KASPERSKY ONLINE SCANNER REPORT
Friday, November 30, 2007 11:26:04 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 30/11/2007
Kaspersky Anti-Virus database records: 469419
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
C:\
D:\
E:\
Scan Statistics
Total number of scanned objects 93224
Number of viruses found 12
Number of infected objects 36
Number of suspicious objects 0
Duration of the scan process 01:48:17
Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Paul Fay\Application Data\acccore\nss\cert8.db Object is locked skipped
C:\Documents and Settings\Paul Fay\Application Data\acccore\nss\key3.db Object is locked skipped
C:\Documents and Settings\Paul Fay\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\cert8.db Object is locked skipped
C:\Documents and Settings\Paul Fay\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\Paul Fay\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\history.dat Object is locked skipped
C:\Documents and Settings\Paul Fay\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\key3.db Object is locked skipped
C:\Documents and Settings\Paul Fay\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\parent.lock Object is locked skipped
C:\Documents and Settings\Paul Fay\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Paul Fay\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Paul Fay\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Paul Fay\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Paul Fay\Desktop\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Paul Fay\Desktop\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Paul Fay\Desktop\SmitfraudFix.exe RarSFX: infected - 2 skipped
C:\Documents and Settings\Paul Fay\Desktop\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Paul Fay\Desktop\SmitfraudFix.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\AOL OCP\AIM\Storage\All Users\localStorage\common.cls Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\AOL OCP\AIM\Storage\data\ez0123456789\localStorage\common.cls Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\AOL OCP\AIM\Storage\data\just1chancefree\localStorage\common.cls Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\AOL OCP\AIM\Storage\data\ohthepoorcashew\localStorage\common.cls Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\ApplicationHistory\hpqgalry.exe.cf8dd223.ini.inuse Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Application Data\Mozilla\Firefox\Profiles\10vu0wam.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\History\History.IE5\MSHist012007112820071129\index.dat Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Temp\Perflib_Perfdata_37c.dat Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Temp\~DFD39D.tmp Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Paul Fay\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Paul Fay\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Paul Fay\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Mozilla Firefox\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP100\A0020815.rbf Infected: not-a-virus:FraudTool.Win32.AntiSpyware.b skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP100\A0022801.exe Object is locked skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP100\A0022803.exe Infected: not-a-virus:FraudTool.Win32.DrAntispy.k skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP126\A0024459.exe Infected: not-a-virus:FraudTool.Win32.BraveSentry.c skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP126\A0024517.exe/AdwareAlert/AdwareAlertSrv.srv.exe Infected: not-a-virus:FraudTool.Win32.AntiSpyware.b skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP126\A0024517.exe 7-Zip: infected - 1 skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP126\A0024517.exe UPX: infected - 1 skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP126\A0024517.exe PE_Patch.UPX: infected - 1 skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP126\A0024528.dll Infected: not-a-virus:AdWare.Win32.Comet.ac skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP126\A0024530.exe Infected: not-a-virus:Downloader.Win32.WinFixer.z skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP128\A0024644.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP128\A0024644.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP128\A0024644.exe RarSFX: infected - 2 skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP128\A0024650.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP133\A0024724.dll Infected: not-a-virus:AdWare.Win32.Agent.sb skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP133\change.log Object is locked skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP57\A0009797.exe/file10 Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP57\A0009797.exe Inno: infected - 1 skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP84\A0014539.exe Infected: Trojan-Downloader.Win32.Zlob.gen skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP84\A0014547.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP84\A0014547.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP84\A0014547.exe RarSFX: infected - 2 skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP84\A0014553.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP97\A0017755.exe Infected: not-a-virus:FraudTool.Win32.AntiVirGear.e skipped
C:\System Volume Information\_restore{715D201D-FAAA-46FE-84E5-067F638C54D7}\RP99\A0020788.dll Infected: not-a-virus:AdWare.Win32.Agent.rt skipped
C:\Temp\Temp Files\Torrent Files\BitRoll-1.5.0.0-setup-0259.exe/file10 Infected: Trojan.Win32.Obfuscated.en skipped
C:\Temp\Temp Files\Torrent Files\BitRoll-1.5.0.0-setup-0259.exe Inno: infected - 1 skipped
C:\Temp\Temp Files\Torrent Files\Learn to Speak Spanish 8.0\Learn To Speak Spanish v8.0 (Disk2).iso/INSTALL/BRODCAST/DSSAGENT.EXE;1 Infected: not-a-virus:AdWare.Win32.Background skipped
C:\Temp\Temp Files\Torrent Files\Learn to Speak Spanish 8.0\Learn To Speak Spanish v8.0 (Disk2).iso ISO image: infected - 1 skipped
C:\Temp\Temp Files\Torrent Files\Learn to Speak Spanish 8.0\Learn To Speak Spanish v8.0 (Disk3).iso/INSTALL/BRODCAST/DSSAGENT.EXE;1 Infected: not-a-virus:AdWare.Win32.Background skipped
C:\Temp\Temp Files\Torrent Files\Learn to Speak Spanish 8.0\Learn To Speak Spanish v8.0 (Disk3).iso ISO image: infected - 1 skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
Scan process completed.