View Full Version : smitfraud-c toolbar888 infection
Greetings,
I hope you can help me get rid of this infestation. It took some time before I found out that if you want some help on these problems, you have to post your Hijack log. My computer is reporting 100% CPU usage with no programs up & running. Can you please help me?
Logfile of HijackThis v1.99.1
Scan saved at 4:23:47 PM, on 7/4/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
F:\Downloads\2007\07-july\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {2a40cf4a-cee4-4acf-b478-d0f9d1e74191} - C:\WINDOWS\system32\pstmsg.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: H - {C9905EF0-610F-4404-9030-A3F345D069F5} - C:\WINDOWS\system32\comi2.dll (file missing)
O2 - BHO: (no name) - {DEBEB52F-CFA6-4647-971F-3EDB75B63AFA} - C:\WINDOWS\system32\tmp1.tmp.dll (file missing)
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\awtsqo.dll",realset
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: c:\windows\system32\pmnlllm.dll
O20 - Winlogon Notify: pstmsg - C:\WINDOWS\SYSTEM32\pstmsg.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
Hi 3rdrock
"My computer is reporting 100% CPU usage with no programs up & running."
You have a lot of programs running according to your HijackThis log.
Please download VundoFix.exe (http://www.atribune.org/ccount/click.php?id=4) to your desktop.
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will reboot your computer, click OK.
Please post the contents of C:\vundofix.txt and a new HiJackThis log in a reply to this thread.
Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.
upon reboot of computer after the vdundofix.exe the sytem wanted to scan the hard drives for errors. I let that happen with no problems reported.
vdundofix.txt:
VundoFix V6.5.4
Checking Java version...
Java version is 1.5.0.2
Old versions of java are exploitable and should be removed.
Java version is 1.5.0.4
Old versions of java are exploitable and should be removed.
Scan started at 11:25:54 AM 7/5/2007
Listing files found while scanning....
C:\WINDOWS\awtsqo.dll
C:\WINDOWS\oqstwa.ini
C:\windows\system32\pstmsg.dll
C:\WINDOWS\system32\tmp1.tmp.dll
C:\WINDOWS\system32\tmpF.tmp.dll
Beginning removal...
Attempting to delete C:\WINDOWS\awtsqo.dll
C:\WINDOWS\awtsqo.dll Has been deleted!
Attempting to delete C:\WINDOWS\oqstwa.ini
C:\WINDOWS\oqstwa.ini Has been deleted!
Attempting to delete C:\windows\system32\pstmsg.dll
C:\windows\system32\pstmsg.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\tmpF.tmp.dll
C:\WINDOWS\system32\tmpF.tmp.dll Has been deleted!
Performing Repairs to the registry.
Done!
reran highjackthis for the following:
Logfile of HijackThis v1.99.1
Scan saved at 12:01:09 PM, on 7/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\taskmgr.exe
F:\Downloads\2007\07-july\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {2a40cf4a-cee4-4acf-b478-d0f9d1e74191} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: H - {C9905EF0-610F-4404-9030-A3F345D069F5} - C:\WINDOWS\system32\comi2.dll (file missing)
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: c:\windows\system32\pmnlllm.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
current cpu usage sitting at 2% !
Hi
"current cpu usage sitting at 2% !"
That sounds better :)
First, I would like you to upload this fil to uploadmalware (http://www.uploadmalware.com)
c:\windows\system32\pmnlllm.dll
After that:
Download the Killbox (http://download.bleepingcomputer.com/spyware/KillBox.exe).
Save it to the desktop
Double-click Killbox.exe to run it.
Select "Delete on Reboot".
Place the following line (complete path) in bold in the "Full Path of File to Delete" box in Killbox:
c:\windows\system32\pmnlllm.dll
Put a mark next to "Delete on Reboot"
Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt.
If your computer does not restart automatically, please restart it manually.
Empty this folder:
C:\!KillBox
Empty Recycle Bin
Open HijackThis, click do a system scan only and checkmark these:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {2a40cf4a-cee4-4acf-b478-d0f9d1e74191} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: H - {C9905EF0-610F-4404-9030-A3F345D069F5} - C:\WINDOWS\system32\comi2.dll (file missing)
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O4 - Startup: PowerReg Scheduler V3.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O20 - AppInit_DLLs: c:\windows\system32\pmnlllm.dll
Close all windows including browser and press fix checked.
Reboot.
Post a fresh HijackThis log.
Hello Shaba,
I could not find the file you requested pmnlllm.dll. A search in explore did not find it on the whole C drive. It was not until I looked in AVG virus vault to find it listed there.
Looking at the AVG virus vault the file has been there since June 8, 2007. In order to send it and follow the rest of the instructions, I restored the file. Boy, did AVG not like that.
response for 'fix checked':
An unexpected error has occurred at procedure: modBackup_MakeBackup(sItem=O20 - AppInit_DLLs: c:\windows\system32\pmnlllm.dll)
Error #5 - Invalid procedure call or argument
Please email me at merijn@spywareinfo.com, reporting the following:
* What you were trying to fix when the error occurred, if applicable
* How you can reproduce the error
* A complete HijackThis scan log, if possible
Windows version: Windows NT 5.01.2600
MSIE version: 6.0.2900.2180
HijackThis version: 1.99.1
This message has been copied to your clipboard.
Click OK to continue the rest of the scan.
most recent Hijackthis log:
Logfile of HijackThis v1.99.1
Scan saved at 3:56:18 PM, on 7/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
F:\Downloads\2007\07-july\HijackThis.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\notepad.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
no further complaints from AVG.
Hi
Please do an online scan with Kaspersky Online Scanner (http://www.kaspersky.com/downloads/kws/kavwebscan.html). You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
The program will launch and then start to download the latest definition files.
Once the scanner is installed and the definitions downloaded, click Next.
Now click on Scan Settings
In the scan settings make sure that the following are selected:
o Scan using the following Anti-Virus database:
+ Extended (If available otherwise Standard)
o Scan Options:
+ Scan Archives
+ Scan Mail Bases
Click OK
Now under select a target to scan select My Computer
The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
Now click on the Save as Text button
Save the file to your desktop.
Copy and paste that information in your next post.
Post:
- a fresh HijackThis log
- kaspersky report
Hello Shaba,
The Kapersky results are too long to add as a posting. Error message reads:
The text that you have entered is too long (77986 characters). Please shorten it to 20000 characters long.
That was after removing the HiJackthis.log I had added as well. Here is the latest HiJackthis.log results:
Logfile of HijackThis v1.99.1
Scan saved at 3:55:52 PM, on 7/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\taskmgr.exe
F:\Downloads\2007\07-july\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!
\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0
\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search &
Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!
\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common
Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common
Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -
http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) -
http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) -
http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-
new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) -
http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) -
http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) -
http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) -
http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command
Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared
Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite
2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite
2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Kapersky log will follow in segments.
Logfile of HijackThis v1.99.1
Scan saved at 3:55:52 PM, on 7/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\taskmgr.exe
F:\Downloads\2007\07-july\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) -
http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
sorry about that. the last four entries were the HiJack this log again. Please ignore it.
I will try again for the Kapersky info:
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, July 08, 2007 3:54:48 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 8/07/2007
Kaspersky Anti-Virus database records: 359736
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
Scan Statistics:
Total number of scanned objects: 236644
Number of viruses found: 27
Number of infected objects: 577
Number of suspicious objects: 0
Duration of the scan process: 03:01:41
Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT05fdd.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT05fe1.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~848277.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~530847.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\toolbar.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~795052.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~868501.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~726779.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~869431.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~933853.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~372448.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~879423.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~775809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~434463.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~897401.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~814782.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~713943.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~891351.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~810969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~929951.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~961098.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~961362.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~965266.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~530194.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~897515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~496531.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~339662.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~885662.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~411720.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~702456.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~680505.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~684311.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~739580.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~652326.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~832236.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~659056.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~773967.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~509458.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~482500.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~816602.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~922628.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~735694.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~955079.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~863754.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~828121.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~993611.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~912522.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~392257.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~905744.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~556914.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~533368.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~945547.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~811781.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~722209.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~840875.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~939612.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~745633.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~894736.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~743113.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~943200.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~760175.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~606137.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~967896.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~721633.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~721265.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~21129.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~793289.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~413804.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~568597.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~707434.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~678350.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~438591.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~377182.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~794307.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~399509.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~707082.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~667328.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~850779.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~458950.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~772345.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~419994.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~402525.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~356177.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~450112.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~403788.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~426146.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~411513.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~981935.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~552443.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~597968.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~421008.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~387204.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~434829.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~814788.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~879680.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~462273.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~711628.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~717809.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~871567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~515005.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~743917.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~422722.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~929100.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~872948.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~821635.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~760503.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~828549.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~528517.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temporary Internet Files\Content.IE5\B3HBVXSW\WToolsB[1].cab/WToolsB.dll Infected: not-a-virus:AdWare.Win32.Wintol skipped
C:\Documents and Settings\Tom\Local Settings\Temporary Internet Files\Content.IE5\B3HBVXSW\WToolsB[1].cab CAB: infected - 1 skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~436005.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737893.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467068.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427116.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~670947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~694355.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~450582.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~662589.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484023.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~359263.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~933825.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~441021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~4399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443362.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~348749.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429767.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~56854.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~405449.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~547287.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~552839.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~564578.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691939.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765734.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~897416.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455513.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\toolbar.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~557154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420731.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~614533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484883.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~393027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905786.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429145.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~462533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~447914.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471297.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706802.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363719.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~385747.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~693241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~407270.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420739.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~628938.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~636879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~401050.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~858390.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~487120.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~698763.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427773.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~406632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683435.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~402491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~717090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~224.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~5923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~84727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~775090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~498352.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~785422.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414838.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~451017.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~951387.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455804.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~473467.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~730831.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~886768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~37568.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~919460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467044.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~493238.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~690893.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459826.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363062.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~965608.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~966001.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~739599.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~324709.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~626391.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~769504.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~727573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714305.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~417901.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~808535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~782225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~761383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~685934.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~613410.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425211.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~546260.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471415.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~771275.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~632049.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905663.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~678697.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~681010.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454003.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~568682.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737420.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~703241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~712061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~766066.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~697618.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~506159.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~875155.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~32442.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~509228.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706576.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465989.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~17790.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448295.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~658025.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~433022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532667.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~652535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~544285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423552.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425210.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~825989.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713528.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443946.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423616.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~415661.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~975290.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~519612.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~12090.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~855512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~947166.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~513309.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~293559.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510220.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~483720.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454849.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~830883.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465778.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~573158.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~482602.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~941286.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691251.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~641854.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448827.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~502737.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~428042.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~745257.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~665332.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~503685.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~365876.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440243.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~351232.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~479170.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~491182.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~841935.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364914.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~915254.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~523139.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~416543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364764.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~461088.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~505947.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465750.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~925609.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510266.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~725558.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~687014.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~424994.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452959.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~488234.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714017.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409963.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427815.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757062.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~437116.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440895.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~398164.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~931719.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~525086.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~985985.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459042.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~371335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680385.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~728036.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~560813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476184.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~438394.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~285660.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414885.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~696349.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430251.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~421061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~918904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~911214.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~515277.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~431381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~466690.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~793431.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~569225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476123.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~767027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~449012.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~594954.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~553154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~477252.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443143.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~946765.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~958239.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~969611.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~464097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~470625.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442051.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430174.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~760482.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~928223.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440554.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~773020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~366723.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~310095.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532296.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\btlink\hblink.cab/btlink.dll Infected: not-a-virus:AdWare.Win32.Wintol.ao skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\btlink\hblink.cab CAB: infected - 1 skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~668337.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~749114.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~767192.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~670492.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\toolbar.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~648920.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~844414.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~578506.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765054.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~701149.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~616606.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~584432.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769343.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~677002.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588850.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~645828.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~561947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~919339.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~641693.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797949.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~867286.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773367.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~566332.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~605514.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~717968.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773043.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~944244.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~729898.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698680.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~694139.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769748.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765121.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~755165.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~714183.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683397.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~785128.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~805477.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~721987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~798357.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~583799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~669647.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~660658.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675689.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~687081.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~622724.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~795543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~634971.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~807142.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~771995.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627436.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~657380.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~699297.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~713198.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588728.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~740394.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~664807.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680339.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~625590.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638386.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~552374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680461.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~681801.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~884093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~555410.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~826952.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~746027.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~745726.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683605.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~573527.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~679701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~814325.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627179.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~772778.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~907649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~695373.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646859.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~820338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~802368.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~688488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~630106.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~647756.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~665445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~743880.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~843301.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~672437.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~599588.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~850946.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temporary Internet Files\Content.IE5\45MVKHYR\common[1].cab/common.dll Infected: not-a-virus:AdWare.Win32.WebSearch.o skipped
C:\Documents and Settings\Kevin\Local Settings\Temporary Internet Files\Content.IE5\45MVKHYR\common[1].cab CAB: infected - 1 skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~586255.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~758148.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~761555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~818445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\~DFDB28.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp5E.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp6.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpA.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpD9.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpE3.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpE7.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp17.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP856\change.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP817\A0287069.exe Infected: Backdoor.Win32.Small.os skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\awtsqo.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\pstmsg.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno: infected - 1 skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe WiseSFX: infected - 9 skipped
F:\Downloads\2002\MAY 2002\dw22.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\Downloads\2002\MAY 2002\dw22.exe WiseSFX: infected - 1 skipped
F:\Downloads\2003\jan-2003\mail_mcea115.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\Downloads\2003\jan-2003\mail_mcea115.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\Downloads\2003\jan-2003\mail_mcea115.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\Downloads\2003\jan-2003\mail_mcea115.exe NSIS: infected - 3 skipped
F:\Downloads\2005\a-january\freeripmp3.exe/data0027 Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\Downloads\2005\a-january\freeripmp3.exe Inno: infected - 1 skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
F:\System Volume Information\catalog.wci\00010010.ci Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP856\change.log Object is locked skipped
Scan process completed.
I am hoping the viruses that Kapersky found are those that are already quarantined by AVG.
Hi
"I am hoping the viruses that Kapersky found are those that are already quarantined by AVG."
Unfortunately none of them are quarantined by AVG
Please download ATF Cleaner by Atribune (http://www.atribune.org/ccount/click.php?id=1) and save
it to desktop.
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browser
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit to close ATF-Cleaner.
Empty these folders:
C:\Documents and Settings\Tom\Local Settings\Temp\
C:\VundoFix Backups
Delete these:
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp5E.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp6.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpA.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpD9.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpE3.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpE7.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp17.tmp.exe
F:\Downloads\2002\apr 2002\iMeshV3.exe
F:\Downloads\2002\MAY 2002\dw22.exe
F:\Downloads\2003\jan-2003\mail_mcea115.exe
F:\Downloads\2005\a-january\freeripmp3.exe
Empty Recycle Bin
Re-scan with kaspersky
Post:
- a fresh HijackThis log
- kaspersky report
Logfile of HijackThis v1.99.1
Scan saved at 7:07:32 PM, on 7/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\notepad.exe
F:\Downloads\2007\07-july\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!
\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0
\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search &
Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!
\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common
Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common
Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -
http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) -
http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) -
http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-
new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) -
http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) -
http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) -
http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) -
http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command
Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared
Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite
2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite
2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, July 09, 2007 9:38:15 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 10/07/2007
Kaspersky Anti-Virus database records: 360360
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
Scan Statistics:
Total number of scanned objects: 151457
Number of viruses found: 24
Number of infected objects: 466
Number of suspicious objects: 0
Duration of the scan process: 02:17:47
Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT075bc.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT075bf.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~436005.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737893.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467068.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427116.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~670947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~694355.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~450582.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~662589.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484023.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~359263.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~933825.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~441021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~4399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443362.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~348749.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429767.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~56854.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~405449.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~547287.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~552839.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~564578.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691939.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765734.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~897416.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455513.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~557154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420731.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~614533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484883.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~393027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905786.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429145.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~462533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~447914.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471297.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706802.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363719.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~385747.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~693241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~407270.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420739.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~628938.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~636879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~401050.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~858390.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~487120.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~698763.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427773.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~406632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683435.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~402491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~717090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~224.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~5923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~84727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~775090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~498352.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~785422.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414838.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~451017.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~951387.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455804.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~473467.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~730831.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~886768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~37568.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~919460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467044.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~493238.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~690893.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459826.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363062.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~965608.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~966001.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~739599.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~324709.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~626391.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~769504.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~727573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714305.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~417901.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~808535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~782225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~761383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~685934.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~613410.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425211.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~546260.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471415.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~771275.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~632049.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905663.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~678697.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~681010.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454003.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~568682.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737420.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~703241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~712061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~766066.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~697618.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~506159.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~875155.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~32442.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~509228.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706576.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465989.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~17790.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448295.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~658025.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~433022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532667.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~652535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~544285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423552.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425210.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~825989.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713528.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443946.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423616.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~415661.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~975290.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~519612.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~12090.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~855512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~947166.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~513309.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~293559.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510220.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~483720.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454849.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~830883.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465778.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~573158.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~482602.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~941286.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691251.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~641854.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448827.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~502737.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~428042.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~745257.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~665332.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~503685.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~365876.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440243.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~351232.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~479170.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~491182.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~841935.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364914.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~915254.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~523139.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~416543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364764.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~461088.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~505947.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465750.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~925609.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510266.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~725558.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~687014.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~424994.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452959.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~488234.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714017.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409963.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427815.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757062.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~437116.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440895.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~398164.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~931719.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~525086.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~985985.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459042.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~371335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680385.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~728036.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~560813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476184.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~438394.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~285660.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414885.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~696349.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430251.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~421061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~918904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~911214.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~515277.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~431381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~466690.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~793431.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~569225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476123.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~767027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~449012.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~594954.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~553154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~477252.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443143.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~946765.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~958239.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~969611.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~464097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~470625.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442051.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430174.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~760482.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~928223.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440554.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~773020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~366723.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~310095.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532296.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~668337.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~749114.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~767192.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~670492.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~648920.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~844414.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~578506.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765054.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~701149.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~616606.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~584432.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769343.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~677002.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588850.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~645828.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~561947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~919339.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~641693.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797949.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~867286.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773367.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~566332.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~605514.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~717968.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773043.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~944244.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~729898.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698680.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~694139.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769748.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765121.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~755165.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~714183.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683397.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~785128.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~805477.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~721987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~798357.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~583799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~669647.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~660658.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675689.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~687081.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~622724.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~795543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~634971.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~807142.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~771995.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627436.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~657380.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~699297.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~713198.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588728.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~740394.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~664807.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680339.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~625590.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638386.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~552374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680461.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~681801.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~884093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~555410.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~826952.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~746027.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~745726.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683605.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~573527.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~679701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~814325.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627179.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~772778.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~907649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~695373.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646859.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~820338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~802368.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~688488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~630106.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~647756.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~665445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~743880.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~843301.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~672437.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~599588.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~850946.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~586255.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~758148.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~761555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~818445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\MSHist012007070920070710\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\search.sqlite Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\history.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\cert8.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\key3.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\parent.lock Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\change.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307399.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307440.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307580.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307582.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307583.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307584.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307585.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307586.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307587.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307588.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP817\A0287069.exe Infected: Backdoor.Win32.Small.os skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\awtsqo.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\pstmsg.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
D:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\change.log Object is locked skipped
E:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\change.log Object is locked skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno: infected - 1 skipped
F:\Program Files\valve\Steam.log Object is locked skipped
F:\Program Files\valve\SteamApps\base source engine 2.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\counter-strike source client.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\counter-strike source shared.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\day of defeat source.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\episode 1 shared.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\garrysmod content.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\half-life 2 content.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\half-life 2 episode one.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source engine.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source materials.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source models.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source sdk base.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source sounds.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\sourceinit.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\winui.gcf Object is locked skipped
F:\Program Files\valve\SteamLogs\SteamStats.log Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
F:\System Volume Information\catalog.wci\00010002.ci Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe WiseSFX: infected - 9 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe WiseSFX: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe NSIS: infected - 3 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe/data0027 Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe Inno: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\change.log Object is locked skipped
Scan process completed.
Hi
Copy text below to Notepad and save it as delfiles.bat (save it as all files, *.*)
@ECHO OFF
attrib -r -h C:\Documents and Settings\Kevin\Local Settings\Temp\*.*
del /a /f /q C:\Documents and Settings\Kevin\Local Settings\Temp\*.*
attrib -r -h C:\Documents and Settings\Michael\Local Settings\Temp\*.*
del /a /f /q C:\Documents and Settings\Michael\Local Settings\Temp\*.*
attrib -r -h C:\Documents and Settings\Guest\Local Settings\Temp\*.*
del /a /f /q C:\Documents and Settings\Guest\Local Settings\Temp\*.*
attrib -r -h C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe
del /a /f /q C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe
attrib -r -h F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe
del /a /f /q F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe
attrib -r -h C:\VundoFix Backups\*.*
del /a /f /q C:\VundoFix Backups\*.*
It should look like this -> http://users.telenet.be/bluepatchy/miekiemoes/images/bat.JPG
Doubleclick delfiles.bat; black dos windows will flash, that's normal.
(In case you are unsure how to create a bat file, take a look here (http://www.nellie2.co.uk/file.htm#How_to_Make_a_.Bat_File) with screenshots.)
Re-scan with kaspersky
Post:
- a fresh HijackThis log
- kaspersky report
latest HighjackThis log:
Logfile of HijackThis v1.99.1
Scan saved at 11:29:03 AM, on 7/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\WINDOWS\system32\wuauclt.exe
F:\Downloads\2007\07-july\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
the latest Kapersky report:
*KASPERSKY ONLINE SCANNER REPORT*
Wednesday, July 11, 2007 1:56:26 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2
(Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 11/07/2007
Kaspersky Anti-Virus database records: 361337
*Scan Settings*
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
*Scan Target* My Computer
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
*Scan Statistics*
Total number of scanned objects 152518
Number of viruses found 23
Number of infected objects 465
Number of suspicious objects 0
Duration of the scan process 02:18:07
*Infected Object Name* *Virus Name* *Last Action*
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked
skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked
skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked
skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked
skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked
skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT0463f.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT04642.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF
Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked
skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~436005.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713381.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737893.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467068.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427116.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427491.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~670947.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~694355.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680813.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~450582.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~662589.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484023.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~359263.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~933825.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~441021.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~4399.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443362.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~348749.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429767.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~56854.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~405449.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~547287.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~552839.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~564578.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691939.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765734.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~897416.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455513.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683097.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~557154.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420731.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~614533.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484883.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~393027.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905786.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429145.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~462533.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~447914.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409746.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471297.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706802.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363719.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~385747.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~693241.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~407270.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420739.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~628938.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~636879.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~401050.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~858390.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~487120.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363021.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~698763.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427773.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~406632.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683435.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~402491.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~717090.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~224.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~5923.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~84727.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~775090.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~498352.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~785422.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414838.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~451017.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~951387.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455804.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~473467.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~730831.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~886768.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~37568.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~919460.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467044.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~493238.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~690893.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459826.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363062.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~965608.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~966001.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~739599.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~324709.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~626391.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~769504.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~727573.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714305.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~417901.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~808535.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~782225.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~761383.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~685934.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~613410.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425211.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~546260.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471415.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~771275.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~632049.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905663.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~678697.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765833.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~681010.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454003.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~568682.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737420.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~703241.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~712061.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757488.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~766066.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~697618.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442833.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~506159.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~875155.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~32442.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~509228.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706576.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465989.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~17790.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448295.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~658025.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~433022.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532667.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~652535.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~544285.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423552.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442314.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425210.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~825989.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713528.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443946.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423616.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~415661.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~975290.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~519612.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~12090.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~855512.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~947166.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~513309.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~293559.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510220.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~483720.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454849.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~830883.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465778.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~573158.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~482602.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~941286.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691251.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~641854.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448827.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452799.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~502737.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~428042.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~745257.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~665332.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~503685.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~365876.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440243.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~351232.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~479170.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~491182.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~841935.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364914.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~915254.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~523139.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~416543.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364764.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~461088.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~505947.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465750.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~925609.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510266.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~725558.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~687014.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~424994.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452959.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~488234.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714017.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409963.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427815.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757062.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~437116.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440895.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~398164.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~931719.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~525086.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~985985.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459042.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~371335.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680385.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~728036.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~560813.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476184.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~438394.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~285660.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414885.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~696349.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430251.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~421061.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~918904.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~911214.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~515277.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~431381.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~466690.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~793431.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~569225.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476123.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~767027.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~449012.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~594954.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~553154.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~477252.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443143.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~946765.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~958239.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~969611.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~464097.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~470625.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442051.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430174.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~760482.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~928223.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440554.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~773020.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~366723.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~310095.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532296.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~668337.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~749114.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~767192.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~670492.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~648920.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~844414.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~578506.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765054.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~701149.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~616606.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~584432.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769343.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698727.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~677002.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588850.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~645828.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638338.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~561947.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~919339.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~641693.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797949.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~867286.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773367.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797768.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~566332.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~605514.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~717968.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773043.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~944244.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~729898.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698680.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~694139.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646154.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769748.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765121.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~755165.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~714183.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683397.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~785128.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~805477.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~721987.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~798357.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~583799.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~669647.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~660658.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675689.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~687081.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~622724.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~795543.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~634971.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~807142.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~771995.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627436.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~657380.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~699297.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797512.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~713198.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588728.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~740394.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~664807.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680339.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~625590.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638386.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~552374.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680461.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~681801.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~884093.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~555410.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~826952.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~746027.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~745726.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675374.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683605.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~573527.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~679701.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~814325.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627179.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~772778.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~907649.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~695373.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646859.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~820338.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797632.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~802368.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~688488.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~630106.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~647756.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~665445.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~743880.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~843301.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~672437.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~599588.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~850946.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~586255.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~758148.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~761555.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~818445.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\All Users.WINDOWS\Application
Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application
Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application
Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application
Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application
Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT
Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local
Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is
locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local
Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is
locked skipped
C:\Documents and Settings\NetworkService.NT
AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT
Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Temporary Internet Files\Content.IE5\index.dat Object is
locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is
locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is
locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is
locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT
AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG
Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is
locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is
locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local
Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local
Settings\History\History.IE5\MSHist012007071120070712\index.dat Object
is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary
Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application
Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application
Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object
is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\NTUSER.DAT.LOG Object is
locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local
Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Temporary
Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application
Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01
Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Cookies\index.dat Object is
locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Application
Data\tmp5.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar
skipped
C:\Documents and Settings\DIANE.GREY-TOWER\NTUSER.DAT Object is
locked skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is
locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is
locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is
locked skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL
Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL
Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll
Object is locked skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307399.dll
Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307440.dll
Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307580.dll
Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307582.exe
Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307583.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307584.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307585.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307586.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307587.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307588.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP859\change.log
Object is locked skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll
Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\awtsqo.dll.bad Infected:
not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\pstmsg.dll.bad Infected:
not-a-virus:AdWare.Win32.Virtumonde.ke skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7
Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno:
infected - 1 skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is
locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is
locked skipped
F:\System Volume Information\catalog.wci\0001000F.ci Object is locked
skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked
skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked
skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked
skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is
locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is
locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is
locked skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP857\A0306062.dll
Object is locked skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll
Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll
Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN
Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN
Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN
Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN
Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe
Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe
Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN
Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe
WiseSFX: infected - 9 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN
Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe
WiseSFX: infected - 1 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002
Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003
Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003
Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe
NSIS: infected - 3 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe/data0027
Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe
Inno: infected - 1 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP859\change.log
Object is locked skipped
*Scan process completed.*
Hi
Well that wasn't successful.
We need more brute force tools.
Please download the OTMoveIt by OldTimer (http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe).
Save it to your desktop.
Please double-click OTMoveIt.exe to run it.
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
C:\Documents and Settings\Michael\Local Settings\Temp
C:\Documents and Settings\Kevin\Local Settings\Temp
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application
Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01
C:\Documents and Settings\DIANE.GREY-TOWER\Application
Data\tmp5.tmp.exe
C:\VundoFix Backups\awtsqo.dll.bad
C:\VundoFix Backups\pstmsg.dll.bad
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe
Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
Click the red Moveit! button.
Close OTMoveIt
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
Re-scan with kaspersky
Post:
- a fresh HijackThis log
- kaspersky report
C:\Documents and Settings\Michael\Local Settings\Temp moved successfully.
C:\Documents and Settings\Kevin\Local Settings\Temp moved successfully.
File/Folder C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application not found.
File/Folder Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 not found.
File/Folder C:\Documents and Settings\DIANE.GREY-TOWER\Application not found.
File/Folder Data\tmp5.tmp.exe not found.
C:\VundoFix Backups\awtsqo.dll.bad moved successfully.
C:\VundoFix Backups\pstmsg.dll.bad moved successfully.
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe moved successfully.
Created on 07/12/2007 17:33:11
I was really tempted to push the 'clean up' button but since it was not in the instruction I will close the program and scan with Kapersky.
Logfile of HijackThis v1.99.1
Scan saved at 9:09:11 PM, on 7/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
F:\documents\555 Robson\TextPad\TXTPAD32.EXE
F:\Downloads\2007\07-july\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, July 12, 2007 9:08:10 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 13/07/2007
Kaspersky Anti-Virus database records: 361841
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
Scan Statistics:
Total number of scanned objects: 157187
Number of viruses found: 23
Number of infected objects: 465
Number of suspicious objects: 0
Duration of the scan process: 02:22:40
Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT00666.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT00669.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~586255.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~758148.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~761555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~818445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\~DFD307.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\AutoRecovery save of Document1.asd Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\~DF10D6.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\MSHist012007071220070713\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\search.sqlite Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\history.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\cert8.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\key3.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\parent.lock Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\History\History.IE5\MSHist012007071220070713\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\Documents and Settings\DIANE.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Program Files\Microsoft Office\Templates\Normal.dot Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307399.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307440.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307580.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307582.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307583.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307584.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307585.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307586.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307587.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307588.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP861\change.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
F:\Program Files\valve\Steam.log Object is locked skipped
F:\Program Files\valve\SteamApps\base source engine 2.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\counter-strike source client.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\counter-strike source shared.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\day of defeat source.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\episode 1 shared.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\garrysmod content.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\half-life 2 content.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\half-life 2 episode one.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source engine.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source materials.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source models.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source sdk base.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source sounds.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\sourceinit.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\winui.gcf Object is locked skipped
F:\Program Files\valve\SteamLogs\SteamStats.log Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
F:\System Volume Information\catalog.wci\0001000B.ci Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe WiseSFX: infected - 9 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe WiseSFX: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe NSIS: infected - 3 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe/data0027 Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe Inno: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP861\change.log Object is locked skipped
F:\_OTMoveIt\MovedFiles\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\_OTMoveIt\MovedFiles\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno: infected - 1 skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe WiseSFX: infected - 9 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe WiseSFX: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe NSIS: infected - 3 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe/data0027 Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe Inno: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP861\change.log Object is locked skipped
F:\_OTMoveIt\MovedFiles\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\_OTMoveIt\MovedFiles\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno: infected - 1 skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~552374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~555410.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~561947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~566332.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~573527.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~578506.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~583799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~584432.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~588728.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~588850.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~599588.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~605514.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~616606.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~622724.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~625590.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~627179.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~627436.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~630106.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~634971.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~638338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~638386.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~641693.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~645828.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~646154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~646859.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~647756.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~648920.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~657380.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~660658.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~664807.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~665445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~668337.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~669647.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~670492.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~672437.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~675374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~675689.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~677002.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~679701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~680339.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~680461.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~681801.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~683397.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~683605.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~687081.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~688488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~694139.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~695373.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~698680.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~698727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~699297.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~701149.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~713198.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~714183.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~717968.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~721987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~729898.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~740394.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~743880.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~745726.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~746027.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~749114.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~755165.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~765054.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~765121.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~767192.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~769343.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~769748.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~771995.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~772778.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~773043.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~773367.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~785128.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~795543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~797512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~797632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~797768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~797949.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~798357.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~802368.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~805477.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~807142.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~814325.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~820338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~826952.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~843301.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~844414.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~850946.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~867286.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~884093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~907649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~919339.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~944244.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~12090.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~17790.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~224.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~285660.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~293559.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~310095.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~32442.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~324709.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~348749.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~351232.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~359263.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~363021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~363062.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~363719.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~364764.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~364914.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~365876.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~366723.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~371335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~37568.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~385747.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~393027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~398164.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~401050.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~402491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~405449.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~406632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~407270.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~409746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~409963.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~414838.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~414885.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~415661.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~416543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~417901.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~420731.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~420739.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~421061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~423552.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~423616.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~424994.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~425210.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~425211.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~427116.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~427491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~427773.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~427815.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~428042.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~429145.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~429767.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~430174.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~430251.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~431381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~433022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~436005.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~437116.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~438394.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~4399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~440243.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~440554.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~440895.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~441021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~442051.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~442314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~442833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~443143.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~443362.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~443946.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~447914.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~448295.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~448827.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~449012.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~450582.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~451017.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~452799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~452959.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~454003.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~454849.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~455513.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~455804.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~459042.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~459826.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~461088.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~462533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~464097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~465750.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~465778.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~465989.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~466690.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~467044.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~467068.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~470625.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~471297.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~471415.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~473467.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~476123.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~476184.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~477252.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~479170.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~482602.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~483720.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~484023.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~484883.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~487120.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~488234.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~491182.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~493238.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~498352.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~502737.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~503685.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~505947.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~506159.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~509228.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~510220.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~510266.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~513309.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~515277.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~519612.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~523139.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~525086.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~532296.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~532667.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~544285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~546260.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~547287.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~552839.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~553154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~557154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~560813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~564578.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~56854.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~568682.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~569225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~573158.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~5923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~594954.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~613410.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~614533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~626391.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~628938.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~632049.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~636879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~641854.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~652535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~658025.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~662589.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~665332.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~670947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~678697.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~680385.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~680813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~681010.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~683097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~683435.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~685934.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~687014.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~690893.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~691251.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~691939.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~693241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~694355.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~696349.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~697618.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~698763.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~703241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~706576.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~706802.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~712061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~713381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~713528.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~714017.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~714305.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~717090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~725558.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~727573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~728036.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~730831.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~737420.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~737893.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~739599.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~745257.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~757062.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~757488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~760482.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~761383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~765734.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~765833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~766066.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~767027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~769504.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~771275.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~773020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~775090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~782225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~785422.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~793431.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~808535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~825989.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~830883.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~841935.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~84727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~855512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~858390.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~875155.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~886768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~897416.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~905663.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~905786.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~911214.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~915254.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~918904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~919460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~925609.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~928223.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~931719.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~933825.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~941286.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~946765.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~947166.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~951387.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~958239.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~965608.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~966001.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~969611.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~975290.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~985985.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\VundoFix Backups\awtsqo.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
F:\_OTMoveIt\MovedFiles\VundoFix Backups\pstmsg.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
Scan process completed.
Hi
Please double-click OTMoveIt.exe to run it.
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):
C:\Documents and Settings\Guest\Local Settings\Temp
Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
Click the red Moveit! button.
Close OTMoveIt
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
Please download ATF Cleaner by Atribune (http://www.atribune.org/ccount/click.php?id=1) and save
it to desktop.
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browser
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit to close ATF-Cleaner.
Empty this folder:
F:\_OTMoveIt\MovedFiles
Delete this:
C:\Documents and Settings\DIANE.GREY-TOWER\Application
Data\tmp5.tmp.exe
Empty Recycle Bin
Re-scan with kaspersky
Post:
- a fresh HijackThis log
- kaspersky report
Logfile of HijackThis v1.99.1
Scan saved at 11:44:10 PM, on 7/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\defrag.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\Downloads\2007\07-july\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!
\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0
\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search &
Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!
\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common
Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common
Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -
http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) -
http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) -
http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-
new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) -
http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) -
http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) -
http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) -
http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command
Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared
Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite
2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite
2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, July 13, 2007 11:43:33 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 14/07/2007
Kaspersky Anti-Virus database records: 362193
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
Scan Statistics:
Total number of scanned objects: 148707
Number of viruses found: 14
Number of infected objects: 39
Number of suspicious objects: 0
Duration of the scan process: 02:10:02
Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT06a81.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT06a88.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\AVPA2A.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\AVPA2B.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\MSHist012007071320070714\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\search.sqlite Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\history.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\cert8.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\key3.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\parent.lock Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307399.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307440.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307580.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307582.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307583.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307584.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307585.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307586.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307587.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307588.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\change.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\A0311459.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
D:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\change.log Object is locked skipped
E:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\change.log Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
F:\System Volume Information\catalog.wci\00010009.ci Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe WiseSFX: infected - 9 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe WiseSFX: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe NSIS: infected - 3 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\A0311460.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\A0311460.exe Inno: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\change.log Object is locked skipped
Scan process completed.
Hi
Empty this folder:
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache
Empty Recycle Bin
Otherwise looking good :)
Still problems?
Hello Shaba,
Since we have cleaned out a lot of files, some of my programs do not work or complain of missing files and ask to be reinstalled. MS Word is one of them. I own the original disk for office 97 and will reinstall it but why do you think this happened?
I would also like to ask you about security as an issue. If my son browses the net and watches you tube videos, is it safe to do on line banking? I worry about getting another key logger. I am considering partitioning the C drive so that banking can be done on another drive. If this was done would one partitioned drive be aware/safe from the other. Only one version of XP would be running at one time and if games can be separated from work, would this be a good solution?
Thanks for the help you have given me in clearing up this problem. I will be trying to make this computer more secure. Any tips you might have would be welcome.
Hi
"Since we have cleaned out a lot of files, some of my programs do not work or complain of missing files and ask to be reinstalled. MS Word is one of them. I own the original disk for office 97 and will reinstall it but why do you think this happened?"
Well some viruses may have deleted those. We haven't deleted those during cleaning process.
"I would also like to ask you about security as an issue. If my son browses the net and watches you tube videos, is it safe to do on line banking?"
Yes.
"I am considering partitioning the C drive so that banking can be done on another drive. If this was done would one partitioned drive be aware/safe from the other. Only one version of XP would be running at one time and if games can be separated from work, would this be a good solution?"
I'd say that a restricted user account (no admin rights) for son would be even better idea :) But that's not a bad idea at all.
If you need this topic reopened, please request this by sending the moderating team
a PM with the address of the thread. This applies only to the original topic starter.
Everyone else please begin a New Topic.