View Full Version : Got a Virtumonde
Hi I hope you guys can help, been deeling with this for many days. Here's the Kaspersky and HijackThis Logs
TIA
RCman
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, February 27, 2008 8:41:17 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 27/02/2008
Kaspersky Anti-Virus database records: 584376
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
Scan Statistics:
Total number of scanned objects: 186733
Number of viruses found: 41
Number of infected objects: 126
Number of suspicious objects: 0
Duration of the scan process: 02:46:19
Infected Object Name / Virus Name / Last Action
C:\53c2c7ed966bb9504b645e3f\msxml4-KB927978-enu.log Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\cert8.db Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\history.dat Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\key3.db Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\parent.lock Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Administrator\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\vvu44qzu.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012008022720080228\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBB9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBBA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBBB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBBC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBBD.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBBE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBBF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBC9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBCA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBCB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBCC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBCD.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBCE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBCF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBD9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBDA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBDB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBDC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBDD.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBDE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBDF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBE9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBEA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBEB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBEC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBED.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBEE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBEF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBF9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBFA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBFB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBFC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBFD.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBFE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posBFF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC00.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC01.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC02.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC03.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC04.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC05.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC06.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC07.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC08.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC09.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC0A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC0B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC0C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC0D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC0E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC0F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC10.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC11.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC12.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC13.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC14.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC15.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC16.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC17.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC18.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC19.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC1A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC1B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC1C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC1D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC1E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC1F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC20.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC21.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC22.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC23.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC24.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC25.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC26.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC27.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC28.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC29.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC2A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC2B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC2C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC2D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC2E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC2F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC30.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC31.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC32.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC33.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC34.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC35.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC36.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC37.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC38.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC39.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC3A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC3B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC3C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC3D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC3E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC3F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC40.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC41.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC42.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC43.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC44.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC45.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC46.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC47.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC48.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC49.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC4A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC4B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC4C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC4D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC4E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC4F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC50.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC51.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC52.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC53.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC54.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC55.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC56.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC57.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC58.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC59.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC5A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC5B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC5C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC5D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC5E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC5F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC60.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC61.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC62.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC63.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC64.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC65.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC66.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC67.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC68.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC69.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC6A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC6B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC6C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC6D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC6E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC6F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC70.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC71.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC72.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC73.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC74.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC75.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC76.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC77.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC78.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC79.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC7A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC7B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC7C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC7D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC7E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC7F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC80.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC81.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC82.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC83.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC84.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC85.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC86.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC87.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC88.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC89.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC8A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC8B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC8C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC8D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC8E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC8F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC90.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC91.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC92.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC93.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC94.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC95.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC96.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC97.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC98.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC99.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC9A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC9B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC9C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC9D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC9E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posC9F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCA9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCAA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCAB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCAC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCAD.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCAE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCAF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCB9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCBA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCBB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCBC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCBD.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCBE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCBF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCC9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCCA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCCB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCCC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCCD.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCCE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCCF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCD9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCDA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCDB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCDC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCDD.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCDE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCDF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCE9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCEA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCEB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCEC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCED.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCEE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCEF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCF9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCFA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCFB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCFC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCFD.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCFE.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posCFF.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD00.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD01.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD02.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD03.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD04.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD05.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD06.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD07.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD08.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD09.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD0A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD0B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD0C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD0D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD0E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD0F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD10.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD11.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD12.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD13.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD14.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD15.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD16.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD17.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD18.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD19.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD1A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD1B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD1C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD1D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD1E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD1F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD20.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD21.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD22.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD23.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD24.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD25.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD26.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD27.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD28.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD29.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD2A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD2B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD2C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD2D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD2E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD2F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD30.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD31.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD32.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD33.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD34.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD35.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD36.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD37.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD38.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD39.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD3A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD3B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD3C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD3D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD3E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD3F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD40.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD41.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD42.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD43.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD44.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD45.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD46.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD47.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD48.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD49.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD4A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD4B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD4C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD4D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD4E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD4F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD50.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD51.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD52.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD53.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD54.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD55.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD56.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD57.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD58.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD59.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD5A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD5B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD5C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD5D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD5E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD5F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD60.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD61.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD62.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD63.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD64.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD65.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD66.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD67.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD68.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD69.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD6A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD6B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD6C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD6D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD6E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD6F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD70.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD71.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD72.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD73.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD74.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD75.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD76.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD77.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD78.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD79.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD7A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD7B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD7C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD7D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD7E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD7F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD80.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD81.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD82.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD83.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD84.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD85.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD86.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD87.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD88.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD89.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD8A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD8B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD8C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD8D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD8E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD8F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD90.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD91.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD92.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD93.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD94.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD95.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD96.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD97.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD98.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD99.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD9A.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD9B.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD9C.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD9D.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD9E.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posD9F.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA0.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA1.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA2.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA3.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA4.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA5.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA6.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA7.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA8.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDA9.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDAA.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDAB.tmp Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\posDAC.tmp Object is locked skipped
C:\Documents and Settings\Administrator\ntuser.dat Object is locked skipped
C:\Documents and Settings\Administrator\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Authentium\ESPC\Quarantine\AAVQ\451092.tmp Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c5c07d905e91b46c0a43b3efb0d3639_2d40b2dd-3aeb-4f32-b4c0-f174e8c75135 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\All Users\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\Kaylea\Local Settings\Temporary Internet Files\Content.IE5\9N9Z7I3X\css4[1] Infected: not-a-virus:AdWare.Win32.Virtumonde.ixd skipped
C:\Documents and Settings\Kaylea\ntuser.dat Object is locked skipped
C:\Documents and Settings\Kaylea\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Kean\ntuser.dat Object is locked skipped
C:\Documents and Settings\Kean\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV241Full.exe/data.rar/plugin/ipscan/ipscan.exe Infected: not-a-virus:NetTool.Win32.Portscan.c skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV241Full.exe/data.rar/plugin/VNCServer/vncconfig.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV241Full.exe/data.rar/plugin/VNCServer/winvnc4.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV241Full.exe/data.rar/plugin/ultravnc/files/vnchooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV241Full.exe/data.rar/plugin/VNCServer/wm_hooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV241Full.exe/data.rar Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV241Full.exe RarSFX: infected - 6 skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV25.exe/data.rar/plugin/ipscan/ipscan.exe Infected: not-a-virus:NetTool.Win32.Portscan.c skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV25.exe/data.rar/plugin/passwordspro/files/PasswordsPro.exe Infected: not-a-virus:PSWTool.Win32.SAMInside.b skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV25.exe/data.rar/plugin/VNCServer/vncconfig.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV25.exe/data.rar/plugin/VNCServer/winvnc4.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV25.exe/data.rar/plugin/ultravnc/files/vnchooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV25.exe/data.rar/plugin/VNCServer/wm_hooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV25.exe/data.rar Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped
C:\Documents and Settings\Owner\Desktop\Downloads\UBCD4WinV25.exe RarSFX: infected - 7 skipped
C:\Documents and Settings\Owner\Desktop\Utilities\HijackThis\backups\backup-20080227-121703-654.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\Documents and Settings\Owner\Local Settings\Temp\opeugtbu.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\Documents and Settings\Owner\Local Settings\Temp\sfsvhhdv.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\Documents and Settings\Owner\Local Settings\Temp\tdjaikhd.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\Documents and Settings\Owner\My Documents\aѕsembly\dllhost.exe Infected: Trojan-Downloader.Win32.PurityScan.fj skipped
C:\Documents and Settings\Owner\My Documents\Downloaded Program Updates\Nero\Nero-7.8.5.0_eng_update.exe/Toolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped
C:\Documents and Settings\Owner\My Documents\Downloaded Program Updates\Nero\Nero-7.8.5.0_eng_update.exe RAR: infected - 1 skipped
C:\Documents and Settings\Owner\My Documents\My Deliveries\cnet-prod\BTV_V34_FULL.exe/data.rar/build/quartz/build/install/PVS_V3_ProfileGuided_1334.msi/Cabs.w1.cab/pskill.exe Infected: not-a-virus:RiskTool.Win32.PsKill.103 skipped
C:\Documents and Settings\Owner\My Documents\My Deliveries\cnet-prod\BTV_V34_FULL.exe/data.rar/build/quartz/build/install/PVS_V3_ProfileGuided_1334.msi/Cabs.w1.cab Infected: not-a-virus:RiskTool.Win32.PsKill.103 skipped
C:\Documents and Settings\Owner\My Documents\My Deliveries\cnet-prod\BTV_V34_FULL.exe/data.rar/build/quartz/build/install/PVS_V3_ProfileGuided_1334.msi Infected: not-a-virus:RiskTool.Win32.PsKill.103 skipped
C:\Documents and Settings\Owner\My Documents\My Deliveries\cnet-prod\BTV_V34_FULL.exe/data.rar Infected: not-a-virus:RiskTool.Win32.PsKill.103 skipped
C:\Documents and Settings\Owner\My Documents\My Deliveries\cnet-prod\BTV_V34_FULL.exe RarSFX: infected - 4 skipped
C:\Documents and Settings\Owner\My Documents\My Deliveries\cnet-prod\tbar.exe/WISE0067.BIN Infected: not-a-virus:AdWare.Win32.Dogpile.a skipped
C:\Documents and Settings\Owner\My Documents\My Deliveries\cnet-prod\tbar.exe/WISE0068.BIN Infected: not-a-virus:AdWare.Win32.Dogpile.a skipped
C:\Documents and Settings\Owner\My Documents\My Deliveries\cnet-prod\tbar.exe WiseSFX: infected - 2 skipped
C:\Documents and Settings\Owner\My Documents\My Deliveries\cnet-prod\tbar.exe WiseSFXDropper: infected - 2 skipped
C:\Documents and Settings\Owner\My Documents\My Downloads\VNCViewer\UltraVNC-102-Setup.exe/file04 Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\Documents and Settings\Owner\My Documents\My Downloads\VNCViewer\UltraVNC-102-Setup.exe/file05 Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\Documents and Settings\Owner\My Documents\My Downloads\VNCViewer\UltraVNC-102-Setup.exe/file34 Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.1102 skipped
C:\Documents and Settings\Owner\My Documents\My Downloads\VNCViewer\UltraVNC-102-Setup.exe Inno: infected - 3 skipped
C:\Documents and Settings\Owner\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Owner\ntuser.dat.LOG Object is locked skipped
C:\pos9C5.tmp Object is locked skipped
C:\pos9C6.tmp Object is locked skipped
C:\pos9C7.tmp Object is locked skipped
C:\pos9C8.tmp Object is locked skipped
C:\pos9C9.tmp Object is locked skipped
C:\pos9CA.tmp Object is locked skipped
C:\pos9CB.tmp Object is locked skipped
C:\pos9CC.tmp Object is locked skipped
C:\pos9CD.tmp Object is locked skipped
C:\pos9CE.tmp Object is locked skipped
C:\pos9CF.tmp Object is locked skipped
C:\pos9D0.tmp Object is locked skipped
C:\pos9D1.tmp Object is locked skipped
C:\pos9D2.tmp Object is locked skipped
C:\pos9D3.tmp Object is locked skipped
C:\pos9D4.tmp Object is locked skipped
C:\pos9D5.tmp Object is locked skipped
C:\pos9D6.tmp Object is locked skipped
C:\pos9D7.tmp Object is locked skipped
C:\pos9D8.tmp Object is locked skipped
C:\pos9D9.tmp Object is locked skipped
C:\pos9DA.tmp Object is locked skipped
C:\pos9DB.tmp Object is locked skipped
C:\pos9DC.tmp Object is locked skipped
C:\pos9DD.tmp Object is locked skipped
C:\pos9DE.tmp Object is locked skipped
C:\pos9DF.tmp Object is locked skipped
C:\pos9E0.tmp Object is locked skipped
C:\pos9E1.tmp Object is locked skipped
C:\pos9E2.tmp Object is locked skipped
C:\pos9E3.tmp Object is locked skipped
C:\pos9E4.tmp Object is locked skipped
C:\pos9E5.tmp Object is locked skipped
C:\pos9E6.tmp Object is locked skipped
C:\pos9E7.tmp Object is locked skipped
C:\pos9E8.tmp Object is locked skipped
C:\pos9E9.tmp Object is locked skipped
C:\pos9EA.tmp Object is locked skipped
C:\pos9EB.tmp Object is locked skipped
C:\pos9EC.tmp Object is locked skipped
C:\pos9ED.tmp Object is locked skipped
C:\pos9EE.tmp Object is locked skipped
C:\pos9EF.tmp Object is locked skipped
C:\pos9F0.tmp Object is locked skipped
C:\pos9F1.tmp Object is locked skipped
C:\pos9F2.tmp Object is locked skipped
C:\pos9F3.tmp Object is locked skipped
C:\pos9F4.tmp Object is locked skipped
C:\pos9F5.tmp Object is locked skipped
C:\pos9F6.tmp Object is locked skipped
C:\pos9F7.tmp Object is locked skipped
C:\pos9F8.tmp Object is locked skipped
C:\pos9F9.tmp Object is locked skipped
C:\pos9FA.tmp Object is locked skipped
C:\pos9FB.tmp Object is locked skipped
C:\pos9FC.tmp Object is locked skipped
C:\pos9FD.tmp Object is locked skipped
C:\pos9FE.tmp Object is locked skipped
C:\pos9FF.tmp Object is locked skipped
C:\posA00.tmp Object is locked skipped
C:\posA01.tmp Object is locked skipped
C:\posA02.tmp Object is locked skipped
C:\posA03.tmp Object is locked skipped
C:\posA04.tmp Object is locked skipped
C:\posA05.tmp Object is locked skipped
C:\posA06.tmp Object is locked skipped
C:\posA07.tmp Object is locked skipped
C:\posA08.tmp Object is locked skipped
C:\posA09.tmp Object is locked skipped
C:\posA0A.tmp Object is locked skipped
C:\posA0B.tmp Object is locked skipped
C:\posA0C.tmp Object is locked skipped
C:\posA0D.tmp Object is locked skipped
C:\posA0E.tmp Object is locked skipped
C:\posA0F.tmp Object is locked skipped
C:\posA10.tmp Object is locked skipped
C:\posA11.tmp Object is locked skipped
C:\posA12.tmp Object is locked skipped
C:\posA13.tmp Object is locked skipped
C:\posA14.tmp Object is locked skipped
C:\posA15.tmp Object is locked skipped
C:\posA16.tmp Object is locked skipped
C:\posA17.tmp Object is locked skipped
C:\posA18.tmp Object is locked skipped
C:\posA19.tmp Object is locked skipped
C:\posA1A.tmp Object is locked skipped
C:\posA1B.tmp Object is locked skipped
C:\posA1C.tmp Object is locked skipped
C:\posA1D.tmp Object is locked skipped
C:\posA1E.tmp Object is locked skipped
C:\posA1F.tmp Object is locked skipped
C:\posA20.tmp Object is locked skipped
C:\posA21.tmp Object is locked skipped
C:\posA22.tmp Object is locked skipped
C:\posA23.tmp Object is locked skipped
C:\posA24.tmp Object is locked skipped
C:\posA25.tmp Object is locked skipped
C:\posA26.tmp Object is locked skipped
C:\posA27.tmp Object is locked skipped
C:\posA28.tmp Object is locked skipped
C:\posA29.tmp Object is locked skipped
C:\posA2A.tmp Object is locked skipped
C:\posA2B.tmp Object is locked skipped
C:\posA2C.tmp Object is locked skipped
C:\posA2D.tmp Object is locked skipped
C:\posA2E.tmp Object is locked skipped
C:\posA2F.tmp Object is locked skipped
C:\posA30.tmp Object is locked skipped
C:\posA31.tmp Object is locked skipped
C:\posA32.tmp Object is locked skipped
C:\posA33.tmp Object is locked skipped
C:\posA34.tmp Object is locked skipped
C:\posA35.tmp Object is locked skipped
C:\posA36.tmp Object is locked skipped
C:\posA37.tmp Object is locked skipped
C:\posA38.tmp Object is locked skipped
C:\posA39.tmp Object is locked skipped
C:\posA3A.tmp Object is locked skipped
C:\posA3B.tmp Object is locked skipped
C:\posA3C.tmp Object is locked skipped
C:\posA3D.tmp Object is locked skipped
C:\posA3E.tmp Object is locked skipped
C:\posA3F.tmp Object is locked skipped
C:\posA40.tmp Object is locked skipped
C:\posA41.tmp Object is locked skipped
C:\posA42.tmp Object is locked skipped
C:\posA43.tmp Object is locked skipped
C:\posA44.tmp Object is locked skipped
C:\posA45.tmp Object is locked skipped
C:\posA46.tmp Object is locked skipped
C:\posA47.tmp Object is locked skipped
C:\posA48.tmp Object is locked skipped
C:\posA49.tmp Object is locked skipped
C:\posA4A.tmp Object is locked skipped
C:\posA4B.tmp Object is locked skipped
C:\posA4C.tmp Object is locked skipped
C:\posA4D.tmp Object is locked skipped
C:\posA4E.tmp Object is locked skipped
C:\posA4F.tmp Object is locked skipped
C:\posA50.tmp Object is locked skipped
C:\posA51.tmp Object is locked skipped
C:\posA52.tmp Object is locked skipped
C:\posA53.tmp Object is locked skipped
C:\posA54.tmp Object is locked skipped
C:\posA55.tmp Object is locked skipped
C:\posA56.tmp Object is locked skipped
C:\posA57.tmp Object is locked skipped
C:\posA58.tmp Object is locked skipped
C:\posA59.tmp Object is locked skipped
C:\posA5A.tmp Object is locked skipped
C:\posA5B.tmp Object is locked skipped
C:\posA5C.tmp Object is locked skipped
C:\posA5D.tmp Object is locked skipped
C:\posA5E.tmp Object is locked skipped
C:\posA5F.tmp Object is locked skipped
C:\posA60.tmp Object is locked skipped
C:\posA61.tmp Object is locked skipped
C:\posA62.tmp Object is locked skipped
C:\posA63.tmp Object is locked skipped
C:\posA64.tmp Object is locked skipped
C:\posA65.tmp Object is locked skipped
C:\posA66.tmp Object is locked skipped
C:\posA67.tmp Object is locked skipped
C:\posA68.tmp Object is locked skipped
C:\posA69.tmp Object is locked skipped
C:\posA6A.tmp Object is locked skipped
C:\posA6B.tmp Object is locked skipped
C:\posA6C.tmp Object is locked skipped
C:\posA6D.tmp Object is locked skipped
C:\posA6E.tmp Object is locked skipped
C:\posA6F.tmp Object is locked skipped
C:\posA70.tmp Object is locked skipped
C:\posA71.tmp Object is locked skipped
C:\posA72.tmp Object is locked skipped
C:\posA73.tmp Object is locked skipped
C:\posA74.tmp Object is locked skipped
C:\posA75.tmp Object is locked skipped
C:\posA76.tmp Object is locked skipped
C:\posA77.tmp Object is locked skipped
C:\posA78.tmp Object is locked skipped
C:\posA79.tmp Object is locked skipped
C:\posA7A.tmp Object is locked skipped
C:\posA7B.tmp Object is locked skipped
C:\posA7C.tmp Object is locked skipped
C:\posA7D.tmp Object is locked skipped
C:\posA7E.tmp Object is locked skipped
C:\posA7F.tmp Object is locked skipped
C:\posA80.tmp Object is locked skipped
C:\posA81.tmp Object is locked skipped
C:\posA82.tmp Object is locked skipped
C:\posA83.tmp Object is locked skipped
C:\posA84.tmp Object is locked skipped
C:\posA85.tmp Object is locked skipped
C:\posA86.tmp Object is locked skipped
C:\posA87.tmp Object is locked skipped
C:\posA88.tmp Object is locked skipped
C:\posA89.tmp Object is locked skipped
C:\posA8A.tmp Object is locked skipped
C:\posA8B.tmp Object is locked skipped
C:\posA8C.tmp Object is locked skipped
C:\posA8D.tmp Object is locked skipped
C:\posA8E.tmp Object is locked skipped
C:\posA8F.tmp Object is locked skipped
C:\posA90.tmp Object is locked skipped
C:\posA91.tmp Object is locked skipped
C:\posA92.tmp Object is locked skipped
C:\posA93.tmp Object is locked skipped
C:\posA94.tmp Object is locked skipped
C:\posA95.tmp Object is locked skipped
C:\posA96.tmp Object is locked skipped
C:\posA97.tmp Object is locked skipped
C:\posA98.tmp Object is locked skipped
C:\posA99.tmp Object is locked skipped
C:\posA9A.tmp Object is locked skipped
C:\posA9B.tmp Object is locked skipped
C:\posA9C.tmp Object is locked skipped
C:\posA9D.tmp Object is locked skipped
C:\posA9E.tmp Object is locked skipped
C:\posA9F.tmp Object is locked skipped
C:\posAA0.tmp Object is locked skipped
C:\posAA1.tmp Object is locked skipped
C:\posAA2.tmp Object is locked skipped
C:\posAA3.tmp Object is locked skipped
C:\posAA4.tmp Object is locked skipped
C:\posAA5.tmp Object is locked skipped
C:\posAA6.tmp Object is locked skipped
C:\posAA7.tmp Object is locked skipped
C:\posAA8.tmp Object is locked skipped
C:\posAA9.tmp Object is locked skipped
C:\posAAA.tmp Object is locked skipped
C:\posAAB.tmp Object is locked skipped
C:\posAAC.tmp Object is locked skipped
C:\posAAD.tmp Object is locked skipped
C:\posAAE.tmp Object is locked skipped
C:\posAAF.tmp Object is locked skipped
C:\posAB0.tmp Object is locked skipped
C:\posAB1.tmp Object is locked skipped
C:\posAB2.tmp Object is locked skipped
C:\posAB3.tmp Object is locked skipped
C:\posAB4.tmp Object is locked skipped
C:\posAB5.tmp Object is locked skipped
C:\posAB6.tmp Object is locked skipped
C:\posAB7.tmp Object is locked skipped
C:\posAB8.tmp Object is locked skipped
C:\posAB9.tmp Object is locked skipped
C:\posABA.tmp Object is locked skipped
C:\posABB.tmp Object is locked skipped
C:\posABC.tmp Object is locked skipped
C:\posABD.tmp Object is locked skipped
C:\posABE.tmp Object is locked skipped
C:\posABF.tmp Object is locked skipped
C:\posAC0.tmp Object is locked skipped
C:\posAC1.tmp Object is locked skipped
C:\posAC2.tmp Object is locked skipped
C:\posAC3.tmp Object is locked skipped
C:\posAC4.tmp Object is locked skipped
C:\posAC5.tmp Object is locked skipped
C:\posAC6.tmp Object is locked skipped
C:\posAC7.tmp Object is locked skipped
C:\posAC8.tmp Object is locked skipped
C:\posAC9.tmp Object is locked skipped
C:\posACA.tmp Object is locked skipped
C:\posACB.tmp Object is locked skipped
C:\posACC.tmp Object is locked skipped
C:\posACD.tmp Object is locked skipped
C:\posACE.tmp Object is locked skipped
C:\posACF.tmp Object is locked skipped
C:\posAD0.tmp Object is locked skipped
C:\posAD1.tmp Object is locked skipped
C:\posAD2.tmp Object is locked skipped
C:\posAD3.tmp Object is locked skipped
C:\posAD4.tmp Object is locked skipped
C:\posAD5.tmp Object is locked skipped
C:\posAD6.tmp Object is locked skipped
C:\posAD7.tmp Object is locked skipped
C:\posAD8.tmp Object is locked skipped
C:\posAD9.tmp Object is locked skipped
C:\posADA.tmp Object is locked skipped
C:\posADB.tmp Object is locked skipped
C:\posADC.tmp Object is locked skipped
C:\posADD.tmp Object is locked skipped
C:\posADE.tmp Object is locked skipped
C:\posADF.tmp Object is locked skipped
C:\posAE0.tmp Object is locked skipped
C:\posAE1.tmp Object is locked skipped
C:\posAE2.tmp Object is locked skipped
C:\posAE3.tmp Object is locked skipped
C:\posAE4.tmp Object is locked skipped
C:\posAE5.tmp Object is locked skipped
C:\posAE6.tmp Object is locked skipped
C:\posAE7.tmp Object is locked skipped
C:\posAE8.tmp Object is locked skipped
C:\posAE9.tmp Object is locked skipped
C:\posAEA.tmp Object is locked skipped
C:\posAEB.tmp Object is locked skipped
C:\posAEC.tmp Object is locked skipped
C:\posAED.tmp Object is locked skipped
C:\posAEE.tmp Object is locked skipped
C:\posAEF.tmp Object is locked skipped
C:\posAF0.tmp Object is locked skipped
C:\posAF1.tmp Object is locked skipped
C:\posAF2.tmp Object is locked skipped
C:\posAF3.tmp Object is locked skipped
C:\posAF4.tmp Object is locked skipped
C:\posAF5.tmp Object is locked skipped
C:\posAF6.tmp Object is locked skipped
C:\posAF7.tmp Object is locked skipped
C:\posAF8.tmp Object is locked skipped
C:\posAF9.tmp Object is locked skipped
C:\posAFA.tmp Object is locked skipped
C:\posAFB.tmp Object is locked skipped
C:\posAFC.tmp Object is locked skipped
C:\posAFD.tmp Object is locked skipped
C:\posAFE.tmp Object is locked skipped
C:\posAFF.tmp Object is locked skipped
C:\posB00.tmp Object is locked skipped
C:\posB01.tmp Object is locked skipped
C:\posB02.tmp Object is locked skipped
C:\posB03.tmp Object is locked skipped
C:\posB04.tmp Object is locked skipped
C:\posB05.tmp Object is locked skipped
C:\posB06.tmp Object is locked skipped
C:\posB07.tmp Object is locked skipped
C:\posB08.tmp Object is locked skipped
C:\posB09.tmp Object is locked skipped
C:\posB0A.tmp Object is locked skipped
C:\posB0B.tmp Object is locked skipped
C:\posB0C.tmp Object is locked skipped
C:\posB0D.tmp Object is locked skipped
C:\posB0E.tmp Object is locked skipped
C:\posB0F.tmp Object is locked skipped
C:\posB10.tmp Object is locked skipped
C:\posB11.tmp Object is locked skipped
C:\posB12.tmp Object is locked skipped
C:\posB13.tmp Object is locked skipped
C:\posB14.tmp Object is locked skipped
C:\posB15.tmp Object is locked skipped
C:\posB16.tmp Object is locked skipped
C:\posB17.tmp Object is locked skipped
C:\posB18.tmp Object is locked skipped
C:\posB19.tmp Object is locked skipped
C:\posB1A.tmp Object is locked skipped
C:\posB1B.tmp Object is locked skipped
C:\posB1C.tmp Object is locked skipped
C:\posB1D.tmp Object is locked skipped
C:\posB1E.tmp Object is locked skipped
C:\posB1F.tmp Object is locked skipped
C:\posB20.tmp Object is locked skipped
C:\posB21.tmp Object is locked skipped
C:\posB22.tmp Object is locked skipped
C:\posB23.tmp Object is locked skipped
C:\posB24.tmp Object is locked skipped
C:\posB25.tmp Object is locked skipped
C:\posB26.tmp Object is locked skipped
C:\posB27.tmp Object is locked skipped
C:\posB28.tmp Object is locked skipped
C:\posB29.tmp Object is locked skipped
C:\posB2A.tmp Object is locked skipped
C:\posB2B.tmp Object is locked skipped
C:\posB2C.tmp Object is locked skipped
C:\posB2D.tmp Object is locked skipped
C:\posB2E.tmp Object is locked skipped
C:\posB2F.tmp Object is locked skipped
C:\posB30.tmp Object is locked skipped
C:\posB31.tmp Object is locked skipped
C:\posB32.tmp Object is locked skipped
C:\posB33.tmp Object is locked skipped
C:\posB34.tmp Object is locked skipped
C:\posB35.tmp Object is locked skipped
C:\posB36.tmp Object is locked skipped
C:\posB37.tmp Object is locked skipped
C:\posB38.tmp Object is locked skipped
C:\posB39.tmp Object is locked skipped
C:\posB3A.tmp Object is locked skipped
C:\posB3B.tmp Object is locked skipped
C:\posB3C.tmp Object is locked skipped
C:\posB3D.tmp Object is locked skipped
C:\posB3E.tmp Object is locked skipped
C:\posB3F.tmp Object is locked skipped
C:\posB40.tmp Object is locked skipped
C:\posB41.tmp Object is locked skipped
C:\posB42.tmp Object is locked skipped
C:\posB43.tmp Object is locked skipped
C:\posB44.tmp Object is locked skipped
C:\posB45.tmp Object is locked skipped
C:\posB46.tmp Object is locked skipped
C:\posB47.tmp Object is locked skipped
C:\posB48.tmp Object is locked skipped
C:\posB49.tmp Object is locked skipped
C:\posB4A.tmp Object is locked skipped
C:\posB4B.tmp Object is locked skipped
C:\posB4C.tmp Object is locked skipped
C:\posB4D.tmp Object is locked skipped
C:\posB4E.tmp Object is locked skipped
C:\posB4F.tmp Object is locked skipped
C:\posB50.tmp Object is locked skipped
C:\posB51.tmp Object is locked skipped
C:\posB52.tmp Object is locked skipped
C:\posB53.tmp Object is locked skipped
C:\posB54.tmp Object is locked skipped
C:\posB55.tmp Object is locked skipped
C:\posB56.tmp Object is locked skipped
C:\posB57.tmp Object is locked skipped
C:\posB58.tmp Object is locked skipped
C:\posB59.tmp Object is locked skipped
C:\posB5A.tmp Object is locked skipped
C:\posB5B.tmp Object is locked skipped
C:\posB5C.tmp Object is locked skipped
C:\posB5D.tmp Object is locked skipped
C:\posB5E.tmp Object is locked skipped
C:\posB5F.tmp Object is locked skipped
C:\posB60.tmp Object is locked skipped
C:\posB61.tmp Object is locked skipped
C:\posB62.tmp Object is locked skipped
C:\posB63.tmp Object is locked skipped
C:\posB64.tmp Object is locked skipped
C:\posB65.tmp Object is locked skipped
C:\posB66.tmp Object is locked skipped
C:\posB67.tmp Object is locked skipped
C:\posB68.tmp Object is locked skipped
C:\posB69.tmp Object is locked skipped
C:\posB6A.tmp Object is locked skipped
C:\posB6B.tmp Object is locked skipped
C:\posB6C.tmp Object is locked skipped
C:\posB6D.tmp Object is locked skipped
C:\posB6E.tmp Object is locked skipped
C:\posB6F.tmp Object is locked skipped
C:\posB70.tmp Object is locked skipped
C:\posB71.tmp Object is locked skipped
C:\posB72.tmp Object is locked skipped
C:\posB73.tmp Object is locked skipped
C:\posB74.tmp Object is locked skipped
C:\posB75.tmp Object is locked skipped
C:\posB76.tmp Object is locked skipped
C:\posB77.tmp Object is locked skipped
C:\posB78.tmp Object is locked skipped
C:\posB79.tmp Object is locked skipped
C:\posB7A.tmp Object is locked skipped
C:\posB7B.tmp Object is locked skipped
C:\posB7C.tmp Object is locked skipped
C:\posB7D.tmp Object is locked skipped
C:\posB7E.tmp Object is locked skipped
C:\posB7F.tmp Object is locked skipped
C:\posB80.tmp Object is locked skipped
C:\posB81.tmp Object is locked skipped
C:\posB82.tmp Object is locked skipped
C:\posB83.tmp Object is locked skipped
C:\posB84.tmp Object is locked skipped
C:\posB85.tmp Object is locked skipped
C:\posB86.tmp Object is locked skipped
C:\posB87.tmp Object is locked skipped
C:\posB88.tmp Object is locked skipped
C:\posB89.tmp Object is locked skipped
C:\posB8A.tmp Object is locked skipped
C:\posB8B.tmp Object is locked skipped
C:\posB8C.tmp Object is locked skipped
C:\posB8D.tmp Object is locked skipped
C:\posB8E.tmp Object is locked skipped
C:\posB8F.tmp Object is locked skipped
C:\posB90.tmp Object is locked skipped
C:\posB91.tmp Object is locked skipped
C:\posB92.tmp Object is locked skipped
C:\posB93.tmp Object is locked skipped
C:\posB94.tmp Object is locked skipped
C:\posB95.tmp Object is locked skipped
C:\posB96.tmp Object is locked skipped
C:\posB97.tmp Object is locked skipped
C:\posB98.tmp Object is locked skipped
C:\posB99.tmp Object is locked skipped
C:\posB9A.tmp Object is locked skipped
C:\posB9B.tmp Object is locked skipped
C:\posB9C.tmp Object is locked skipped
C:\posB9D.tmp Object is locked skipped
C:\posB9E.tmp Object is locked skipped
C:\posB9F.tmp Object is locked skipped
C:\posBA0.tmp Object is locked skipped
C:\posBA1.tmp Object is locked skipped
C:\posBA2.tmp Object is locked skipped
C:\posBA3.tmp Object is locked skipped
C:\posBA4.tmp Object is locked skipped
C:\posBA5.tmp Object is locked skipped
C:\posBA6.tmp Object is locked skipped
C:\posBA7.tmp Object is locked skipped
C:\posBA8.tmp Object is locked skipped
C:\posBA9.tmp Object is locked skipped
C:\posBAA.tmp Object is locked skipped
C:\posBAB.tmp Object is locked skipped
C:\posBAC.tmp Object is locked skipped
C:\posBAD.tmp Object is locked skipped
C:\posBAE.tmp Object is locked skipped
C:\posBAF.tmp Object is locked skipped
C:\posBB0.tmp Object is locked skipped
C:\posBB1.tmp Object is locked skipped
C:\posBB2.tmp Object is locked skipped
C:\posBB3.tmp Object is locked skipped
C:\posBB4.tmp Object is locked skipped
C:\posBB5.tmp Object is locked skipped
C:\posBB6.tmp Object is locked skipped
C:\posBB7.tmp Object is locked skipped
C:\posBB8.tmp Object is locked skipped
C:\Program Files\Common Files\Fоnts\сhkdsk.exe Infected: not-a-virus:AdWare.Win32.PurityScan.gw skipped
C:\Program Files\JavaCore\JavaCore.exe Infected: not-a-virus:AdWare.Win32.Insider.b skipped
C:\Program Files\Outlook Express\zyhotoben89104.dll Infected: not-a-virus:AdWare.Win32.TTC.d skipped
C:\Program Files\Temporary\InsiDERIns.exe Infected: Trojan.Win32.Agent.fow skipped
C:\Program Files\Yahoo!\YPSR\Quarantine\20070815173538.zip Object is locked skipped
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqdb.dat Object is locked skipped
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqsdb.dat Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc10\bssym7.ttf Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\callcont.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\h323.tsp Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\h323msp.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\helpctr.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\ipnathlp.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\lsasrv.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\mf3216.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\msasn1.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\msgina.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\mst120.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\netapi32.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\nmcom.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\rtcdll.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc12\schannel.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\authadmin.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\authSSP.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\install.bat Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\install_silent.bat Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\setupdrv.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\uninstall.bat Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\uninstall_silent.bat Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\vnccom.sys Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\vncdrv.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\vncdrv.inf Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\vncdrv.sys Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\driver\vnchelp.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\ldapauth.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\logging.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\logmessages.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\MSLogonACL.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\plugin\debug_off.reg Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\plugin\debug_on.reg Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\plugin\testserver.bat Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\plugin\testserver.cmd Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\plugin\testviewer.bat Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\plugin\testviewer.cmd Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\repeater.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\translation\french.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\translation\german.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\unins000.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\UnZip32.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\vnchooks.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\VNCHooks_Settings.reg Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\vncviewer.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\winvnc.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\workgrpdomnt4.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2240.tmp\Zip32.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2479.tmp\vnchooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2479.tmp\vncviewer.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.1102 skipped
C:\RECYCLER\S-1-5-21-3692909862-1669556953-2043515351-1003\Dc2479.tmp\winvnc.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP564\A0085521.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP564\A0085523.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.1102 skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP564\A0085524.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP564\A0085566.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP564\A0085568.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.1102 skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP564\A0085569.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.c skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP608\A0095047.exe Infected: Trojan-Downloader.Win32.Agent.jhv skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP609\A0095071.dll Infected: not-a-virus:AdWare.Win32.ZenoSearch.ad skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP610\A0095078.exe Infected: Trojan-Downloader.Win32.Agent.hcm skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP610\A0095079.exe Infected: Trojan-Downloader.Win32.Agent.hcn skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP610\A0095092.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP610\A0095106.exe Infected: not-a-virus:AdWare.Win32.Agent.afi skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP612\A0095209.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP613\A0096323.dll Infected: not-a-virus:AdWare.Win32.Mirar.n skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP613\A0096324.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP613\A0096325.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP613\A0096326.dll Infected: not-a-virus:AdWare.Win32.ZenoSearch.ad skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP613\A0096327.exe Infected: not-a-virus:AdWare.Win32.ZenoSearch.o skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP613\A0096332.exe Infected: Trojan-Downloader.Win32.Agent.fjv skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP613\A0096333.exe Infected: Trojan-Downloader.Win32.Agent.cbx skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP614\A0096388.dll Infected: not-a-virus:AdWare.Win32.Mirar.o skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP614\A0096389.exe Infected: not-a-virus:AdWare.Win32.ZenoSearch.o skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP614\A0096391.exe Infected: Trojan.Win32.Scapur.k skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP614\A0096392.exe/data0001 Infected: not-a-virus:AdWare.Win32.PurityScan.gp skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP614\A0096392.exe NSIS: infected - 1 skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP614\A0096393.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP615\A0096421.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP616\A0096462.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP617\change.log Object is locked skipped
C:\WINDOWS\b116.exe Infected: Trojan-Downloader.Win32.Agent.ezc skipped
C:\WINDOWS\b152.exe Infected: Trojan-Dropper.Win32.Agent.eso skipped
C:\WINDOWS\b153.exe Infected: Trojan-Downloader.Win32.Agent.jig skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\mrofinu1000106.exe Infected: Trojan-Downloader.Win32.Agent.jhv skipped
C:\WINDOWS\mrofinu572.exe Infected: Trojan-Downloader.Win32.Agent.jhv skipped
C:\WINDOWS\mrofinu572.exe.tmp Infected: Trojan-Downloader.Win32.Agent.jhv skipped
C:\WINDOWS\system32\alipgcsf.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\bgiephjh.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\bljsoyrm.dll Infected: not-a-virus:AdWare.Win32.BHO.v skipped
C:\WINDOWS\system32\btvdkatl.dll Infected: not-a-virus:AdWare.Win32.SuperJuan.bce skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\cgidbgon.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\cjwthhdo.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\ckwlgqro.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\fccbywx.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\fkbldnuv.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.kj skipped
C:\WINDOWS\system32\fmunwtbr.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\WINDOWS\system32\helrixxs.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\WINDOWS\system32\hxwfoeqs.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\iqhhvdvn.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\jdlcjbty.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\kcqkxfdw.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\WINDOWS\system32\lcpxfbtu.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\lfwvnshl.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.kj skipped
C:\WINDOWS\system32\lhdcycjd.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\lprxeebp.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.kj skipped
C:\WINDOWS\system32\mljhfff.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\mtis.dll Infected: not-a-virus:AdWare.Win32.PurityScan.gv skipped
C:\WINDOWS\system32\mwinsndq.exe Infected: not-a-virus:AdWare.Win32.ZenoSearch.ad skipped
C:\WINDOWS\system32\mwinsndt.exe Infected: not-a-virus:AdWare.Win32.ZenoSearch.r skipped
C:\WINDOWS\system32\mwinsndv.exe Infected: not-a-virus:AdWare.Win32.ZenoSearch.v skipped
C:\WINDOWS\system32\mwqnvkzf.dll Infected: not-a-virus:AdWare.Win32.PurityScan.gv skipped
C:\WINDOWS\system32\nGpxx01\nGpxx011065.exe Infected: Trojan-Downloader.Win32.VB.cgu skipped
C:\WINDOWS\system32\ngtafskt.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\nlkncpsg.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\WINDOWS\system32\nlqninln.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\WINDOWS\system32\nluptasv.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\ogkvbvby.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\ojicvljf.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.kj skipped
C:\WINDOWS\system32\p9\liopud89104.exe/data0002 Infected: not-a-virus:AdWare.Win32.TTC.d skipped
C:\WINDOWS\system32\p9\liopud89104.exe NSIS: infected - 1 skipped
C:\WINDOWS\system32\pcktvgeo.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\WINDOWS\system32\pemofdrr.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\phcagwtd.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\rmailege.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.kj skipped
C:\WINDOWS\system32\roeypcbp.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\ruynivvn.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.kj skipped
C:\WINDOWS\system32\sprsjego.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\WINDOWS\system32\taxqbbrs.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.kg skipped
C:\WINDOWS\system32\tsbkkhya.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\vacvpaat.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ki skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\xcvubeag.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\xdmrfqwr.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\WINDOWS\system32\xfoqlaxb.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.kg skipped
C:\WINDOWS\system32\Мicrosoft.NET\tаskmgr.exe Infected: not-a-virus:AdWare.Win32.PurityScan.gw skipped
G:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
Scan process completed.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:47:02 PM, on 2/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/?.home=ytie
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?.home=ytie
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost;127.0.0.1;localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {08945512-6F07-40DE-8187-EF7648FE2A3C} - C:\WINDOWS\system32\ssqpq.dll
O2 - BHO: AuthPopupBHO01.cBHO - {3C7195F6-D788-4D50-BA72-2EE212EDAC78} - C:\Program Files\Cox\Applications\App\popupbho01.dll
O2 - BHO: (no name) - {3DFC3BA0-C616-4046-BC79-9C12C10ED6E7} - C:\WINDOWS\system32\sstqq.dll (file missing)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\xcvubeag.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {D85530E8-D39D-49D0-9F36-300D594556D2} - C:\WINDOWS\system32\fccbywx.dll
O2 - BHO: {768345b8-ee76-479a-c684-50696b3ae52e} - {e25ea3b6-9605-486c-a974-67ee8b543867} - C:\WINDOWS\system32\ogkvbvby.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: Cox Popup Blocker - {2C0A5F28-48D8-408B-9172-9C6121025BCE} - C:\Program Files\Cox\Applications\App\popupbho01.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [ESP] C:\Program Files\Cox\Applications\app\start.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BMdfbab854] Rundll32.exe "C:\WINDOWS\system32\tsbkkhya.dll",s
O4 - HKLM\..\Run: [dc898bc8] rundll32.exe "C:\WINDOWS\system32\phcagwtd.dll",b
O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKLM\..\RunOnce: [SpybotDeletingA4886] command /c del "C:\WINDOWS\system32\xcvubeag.dll"
O4 - HKLM\..\RunOnce: [SpybotDeletingC3166] cmd /c del "C:\WINDOWS\system32\xcvubeag.dll"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-3692909862-1669556953-2043515351-500\..\Run: [RecordNow!] (User 'Administrator')
O4 - HKUS\S-1-5-21-3692909862-1669556953-2043515351-500\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Administrator')
O4 - HKUS\S-1-5-21-3692909862-1669556953-2043515351-500\..\RunOnce: [NeroHomeFirstStart] "C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe" (User 'Administrator')
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
O4 - Global Startup: APC UPS Status.lnk = C:\Program Files\APC\APC PowerChute Personal Edition\Display.exe
O4 - Global Startup: WD Backup Monitor.lnk = C:\Program Files\My Book\WD Backup\uBBMonitor.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Clear Fields - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComClearFields.html
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Logoff - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComLogoff.html
O8 - Extra context menu item: Look up in Mr&Check... - C:\Documents and Settings\Owner\Application Data\TuneUp Software\TuneUp Utilities\Web\tumrcheck.htm
O8 - Extra context menu item: Open in &new window - C:\Documents and Settings\Owner\Application Data\TuneUp Software\TuneUp Utilities\Web\tuofinw.htm
O8 - Extra context menu item: Reset Fields - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComResetFields.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Search with &Google - C:\Documents and Settings\Owner\Application Data\TuneUp Software\TuneUp Utilities\Web\gsearch.htm
O8 - Extra context menu item: Set Fields - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSetFields.html
O8 - Extra context menu item: Translate this page with Google - C:\Documents and Settings\Owner\Application Data\TuneUp Software\TuneUp Utilities\Web\gtranslate.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: IEWatch Professional - {78E5BB46-9A20-402F-BA66-B5634D177D77} - C:\Program Files\IEWatch\IEWatch.dll
O9 - Extra 'Tools' menuitem: IEWatch - {78E5BB46-9A20-402F-BA66-B5634D177D77} - C:\Program Files\IEWatch\IEWatch.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O15 - Trusted Zone: http://2005.kfi640.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {1B4F9DD7-2D7C-44B5-9126-73206DA0AE75} (CNavigationManager Object) - http://www3.authentium.com/cssrelease/bin/wizard.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqcpqdktp/downloads/sysinfo.cab
O16 - DPF: {4CCA4E6B-9259-11D9-AC6E-444553544200} - http://h30155.www3.hp.com/ediags/dd/install/HPInstallMgr_v01.cab
O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1180891391531
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab55579.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O20 - Winlogon Notify: fccbywx - C:\WINDOWS\SYSTEM32\fccbywx.dll
O20 - Winlogon Notify: xcvubeag - C:\WINDOWS\SYSTEM32\xcvubeag.dll
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Cox High Speed Internet Security Suite System Service (AuthSysSvc) - Authentium, Inc. - C:\Program Files\Cox\Applications\app\SysSvcNt.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
--
End of file - 12519 bytes