What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Reduction in Performance

12 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1 last edited
i'll keep it short and simple. clicked a link in aim.. it installed b.exe in my windows folder. Sluggish performance even before then. Runs spybot and mcafee everynight no detection. Heres my log:
Logfile of HijackThis v1.97.7
Scan saved at 11:57:02 PM, on 10/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\PROGRA~1\McAfee.com\Agent\mcregwiz.exe
C:\Program Files\Common Files\AOL\Triton\ee\aolsoftware.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Muiltmedia keyboard utility\1.1\KbdAp32A.exe
c:\program files\mcafee.com\shared\mghtml.exe
c:\program files\common files\aol\triton\ee\aim6.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Dan's Browser
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Muiltmedia keyboard utility\1.1\MMKEYBD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\mcregwiz.exe /autorun
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [AIM] C:\Program Files\aim\aim.exe -cnetwait.odl
O4 - Global Startup: svchost.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: AIM (HKLM)
O16 - DPF: ActiveGS.cab - http://www.virtualapple.org/activegs.cab
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} (Microsoft Office Template and Media Control) - http://office.microsoft.com/templates/ieawsdc.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/get/shock…director/sw.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175/7d/ru…cat-no-eula.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6…922/wmv9VCM.CAB
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1157115115067
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {97BB6657-DC7F-4489-9067-51FAB9D8857E} (CWebLaunchCtl Object) - https://support.gateway.com/eSupport/static…/weblaunch2.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/…8078.6760648148
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa…ash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F9BAC174-2B12-444F-85F5-BF5B893E9B1D}: NameServer = 209.143.0.10,209.143.19.245
O17 - HKLM\System\CS2\Services\Tcpip\..\{F9BAC174-2B12-444F-85F5-BF5B893E9B1D}: NameServer = 209.143.0.10,209.143.19.245
O17 - HKLM\System\CS3\Services\Tcpip\..\{F9BAC174-2B12-444F-85F5-BF5B893E9B1D}: NameServer = 209.143.0.10,209.143.19.245

Anything you can find..anything you want me to download i'm down. Also i have a lot of mcafee startup do i need all of them?
-Dan
Post #2
snostorm

Sorry for the delay :(

You are running and older version of Hijackthis. Please go Here

and download the newer version and delete the older version.

Then rerun Hijackthis and post a fresh hijackthis log

thanks
Post #3
sorry about that..i downloaded HJT a few weeks ago..musta been an older version still on the site…heres the fresh new log
Logfile of HijackThis v1.99.1
Scan saved at 3:12:34 PM, on 10/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Muiltmedia keyboard utility\1.1\KbdAp32A.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\PROGRA~1\McAfee.com\Agent\mcregwiz.exe
c:\program files\mcafee.com\shared\mghtml.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\AOL\Triton\ee\aolsoftware.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
c:\program files\common files\aol\triton\ee\aim6.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Hijack This\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Dan's Browser
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Muiltmedia keyboard utility\1.1\MMKEYBD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\mcregwiz.exe /autorun
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - Global Startup: svchost.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\aim\aim.exe
O16 - DPF: ActiveGS.cab - http://www.virtualapple.org/activegs.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175/7d/ru…cat-no-eula.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1157115115067
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {97BB6657-DC7F-4489-9067-51FAB9D8857E} (CWebLaunchCtl Object) - https://support.gateway.com/eSupport/static…/weblaunch2.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F9BAC174-2B12-444F-85F5-BF5B893E9B1D}: NameServer = 209.143.0.10,209.143.19.245
O17 - HKLM\System\CS2\Services\Tcpip\..\{F9BAC174-2B12-444F-85F5-BF5B893E9B1D}: NameServer = 209.143.0.10,209.143.19.245
O17 - HKLM\System\CS3\Services\Tcpip\..\{F9BAC174-2B12-444F-85F5-BF5B893E9B1D}: NameServer = 209.143.0.10,209.143.19.245
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - Network Associates, Inc. - (no file)
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - Network Associates, Inc. - (no file)
O23 - Service: mcupdmgr.exe - Network Associates, Inc. - (no file)
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
Post #4
snostorm

Well done. :) The older version is still available but the newer version shows us more on XP

Not much showing up in your log. Let's do this

Please download ATF Cleaner by Atribune.Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

This will remove all files from the items that are checked so if you have some cookies you'd like to save. please move them to a different directory first.

Next Run an online virus scan called Kaspersky from HERE.1. Click on "Kaspersky Online Scanner"
2. A new smaller window will pop up. Press on "Accept". After reading the contents.
3. Now Kaspersky will update the anti-virus database. Let it run.
4. Click on "Next"->>"Scan Settings", and make sure the database is set to "extended". And check both the scan options. Then click OK.
5. Then click on "My Computer". And the scan will start.
6. Once finished, save a log as ".txt" to the desktop.
Copy and post the results of the Kaspersky Online scan

thanks bamajim
Post #5
Yummy…this one is nice and long.. i've knows of the xzxzxz.exe for a while never been able to remove it because i couldn't find it. Thanks for the help bamajim ——————————————————————————- KASPERSKY ONLINE SCANNER REPORT Friday, October 13, 2006 1:26:11 AM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 13/10/2006 Kaspersky Anti-Virus database records: 231349 ——————————————————————————- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: A:\ C:\ D:\ E:\ F:\ G:\ Scan Statistics: Total number of scanned objects: 97233 Number of viruses found: 2 Number of infected objects: 253 / 0 Number of suspicious objects: 0 Duration of the scan process: 01:56:43 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\WDLog-05012006-210432.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Network Associates\BOPDATA\_Date-20061012_Time-150007187_EnterceptExceptions.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Network Associates\BOPDATA\_Date-20061012_Time-150007187_EnterceptRules.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Network Associates\Common Framework\Db\Agent_DANS-COMPUTER.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Network Associates\Common Framework\Db\PrdMgr_DANS-COMPUTER.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Network Associates\VirusScan\AccessProtectionLog.txt Object is locked skipped C:\Documents and Settings\All Users\Application Data\Network Associates\VirusScan\BufferOverflowProtectionLog.txt Object is locked skipped C:\Documents and Settings\All Users\Application Data\Network Associates\VirusScan\OnAccessScanLog.txt Object is locked skipped C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe Object is locked skipped C:\Documents and Settings\Dan\Application Data\Mozilla\Firefox\Profiles\doviq01m.default\cert8.db Object is locked skipped C:\Documents and Settings\Dan\Application Data\Mozilla\Firefox\Profiles\doviq01m.default\googlesafebrowsing.db Object is locked skipped C:\Documents and Settings\Dan\Application Data\Mozilla\Firefox\Profiles\doviq01m.default\history.dat Object is locked skipped C:\Documents and Settings\Dan\Application Data\Mozilla\Firefox\Profiles\doviq01m.default\key3.db Object is locked skipped C:\Documents and Settings\Dan\Application Data\Mozilla\Firefox\Profiles\doviq01m.default\parent.lock Object is locked skipped C:\Documents and Settings\Dan\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Dan\Desktop\Media\My Torrents\_\xzxzxzxzxzxz.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\Documents and Settings\Dan\Local Settings\Application Data\AOL\UserProfiles\1157488263\snostorm3759\cls\common.cls Object is locked skipped C:\Documents and Settings\Dan\Local Settings\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked skipped C:\Documents and Settings\Dan\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Dan\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Dan\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{7C4669BF-9D75-4B50-9A7C-C820108E1853} Object is locked skipped C:\Documents and Settings\Dan\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Dan\Local Settings\History\History.IE5\MSHist012006101220061013\index.dat Object is locked skipped C:\Documents and Settings\Dan\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Dan\ntuser.dat Object is locked skipped C:\Documents and Settings\Dan\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127390.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127391.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127392.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127393.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127394.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127395.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127396.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127397.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127398.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127399.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127400.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127401.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127402.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127403.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127404.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127405.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127406.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127407.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127408.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127409.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127410.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127411.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127412.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127413.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127414.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127415.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127416.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127417.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127418.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127419.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127420.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127421.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127422.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127423.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127424.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127425.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127426.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127427.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127428.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127429.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127430.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127431.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127432.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127433.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127434.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127435.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127436.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127437.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127438.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127439.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127440.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127441.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127442.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127443.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127444.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127445.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127446.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127447.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127448.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127449.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127450.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127451.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127452.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127453.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127454.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127455.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127456.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127457.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127458.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127459.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127460.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127461.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127462.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127463.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127464.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127465.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127466.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127467.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127468.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127469.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127470.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127471.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127472.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127473.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127474.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127475.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127476.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127477.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127478.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127479.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127480.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127481.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127482.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127483.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127484.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127485.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127486.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127487.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127488.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127489.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127490.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127491.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127492.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127493.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127494.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127495.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127496.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127497.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127498.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127499.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127500.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127501.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127502.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127503.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127504.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127505.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127506.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127507.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127508.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127509.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127510.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127511.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127512.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127513.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127514.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127515.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127516.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127517.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127518.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127519.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127520.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127521.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127522.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127523.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127524.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127525.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127526.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127527.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127528.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127529.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127530.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127531.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127532.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127533.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127534.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127535.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127536.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127537.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127538.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127539.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127540.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127541.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127542.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127543.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127544.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127545.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127546.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127547.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127550.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127551.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127552.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127553.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127554.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127555.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127556.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127557.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127558.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127559.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127560.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127561.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127562.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127563.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127564.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127565.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127566.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127567.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127568.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127569.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127570.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127571.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127572.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127573.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127574.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127575.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127576.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127577.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127578.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127579.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127580.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127581.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127582.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127583.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127584.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127585.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127586.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127587.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127588.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127589.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127590.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127591.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127592.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127593.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127594.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127595.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127596.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127597.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127598.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127599.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127600.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127601.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127602.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127603.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127604.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127605.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127606.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127607.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127608.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127609.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127610.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127611.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127612.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127613.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127614.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127615.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127616.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127617.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127618.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127619.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127620.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127621.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127622.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127623.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127624.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127625.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127626.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127627.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127628.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127629.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127630.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127631.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127632.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127633.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127634.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127635.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127636.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127637.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127638.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127639.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127640.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127641.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1412\A0127642.exe Infected: Trojan-Dropper.Win32.VB.lu skipped C:\System Volume Information\_restore{CD2F0BC6-CC05-44EB-BA2E-69D2A5CA70FD}\RP1415\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\34d1f79bec5b8b072a5ef34c41d715ce\BIT9.tmp Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped C:\WINDOWS\system32\drivers\sptd7165.sys Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\STOPzilla.exe Infected: not-a-virus:AdWare.Win32.AdURL.a skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed.
Post #6
snostorm

Your welcome

First Rerun Hiajackthis (scan only) And place checks beside the following entriesR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
Close all other open windows except Hijackthis and Select "Fix checked"

Next Using Windows Explorer(Right click on "Start," select "Explore," and you will see the "tree' of file folders in the left side of the window. Click on the "+" next to any folder name to expand its contents)
Locate and delete the following folderC:\Documents and Settings\Dan\Desktop\Media\My Torrents
Locate and delete the following fileC:\WINDOWS\system32\STOPzilla.exe
Close windows explorer->>Reboot your PC->>Rerun Hijackthis and post a fresh hijackthis log

thanks bamajim
Post #7
i saved the files in the my torrents folder…..there was a hidden folder name "_" in the my torrents folder. Stopzilla was sucessfully removed. there was a object on hijackthis i did some research on some other boards. the entry was
O4 - Global Startup: svchost.exe i deleted it after i read advice from other boards and their helpers. heres the fresh hijackthis log….

Logfile of HijackThis v1.99.1
Scan saved at 6:47:09 PM, on 10/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Muiltmedia keyboard utility\1.1\KbdAp32A.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\PROGRA~1\McAfee.com\Agent\mcregwiz.exe
c:\program files\mcafee.com\shared\mghtml.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\AOL\Triton\ee\aolsoftware.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
c:\program files\common files\aol\triton\ee\aim6.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Hijack This\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Dan's Browser
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [FLMK08KB] C:\Program Files\Muiltmedia keyboard utility\1.1\MMKEYBD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\mcregwiz.exe /autorun
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O16 - DPF: ActiveGS.cab - http://www.virtualapple.org/activegs.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d…can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175/7d/ru…cat-no-eula.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1157115115067
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://www.vzwpix.com/activex/VerizonWirel…loadControl.cab
O16 - DPF: {97BB6657-DC7F-4489-9067-51FAB9D8857E} (CWebLaunchCtl Object) - https://support.gateway.com/eSupport/static…/weblaunch2.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F9BAC174-2B12-444F-85F5-BF5B893E9B1D}: NameServer = 209.143.0.10,209.143.19.245
O17 - HKLM\System\CS2\Services\Tcpip\..\{F9BAC174-2B12-444F-85F5-BF5B893E9B1D}: NameServer = 209.143.0.10,209.143.19.245
O17 - HKLM\System\CS3\Services\Tcpip\..\{F9BAC174-2B12-444F-85F5-BF5B893E9B1D}: NameServer = 209.143.0.10,209.143.19.245
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - Network Associates, Inc. - (no file)
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - Network Associates, Inc. - (no file)
O23 - Service: mcupdmgr.exe - Network Associates, Inc. - (no file)
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe


how would i remove the (no file) entries. i have tried myself with no avail
Dan
Post #8
snostorm The (no file) entries you are tryingto remove are connected to McAfee AV. It would be better to uninstall than try to fix them in HJT. However if you do that you will not have an AV. Are you still having an issue with slow performance? bamajim
Post #9
im about the same still…i noticed the lag really a few weeks ago…..during the summer i added 512 mb of ram and it was great for a few weeks and then it started to get laggy……but besides that nothing really…. maybe though i had something lingering that could be affecting it.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI