Blazeflack
2007-11-04, 02:28
Today I accidently clicked a link in a spam thread in some forum. I got suspecius and decided to do a little scan just to be safe. Virtumonde and Virtumonde.generic appeared to be on my system so I used S&D to remove it and then rebooted. I did another scan and Virtumonde was back, along with a few new things: LSA, NNC.MGRS, CPXinteractive, BurstMedia. No Virtumonde.generic though. I did another clean up and then used the tools suggested on these forums. Following is the Kaspersky log and the HJT log. Please look it over and help me get rid of this. Thank you.
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, November 04, 2007 1:13:31 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 4/11/2007
Kaspersky Anti-Virus database records: 450983
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
Scan Statistics:
Total number of scanned objects: 73748
Number of viruses found: 6
Number of infected objects: 19
Number of suspicious objects: 0
Duration of the scan process: 02:04:00
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\Administrator\Skrivebord\SmitfraudFix\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Administrator\Skrivebord\SmitfraudFix\SmitfraudFix\swxcacls.exe Object is locked skipped
C:\Documents and Settings\Administrator\Skrivebord\SmitfraudFix.zip Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Lokale indstillinger\Oversigt\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Lokale indstillinger\Oversigt\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Lokale indstillinger\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ehp2_stdneh.jar-42e05065-12bdf1b4.zip/BnnnnBaa.class Infected: Trojan.Java.ClassLoader.as skipped
C:\Documents and Settings\Steffen Nielsen\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ehp2_stdneh.jar-42e05065-12bdf1b4.zip/VaannnaaBaa.class Infected: Trojan.Java.ClassLoader.as skipped
C:\Documents and Settings\Steffen Nielsen\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ehp2_stdneh.jar-42e05065-12bdf1b4.zip/Bnnnnn.class Infected: Trojan.Java.ClassLoader.as skipped
C:\Documents and Settings\Steffen Nielsen\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ehp2_stdneh.jar-42e05065-12bdf1b4.zip ZIP: infected - 3 skipped
C:\Documents and Settings\Steffen Nielsen\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\ApplicationHistory\UniUploader.exe.2347dfa3.ini.inuse Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Oversigt\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Oversigt\History.IE5\MSHist012007110320071104\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Temp\Perflib_Perfdata_694.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Skrivebord\vzzmirc\mIRC.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped
C:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Programmer\Trend Micro\Internet Security 2007\Quarantine\36.tmp/vzzmirc/mIRC.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped
C:\Programmer\Trend Micro\Internet Security 2007\Quarantine\36.tmp ZIP: infected - 1 skipped
C:\Programmer\Trend Micro\Internet Security 2007\Quarantine\36.tmp CryptFF.b: infected - 1 skipped
C:\Programmer\Trend Micro\Internet Security 2007\Quarantine\BFF.tmp Infected: Exploit.Win32.IMG-ANI.ac skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{49CB0A1D-7809-4F58-AB21-735818A2B785}\RP2\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\swxcacls.exe Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\{00000003-00000000-00000001-00001102-00000008-10211102}.CDF Object is locked skipped
D:\Dokumenter\Forskellige Programmer\Mirc\mirc616.exe/data0001.bin Infected: not-a-virus:Client-IRC.Win32.mIRC.616 skipped
D:\Dokumenter\Forskellige Programmer\Mirc\mirc616.exe mIRC: infected - 1 skipped
D:\Dokumenter\Forskellige Programmer\StyleXP - Redigér temaer til Win XP\Style.XP.v3.16.Keygen.zip Object is locked skipped
D:\Dokumenter\Forskellige Programmer\XP_ProductKey_Modifier\XPPID.exe Object is locked skipped
D:\Dokumenter\Forskellige Programmer\XP_ProductKey_Modifier.zip Object is locked skipped
D:\Downloads\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key.iso/Nero PhotoShow Express/nero_photoshow_express_5_setup.exe/data0017 Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
D:\Downloads\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key.iso/Nero PhotoShow Express/nero_photoshow_express_5_setup.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
D:\Downloads\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key.iso/Toolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
D:\Downloads\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key.iso ISO image: infected - 3 skipped
D:\Downloads\Trend Micro Internet Security 2007\keygen\keygen.exe Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
G:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
H:\Nero PhotoShow Express\nero_photoshow_express_5_setup.exe/data0017 Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
H:\Nero PhotoShow Express\nero_photoshow_express_5_setup.exe NSIS: infected - 1 skipped
H:\Toolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
Scan process completed.
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, November 04, 2007 1:13:31 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 4/11/2007
Kaspersky Anti-Virus database records: 450983
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
Scan Statistics:
Total number of scanned objects: 73748
Number of viruses found: 6
Number of infected objects: 19
Number of suspicious objects: 0
Duration of the scan process: 02:04:00
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\Administrator\Skrivebord\SmitfraudFix\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Administrator\Skrivebord\SmitfraudFix\SmitfraudFix\swxcacls.exe Object is locked skipped
C:\Documents and Settings\Administrator\Skrivebord\SmitfraudFix.zip Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Lokale indstillinger\Oversigt\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Lokale indstillinger\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Lokale indstillinger\Oversigt\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Lokale indstillinger\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ehp2_stdneh.jar-42e05065-12bdf1b4.zip/BnnnnBaa.class Infected: Trojan.Java.ClassLoader.as skipped
C:\Documents and Settings\Steffen Nielsen\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ehp2_stdneh.jar-42e05065-12bdf1b4.zip/VaannnaaBaa.class Infected: Trojan.Java.ClassLoader.as skipped
C:\Documents and Settings\Steffen Nielsen\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ehp2_stdneh.jar-42e05065-12bdf1b4.zip/Bnnnnn.class Infected: Trojan.Java.ClassLoader.as skipped
C:\Documents and Settings\Steffen Nielsen\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ehp2_stdneh.jar-42e05065-12bdf1b4.zip ZIP: infected - 3 skipped
C:\Documents and Settings\Steffen Nielsen\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\ApplicationHistory\UniUploader.exe.2347dfa3.ini.inuse Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Oversigt\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Oversigt\History.IE5\MSHist012007110320071104\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Temp\Perflib_Perfdata_694.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Lokale indstillinger\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Steffen Nielsen\Skrivebord\vzzmirc\mIRC.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped
C:\Programmer\Fælles filer\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Programmer\Trend Micro\Internet Security 2007\Quarantine\36.tmp/vzzmirc/mIRC.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped
C:\Programmer\Trend Micro\Internet Security 2007\Quarantine\36.tmp ZIP: infected - 1 skipped
C:\Programmer\Trend Micro\Internet Security 2007\Quarantine\36.tmp CryptFF.b: infected - 1 skipped
C:\Programmer\Trend Micro\Internet Security 2007\Quarantine\BFF.tmp Infected: Exploit.Win32.IMG-ANI.ac skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{49CB0A1D-7809-4F58-AB21-735818A2B785}\RP2\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\swxcacls.exe Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\{00000003-00000000-00000001-00001102-00000008-10211102}.CDF Object is locked skipped
D:\Dokumenter\Forskellige Programmer\Mirc\mirc616.exe/data0001.bin Infected: not-a-virus:Client-IRC.Win32.mIRC.616 skipped
D:\Dokumenter\Forskellige Programmer\Mirc\mirc616.exe mIRC: infected - 1 skipped
D:\Dokumenter\Forskellige Programmer\StyleXP - Redigér temaer til Win XP\Style.XP.v3.16.Keygen.zip Object is locked skipped
D:\Dokumenter\Forskellige Programmer\XP_ProductKey_Modifier\XPPID.exe Object is locked skipped
D:\Dokumenter\Forskellige Programmer\XP_ProductKey_Modifier.zip Object is locked skipped
D:\Downloads\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key.iso/Nero PhotoShow Express/nero_photoshow_express_5_setup.exe/data0017 Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
D:\Downloads\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key.iso/Nero PhotoShow Express/nero_photoshow_express_5_setup.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
D:\Downloads\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key.iso/Toolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
D:\Downloads\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key\Nero_8_Ultra_Edition_v8_0_3_0_Retail_Incl_CD_Key.iso ISO image: infected - 3 skipped
D:\Downloads\Trend Micro Internet Security 2007\keygen\keygen.exe Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
G:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
H:\Nero PhotoShow Express\nero_photoshow_express_5_setup.exe/data0017 Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
H:\Nero PhotoShow Express\nero_photoshow_express_5_setup.exe NSIS: infected - 1 skipped
H:\Toolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
Scan process completed.