Nyt on käynyt niin,että työpöydän taustakuva on muuttunut kokonaan punaiseksi ja se hälyttää spywaresta kokoajan. Ajattelen koneessa olevan jotain häikkää ja pahasti mutta itse en osaa korjata sitä,joten pyydän teiltä apua.
hijackthis loki :
Logfile of HijackThis v1.99.1
Scan saved at 19:21:03, on 25.2.2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ALTNET\POINTS MANAGER\POINTS MANAGER.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\LOADQM.EXE
C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
C:\WINDOWS\CMD\COMMAND.EXE
C:\WINDOWS\SYSTEM\WINDLL32.EXE
C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\OHJELMATIEDOSTOT\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SHELL386.EXE
C:\PROGRAM FILES\ALTNET\DOWNLOAD MANAGER\ASM.EXE
C:\OHJELMATIEDOSTOT\TPT REGISTRY_CLEANER (TRIAL)\REGCLEAN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\MSWINB32.EXE
C:\OMAT TIEDOSTOT\OMAT KUVATIEDOSTOT\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\OHJELMATIEDOSTOT\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (file missing)
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\OHJELM~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
O2 - BHO: winapi32.MyBHO - {06CC1B18-42FA-41B8-91A9-D3E3A848C7A8} - C:\WINDOWS\SYSTEM\WINAPI32.DLL
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1035,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [WinCast] D:\SETUP.EXE -leng
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [OmgStartup] C:\Ohjelmatiedostot\Yhteiset tiedostot\Sony Shared\OpenMG\OmgStartup.exe
O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P NETWORKING\P2P NETWORKING.EXE /AUTOSTART
O4 - HKLM\..\Run: [Command] C:\WINDOWS\cmd\command.exe
O4 - HKLM\..\Run: [Universal Porn Dialer] C:\WINDOWS\SYSTEM\xxxdialer.exe
O4 - HKLM\..\Run: [Win32.Trojan.Downloader] C:\WINDOWS\SYSTEM\netstat2.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [windll32.exe] C:\WINDOWS\SYSTEM\windll32.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: WinZip Quick Pick.lnk = C:\Ohjelmatiedostot\WinZip\WZQKPICK.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 85.255.113.116,85.255.112.80
hijackthis loki :
Logfile of HijackThis v1.99.1
Scan saved at 19:21:03, on 25.2.2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ALTNET\POINTS MANAGER\POINTS MANAGER.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\LOADQM.EXE
C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
C:\WINDOWS\CMD\COMMAND.EXE
C:\WINDOWS\SYSTEM\WINDLL32.EXE
C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\OHJELMATIEDOSTOT\WINZIP\WZQKPICK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SHELL386.EXE
C:\PROGRAM FILES\ALTNET\DOWNLOAD MANAGER\ASM.EXE
C:\OHJELMATIEDOSTOT\TPT REGISTRY_CLEANER (TRIAL)\REGCLEAN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\MSWINB32.EXE
C:\OMAT TIEDOSTOT\OMAT KUVATIEDOSTOT\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\OHJELMATIEDOSTOT\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (file missing)
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\OHJELM~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
O2 - BHO: winapi32.MyBHO - {06CC1B18-42FA-41B8-91A9-D3E3A848C7A8} - C:\WINDOWS\SYSTEM\WINAPI32.DLL
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1035,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [WinCast] D:\SETUP.EXE -leng
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [OmgStartup] C:\Ohjelmatiedostot\Yhteiset tiedostot\Sony Shared\OpenMG\OmgStartup.exe
O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P NETWORKING\P2P NETWORKING.EXE /AUTOSTART
O4 - HKLM\..\Run: [Command] C:\WINDOWS\cmd\command.exe
O4 - HKLM\..\Run: [Universal Porn Dialer] C:\WINDOWS\SYSTEM\xxxdialer.exe
O4 - HKLM\..\Run: [Win32.Trojan.Downloader] C:\WINDOWS\SYSTEM\netstat2.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [windll32.exe] C:\WINDOWS\SYSTEM\windll32.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: WinZip Quick Pick.lnk = C:\Ohjelmatiedostot\WinZip\WZQKPICK.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 85.255.113.116,85.255.112.80
Vastaukset 5
Vanhimmat
Siellä on wareout-rootkit
Tee näin:
Poista ohjauspaneelista:
Altnet points manager
MySearchBar tms.
P2P Networking
Hae fixwareout -> http://downloads.subratam.org/Fixwareout.exe
Tallenna johonkin hakemistoon ja käynnistä se. Seuraa ohjeita, käynnistä kone uudestaan kun fixi pyytää sitä. Fixi avaa HjT:n.
Fixaa silloin nämä:
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O2 - BHO: winapi32.MyBHO - {06CC1B18-42FA-41B8-91A9-D3E3A848C7A8} - C:\WINDOWS\SYSTEM\WINAPI32.DLL
O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\OHJELMATIEDOSTOT\MYWAY\MYBAR\1.BIN\MYBAR.DLL
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P NETWORKING\P2P NETWORKING.EXE /AUTOSTART
O4 - HKLM\..\Run: [Command] C:\WINDOWS\cmd\command.exe
O4 - HKLM\..\Run: [Universal Porn Dialer] C:\WINDOWS\SYSTEM\xxxdialer.exe
O4 - HKLM\..\Run: [Win32.Trojan.Downloader] C:\WINDOWS\SYSTEM\netstat2.exe
O4 - HKCU\..\Run: [windll32.exe] C:\WINDOWS\SYSTEM\windll32.exe
9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 85.255.113.116,85.255.112.80
Poista, jos löytyy:
C:\OHJELMATIEDOSTOT\==>MYWAYaltnetP2P NETWORKINGcommand.exexxxdialer.exenetstat2.exe windll32.exerelated.htm http://koti.mbnet.fi/pattaya1/escanmwav.htm .
Asenna, päivitä, skannaa sivulla olevien ohjeiden mukaan. Lähetä sitten "örkkitulokset" tänne (ohje tuolla sivulla, alin kuva ja sen yläpuolella oleva teksti).
Lähetä myös uusi HjT-loki ja C:\fixwareout\report.txt-tiedoston sisältö tänne.
juu eli tässä olisi sitten tulokset :
escan File C:\WINDOWS\CMD\COMMAND.EXE tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
File C:\WINDOWS\SYSTEM\SHELL386.EXE infected by "Backdoor.Win32.VB.aqj" Virus. Action Taken: File Renamed.
File C:\WINDOWS\desktop.html infected by "not-virus:Hoax.Win32.Aflac.a" Virus. Action Taken: File Renamed.
File C:\WINDOWS\NDNuninstall4_50.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
File C:\WINDOWS\NDNuninstall4_80.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
File C:\WINDOWS\NDNuninstall4_88.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
File C:\WINDOWS\SYSTEM\windll32.exe infected by "Trojan-Proxy.Win32.Mitglieder.bi" Virus. Action Taken: File Deleted.
File C:\WINDOWS\SYSTEM\BDErastDX3.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3567. No Action Taken.
File C:\WINDOWS\SYSTEM\BDESac24.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
File C:\WINDOWS\SYSTEM\BDESac10.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
File C:\WINDOWS\SYSTEM\intxt.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\WINDOWS\SYSTEM\mswinb32.dll tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\WINDOWS\SYSTEM\mswinb32.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\WINDOWS\SYSTEM\mswinf32.dll infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File Renamed.
File C:\WINDOWS\SYSTEM\DateMakerIntl-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
File C:\WINDOWS\SYSTEM\mswinf32.exe infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File Renamed.
File C:\WINDOWS\SYSTEM\howiper.exe infected by "Trojan.Win32.Small.gq" Virus. Action Taken: File Deleted.
File C:\WINDOWS\SYSTEM\rzspy.exe tagged as not-a-virus:AdWare.Win32.Raze.a. No Action Taken.
File C:\WINDOWS\SYSTEM\idownload.exe infected by "Trojan-Downloader.Win32.Small.buy" Virus. Action Taken: File Deleted.
File C:\_RESTORE\TEMP\A0757731.CPY infected by "Trojan-Downloader.Win32.Small.ccn" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0758985.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.e. No Action Taken.
File C:\_RESTORE\TEMP\A0758990.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
File C:\_RESTORE\TEMP\A0758995.CPY tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
File C:\_RESTORE\TEMP\A0759005.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.e. No Action Taken.
File C:\_RESTORE\TEMP\A0759010.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
File C:\_RESTORE\TEMP\A0759015.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
File C:\_RESTORE\TEMP\A0759020.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
File C:\_RESTORE\TEMP\A0759026.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3563. No Action Taken.
File C:\_RESTORE\TEMP\A0759027.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3566. No Action Taken.
File C:\_RESTORE\TEMP\A0759028.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
File C:\_RESTORE\TEMP\A0759029.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3022. No Action Taken.
File C:\_RESTORE\TEMP\A0759030.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1100. No Action Taken.
File C:\_RESTORE\TEMP\A0759031.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3022. No Action Taken.
File C:\_RESTORE\TEMP\A0759032.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
File C:\_RESTORE\TEMP\A0759033.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.35692. No Action Taken.
File C:\_RESTORE\TEMP\A0759034.CPY infected by "Trojan.Win32.Krepper.y" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0759044.CPY infected by "Trojan-Downloader.Win32.Axload.c" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0759061.CPY infected by "Trojan-Downloader.Win32.Realtens.h" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0759067.CPY tagged as not-a-virus:AdWare.Win32.DownloadWare. No Action Taken.
File C:\_RESTORE\TEMP\A0759069.CPY tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
File C:\_RESTORE\TEMP\A0759070.CPY tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
File C:\_RESTORE\TEMP\A0759071.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
File C:\_RESTORE\TEMP\A0759082.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
File C:\_RESTORE\TEMP\A0759087.CPY tagged as not-a-virus:AdWare.Win32.SmartPops.a. No Action Taken.
File C:\_RESTORE\TEMP\A0759138.CPY infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0759143.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759151.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759158.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759161.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759169.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759172.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759179.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759183.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759190.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759197.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759201.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759208.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759211.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759218.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759221.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759228.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759231.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759238.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759242.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759249.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759252.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759266.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759270.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759277.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759280.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759292.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759296.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759304.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759307.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759317.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759323.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759330.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759337.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759341.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759350.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759354.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759362.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759365.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759372.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759375.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759382.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759385.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759392.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759403.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0759406.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759410.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759423.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759428.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759436.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759439.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759460.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759463.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759470.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759477.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759480.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759487.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759490.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759497.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759500.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759507.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759514.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759517.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759524.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759528.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759535.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759538.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759545.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759548.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759555.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0759559.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759567.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759572.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759579.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759582.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759589.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759592.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759599.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759602.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759609.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759616.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759619.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759626.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759629.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759636.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759639.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759646.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759654.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759657.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759664.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759668.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759675.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759678.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759685.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0759690.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759694.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759704.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759707.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759712.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0759715.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759722.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759727.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759735.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759739.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759747.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759750.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759757.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759764.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759767.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759774.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759778.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759786.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759790.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759801.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759805.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759812.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759819.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759829.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759838.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759844.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759847.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0759860.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759863.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759870.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759878.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759881.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759890.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759893.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759900.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759903.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759910.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759917.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759920.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759927.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759930.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759937.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759940.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759947.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759954.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759957.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759964.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759967.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759974.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759981.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759984.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759987.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0759995.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0759998.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760007.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760010.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760017.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760024.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760027.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760034.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760037.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760044.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760051.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760054.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760061.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760064.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760071.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760078.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760081.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760088.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760091.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760098.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760101.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760108.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760115.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760118.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760125.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760131.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760138.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760145.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760148.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760155.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760158.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760165.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760172.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760175.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760182.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760185.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760192.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760195.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760202.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760209.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760212.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760219.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760222.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760229.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760236.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760239.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760246.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760249.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760256.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760264.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760270.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760277.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760280.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760289.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760292.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760297.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0760300.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760307.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760310.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760317.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760320.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760327.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760334.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760337.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760344.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760347.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760354.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760357.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760364.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760371.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760374.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760381.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760384.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760391.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760398.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760404.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760411.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760414.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760421.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760424.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760431.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760438.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760441.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760448.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760451.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760458.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760465.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760468.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760475.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760478.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760485.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760492.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760495.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760502.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760505.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760512.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760515.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760522.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760529.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760532.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760542.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760545.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760552.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760559.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760562.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760571.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760574.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760581.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760588.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760591.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760598.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760601.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760608.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760615.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760618.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760625.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760628.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760635.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760638.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760645.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760652.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760655.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760662.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760665.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760672.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760682.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760685.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760692.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760695.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760702.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760705.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760712.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760719.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760722.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760729.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760732.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760739.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760746.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760749.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760756.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760759.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760766.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760773.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760776.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760783.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760786.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760793.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760800.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760803.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760810.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760817.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760824.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760827.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760834.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760841.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760844.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760851.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0760854.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760857.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760864.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760867.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760874.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760881.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760884.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760891.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760894.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760901.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760909.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760912.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760919.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760922.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760929.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760932.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760939.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760946.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760952.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760959.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760962.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760969.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760972.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760979.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760986.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760989.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760996.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0760999.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761006.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761013.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761016.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761023.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761026.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761033.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761036.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761043.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761050.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761053.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761060.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761063.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761070.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761077.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761080.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761090.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761093.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761100.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761103.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761110.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761117.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761120.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761129.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761132.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761139.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761143.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761150.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761157.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761160.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761167.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761170.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761177.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761180.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761187.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761194.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761197.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761204.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761207.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761214.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761221.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761227.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761234.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761237.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761244.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761251.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761254.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761261.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761264.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761271.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761274.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761281.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761288.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761291.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761298.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761301.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761308.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761315.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761318.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761325.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761328.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761335.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761338.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761345.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761352.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761356.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761918.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761923.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761926.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761933.CPY infected by "not-virus:Hoax.Win32.Renos.bm" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0761936.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761939.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761946.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761949.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761959.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0761992.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762002.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.1007. No Action Taken.
File C:\_RESTORE\TEMP\A0762005.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
File C:\_RESTORE\TEMP\A0762010.CPY tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
File C:\_RESTORE\TEMP\A0762012.CPY tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
File C:\_RESTORE\TEMP\A0762013.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
File C:\_RESTORE\TEMP\A0762014.CPY tagged as not-a-virus:AdWare.Win32.Altnet.a. No Action Taken.
File C:\_RESTORE\TEMP\A0762015.CPY tagged as not-a-virus:AdWare.Win32.Altnet.i. No Action Taken.
File C:\_RESTORE\TEMP\A0762022.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762025.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762032.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762035.CPY tagged as not-a-virus:AdWare.Win32.MyWay.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762038.CPY tagged as not-a-virus:AdWare.Win32.MyWay.f. No Action Taken.
File C:\_RESTORE\TEMP\A0762041.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762048.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762051.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762058.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762061.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762068.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762071.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762078.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762081.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0762085.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762092.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762095.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762102.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762105.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762112.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762119.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762122.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762129.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762132.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762139.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762142.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762149.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762156.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762159.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762170.CPY tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\_RESTORE\TEMP\A0762176.CPY infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0762210.CPY infected by "Backdoor.Win32.VB.aqj" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0762211.CPY infected by "Trojan-Proxy.Win32.Mitglieder.bi" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0762212.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0762213.CPY infected by "not-virus:Hoax.Win32.VB.j" Virus. Action Taken: File to be renamed on reboot.
File C:\_RESTORE\TEMP\A0762214.CPY infected by "Trojan.Win32.Small.gq" Virus. Action Taken: File to be deleted on reboot.
File C:\_RESTORE\TEMP\A0762215.CPY infected by "Trojan-Downloader.Win32.Small.buy" Virus. Action Taken: File to be deleted on reboot.
File C:\WINDOWS\SYSTEM\BDErastDX3.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3567. No Action Taken.
File C:\WINDOWS\SYSTEM\BDESac24.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
File C:\WINDOWS\SYSTEM\BDESac10.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3120. No Action Taken.
File C:\WINDOWS\SYSTEM\intxt.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\WINDOWS\SYSTEM\mswinb32.dll tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\WINDOWS\SYSTEM\mswinb32.exe tagged as not-a-virus:AdWare.Win32.CashDeluxe.b. No Action Taken.
File C:\WINDOWS\SYSTEM\DateMakerIntl-uninstall.exe tagged as not-a-virus:Dialer.Win32.gen. No Action Taken.
File C:\WINDOWS\SYSTEM\rzspy.exe tagged as not-a-virus:AdWare.Win32.Raze.a. No Action Taken.
File C:\WINDOWS\TEMP\cmdinst.exe tagged as not-a-virus:AdWare.Win32.MDH.e. No Action Taken.
File C:\WINDOWS\TEMP\RHXrFten.exe infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File Deleted.
File C:\WINDOWS\TEMP\dia71B1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia361.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia7173.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\cd_clint.dll tagged as not-a-virus:AdWare.Win32.Cydoor. No Action Taken.
File C:\WINDOWS\TEMP\dia3203.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\diaA191.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia216.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia7072.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia91D0.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia52B0.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia11E1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia3071.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia9360.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia22D1.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\Altnet\bdedownloader.dll tagged as not-a-virus:AdWare.Win32.BrilliantDigital.3039. No Action Taken.
File C:\WINDOWS\TEMP\Altnet\bdefdi.dll tagged as not-a-virus:AdWare.Win32.Altnet.k. No Action Taken.
File C:\WINDOWS\TEMP\dia21B3.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia1385.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia2154.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dload.exe infected by "Trojan-Downloader.Win32.Small.on" Virus. Action Taken: File Deleted.
File C:\WINDOWS\TEMP\diaD1E2.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia1045.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia1261.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\diaB2B2.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia9383.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia1376.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\diaB275.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\TEMP\dia3300.exe tagged as not-a-virus:Porn-Dialer.Win32.PluginAccess. No Action Taken.
File C:\WINDOWS\cmd\asappsrv.dll tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
File C:\WINDOWS\cmd\command.exe tagged as not-a-virus:AdWare.Win32.CommAd.a. No Action Taken.
File C:\WINDOWS\NDNuninstall4_50.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
File C:\WINDOWS\NDNuninstall4_80.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
File C:\WINDOWS\NDNuninstall4_88.exe tagged as not-a-virus:AdWare.Win32.NewDotNet. No Action Taken.
File C:\Recycled\Dc4\koks2[1].wmf infected by "Trojan-Downloader.Win32.Agent.acd" Virus. Action Taken: File Deleted.
File C:\Recycled\Dc4\koks[1].wmf infected by "Trojan-Downloader.Win32.Agent.acd" Virus. Action Taken: File Deleted.
File C:\Ohjelmatiedostot\se\v11\se.DLL tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
File C:\Ohjelmatiedostot\se\v11\se.EXE tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
File C:\Ohjelmatiedostot\MyWay\myBar\1.bin\MYBAR.DLL tagged as not-a-virus:AdWare.Win32.MyWay.w. No Action Taken.
File C:\Ohjelmatiedostot\winex\v9\winex.EXE tagged as not-a-virus:AdWare.Win32.WindowEnhancer. No Action Taken.
File C:\Omat tiedostot\Omat kuvatiedostot\backups\backup-20060226-105332-640.dll infected by "Trojan-Downloader.Win32.VB.ur" Virus. Action Taken: File Deleted.
hjt :
Logfile of HijackThis v1.99.1
Scan saved at 20:03:01, on 26.2.2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\WINOA386.MOD
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SM56HLPR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\LOADQM.EXE
C:\OHJELMATIEDOSTOT\MSN APPS\UPDATER\01.03.0000.1005\FI\MSNAPPAU.EXE
C:\WINDOWS\CMD\COMMAND.EXE
C:\OHJELMATIEDOSTOT\MSN MESSENGER\MSNMSGR.EXE
C:\OHJELMATIEDOSTOT\WINZIP\WZQKPICK.EXE
C:\KASPERSKY\MWAVSCAN.COM
C:\KASPERSKY\KAVSS.EXE
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
C:\WINDOWS\SOL.EXE
C:\OHJELMATIEDOSTOT\MOZILLA FIREFOX\FIREFOX.EXE
C:\OMAT TIEDOSTOT\OMAT KUVATIEDOSTOT\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\OHJELM~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\OHJELMATIEDOSTOT\MSN APPS\ST\01.03.0000.1005\EN-XU\STMAIN.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1035,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\OHJELMATIEDOSTOT\MSN APPS\MSN TOOLBAR\01.02.5000.1021\FI\MSNTB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [OmgStartup] C:\Ohjelmatiedostot\Yhteiset tiedostot\Sony Shared\OpenMG\OmgStartup.exe
O4 - HKLM\..\Run: [msnappau] "C:\Ohjelmatiedostot\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\RunServices: [MsnMsgr] "C:\Ohjelmatiedostot\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: WinZip Quick Pick.lnk = C:\Ohjelmatiedostot\WinZip\WZQKPICK.EXE
O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll
fixwareout :
Fixwareout ver 1.003
Last edited 2/15/2006
Post this report in the forums please
Reg Entries that were deleted
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\repiwoh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\repiwoh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\ypszr
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\daolnwodi
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\putesprpgd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\lavinraCputeS
Random Runs removed from HKLM
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
...
PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
»»»»» Search by size and names...
»»»»» Misc files
Poista ohjauspaneelista, jos on:
RazeSpyware
Laita piilotiedostot näkyviin, ohje ->
http://keskustelu.afterdawn.com/thread_view.cfm/248944
Tyhjennä tämä hakemisto:
C:\WINDOWS\==>TEMP
Juu. Nyt näyttää kone taas pelittävän,kiitos paljon avusta.
Mukava kuulla ja ole hyvä :)