32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\neteo32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\netep.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netff32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netfi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netfk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netfr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netfy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nethe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netht32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nethz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netib.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\netie32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netik32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netiq32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\netiq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netis32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netjb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netjc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netje32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netjm.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\netjo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netjt32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\netjt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netjz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netka32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netkf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netkg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netkk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netkl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netkn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netkx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netlb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netld.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netln32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netlt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netlx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netma32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netmf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netmm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netmo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netmt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netmu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netnh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netnl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netnr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netnu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netor32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netoy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netpk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netpy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netpy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netqo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netqp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netqz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netrc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netrk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netrp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netrr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netsy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netta32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nettc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nettf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netts.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netuc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netuo.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\netup32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netuq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netuv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netuz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netvc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netvg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netvh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netvj.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\netvq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netvz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netwa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netwh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netwk32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\netwq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netwv.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\netwy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netxa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netxi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netxi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netxq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netxv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netyo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netzk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\netzr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntaa.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntab.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntah.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntaj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntam32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntbj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntbl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntby32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntcd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntcj32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\ntcm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntdf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntdg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntdi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntdu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntea.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nteb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntef32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntej32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nteo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntfu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntgf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntgp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nthf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nthk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nthl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nthu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntie.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntij.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntim32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntin32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntio32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntje.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntjf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntjh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntjm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntjo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntka32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntkb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntkc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntke32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntki32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntks32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntkt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntky32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntld32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntlg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntlk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntmr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntmz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntna32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntnd32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\ntnh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntnh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntnm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntnq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntof32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntoo32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\ntos32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntoy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntpf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntpi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntpk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntpq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntpq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntpx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntqa.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntqf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntqf32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\ntqm.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\ntqm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntqx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntqy32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\ntri.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntsi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntst32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\ntsu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntsx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntto.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nttp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\nttu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntud.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntug32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntui32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntuk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntuy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntvn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntvx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntwa32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\ntwb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntwd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntwp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntww32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntxb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntxc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntxk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntxo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntxu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntxz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntyb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntyz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntzb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntzj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntzr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntzw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntzw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\ntzz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkaa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkax.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkbg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkbh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkbi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkbw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkct32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkcv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkcy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkdr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkdv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkdy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkee.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkeg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkek.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkel32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdken.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkff32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkge32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkgk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkgo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkgq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkgu.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\sdkhn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkhr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkht.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkhu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkhx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkid.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\sdkih32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkim32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\sdkiz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkje32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkjo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkjs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkka32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkkb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkkc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkkg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkkp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkkq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkll.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdklo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdklz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkmj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkmk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkml.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkmm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdknq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdknu.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\sdkob.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkob32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkoc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkoh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkom32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkoz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkpj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkpk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkps.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkpw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkpw32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\sdkqb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkqc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkqm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkqx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkre32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdksc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdksh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdksq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkss32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdksz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkto.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkuc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkuf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkui.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkuj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkup.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkuq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkut.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkuy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkuz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkvf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkvm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkvy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkwn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkxf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkxk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkxk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkxn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkxo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkxt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkxx32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\sdkyd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkyg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkyh32.dll -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\sdkyp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkzh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkzn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkzt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sdkzw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysaa.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysaq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysar.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysbx32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\sysbz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syscn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syscq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syscs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syscw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syscx32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\syscx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syscz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysdb32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\sysdi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysea.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysep32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syses32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysfi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysfj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysfo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysfr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysfr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysfy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysgg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysgh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysgy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syshb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syshf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysho.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syshx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysib.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysic32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\

abmcwilliams

Post #12July 25, 2005, 7:05 PM UTC

C:\WINDOWS\system32\sysif32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysjd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysjq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysjw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysjz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syskd32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\syskk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysld32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syslq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syslu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysmi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysmj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysmk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysmm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysmo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysmt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysne.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysnf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysnh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysnk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysnk32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\sysnm32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\sysno.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysnp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysns.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\sysns.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysoo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syspb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syspe.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syspg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysps32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syspx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syspy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syspz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysqc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysqh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysqn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysqq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysqt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysrd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysrm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysrn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysse.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syssi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syssp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syssr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syssv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\systs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\systu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysug.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysuk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysus32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysuu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysuz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysvn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysvt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syswi32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syswl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syswp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syswp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syswq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysye.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysyi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysys32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysyu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysyx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\sysza32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syszl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syszr.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syszs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syszt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\syszu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winab32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winah32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winak.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winar.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winas.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winax.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winbf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winbp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winbq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winbw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\wincu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\windx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\windy32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\winel.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\wineq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\wineq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winev.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winfd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winfe.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\winff.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winff32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winfi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winfq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\wingb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\wingl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\wingy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winhk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winhm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winhy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winie32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\winie32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winif.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winjb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winjp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winjs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winjw.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\winjy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winkj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winla32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winlc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winlg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winlh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winlp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winlv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winly.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winmb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winmf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winmf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winmq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winmr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winms32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winmx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winmy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winmz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winne32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winnf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winng32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winnh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winnx.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winnz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winod.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winol.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winon32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winos32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winpa.dll -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\system32\winpd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winpe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winpk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winpr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winpu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winpv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winpy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winqf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winqm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winqn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winqv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winqw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winqz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winra32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winrc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winrj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winrs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winsb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winsd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winsj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winsk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winsu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\wintt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winty32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winuj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winuk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winut32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winva.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winve32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winvk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winvm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winvu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winwb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winwb32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\winwk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winwq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winws.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winwu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winwz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winxc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winxe.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winxk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winxl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winxr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winxu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winya32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winyf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winyk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winym32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winzf.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\system32\winzf.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winzy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\system32\winzz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\systq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\systy32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysum32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysuz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysva32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysve.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysvh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysvo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysvq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syswf32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syswg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysxa32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysxs32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysya.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysyg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysyi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysyk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysys32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\sysyz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syszn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syszv.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\syszv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\syszz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\tmupdate.ini:aeped -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\tmupdate.ini:aovrf -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\tmupdate.ini:cnipd -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\tmupdate.ini:efcjgq -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\UPGRADE.TXT:kuxem -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\UPGRADE.TXT:phfcdk -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\UPGRADE.TXT:rjzcd -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\UPGRADE.TXT:wgvpia -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\uwvxh.txt:dgdud -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\uwvxh.txt:pkpam -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\uzznr.txt:abdxh -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\uzznr.txt:aoxyf -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\uzznr.txt:padyq -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\vb.ini:difum -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\vb.ini:dqgjc -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\vb.ini:elvss -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\vb.ini:gmduh -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\vb.ini:gvkiv -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\vb.ini:hhuet -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\vb.ini:twmdy -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\vb.ini:xghft -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\vbaddin.ini:bpwveg -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\vbaddin.ini:litla -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\vbaddin.ini:tbxsv -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\vcrgt.txt:udkvz -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Vicamavi.hlp:alasi -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Vicamavi.hlp:dgsoz -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Vicamavi.hlp:ermoc -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Vicamavi.hlp:lvsps -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Vicamavi.hlp:nfcjq -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Vicamavi.hlp:qvpmx -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Vicamavi.hlp:ynfge -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Vicamtwn.hlp:gkqfj -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Vicamtwn.hlp:isnpj -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Vicamtwn.hlp:lcghe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Vicamtwn.hlp:ofrcp -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Vicamtwn.hlp:ohofr -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Vicamtwn.hlp:yjzor -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Viview32.hlp:hikyq -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Viview32.hlp:wkwep -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\VORTEX.INI:egxzku -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\VORTEX.INI:zlblh -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\VORTEX2.INI:gtpgy -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\VORTEX2.INI:hfvqh -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\VORTEX2.INI:ryzbs -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\VORTEX2.INI:wpvho -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\WALL.HLP:kpvfv -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\WALL.HLP:mzvub -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\WALL.HLP:rwsot -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\WALL.HLP:stqaf -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\wfo.exe -> Trojan.Pakes : Cleaned with backup C:\WINDOWS\winab32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winag32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winao32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winax32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winaz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winba.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winbe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winbk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winbo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winbr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winbx32.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\winbz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wincb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wincu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wincu32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\windc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\windl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\windm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\windw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wineg32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winei32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winen32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winez.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winfl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winfr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winft32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wingb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wingc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wingn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wingo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winhc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winhe32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winhn.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winhq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winit32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winiu.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winiv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winiw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winiz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winja32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winjt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winkh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winki32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winkm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winko32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winkw.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winln32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winlp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winmc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winmd.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winnn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winnq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winnt.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winoc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winoh.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winoo32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winoq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winos32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winow32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winox32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winph32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winpk.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\winpt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winpz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winqj.dll -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\winqk.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winqz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winrc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winrd32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winrg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winrh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winrk32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winrn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winrp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winrq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winrs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winsi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winsz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winsz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winta32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wintb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winte32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wintg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winth.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wintj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wintl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wintm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winto.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\wints.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winuq.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winuv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winuv32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winux.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winvb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winvc32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winvi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winvj32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winvl.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winvl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winvm.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winvp.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winvr32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winwc.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winwf32.exe -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\winwj.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winwl32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winwm32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winwn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winxg.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winxn32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winxo.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winxx32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winxy.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winyb.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winyt32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winyw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winyz.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winyz32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winzb32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winzh32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winzi.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winzp32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winzq32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winzs.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winzv.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\winzw32.exe -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\xbcuh.txt:fumhl -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\xbcuh.txt:grclg -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\xbcuh.txt:thakm -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\xtrpv.txt:czegep -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\xtrpv.txt:jsukk -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\xzbgz.txt:rfxjj -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\xzbgz.txt:uqaem -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Yulia.scr:hryoo -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\Yulia.scr:lsiok -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\Yulia.scr:oojgi -> TrojanDownloader.Agent.bc : Cleaned with backup C:\WINDOWS\zomep.txt:bhehr -> TrojanDownloader.Agent.bq : Cleaned with backup C:\WINDOWS\zomep.txt:gthqj -> TrojanDownloader.Agent.bq : Cleaned with backup ::Report End Whats the verdict Doc? is the prognosis any good?

alsocom

Post #13July 26, 2005, 1:15 AM UTC

Very nice work so far on this difficult infection.

Step#1:Restore Deleted System Files

Now we need to see if we need to restore some deleted files:Please check for the following files using the Windows Search Engine:

control.exe
rundll32.exe
wmplayer.exe
msconfig.exe
notepad.exe
shell.dll
SDHelper.dll

If any are missing or not working properly then you can download new copies from
Merijn's Files and following the instructions at that site to have them where they belong for your OS.

If you are having any difficulty with Notepad, please go to Merijn's Files and choose 'Windows Files' from the menu on the left hand side of the page. Then choose 'Notepad' from the list and download it to C:\Windows and C:\Windows\System32
Download the Hoster from here. Press "Restore Original Hosts" and press "OK". Exit Program. This will restore the original deleted Hosts file.
This infection often deletes some system files that need to be replaced. The most frequent one it deletes is shell.dll in Win2K or XP. In XP there are two copies of this file, one in Windows (WINNT) and one in Windows\System32. It does not delete the one in Windows\System so it does not affect Win9x/ME. If you find it missing, please copy the shell.dll from c:\windows\system32\dllcache into both \Windows (WINNT) and Windows\System32 .
The other system file which is most frequently deleted is control.exe. Please check to make sure that you have this file and it is the correct size. If not Please check for the existence of this file by going to to Merijn's Files (sdhelper) and examine where the file should be for your operating system. If the file is missing then download the appropriate file and place it in the proper place according to the information at this website. The control.exe is more often deleted in Win9x/ME.
If you have Spybot S&D installed you will also need to replace one file. Go here: Merijn's Files (sdhelper) and download SDHelper.dll. Copy the file to the folder containing you Spybot S&D program (normally C:\Program Files\Spybot - Search & Destroy). Then click Start > Run > regsvr32 "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll" and press the OK button

Step#2:Download CCleaner
Download CCleaner from here to clean temp files from your computer.

Double click on the file to start the installation of the program.
Select your language and click OK, then next.
Read the license agreement and click I Agree.
Click next to use the default install location. Click Install then finish to complete installation.
Double click the CCleaner shortcut on the desktop to start the program.
Click Options < Advanced and uncheck "Only delete files in Windows Temp folders older than 48 hours".
Click Run Cleaner to run the program.
After it has completed it's process, click Exit.

Caution : It is not recommended to use the 'Issues' tab as it is known to find legitimate items.

Step#3:Complete An Online AntiVirus Scan

Run an online antivirus scan at:

Trend Micro-Housecall Online AV

Reboot

Step#4:Find the Infected Files On Your Hard Drive

Navigate to C:\Windows
look for files that were created at the approximate time and date as the infection occurred.
look for those that end in exe, DAT and DLL and if found, right click on the file and check properties. Legitimate files should be copyrighted by Microsoft
if you determine they are bad files, right click on them and choose delete
Navigate to C:\Windows\System or C:\Windows\System32 (depending on the OS) and repeat each of the above steps to check for those ending in exe, DAT and/or DLL
if the above files will not delete, then make a new folder on your desktop by right clicking on the desktop and choosing New > Folder. Name the folder CWS Files.
Move the files from C:\Windows or C:\Windows\System or C:\Windows\system32
to the new folder CWS Files.

Step#5:Scan And Post a New HijackThis Log

1. Scan again with HijackThis

2. POST your log file using Add Reply to see what is left to fix.

abmcwilliams

Post #14July 29, 2005, 4:42 PM UTC

Hi,
another busy week, but here's the hijackthis log……
How does it look?

cheers,

alasdair

Logfile of HijackThis v1.99.1
Scan saved at 17:36:10, on 29/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Apps\ActivBoard\nhksrv.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Iomega\AutoDisk\ADService.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
C:\Apps\ActivBoard\MMKeybd.exe
C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Apps\ActivBoard\TrayMon.exe
C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe
C:\Apps\ActivBoard\OSD.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Gluz\Main.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\ali\My Documents\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer brought to you by Planetis
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [Deskup] C:\Program Files\Iomega\DriveIcons\deskup.exe /IMGSTART
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Opware12] "C:\Program Files\ScanSoft\OmniPagePro12.0\Opware12.exe"
O4 - HKLM\..\Run: [BCWipeTM Startup] "C:\Program Files\Jetico\BCWipe\BCWipeTM.exe" startup
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Update Service] C:\WINDOWS\SoftwareDistribution\Download\5ea54eecb8f22acf9bd02bc36e049bf3\update\update.exe /startup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Free WebSite Tools.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.planetis.com/uk
O15 - Trusted Zone: http://www.erdreja.com
O15 - Trusted Zone: http://www.facemeet.com
O15 - Trusted Zone: www.live365.com
O15 - Trusted Zone: www.msn.com
O15 - Trusted Zone: www.passport.com
O15 - Trusted Zone: www.trendmicro.com
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by101fd.bay101.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.my-etrust.com/Support/PestScanner/pestscan.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotion…ctor/WebAAS.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - https://a248.e.akamai.net/f/248/5462/2h/www…ol/SymDlBrg.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/insaniqua…aploader_v6.cab
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Program Files\Iomega\AutoDisk\ADService.exe

alsocom

Post #15July 29, 2005, 7:06 PM UTC

Your new log appears clean.

Reset and Re-enable your System Restore to remove bad files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected.)

1. Right-click My Computer, and then click Properties.
2. On the System Restore tab, put a check mark in the 'Turn Off System Restore' check box.
3. Click OK, and then click Yes.
4. Restart the computer.
5. Repeat steps 1 - 2, this time clearing the box beside 'Turn Off System Restore', click 'OK'.

I suggest that you get these programs to help keep the computer clean:

ZoneAlarm - Free firewall program if you currently are not using one.
Spyware Blaster - Blocks bad ActiveX items from installing on your computer. Spyware Blaster runs silently in the background.
ie-spyad - Puts over 12,000 bad URLs into your restricted sites for Internet Explorer.
Google Toolbar - Blocks many unwanted pop-ups in Internet Explorer.

Update these regularly.

You may also want to read "How did I get infected in the first place" to learn how to better secure your computer.

Be sure to keep Windows and your Anti-virus updated.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

numerous problems, trekblue + others, persistent

✨ Ask AI

Ask AI