Here is my log from Avira
AntiVir PersonalEdition Classic
Report file date: Sunday, February 04, 2007 22:25
Scanning for 662924 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: Compaq_Administrator
Computer name: YOUR-4DACD0EA75
Version information:
BUILD.DAT : 217 12749 Bytes 12/5/2006 17:00:00
AVSCAN.EXE : 7.0.3.5 208936 Bytes 2/4/2007 17:51:28
AVSCAN.DLL : 7.0.3.1 35880 Bytes 12/5/2006 23:00:22
LUKE.DLL : 7.0.3.2 143400 Bytes 10/31/2006 23:07:46
LUKERES.DLL : 7.0.2.0 9256 Bytes 12/5/2006 23:00:22
ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 5/31/2006 22:30:06
ANTIVIR1.VDF : 6.37.0.153 3131392 Bytes 1/12/2007 17:51:29
ANTIVIR2.VDF : 6.37.0.235 374784 Bytes 1/29/2007 17:51:29
ANTIVIR3.VDF : 6.37.1.28 113152 Bytes 2/4/2007 17:51:29
AVEWIN32.DLL : 7.3.1.34 2290176 Bytes 2/4/2007 17:51:29
AVPREF.DLL : 7.0.2.0 23592 Bytes 11/3/2006 17:53:44
AVREP.DLL : 6.37.1.1 1105960 Bytes 2/4/2007 17:51:29
AVRPBASE.DLL : 7.0.0.0 2162728 Bytes 3/30/2006 15:43:31
AVPACK32.DLL : 7.2.0.5 368680 Bytes 10/23/2006 22:21:31
AVREG.DLL : 7.0.1.2 30760 Bytes 2/4/2007 17:51:28
NETNT.DLL : No Information!
RCIMAGE.DLL : 7.0.1.3 2097192 Bytes 11/8/2006 19:26:26
RCTEXT.DLL : 7.0.12.1 77864 Bytes 12/5/2006 23:00:21
Configuration settings for the scan:
Jobname..........................: Local Hard Disks
Configuration file...............: C:\Program Files\AntiVir PersonalEdition Classic\alldiscs.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Expanded search settings.........: 0x00001000
Start of the scan: Sunday, February 04, 2007 22:25
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Modules have been scanned
Scan process 'avcenter.exe' - '1' Modules have been scanned
Scan process 'hpsysdrv.exe' - '1' Modules have been scanned
Scan process 'atiptaxx.exe' - '1' Modules have been scanned
Scan process 'ALCXMNTR.EXE' - '1' Modules have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Modules have been scanned
Scan process 'kbd.exe' - '1' Modules have been scanned
Scan process 'hprblog.exe' - '1' Modules have been scanned
Scan process 'hpqste08.exe' - '1' Modules have been scanned
Scan process 'hpqtra08.exe' - '1' Modules have been scanned
Scan process 'Compaq Connections.exe' - '1' Modules have been scanned
Scan process 'msmsgs.exe' - '1' Modules have been scanned
Scan process 'zlclient.exe' - '0' Modules have been scanned
Scan process 'avgnt.exe' - '1' Modules have been scanned
Scan process 'qttask.exe' - '1' Modules have been scanned
Scan process 'jusched.exe' - '1' Modules have been scanned
Scan process 'realsched.exe' - '1' Modules have been scanned
Scan process 'hpwuSchd2.exe' - '1' Modules have been scanned
Scan process 'DMAScheduler.exe' - '1' Modules have been scanned
Scan process 'DISCUpdateMgr.exe' - '1' Modules have been scanned
Scan process 'ctfmon.exe' - '1' Modules have been scanned
Scan process 'alg.exe' - '1' Modules have been scanned
Scan process 'dllhost.exe' - '1' Modules have been scanned
Scan process 'mcrdsvc.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'MDM.EXE' - '1' Modules have been scanned
Scan process 'LSSrvc.exe' - '1' Modules have been scanned
Scan process 'ehSched.exe' - '1' Modules have been scanned
Scan process 'ehrecvr.exe' - '1' Modules have been scanned
Scan process 'arservice.exe' - '1' Modules have been scanned
Scan process 'avguard.exe' - '1' Modules have been scanned
Scan process 'sched.exe' - '1' Modules have been scanned
Scan process 'spoolsv.exe' - '1' Modules have been scanned
Scan process 'explorer.exe' - '1' Modules have been scanned
Scan process 'ati2evxx.exe' - '1' Modules have been scanned
Scan process 'vsmon.exe' - '0' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'svchost.exe' - '1' Modules have been scanned
Scan process 'ati2evxx.exe' - '1' Modules have been scanned
Scan process 'lsass.exe' - '1' Modules have been scanned
Scan process 'services.exe' - '1' Modules have been scanned
Scan process 'winlogon.exe' - '1' Modules have been scanned
Scan process 'csrss.exe' - '1' Modules have been scanned
Scan process 'smss.exe' - '1' Modules have been scanned
45 processes with 45 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( 23 files ).
Starting the file scan:
Begin scan in 'C:\' <PRESARIO>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\!KillBox\QUHA.0LL
[DETECTION] Is the Trojan horse TR/Drop.DA
[INFO] The file was moved to '460eb262.qua'!
C:\!KillBox\QUHA222.0LL
[DETECTION] Is the Trojan horse TR/Drop.DA
[INFO] The file was moved to '460eb268.qua'!
C:\!KillBox\QUHA32.0LL
[DETECTION] Is the Trojan horse TR/Drop.DA
[INFO] The file was moved to '460eb26a.qua'!
C:\!KillBox\QUHA972.0LL
[DETECTION] Is the Trojan horse TR/Drop.DA
[INFO] The file was moved to '460eb26c.qua'!
C:\avenger\backup-Sat 02.03.2007-10.25.48.31.zip
[0] Archive type: ZIP
--> avenger/quha.dll
[DETECTION] Is the Trojan horse TR/Drop.DA
--> avenger/quha691.dll
[DETECTION] Is the Trojan horse TR/Drop.DA
[INFO] The file was moved to '4629b282.qua'!
C:\avenger\backup.zip
[0] Archive type: ZIP
--> avenger/quha.dll
[DETECTION] Is the Trojan horse TR/Drop.DA
[INFO] The file was moved to '4629b288.qua'!
C:\Spyware\backups\BACKUP-20070112-175649-484.0LL
[DETECTION] Is the Trojan horse TR/Drop.DA
[INFO] The file was moved to '4609b8ea.qua'!
C:\Spyware\backups\BACKUP-20070201-172844-273.0LL
[DETECTION] Is the Trojan horse TR/Drop.DA
[INFO] The file was moved to '4609b9b3.qua'!
C:\WINDOWS\LOHO.0XE
[DETECTION] Is the Trojan horse TR/BHO.AB
[INFO] The file was moved to '460eb9f2.qua'!
C:\WINDOWS\system32\ActiveScan\pskavs.dll
[DETECTION] Contains signature of the Windows virus W95/Blumblebee.1738
[INFO] The file was moved to '4631bc63.qua'!
Begin scan in 'D:\' <PRESARIO_RP>
End of the scan: Sunday, February 04, 2007 23:19
Used time: 54:37 min
The scan has been done completely.
7337 Scanning directories
384026 Files were scanned
11 viruses and/or unwanted programs were found
0 files were deleted
0 files were repaired
10 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
384015 Files not concerned
15143 Archives were scanned
2 Warnings
20 Notes