Virus (?) päässyt iskemään

Nyt on käynyt niin,että työpöydän taustakuva on muuttunut kokonaan punaiseksi ja se hälyttää spywaresta kokoajan. Ajattelen koneessa olevan jotain häikkää ja pahasti mutta itse en osaa korjata sitä,joten pyydän teiltä apua.

hijackthis loki :
Logfile of HijackThis v1.99.1
Scan saved at 19:21:03, on 25.2.2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ALTNET\POINTS MANAGER\POINTS MANAGER.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\LOADQM.EXE
C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
C:\WINDOWS\CMD\COMMAND.EXE
C:\WINDOWS\SYSTEM\WINDLL32.EXE
C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\OHJELMATIEDOSTOT\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SHELL386.EXE
C:\PROGRAM FILES\ALTNET\DOWNLOAD MANAGER\ASM.EXE
C:\OHJELMATIEDOSTOT\TPT REGISTRY_CLEANER (TRIAL)\REGCLEAN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\MSWINB32.EXE
C:\OMAT TIEDOSTOT\OMAT KUVATIEDOSTOT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\OHJELMATIEDOSTOT\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (file missing)
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\OHJELM~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
O2 - BHO: winapi32.MyBHO - {06CC1B18-42FA-41B8-91A9-D3E3A848C7A8} - C:\WINDOWS\SYSTEM\WINAPI32.DLL
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1035,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [WinCast] D:\SETUP.EXE -leng
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [OmgStartup] C:\Ohjelmatiedostot\Yhteiset tiedostot\Sony Shared\OpenMG\OmgStartup.exe
O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P NETWORKING\P2P NETWORKING.EXE /AUTOSTART
O4 - HKLM\..\Run: [Command] C:\WINDOWS\cmd\command.exe
O4 - HKLM\..\Run: [Universal Porn Dialer] C:\WINDOWS\SYSTEM\xxxdialer.exe
O4 - HKLM\..\Run: [Win32.Trojan.Downloader] C:\WINDOWS\SYSTEM\netstat2.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [windll32.exe] C:\WINDOWS\SYSTEM\windll32.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: WinZip Quick Pick.lnk = C:\Ohjelmatiedostot\WinZip\WZQKPICK.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 85.255.113.116,85.255.112.80
5594
Äänestä

Muut lukivat myös

Vastaukset 5

Vanhimmat

Siellä on wareout-rootkit

Tee näin:

Poista ohjauspaneelista:

Altnet points manager
MySearchBar tms.
P2P Networking

Hae fixwareout -> http://downloads.subratam.org/Fixwareout.exe
Tallenna johonkin hakemistoon ja käynnistä se. Seuraa ohjeita, käynnistä kone uudestaan kun fixi pyytää sitä. Fixi avaa HjT:n.

Fixaa silloin nämä:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O2 - BHO: winapi32.MyBHO - {06CC1B18-42FA-41B8-91A9-D3E3A848C7A8} - C:\WINDOWS\SYSTEM\WINAPI32.DLL
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P NETWORKING\P2P NETWORKING.EXE /AUTOSTART
O4 - HKLM\..\Run: [Command] C:\WINDOWS\cmd\command.exe
O4 - HKLM\..\Run: [Universal Porn Dialer] C:\WINDOWS\SYSTEM\xxxdialer.exe
O4 - HKLM\..\Run: [Win32.Trojan.Downloader] C:\WINDOWS\SYSTEM\netstat2.exe
O4 - HKCU\..\Run: [windll32.exe] C:\WINDOWS\SYSTEM\windll32.exe
9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 85.255.113.116,85.255.112.80

Poista, jos löytyy:

C:\OHJELMATIEDOSTOT\==>MYWAYaltnetP2P NETWORKINGcommand.exexxxdialer.exenetstat2.exe windll32.exerelated.htm http://koti.mbnet.fi/pattaya1/escanmwav.htm .
Asenna, päivitä, skannaa sivulla olevien ohjeiden mukaan. Lähetä sitten "örkkitulokset" tänne (ohje tuolla sivulla, alin kuva ja sen yläpuolella oleva teksti).

Lähetä myös uusi HjT-loki ja C:\fixwareout\report.txt-tiedoston sisältö tänne.

Äänestä
  • juu eli tässä olisi sitten tulokset :
    escan File C:\WINDOWS\CMD\COMMAND.EXE tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
    File C:\WINDOWS\SYSTEM\SHELL386.EXE infected by "Backdoor.Win32.VB.aqj" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\desktop.html infected by "not-virus:Hoax.Win32.Aflac.a" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\NDNuninstall4_50.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_80.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_88.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\SYSTEM\windll32.exe infected by "Trojan-Proxy.Win32.Mitglieder.bi" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\SYSTEM\BDErastDX3.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3567. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac24.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac10.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\intxt.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.dll tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinf32.dll infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\SYSTEM\DateMakerIntl-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinf32.exe infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\SYSTEM\howiper.exe infected by "Trojan.Win32.Small.gq" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\SYSTEM\rzspy.exe tagged as not-a-virus:AdWare.Win32.Raze.a. No Action Taken.
    File C:\WINDOWS\SYSTEM\idownload.exe infected by "Trojan-Downloader.Win32.Small.buy" Virus. Action Taken: File Deleted.
    File C:\_RESTORE\TEMP\A0757731.CPY infected by "Trojan-Downloader.Win32.Small.ccn" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0758985.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.e. No Action Taken.
    File C:\_RESTORE\TEMP\A0758990.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0758995.CPY tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
    File C:\_RESTORE\TEMP\A0759005.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.e. No Action Taken.
    File C:\_RESTORE\TEMP\A0759010.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
    File C:\_RESTORE\TEMP\A0759015.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759020.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
    File C:\_RESTORE\TEMP\A0759026.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3563. No Action Taken.
    File C:\_RESTORE\TEMP\A0759027.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3566. No Action Taken.
    File C:\_RESTORE\TEMP\A0759028.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
    File C:\_RESTORE\TEMP\A0759029.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3022. No Action Taken.
    File C:\_RESTORE\TEMP\A0759030.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1100. No Action Taken.
    File C:\_RESTORE\TEMP\A0759031.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3022. No Action Taken.
    File C:\_RESTORE\TEMP\A0759032.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
    File C:\_RESTORE\TEMP\A0759033.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.35692. No Action Taken.
    File C:\_RESTORE\TEMP\A0759034.CPY infected by "Trojan.Win32.Krepper.y" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759044.CPY infected by "Trojan-Downloader.Win32.Axload.c" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759061.CPY infected by "Trojan-Downloader.Win32.Realtens.h" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759067.CPY tagged as not-a-virus:AdWare.Win32.DownloadWare. No Action Taken.
    File C:\_RESTORE\TEMP\A0759069.CPY tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\_RESTORE\TEMP\A0759070.CPY tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\_RESTORE\TEMP\A0759071.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759082.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759087.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759138.CPY infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759143.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759151.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759158.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759161.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759169.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759172.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759179.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759183.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759190.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759197.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759201.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759208.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759211.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759218.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759221.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759228.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759231.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759238.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759242.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759249.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759252.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759266.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759270.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759277.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759280.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759292.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759296.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759304.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759307.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759317.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759323.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759330.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759337.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759341.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759350.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759354.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759362.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759365.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759372.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759375.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759382.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759385.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759392.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759403.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759406.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759410.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759423.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759428.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759436.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759439.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759460.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759463.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759470.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759477.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759480.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759487.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759490.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759497.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759500.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759507.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759514.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759517.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759524.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759528.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759535.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759538.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759545.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759548.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759555.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759559.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759567.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759572.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759579.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759582.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759589.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759592.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759599.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759602.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759609.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759616.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759619.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759626.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759629.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759636.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759639.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759646.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759654.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759657.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759664.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759668.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759675.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759678.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759685.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759690.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759694.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759704.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759707.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759712.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759715.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759722.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759727.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759735.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759739.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759747.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759750.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759757.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759764.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759767.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759774.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759778.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759786.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759790.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759801.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759805.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759812.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759819.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759829.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759838.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759844.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759847.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759860.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759863.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759870.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759878.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759881.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759890.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759893.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759900.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759903.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759910.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759917.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759920.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759927.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759930.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759937.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759940.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759947.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759954.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759957.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759964.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759967.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759974.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759981.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759984.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759987.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759995.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759998.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760007.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760010.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760017.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760024.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760027.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760034.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760037.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760044.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760051.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760054.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760061.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760064.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760071.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760078.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760081.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760088.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760091.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760098.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760101.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760108.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760115.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760118.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760125.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760131.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760138.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760145.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760148.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760155.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760158.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760165.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760172.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760175.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760182.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760185.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760192.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760195.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760202.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760209.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760212.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760219.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760222.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760229.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760236.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760239.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760246.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760249.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760256.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760264.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760270.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760277.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760280.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760289.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760292.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760297.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0760300.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760307.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760310.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760317.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760320.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760327.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760334.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760337.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760344.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760347.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760354.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760357.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760364.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760371.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760374.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760381.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760384.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760391.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760398.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760404.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760411.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760414.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760421.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760424.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760431.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760438.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760441.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760448.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760451.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760458.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760465.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760468.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760475.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760478.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760485.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760492.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760495.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760502.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760505.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760512.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760515.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760522.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760529.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760532.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760542.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760545.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760552.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760559.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760562.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760571.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760574.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760581.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760588.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760591.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760598.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760601.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760608.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760615.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760618.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760625.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760628.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760635.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760638.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760645.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760652.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760655.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760662.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760665.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760672.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760682.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760685.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760692.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760695.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760702.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760705.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760712.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760719.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760722.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760729.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760732.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760739.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760746.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760749.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760756.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760759.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760766.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760773.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760776.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760783.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760786.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760793.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760800.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760803.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760810.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760817.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760824.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760827.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760834.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760841.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760844.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760851.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0760854.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760857.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760864.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760867.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760874.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760881.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760884.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760891.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760894.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760901.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760909.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760912.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760919.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760922.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760929.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760932.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760939.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760946.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760952.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760959.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760962.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760969.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760972.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760979.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760986.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760989.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760996.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760999.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761006.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761013.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761016.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761023.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761026.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761033.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761036.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761043.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761050.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761053.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761060.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761063.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761070.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761077.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761080.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761090.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761093.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761100.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761103.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761110.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761117.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761120.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761129.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761132.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761139.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761143.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761150.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761157.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761160.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761167.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761170.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761177.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761180.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761187.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761194.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761197.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761204.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761207.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761214.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761221.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761227.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761234.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761237.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761244.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761251.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761254.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761261.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761264.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761271.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761274.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761281.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761288.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761291.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761298.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761301.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761308.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761315.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761318.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761325.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761328.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761335.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761338.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761345.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761352.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761356.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761918.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761923.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761926.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761933.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0761936.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761939.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761946.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761949.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761959.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761992.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762002.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
    File C:\_RESTORE\TEMP\A0762005.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
    File C:\_RESTORE\TEMP\A0762010.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
    File C:\_RESTORE\TEMP\A0762012.CPY tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
    File C:\_RESTORE\TEMP\A0762013.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0762014.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0762015.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
    File C:\_RESTORE\TEMP\A0762022.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762025.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762032.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762035.CPY tagged as not-a-virus:AdWare.Win32.MyWay.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762038.CPY tagged as not-a-virus:AdWare.Win32.MyWay.f. No Action Taken.
    File C:\_RESTORE\TEMP\A0762041.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762048.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762051.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762058.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762061.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762068.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762071.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762078.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762081.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762085.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762092.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762095.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762102.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762105.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762112.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762119.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762122.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762129.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762132.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762139.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762142.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762149.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762156.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762159.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762170.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762176.CPY infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0762210.CPY infected by "Backdoor.Win32.VB.aqj" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762211.CPY infected by "Trojan-Proxy.Win32.Mitglieder.bi" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0762212.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762213.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762214.CPY infected by "Trojan.Win32.Small.gq" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0762215.CPY infected by "Trojan-Downloader.Win32.Small.buy" Virus. Action Taken: File to be deleted on reboot.
    File C:\WINDOWS\SYSTEM\BDErastDX3.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3567. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac24.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac10.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\intxt.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.dll tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\DateMakerIntl-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
    File C:\WINDOWS\SYSTEM\rzspy.exe tagged as not-a-virus:AdWare.Win32.Raze.a. No Action Taken.
    File C:\WINDOWS\TEMP\cmdinst.exe tagged as not-a-virus:AdWare.Win32.MDH.e. No Action Taken.
    File C:\WINDOWS\TEMP\RHXrFten.exe infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\TEMP\dia71B1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia361.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia7173.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\cd_clint.dll tagged as not-a-virus:AdWare.Win32.Cydoor. No Action Taken.
    File C:\WINDOWS\TEMP\dia3203.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\diaA191.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia216.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia7072.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia91D0.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia52B0.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia11E1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia3071.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia9360.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia22D1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\Altnet\bdedownloader.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
    File C:\WINDOWS\TEMP\Altnet\bdefdi.dll tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
    File C:\WINDOWS\TEMP\dia21B3.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1385.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia2154.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dload.exe infected by "Trojan-Downloader.Win32.Small.on" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\TEMP\diaD1E2.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1045.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1261.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\diaB2B2.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia9383.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1376.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\diaB275.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia3300.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\cmd\asappsrv.dll tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
    File C:\WINDOWS\cmd\command.exe tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_50.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_80.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_88.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\Recycled\Dc4\koks2[1].wmf infected by "Trojan-Downloader.Win32.Agent.acd" Virus. Action Taken: File Deleted.
    File C:\Recycled\Dc4\koks[1].wmf infected by "Trojan-Downloader.Win32.Agent.acd" Virus. Action Taken: File Deleted.
    File C:\Ohjelmatiedostot\se\v11\se.DLL tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\Ohjelmatiedostot\se\v11\se.EXE tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\Ohjelmatiedostot\MyWay\myBar\1.bin\MYBAR.DLL tagged as not-a-virus:AdWare.Win32.MyWay.w. No Action Taken.
    File C:\Ohjelmatiedostot\winex\v9\winex.EXE tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\Omat tiedostot\Omat kuvatiedostot\backups\backup-20060226-105332-640.dll infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File Deleted.

    hjt :

    Logfile of HijackThis v1.99.1
    Scan saved at 20:03:01, on 26.2.2006
    Platform: Windows ME (Win9x 4.90.3000)
    MSIE: Internet Explorer v5.50 (5.50.4134.0100)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\WINOA386.MOD
    C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SM56HLPR.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
    C:\WINDOWS\CMD\COMMAND.EXE
    C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
    C:\OHJELMATIEDOSTOT\WINZIP\WZQKPICK.EXE
    C:\KASPERSKY\MWAVSCAN.COM
    C:\KASPERSKY\KAVSS.EXE
    C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
    C:\WINDOWS\SOL.EXE
    C:\OHJELMATIEDOSTOT\MOZILLA FIREFOX\FIREFOX.EXE
    C:\OMAT TIEDOSTOT\OMAT KUVATIEDOSTOT\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\OHJELM~1\SPYBOT~1\SDHELPER.DLL
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
    O3 - Toolbar: @msdxmLC.dll,-1@1035,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [OmgStartup] C:\Ohjelmatiedostot\Yhteiset tiedostot\Sony Shared\OpenMG\OmgStartup.exe
    O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\RunServices: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
    O4 - Startup: WinZip Quick Pick.lnk = C:\Ohjelmatiedostot\WinZip\WZQKPICK.EXE
    O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll

    fixwareout :


    Fixwareout ver 1.003
    Last edited 2/15/2006
    Post this report in the forums please

    Reg Entries that were deleted
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\repiwoh
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\repiwoh
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ypszr
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\daolnwodi
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\putesprpgd
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\lavinraCputeS


    Random Runs removed from HKLM
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    ...

    PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

    »»»»» Search by size and names...

    »»»»» Misc files

    Äänestä

  • ovy kirjoitti:

    juu eli tässä olisi sitten tulokset :
    escan File C:\WINDOWS\CMD\COMMAND.EXE tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
    File C:\WINDOWS\SYSTEM\SHELL386.EXE infected by "Backdoor.Win32.VB.aqj" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\desktop.html infected by "not-virus:Hoax.Win32.Aflac.a" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\NDNuninstall4_50.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_80.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_88.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\SYSTEM\windll32.exe infected by "Trojan-Proxy.Win32.Mitglieder.bi" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\SYSTEM\BDErastDX3.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3567. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac24.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac10.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\intxt.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.dll tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinf32.dll infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\SYSTEM\DateMakerIntl-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinf32.exe infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\SYSTEM\howiper.exe infected by "Trojan.Win32.Small.gq" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\SYSTEM\rzspy.exe tagged as not-a-virus:AdWare.Win32.Raze.a. No Action Taken.
    File C:\WINDOWS\SYSTEM\idownload.exe infected by "Trojan-Downloader.Win32.Small.buy" Virus. Action Taken: File Deleted.
    File C:\_RESTORE\TEMP\A0757731.CPY infected by "Trojan-Downloader.Win32.Small.ccn" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0758985.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.e. No Action Taken.
    File C:\_RESTORE\TEMP\A0758990.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0758995.CPY tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
    File C:\_RESTORE\TEMP\A0759005.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.e. No Action Taken.
    File C:\_RESTORE\TEMP\A0759010.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
    File C:\_RESTORE\TEMP\A0759015.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759020.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
    File C:\_RESTORE\TEMP\A0759026.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3563. No Action Taken.
    File C:\_RESTORE\TEMP\A0759027.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3566. No Action Taken.
    File C:\_RESTORE\TEMP\A0759028.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
    File C:\_RESTORE\TEMP\A0759029.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3022. No Action Taken.
    File C:\_RESTORE\TEMP\A0759030.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1100. No Action Taken.
    File C:\_RESTORE\TEMP\A0759031.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3022. No Action Taken.
    File C:\_RESTORE\TEMP\A0759032.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
    File C:\_RESTORE\TEMP\A0759033.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.35692. No Action Taken.
    File C:\_RESTORE\TEMP\A0759034.CPY infected by "Trojan.Win32.Krepper.y" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759044.CPY infected by "Trojan-Downloader.Win32.Axload.c" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759061.CPY infected by "Trojan-Downloader.Win32.Realtens.h" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759067.CPY tagged as not-a-virus:AdWare.Win32.DownloadWare. No Action Taken.
    File C:\_RESTORE\TEMP\A0759069.CPY tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\_RESTORE\TEMP\A0759070.CPY tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\_RESTORE\TEMP\A0759071.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759082.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759087.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759138.CPY infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759143.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759151.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759158.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759161.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759169.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759172.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759179.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759183.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759190.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759197.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759201.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759208.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759211.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759218.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759221.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759228.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759231.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759238.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759242.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759249.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759252.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759266.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759270.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759277.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759280.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759292.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759296.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759304.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759307.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759317.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759323.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759330.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759337.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759341.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759350.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759354.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759362.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759365.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759372.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759375.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759382.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759385.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759392.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759403.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759406.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759410.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759423.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759428.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759436.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759439.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759460.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759463.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759470.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759477.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759480.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759487.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759490.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759497.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759500.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759507.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759514.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759517.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759524.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759528.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759535.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759538.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759545.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759548.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759555.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759559.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759567.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759572.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759579.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759582.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759589.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759592.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759599.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759602.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759609.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759616.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759619.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759626.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759629.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759636.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759639.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759646.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759654.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759657.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759664.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759668.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759675.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759678.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759685.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759690.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759694.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759704.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759707.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759712.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759715.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759722.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759727.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759735.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759739.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759747.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759750.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759757.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759764.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759767.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759774.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759778.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759786.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759790.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759801.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759805.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759812.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759819.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759829.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759838.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759844.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759847.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759860.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759863.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759870.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759878.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759881.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759890.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759893.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759900.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759903.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759910.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759917.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759920.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759927.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759930.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759937.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759940.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759947.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759954.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759957.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759964.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759967.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759974.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759981.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759984.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759987.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759995.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759998.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760007.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760010.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760017.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760024.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760027.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760034.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760037.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760044.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760051.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760054.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760061.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760064.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760071.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760078.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760081.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760088.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760091.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760098.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760101.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760108.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760115.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760118.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760125.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760131.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760138.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760145.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760148.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760155.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760158.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760165.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760172.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760175.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760182.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760185.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760192.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760195.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760202.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760209.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760212.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760219.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760222.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760229.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760236.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760239.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760246.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760249.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760256.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760264.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760270.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760277.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760280.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760289.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760292.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760297.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0760300.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760307.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760310.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760317.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760320.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760327.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760334.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760337.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760344.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760347.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760354.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760357.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760364.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760371.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760374.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760381.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760384.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760391.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760398.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760404.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760411.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760414.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760421.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760424.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760431.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760438.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760441.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760448.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760451.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760458.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760465.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760468.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760475.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760478.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760485.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760492.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760495.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760502.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760505.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760512.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760515.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760522.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760529.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760532.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760542.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760545.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760552.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760559.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760562.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760571.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760574.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760581.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760588.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760591.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760598.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760601.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760608.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760615.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760618.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760625.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760628.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760635.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760638.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760645.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760652.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760655.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760662.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760665.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760672.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760682.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760685.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760692.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760695.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760702.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760705.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760712.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760719.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760722.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760729.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760732.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760739.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760746.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760749.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760756.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760759.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760766.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760773.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760776.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760783.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760786.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760793.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760800.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760803.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760810.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760817.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760824.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760827.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760834.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760841.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760844.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760851.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0760854.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760857.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760864.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760867.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760874.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760881.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760884.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760891.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760894.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760901.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760909.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760912.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760919.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760922.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760929.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760932.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760939.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760946.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760952.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760959.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760962.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760969.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760972.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760979.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760986.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760989.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760996.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760999.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761006.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761013.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761016.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761023.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761026.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761033.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761036.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761043.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761050.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761053.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761060.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761063.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761070.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761077.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761080.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761090.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761093.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761100.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761103.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761110.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761117.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761120.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761129.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761132.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761139.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761143.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761150.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761157.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761160.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761167.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761170.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761177.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761180.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761187.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761194.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761197.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761204.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761207.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761214.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761221.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761227.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761234.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761237.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761244.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761251.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761254.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761261.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761264.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761271.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761274.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761281.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761288.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761291.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761298.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761301.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761308.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761315.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761318.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761325.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761328.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761335.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761338.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761345.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761352.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761356.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761918.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761923.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761926.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761933.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0761936.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761939.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761946.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761949.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761959.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761992.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762002.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
    File C:\_RESTORE\TEMP\A0762005.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
    File C:\_RESTORE\TEMP\A0762010.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
    File C:\_RESTORE\TEMP\A0762012.CPY tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
    File C:\_RESTORE\TEMP\A0762013.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0762014.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0762015.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
    File C:\_RESTORE\TEMP\A0762022.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762025.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762032.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762035.CPY tagged as not-a-virus:AdWare.Win32.MyWay.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762038.CPY tagged as not-a-virus:AdWare.Win32.MyWay.f. No Action Taken.
    File C:\_RESTORE\TEMP\A0762041.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762048.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762051.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762058.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762061.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762068.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762071.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762078.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762081.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762085.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762092.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762095.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762102.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762105.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762112.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762119.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762122.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762129.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762132.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762139.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762142.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762149.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762156.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762159.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762170.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762176.CPY infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0762210.CPY infected by "Backdoor.Win32.VB.aqj" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762211.CPY infected by "Trojan-Proxy.Win32.Mitglieder.bi" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0762212.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762213.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762214.CPY infected by "Trojan.Win32.Small.gq" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0762215.CPY infected by "Trojan-Downloader.Win32.Small.buy" Virus. Action Taken: File to be deleted on reboot.
    File C:\WINDOWS\SYSTEM\BDErastDX3.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3567. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac24.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac10.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\intxt.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.dll tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\DateMakerIntl-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
    File C:\WINDOWS\SYSTEM\rzspy.exe tagged as not-a-virus:AdWare.Win32.Raze.a. No Action Taken.
    File C:\WINDOWS\TEMP\cmdinst.exe tagged as not-a-virus:AdWare.Win32.MDH.e. No Action Taken.
    File C:\WINDOWS\TEMP\RHXrFten.exe infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\TEMP\dia71B1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia361.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia7173.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\cd_clint.dll tagged as not-a-virus:AdWare.Win32.Cydoor. No Action Taken.
    File C:\WINDOWS\TEMP\dia3203.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\diaA191.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia216.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia7072.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia91D0.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia52B0.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia11E1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia3071.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia9360.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia22D1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\Altnet\bdedownloader.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
    File C:\WINDOWS\TEMP\Altnet\bdefdi.dll tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
    File C:\WINDOWS\TEMP\dia21B3.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1385.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia2154.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dload.exe infected by "Trojan-Downloader.Win32.Small.on" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\TEMP\diaD1E2.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1045.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1261.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\diaB2B2.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia9383.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1376.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\diaB275.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia3300.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\cmd\asappsrv.dll tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
    File C:\WINDOWS\cmd\command.exe tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_50.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_80.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_88.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\Recycled\Dc4\koks2[1].wmf infected by "Trojan-Downloader.Win32.Agent.acd" Virus. Action Taken: File Deleted.
    File C:\Recycled\Dc4\koks[1].wmf infected by "Trojan-Downloader.Win32.Agent.acd" Virus. Action Taken: File Deleted.
    File C:\Ohjelmatiedostot\se\v11\se.DLL tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\Ohjelmatiedostot\se\v11\se.EXE tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\Ohjelmatiedostot\MyWay\myBar\1.bin\MYBAR.DLL tagged as not-a-virus:AdWare.Win32.MyWay.w. No Action Taken.
    File C:\Ohjelmatiedostot\winex\v9\winex.EXE tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\Omat tiedostot\Omat kuvatiedostot\backups\backup-20060226-105332-640.dll infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File Deleted.

    hjt :

    Logfile of HijackThis v1.99.1
    Scan saved at 20:03:01, on 26.2.2006
    Platform: Windows ME (Win9x 4.90.3000)
    MSIE: Internet Explorer v5.50 (5.50.4134.0100)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\WINOA386.MOD
    C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SM56HLPR.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
    C:\WINDOWS\CMD\COMMAND.EXE
    C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
    C:\OHJELMATIEDOSTOT\WINZIP\WZQKPICK.EXE
    C:\KASPERSKY\MWAVSCAN.COM
    C:\KASPERSKY\KAVSS.EXE
    C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
    C:\WINDOWS\SOL.EXE
    C:\OHJELMATIEDOSTOT\MOZILLA FIREFOX\FIREFOX.EXE
    C:\OMAT TIEDOSTOT\OMAT KUVATIEDOSTOT\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\OHJELM~1\SPYBOT~1\SDHELPER.DLL
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
    O3 - Toolbar: @msdxmLC.dll,-1@1035,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [OmgStartup] C:\Ohjelmatiedostot\Yhteiset tiedostot\Sony Shared\OpenMG\OmgStartup.exe
    O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\RunServices: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
    O4 - Startup: WinZip Quick Pick.lnk = C:\Ohjelmatiedostot\WinZip\WZQKPICK.EXE
    O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll

    fixwareout :


    Fixwareout ver 1.003
    Last edited 2/15/2006
    Post this report in the forums please

    Reg Entries that were deleted
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\repiwoh
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\repiwoh
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ypszr
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\daolnwodi
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\putesprpgd
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\lavinraCputeS


    Random Runs removed from HKLM
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    ...

    PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

    »»»»» Search by size and names...

    »»»»» Misc files

    Poista ohjauspaneelista, jos on:

    RazeSpyware

    Laita piilotiedostot näkyviin, ohje ->
    http://keskustelu.afterdawn.com/thread_view.cfm/248944

    Tyhjennä tämä hakemisto:

    C:\WINDOWS\==>TEMP

    Äänestä

  • ovy kirjoitti:

    juu eli tässä olisi sitten tulokset :
    escan File C:\WINDOWS\CMD\COMMAND.EXE tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
    File C:\WINDOWS\SYSTEM\SHELL386.EXE infected by "Backdoor.Win32.VB.aqj" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\desktop.html infected by "not-virus:Hoax.Win32.Aflac.a" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\NDNuninstall4_50.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_80.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_88.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\SYSTEM\windll32.exe infected by "Trojan-Proxy.Win32.Mitglieder.bi" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\SYSTEM\BDErastDX3.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3567. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac24.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac10.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\intxt.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.dll tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinf32.dll infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\SYSTEM\DateMakerIntl-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinf32.exe infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File Renamed.
    File C:\WINDOWS\SYSTEM\howiper.exe infected by "Trojan.Win32.Small.gq" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\SYSTEM\rzspy.exe tagged as not-a-virus:AdWare.Win32.Raze.a. No Action Taken.
    File C:\WINDOWS\SYSTEM\idownload.exe infected by "Trojan-Downloader.Win32.Small.buy" Virus. Action Taken: File Deleted.
    File C:\_RESTORE\TEMP\A0757731.CPY infected by "Trojan-Downloader.Win32.Small.ccn" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0758985.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.e. No Action Taken.
    File C:\_RESTORE\TEMP\A0758990.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0758995.CPY tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
    File C:\_RESTORE\TEMP\A0759005.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.e. No Action Taken.
    File C:\_RESTORE\TEMP\A0759010.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
    File C:\_RESTORE\TEMP\A0759015.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759020.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
    File C:\_RESTORE\TEMP\A0759026.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3563. No Action Taken.
    File C:\_RESTORE\TEMP\A0759027.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3566. No Action Taken.
    File C:\_RESTORE\TEMP\A0759028.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
    File C:\_RESTORE\TEMP\A0759029.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3022. No Action Taken.
    File C:\_RESTORE\TEMP\A0759030.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1100. No Action Taken.
    File C:\_RESTORE\TEMP\A0759031.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3022. No Action Taken.
    File C:\_RESTORE\TEMP\A0759032.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
    File C:\_RESTORE\TEMP\A0759033.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.35692. No Action Taken.
    File C:\_RESTORE\TEMP\A0759034.CPY infected by "Trojan.Win32.Krepper.y" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759044.CPY infected by "Trojan-Downloader.Win32.Axload.c" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759061.CPY infected by "Trojan-Downloader.Win32.Realtens.h" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759067.CPY tagged as not-a-virus:AdWare.Win32.DownloadWare. No Action Taken.
    File C:\_RESTORE\TEMP\A0759069.CPY tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\_RESTORE\TEMP\A0759070.CPY tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\_RESTORE\TEMP\A0759071.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759082.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759087.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0759138.CPY infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0759143.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759151.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759158.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759161.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759169.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759172.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759179.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759183.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759190.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759197.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759201.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759208.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759211.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759218.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759221.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759228.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759231.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759238.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759242.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759249.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759252.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759266.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759270.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759277.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759280.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759292.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759296.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759304.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759307.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759317.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759323.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759330.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759337.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759341.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759350.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759354.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759362.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759365.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759372.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759375.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759382.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759385.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759392.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759403.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759406.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759410.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759423.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759428.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759436.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759439.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759460.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759463.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759470.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759477.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759480.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759487.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759490.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759497.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759500.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759507.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759514.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759517.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759524.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759528.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759535.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759538.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759545.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759548.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759555.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759559.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759567.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759572.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759579.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759582.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759589.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759592.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759599.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759602.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759609.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759616.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759619.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759626.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759629.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759636.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759639.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759646.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759654.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759657.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759664.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759668.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759675.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759678.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759685.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759690.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759694.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759704.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759707.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759712.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759715.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759722.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759727.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759735.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759739.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759747.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759750.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759757.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759764.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759767.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759774.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759778.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759786.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759790.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759801.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759805.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759812.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759819.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759829.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759838.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759844.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759847.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759860.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759863.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759870.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759878.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759881.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759890.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759893.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759900.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759903.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759910.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759917.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759920.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759927.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759930.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759937.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759940.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759947.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759954.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759957.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759964.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759967.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759974.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759981.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759984.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759987.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0759995.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0759998.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760007.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760010.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760017.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760024.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760027.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760034.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760037.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760044.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760051.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760054.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760061.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760064.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760071.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760078.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760081.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760088.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760091.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760098.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760101.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760108.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760115.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760118.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760125.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760131.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760138.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760145.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760148.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760155.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760158.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760165.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760172.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760175.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760182.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760185.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760192.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760195.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760202.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760209.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760212.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760219.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760222.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760229.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760236.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760239.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760246.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760249.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760256.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760264.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760270.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760277.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760280.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760289.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760292.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760297.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0760300.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760307.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760310.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760317.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760320.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760327.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760334.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760337.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760344.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760347.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760354.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760357.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760364.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760371.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760374.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760381.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760384.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760391.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760398.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760404.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760411.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760414.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760421.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760424.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760431.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760438.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760441.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760448.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760451.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760458.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760465.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760468.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760475.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760478.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760485.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760492.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760495.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760502.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760505.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760512.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760515.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760522.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760529.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760532.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760542.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760545.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760552.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760559.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760562.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760571.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760574.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760581.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760588.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760591.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760598.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760601.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760608.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760615.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760618.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760625.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760628.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760635.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760638.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760645.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760652.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760655.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760662.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760665.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760672.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760682.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760685.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760692.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760695.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760702.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760705.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760712.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760719.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760722.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760729.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760732.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760739.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760746.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760749.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760756.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760759.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760766.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760773.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760776.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760783.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760786.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760793.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760800.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760803.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760810.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760817.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760824.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760827.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760834.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760841.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760844.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760851.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0760854.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760857.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760864.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760867.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760874.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760881.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760884.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760891.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760894.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760901.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760909.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760912.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760919.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760922.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760929.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760932.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760939.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760946.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760952.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760959.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760962.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760969.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760972.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760979.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760986.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760989.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760996.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0760999.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761006.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761013.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761016.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761023.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761026.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761033.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761036.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761043.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761050.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761053.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761060.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761063.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761070.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761077.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761080.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761090.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761093.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761100.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761103.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761110.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761117.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761120.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761129.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761132.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761139.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761143.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761150.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761157.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761160.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761167.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761170.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761177.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761180.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761187.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761194.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761197.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761204.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761207.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761214.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761221.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761227.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761234.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761237.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761244.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761251.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761254.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761261.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761264.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761271.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761274.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761281.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761288.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761291.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761298.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761301.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761308.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761315.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761318.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761325.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761328.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761335.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761338.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761345.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761352.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761356.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761918.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761923.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761926.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761933.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0761936.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761939.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761946.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761949.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761959.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0761992.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762002.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
    File C:\_RESTORE\TEMP\A0762005.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
    File C:\_RESTORE\TEMP\A0762010.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
    File C:\_RESTORE\TEMP\A0762012.CPY tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
    File C:\_RESTORE\TEMP\A0762013.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0762014.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
    File C:\_RESTORE\TEMP\A0762015.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
    File C:\_RESTORE\TEMP\A0762022.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762025.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762032.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762035.CPY tagged as not-a-virus:AdWare.Win32.MyWay.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762038.CPY tagged as not-a-virus:AdWare.Win32.MyWay.f. No Action Taken.
    File C:\_RESTORE\TEMP\A0762041.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762048.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762051.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762058.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762061.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762068.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762071.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762078.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762081.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762085.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762092.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762095.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762102.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762105.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762112.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762119.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762122.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762129.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762132.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762139.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762142.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762149.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762156.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762159.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762170.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\_RESTORE\TEMP\A0762176.CPY infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0762210.CPY infected by "Backdoor.Win32.VB.aqj" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762211.CPY infected by "Trojan-Proxy.Win32.Mitglieder.bi" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0762212.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762213.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
    File C:\_RESTORE\TEMP\A0762214.CPY infected by "Trojan.Win32.Small.gq" Virus. Action Taken: File to be deleted on reboot.
    File C:\_RESTORE\TEMP\A0762215.CPY infected by "Trojan-Downloader.Win32.Small.buy" Virus. Action Taken: File to be deleted on reboot.
    File C:\WINDOWS\SYSTEM\BDErastDX3.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3567. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac24.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\BDESac10.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
    File C:\WINDOWS\SYSTEM\intxt.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.dll tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\mswinb32.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
    File C:\WINDOWS\SYSTEM\DateMakerIntl-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
    File C:\WINDOWS\SYSTEM\rzspy.exe tagged as not-a-virus:AdWare.Win32.Raze.a. No Action Taken.
    File C:\WINDOWS\TEMP\cmdinst.exe tagged as not-a-virus:AdWare.Win32.MDH.e. No Action Taken.
    File C:\WINDOWS\TEMP\RHXrFten.exe infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\TEMP\dia71B1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia361.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia7173.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\cd_clint.dll tagged as not-a-virus:AdWare.Win32.Cydoor. No Action Taken.
    File C:\WINDOWS\TEMP\dia3203.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\diaA191.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia216.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia7072.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia91D0.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia52B0.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia11E1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia3071.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia9360.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia22D1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\Altnet\bdedownloader.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
    File C:\WINDOWS\TEMP\Altnet\bdefdi.dll tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
    File C:\WINDOWS\TEMP\dia21B3.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1385.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia2154.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dload.exe infected by "Trojan-Downloader.Win32.Small.on" Virus. Action Taken: File Deleted.
    File C:\WINDOWS\TEMP\diaD1E2.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1045.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1261.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\diaB2B2.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia9383.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia1376.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\diaB275.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\TEMP\dia3300.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
    File C:\WINDOWS\cmd\asappsrv.dll tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
    File C:\WINDOWS\cmd\command.exe tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_50.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_80.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\WINDOWS\NDNuninstall4_88.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
    File C:\Recycled\Dc4\koks2[1].wmf infected by "Trojan-Downloader.Win32.Agent.acd" Virus. Action Taken: File Deleted.
    File C:\Recycled\Dc4\koks[1].wmf infected by "Trojan-Downloader.Win32.Agent.acd" Virus. Action Taken: File Deleted.
    File C:\Ohjelmatiedostot\se\v11\se.DLL tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\Ohjelmatiedostot\se\v11\se.EXE tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\Ohjelmatiedostot\MyWay\myBar\1.bin\MYBAR.DLL tagged as not-a-virus:AdWare.Win32.MyWay.w. No Action Taken.
    File C:\Ohjelmatiedostot\winex\v9\winex.EXE tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
    File C:\Omat tiedostot\Omat kuvatiedostot\backups\backup-20060226-105332-640.dll infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File Deleted.

    hjt :

    Logfile of HijackThis v1.99.1
    Scan saved at 20:03:01, on 26.2.2006
    Platform: Windows ME (Win9x 4.90.3000)
    MSIE: Internet Explorer v5.50 (5.50.4134.0100)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\WINOA386.MOD
    C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SM56HLPR.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
    C:\WINDOWS\CMD\COMMAND.EXE
    C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
    C:\OHJELMATIEDOSTOT\WINZIP\WZQKPICK.EXE
    C:\KASPERSKY\MWAVSCAN.COM
    C:\KASPERSKY\KAVSS.EXE
    C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
    C:\WINDOWS\SOL.EXE
    C:\OHJELMATIEDOSTOT\MOZILLA FIREFOX\FIREFOX.EXE
    C:\OMAT TIEDOSTOT\OMAT KUVATIEDOSTOT\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\OHJELM~1\SPYBOT~1\SDHELPER.DLL
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
    O3 - Toolbar: @msdxmLC.dll,-1@1035,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [OmgStartup] C:\Ohjelmatiedostot\Yhteiset tiedostot\Sony Shared\OpenMG\OmgStartup.exe
    O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\RunServices: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
    O4 - Startup: WinZip Quick Pick.lnk = C:\Ohjelmatiedostot\WinZip\WZQKPICK.EXE
    O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll

    fixwareout :


    Fixwareout ver 1.003
    Last edited 2/15/2006
    Post this report in the forums please

    Reg Entries that were deleted
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\repiwoh
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\repiwoh
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ypszr
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\daolnwodi
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\putesprpgd
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\lavinraCputeS


    Random Runs removed from HKLM
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    ...

    PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

    »»»»» Search by size and names...

    »»»»» Misc files

    Juu. Nyt näyttää kone taas pelittävän,kiitos paljon avusta.

    Äänestä

  • ovy kirjoitti:

    Juu. Nyt näyttää kone taas pelittävän,kiitos paljon avusta.

    Mukava kuulla ja ole hyvä :)

    Äänestä

Kommentoi aloitusta


ovy kirjoitti:

Nyt on käynyt niin,että työpöydän taustakuva on muuttunut kokonaan punaiseksi ja se hälyttää spywaresta kokoajan. Ajattelen koneessa olevan jotain häikkää ja pahasti mutta itse en osaa korjata sitä,joten pyydän teiltä apua.

hijackthis loki :
Logfile of HijackThis v1.99.1
Scan saved at 19:21:03, on 25.2.2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ALTNET\POINTS MANAGER\POINTS MANAGER.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\LOADQM.EXE
C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
C:\WINDOWS\CMD\COMMAND.EXE
C:\WINDOWS\SYSTEM\WINDLL32.EXE
C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\OHJELMATIEDOSTOT\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SHELL386.EXE
C:\PROGRAM FILES\ALTNET\DOWNLOAD MANAGER\ASM.EXE
C:\OHJELMATIEDOSTOT\TPT REGISTRY_CLEANER (TRIAL)\REGCLEAN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\MSWINB32.EXE
C:\OMAT TIEDOSTOT\OMAT KUVATIEDOSTOT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\OHJELMATIEDOSTOT\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (file missing)
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\OHJELM~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
O2 - BHO: winapi32.MyBHO - {06CC1B18-42FA-41B8-91A9-D3E3A848C7A8} - C:\WINDOWS\SYSTEM\WINAPI32.DLL
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1035,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [WinCast] D:\SETUP.EXE -leng
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [OmgStartup] C:\Ohjelmatiedostot\Yhteiset tiedostot\Sony Shared\OpenMG\OmgStartup.exe
O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P NETWORKING\P2P NETWORKING.EXE /AUTOSTART
O4 - HKLM\..\Run: [Command] C:\WINDOWS\cmd\command.exe
O4 - HKLM\..\Run: [Universal Porn Dialer] C:\WINDOWS\SYSTEM\xxxdialer.exe
O4 - HKLM\..\Run: [Win32.Trojan.Downloader] C:\WINDOWS\SYSTEM\netstat2.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [windll32.exe] C:\WINDOWS\SYSTEM\windll32.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: WinZip Quick Pick.lnk = C:\Ohjelmatiedostot\WinZip\WZQKPICK.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 85.255.113.116,85.255.112.80

Anonyymi
5000

Ilmoita asiaton sisältö

  • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

  • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

  • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

  • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

  • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

  • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

Jaa keskustelu