Täältäkö viimein apu Hijackthis-lokiin

Täältä vissiin löytyi viimeksi guru joka osasi sanoa mikä on vikana kun avaa saastasivun kun painaa joillain sivuilla selaimen bac-nappia.

Tässä loki:

Logfile of HijackThis v1.98.2
Scan saved at 12:39:38, on 29.11.2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\System32\CTHELPER.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jippii.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\fi\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\fi\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PSDrvCheck] "C:\Program Files\Pinnacle\Instant VideoAlbum\programs\PSDrvCheck.exe" -CheckReg
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download all by Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Download by Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
251300
Äänestä

Muut lukivat myös

Vastaukset 25

Vanhimmat

Ei täälä näy mitään ihmeellistä.
Kokeile putsata vaikka Ad-Awarella ja tyhjennä temp internet fileet .

Äänestä

Olen ajanut ad-awaren, spybotin, antivir -ohjelman, tyhjentänyt selaimen kaikki historia tiedot mitä nyt perustyökaluja löytyy ihan xp:stä sekä easycleanerin ajon olen tehnyt.

Tosiaan ainakin huuto.netissä kun käy omalla sivulla ja palaa back-näppäimellä sieltä takaisin niin se aukeaa. Onpa uskomaton tapaus.

Äänestä
  • No kuullosta pikkasen kummalle.
    Aukeaako aina se sama sivu,jos niin mikä sivu se on?

    Äänestä

  • Juu kirjoitti:

    No kuullosta pikkasen kummalle.
    Aukeaako aina se sama sivu,jos niin mikä sivu se on?

    brutalporn tai joku devilsfuck.. noi ne kai on. jotain törkeää saastaa joka tapauksessa.

    viimeksi kun mulla oli vissiin ihan sama juttu niin löytyi lokista apu. Tartteekohan tässä alkaa windowssia uudelleen asentamaan. Hemskatti

    Äänestä

  • m-1 kirjoitti:

    brutalporn tai joku devilsfuck.. noi ne kai on. jotain törkeää saastaa joka tapauksessa.

    viimeksi kun mulla oli vissiin ihan sama juttu niin löytyi lokista apu. Tartteekohan tässä alkaa windowssia uudelleen asentamaan. Hemskatti

    Pistä piilotiedostot näkyviin,ohje tuolla

    http://www.xtra.co.nz/help/0,,4155-1916458,00.html

    Hae sitte etsi toiminnolla jos tuo löytyy koneelta

    Win32st.dll

    Äänestä

  • Juu kirjoitti:

    Pistä piilotiedostot näkyviin,ohje tuolla

    http://www.xtra.co.nz/help/0,,4155-1916458,00.html

    Hae sitte etsi toiminnolla jos tuo löytyy koneelta

    Win32st.dll

    Juuri tuollaista löytynyt kun hain win32 hakusanalla searchilla.
    Tälläinen kyllä löytyi win32spl.dll

    Jotenkin viimeksi se poistettiin juuri tuolallailla että laitoin noi hidden-tiedostot näkyviin ja sitä kautta muistelisin.

    Äänestä

  • m-1 kirjoitti:

    Juuri tuollaista löytynyt kun hain win32 hakusanalla searchilla.
    Tälläinen kyllä löytyi win32spl.dll

    Jotenkin viimeksi se poistettiin juuri tuolallailla että laitoin noi hidden-tiedostot näkyviin ja sitä kautta muistelisin.

    Tää on ihan lonkalta mutta katotaan kummisnii.

    Ota tosta DllCompare.exe

    http://download.broadbandmedic.com/DllCompare.exe

    Aukase se ja klikkaa Run Locate.com kohtaa
    Sitte klikkaa Compare kohtaa ja ootat että se tutkii valmiiks.
    Sitte klikkaa Make Log of what was found.

    Pistä sitte tänne se logi.

    Äänestä

  • Juu kirjoitti:

    Tää on ihan lonkalta mutta katotaan kummisnii.

    Ota tosta DllCompare.exe

    http://download.broadbandmedic.com/DllCompare.exe

    Aukase se ja klikkaa Run Locate.com kohtaa
    Sitte klikkaa Compare kohtaa ja ootat että se tutkii valmiiks.
    Sitte klikkaa Make Log of what was found.

    Pistä sitte tänne se logi.

    Eipä näytä kai mitään olevan?

    Täytyy palata huomenna asiaan kun pitää mennä töihin. Alkaa ahdistaa..Kiitos jo nyt paljon vaivannäöstä!


    * DLLCompare Log version(1.0.0.125)
    Files Found that Windows does not See or cannot Access
    *Not everything listed here means you are infected!
    ________________________________________________

    O^E says: "There were no files found :)"
    ________________________________________________

    1 288 items found: 1 288 files, 0 directories.
    Total of file sizes: 257 927 008 bytes 245,98 M

    Administrator Account = True

    --------------------End log---------------------

    Äänestä

  • m-1 kirjoitti:

    Eipä näytä kai mitään olevan?

    Täytyy palata huomenna asiaan kun pitää mennä töihin. Alkaa ahdistaa..Kiitos jo nyt paljon vaivannäöstä!


    * DLLCompare Log version(1.0.0.125)
    Files Found that Windows does not See or cannot Access
    *Not everything listed here means you are infected!
    ________________________________________________

    O^E says: "There were no files found :)"
    ________________________________________________

    1 288 items found: 1 288 files, 0 directories.
    Total of file sizes: 257 927 008 bytes 245,98 M

    Administrator Account = True

    --------------------End log---------------------

    jatketaan sitte huomenna.

    Äänestä

  • Juu kirjoitti:

    jatketaan sitte huomenna.

    Jeps tehdään niin!

    Äänestä

  • m-1 kirjoitti:

    Jeps tehdään niin!

    Täällä olisin selvittelemässä tätä eilistä mystisyyttä..
    Kokeilin äsken taas . Menin sinne huuto.netin sivuille ja omilla tunnuksilla sisään. Sitten jossain kohdin palasin takas niin johan taas hyppäs niille sivuille.(joku devilsfuck ja siitä suoraan "http://bruteporn.com/3.php" sivulle)

    Tuli mieleen että muistaakseni juuri tuossa kohdassa takaisin näppäintä painettaessa ennen saattoi tulla "sivua ei voida näyttää" tms. teksti. Liittyisikö tämä jotenkin siihen että jos selaainen tilanne tulee niin silloin vaan menee noille sivuille?

    Äänestä

  • M-1 kirjoitti:

    Täällä olisin selvittelemässä tätä eilistä mystisyyttä..
    Kokeilin äsken taas . Menin sinne huuto.netin sivuille ja omilla tunnuksilla sisään. Sitten jossain kohdin palasin takas niin johan taas hyppäs niille sivuille.(joku devilsfuck ja siitä suoraan "http://bruteporn.com/3.php" sivulle)

    Tuli mieleen että muistaakseni juuri tuossa kohdassa takaisin näppäintä painettaessa ennen saattoi tulla "sivua ei voida näyttää" tms. teksti. Liittyisikö tämä jotenkin siihen että jos selaainen tilanne tulee niin silloin vaan menee noille sivuille?

    Haes tuolta tuo scanneri

    http://www.mwti.net/antivirus/free_utilities.asp

    Scannaa sillä kone ja pistä se logi tänne.

    Ehkä se löytää jotain.

    Äänestä

  • Juu kirjoitti:

    Haes tuolta tuo scanneri

    http://www.mwti.net/antivirus/free_utilities.asp

    Scannaa sillä kone ja pistä se logi tänne.

    Ehkä se löytää jotain.

    Tue Nov 30 10:38:41 2004 => **********************************************************
    Tue Nov 30 10:38:41 2004 => eScan AntiVirus Toolkit Utility.
    Tue Nov 30 10:38:41 2004 => Copyright © 2003-2004, MicroWorld Technologies Inc.
    Tue Nov 30 10:38:41 2004 => **********************************************************
    Tue Nov 30 10:38:41 2004 => Version 4.6.8 (C:\DOCUME~1\Mika\LOCALS~1\Temp\mwavscan.com)
    Tue Nov 30 10:38:41 2004 => Log File: C:\DOCUME~1\Mika\LOCALS~1\Temp\mwav.log
    Tue Nov 30 10:38:41 2004 => Latest Date of files inside MWAV: 29 Nov 2004 03:01:16.
    Tue Nov 30 10:38:43 2004 => AV Library Loaded...
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavss.exe
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\Getvlist.exe
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavss.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssdi.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssi.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavvlg.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\msvlclnt.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\ipc.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\main.avi
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\virus.avi
    Tue Nov 30 10:38:43 2004 => Virus Database Date: 2004/11/29
    Tue Nov 30 10:38:43 2004 => Virus Database Count: 110858

    Tue Nov 30 10:39:00 2004 => **********************************************************
    Tue Nov 30 10:39:00 2004 => eScan AntiVirus Toolkit Utility.
    Tue Nov 30 10:39:00 2004 => Copyright © 2003-2004, MicroWorld Technologies Inc.
    Tue Nov 30 10:39:00 2004 =>
    Tue Nov 30 10:39:00 2004 => Support: [email protected]
    Tue Nov 30 10:39:00 2004 => Web: http://www.mwti.net
    Tue Nov 30 10:39:00 2004 => **********************************************************
    Tue Nov 30 10:39:00 2004 => Version 4.6.8 (C:\DOCUME~1\Mika\LOCALS~1\Temp\mwavscan.com)
    Tue Nov 30 10:39:00 2004 => Log File: C:\DOCUME~1\Mika\LOCALS~1\Temp\mwav.log
    Tue Nov 30 10:39:00 2004 => Latest Date of files inside MWAV: 29 Nov 2004 03:01:16.

    Tue Nov 30 10:39:00 2004 => Options Selected by User:
    Tue Nov 30 10:39:00 2004 => Memory Check: Enabled
    Tue Nov 30 10:39:00 2004 => Registry Check: Enabled
    Tue Nov 30 10:39:00 2004 => StartUp Folder Check: Enabled
    Tue Nov 30 10:39:00 2004 => System Folder Check: Enabled
    Tue Nov 30 10:39:00 2004 => System Area Check: Disabled
    Tue Nov 30 10:39:00 2004 => Services Check: Enabled
    Tue Nov 30 10:39:00 2004 => Drive Check Option Disabled
    Tue Nov 30 10:39:00 2004 => Folder Check: Disabled

    Tue Nov 30 10:39:00 2004 => ***** Scanning Memory Files *****
    Tue Nov 30 10:39:00 2004 => Scanning File C:\WINDOWS\SYSTEM32\CSRSS.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\WINDOWS\SYSTEM32\WINLOGON.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\WINDOWS\System32\smss.exe
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\ipc.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavss.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavss.exe
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssd.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssdi.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssi.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\msvlclnt.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\mwavscan.com
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\PSAPI.DLL
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\RICHED32.DLL
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\MESSEN~1\rtcimsp.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\WINDOW~3\wmpband.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\ActiveX\ACROIE~1.OCX
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGCMSG.DLL
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGNT.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVWUPSRV.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\COMMON~1\Logitech\SCROLL~1\LgMsgHk.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\OSDDisp.DLL
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RcMan.CRL
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RcMan.exe
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\iR2000.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\rcks1k.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\RCLDM.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\Rcscm.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\rm-1000.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\DVDAudio\CTDVDDet.EXE
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\SURROU~1\CTSysVol.crl
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\SURROU~1\CTSysVol.exe
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\CTIniF.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\CtrlSrc.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\CTTheme.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\GDICtrl.skc
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\mxlib.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\RTXCtrl.skc
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\ShareDLL\pfmod.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Eraser\eraser.exe
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\INTERN~1\iexplore.exe
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\ccmsghk.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\ccresrce.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\ccstmglb.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\ccustom.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\System\devices.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\em_exec.exe
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\EVENTEX.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\GlbResLt.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\System\LgWndHk.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\MFC42.DLL
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MESSEN~1\MSGSLANG.DLL
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MESSEN~1\msmsgs.exe
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MICROS~2\Office10\msohev.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\MSNTOO~1\010230~1.100\fi\msntb.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\MSNTOO~1\010230~1.100\fi\mtbres.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\ST\010230~1.100\en-xu\stmain.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\Updater\010230~1.100\fi\au_util.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\Updater\010230~1.100\fi\msnappau.exe
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\Updater\010230~1.100\fi\TBDwnMgr.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\alert.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\email.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\filter.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\firewall.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\framewrk.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\idlock.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\privacy.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\programs.zap
    Tue Nov 30 10:39:04 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\security.zap
    Tue Nov 30 10:39:04 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\zav.zap
    Tue Nov 30 10:39:04 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\zlclient.exe
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\CTDCRES.DLL
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\Explorer.EXE
    Tue Nov 30 10:39:04 2004 => Scanning File c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\ACTIVEDS.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\actxprxy.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\adsldpc.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\ADVAPI32.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\ADVPACK.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\appHelp.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\Ati2evxx.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\ATL.DLL
    Tue Nov 30 10:39:04 2004 => Scanning File c:\windows\system32\audiosrv.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\AUTHZ.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\basesrv.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\BatMeter.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\browselc.dll
    Tue Nov 30 10:39:04 2004 => Scanning File c:\windows\system32\browser.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\BROWSEUI.dll
    Tue Nov 30 10:39:04 2004 => Scanning File c:\windows\system32\certcli.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\CFGMGR32.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\CLBCATQ.DLL
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\CLUSAPI.DLL
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\cnbjmon.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\colbact.DLL
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\COMCTL32.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\comdlg32.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\COMNCTR.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\COMRes.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\comsvcs.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\credui.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\CRYPT32.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\cryptdll.dll
    Tue Nov 30 10:39:05 2004 => Scanning File c:\windows\system32\cryptsvc.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\CRYPTUI.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\cscdll.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\cscui.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\CSRSRV.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\ctagent.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\SYSTEM32\CTDC0000.DLL
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\SYSTEM32\CTDC0001.DLL
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\SYSTEM32\CTDCIFCE.DLL
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\SYSTEM32\CTDPROXY.DLL
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\CTHELPER.EXE
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\SYSTEM32\ctosuser.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\ctspkhlp.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\CTSvcCDA.EXE
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\davclnt.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\DCIMAN32.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\DDRAW.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\ddrawex.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\devenum.dll
    Tue Nov 30 10:39:06 2004 => Scanning File c:\windows\system32\dhcpcsvc.dll
    Tue Nov 30 10:39:06 2004 => Scanning File c:\windows\system32\dmserver.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\system32\DNSAPI.dll
    Tue Nov 30 10:39:06 2004 => Scanning File c:\windows\system32\dnsrslvr.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dpnhupnp.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\drprov.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\DSOUND.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dssenh.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\DUSER.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dxmrtp.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dxtmsft.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dxtrans.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\ERASER.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\ersvc.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\es.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\ESENT.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\eventlog.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\GDI32.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\HID.DLL
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\hidserv.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\hnetcfg.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\hpzsnt07.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\icmp.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\IMAGEHLP.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\imgutil.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\IMM32.DLL
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\inetpp.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\iphlpapi.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\ipsecsvc.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\jscript.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\kerberos.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\KERNEL32.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\KsUser.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\LINKINFO.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\lmhsvc.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\localspl.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\LSASRV.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\lsass.exe
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\LZ32.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\macromed\flash\Flash.ocx
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MFC42.DLL
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\midimap.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\mlang.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\MPR.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MPRAPI.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSACM32.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msacm32.drv
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\MSASN1.dll
    Tue Nov 30 10:39:08 2004 => Scanning File c:\windows\system32\mscms.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSCTF.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msdmo.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSGINA.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\mshtml.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\mshtmled.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msi.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSIDLE.DLL
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msieftp.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSIMG32.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msimtf.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSLS31.DLL
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MsPMSPSv.exe
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\msprivs.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\msv1_0.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\MSVCP60.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\msvcrt.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\MSVFW32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\mswsock.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\msxml3.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\MTXCLU.DLL
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\mtxoci.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NCObjAPI.DLL
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NDdeApi.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NETAPI32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\netlogon.dll
    Tue Nov 30 10:39:09 2004 => Scanning File c:\windows\system32\netman.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NETRAP.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NETSHELL.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\NETUI0.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\NETUI1.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\ntdll.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NTDSAPI.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\ntlanman.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\NTMARTA.DLL
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\ntshrui.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\oakley.DLL
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\ODBC32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\odbcint.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\ole32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\OLEAUT32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\oledlg.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\olepro32.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\SYSTEM32\PIAPROXY.DLL
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\pjlmon.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\plugin.ocx
    Tue Nov 30 10:39:10 2004 => Scanning File c:\windows\system32\POWRPROF.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\printui.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\PROFMAP.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\PSAPI.DLL
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\psbase.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\pstorsvc.dll
    Tue Nov 30 10:39:10 2004 => Scanning File c:\windows\system32\qmgr.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\qmgrprxy.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\quartz.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\rasadhlp.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\RASAPI32.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\raschap.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\RASDLG.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\rasman.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\rastls.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\REGAPI.dll
    Tue Nov 30 10:39:10 2004 => Scanning File c:\windows\system32\regsvc.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\RESUTILS.DLL
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\RPCRT4.dll
    Tue Nov 30 10:39:10 2004 => Scanning File c:\windows\system32\rpcss.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\rsaenh.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\rtcdll.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\rtutils.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\SAMLIB.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SAMSRV.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\scecli.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SCESRV.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\schannel.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\schedsvc.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\seclogon.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\Secur32.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\sens.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\SensApi.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\services.exe
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SETUPAPI.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\sfc.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\sfc_os.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\shdoclc.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\SHDOCVW.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SHELL32.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\SHFOLDER.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SHLWAPI.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\SHSVCS.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\spool\drivers\w32x86\3\HPZR3207.DLL
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\SPOOLSS.DLL
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\spoolsv.exe
    Tue Nov 30 10:39:12 2004 => Scanning File c:\windows\system32\srsvc.dll
    Tue Nov 30 10:39:12 2004 => Scanning File c:\windows\system32\srvsvc.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\SSDPAPI.dll
    Tue Nov 30 10:39:12 2004 => Scanning File c:\windows\system32\ssdpsrv.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\stobject.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\sxs.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\TAPI32.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\tcpmon.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\termmgr.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\themeui.dll
    Tue Nov 30 10:39:12 2004 => Scanning File c:\windows\system32\trkwks.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\umpnpmgr.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\upnp.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\urlmon.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\usbmon.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\USER32.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\USERENV.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\uxtheme.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\w32time.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\Wbem\esscli.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\Wbem\FastProx.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\ncprov.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\repdrvfs.dll
    Tue Nov 30 10:39:13 2004 => Scanning File c:\windows\system32\wbem\wbemcomn.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\Wbem\wbemcore.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wbemess.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wbemprox.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wbemsvc.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wmiprvsd.dll
    Tue Nov 30 10:39:13 2004 => Scanning File c:\windows\system32\wbem\wmisvc.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wmiutils.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\vbscript.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wdfmgr.exe
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\wdigest.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wdmaud.drv
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\VDMDBG.DLL
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\webcheck.dll
    Tue Nov 30 10:39:13 2004 => Scanning File c:\windows\system32\webclnt.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\VERSION.dll
    Tue Nov 30 10:39:14 2004 => Scanning File c:\windows\system32\wiaservc.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\win32spl.dll
    Tue Nov 30 10:39:14 2004 => Scanning File c:\windows\system32\WINHTTP.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WININET.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WINIPSEC.DLL
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\WINMM.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\winrnr.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\WINSCARD.DLL
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\WINSPOOL.DRV
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\winsrv.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WINSTA.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\WINTRUST.dll
    Tue Nov 30 10:39:14 2004 => Scanning File c:\windows\system32\wkssvc.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\wldap32.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WlNotify.dll
    Tue Nov 30 10:39:14 2004 => Scanning File c:\windows\system32\WMI.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WS2_32.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WS2HELP.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\vsdata.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\wshtcpip.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\VSINIT.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\vsmonapi.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WSOCK32.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\VSPUBAPI.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\VSSAPI.DLL
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\VSUTIL.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\vsxml.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\WTSAPI32.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\wuaueng.dll
    Tue Nov 30 10:39:15 2004 => Scanning File c:\windows\system32\wuauserv.dll
    Tue Nov 30 10:39:15 2004 => Scanning File c:\windows\system32\wzcsvc.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\zlcomm.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\ZLCommDB.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\ZoneLabs\camupd.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\SSLEAY32.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsavpro.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsdb.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\VSRULEDB.DLL
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsvault.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1515_x-ww_7bb98b8a\comctl32.dll

    Tue Nov 30 10:39:15 2004 => ***** Scanning Registry Files *****

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
    Tue Nov 30 10:39:15 2004 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
    Tue Nov 30 10:39:15 2004 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\webcheck.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\stobject.dll

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
    Tue Nov 30 10:39:15 2004 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    Tue Nov 30 10:39:15 2004 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\ActiveX\ACROIE~1.OCX
    Tue Nov 30 10:39:15 2004 => {53707962-6F74-2D53-2644-206D7942484F} = C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    Tue Nov 30 10:39:15 2004 => {9394EDE7-C8B5-483E-8773-474BF36AF6E4} = C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\ST\010230~1.100\en-xu\stmain.dll
    Tue Nov 30 10:39:15 2004 => {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} = C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\fi\msntb.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\MSNTOO~1\010230~1.100\fi\msntb.dll

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\Explorer.exe
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\userinit.exe

    Tue Nov 30 10:39:15 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AEDEBUG
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\drwtsn32.exe

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ntsd.exe

    Tue Nov 30 10:39:15 2004 => Scanning HKCU\Control Panel\Desktop

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SYSTEM\CurrentControlSet\Control\WOW
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ntvdm.exe
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ntvdm.exe

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\inf\unregmp2.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\shmgrate.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\shmgrate.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\regsvr32.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\OUTLOO~1\setup50.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\OUTLOO~1\setup50.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\regsvr32.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\ie4uinit.exe

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\SURROU~1\CTSysVol.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\DVDAudio\CTDVDDet.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\CTHELPER.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\REGSVR32.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Creative\SBDRIV~1\SBDrvDet.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\UpdReg.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\NeroCheck.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Pinnacle\INSTAN~1\programs\PSDRVC~1.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\Logi_MwX.Exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\Updater\010230~1.100\fi\msnappau.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\zlclient.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGNT.EXE

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RcMan.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Eraser\eraser.exe
    Tue Nov 30 10:39:16 2004 => *** File C:\PROGRA~1\MESSEN~1\msmsgs.exe having Size Restriction ***
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\MESSEN~1\msmsgs.exe [**]

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Setup

    Tue Nov 30 10:39:16 2004 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\System32\CTFMON.EXE

    Tue Nov 30 10:39:17 2004 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\txtfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\comfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\exefile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\dllfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\batfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\piffile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\scrfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\scrfile\shell\config\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\regfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\htmlfile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\PROGRA~1\INTERN~1\iexplore.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\htafile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\mshta.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\jsfile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\jsefile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\vbsfile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\vbefile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\wshfile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\wsffile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => ***** Scanning StartUp Folders *****

    Tue Nov 30 10:39:17 2004 => ***** Scanning C:\Documents and Settings\Mika\Start Menu\Programs\Startup Folder *****
    Tue Nov 30 10:39:17 2004 => Scanning Folder: C:\Documents and Settings\Mika\Start Menu\Programs\Startup\*.*
    Tue Nov 30 10:39:17 2004 => Scanning File C:\Documents and Settings\Mika\Start Menu\Programs\Startup\desktop.ini [**]

    Tue Nov 30 10:39:17 2004 => ***** Scanning C:\Documents and Settings\All Users\Start Menu\Programs\Startup Folder *****
    Tue Nov 30 10:39:17 2004 => Scanning Folder: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\*.*
    Tue Nov 30 10:39:17 2004 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini [**]
    Tue Nov 30 10:39:17 2004 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk

    Tue Nov 30 10:39:17 2004 => ***** Scanning C:\Documents and Settings\Default User\Start menu\Programs\Startup Folder *****
    Tue Nov 30 10:39:17 2004 => Scanning Folder: C:\DOCUME~1\DEFAUL~1\STARTM~1\Programs\Startup\*.*
    Tue Nov 30 10:39:17 2004 => Scanning File C:\DOCUME~1\DEFAUL~1\STARTM~1\Programs\Startup\desktop.ini [**]

    Tue Nov 30 10:39:17 2004 => ***** Scanning Service Files *****
    Tue Nov 30 10:39:17 2004 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\61883.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ACPI.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\drivers\aec.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\alg.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGUARD.EXE
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\arp1394.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\drivers\ASAPIW2k.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\asyncmac.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\atapi.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\Ati2evxx.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\system32\ati2sgag.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ati2mtag.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\atmarpc.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\audstub.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\avc.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGNTDD.SYS
    Tue Nov 30 10:39:17 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVWUPSRV.EXE
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\bridge.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\bridge.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\CCDECODE.sys
    Tue Nov 30 10:39:18 2004 => ERROR!!! Invalid Entry \??\C:\DOCUME~1\Mika\LOCALS~1\Temp\cdiskdun.sys in SYSTEM\CurrentControlSet\Services\cdiskdun...
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\cdrom.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\cisvc.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\system32\clipsrv.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\dllhost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\CTSvcCDA.EXE
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctac32k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctaud2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctdvda2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ctgame.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctprxy2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctsfm2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\disk.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\dmadmin.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\dmboot.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\dmio.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\dmload.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\DMusic.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\drmkaud.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\emupia2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\system32\services.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\fdc.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\flpydisk.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ftdisk.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\gameenum.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\GcKernel.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\msgpc.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\drivers\ha10kx2k.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\drivers\hap16v2k.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\HIDSwvd.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\hidusb.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\i8042prt.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\imapi.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ipinip.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ipnat.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ipsec.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\irenum.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\isapnp.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\kbdclass.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\kbdhid.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\drivers\kmixer.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\L8042pr2.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\Drivers\LCcFltr.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\LHidFlt2.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\Drivers\LHidUsb.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\LMouFlt2.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\mouclass.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\mouhid.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxdav.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\msdtc.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\msdv.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\msgame.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\msiexec.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\MSKSSRV.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\MSPCLOCK.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\MSPQM.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\MSTEE.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\msmpu401.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\NdisIP.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ndistapi.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ndisuio.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ndiswan.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\netbios.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\netbt.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\system32\netdde.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\system32\netdde.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\lsass.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\nic1394.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\lsass.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\NVENET.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\nv_agp.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ohci1394.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\ctoss2k.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\parport.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\pci.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\pciide.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\pcntn5hl.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\PFMODNT.SYS
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\services.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\lsass.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\raspptp.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\processr.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\lsass.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\psched.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ptilink.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\rasacd.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\rasl2tp.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\raspppoe.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\raspti.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\rdbss.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\rdpdr.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\sessmgr.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\redbook.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\locator.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\rsvp.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\lsass.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\drivers\scsiport.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\secdrv.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\serenum.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\serial.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\SLIP.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\drivers\splitter.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\spoolsv.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\sr.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\srv.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\StreamIP.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\swenum.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\swmidi.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\dllhost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\sysaudio.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\system32\smlogsvc.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\tcpip.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\termdd.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\tlntsvr.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\wdfmgr.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\update.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\ups.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\usbaudio.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbccgp.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbehci.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbhub.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbohci.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbprint.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbscan.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\vga.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\vsdatant.sys
    Tue Nov 30 10:39:22 2004 => *** File C:\WINDOWS\system32\ZoneLabs\vsmon.exe having Size Restriction ***
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsmon.exe [**]
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\vssvc.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\wanarp.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\wdmaud.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\MsPMSPSv.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\wbem\wmiapsrv.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\svchost.exe

    Tue Nov 30 10:39:23 2004 => Scanning HKLM\SYSTEM\CurrentControlSet\Services\VxD

    Tue Nov 30 10:39:23 2004 => ***** Scanning System32 Folders *****
    Tue Nov 30 10:39:23 2004 => Scanning C:\WINDOWS Directory
    Tue Nov 30 10:39:23 2004 => Scanning Folder: C:\WINDOWS\*.*
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\0.log [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\AC3API.INI [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\ActiveSkin.INI [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\AM_D6.PRF [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\AudioCpl.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\Blue Lace 16.bmp [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\bootstat.dat [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CDPlayer.ini [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\clipart.zdx [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\clock.avi [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\clthumbs.zdx [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CoD.INI [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\Coffee Bean.bmp [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\comsetup.log [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\control.ini [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTCCW.DLL
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTDCRES.DLL
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTDVAUDY.CDF [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\Ctregrun.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTRES.DLL
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTWave32.ini [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\dahotfix.log [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\desktop.ini [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\DEVREG.DLL
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\DHCPUPG.LOG [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\DirectX.log [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\disney.ini [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\dswplug.ini [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\DtcInstall.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\eReg.dat [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\explorer.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\explorer.scf [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\FaxSetup.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\FeatherTexture.bmp [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\Gone Fishing.bmp [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\Greenstone.bmp [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\hh.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\hpinfo.lnk
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\icccodes.dll
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\iccsigs.dat [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\ieuninst.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\iis6.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\impborl.dll
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\imsins.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\INETWH32.DLL
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\INRES.DLL
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\IsUn040b.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\IsUninst.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\iTouch.ini [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KA.INI [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB821253.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB822603.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB823182.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB823980.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB824105.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB824141.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB824146.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB825119.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB826939.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB828028.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB828035.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB828741.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB833330.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB835732.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB837001.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB839643-DirectX9.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB839645.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB840315.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB840374.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB841873.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB842773.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KPCMS.INI [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\kpcp32.dll
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\kpsys32.dll
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\LOGI_MWX.EXE
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\MedCtrOC.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\MIDIDEF.EXE
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\Msdevctl.ini [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\msdfmap.ini [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\msgsocm.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\msmqinst.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\mstasks1.exe [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\mstasks2.exe [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\mstasks3.exe [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\mstasks4.exe [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\muninst.exe
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\nero.INI [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\netfxocm.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\NOTEPAD.EXE
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\nsw.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\ntbtlog.txt [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\ntdtcsetup.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\ocgen.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WIN

    Äänestä

  • m-1 kirjoitti:

    Tue Nov 30 10:38:41 2004 => **********************************************************
    Tue Nov 30 10:38:41 2004 => eScan AntiVirus Toolkit Utility.
    Tue Nov 30 10:38:41 2004 => Copyright © 2003-2004, MicroWorld Technologies Inc.
    Tue Nov 30 10:38:41 2004 => **********************************************************
    Tue Nov 30 10:38:41 2004 => Version 4.6.8 (C:\DOCUME~1\Mika\LOCALS~1\Temp\mwavscan.com)
    Tue Nov 30 10:38:41 2004 => Log File: C:\DOCUME~1\Mika\LOCALS~1\Temp\mwav.log
    Tue Nov 30 10:38:41 2004 => Latest Date of files inside MWAV: 29 Nov 2004 03:01:16.
    Tue Nov 30 10:38:43 2004 => AV Library Loaded...
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavss.exe
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\Getvlist.exe
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavss.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssdi.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssi.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavvlg.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\msvlclnt.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\ipc.dll
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\main.avi
    Tue Nov 30 10:38:43 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\virus.avi
    Tue Nov 30 10:38:43 2004 => Virus Database Date: 2004/11/29
    Tue Nov 30 10:38:43 2004 => Virus Database Count: 110858

    Tue Nov 30 10:39:00 2004 => **********************************************************
    Tue Nov 30 10:39:00 2004 => eScan AntiVirus Toolkit Utility.
    Tue Nov 30 10:39:00 2004 => Copyright © 2003-2004, MicroWorld Technologies Inc.
    Tue Nov 30 10:39:00 2004 =>
    Tue Nov 30 10:39:00 2004 => Support: [email protected]
    Tue Nov 30 10:39:00 2004 => Web: http://www.mwti.net
    Tue Nov 30 10:39:00 2004 => **********************************************************
    Tue Nov 30 10:39:00 2004 => Version 4.6.8 (C:\DOCUME~1\Mika\LOCALS~1\Temp\mwavscan.com)
    Tue Nov 30 10:39:00 2004 => Log File: C:\DOCUME~1\Mika\LOCALS~1\Temp\mwav.log
    Tue Nov 30 10:39:00 2004 => Latest Date of files inside MWAV: 29 Nov 2004 03:01:16.

    Tue Nov 30 10:39:00 2004 => Options Selected by User:
    Tue Nov 30 10:39:00 2004 => Memory Check: Enabled
    Tue Nov 30 10:39:00 2004 => Registry Check: Enabled
    Tue Nov 30 10:39:00 2004 => StartUp Folder Check: Enabled
    Tue Nov 30 10:39:00 2004 => System Folder Check: Enabled
    Tue Nov 30 10:39:00 2004 => System Area Check: Disabled
    Tue Nov 30 10:39:00 2004 => Services Check: Enabled
    Tue Nov 30 10:39:00 2004 => Drive Check Option Disabled
    Tue Nov 30 10:39:00 2004 => Folder Check: Disabled

    Tue Nov 30 10:39:00 2004 => ***** Scanning Memory Files *****
    Tue Nov 30 10:39:00 2004 => Scanning File C:\WINDOWS\SYSTEM32\CSRSS.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\WINDOWS\SYSTEM32\WINLOGON.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\WINDOWS\System32\smss.exe
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\ipc.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavss.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavss.exe
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssd.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssdi.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\kavssi.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\msvlclnt.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\mwavscan.com
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\PSAPI.DLL
    Tue Nov 30 10:39:01 2004 => Scanning File C:\DOCUME~1\Mika\LOCALS~1\Temp\RICHED32.DLL
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\MESSEN~1\rtcimsp.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\WINDOW~3\wmpband.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\ActiveX\ACROIE~1.OCX
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGCMSG.DLL
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGNT.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVWUPSRV.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\COMMON~1\Logitech\SCROLL~1\LgMsgHk.dll
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
    Tue Nov 30 10:39:01 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\OSDDisp.DLL
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RcMan.CRL
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RcMan.exe
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\iR2000.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\rcks1k.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\RCLDM.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\Rcscm.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RCRx\rm-1000.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\DVDAudio\CTDVDDet.EXE
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\SURROU~1\CTSysVol.crl
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\SURROU~1\CTSysVol.exe
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\CTIniF.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\CtrlSrc.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\CTTheme.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\GDICtrl.skc
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\mxlib.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\SHARED~1\RTXCtrl.skc
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Creative\ShareDLL\pfmod.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Eraser\eraser.exe
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\INTERN~1\iexplore.exe
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\ccmsghk.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\ccresrce.dll
    Tue Nov 30 10:39:02 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\ccstmglb.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\ccustom.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\System\devices.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\em_exec.exe
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\EVENTEX.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\GlbResLt.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\System\LgWndHk.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\Logitech\MOUSEW~1\system\MFC42.DLL
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MESSEN~1\MSGSLANG.DLL
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MESSEN~1\msmsgs.exe
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MICROS~2\Office10\msohev.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\MSNTOO~1\010230~1.100\fi\msntb.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\MSNTOO~1\010230~1.100\fi\mtbres.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\ST\010230~1.100\en-xu\stmain.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\Updater\010230~1.100\fi\au_util.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\Updater\010230~1.100\fi\msnappau.exe
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\Updater\010230~1.100\fi\TBDwnMgr.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\alert.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\email.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\filter.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\firewall.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\framewrk.dll
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\idlock.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\privacy.zap
    Tue Nov 30 10:39:03 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\programs.zap
    Tue Nov 30 10:39:04 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\security.zap
    Tue Nov 30 10:39:04 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\zav.zap
    Tue Nov 30 10:39:04 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\zlclient.exe
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\CTDCRES.DLL
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\Explorer.EXE
    Tue Nov 30 10:39:04 2004 => Scanning File c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\ACTIVEDS.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\actxprxy.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\adsldpc.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\ADVAPI32.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\ADVPACK.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\appHelp.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\Ati2evxx.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\ATL.DLL
    Tue Nov 30 10:39:04 2004 => Scanning File c:\windows\system32\audiosrv.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\AUTHZ.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\system32\basesrv.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\BatMeter.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\browselc.dll
    Tue Nov 30 10:39:04 2004 => Scanning File c:\windows\system32\browser.dll
    Tue Nov 30 10:39:04 2004 => Scanning File C:\WINDOWS\System32\BROWSEUI.dll
    Tue Nov 30 10:39:04 2004 => Scanning File c:\windows\system32\certcli.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\CFGMGR32.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\CLBCATQ.DLL
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\CLUSAPI.DLL
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\cnbjmon.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\colbact.DLL
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\COMCTL32.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\comdlg32.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\COMNCTR.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\COMRes.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\comsvcs.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\credui.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\CRYPT32.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\cryptdll.dll
    Tue Nov 30 10:39:05 2004 => Scanning File c:\windows\system32\cryptsvc.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\CRYPTUI.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\cscdll.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\cscui.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\system32\CSRSRV.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\System32\ctagent.dll
    Tue Nov 30 10:39:05 2004 => Scanning File C:\WINDOWS\SYSTEM32\CTDC0000.DLL
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\SYSTEM32\CTDC0001.DLL
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\SYSTEM32\CTDCIFCE.DLL
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\SYSTEM32\CTDPROXY.DLL
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\CTHELPER.EXE
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\SYSTEM32\ctosuser.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\ctspkhlp.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\CTSvcCDA.EXE
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\davclnt.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\DCIMAN32.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\DDRAW.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\ddrawex.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\devenum.dll
    Tue Nov 30 10:39:06 2004 => Scanning File c:\windows\system32\dhcpcsvc.dll
    Tue Nov 30 10:39:06 2004 => Scanning File c:\windows\system32\dmserver.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\system32\DNSAPI.dll
    Tue Nov 30 10:39:06 2004 => Scanning File c:\windows\system32\dnsrslvr.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dpnhupnp.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\drprov.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\DSOUND.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dssenh.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\DUSER.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dxmrtp.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dxtmsft.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\dxtrans.dll
    Tue Nov 30 10:39:06 2004 => Scanning File C:\WINDOWS\System32\ERASER.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\ersvc.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\es.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\ESENT.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\eventlog.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\GDI32.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\HID.DLL
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\hidserv.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\hnetcfg.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\hpzsnt07.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\icmp.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\IMAGEHLP.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\imgutil.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\IMM32.DLL
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\inetpp.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\iphlpapi.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\ipsecsvc.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\jscript.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\kerberos.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\KERNEL32.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\KsUser.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\System32\LINKINFO.dll
    Tue Nov 30 10:39:07 2004 => Scanning File c:\windows\system32\lmhsvc.dll
    Tue Nov 30 10:39:07 2004 => Scanning File C:\WINDOWS\system32\localspl.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\LSASRV.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\lsass.exe
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\LZ32.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\macromed\flash\Flash.ocx
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MFC42.DLL
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\midimap.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\mlang.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\MPR.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MPRAPI.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSACM32.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msacm32.drv
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\MSASN1.dll
    Tue Nov 30 10:39:08 2004 => Scanning File c:\windows\system32\mscms.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSCTF.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msdmo.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSGINA.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\mshtml.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\mshtmled.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msi.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSIDLE.DLL
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msieftp.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSIMG32.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\msimtf.dll
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MSLS31.DLL
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\System32\MsPMSPSv.exe
    Tue Nov 30 10:39:08 2004 => Scanning File C:\WINDOWS\system32\msprivs.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\msv1_0.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\MSVCP60.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\msvcrt.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\MSVFW32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\mswsock.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\msxml3.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\MTXCLU.DLL
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\mtxoci.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NCObjAPI.DLL
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NDdeApi.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NETAPI32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\netlogon.dll
    Tue Nov 30 10:39:09 2004 => Scanning File c:\windows\system32\netman.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NETRAP.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NETSHELL.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\NETUI0.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\NETUI1.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\ntdll.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\NTDSAPI.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\ntlanman.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\NTMARTA.DLL
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\ntshrui.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\oakley.DLL
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\ODBC32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\odbcint.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\ole32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\system32\OLEAUT32.dll
    Tue Nov 30 10:39:09 2004 => Scanning File C:\WINDOWS\System32\oledlg.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\olepro32.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\SYSTEM32\PIAPROXY.DLL
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\pjlmon.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\plugin.ocx
    Tue Nov 30 10:39:10 2004 => Scanning File c:\windows\system32\POWRPROF.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\printui.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\PROFMAP.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\PSAPI.DLL
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\psbase.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\pstorsvc.dll
    Tue Nov 30 10:39:10 2004 => Scanning File c:\windows\system32\qmgr.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\qmgrprxy.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\quartz.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\rasadhlp.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\RASAPI32.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\raschap.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\RASDLG.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\rasman.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\rastls.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\REGAPI.dll
    Tue Nov 30 10:39:10 2004 => Scanning File c:\windows\system32\regsvc.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\RESUTILS.DLL
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\system32\RPCRT4.dll
    Tue Nov 30 10:39:10 2004 => Scanning File c:\windows\system32\rpcss.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\rsaenh.dll
    Tue Nov 30 10:39:10 2004 => Scanning File C:\WINDOWS\System32\rtcdll.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\rtutils.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\SAMLIB.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SAMSRV.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\scecli.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SCESRV.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\schannel.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\schedsvc.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\seclogon.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\Secur32.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\sens.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\SensApi.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\services.exe
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SETUPAPI.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\sfc.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\sfc_os.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\shdoclc.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\SHDOCVW.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SHELL32.dll
    Tue Nov 30 10:39:11 2004 => Scanning File c:\windows\system32\SHFOLDER.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\system32\SHLWAPI.dll
    Tue Nov 30 10:39:11 2004 => Scanning File C:\WINDOWS\System32\SHSVCS.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\spool\drivers\w32x86\3\HPZR3207.DLL
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\SPOOLSS.DLL
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\spoolsv.exe
    Tue Nov 30 10:39:12 2004 => Scanning File c:\windows\system32\srsvc.dll
    Tue Nov 30 10:39:12 2004 => Scanning File c:\windows\system32\srvsvc.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\SSDPAPI.dll
    Tue Nov 30 10:39:12 2004 => Scanning File c:\windows\system32\ssdpsrv.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\stobject.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\sxs.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\TAPI32.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\tcpmon.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\termmgr.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\System32\themeui.dll
    Tue Nov 30 10:39:12 2004 => Scanning File c:\windows\system32\trkwks.dll
    Tue Nov 30 10:39:12 2004 => Scanning File C:\WINDOWS\system32\umpnpmgr.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\upnp.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\urlmon.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\usbmon.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\USER32.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\USERENV.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\uxtheme.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\w32time.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\Wbem\esscli.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\Wbem\FastProx.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\ncprov.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\repdrvfs.dll
    Tue Nov 30 10:39:13 2004 => Scanning File c:\windows\system32\wbem\wbemcomn.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\Wbem\wbemcore.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wbemess.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wbemprox.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wbemsvc.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wmiprvsd.dll
    Tue Nov 30 10:39:13 2004 => Scanning File c:\windows\system32\wbem\wmisvc.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wbem\wmiutils.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\vbscript.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wdfmgr.exe
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\system32\wdigest.dll
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\wdmaud.drv
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\VDMDBG.DLL
    Tue Nov 30 10:39:13 2004 => Scanning File C:\WINDOWS\System32\webcheck.dll
    Tue Nov 30 10:39:13 2004 => Scanning File c:\windows\system32\webclnt.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\VERSION.dll
    Tue Nov 30 10:39:14 2004 => Scanning File c:\windows\system32\wiaservc.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\win32spl.dll
    Tue Nov 30 10:39:14 2004 => Scanning File c:\windows\system32\WINHTTP.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WININET.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WINIPSEC.DLL
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\WINMM.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\winrnr.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\WINSCARD.DLL
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\WINSPOOL.DRV
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\winsrv.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WINSTA.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\WINTRUST.dll
    Tue Nov 30 10:39:14 2004 => Scanning File c:\windows\system32\wkssvc.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\wldap32.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WlNotify.dll
    Tue Nov 30 10:39:14 2004 => Scanning File c:\windows\system32\WMI.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WS2_32.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WS2HELP.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\vsdata.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\wshtcpip.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\VSINIT.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\vsmonapi.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\system32\WSOCK32.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\VSPUBAPI.dll
    Tue Nov 30 10:39:14 2004 => Scanning File C:\WINDOWS\System32\VSSAPI.DLL
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\VSUTIL.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\vsxml.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\WTSAPI32.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\wuaueng.dll
    Tue Nov 30 10:39:15 2004 => Scanning File c:\windows\system32\wuauserv.dll
    Tue Nov 30 10:39:15 2004 => Scanning File c:\windows\system32\wzcsvc.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\zlcomm.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\ZLCommDB.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\ZoneLabs\camupd.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\SSLEAY32.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsavpro.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsdb.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\VSRULEDB.DLL
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsvault.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1515_x-ww_7bb98b8a\comctl32.dll

    Tue Nov 30 10:39:15 2004 => ***** Scanning Registry Files *****

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
    Tue Nov 30 10:39:15 2004 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
    Tue Nov 30 10:39:15 2004 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\webcheck.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\System32\stobject.dll

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
    Tue Nov 30 10:39:15 2004 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    Tue Nov 30 10:39:15 2004 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\ActiveX\ACROIE~1.OCX
    Tue Nov 30 10:39:15 2004 => {53707962-6F74-2D53-2644-206D7942484F} = C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    Tue Nov 30 10:39:15 2004 => {9394EDE7-C8B5-483E-8773-474BF36AF6E4} = C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\ST\010230~1.100\en-xu\stmain.dll
    Tue Nov 30 10:39:15 2004 => {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} = C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\fi\msntb.dll
    Tue Nov 30 10:39:15 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\MSNTOO~1\010230~1.100\fi\msntb.dll

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\Explorer.exe
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\userinit.exe

    Tue Nov 30 10:39:15 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AEDEBUG
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\drwtsn32.exe

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ntsd.exe

    Tue Nov 30 10:39:15 2004 => Scanning HKCU\Control Panel\Desktop

    Tue Nov 30 10:39:15 2004 => Scanning HKLM\SYSTEM\CurrentControlSet\Control\WOW
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ntvdm.exe
    Tue Nov 30 10:39:15 2004 => Scanning File C:\WINDOWS\system32\ntvdm.exe

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\inf\unregmp2.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\shmgrate.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\shmgrate.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\regsvr32.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\OUTLOO~1\setup50.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\OUTLOO~1\setup50.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\regsvr32.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\ie4uinit.exe

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\SURROU~1\CTSysVol.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Creative\SBAUDI~1\DVDAudio\CTDVDDet.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\CTHELPER.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\REGSVR32.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Creative\SBDRIV~1\SBDrvDet.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\UpdReg.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\system32\NeroCheck.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Pinnacle\INSTAN~1\programs\PSDRVC~1.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\Logi_MwX.Exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\MSNAPP~1\Updater\010230~1.100\fi\msnappau.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\ZONELA~2\ZONEAL~1\zlclient.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGNT.EXE

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

    Tue Nov 30 10:39:16 2004 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Creative\MEDIAS~1\REMOTE~1\RcMan.exe
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\Eraser\eraser.exe
    Tue Nov 30 10:39:16 2004 => *** File C:\PROGRA~1\MESSEN~1\msmsgs.exe having Size Restriction ***
    Tue Nov 30 10:39:16 2004 => Scanning File C:\PROGRA~1\MESSEN~1\msmsgs.exe [**]

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

    Tue Nov 30 10:39:16 2004 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Setup

    Tue Nov 30 10:39:16 2004 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    Tue Nov 30 10:39:16 2004 => Scanning File C:\WINDOWS\System32\CTFMON.EXE

    Tue Nov 30 10:39:17 2004 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\txtfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\comfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\exefile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\dllfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\batfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\piffile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\scrfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\scrfile\shell\config\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\regfile\shell\open\command

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\htmlfile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\PROGRA~1\INTERN~1\iexplore.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\htafile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\mshta.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\jsfile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\jsefile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\vbsfile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\vbefile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\wshfile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => Scanning HKCR\wsffile\shell\open\command
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\WScript.exe

    Tue Nov 30 10:39:17 2004 => ***** Scanning StartUp Folders *****

    Tue Nov 30 10:39:17 2004 => ***** Scanning C:\Documents and Settings\Mika\Start Menu\Programs\Startup Folder *****
    Tue Nov 30 10:39:17 2004 => Scanning Folder: C:\Documents and Settings\Mika\Start Menu\Programs\Startup\*.*
    Tue Nov 30 10:39:17 2004 => Scanning File C:\Documents and Settings\Mika\Start Menu\Programs\Startup\desktop.ini [**]

    Tue Nov 30 10:39:17 2004 => ***** Scanning C:\Documents and Settings\All Users\Start Menu\Programs\Startup Folder *****
    Tue Nov 30 10:39:17 2004 => Scanning Folder: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\*.*
    Tue Nov 30 10:39:17 2004 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini [**]
    Tue Nov 30 10:39:17 2004 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk

    Tue Nov 30 10:39:17 2004 => ***** Scanning C:\Documents and Settings\Default User\Start menu\Programs\Startup Folder *****
    Tue Nov 30 10:39:17 2004 => Scanning Folder: C:\DOCUME~1\DEFAUL~1\STARTM~1\Programs\Startup\*.*
    Tue Nov 30 10:39:17 2004 => Scanning File C:\DOCUME~1\DEFAUL~1\STARTM~1\Programs\Startup\desktop.ini [**]

    Tue Nov 30 10:39:17 2004 => ***** Scanning Service Files *****
    Tue Nov 30 10:39:17 2004 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\61883.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ACPI.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\drivers\aec.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\alg.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGUARD.EXE
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\arp1394.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\drivers\ASAPIW2k.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\asyncmac.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\atapi.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\Ati2evxx.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\system32\ati2sgag.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ati2mtag.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\atmarpc.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\audstub.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\avc.sys
    Tue Nov 30 10:39:17 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVGNTDD.SYS
    Tue Nov 30 10:39:17 2004 => Scanning File C:\PROGRA~1\AVPERS~1\AVWUPSRV.EXE
    Tue Nov 30 10:39:17 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\bridge.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\bridge.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\CCDECODE.sys
    Tue Nov 30 10:39:18 2004 => ERROR!!! Invalid Entry \??\C:\DOCUME~1\Mika\LOCALS~1\Temp\cdiskdun.sys in SYSTEM\CurrentControlSet\Services\cdiskdun...
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\cdrom.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\cisvc.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\system32\clipsrv.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\dllhost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\CTSvcCDA.EXE
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctac32k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctaud2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctdvda2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ctgame.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctprxy2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\ctsfm2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\disk.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\dmadmin.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\dmboot.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\dmio.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\dmload.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\DMusic.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\drmkaud.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\drivers\emupia2k.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\system32\services.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\fdc.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\flpydisk.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ftdisk.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\gameenum.sys
    Tue Nov 30 10:39:18 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\GcKernel.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\msgpc.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\drivers\ha10kx2k.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\drivers\hap16v2k.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\HIDSwvd.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\hidusb.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\i8042prt.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\imapi.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ipinip.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ipnat.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ipsec.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\irenum.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\isapnp.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\kbdclass.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\kbdhid.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\drivers\kmixer.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\L8042pr2.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\Drivers\LCcFltr.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\LHidFlt2.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\Drivers\LHidUsb.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\LMouFlt2.Sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\mouclass.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\mouhid.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxdav.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\msdtc.exe
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\msdv.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\msgame.sys
    Tue Nov 30 10:39:19 2004 => Scanning File C:\WINDOWS\System32\msiexec.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\MSKSSRV.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\MSPCLOCK.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\MSPQM.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\MSTEE.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\msmpu401.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\NdisIP.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ndistapi.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ndisuio.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ndiswan.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\netbios.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\netbt.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\system32\netdde.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\system32\netdde.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\lsass.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\nic1394.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\lsass.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\NVENET.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\nv_agp.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ohci1394.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\drivers\ctoss2k.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\parport.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\pci.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\pciide.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\pcntn5hl.sys
    Tue Nov 30 10:39:20 2004 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\PFMODNT.SYS
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\services.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\lsass.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\raspptp.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\processr.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\lsass.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\psched.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\ptilink.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\rasacd.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\rasl2tp.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\raspppoe.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\raspti.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\rdbss.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\rdpdr.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\sessmgr.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\redbook.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\locator.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\rsvp.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\lsass.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\drivers\scsiport.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\secdrv.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\serenum.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\serial.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\SLIP.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\drivers\splitter.sys
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\system32\spoolsv.exe
    Tue Nov 30 10:39:21 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\sr.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\srv.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\StreamIP.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\swenum.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\swmidi.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\dllhost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\sysaudio.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\system32\smlogsvc.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\tcpip.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\termdd.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\tlntsvr.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\wdfmgr.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\update.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\ups.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\usbaudio.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbccgp.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbehci.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbhub.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbohci.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbprint.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\usbscan.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\vga.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\vsdatant.sys
    Tue Nov 30 10:39:22 2004 => *** File C:\WINDOWS\system32\ZoneLabs\vsmon.exe having Size Restriction ***
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\system32\ZoneLabs\vsmon.exe [**]
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\vssvc.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\wanarp.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\drivers\wdmaud.sys
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:22 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\MsPMSPSv.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\svchost.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\wbem\wmiapsrv.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\system32\svchost.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\System32\svchost.exe

    Tue Nov 30 10:39:23 2004 => Scanning HKLM\SYSTEM\CurrentControlSet\Services\VxD

    Tue Nov 30 10:39:23 2004 => ***** Scanning System32 Folders *****
    Tue Nov 30 10:39:23 2004 => Scanning C:\WINDOWS Directory
    Tue Nov 30 10:39:23 2004 => Scanning Folder: C:\WINDOWS\*.*
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\0.log [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\AC3API.INI [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\ActiveSkin.INI [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\AM_D6.PRF [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\AudioCpl.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\Blue Lace 16.bmp [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\bootstat.dat [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CDPlayer.ini [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\clipart.zdx [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\clock.avi [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\clthumbs.zdx [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CoD.INI [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\Coffee Bean.bmp [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\comsetup.log [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\control.ini [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTCCW.DLL
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTDCRES.DLL
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTDVAUDY.CDF [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\Ctregrun.exe
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTRES.DLL
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\CTWave32.ini [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\dahotfix.log [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\desktop.ini [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\DEVREG.DLL
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\DHCPUPG.LOG [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\DirectX.log [**]
    Tue Nov 30 10:39:23 2004 => Scanning File C:\WINDOWS\disney.ini [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\dswplug.ini [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\DtcInstall.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\eReg.dat [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\explorer.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\explorer.scf [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\FaxSetup.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\FeatherTexture.bmp [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\Gone Fishing.bmp [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\Greenstone.bmp [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\hh.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\hpinfo.lnk
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\icccodes.dll
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\iccsigs.dat [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\ieuninst.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\iis6.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\impborl.dll
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\imsins.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\INETWH32.DLL
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\INRES.DLL
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\IsUn040b.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\IsUninst.exe
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\iTouch.ini [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KA.INI [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB821253.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB822603.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB823182.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB823980.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB824105.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB824141.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB824146.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB825119.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB826939.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB828028.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB828035.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB828741.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB833330.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB835732.log [**]
    Tue Nov 30 10:39:24 2004 => Scanning File C:\WINDOWS\KB837001.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB839643-DirectX9.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB839645.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB840315.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB840374.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB841873.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KB842773.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\KPCMS.INI [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\kpcp32.dll
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\kpsys32.dll
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\LOGI_MWX.EXE
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\MedCtrOC.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\MIDIDEF.EXE
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\Msdevctl.ini [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\msdfmap.ini [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\msgsocm.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\msmqinst.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\mstasks1.exe [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\mstasks2.exe [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\mstasks3.exe [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\mstasks4.exe [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\muninst.exe
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\nero.INI [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\netfxocm.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\NOTEPAD.EXE
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\nsw.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\ntbtlog.txt [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\ntdtcsetup.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WINDOWS\ocgen.log [**]
    Tue Nov 30 10:39:25 2004 => Scanning File C:\WIN

    Eikö siihen Virus log information kohtaan tullu mitään.

    Äänestä

  • Juu kirjoitti:

    Eikö siihen Virus log information kohtaan tullu mitään.

    File C:\WINDOWS\System32\Iendpp32.exe infected by "Backdoor.Win32.Padodor.gen" Virus. Action Taken: No Action Taken.
    File C:\WINDOWS\System32\Qlpgeq32.dll infected by "Backdoor.Win32.Padodor.gen" Virus. Action Taken: No Action Taken.

    Äänestä

  • m-1 kirjoitti:

    File C:\WINDOWS\System32\Iendpp32.exe infected by "Backdoor.Win32.Padodor.gen" Virus. Action Taken: No Action Taken.
    File C:\WINDOWS\System32\Qlpgeq32.dll infected by "Backdoor.Win32.Padodor.gen" Virus. Action Taken: No Action Taken.

    Pistä piilotiedostot näkyviin ja käynnistä vikasietotilassa etsi ja poista nuo jos löytyy

    C:\WINDOWS\System32\Iendpp32.exe
    C:\WINDOWS\System32\Qlpgeq32.dll


    vaikka tuskin se vika noissa on,mutta pois kummisnii.

    Äänestä

  • Juu kirjoitti:

    Pistä piilotiedostot näkyviin ja käynnistä vikasietotilassa etsi ja poista nuo jos löytyy

    C:\WINDOWS\System32\Iendpp32.exe
    C:\WINDOWS\System32\Qlpgeq32.dll


    vaikka tuskin se vika noissa on,mutta pois kummisnii.

    mutta tekee samaa. voisiko se liittyä siihen " sivua ei voi näyttää" tilanteeseen kuiteskin jotenkin..

    Äänestä

mutta tekee samaa edelleen...

Äänestä


  • m-1 kirjoitti:

    voinko poistaa kaikki mitäse löysi?

    No mää en tiedä tosta ohjelmasta oikeestaan mitään,koitin sitä ite äsken kans ja se löysi 36 tapausta.
    Mitä se löysi?

    Äänestä

  • Juu kirjoitti:

    No mää en tiedä tosta ohjelmasta oikeestaan mitään,koitin sitä ite äsken kans ja se löysi 36 tapausta.
    Mitä se löysi?

    browser hijacker, ja pari troijalaista, ja cookieita...

    Äänestä

  • m-1 kirjoitti:

    browser hijacker, ja pari troijalaista, ja cookieita...

    No sitte pois vaan ja kato jos auttoi.

    Äänestä

  • Juu kirjoitti:

    No sitte pois vaan ja kato jos auttoi.

    Nyt löytyi ratkaisu. Tuo löysi juuri niin kuin epäiltiin, eli selaimeni oli kaapattu niin että jos tulee esim. blank -sivu kuten juuri siellä huuto.netissä niin hyppää sinne pornosivulle.

    Huh luulin jo ettei mikään auta. Näyttää tämä ketju olleen aika kiintoisa kun lukijamäärää katsoo.
    Tuhannet kiitokset ja oppia ikä kaikki!

    Äänestä

  • m-1 kirjoitti:

    Nyt löytyi ratkaisu. Tuo löysi juuri niin kuin epäiltiin, eli selaimeni oli kaapattu niin että jos tulee esim. blank -sivu kuten juuri siellä huuto.netissä niin hyppää sinne pornosivulle.

    Huh luulin jo ettei mikään auta. Näyttää tämä ketju olleen aika kiintoisa kun lukijamäärää katsoo.
    Tuhannet kiitokset ja oppia ikä kaikki!

    No joo,hyvä jos asia tuli kuntoon.
    Taas oppi jotain.

    Äänestä

Kommentoi aloitusta


M-1 kirjoitti:

Täältä vissiin löytyi viimeksi guru joka osasi sanoa mikä on vikana kun avaa saastasivun kun painaa joillain sivuilla selaimen bac-nappia.

Tässä loki:

Logfile of HijackThis v1.98.2
Scan saved at 12:39:38, on 29.11.2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\System32\CTHELPER.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jippii.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\fi\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\fi\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PSDrvCheck] "C:\Program Files\Pinnacle\Instant VideoAlbum\programs\PSDrvCheck.exe" -CheckReg
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download all by Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Download by Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

Anonyymi
5000

Ilmoita asiaton sisältö

  • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

  • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

  • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

  • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

  • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

  • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

Jaa keskustelu