Eli jos joku viittii auttaa tämän login kanssa
Logfile of HijackThis v1.99.1
Scan saved at 11:32:31, on 12.6.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS2\System32\smss.exe
C:\WINDOWS2\system32\winlogon.exe
C:\WINDOWS2\system32\services.exe
C:\WINDOWS2\system32\lsass.exe
C:\WINDOWS2\System32\Ati2evxx.exe
C:\WINDOWS2\system32\svchost.exe
C:\WINDOWS2\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS2\system32\Ati2evxx.exe
C:\WINDOWS2\Explorer.EXE
C:\WINDOWS2\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS2\System32\taskgmr.exe
C:\WINDOWS2\System32\secsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS2\System32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
E:\hijack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: &EliteBar - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - C:\WINDOWS2\EliteToolBar\EliteToolBar version 60.dll
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS2\EliteToolBar\EliteToolBar version 60.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [WINTASK] taskgmr.exe
O4 - HKLM\..\Run: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKLM\..\Run: [SaYaNz] sayanx.exe
O4 - HKLM\..\Run: [Windows Compliant] jhaevh.exe
O4 - HKLM\..\Run: [SYSTRAY] C:\UNMT.EXE
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [1mFAgZtF3] C:\WINDOWS\gxbnnwxu.exe
O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\System32\gah95on6.exe
O4 - HKLM\..\Run: [Firewall Updater] msnupdateit.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [System Event Manager] secsvc.exe
O4 - HKLM\..\Run: [checkrun] C:\windows2\system32\elitepjx32.exe
O4 - HKLM\..\Run: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" c
O4 - HKLM\..\Run: [HELPER] C:\WINDOWS2\System32\temp532.exe -N
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS2\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS2\system32\NeroCheck.exe
O4 - HKLM\..\RunServices: [WINTASK] taskgmr.exe
O4 - HKLM\..\RunServices: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKLM\..\RunServices: [SaYaNz] sayanx.exe
O4 - HKLM\..\RunServices: [Windows Compliant] jhaevh.exe
O4 - HKLM\..\RunServices: [Firewall Updater] msnupdateit.exe
O4 - HKLM\..\RunServices: [System Event Manager] secsvc.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WINTASK] taskgmr.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [SaYaNz] sayanx.exe
O4 - HKCU\..\Run: [xpauto] winlogins.exe
O4 - HKCU\..\Run: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKCU\..\Run: [Windows Compliant] jhaevh.exe
O4 - HKCU\..\Run: [Firewall Updater] msnupdateit.exe
O4 - Startup: mIRC.lnk = C:\Program Files\mIRC\mirc.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c411.cab
O16 - DPF: {81B9C506-46D3-4667-9018-3D6575CBC046} (VacPro.finland_ver10) - http://advnt03.com/dialer/finland_ver10.CAB
O21 - SSODL: SysTray - {E61B5E20-DE35-11CF-9C87-1579005127ED} - C:\WINDOWS2\System32\msc.cpl
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS2\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Logfile of HijackThis v1.99.1
Scan saved at 11:32:31, on 12.6.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS2\System32\smss.exe
C:\WINDOWS2\system32\winlogon.exe
C:\WINDOWS2\system32\services.exe
C:\WINDOWS2\system32\lsass.exe
C:\WINDOWS2\System32\Ati2evxx.exe
C:\WINDOWS2\system32\svchost.exe
C:\WINDOWS2\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS2\system32\Ati2evxx.exe
C:\WINDOWS2\Explorer.EXE
C:\WINDOWS2\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS2\System32\taskgmr.exe
C:\WINDOWS2\System32\secsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS2\System32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
E:\hijack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: &EliteBar - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - C:\WINDOWS2\EliteToolBar\EliteToolBar version 60.dll
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS2\EliteToolBar\EliteToolBar version 60.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [WINTASK] taskgmr.exe
O4 - HKLM\..\Run: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKLM\..\Run: [SaYaNz] sayanx.exe
O4 - HKLM\..\Run: [Windows Compliant] jhaevh.exe
O4 - HKLM\..\Run: [SYSTRAY] C:\UNMT.EXE
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [1mFAgZtF3] C:\WINDOWS\gxbnnwxu.exe
O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\System32\gah95on6.exe
O4 - HKLM\..\Run: [Firewall Updater] msnupdateit.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [System Event Manager] secsvc.exe
O4 - HKLM\..\Run: [checkrun] C:\windows2\system32\elitepjx32.exe
O4 - HKLM\..\Run: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" c
O4 - HKLM\..\Run: [HELPER] C:\WINDOWS2\System32\temp532.exe -N
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS2\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS2\system32\NeroCheck.exe
O4 - HKLM\..\RunServices: [WINTASK] taskgmr.exe
O4 - HKLM\..\RunServices: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKLM\..\RunServices: [SaYaNz] sayanx.exe
O4 - HKLM\..\RunServices: [Windows Compliant] jhaevh.exe
O4 - HKLM\..\RunServices: [Firewall Updater] msnupdateit.exe
O4 - HKLM\..\RunServices: [System Event Manager] secsvc.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WINTASK] taskgmr.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [SaYaNz] sayanx.exe
O4 - HKCU\..\Run: [xpauto] winlogins.exe
O4 - HKCU\..\Run: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKCU\..\Run: [Windows Compliant] jhaevh.exe
O4 - HKCU\..\Run: [Firewall Updater] msnupdateit.exe
O4 - Startup: mIRC.lnk = C:\Program Files\mIRC\mirc.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c411.cab
O16 - DPF: {81B9C506-46D3-4667-9018-3D6575CBC046} (VacPro.finland_ver10) - http://advnt03.com/dialer/finland_ver10.CAB
O21 - SSODL: SysTray - {E61B5E20-DE35-11CF-9C87-1579005127ED} - C:\WINDOWS2\System32\msc.cpl
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS2\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Vastaukset 6
Vanhimmat
Poista Lisää/Poista paneelista jos näkyy
EliteToolBar tai EliteBar
Media Access
Käynnistä sitte vikasietotilassa ja poista nuo kansiot jos löytyy
C:\WINDOWS2\EliteToolBar\ <
C:\Program Files\Media Access\ <
Käynnistä sitte normaalisti ja scannaa kone tolla
http://koti.mbnet.fi/pattaya1/escanmwav.htm
Kopioi kaikki mitä ilmestyy alaikkunaan ja pistä tänne uus Hijack logi.
Kiitos tuosta avusta vaan
Varoittelen ettei tuo oli mikään pienilista mikä tosta ohjelmasta tulee nyt on 499 viruksii löytynyt jo ja niist on poistettu 137
Joo, se on odotettavissa. Hijack-logissa oli jo monta matoakin.
File C:\WINDOWS2\System32\taskgmr.exe infected by "Net-Worm.Win32.Mytob.w" Virus. Action Taken: File Deleted.
File C:\WINDOWS2\System32\secsvc.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\WINDOWS2\System32\nkmaknj.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\PROGRA~1\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
File C:\WINDOWS2\System32\bingoo.exe infected by "Net-Worm.Win32.Mytob.w" Virus. Action Taken: File Deleted.
File C:\WINDOWS2\System32\kwhipis.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\WINDOWS2\System32\mtubejp.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05600001.VBN infected by "Net-Worm.Win32.Randon" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05600002.VBN infected by "Trojan-Spy.Win32.Small.eo" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\05700000.VBN infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06C80000.VBN infected by "Trojan.WinREG.LowZones.a" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06C80001.VBN infected by "Trojan.WinREG.LowZones.a" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11840000.VBN infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11840001.VBN infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11840002.VBN infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11840003.VBN infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11840004.VBN infected by "Trojan-Spy.Win32.Small.eo" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11840005.VBN infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11840006.VBN infected by "Trojan-Clicker.Win32.Delf.ah" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11840007.VBN infected by "Trojan-Clicker.Win32.Delf.ah" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\User Account Pictures\Default Pictures\balik.bmp infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\User Account Pictures\Default Pictures\kalkis.bmp infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\User Account Pictures\Default Pictures\kurbaga.bmp infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\User Account Pictures\Default Pictures\kirmizi çiçek.bmp infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Belgeler\Resimlerim\Örnek Resimler\Günbatimi.jpg infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Belgeler\Resimlerim\Örnek Resimler\Kis.jpg infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Start Menu\Program Erisim ve Varsayilanlarini Ayarla.lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programlar\Oyunlar\Mayin Tarlasi.lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programlar\Yönetimsel Araçlar\Bilesen Hizmetleri.lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programlar\Yönetimsel Araçlar\Veri Kaynaklari (ODBC).lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programlar\Yönetimsel Araçlar\Yerel Güvenlik Ilkesi.lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS\Start Menu\Windows Katalogu.lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users.WINDOWS2\Tiedostot\install.exe infected by "Backdoor.Win32.Robobot.y" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\Default User.WINDOWS\Start Menu\Programlar\Uzaktan Yardim.lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\Tapio\Local Settings\Application Data\Microsoft\Internet Explorer\V0.26.dat infected by "Trojan.Win32.Dialer.fy" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio\Local Settings\Temp\b1.exe infected by "Trojan.BAT.KillAV.bk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\ILKTOJCN\games4[1].cab infected by "Trojan.Win32.Dialer.fy" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\ILKTOJCN\index[1].htm infected by "Trojan-Dropper.Win32.RunMe" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\M7AVOLM3\100178fi[1].exe tagged as not-a-virus:Dialer.Win32.PlayGames. No Action Taken.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\M7AVOLM3\BoT-ReMoVER[1].exe infected by "Trojan-Dropper.Win32.VB.fk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\M7AVOLM3\finland_ver10[1].CAB infected by "Trojan-Clicker.Win32.Adpower.n" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\QZS7YBCB\a173aa[1].js infected by "Trojan-Downloader.JS.Small.aq" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\QZS7YBCB\BoT-KiLleR[1].exe infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\QZS7YBCB\games20[1].cab infected by "Trojan.Win32.Dialer.fy" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\Y50ZQFYJ\mirc616[1].exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
File C:\Documents and Settings\Tapio\Local Settings\Temporary Internet Files\Content.IE5\Y50ZQFYJ\send_car_int[1].htm infected by "Exploit.HTML.CodeBaseExec" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\Tapio.TAPIO-C957346E3\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Explorer Tarayicisi'ni Baslat.lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\Tapio.TAPIO-C957346E3\Start Menu\Programlar\Uzaktan Yardim.lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Local Settings\Temp\1622484.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Local Settings\Temporary Internet Files\Content.IE5\4BODER4N\Zarox[1].exe infected by "Trojan-Dropper.Win32.Agent.kd" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Local Settings\Temporary Internet Files\Content.IE5\WXJ2UVZC\finland_ver10[1].CAB infected by "Trojan-Clicker.Win32.Adpower.n" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Local Settings\Temporary Internet Files\Content.IE5\WXJ2UVZC\x[1].exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Ay Çiçegi Arkaplan.jpg infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Ay Çiçegi.htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Açik Gökyüzü Arkaplan.jpg infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Açik Gökyüzü.htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Ag Hücumu Arkaplan.gif infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Ag Hücumu.htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Bos Arkaplan.gif infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Bos.htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Doga Arkaplan.jpg infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Doga.htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Misir Arkaplan.jpg infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Misir.htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Sarmasik.gif infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Sarmasik.htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Tatli Arkaplan.gif infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Microsoft Shared\Stationery\Tatli.htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\mIRC\backup\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
File C:\Program Files\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\01937EB1.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\028177AB.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\036B2140.exe infected by "Backdoor.Win32.Agobot.rv" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\04536583.EXE infected by "Backdoor.Win32.Agobot.abq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\04A218F3.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\04E036AF.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\05170072.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\059861DE.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\06947EC2 infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\076157E7.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\078F28CA.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\086B117E.exe infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\089771A7.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\08E33755.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\092479F7.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\0A5F2BD4.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\0AE80CC1.EXE infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\0AF1447C.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\0AF1447C.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\0AF46E78.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\0BED5F14.exe infected by "Backdoor.Win32.Agobot.aci" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\0E126CB8.exe infected by "Backdoor.Win32.Agobot.aci" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\0E285F2D.EXE infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\10F44A1A.EXE infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\11D04F9A.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\127C35B5.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\12EB493A.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\13F345B6.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\13F66FB2.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\14A10E80.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\15263E30.exe tagged as not-a-virus:AdWare.WinAD.au. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\174F7F8D.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\17E921F0.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\1A2A0CD2.EXE infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\1A3975BE.dct infected by "P2P-Worm.Win32.Krepper.c" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\1A3F49B7.dct infected by "P2P-Worm.Win32.Krepper.c" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\1B2C01B6.EXE infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\1BAC672A.EXE infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\1CDD5C33 infected by "Backdoor.Win32.Codbot.ad" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\1E790B59.exe infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\1E7F108C.exe infected by "Trojan-Downloader.Win32.IstBar.ir" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\1FF71B0D.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\29ED7B1E.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\2A8137CD.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\2A830679.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\2A9B07B0.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\2AB80190.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\2ACB222A.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\2F1A3489.exe infected by "Backdoor.Win32.Agobot.adg" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\2F62503A.exe infected by "Backdoor.Win32.Agobot.adg" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\2FEF5D9F.exe infected by "Backdoor.Win32.Agobot.adg" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\31964B97.dll tagged as not-a-virus:AdWare.WinAD.ag. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\31964B97.exe tagged as not-a-virus:AdWare.WinAD.af. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\323B1F26.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\334F2858.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\33D137C8.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\34944C91.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\357F1B8E.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\35CB239B.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\36B87EE5.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\37C047C2.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\39551E04.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\39D96982.exe infected by "Trojan-Clicker.Win32.Delf.ah" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\3AEE66C2.exe infected by "Backdoor.Win32.Rbot.ry" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\400B7A59.cab infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\400E2455.cab tagged as not-a-virus:AdWare.WinAD.ak. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\4018224A.htm infected by "Trojan-Clicker.JS.Linker.l" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\402C1E35.htm infected by "Trojan-Downloader.JS.IstBar.j" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\429E683B.dll tagged as not-a-virus:AdWare.AdMir.a. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\445469BB.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\460065E4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\472778DE.exe infected by "Trojan-Downloader.Win32.IstBar.ij" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\472A22DB.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\472D4CD7.dll tagged as not-a-virus:AdWare.WinAD.ag. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\472D4CD7.exe tagged as not-a-virus:AdWare.WinAD.af. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\473176D3.exe tagged as not-a-virus:AdWare.ToolBar.SideFind.a. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\473176D3.htm infected by "Trojan-Downloader.JS.IstBar.k" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\473176D3.tmp infected by "Trojan-Downloader.JS.IstBar.k" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\480B23A5.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4AC37E4D.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4B087001.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4B1959A3.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4B3F39C4.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4B951F1E infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4BA66708.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4C157A8E.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4F511B9E.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4F5E53E3.exe infected by "Backdoor.Win32.Agobot.adg" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4F8221BC.exe infected by "Backdoor.Win32.Agobot.adg" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4F960D52.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4F961DA6.exe infected by "Backdoor.Win32.Agobot.adg" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\4FDE2903.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\532A72BB.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\550559C7.exe infected by "Trojan-Downloader.Win32.Agent.mg" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\551201B9.exe infected by "Backdoor.Win32.Shodabot.i" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\55B53505.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\55FB629D.exe infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\56176C33.exe infected by "Backdoor.Win32.Agobot.aci" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\5AE163B5.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\5AEE1C2F.dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\5B6D711B.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\5B9D2486.exe infected by "Backdoor.Win32.Shodabot.i" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\5C334A63.exe infected by "Backdoor.Win32.Agobot.acb" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\5C486E2A.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\5CEA18DC.htm infected by "Trojan-Clicker.JS.Linker.l" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\5FA15D5F.exe infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\61935B3A.exe infected by "Trojan.WinREG.LowZones.a" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\61A32D28.exe infected by "Trojan.WinREG.LowZones.a" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\61B609D0.dll infected by "Trojan-Downloader.Win32.IstBar.ik" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\61BA33CC.exe tagged as not-a-virus:AdWare.WinAD.ai. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\61BD5DC9.exe tagged as not-a-virus:AdWare.WinAD.ai. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\61C007C5.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\625D065B.exe infected by "Backdoor.Win32.Agobot.yo" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\626A2E4D.cab infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\626A2E4D.exe infected by "Trojan-Downloader.Win32.IstBar.ir" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\638465B8.exe infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\673B0DE8.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\67DB1738.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\6892466F.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\69FF5229.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\6A4C06FE.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\6BCD6D97.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\6C67544D.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\6CA2480D.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\6D075D9D.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\6D752628.exe infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\6DF977CD.cab tagged as not-a-virus:AdWare.WinAD.ak. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\6DFC21C9.exe tagged as not-a-virus:AdWare.WinAD.at. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\6DFC21C9.htm infected by "Trojan-Clicker.JS.Linker.l" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\6DFF4BC6.dll tagged as not-a-virus:AdWare.WinAD.ak. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\6E0275C2.dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\6E0275C2.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\6E0275C2.htm infected by "Trojan-Downloader.JS.IstBar.s" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\6F0A07A7.exe infected by "Backdoor.Win32.Agobot.acb" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\6F54515C.exe infected by "Backdoor.Win32.Agobot.rv" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\73755454.exe infected by "Backdoor.Win32.Rbot.ry" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\73787E50.exe infected by "Backdoor.Win32.Rbot.ry" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\73B32932 infected by "Backdoor.Win32.Codbot.ad" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\746B701D.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\74A62152 infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\754B724E.exe infected by "Backdoor.Win32.Rbot.ry" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\758B5EE1.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\766905EC.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\775E2996.exe tagged as not-a-virus:AdWare.ToolBar.SideFind.a. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\780057D0.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\78A8396C.dct infected by "P2P-Worm.Win32.Krepper.c" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton AntiVirus\Quarantine\7BC67A4F infected by "Backdoor.Win32.Codbot.ad" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\7BFC6401.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\7C437FB2.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\7CE05F06.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\7F7C254B.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Norton AntiVirus\Quarantine\7FE80ED4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Program Files\Online Services\Daha çok Internet Servis Saglayicisina bagla.lnk infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP2\A0000039.exe infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP2\A0000040.exe infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP2\A0000041.cmd infected by "Trojan.BAT.KillAV.bj" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP28\A0003341.exe infected by "Trojan.WinREG.LowZones.a" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP28\A0003342.exe infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP28\A0003343.reg infected by "Trojan.WinREG.LowZones.a" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP28\A0003346.exe infected by "Backdoor.Win32.Shodabot.i" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP28\A0003359.exe infected by "Trojan-Dropper.Win32.VB.fk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP28\A0003360.cmd infected by "Trojan.BAT.KillAV.bk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP28\A0003363.exe infected by "Trojan.WinREG.LowZones.a" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP29\A0003371.exe infected by "Backdoor.Win32.Shodabot.i" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP29\A0003400.cmd infected by "Trojan.BAT.KillAV.bk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP29\A0003404.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP4\A0002060.dll tagged as not-a-virus:AdWare.Sahat.l. No Action Taken.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP4\A0002062.exe infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP4\A0002063.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP4\A0002067.exe tagged as not-a-virus:AdWare.ToolBar.SideFind.a. No Action Taken.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP4\A0002068.dll tagged as not-a-virus:AdWare.AdMir.a. No Action Taken.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP4\A0002069.dll infected by "Trojan-Downloader.Win32.IstBar.ik" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP4\A0002070.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP4\A0002076.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{BA47F1D8-86FA-46B2-AA78-4EAF3813544A}\RP6\A0002105.exe infected by "Trojan-Clicker.Win32.Delf.ah" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP30\A0006436.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP34\A0006711.dll tagged as not-a-virus:AdWare.AdMir.a. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP35\A0006745.exe infected by "Backdoor.Win32.Robobot.w" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP36\A0006787.exe infected by "Backdoor.Win32.Robobot.y" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP36\A0006815.exe infected by "Backdoor.Win32.Robobot.y" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP38\A0006880.exe infected by "Backdoor.Win32.Robobot.y" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP39\A0007963.exe infected by "Backdoor.Win32.Robobot.y" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP40\A0007978.exe infected by "Backdoor.Win32.Robobot.y" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP42\A0008125.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP46\A0009399.exe infected by "Trojan.WinREG.LowZones.a" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP46\A0009400.exe infected by "Trojan.WinREG.LowZones.a" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP46\A0009401.exe infected by "Trojan-Downloader.Win32.IstBar.ir" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP46\A0009402.exe infected by "Trojan-Downloader.Win32.IstBar.ir" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP52\A0017963.EXE infected by "Backdoor.Win32.Agobot.abq" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021183.exe infected by "Trojan.Win32.LowZones.p" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021184.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021220.exe infected by "Trojan.Win32.LowZones.p" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021222.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021232.exe tagged as not-a-virus:AdWare.180Solutions. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021233.exe infected by "Trojan.Win32.LowZones.p" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021235.exe tagged as not-a-virus:AdWare.BargainBuddy.w. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021237.exe tagged as not-a-virus:AdWare.180Solutions. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021247.dll tagged as not-a-virus:AdWare.WinAD.av. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021248.exe tagged as not-a-virus:AdWare.WinAD.at. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021249.exe tagged as not-a-virus:AdWare.WinAD.au. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021250.dll infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021251.exe tagged as not-a-virus:AdWare.PowerScan.d. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021252.exe infected by "Trojan-Downloader.Win32.IstBar.gi" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021285.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP55\A0021286.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021324.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021325.exe infected by "Trojan-Downloader.Win32.IstBar.ju" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021326.exe infected by "Trojan-Downloader.Win32.IstBar.ju" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021331.exe tagged as not-a-virus:AdWare.180Solutions. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021345.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021349.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021350.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021351.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021353.exe infected by "Trojan.Win32.LowZones.p" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021360.exe infected by "Trojan-Downloader.Win32.IstBar.jm" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021361.dll tagged as not-a-virus:AdWare.ToolBar.SideFind. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021362.exe infected by "Trojan-Downloader.Win32.IstBar.jm" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021363.exe infected by "Trojan-Downloader.Win32.IstBar.jm" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021364.dll tagged as not-a-virus:AdWare.ToolBar.SideFind. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021365.dll tagged as not-a-virus:AdWare.ToolBar.SideFind. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021366.dll tagged as not-a-virus:AdWare.ToolBar.SideFind. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021367.exe tagged as not-a-virus:AdWare.BargainBuddy.n. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021368.exe infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021369.exe infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021370.exe infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021371.dll tagged as not-a-virus:AdWare.BargainBuddy.n. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021372.srg tagged as not-a-virus:AdWare.BargainBuddy.q. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021373.dll tagged as not-a-virus:AdWare.WinAD.ak. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021374.exe tagged as not-a-virus:AdWare.WinAD.au. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021375.exe tagged as not-a-virus:AdWare.WinAD.at. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021376.vxd tagged as not-a-virus:AdWare.BargainBuddy.q. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021377.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021378.exe infected by "Trojan-Downloader.Win32.IstBar.ij" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021379.dll infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021380.exe tagged as not-a-virus:AdWare.BargainBuddy.q. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021381.exe tagged as not-a-virus:AdWare.BargainBuddy.q. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021382.exe tagged as not-a-virus:AdWare.BargainBuddy.q. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021383.exe tagged as not-a-virus:AdWare.BargainBuddy.q. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021384.exe tagged as not-a-virus:AdWare.BargainBuddy.q. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021385.exe tagged as not-a-virus:AdWare.BargainBuddy.q. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021386.exe infected by "Trojan-Downloader.Win32.Adload.a" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021387.exe infected by "Trojan-Downloader.Win32.Adload.a" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021388.exe tagged as not-a-virus:AdWare.BargainBuddy.n. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021389.exe tagged as not-a-virus:AdWare.BargainBuddy.n. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021410.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021411.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021412.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021413.dll tagged as not-a-virus:AdWare.Sahat.l. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021414.exe infected by "Trojan-Downloader.Win32.IstBar.gi" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021416.exe tagged as not-a-virus:AdWare.PowerScan.d. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021418.dll infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021419.exe tagged as not-a-virus:AdWare.BargainBuddy.w. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021421.exe tagged as not-a-virus:AdWare.180Solutions. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021423.exe tagged as not-a-virus:AdWare.BargainBuddy.n. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021424.exe infected by "Trojan-Downloader.Win32.IstBar.ij" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021425.exe tagged as not-a-virus:AdWare.180Solutions. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021426.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021429.dll tagged as not-a-virus:AdWare.WinAD.av. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021430.exe tagged as not-a-virus:AdWare.WinAD.au. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021431.exe tagged as not-a-virus:AdWare.WinAD.at. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021432.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021437.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021452.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021465.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021589.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021590.exe infected by "Trojan.Win32.LowZones.p" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021591.exe tagged as not-a-virus:AdWare.180Solutions. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021592.dll tagged as not-a-virus:AdWare.180Solutions. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021604.exe infected by "Backdoor.Win32.Iroffer.14b2" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021616.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021619.exe tagged as not-a-virus:AdWare.180Solutions. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021620.exe infected by "Trojan.Win32.LowZones.p" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021624.exe infected by "Trojan-Downloader.Win32.Dyfuca.ei" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021625.dll tagged as not-a-virus:AdWare.WinAD.av. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021626.exe tagged as not-a-virus:AdWare.WinAD.at. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021627.exe tagged as not-a-virus:AdWare.WinAD.au. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021653.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021656.exe infected by "Trojan.Win32.LowZones.p" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021664.dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021665.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021666.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.03. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP56\A0021667.exe infected by "Backdoor.Win32.Iroffer.14b2" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP57\A0021759.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP57\A0021778.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP57\A0021794.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP57\A0021871.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP57\A0021916.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0021995.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022002.exe infected by "Trojan.Win32.LowZones.p" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022004.dll tagged as not-a-virus:AdWare.180Solutions. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022005.dll tagged as not-a-virus:AdWare.Sahat.l. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022127.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022128.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022130.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022133.exe infected by "Trojan-Dropper.Win32.Agent.kd" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022134.exe infected by "Trojan-Dropper.Win32.Agent.hh" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022135.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022175.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022232.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.af. No Action Taken.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022235.exe infected by "Net-Worm.Win32.Mytob.w" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022236.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022237.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022238.exe infected by "Net-Worm.Win32.Mytob.w" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022239.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022240.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022241.exe infected by "Backdoor.Win32.Robobot.y" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022242.exe infected by "Trojan.BAT.KillAV.bk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022243.exe infected by "Trojan-Dropper.Win32.VB.fk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022244.exe infected by "Trojan.Win32.Pakes" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022245.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022246.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022247.exe infected by "Backdoor.Win32.Agobot.rv" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022248.EXE infected by "Backdoor.Win32.Agobot.abq" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022249.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022250.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022251.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022252.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022253.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022254.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022255.exe infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022256.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022257.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022258.exe infected by "Backdoor.Win32.SdBot.xm" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022259.exe infected by "Backdoor.Win32.Agobot.aaf" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022260.EXE infected by "Backdoor.Win32.Agobot.nq" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022261.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022262.exe infected by "Trojan.Win32.StartPage.nk" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6D7B}\RP58\A0022263.exe infected by "Backdoor.Win32.Agobot.aci" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{E748A31B-E71B-4520-889A-7C4D9E6D6
Tässä olis sit tä hjt logi
Logfile of HijackThis v1.99.1
Scan saved at 20:02:44, on 12.6.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS2\System32\smss.exe
C:\WINDOWS2\system32\winlogon.exe
C:\WINDOWS2\system32\services.exe
C:\WINDOWS2\system32\lsass.exe
C:\WINDOWS2\System32\Ati2evxx.exe
C:\WINDOWS2\system32\svchost.exe
C:\WINDOWS2\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS2\system32\Ati2evxx.exe
C:\WINDOWS2\Explorer.EXE
C:\WINDOWS2\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.exe
C:\Program Files\mIRC\mirc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS2\System32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
E:\hijack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS2\EliteToolBar\EliteToolBar version 60.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKLM\..\Run: [Windows Compliant] jhaevh.exe
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\System32\gah95on6.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [checkrun] C:\windows2\system32\elitepjx32.exe
O4 - HKLM\..\Run: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" c
O4 - HKLM\..\Run: [HELPER] C:\WINDOWS2\System32\temp532.exe -N
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS2\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS2\system32\NeroCheck.exe
O4 - HKLM\..\Run: [mwavscan] "C:\Kaspersky\mwavscan.com" /s
O4 - HKLM\..\RunServices: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKLM\..\RunServices: [Windows Compliant] jhaevh.exe
O4 - HKLM\..\RunServices: [System Event Manager] secsvc.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Tapio.TAPIO-E7SLF2Y5C\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [xpauto] winlogins.exe
O4 - HKCU\..\Run: [Windows Compliant] jhaevh.exe
O4 - Startup: mIRC.lnk = C:\Program Files\mIRC\mirc.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c411.cab
O16 - DPF: {81B9C506-46D3-4667-9018-3D6575CBC046} (VacPro.finland_ver10) - http://advnt03.com/dialer/finland_ver10.CAB
O21 - SSODL: SysTray - {E61B5E20-DE35-11CF-9C87-1579005127ED} - C:\WINDOWS2\System32\msc.cpl
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS2\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Siirrä ensin se Hijackki omaan kansioon tonne
C:\HjT\HijackThis.exe
Poista Lisää/Poista paneelista jos näkyy
EliteToolBar tai EliteBar
Media Access
Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS2\EliteToolBar\EliteToolBar version 60.dll
O4 - HKLM\..\Run: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKLM\..\Run: [Windows Compliant] jhaevh.exe
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\System32\gah95on6.exe
O4 - HKLM\..\Run: [checkrun] C:\windows2\system32\elitepjx32.exe
O4 - HKLM\..\RunServices: [Generic Host Process326a System Backup] scvhost326a.exe
O4 - HKLM\..\RunServices: [Windows Compliant] jhaevh.exe
O4 - HKLM\..\RunServices: [System Event Manager] secsvc.exe
O4 - HKCU\..\Run: [xpauto] winlogins.exe
O4 - HKCU\..\Run: [Windows Compliant] jhaevh.exe
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c411.cab
O16 - DPF: {81B9C506-46D3-4667-9018-3D6575CBC046} (VacPro.finland_ver10) - http://advnt03.com/dialer/finland_ver10.CAB
O21 - SSODL: SysTray - {E61B5E20-DE35-11CF-9C87-1579005127ED} - C:\WINDOWS2\System32\msc.cpl
Käynnistä sitte vikasietotilassa ja poista jos löytyy
C:\WINDOWS2\System32\msc.cpl
C:\windows2\system32\elitepjx32.exe
Kato samalla jos C:\windows2\system32\ kansiossa näkyy enempi tällasia fiiluja elitepjx32.exe
Eli elite???32.exe
? = on ihan mitä kirjaimia vaan
Poista kaikki semmoset
C:\WINDOWS2\EliteToolBar\ < kansio
C:\Program Files\Media Access\ < kansio
Tyhjennä kaikki Tempit
Käynnistä sitte normaalisti ja uus Hijack logi.