smitfraud-c toolbar888 infection

3

3rdrock

New member
Greetings,
I hope you can help me get rid of this infestation. It took some time before I found out that if you want some help on these problems, you have to post your Hijack log. My computer is reporting 100% CPU usage with no programs up & running. Can you please help me?

Logfile of HijackThis v1.99.1
Scan saved at 4:23:47 PM, on 7/4/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
F:\Downloads\2007\07-july\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {2a40cf4a-cee4-4acf-b478-d0f9d1e74191} - C:\WINDOWS\system32\pstmsg.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: H - {C9905EF0-610F-4404-9030-A3F345D069F5} - C:\WINDOWS\system32\comi2.dll (file missing)
O2 - BHO: (no name) - {DEBEB52F-CFA6-4647-971F-3EDB75B63AFA} - C:\WINDOWS\system32\tmp1.tmp.dll (file missing)
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\awtsqo.dll",realset
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: c:\windows\system32\pmnlllm.dll
O20 - Winlogon Notify: pstmsg - C:\WINDOWS\SYSTEM32\pstmsg.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
 
Hi 3rdrock

"My computer is reporting 100% CPU usage with no programs up & running."

You have a lot of programs running according to your HijackThis log.

Please download VundoFix.exe to your desktop.
  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files, click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will reboot your computer, click OK.
  • Please post the contents of C:\vundofix.txt and a new HiJackThis log in a reply to this thread.
Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.
 
results of VDUNDOFIX and new HIJACKTHIS

upon reboot of computer after the vdundofix.exe the sytem wanted to scan the hard drives for errors. I let that happen with no problems reported.

vdundofix.txt:

VundoFix V6.5.4

Checking Java version...

Java version is 1.5.0.2
Old versions of java are exploitable and should be removed.

Java version is 1.5.0.4
Old versions of java are exploitable and should be removed.

Scan started at 11:25:54 AM 7/5/2007

Listing files found while scanning....

C:\WINDOWS\awtsqo.dll
C:\WINDOWS\oqstwa.ini
C:\windows\system32\pstmsg.dll
C:\WINDOWS\system32\tmp1.tmp.dll
C:\WINDOWS\system32\tmpF.tmp.dll

Beginning removal...

Attempting to delete C:\WINDOWS\awtsqo.dll
C:\WINDOWS\awtsqo.dll Has been deleted!

Attempting to delete C:\WINDOWS\oqstwa.ini
C:\WINDOWS\oqstwa.ini Has been deleted!

Attempting to delete C:\windows\system32\pstmsg.dll
C:\windows\system32\pstmsg.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\tmpF.tmp.dll
C:\WINDOWS\system32\tmpF.tmp.dll Has been deleted!

Performing Repairs to the registry.
Done!


reran highjackthis for the following:
Logfile of HijackThis v1.99.1
Scan saved at 12:01:09 PM, on 7/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\taskmgr.exe
F:\Downloads\2007\07-july\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {2a40cf4a-cee4-4acf-b478-d0f9d1e74191} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: H - {C9905EF0-610F-4404-9030-A3F345D069F5} - C:\WINDOWS\system32\comi2.dll (file missing)
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: c:\windows\system32\pmnlllm.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe

current cpu usage sitting at 2% !
 
Hi

"current cpu usage sitting at 2% !"

That sounds better :)

First, I would like you to upload this fil to uploadmalware

c:\windows\system32\pmnlllm.dll

After that:

Download the Killbox.
Save it to the desktop

Double-click Killbox.exe to run it.

Select "Delete on Reboot".
Place the following line (complete path) in bold in the "Full Path of File to Delete" box in Killbox:
c:\windows\system32\pmnlllm.dll
Put a mark next to "Delete on Reboot"
Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt.
If your computer does not restart automatically, please restart it manually.

Empty this folder:

C:\!KillBox

Empty Recycle Bin

Open HijackThis, click do a system scan only and checkmark these:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {2a40cf4a-cee4-4acf-b478-d0f9d1e74191} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: H - {C9905EF0-610F-4404-9030-A3F345D069F5} - C:\WINDOWS\system32\comi2.dll (file missing)
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O4 - Startup: PowerReg Scheduler V3.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\pstmsg.dll (file missing)
O20 - AppInit_DLLs: c:\windows\system32\pmnlllm.dll

Close all windows including browser and press fix checked.

Reboot.

Post a fresh HijackThis log.
 
pmnlllm.dll

Hello Shaba,
I could not find the file you requested pmnlllm.dll. A search in explore did not find it on the whole C drive. It was not until I looked in AVG virus vault to find it listed there.

Looking at the AVG virus vault the file has been there since June 8, 2007. In order to send it and follow the rest of the instructions, I restored the file. Boy, did AVG not like that.

response for 'fix checked':

An unexpected error has occurred at procedure: modBackup_MakeBackup(sItem=O20 - AppInit_DLLs: c:\windows\system32\pmnlllm.dll)
Error #5 - Invalid procedure call or argument

Please email me at merijn@spywareinfo.com, reporting the following:
* What you were trying to fix when the error occurred, if applicable
* How you can reproduce the error
* A complete HijackThis scan log, if possible

Windows version: Windows NT 5.01.2600
MSIE version: 6.0.2900.2180
HijackThis version: 1.99.1

This message has been copied to your clipboard.
Click OK to continue the rest of the scan.

most recent Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 3:56:18 PM, on 7/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
F:\Downloads\2007\07-july\HijackThis.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\notepad.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe


no further complaints from AVG.
 
Hi

Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then start to download the latest definition files.
  • Once the scanner is installed and the definitions downloaded, click Next.
  • Now click on Scan Settings
  • In the scan settings make sure that the following are selected:

    o Scan using the following Anti-Virus database:

    + Extended (If available otherwise Standard)

    o Scan Options:

    + Scan Archives
    + Scan Mail Bases
  • Click OK
  • Now under select a target to scan select My Computer
  • The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button
  • Save the file to your desktop.
  • Copy and paste that information in your next post.

Post:

- a fresh HijackThis log
- kaspersky report
 
kapersky results

Hello Shaba,
The Kapersky results are too long to add as a posting. Error message reads:
The text that you have entered is too long (77986 characters). Please shorten it to 20000 characters long.
That was after removing the HiJackthis.log I had added as well. Here is the latest HiJackthis.log results:

Logfile of HijackThis v1.99.1
Scan saved at 3:55:52 PM, on 7/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\taskmgr.exe
F:\Downloads\2007\07-july\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0

\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search &

Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common

Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common

Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -

http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -

http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) -

http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -

http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) -

http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-

new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) -

http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -

http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) -

http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) -

http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -

http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) -

http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command

Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared

Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite

2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite

2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Kapersky log will follow in segments.
 
Kapersky 1 of 4

Logfile of HijackThis v1.99.1
Scan saved at 3:55:52 PM, on 7/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
 
kapersky 2 of 4

C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\taskmgr.exe
F:\Downloads\2007\07-july\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
 
Kapersky 3 of 4

O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) -
 
Kapersky 4 of 4

http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
 
Revised Kapersky Log

sorry about that. the last four entries were the HiJack this log again. Please ignore it.

I will try again for the Kapersky info:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, July 08, 2007 3:54:48 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 8/07/2007
Kaspersky Anti-Virus database records: 359736
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\

Scan Statistics:
Total number of scanned objects: 236644
Number of viruses found: 27
Number of infected objects: 577
Number of suspicious objects: 0
Duration of the scan process: 03:01:41

Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT05fdd.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT05fe1.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~848277.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~530847.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\toolbar.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~795052.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~868501.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~726779.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~869431.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~933853.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~372448.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~879423.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~775809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~434463.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~897401.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~814782.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~713943.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~891351.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~810969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~929951.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~961098.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~961362.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~965266.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~530194.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~897515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~496531.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~339662.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~885662.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~411720.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~702456.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~680505.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~684311.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~739580.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~652326.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~832236.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~659056.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~773967.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~509458.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~482500.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~816602.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~922628.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~735694.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~955079.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~863754.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~828121.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~993611.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~912522.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~392257.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~905744.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~556914.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~533368.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~945547.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~811781.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~722209.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~840875.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~939612.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~745633.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~894736.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~743113.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~943200.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~760175.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~606137.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~967896.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~721633.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~721265.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~21129.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~793289.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~413804.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~568597.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~707434.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~678350.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~438591.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~377182.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~794307.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~399509.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~707082.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~667328.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~850779.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~458950.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~772345.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~419994.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~402525.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~356177.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~450112.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~403788.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~426146.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~411513.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~981935.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~552443.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~597968.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~421008.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~387204.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~434829.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~814788.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~879680.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~462273.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~711628.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~717809.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~871567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
 
Revised Kapersky Log 2

C:\Documents and Settings\Tom\Local Settings\Temp\~515005.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~743917.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~422722.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~929100.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~872948.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~821635.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~760503.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~828549.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temp\~528517.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Tom\Local Settings\Temporary Internet Files\Content.IE5\B3HBVXSW\WToolsB[1].cab/WToolsB.dll Infected: not-a-virus:AdWare.Win32.Wintol skipped
C:\Documents and Settings\Tom\Local Settings\Temporary Internet Files\Content.IE5\B3HBVXSW\WToolsB[1].cab CAB: infected - 1 skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~436005.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737893.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467068.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427116.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~670947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~694355.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~450582.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~662589.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484023.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~359263.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~933825.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~441021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~4399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443362.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~348749.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429767.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~56854.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~405449.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~547287.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~552839.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~564578.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691939.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765734.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~897416.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455513.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\toolbar.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~557154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420731.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~614533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484883.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~393027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905786.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429145.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~462533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~447914.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471297.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706802.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363719.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~385747.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~693241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~407270.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420739.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~628938.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~636879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~401050.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~858390.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~487120.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~698763.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427773.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~406632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683435.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~402491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~717090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~224.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~5923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~84727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~775090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~498352.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~785422.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414838.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~451017.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~951387.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455804.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~473467.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~730831.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~886768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~37568.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~919460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467044.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~493238.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~690893.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459826.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363062.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~965608.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~966001.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~739599.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~324709.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~626391.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~769504.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~727573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714305.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~417901.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~808535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~782225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~761383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~685934.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~613410.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425211.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~546260.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471415.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~771275.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~632049.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905663.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~678697.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~681010.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454003.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~568682.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737420.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~703241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~712061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~766066.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~697618.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~506159.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~875155.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~32442.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~509228.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
 
Revised Kapersky Log 3

C:\Documents and Settings\Michael\Local Settings\Temp\~706576.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465989.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~17790.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448295.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~658025.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~433022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532667.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~652535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~544285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423552.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425210.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~825989.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713528.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443946.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423616.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~415661.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~975290.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~519612.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~12090.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~855512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~947166.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~513309.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~293559.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510220.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~483720.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454849.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~830883.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465778.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~573158.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~482602.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~941286.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691251.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~641854.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448827.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~502737.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~428042.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~745257.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~665332.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~503685.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~365876.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440243.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~351232.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~479170.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~491182.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~841935.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364914.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~915254.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~523139.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~416543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364764.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~461088.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~505947.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465750.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~925609.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510266.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~725558.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~687014.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~424994.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452959.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~488234.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714017.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409963.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427815.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757062.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~437116.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440895.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~398164.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~931719.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~525086.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~985985.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459042.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~371335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680385.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~728036.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~560813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476184.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~438394.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~285660.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414885.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~696349.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430251.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~421061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~918904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~911214.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~515277.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~431381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~466690.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~793431.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~569225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476123.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~767027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~449012.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~594954.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~553154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~477252.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443143.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~946765.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~958239.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~969611.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~464097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~470625.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442051.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430174.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~760482.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~928223.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440554.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~773020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~366723.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~310095.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532296.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\btlink\hblink.cab/btlink.dll Infected: not-a-virus:AdWare.Win32.Wintol.ao skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\btlink\hblink.cab CAB: infected - 1 skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~668337.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~749114.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~767192.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~670492.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\toolbar.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~648920.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~844414.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~578506.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765054.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~701149.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~616606.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~584432.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769343.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~677002.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588850.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
 
Revised Kapersky Log 4

C:\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~645828.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~561947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~919339.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~641693.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797949.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~867286.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773367.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~566332.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~605514.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~717968.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773043.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~944244.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~729898.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698680.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~694139.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769748.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765121.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~755165.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~714183.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683397.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~785128.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~805477.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~721987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~798357.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~583799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~669647.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~660658.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675689.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~687081.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~622724.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~795543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~634971.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~807142.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~771995.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627436.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~657380.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~699297.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~713198.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588728.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~740394.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~664807.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680339.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~625590.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638386.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~552374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680461.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~681801.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~884093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~555410.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~826952.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~746027.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~745726.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683605.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~573527.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~679701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~814325.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627179.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~772778.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~907649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~695373.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646859.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~820338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~802368.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~688488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~630106.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~647756.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~665445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
 
Revised Kapersky Log 5

C:\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~743880.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~843301.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~672437.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~599588.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~850946.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temporary Internet Files\Content.IE5\45MVKHYR\common[1].cab/common.dll Infected: not-a-virus:AdWare.Win32.WebSearch.o skipped
C:\Documents and Settings\Kevin\Local Settings\Temporary Internet Files\Content.IE5\45MVKHYR\common[1].cab CAB: infected - 1 skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~586255.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~758148.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~761555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~818445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\~DFDB28.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp5E.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp6.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpA.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpD9.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpE3.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpE7.tmp.exe Infected: Trojan.Win32.Agent.agv skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp17.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP856\change.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP817\A0287069.exe Infected: Backdoor.Win32.Small.os skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\awtsqo.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\pstmsg.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno: infected - 1 skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\Downloads\2002\apr 2002\iMeshV3.exe WiseSFX: infected - 9 skipped
F:\Downloads\2002\MAY 2002\dw22.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\Downloads\2002\MAY 2002\dw22.exe WiseSFX: infected - 1 skipped
F:\Downloads\2003\jan-2003\mail_mcea115.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\Downloads\2003\jan-2003\mail_mcea115.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\Downloads\2003\jan-2003\mail_mcea115.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\Downloads\2003\jan-2003\mail_mcea115.exe NSIS: infected - 3 skipped
F:\Downloads\2005\a-january\freeripmp3.exe/data0027 Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\Downloads\2005\a-january\freeripmp3.exe Inno: infected - 1 skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
F:\System Volume Information\catalog.wci\00010010.ci Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP856\change.log Object is locked skipped

Scan process completed.



I am hoping the viruses that Kapersky found are those that are already quarantined by AVG.
 
Hi

"I am hoping the viruses that Kapersky found are those that are already quarantined by AVG."

Unfortunately none of them are quarantined by AVG

Please download ATF Cleaner by Atribune and save
it to desktop.

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit to close ATF-Cleaner.

Empty these folders:

C:\Documents and Settings\Tom\Local Settings\Temp\
C:\VundoFix Backups

Delete these:

C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp5E.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp6.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpA.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpD9.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpE3.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmpE7.tmp.exe
C:\Documents and Settings\KEVIN.GREY-TOWER\Application Data\tmp17.tmp.exe
F:\Downloads\2002\apr 2002\iMeshV3.exe
F:\Downloads\2002\MAY 2002\dw22.exe
F:\Downloads\2003\jan-2003\mail_mcea115.exe
F:\Downloads\2005\a-january\freeripmp3.exe

Empty Recycle Bin

Re-scan with kaspersky

Post:

- a fresh HijackThis log
- kaspersky report
 
HijackThis.log

Logfile of HijackThis v1.99.1
Scan saved at 7:07:32 PM, on 7/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\notepad.exe
F:\Downloads\2007\07-july\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0

\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search &

Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common

Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common

Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -

http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -

http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) -

http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -

http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) -

http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-

new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) -

http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -

http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) -

http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) -

http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -

http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) -

http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command

Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared

Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite

2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite

2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
 
kapersky second scan

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, July 09, 2007 9:38:15 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 10/07/2007
Kaspersky Anti-Virus database records: 360360
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\

Scan Statistics:
Total number of scanned objects: 151457
Number of viruses found: 24
Number of infected objects: 466
Number of suspicious objects: 0
Duration of the scan process: 02:17:47

Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT075bc.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT075bf.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~436005.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737893.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467068.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427116.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~670947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~694355.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~450582.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~662589.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484023.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~359263.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~933825.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~441021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~4399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443362.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~348749.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429767.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~56854.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~405449.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~547287.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~552839.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~564578.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691939.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765734.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~897416.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455513.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~557154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420731.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~614533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484883.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~393027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905786.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429145.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~462533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~447914.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471297.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706802.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363719.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~385747.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~693241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~407270.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420739.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~628938.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~636879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~401050.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~858390.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~487120.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~698763.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427773.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~406632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683435.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~402491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~717090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~224.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~5923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~84727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~775090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~498352.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~785422.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414838.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~451017.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~951387.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455804.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~473467.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~730831.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~886768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~37568.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~919460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467044.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~493238.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~690893.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459826.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363062.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~965608.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~966001.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~739599.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~324709.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~626391.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~769504.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~727573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714305.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~417901.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~808535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~782225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~761383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~685934.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~613410.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425211.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~546260.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471415.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~771275.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~632049.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905663.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~678697.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~681010.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454003.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~568682.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737420.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~703241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~712061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~766066.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~697618.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~506159.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~875155.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~32442.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~509228.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706576.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465989.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~17790.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448295.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~658025.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~433022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532667.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~652535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~544285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423552.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425210.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~825989.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713528.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443946.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423616.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~415661.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~975290.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~519612.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~12090.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~855512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~947166.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~513309.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
 
kapersky second scan part 2

C:\Documents and Settings\Michael\Local Settings\Temp\~293559.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510220.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~483720.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454849.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~830883.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465778.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~573158.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~482602.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~941286.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691251.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~641854.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448827.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~502737.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~428042.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~745257.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~665332.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~503685.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~365876.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440243.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~351232.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~479170.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~491182.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~841935.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364914.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~915254.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~523139.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~416543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364764.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~461088.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~505947.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465750.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~925609.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510266.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~725558.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~687014.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~424994.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452959.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~488234.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714017.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409963.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427815.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757062.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~437116.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440895.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~398164.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~931719.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~525086.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~985985.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459042.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~371335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680385.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~728036.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~560813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476184.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~438394.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~285660.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414885.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~696349.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430251.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~421061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~918904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~911214.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~515277.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~431381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~466690.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~793431.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~569225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476123.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~767027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~449012.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~594954.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~553154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~477252.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443143.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~946765.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~958239.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~969611.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~464097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~470625.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442051.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430174.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~760482.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~928223.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440554.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~773020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~366723.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~310095.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532296.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~668337.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~749114.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~767192.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~670492.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~648920.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~844414.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~578506.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765054.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~701149.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~616606.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~584432.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769343.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~677002.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588850.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~645828.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~561947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~919339.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~641693.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797949.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~867286.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773367.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~566332.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~605514.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~717968.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773043.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~944244.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~729898.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
 
You must log in or register to reply here.
Back
Top