Here's the log from the Combo Fix thing;;;;;;;;;;;;;;;;;;;;;;;;
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ComboFix 08-02-15.1 - HP_Administrator 2008-02-16 15:01:37.5 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.474 [GMT -8:00]
Running from: C:\Documents and Settings\[removed]\Desktop\Combo-Fix.exe
Command switches used :: C:\Documents and Settings\HP_Administrator\Desktop\CFScript.txt
* Created a new restore point
FILE
C:\Documents and Settings\HP_Administrator\Application Data\
00b4e654d2b925c42d7b002cb9b6f8edf6374330f80ba1e2bc.dat
C:\Documents and Settings\HP_Administrator\Application Data\ablyankpg.exe
C:\Documents and Settings\HP_Administrator\Application Data\afy.exe
C:\Documents and Settings\HP_Administrator\Application Data\akl.exe
C:\Documents and Settings\HP_Administrator\Application Data\awhfzzsxn.exe
C:\Documents and Settings\HP_Administrator\Application Data\awymcf.exe
C:\Documents and Settings\HP_Administrator\Application Data\azaumhm.exe
C:\Documents and Settings\HP_Administrator\Application Data\bvbkaj.exe
C:\Documents and Settings\HP_Administrator\Application Data\bypqztrokzm.exe
C:\Documents and Settings\HP_Administrator\Application Data\cdlzdpployvp.exe
C:\Documents and Settings\HP_Administrator\Application Data\cnxs.exe
C:\Documents and Settings\HP_Administrator\Application Data\cwzcdjlq.exe
C:\Documents and Settings\HP_Administrator\Application Data\dcqr.exe
C:\Documents and Settings\HP_Administrator\Application Data\dhcmcqvs.exe
C:\Documents and Settings\HP_Administrator\Application Data\djcbcot.exe
C:\Documents and Settings\HP_Administrator\Application Data\dlncmvly.exe
C:\Documents and Settings\HP_Administrator\Application Data\doiagxv.exe
C:\Documents and Settings\HP_Administrator\Application Data\dwewbmll.exe
C:\Documents and Settings\HP_Administrator\Application Data\efjkbsuqe.exe
C:\Documents and Settings\HP_Administrator\Application Data\ekk.exe
C:\Documents and Settings\HP_Administrator\Application Data\entlkntkudn.exe
C:\Documents and Settings\HP_Administrator\Application Data\esux.exe
C:\Documents and Settings\HP_Administrator\Application Data\famkk.exe
C:\Documents and Settings\HP_Administrator\Application Data\fipgdst.exe
C:\Documents and Settings\HP_Administrator\Application Data\flhtvlqff.exe
C:\Documents and Settings\HP_Administrator\Application Data\fqjun.exe
C:\Documents and Settings\HP_Administrator\Application Data\fqlo.exe
C:\Documents and Settings\HP_Administrator\Application Data\ftnyqar.exe
C:\Documents and Settings\HP_Administrator\Application Data\gayxjubr.exe
C:\Documents and Settings\HP_Administrator\Application Data\gbpdouyylnu.exe
C:\Documents and Settings\HP_Administrator\Application Data\ggaryoxfce.exe
C:\Documents and Settings\HP_Administrator\Application Data\gggxofzhs.exe
C:\Documents and Settings\HP_Administrator\Application Data\ggqg.exe
C:\Documents and Settings\HP_Administrator\Application Data\glzwk.exe
C:\Documents and Settings\HP_Administrator\Application Data\gtyxwurgj.exe
C:\Documents and Settings\HP_Administrator\Application Data\hedyrkqqkjpn.exe
C:\Documents and Settings\HP_Administrator\Application Data\heti.exe
C:\Documents and Settings\HP_Administrator\Application Data\hhtjpimzgr.exe
C:\Documents and Settings\HP_Administrator\Application Data\icfh.exe
C:\Documents and Settings\HP_Administrator\Application Data\ifjxjsroud.exe
C:\Documents and Settings\HP_Administrator\Application Data\ijdpswev.exe
C:\Documents and Settings\HP_Administrator\Application Data\iytbnk.exe
C:\Documents and Settings\HP_Administrator\Application Data\izanw.exe
C:\Documents and Settings\HP_Administrator\Application Data\izpbgmrmczvb.exe
C:\Documents and Settings\HP_Administrator\Application Data\jcyhjlitgo.exe
C:\Documents and Settings\HP_Administrator\Application Data\jlnhp.exe
C:\Documents and Settings\HP_Administrator\Application Data\jmd.exe
C:\Documents and Settings\HP_Administrator\Application Data\jpdk.exe
C:\Documents and Settings\HP_Administrator\Application Data\koxfnbfufsdx.exe
C:\Documents and Settings\HP_Administrator\Application Data\kquw.exe
C:\Documents and Settings\HP_Administrator\Application Data\kvwyka.exe
C:\Documents and Settings\HP_Administrator\Application Data\lanclx.exe
C:\Documents and Settings\HP_Administrator\Application Data\lehqapom.exe
C:\Documents and Settings\HP_Administrator\Application Data\lfxhmdn.exe
C:\Documents and Settings\HP_Administrator\Application Data\lnadvfmtepgq.exe
C:\Documents and Settings\HP_Administrator\Application Data\lrcydnitin.exe
C:\Documents and Settings\HP_Administrator\Application Data\lxsxd.exe
C:\Documents and Settings\HP_Administrator\Application Data\lznhlfnwzne.exe
C:\Documents and Settings\HP_Administrator\Application Data\mrhtz.exe
C:\Documents and Settings\HP_Administrator\Application Data\nkw.exe
C:\Documents and Settings\HP_Administrator\Application Data\oeswra.exe
C:\Documents and Settings\HP_Administrator\Application Data\ovmznz.exe
C:\Documents and Settings\HP_Administrator\Application Data\oyoaiydmazsq.exe
C:\Documents and Settings\HP_Administrator\Application Data\ozqurflwysq.exe
C:\Documents and Settings\HP_Administrator\Application Data\qhpxlrjtomr.exe
C:\Documents and Settings\HP_Administrator\Application Data\qiksmniobd.exe
C:\Documents and Settings\HP_Administrator\Application Data\qvghojxyf.exe
C:\Documents and Settings\HP_Administrator\Application Data\rcaemtf.exe
C:\Documents and Settings\HP_Administrator\Application Data\rgfehd.exe
C:\Documents and Settings\HP_Administrator\Application Data\rifdgbgk.exe
C:\Documents and Settings\HP_Administrator\Application Data\rmhywgehplsc.exe
C:\Documents and Settings\HP_Administrator\Application Data\shhupbcwzfo.exe
C:\Documents and Settings\HP_Administrator\Application Data\sinornq.exe
C:\Documents and Settings\HP_Administrator\Application Data\siwbozcvt.exe
C:\Documents and Settings\HP_Administrator\Application Data\sjf.exe
C:\Documents and Settings\HP_Administrator\Application Data\sqfadc.exe
C:\Documents and Settings\HP_Administrator\Application Data\srvp.exe
C:\Documents and Settings\HP_Administrator\Application Data\ssmm.exe
C:\Documents and Settings\HP_Administrator\Application Data\swncrht.exe
C:\Documents and Settings\HP_Administrator\Application Data\tjjvka.exe
C:\Documents and Settings\HP_Administrator\Application Data\tlsq.exe
C:\Documents and Settings\HP_Administrator\Application Data\tmedvvnupm.exe
C:\Documents and Settings\HP_Administrator\Application Data\tvcviexpwpbg.exe
C:\Documents and Settings\HP_Administrator\Application Data\tvsvksl.exe
C:\Documents and Settings\HP_Administrator\Application Data\uczqjfl.exe
C:\Documents and Settings\HP_Administrator\Application Data\ukhmqvah.exe
C:\Documents and Settings\HP_Administrator\Application Data\uldnqceywl.exe
C:\Documents and Settings\HP_Administrator\Application Data\vdguhwyel.exe
C:\Documents and Settings\HP_Administrator\Application Data\vdvwfo.exe
C:\Documents and Settings\HP_Administrator\Application Data\velwhcpmylt.exe
C:\Documents and Settings\HP_Administrator\Application Data\vljjorw.exe
C:\Documents and Settings\HP_Administrator\Application Data\vtvluq.exe
C:\Documents and Settings\HP_Administrator\Application Data\vuyuczp.exe
C:\Documents and Settings\HP_Administrator\Application Data\wgjvsl.exe
C:\Documents and Settings\HP_Administrator\Application Data\whglsxpsjtjs.exe
C:\Documents and Settings\HP_Administrator\Application Data\whqfnoslbg.exe
C:\Documents and Settings\HP_Administrator\Application Data\whxrvtyaz.exe
C:\Documents and Settings\HP_Administrator\Application Data\wuiqtpwba.exe
C:\Documents and Settings\HP_Administrator\Application Data\wwna.exe
C:\Documents and Settings\HP_Administrator\Application Data\wzrnaeznx.exe
C:\Documents and Settings\HP_Administrator\Application Data\xgbr.exe
C:\Documents and Settings\HP_Administrator\Application Data\xosdbhkicdu.exe
C:\Documents and Settings\HP_Administrator\Application Data\xsn.exe
C:\Documents and Settings\HP_Administrator\Application Data\xxhev.exe
C:\Documents and Settings\HP_Administrator\Application Data\ylfgciz.exe
C:\Documents and Settings\HP_Administrator\Application Data\yodv.exe
C:\Documents and Settings\HP_Administrator\Application Data\ysshg.exe
C:\Documents and Settings\HP_Administrator\Application Data\ytzapqwnzpvc.exe
C:\Documents and Settings\HP_Administrator\Application Data\yvtu.exe
C:\Documents and Settings\HP_Administrator\Application Data\yznp.exe
C:\Documents and Settings\HP_Administrator\Application Data\zjiwbnmkkqni.exe
C:\Documents and Settings\HP_Administrator\Application Data\zmrdbwkutl.exe
C:\Documents and Settings\HP_Administrator\Application Data\zmu.exe
C:\Documents and Settings\HP_Administrator\Application Data\znijd.exe
C:\Documents and Settings\HP_Administrator\Application Data\zqwmggm.exe
C:\Documents and Settings\HP_Administrator\Application Data\zynonssv.exe
C:\protect.ed
C:\sqmdata09.sqm
C:\sqmdata10.sqm
C:\sqmdata11.sqm
C:\sqmnoopt09.sqm
C:\sqmnoopt10.sqm
C:\sqmnoopt11.sqm
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\Info.exe
C:\WINDOWS\system32\protect.ed
D:\WINDOWS\system32\Info.exe
D:\WINDOWS\system32\protect.ed
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\HP_Administrator\Application Data\
00b4e654d2b925c42d7b002cb9b6f8edf6374330f80ba1e2bc.dat
C:\Documents and Settings\HP_Administrator\Application Data\ablyankpg.exe
C:\Documents and Settings\HP_Administrator\Application Data\afy.exe
C:\Documents and Settings\HP_Administrator\Application Data\akl.exe
C:\Documents and Settings\HP_Administrator\Application Data\awhfzzsxn.exe
C:\Documents and Settings\HP_Administrator\Application Data\awymcf.exe
C:\Documents and Settings\HP_Administrator\Application Data\azaumhm.exe
C:\Documents and Settings\HP_Administrator\Application Data\bvbkaj.exe
C:\Documents and Settings\HP_Administrator\Application Data\bypqztrokzm.exe
C:\Documents and Settings\HP_Administrator\Application Data\cdlzdpployvp.exe
C:\Documents and Settings\HP_Administrator\Application Data\cnxs.exe
C:\Documents and Settings\HP_Administrator\Application Data\cwzcdjlq.exe
C:\Documents and Settings\HP_Administrator\Application Data\dcqr.exe
C:\Documents and Settings\HP_Administrator\Application Data\dhcmcqvs.exe
C:\Documents and Settings\HP_Administrator\Application Data\djcbcot.exe
C:\Documents and Settings\HP_Administrator\Application Data\dlncmvly.exe
C:\Documents and Settings\HP_Administrator\Application Data\doiagxv.exe
C:\Documents and Settings\HP_Administrator\Application Data\dwewbmll.exe
C:\Documents and Settings\HP_Administrator\Application Data\efjkbsuqe.exe
C:\Documents and Settings\HP_Administrator\Application Data\ekk.exe
C:\Documents and Settings\HP_Administrator\Application Data\entlkntkudn.exe
C:\Documents and Settings\HP_Administrator\Application Data\esux.exe
C:\Documents and Settings\HP_Administrator\Application Data\famkk.exe
C:\Documents and Settings\HP_Administrator\Application Data\fipgdst.exe
C:\Documents and Settings\HP_Administrator\Application Data\flhtvlqff.exe
C:\Documents and Settings\HP_Administrator\Application Data\fqjun.exe
C:\Documents and Settings\HP_Administrator\Application Data\fqlo.exe
C:\Documents and Settings\HP_Administrator\Application Data\ftnyqar.exe
C:\Documents and Settings\HP_Administrator\Application Data\gayxjubr.exe
C:\Documents and Settings\HP_Administrator\Application Data\gbpdouyylnu.exe
C:\Documents and Settings\HP_Administrator\Application Data\ggaryoxfce.exe
C:\Documents and Settings\HP_Administrator\Application Data\gggxofzhs.exe
C:\Documents and Settings\HP_Administrator\Application Data\ggqg.exe
C:\Documents and Settings\HP_Administrator\Application Data\glzwk.exe
C:\Documents and Settings\HP_Administrator\Application Data\gtyxwurgj.exe
C:\Documents and Settings\HP_Administrator\Application Data\hedyrkqqkjpn.exe
C:\Documents and Settings\HP_Administrator\Application Data\heti.exe
C:\Documents and Settings\HP_Administrator\Application Data\hhtjpimzgr.exe
C:\Documents and Settings\HP_Administrator\Application Data\icfh.exe
C:\Documents and Settings\HP_Administrator\Application Data\ifjxjsroud.exe
C:\Documents and Settings\HP_Administrator\Application Data\ijdpswev.exe
C:\Documents and Settings\HP_Administrator\Application Data\iytbnk.exe
C:\Documents and Settings\HP_Administrator\Application Data\izanw.exe
C:\Documents and Settings\HP_Administrator\Application Data\izpbgmrmczvb.exe
C:\Documents and Settings\HP_Administrator\Application Data\jcyhjlitgo.exe
C:\Documents and Settings\HP_Administrator\Application Data\jlnhp.exe
C:\Documents and Settings\HP_Administrator\Application Data\jmd.exe
C:\Documents and Settings\HP_Administrator\Application Data\jpdk.exe
C:\Documents and Settings\HP_Administrator\Application Data\koxfnbfufsdx.exe
C:\Documents and Settings\HP_Administrator\Application Data\kquw.exe
C:\Documents and Settings\HP_Administrator\Application Data\kvwyka.exe
C:\Documents and Settings\HP_Administrator\Application Data\lanclx.exe
C:\Documents and Settings\HP_Administrator\Application Data\lehqapom.exe
C:\Documents and Settings\HP_Administrator\Application Data\lfxhmdn.exe
C:\Documents and Settings\HP_Administrator\Application Data\lnadvfmtepgq.exe
C:\Documents and Settings\HP_Administrator\Application Data\lrcydnitin.exe
C:\Documents and Settings\HP_Administrator\Application Data\lxsxd.exe
C:\Documents and Settings\HP_Administrator\Application Data\lznhlfnwzne.exe
C:\Documents and Settings\HP_Administrator\Application Data\mrhtz.exe
C:\Documents and Settings\HP_Administrator\Application Data\nkw.exe
C:\Documents and Settings\HP_Administrator\Application Data\oeswra.exe
C:\Documents and Settings\HP_Administrator\Application Data\ovmznz.exe
C:\Documents and Settings\HP_Administrator\Application Data\oyoaiydmazsq.exe
C:\Documents and Settings\HP_Administrator\Application Data\ozqurflwysq.exe
C:\Documents and Settings\HP_Administrator\Application Data\qhpxlrjtomr.exe
C:\Documents and Settings\HP_Administrator\Application Data\qiksmniobd.exe
C:\Documents and Settings\HP_Administrator\Application Data\qvghojxyf.exe
C:\Documents and Settings\HP_Administrator\Application Data\rcaemtf.exe
C:\Documents and Settings\HP_Administrator\Application Data\rgfehd.exe
C:\Documents and Settings\HP_Administrator\Application Data\rifdgbgk.exe
C:\Documents and Settings\HP_Administrator\Application Data\rmhywgehplsc.exe
C:\Documents and Settings\HP_Administrator\Application Data\shhupbcwzfo.exe
C:\Documents and Settings\HP_Administrator\Application Data\sinornq.exe
C:\Documents and Settings\HP_Administrator\Application Data\siwbozcvt.exe
C:\Documents and Settings\HP_Administrator\Application Data\sjf.exe
C:\Documents and Settings\HP_Administrator\Application Data\sqfadc.exe
C:\Documents and Settings\HP_Administrator\Application Data\srvp.exe
C:\Documents and Settings\HP_Administrator\Application Data\ssmm.exe
C:\Documents and Settings\HP_Administrator\Application Data\swncrht.exe
C:\Documents and Settings\HP_Administrator\Application Data\tjjvka.exe
C:\Documents and Settings\HP_Administrator\Application Data\tlsq.exe
C:\Documents and Settings\HP_Administrator\Application Data\tmedvvnupm.exe
C:\Documents and Settings\HP_Administrator\Application Data\tvcviexpwpbg.exe
C:\Documents and Settings\HP_Administrator\Application Data\tvsvksl.exe
C:\Documents and Settings\HP_Administrator\Application Data\uczqjfl.exe
C:\Documents and Settings\HP_Administrator\Application Data\ukhmqvah.exe
C:\Documents and Settings\HP_Administrator\Application Data\uldnqceywl.exe
C:\Documents and Settings\HP_Administrator\Application Data\vdguhwyel.exe
C:\Documents and Settings\HP_Administrator\Application Data\vdvwfo.exe
C:\Documents and Settings\HP_Administrator\Application Data\velwhcpmylt.exe
C:\Documents and Settings\HP_Administrator\Application Data\vljjorw.exe
C:\Documents and Settings\HP_Administrator\Application Data\vtvluq.exe
C:\Documents and Settings\HP_Administrator\Application Data\vuyuczp.exe
C:\Documents and Settings\HP_Administrator\Application Data\wgjvsl.exe
C:\Documents and Settings\HP_Administrator\Application Data\whglsxpsjtjs.exe
C:\Documents and Settings\HP_Administrator\Application Data\whqfnoslbg.exe
C:\Documents and Settings\HP_Administrator\Application Data\whxrvtyaz.exe
C:\Documents and Settings\HP_Administrator\Application Data\wuiqtpwba.exe
C:\Documents and Settings\HP_Administrator\Application Data\wwna.exe
C:\Documents and Settings\HP_Administrator\Application Data\wzrnaeznx.exe
C:\Documents and Settings\HP_Administrator\Application Data\xgbr.exe
C:\Documents and Settings\HP_Administrator\Application Data\xosdbhkicdu.exe
C:\Documents and Settings\HP_Administrator\Application Data\xsn.exe
C:\Documents and Settings\HP_Administrator\Application Data\xxhev.exe
C:\Documents and Settings\HP_Administrator\Application Data\ylfgciz.exe
C:\Documents and Settings\HP_Administrator\Application Data\yodv.exe
C:\Documents and Settings\HP_Administrator\Application Data\ysshg.exe
C:\Documents and Settings\HP_Administrator\Application Data\ytzapqwnzpvc.exe
C:\Documents and Settings\HP_Administrator\Application Data\yvtu.exe
C:\Documents and Settings\HP_Administrator\Application Data\yznp.exe
C:\Documents and Settings\HP_Administrator\Application Data\zjiwbnmkkqni.exe
C:\Documents and Settings\HP_Administrator\Application Data\zmrdbwkutl.exe
C:\Documents and Settings\HP_Administrator\Application Data\zmu.exe
C:\Documents and Settings\HP_Administrator\Application Data\znijd.exe
C:\Documents and Settings\HP_Administrator\Application Data\zqwmggm.exe
C:\Documents and Settings\HP_Administrator\Application Data\zynonssv.exe
C:\info.exe
C:\JkLC.exe
C:\sqmdata09.sqm
C:\sqmdata10.sqm
C:\sqmdata11.sqm
C:\sqmnoopt09.sqm
C:\sqmnoopt10.sqm
C:\sqmnoopt11.sqm
C:\WINDOWS\pskt.ini
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
——-\LEGACY_AVFLT
——-\LEGACY_ITHEIOE6ECZ1X5C
——-\LEGACY_PAVPROC
——-\LEGACY_PAVSRK.SYS
——-\LEGACY_PAVTPK.SYS
——-\LEGACY_SHLDDRV
——-\AFW
——-\AvFlt
——-\itheioe6ecz1x5c
——-\PavProc
——-\PavSRK.sys
——-\PavTPK.sys
——-\ShldDrv
((((((((((((((((((((((((( Files Created from 2008-01-16 to 2008-02-16 )))))))))))))))))))))))))))))))
.
2008-02-16 13:35 . 2007-12-15 01:30 12,800 –a—— C:\Documents and Settings\HP_Administrator\Application Data\ihkowkz.exe
2008-02-16 00:01 . 2007-12-15 01:30 12,800 –a—— C:\Documents and Settings\HP_Administrator\Application Data\mcabsbaokmyp.exe
2008-02-15 22:12 . 2007-12-15 01:30 12,800 –a—— C:\Documents and Settings\HP_Administrator\Application Data\fltkgymya.exe
2008-02-15 16:54 . 2008-02-15 16:54 54,156 –ah—– C:\WINDOWS\QTFont.qfn
2008-02-15 16:54 . 2008-02-15 16:54 1,409 –a—— C:\WINDOWS\QTFont.for
2008-02-10 09:03 . 2008-02-11 03:17 60,416 –a—— C:\WINDOWS\system32\drivers\ComboFix.sys
2008-02-01 00:35 . 2008-02-01 00:35 d——– C:\WINDOWS\system32\LogFiles
2008-01-16 10:49 . 2008-01-16 10:49 d——– C:\Presets
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-16 23:11 1,204 —-a-w C:\WINDOWS\system32\drivers\APPFLTR.CFG.bck
2008-02-16 23:11 1,204 —-a-w C:\WINDOWS\system32\drivers\APPFLTR.CFG
2008-02-16 21:37 297,276 —-a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT.bck
2008-02-16 21:37 297,276 —-a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT
2008-02-16 21:36 13,880 —-a-w C:\WINDOWS\system32\drivers\COMFiltr.sys
2008-02-08 17:35 ——— d—–w C:\Program Files\Ahead
2008-01-15 16:21 ——— d—–w C:\Documents and Settings\HP_Administrator\Application Data\AdobeUM
2008-01-11 05:18 ——— d—–w C:\Documents and Settings\HP_Administrator\Application Data\DivX
2008-01-10 04:49 ——— d—–w C:\Program Files\DivX
2007-12-19 08:13 ——— d—–w C:\Program Files\Lavasoft
2007-12-18 21:50 ——— d—–w C:\Program Files\Trend Micro
2007-12-18 09:51 179,584 —-a-w C:\WINDOWS\system32\drivers\mrxdav.sys
2007-12-17 08:16 ——— d—–w C:\Program Files\IObit
2007-12-16 10:34 ——— d—–w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-16 10:29 ——— d—–w C:\Program Files\Spybot - Search & Destroy
2007-11-02 20:41 40,516 —-a-w C:\Program Files\uninstal.log
2005-12-03 00:26 457 —-a-w C:\Program Files\INSTALL.LOG
.
(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
—- Directory of C:\Presets —-
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-25 07:57 68856]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 04:00 15360]
"AIM"="C:\Program Files\AIM\aim.exe" [2005-08-05 14:08 67160]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54 5674352]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 15:24 1694208]
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [2007-08-30 17:43 4670704]
"Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2007-11-01 13:22 3317760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2004-08-10 10:04 59392]
"High Definition Audio Property Page Shortcut"="HDAudPropShortcut.exe" [2004-03-17 22:10 61952 C:\WINDOWS\system32\Hdaudpropshortcut.exe]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2004-12-01 09:55 126976]
"HPBootOp"="C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-02-25 21:34 245760]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 12:54 253952]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2005-06-29 06:14 180269]
"APVXDWIN"="C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\APVXDWIN.exe" [2007-07-19 15:23 455984]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-06-29 06:24 98304]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"MySpaceIM"="C:\Program Files\MySpace\IM\MySpaceIM.exe" [2007-12-06 23:33 8720384]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-08-27 17:34:58 113664]
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2004-12-21 19:42:22 45056]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-05 01:28:24 258048]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04 83360]
MiniMavis.lnk - C:\Program Files\Broderbund\Mavis Beacon Teaches Typing 12 Deluxe\MiniMavis.exe [2005-08-31 00:24:58 2392064]
Service Manager.lnk - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe [2000-08-06 01:03:20 69632]
SpySubtract.lnk - C:\Program Files\InterMute\SpySubtract\sslaunch.exe [2005-06-29 06:26:37 73728]
TabUserW.lnk - C:\Program Files\Wacom\TabUserW.exe [2005-08-27 16:04:49 77824]
Updates from HP.lnk - C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe [2005-06-29 06:27:39 45056]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr]
avldr.dll 2007-02-15 20:02 50736 C:\WINDOWS\system32\avldr.dll
R1 APPFLT;App Filter Plugin;C:\WINDOWS\system32\Drivers\APPFLT.SYS [2007-05-11 09:33]
R1 DSAFLT;DSA Filter Plugin;C:\WINDOWS\system32\Drivers\DSAFLT.SYS [2007-05-11 09:33]
R1 FNETMON;NetMon Filter Plugin;C:\WINDOWS\system32\Drivers\fnetmon.SYS [2007-05-11 09:33]
R1 IDSFLT;Ids Filter Plugin;C:\WINDOWS\system32\Drivers\IDSFLT.SYS [2007-07-11 11:39]
R1 NETFLTDI;Panda Net Driver [TDI Layer];C:\WINDOWS\system32\Drivers\NETFLTDI.SYS [2007-05-11 09:33]
R1 SMSFLT;SMS Filter Plugin;C:\WINDOWS\system32\Drivers\SMSFLT.SYS [2007-05-11 09:33]
R1 WNMFLT;Wifi Monitor Filter Plugin;C:\WINDOWS\system32\Drivers\WNMFLT.SYS [2007-05-11 09:33]
R2 cpoint;Panda CPoint Driver;C:\WINDOWS\system32\Drivers\cpoint.sys [2007-06-08 08:44]
R3 AvFlt;Antivirus Filter Driver;C:\WINDOWS\system32\drivers\av5flt.sys []
R3 ComFiltr;Panda Anti-Dialer;C:\WINDOWS\system32\DRIVERS\COMFiltr.sys [2008-02-16 15:13]
R3 NETIMFLT;PANDA NDIS IM Filter Miniport;C:\WINDOWS\system32\DRIVERS\netimflt.sys [2007-04-24 15:43]
R3 PavTPK.sys;PavTPK.sys;C:\WINDOWS\system32\PavTPK.sys []
S3 PavSRK.sys;PavSRK.sys;C:\WINDOWS\system32\PavSRK.sys []
*Newly Created Service* - AVFLT
*Newly Created Service* - COMFILTR
*Newly Created Service* - PAVTPK.SYS
.
Contents of the 'Scheduled Tasks' folder
"2008-02-16 22:42:00 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2008-02-16 09:49:00 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
"2008-02-07 11:00:00 C:\WINDOWS\Tasks\RegCure.job"
- C:\Program Files\RegCure\RegCure.exe
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-02-16 15:10:56
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwEnumerateKey, ZwClose, ZwEnumerateValueKey, ZwQueryValueKey, ZwOpenFile
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
———————— Other Running Processes ————————
.
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\AVENGINE.EXE
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
C:\WINDOWS\system32\HPZipm12.exe
c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsImSvc.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\InterMute\SpySubtract\SpySub.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-02-16 15:18:26 - machine was rebooted
ComboFix-quarantined-files.txt 2008-02-16 23:18:17
ComboFix2.txt 2008-02-15 23:44:33
.
2008-02-12 11:03:09 — E O F —
_——————————————————————–
And here's the Hijack Log ::
_____________________________________
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:30:35 PM, on 2/16/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\AVENGINE.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
C:\WINDOWS\system32\HPZipm12.exe
c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsImSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Broderbund\Mavis Beacon Teaches Typing 12 Deluxe\MiniMavis.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Wacom\TabUserW.exe
C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\InterMute\SpySubtract\SpySub.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCMTR.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\AGRSMMSG.exe
c:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.ign.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MiniMavis.lnk = C:\Program Files\Broderbund\Mavis Beacon Teaches Typing 12 Deluxe\MiniMavis.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: SpySubtract.lnk = C:\Program Files\InterMute\SpySubtract\sslaunch.exe
O4 - Global Startup: TabUserW.lnk = C:\Program Files\Wacom\TabUserW.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {25365FF3-2746-4230-9DA7-163CCA318309} (Automatic Driver Installation Control) -
http://inst.c-wss.com/n035p/EN/install/gtdownlr.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) -
http://download.divx.com/player/DivXBrowserPlugin.cab?s6
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe (file missing)
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsImSvc.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe
–
End of file - 11799 bytes
———————————————————–
And here is the Kaspersky:::::::::::::::::::::::::::::
——————————————————————————-
KASPERSKY ONLINE SCANNER REPORT
Saturday, February 16, 2008 7:31:15 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 15/02/2008
Kaspersky Anti-Virus database records: 568182
——————————————————————————-
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
Scan Statistics:
Total number of scanned objects: 263385
Number of viruses found: 16
Number of infected objects: 209
Number of suspicious objects: 2
Duration of the scan process: 02:30:19
Infected Object Name / Virus Name / Last Action
C:\BXPA.0XE Infected: Trojan-Downloader.Win32.VB.bwb skipped
C:\Documents and Settings\Administrator\Desktop\catchme.zip/gebyyvt.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\Documents and Settings\Administrator\Desktop\catchme.zip/pmkjj.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\Documents and Settings\Administrator\Desktop\catchme.zip ZIP: infected - 2 skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\136fcbcb1074552c54e2ef25a2265f4f_2cd53ae6-ebb8-413c-94a5-66339957f33e Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\sentinel\2.1\gwhashs.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoAccessActiveXObject.zip/uninst.exe Suspicious: Password-protected-EXE skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ZlobVideoAccessActiveXObject.zip ZIP: suspicious - 1 skipped
C:\Documents and Settings\HP_Administrator\Application Data\InterMute\SpySubtract\tmp\3 Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\cert8.db Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\history.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\key3.db Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\parent.lock Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\search.sqlite Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\HP_Administrator\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Desktop\[4]-[removed]/info.exe Infected: Trojan-Downloader.Win32.Tiny.zg skipped
C:\Documents and Settings\HP_Administrator\Desktop\[4]-[removed]/JkLC.exe Infected: Trojan-Downloader.Win32.VB.bwb skipped
C:\Documents and Settings\HP_Administrator\Desktop\[4]-[removed] ZIP: infected - 2 skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\1culvyvo.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\temp\JET187B.tmp Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\temp\~DF1165.tmp Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\temp\~DFE254.tmp Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\ntuser.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\INFO.0XE Infected: Trojan-Downloader.Win32.VB.bwb skipped
C:\Program Files\Mozilla Firefox\keygen.exe Infected: Trojan-Downloader.Win32.Small.ieg skipped
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\cace2423dfb97c58fe7dd9f120557063PSK_NAMES Object is locked skipped
C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\cace2423dfb97c58fe7dd9f120557063PSK_NAMES2 Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\chandir.dat Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\chandir.idx Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\chn.dat Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\chn.idx Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\D0000000.FCS Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\inuse.txt Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\L0000002.FCS Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\main.log Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs.dat Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs.idx Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_die.dat Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_die.idx Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_dnd.dat Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_dnd.idx Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_ext.dat Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_ext.idx Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_rcv.dat Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\prs_rcv.idx Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\storydb.dat Object is locked skipped
C:\Program Files\Updates from HP\309731\Users\Default\Data\storydb.idx Object is locked skipped
C:\Program Files\Veoh Networks\Veoh\client.log Object is locked skipped
C:\Program Files\Veoh Networks\Veoh\upload.log Object is locked skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\ceasboqh.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\dpemhrss.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\gbsukwvf.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\igglbbec.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\moskymla.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\odkwmuja.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\tuvgetdo.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\veowjvon.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\QooBox\Quarantine\C\WINDOWS\system32\wjimlevg.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP41\A0011175.exe Infected: Trojan-Downloader.Win32.Small.hvx skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP42\A0013205.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP42\A0013206.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP42\A0013207.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP42\A0013208.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP43\A0013277.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP43\A0013398.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP43\A0013403.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP44\A0014721.com Infected: Trojan.Win32.Pakes.btu skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP44\A0014736.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP44\A0015824.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP45\A0015868.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP45\A0015961.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP46\A0016070.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP47\A0016330.com Infected: Trojan.Win32.Pakes.btu skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP48\A0017207.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP48\A0017278.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP50\A0017307.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP50\A0017372.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP50\A0018541.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP51\A0018592.dll Infected: Backdoor.Win32.Agent.dlj skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP51\A0018623.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP51\A0018657.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP51\A0018710.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP51\A0018711.dll Infected: not-a-virus:AdWare.Win32.AdBand.e skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP51\A0018712.exe Infected: not-a-virus:AdWare.Win32.Agent.vv skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018824.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018987.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018988.exe Infected: Trojan-Downloader.Win32.VB.bwb skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018989.exe Infected: Trojan-Downloader.Win32.VB.bwb skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018990.exe Infected: Trojan-Downloader.Win32.Agent.gat skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018991.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018992.dll Infected: Backdoor.Win32.Agent.dlj skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018993.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018994.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018995.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018996.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018997.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018998.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0018999.dll Infected: Backdoor.Win32.Agent.dlj skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0019000.exe Infected: Trojan.Win32.Pakes.btu skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0019001.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP52\A0019002.com Infected: Trojan.Win32.Pakes.btu skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP53\A0019097.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP53\A0019387.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP53\A0021563.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP53\A0021564.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP53\A0021641.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP53\A0021753.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022063.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022199.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022200.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022201.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022203.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022204.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022205.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022206.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022207.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022208.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022209.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022210.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022211.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022212.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022214.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022216.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022217.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022218.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022219.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022220.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022222.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022224.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022225.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022226.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022227.dll Infected: Trojan.Win32.Pakes.bwd skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022228.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022229.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022230.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022231.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022232.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022233.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022234.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022235.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022236.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022237.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.bxe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022238.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022239.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022240.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022241.dll Infected: not-a-virus:AdWare.Win32.SuperJuan.is skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022242.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022363.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP54\A0022444.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP55\A0023479.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP55\A0023611.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP55\A0024109.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP55\A0024110.exe Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP57\A0024195.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP57\A0024377.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP58\A0024484.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP58\A0024611.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP59\A0024709.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP60\A0024781.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP61\A0024787.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP61\A0024831.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP62\A0024953.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP63\A0025038.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP63\A0025075.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP64\A0025080.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP65\A0025119.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP66\A0025221.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP68\A0025328.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP69\A0025438.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP71\A0025519.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP72\A0025661.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP72\A0025713.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP74\A0025759.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP75\A0025986.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026508.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026700.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026703.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026704.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026705.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026706.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026707.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026708.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026709.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026710.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP77\A0026711.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP78\A0026948.exe/data.rar/crack.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP78\A0026948.exe/data.rar/keygen.exe Infected: Trojan-Downloader.Win32.Small.ieg skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP78\A0026948.exe/data.rar Infected: Trojan-Downloader.Win32.Small.ieg skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP78\A0026948.exe RarSFX: infected - 3 skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP78\A0026949.exe/data.rar/crack.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP78\A0026949.exe/data.rar/keygen.exe Infected: Trojan-Downloader.Win32.Small.ieg skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP78\A0026949.exe/data.rar Infected: Trojan-Downloader.Win32.Small.ieg skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP78\A0026949.exe RarSFX: infected - 3 skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP83\A0029513.exe Infected: Trojan-Downloader.Win32.Tiny.zg skipped
C:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP83\change.log Object is locked skipped
C:\VundoFix Backups\apekigtn.exe.bad Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\VundoFix Backups\aqajkisa.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\aradluwq.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\bryjdnul.exe.bad Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\VundoFix Backups\cudwnhbn.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\eeupwupy.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\ejngateq.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\emmorhdb.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\etcvphad.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\fkgfhhak.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\hafrdjqk.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\iayinpip.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\imwjkdxj.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\kwerdqmr.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\mbgxgwli.exe.bad Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\VundoFix Backups\mcxpkckp.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\mffkiyvl.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\mgubxaek.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\mnxlfeyl.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\pgvqagwp.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\pydbaopn.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\pyviknjq.exe.bad Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\VundoFix Backups\qdgqyiyw.exe.bad Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\VundoFix Backups\qgfakblk.dll.bad Infected: Trojan.Win32.Pakes.bwd skipped
C:\VundoFix Backups\rfakyjnt.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\rgufpojf.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\rnnuilmj.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\sfxdpntg.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\sfxfcsmw.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\smcxtyco.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\toawesbw.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\txarwqri.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\ujettroi.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\vturr.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.bxe skipped
C:\VundoFix Backups\waqgehum.exe.bad Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\VundoFix Backups\wltnlcbq.exe.bad Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\VundoFix Backups\xaywvcfy.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\xiepcggi.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\VundoFix Backups\xkthfipm.dll.bad Infected: not-a-virus:AdWare.Win32.SuperJuan.is skipped
C:\VundoFix Backups\xywbhnnn.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\MROFINU72.0XE Infected: Trojan-Downloader.Win32.Agent.gat skipped
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{F94A8686-BFFC-4C80-A798-A4D770BB0A50}.crmlog Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{4D2D4517-6384-422D-A7E6-C33669D98EA8}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\ASHABCBA.0XE Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\system32\BJPVSPDQ.0LL Infected: Backdoor.Win32.Agent.dlj skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Media Ce.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\EFEFLACA.0XE Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\system32\EHHFKHJJ.0XE Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\hcvmeauv.exe.bak Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\system32\hwlefryf.exe.bak Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\system32\IPSCCMEW.0XE Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\system32\LYOCETUV.0XE Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\system32\UWXLYOIS.0XE Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\YAYCBHHG.0XE Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\system32\YCFRWITG.0LL Infected: Backdoor.Win32.Agent.dlj skipped
C:\WINDOWS\system32\YOFBLO.0XE Infected: Trojan.Win32.Pakes.btu skipped
C:\WINDOWS\system32\YQBLGBKH.0XE Infected: Trojan-Downloader.Win32.Agent.gwe skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\load.exe Infected: not-a-virus:FraudTool.Win32.Avola.b skipped
D:\System Volume Information\_restore{B9823275-D858-498B-A4DC-C4EEDA322F67}\RP83\change.log Object is locked skipped
Scan process completed.
