smitfraud-c toolbar888 infection

kapersky second scan part 3

C:\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698680.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~694139.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769748.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765121.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~755165.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~714183.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683397.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~785128.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~805477.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~721987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~798357.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~583799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~669647.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~660658.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675689.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~687081.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~622724.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~795543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~634971.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~807142.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~771995.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627436.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~657380.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~699297.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~713198.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588728.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~740394.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~664807.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680339.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~625590.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638386.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~552374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680461.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~681801.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~884093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~555410.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~826952.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~746027.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~745726.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683605.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~573527.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~679701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~814325.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627179.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~772778.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~907649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~695373.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646859.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~820338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~802368.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~688488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~630106.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~647756.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~665445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~743880.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~843301.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~672437.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~599588.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~850946.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~586255.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~758148.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~761555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~818445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
 
kapersky second scan part 4

C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\MSHist012007070920070710\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\search.sqlite Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\history.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\cert8.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\key3.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\parent.lock Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\change.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307399.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307440.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307580.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307582.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307583.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307584.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307585.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307586.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307587.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307588.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP817\A0287069.exe Infected: Backdoor.Win32.Small.os skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\awtsqo.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\pstmsg.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
D:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\change.log Object is locked skipped
E:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\change.log Object is locked skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno: infected - 1 skipped
F:\Program Files\valve\Steam.log Object is locked skipped
F:\Program Files\valve\SteamApps\base source engine 2.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\counter-strike source client.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\counter-strike source shared.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\day of defeat source.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\episode 1 shared.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\garrysmod content.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\half-life 2 content.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\half-life 2 episode one.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source engine.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source materials.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source models.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source sdk base.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source sounds.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\sourceinit.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\winui.gcf Object is locked skipped
F:\Program Files\valve\SteamLogs\SteamStats.log Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
F:\System Volume Information\catalog.wci\00010002.ci Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe WiseSFX: infected - 9 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe WiseSFX: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe NSIS: infected - 3 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe/data0027 Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe Inno: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\change.log Object is locked skipped

Scan process completed.
 
Hi

Copy text below to Notepad and save it as delfiles.bat (save it as all files, *.*)

@ECHO OFF
attrib -r -h C:\Documents and Settings\Kevin\Local Settings\Temp\*.*
del /a /f /q C:\Documents and Settings\Kevin\Local Settings\Temp\*.*
attrib -r -h C:\Documents and Settings\Michael\Local Settings\Temp\*.*
del /a /f /q C:\Documents and Settings\Michael\Local Settings\Temp\*.*
attrib -r -h C:\Documents and Settings\Guest\Local Settings\Temp\*.*
del /a /f /q C:\Documents and Settings\Guest\Local Settings\Temp\*.*
attrib -r -h C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe
del /a /f /q C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe
attrib -r -h F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe
del /a /f /q F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe
attrib -r -h C:\VundoFix Backups\*.*
del /a /f /q C:\VundoFix Backups\*.*

It should look like this ->
bat.JPG


Doubleclick delfiles.bat; black dos windows will flash, that's normal.

(In case you are unsure how to create a bat file, take a look here with screenshots.)

Re-scan with kaspersky

Post:

- a fresh HijackThis log
- kaspersky report
 
after running delfile.bat

latest HighjackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 11:29:03 AM, on 7/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\WINDOWS\system32\wuauclt.exe
F:\Downloads\2007\07-july\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
 
after running delfile.bat

the latest Kapersky report:

*KASPERSKY ONLINE SCANNER REPORT*
Wednesday, July 11, 2007 1:56:26 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2
(Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 11/07/2007
Kaspersky Anti-Virus database records: 361337

*Scan Settings*
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
*Scan Target* My Computer
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\
*Scan Statistics*
Total number of scanned objects 152518
Number of viruses found 23
Number of infected objects 465
Number of suspicious objects 0
Duration of the scan process 02:18:07


*Infected Object Name* *Virus Name* *Last Action*
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked
skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked
skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked
skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked
skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked
skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT0463f.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT04642.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF
Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked
skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~436005.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713381.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737893.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467068.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427116.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427491.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~670947.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~694355.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680813.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~450582.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~662589.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484023.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~359263.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~933825.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~441021.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~4399.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443362.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~348749.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429767.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~56854.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~405449.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~547287.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~552839.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~564578.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691939.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765734.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~897416.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455513.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683097.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~557154.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420731.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~614533.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~484883.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~393027.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905786.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~429145.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~462533.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~447914.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409746.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471297.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706802.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363719.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~385747.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~693241.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~407270.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~420739.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~628938.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~636879.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~401050.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~858390.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~487120.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363021.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~698763.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427773.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~406632.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~683435.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~402491.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~717090.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~224.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~5923.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~84727.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~775090.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~498352.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~785422.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414838.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~451017.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~951387.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~455804.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~473467.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~730831.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~886768.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~37568.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~919460.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~467044.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~493238.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~690893.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459826.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~363062.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~965608.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~966001.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~739599.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~324709.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~626391.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~769504.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~727573.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714305.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~417901.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~808535.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~782225.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~761383.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~685934.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~613410.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425211.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~546260.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~471415.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~771275.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~632049.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~905663.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~678697.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~765833.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~681010.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454003.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~568682.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~737420.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~703241.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~712061.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757488.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~766066.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~697618.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442833.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~506159.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~875155.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~32442.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~509228.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~706576.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465989.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~17790.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448295.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~658025.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~433022.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532667.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~652535.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~544285.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~423552.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442314.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~425210.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~825989.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~713528.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443946.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
 
more kaperky

C:\Documents and Settings\Michael\Local Settings\Temp\~423616.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~415661.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~975290.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~519612.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~12090.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~855512.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~947166.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~513309.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~293559.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510220.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~483720.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~454849.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~830883.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465778.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~573158.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~482602.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~941286.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~691251.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~641854.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~448827.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452799.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~502737.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~428042.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~745257.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~665332.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~503685.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~365876.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440243.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~351232.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~479170.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~491182.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~841935.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364914.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~915254.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~523139.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~416543.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~364764.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~461088.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~505947.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~465750.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~925609.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~510266.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~725558.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~687014.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~424994.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~452959.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~488234.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~714017.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~409963.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~427815.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~757062.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~437116.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440895.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~398164.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~931719.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~525086.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~985985.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~459042.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~371335.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~680385.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~728036.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~560813.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476184.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~438394.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~285660.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~414885.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~696349.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430251.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~421061.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~918904.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~911214.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~515277.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~431381.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~466690.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~793431.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~569225.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~476123.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~767027.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~449012.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~594954.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~553154.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~477252.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~443143.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~946765.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~958239.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~969611.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~464097.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~470625.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~442051.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~430174.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~760482.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~928223.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~440554.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~773020.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~366723.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~310095.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Michael\Local Settings\Temp\~532296.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~668337.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~749114.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~767192.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~670492.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~648920.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~844414.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~578506.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765054.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~701149.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~616606.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~584432.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769343.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698727.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~677002.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588850.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~645828.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638338.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~561947.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~919339.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~641693.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797949.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
 
more kapersky

C:\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~867286.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773367.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797768.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~566332.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~605514.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~717968.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~773043.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~944244.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~729898.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~698680.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~694139.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646154.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~769748.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~765121.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~755165.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~714183.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683397.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~785128.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~805477.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~721987.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~798357.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~583799.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~669647.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~660658.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675689.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~687081.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~622724.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~795543.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~634971.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~807142.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~771995.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627436.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~657380.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~699297.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797512.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~713198.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~588728.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~740394.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~664807.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680339.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~625590.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~638386.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~552374.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~680461.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~681801.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~884093.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~555410.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~826952.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~746027.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~745726.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~675374.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~683605.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~573527.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~679701.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp
Infected: Trojan-Downloader.Win32.Wintool.a skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~814325.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~627179.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~772778.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~907649.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~695373.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~646859.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~820338.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~797632.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~802368.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~688488.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~630106.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~647756.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~665445.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~743880.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~843301.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~672437.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~599588.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~850946.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~586255.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~758148.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~761555.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~818445.tmp
Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
 
last of more kapersky

C:\Documents and Settings\All Users.WINDOWS\Application
Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application
Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application
Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application
Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application
Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT
Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local
Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is
locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local
Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is
locked skipped
C:\Documents and Settings\NetworkService.NT
AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT
Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Temporary Internet Files\Content.IE5\index.dat Object is
locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is
locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is
locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is
locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local
Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT
AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG
Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is
locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is
locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local
Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local
Settings\History\History.IE5\MSHist012007071120070712\index.dat Object
is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary
Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application
Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application
Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object
is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\NTUSER.DAT.LOG Object is
locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local
Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Temporary
Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application
Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01
Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Cookies\index.dat Object is
locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Application
Data\tmp5.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar
skipped
C:\Documents and Settings\DIANE.GREY-TOWER\NTUSER.DAT Object is
locked skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is
locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is
locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is
locked skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL
Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL
Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll
Object is locked skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307399.dll
Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307440.dll
Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307580.dll
Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307582.exe
Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307583.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307584.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307585.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307586.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307587.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307588.exe
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP859\change.log
Object is locked skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll
Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll
Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\awtsqo.dll.bad Infected:
not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\VundoFix Backups\pstmsg.dll.bad Infected:
not-a-virus:AdWare.Win32.Virtumonde.ke skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7
Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno:
infected - 1 skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is
locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is
locked skipped
F:\System Volume Information\catalog.wci\0001000F.ci Object is locked
skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked
skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked
skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is
locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked
skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is
locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is
locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is
locked skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP857\A0306062.dll
Object is locked skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll
Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll
Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN
Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN
Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN
Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN
Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe
Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe
Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN
Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe
WiseSFX: infected - 9 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN
Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe
WiseSFX: infected - 1 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002
Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003
Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003
Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe
NSIS: infected - 3 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe/data0027
Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe
Inno: infected - 1 skipped
F:\System Volume
Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP859\change.log
Object is locked skipped
*Scan process completed.*
 
Hi

Well that wasn't successful.

We need more brute force tools.

Please download the OTMoveIt by OldTimer.
  • Save it to your desktop.
  • Please double-click OTMoveIt.exe to run it.
  • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

    C:\Documents and Settings\Michael\Local Settings\Temp
    C:\Documents and Settings\Kevin\Local Settings\Temp
    C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application
    Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01
    C:\Documents and Settings\DIANE.GREY-TOWER\Application
    Data\tmp5.tmp.exe
    C:\VundoFix Backups\awtsqo.dll.bad
    C:\VundoFix Backups\pstmsg.dll.bad
    F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe
  • Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
  • Click the red Moveit! button.
  • Close OTMoveIt
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Re-scan with kaspersky

Post:

- a fresh HijackThis log
- kaspersky report
 
results of moveit program

C:\Documents and Settings\Michael\Local Settings\Temp moved successfully.
C:\Documents and Settings\Kevin\Local Settings\Temp moved successfully.
File/Folder C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application not found.
File/Folder Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 not found.
File/Folder C:\Documents and Settings\DIANE.GREY-TOWER\Application not found.
File/Folder Data\tmp5.tmp.exe not found.
C:\VundoFix Backups\awtsqo.dll.bad moved successfully.
C:\VundoFix Backups\pstmsg.dll.bad moved successfully.
F:\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe moved successfully.

Created on 07/12/2007 17:33:11

I was really tempted to push the 'clean up' button but since it was not in the instruction I will close the program and scan with Kapersky.
 
HijackThis log #7

Logfile of HijackThis v1.99.1
Scan saved at 9:09:11 PM, on 7/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
F:\documents\555 Robson\TextPad\TXTPAD32.EXE
F:\Downloads\2007\07-july\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
 
kapersky results

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, July 12, 2007 9:08:10 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 13/07/2007
Kaspersky Anti-Virus database records: 361841
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\

Scan Statistics:
Total number of scanned objects: 157187
Number of viruses found: 23
Number of infected objects: 465
Number of suspicious objects: 0
Duration of the scan process: 02:22:40

Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT00666.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT00669.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~586255.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~758148.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~761555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\Guest\Local Settings\Temp\~818445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\~DFD307.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\AutoRecovery save of Document1.asd Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\~DF10D6.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\MSHist012007071220070713\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\search.sqlite Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\history.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\cert8.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\key3.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\parent.lock Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\History\History.IE5\MSHist012007071220070713\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Application Data\tmp5.tmp.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\Documents and Settings\DIANE.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Program Files\Microsoft Office\Templates\Normal.dot Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307399.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307440.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307580.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307582.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307583.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307584.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307585.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307586.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307587.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307588.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP861\change.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
F:\Program Files\valve\Steam.log Object is locked skipped
F:\Program Files\valve\SteamApps\base source engine 2.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\counter-strike source client.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\counter-strike source shared.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\day of defeat source.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\episode 1 shared.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\garrysmod content.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\half-life 2 content.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\half-life 2 episode one.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source engine.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source materials.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source models.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source sdk base.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\source sounds.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\sourceinit.gcf Object is locked skipped
F:\Program Files\valve\SteamApps\winui.gcf Object is locked skipped
F:\Program Files\valve\SteamLogs\SteamStats.log Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
F:\System Volume Information\catalog.wci\0001000B.ci Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
 
kapersky scan part 2

F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe WiseSFX: infected - 9 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe WiseSFX: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe NSIS: infected - 3 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe/data0027 Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe Inno: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP861\change.log Object is locked skipped
F:\_OTMoveIt\MovedFiles\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\_OTMoveIt\MovedFiles\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno: infected - 1 skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
 
kapersky scan part 3

F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe WiseSFX: infected - 9 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe WiseSFX: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe NSIS: infected - 3 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe/data0027 Infected: not-a-virus:AdWare.Win32.ComedyPlanet.b skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307642.exe Inno: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP861\change.log Object is locked skipped
F:\_OTMoveIt\MovedFiles\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\_OTMoveIt\MovedFiles\documents\Sudoku\GAMES\good old sudoku\good_old_sudoku.exe Inno: infected - 1 skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~282894.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~286403.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~287581.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~290515.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~290759.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~291867.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~294605.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296498.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296631.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~296701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~297020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~299678.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~300026.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~300682.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~303314.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~303383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~304388.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~304830.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~306797.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~307840.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~310097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~314746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~316411.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~317973.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~318397.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~318904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~321025.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323034.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323817.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~323987.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~324943.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~325335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~328157.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~328247.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~329392.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~330676.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~331649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~333108.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~335573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~335957.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~340742.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~341670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~341869.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~343878.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~344307.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~345048.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~345604.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~346084.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~346741.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348324.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348647.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~348841.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~349254.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~350426.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~350801.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~355022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~355239.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~356315.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~356670.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~357031.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~357399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~358466.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~359132.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~360140.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~362924.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~363231.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~365686.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~365987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~367391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~380656.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~392009.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~397093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~403923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~404486.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~404579.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~414649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~416891.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~419649.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~421407.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~425127.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~434318.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~436609.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~439629.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~440064.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~441809.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~445555.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~447289.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~451969.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~451981.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~453391.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~455285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~460055.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~475304.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~478701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~480879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~499567.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~509136.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~510460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
 
kapersky scan part 4

F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~552374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~555410.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~561947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~566332.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~573527.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~578506.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~583799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~584432.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~588728.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~588850.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~599588.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~605514.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~616606.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~622724.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~625590.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~627179.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~627436.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~630106.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~634971.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~638338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~638386.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~641693.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~645828.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~646154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~646859.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~647756.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~648920.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~657380.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~660658.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~664807.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~665445.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~668337.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~669647.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~670492.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~672437.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~675374.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~675689.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~677002.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~679701.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~680339.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~680461.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~681801.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~683397.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~683605.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~687081.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~688488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~694139.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~695373.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~698680.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~698727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~699297.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~701149.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~713198.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~714183.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~717968.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~721987.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~729898.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~740394.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~743880.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~745726.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~746027.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~749114.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~755165.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~765054.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~765121.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~767192.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~769343.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~769748.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~771995.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~772778.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~773043.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~773367.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~785128.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~795543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~797512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~797632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~797768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~797949.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~798357.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~802368.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~805477.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~807142.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~814325.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~820338.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~826952.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~843301.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~844414.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~850946.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~867286.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~884093.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~907649.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~919339.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Kevin\Local Settings\Temp\~944244.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~12090.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~17790.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~224.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~285660.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~293559.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~310095.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~32442.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~324709.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~348749.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~351232.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~359263.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~363021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~363062.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~363719.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~364764.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~364914.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~365876.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~366723.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~371335.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~37568.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~385747.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~393027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~398164.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~401050.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~402491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~405449.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~406632.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~407270.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~409746.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~409963.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~414838.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~414885.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~415661.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~416543.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~417901.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~420731.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~420739.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~421061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~423552.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
 
kapersky scan part 5

F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~423616.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~424994.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~425210.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~425211.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~427116.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~427491.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~427773.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~427815.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~428042.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~429145.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~429767.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~430174.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~430251.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~431381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~433022.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~436005.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~437116.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~438394.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~4399.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~440243.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~440554.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~440895.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~441021.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~442051.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~442314.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~442833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~443143.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~443362.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~443946.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~447914.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~448295.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~448827.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~449012.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~450582.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~451017.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~452799.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~452959.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~454003.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~454849.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~455513.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~455804.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~459042.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~459826.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~461088.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~462533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~464097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~465750.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~465778.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~465989.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~466690.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~467044.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~467068.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~470625.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~471297.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~471415.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~473467.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~476123.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~476184.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~477252.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~479170.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~482602.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~483720.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~484023.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~484883.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~487120.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~488234.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~491182.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~493238.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~498352.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~502737.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~503685.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~505947.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~506159.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~509228.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~510220.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~510266.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~513309.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~515277.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~519612.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~523139.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~525086.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~532296.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~532667.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~544285.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~546260.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~547287.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~552839.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~553154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~557154.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~560813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~564578.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~56854.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~568682.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~569225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~573158.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~5923.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~594954.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~613410.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~614533.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~626391.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~628938.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~632049.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~636879.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~641854.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~652535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~658025.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~662589.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~665332.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~670947.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~678697.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~680385.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~680813.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
 
kapersky scan part 6

F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~681010.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~683097.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~683435.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~685934.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~687014.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~690893.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~691251.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~691939.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~693241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~694355.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~696349.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~697618.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~698763.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~703241.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~706576.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~706802.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~712061.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~713381.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~713528.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~714017.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~714305.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~717090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~725558.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~727573.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~728036.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~730831.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~737420.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~737893.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~739599.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~745257.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~757062.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~757488.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~760482.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~761383.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~765734.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~765833.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~766066.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~767027.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~769504.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~771275.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~773020.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~775090.tmp Infected: not-a-virus:AdWare.Win32.Wintol.i skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~782225.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~785422.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~793431.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~808535.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~825989.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~830883.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~841935.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~84727.tmp Infected: not-a-virus:AdWare.Win32.Wintol.f skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~855512.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~858390.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~875155.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~886768.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~897416.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~905663.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~905786.tmp Infected: not-a-virus:AdWare.Win32.Wintol.d skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~911214.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~915254.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~918904.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~919460.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~925609.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~928223.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~931719.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~933825.tmp Infected: not-a-virus:AdWare.Win32.Wintol.c skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~941286.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~946765.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~947166.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~951387.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~958239.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~965608.tmp Infected: not-a-virus:AdWare.Win32.Wintol.j skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~966001.tmp Infected: not-a-virus:AdWare.Win32.Wintol.l skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~969611.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~975290.tmp Infected: Trojan-Downloader.Win32.Wintool.a skipped
F:\_OTMoveIt\MovedFiles\Documents and Settings\Michael\Local Settings\Temp\~985985.tmp Infected: not-a-virus:AdWare.Win32.Wintol.p skipped
F:\_OTMoveIt\MovedFiles\VundoFix Backups\awtsqo.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
F:\_OTMoveIt\MovedFiles\VundoFix Backups\pstmsg.dll.bad Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped

Scan process completed.
 
Hi

  • Please double-click OTMoveIt.exe to run it.
  • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):


    C:\Documents and Settings\Guest\Local Settings\Temp

  • Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
  • Click the red Moveit! button.
  • Close OTMoveIt
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please download ATF Cleaner by Atribune and save
it to desktop.

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit to close ATF-Cleaner.

Empty this folder:

F:\_OTMoveIt\MovedFiles

Delete this:

C:\Documents and Settings\DIANE.GREY-TOWER\Application
Data\tmp5.tmp.exe

Empty Recycle Bin

Re-scan with kaspersky

Post:

- a fresh HijackThis log
- kaspersky report
 
hijack log

Logfile of HijackThis v1.99.1
Scan saved at 11:44:10 PM, on 7/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTSVCCDA.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\program files\psp shuffle\pspshuffleindexer.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ssoftsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\DeskSweeper\DeskSweeper.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\defrag.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\Downloads\2007\07-july\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0

\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search &

Destroy\SDHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!

\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELUSE~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common

Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common

Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: DeskSweeper.lnk = C:\Program Files\DeskSweeper\DeskSweeper.exe
O4 - Global Startup: TELUS eCare.lnk = C:\Program Files\TELUS eCare\bin\matcli.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Download All by FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - N:\AAA_Misc_Programs\FlashGet\jc_link.htm
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} -

http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -

http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) -

http://www.creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -

http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) -

http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {156BF4B7-AE3A-4365-BD88-95A75AF8F09D} (HPSDDX Class) - http://www.hp.com/cpso-support-

new/SDD/hpsddObjSigned.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) -

http://64.69.85.208/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1112293388328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -

http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) -

http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner37460.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) -

http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -

http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) -

http://www.creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSVCCDA.EXE
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command

Software\dvpapi.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PSPShuffleIndexer - - c:\program files\psp shuffle\pspshuffleindexer.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared

Files\RichVideo.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite

2005.SR1\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite

2005.SR1\RpcSandraSrv.exe
O23 - Service: Cryptainer service (ssoftservice) - Cypherix - C:\WINDOWS\SYSTEM32\ssoftsrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
 
kaspersky scan results part 1

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, July 13, 2007 11:43:33 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 14/07/2007
Kaspersky Anti-Virus database records: 362193
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
L:\

Scan Statistics:
Total number of scanned objects: 148707
Number of viruses found: 14
Number of infected objects: 39
Number of suspicious objects: 0
Duration of the scan process: 02:10:02

Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\Temp\ZLT06a81.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT06a88.TMP Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\{00000000-00000000-00000009-00001102-00000004-00531102}.CDF Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\tracing\RASTLS.LOG Object is locked skipped
C:\WINDOWS\tracing\RASCHAP.LOG Object is locked skipped
C:\WINDOWS\tracing\RASDLG.LOG Object is locked skipped
C:\WINDOWS\tracing\RASAPI32.LOG Object is locked skipped
C:\WINDOWS\tracing\EAPOL.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\GREY-TOWER.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\AVPA2A.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temp\AVPA2B.tmp Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\History\History.IE5\MSHist012007071320070714\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Local Settings\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\search.sqlite Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\history.dat Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\cert8.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\key3.db Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\parent.lock Object is locked skipped
C:\Documents and Settings\TOM.GREY-TOWER.000\Application Data\Mozilla\Firefox\Profiles\d43tlawe.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\KEVIN.GREY-TOWER\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\DIANE.GREY-TOWER\Local Settings\Application Data\Mozilla\Firefox\Profiles\wd7lo60d.default\Cache\ACD008F5d01 Infected: not-a-virus:Downloader.Win32.WinFixer.o skipped
C:\Program Files\TELUS eCare\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\TELUS eCare\SmartBridge\SmartBridge.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP842\A0294120.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303533.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP854\A0303534.DLL Infected: not-a-virus:AdWare.Win32.Virtumonde.ke skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP855\A0303749.dll Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307399.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307440.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307580.dll Infected: not-a-virus:AdWare.Win32.WebSearch.av skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307582.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307583.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307584.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307585.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307586.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307587.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307588.exe Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\change.log Object is locked skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\A0311459.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292772.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292773.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292774.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292775.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP839\A0292776.dll Infected: Trojan.Win32.Agent.agv skipped
C:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP843\A0296444.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped
D:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\change.log Object is locked skipped
E:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\change.log Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
F:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
F:\System Volume Information\catalog.wci\00010009.ci Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
F:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
F:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
F:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
F:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Cydoor skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.HotBar.ab skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0023.BIN Infected: not-a-virus:AdWare.Win32.Gator.1050 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe/WISE0025.BIN Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307639.exe WiseSFX: infected - 9 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe/WISE0060.BIN Infected: not-a-virus:AdWare.Win32.Gator.3013 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307640.exe WiseSFX: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe/data0003 Infected: not-a-virus:AdWare.Win32.BargainBuddy.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP858\A0307641.exe NSIS: infected - 3 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\A0311460.exe/file7 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\A0311460.exe Inno: infected - 1 skipped
F:\System Volume Information\_restore{EFDE6C38-DECB-4302-AEF1-3B4D1BC08353}\RP862\change.log Object is locked skipped

Scan process completed.
 
You must log in or register to reply here.
Back
Top