Eli homman nimi on tämä...
Mulla on nyt koneessa sellaset virukset kun:
PestTrap
ja
Zlob.HomepageMonitor (tai SpyBot ne näytti noin...)
Oon yrittänyt poistaa niitä SpyBot:lla ja Ad-aware ohjelmilla, mutta ei lähe menee ni ei lähe menee...
Nyt olis hyvät neuvot kalliit...
Kiitos
Mulla on nyt koneessa sellaset virukset kun:
PestTrap
ja
Zlob.HomepageMonitor (tai SpyBot ne näytti noin...)
Oon yrittänyt poistaa niitä SpyBot:lla ja Ad-aware ohjelmilla, mutta ei lähe menee ni ei lähe menee...
Nyt olis hyvät neuvot kalliit...
Kiitos
Vastaukset 41
Vanhimmat
No nyt ku skannasin SpyBotilla, ni oli mukaan tullu seuraavat kusipääviirukset(tai haittaohjelmia, mitä nyt onkaan):
DoubleClick
ja
StatCounter
Menee lopullisesti päreet...
Lataa http://koti.mbnet.fi/pattaya1/lataus/hijackthis_self.exe
asenna
naputtele numerojärjestyksessä
1.Unzip
2.OK
3.Close
Paina nappia Do a system scan and save a logfile
Laita ponnahtava muistio tänne ( Hjt-loki )
ÄLÄ FIXSAA mitään rivejä etukäteen vaikka kuinka tekisi mieli. Odota vastauksia!!
Logfile of HijackThis v1.99.1
Scan saved at 13:11:40, on 19.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\X Password Generator\isamonitor.exe
C:\Program Files\X Password Generator\pmsngr.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\khooker.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
C:\Program Files\X Password Generator\isamini.exe
C:\Program Files\X Password Generator\pmmon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe
C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE
C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Sonera Tietoturva\Common\FSMB32.EXE
C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
C:\Program Files\Sonera Tietoturva\Anti-Virus\fsqh.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\Explorer.EXE
C:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.co.uk/
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Kimmo\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: (no name) - {d869742a-e5d2-4624-96c7-aae26170665e} - C:\Program Files\X Password Generator\isaddon.dll
O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\system32\khooker.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\(FlashGet)\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\(FlashGet)\jc_link.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: contrabandists - {dfa61db1-388e-4c87-8d56-540fa229bcb4} - C:\WINDOWS\system32\dpfwu.dll (file missing)
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
Lataa smitfraudfix:
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Pura sisältö (kansio nimeltä SmitfraudFix) työpöydällesi:
Avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
Valitse optio 1 - Search kirjoittamalla 1 ja painamalla "Enter"; tekstitiedosto avautuu, joka listaa tarttuneet tiedostot (jos olemassa).
Lähetä tämän tekstitiedoston sisältö viestiketjuusi.
HUOM! Jotkut virus ohjelmat tunnistavat Smitfraudfix.exe:n haittaohjelmaksi, jos virusohjelma valittaa kun yrität ladata pakettia, ota se pois käytöstä siksi aikaa.
Nehän on vain pelkkiä vaarattomia evästeitä, osaathan sinä täysin tarpeettomat evästeet ja väliaikaiset internet tiedostot poistaa ilman erillisä ohjelmien asennuksiakin.
>Työkalut
>Internet-asetukset
>Poista Evästeet
>Ok (pikku-ikkunaan)
>Poista tiedostot, laita ruksi, Poista kaikki off-line sisältö, kohdan eteen
>Ok (pikku-ikkunaan)
>Ok
Eläpäs nyt hätäile, on siellä muutakin kun evästeitä.
Älä vouhkaa HijackThis ohjelman ym. puhdistus ohjelmien kanssa, ei ne ole ratkaisuja joka saatanan pikku ongelmaan niin kuin tunnut LUULEVAN!
Soneran tietoturvapalvelu f-secure pitää koneen puhtaana, sen lisäksi kannattaa säännöllisesti esim.kerran kuukaudessa käyttää tätä varmasti turvallista huolto ja puhdistus ojelmaa.
http://safety.live.com/site/fi-FI/default.htm
SmitFraudFix v2.110
Scan done at 13:49:05,45, to 19.10.2006
Run from C:\Documents and Settings\Administrator\Desktop\Smitfraud\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrator
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrator\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Start Menu
C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url FOUND !
C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url FOUND !
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\FAVORI~1
»»»»»»»»»»»»»»»»»»»»»»»» Desktop
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
C:\Program Files\VirusBurster\ FOUND !
C:\Program Files\X Password Generator\ FOUND !
»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys
»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{dfa61db1-388e-4c87-8d56-540fa229bcb4}"="contrabandists"
[HKEY_CLASSES_ROOT\CLSID\{dfa61db1-388e-4c87-8d56-540fa229bcb4}\InProcServer32]
@="C:\WINDOWS\system32\dpfwu.dll"
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{dfa61db1-388e-4c87-8d56-540fa229bcb4}\InProcServer32]
@="C:\WINDOWS\system32\dpfwu.dll"
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32
»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection
»»»»»»»»»»»»»»»»»»»»»»»» End
@vouhkaat
En jaksa vastailla tollasille mitään, joten kiitos ja hyvästi.
Printtaa ohjeet ulos.
Käynnistä koneesi vikasietotilaan.
Kun vikasietotilassa, avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
Valitse optio 2 - Clean kirjoittamalla 2 ja painamalla "Enter" poistaaksesi tarttuneet tiedostot.
Sinulta kysytään: "Registry cleaning - Do you want to clean the registry ?"; vastaa "Yes" kirjoittamalla Y ja paina "Enter" puhdistaaksesi tarttuneet rekisteriavaimet.
Työkalu tarkistaa jos wininet.dll on tarttunut. Sinua saatetaan pyytää korvaamaan tarttunut .dll (jos löytyy); vastaa "Yes" kirjoittamalla Y ja painamalla "Enter".
Työkalun saattaa tarvita käynnistää kone uudelleen; jos ei tee niin, käynnistä normaaliin Windowsiin.
Tekstitiedosto ilmestyy, puhdistusprosessin jäljiltä; kopioi ja liitä tämän raportin tulokset vastaukseesi.
Raportti löytyy paikalliselta levyltäsi, useimmiten C:\rapport.txt.
Lähetä myös uusi HJT logi.
>Jotkut virus ohjelmat tunnistavat Smitfraudfix.exe:n haittaohjelmaksi, jos virusohjelma valittaa kun yrität ladata pakettia, ota se pois käytöstä siksi aikaa.<
-EI virustetorjunta ohjelmaa saa KOSKAAN ottaa pois päältä etenkään ohjelmia ladattaessa!!!!! PISTE
Mulla ei ole tulostinta parhaillaan käytössä, mitä mä otan tost raportist ylös?
Nii ja sit sellanen....miten mä avaan koneen vikasietotilaan? :)
>Jotkut virus ohjelmat tunnistavat Smitfraudfix.exe:n haittaohjelmaksi, jos virusohjelma valittaa kun yrität ladata pakettia, ota se pois käytöstä siksi aikaa.<
-Oletko ihan järjiltäsi kun tuollaisia täysin järjettömiä ohjeita annat?
Kysyjän soneran tietoturvapalvelu sisältää myös palomuurin jos toimii ohjeittesi mukaan kysyjän kone jää TÄYSIN suojattomaksi Viruksia ja tunkeilijoita vastaan ja hänen koneelleen pääsee kuka tahana tunkeilija tulemaan täysin vapaasti ja voi asennella koneelle vaikka minkälaisia haittaohjelmia huomaamattomasti.
no sitten kopsaa nuo ohjeet vaikka muistioon ja tallenna se työpöydälle.
Vikasietotilaan pääset näin:
-Käynnistä kone uudelleen.
-alkutekstien aikana naputtele F8 näppäintä.
-esiin tulevasta valikosta valitse "Vikasietotila", paina enter.
-kun vikasietotilassa niin toimit vaan noiden ohjeitten mukaan mitkä annoin aikasemmin.
hommaa vähän viel vaikeutti se ku mul on xp englanniks... mut sainpas jotain aikaiseski. toivottavasti tein oikein...
eli tässä raportit
SmitFraudFix v2.110
Scan done at 14:12:08,48, to 19.10.2006
Run from C:\Documents and Settings\Administrator\Desktop\Smitfraud\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{dfa61db1-388e-4c87-8d56-540fa229bcb4}"="contrabandists"
[HKEY_CLASSES_ROOT\CLSID\{dfa61db1-388e-4c87-8d56-540fa229bcb4}\InProcServer32]
@="C:\WINDOWS\system32\dpfwu.dll"
[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{dfa61db1-388e-4c87-8d56-540fa229bcb4}\InProcServer32]
@="C:\WINDOWS\system32\dpfwu.dll"
»»»»»»»»»»»»»»»»»»»»»»»» Killing process
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url Deleted
C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url Deleted
C:\Program Files\VirusBurster\ Deleted
C:\Program Files\X Password Generator\ Deleted
»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files
»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning
Registry Cleaning done.
»»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» End
ja sitten vielä
Logfile of HijackThis v1.99.1
Scan saved at 14:14:00, on 19.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\explorer.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.co.uk/
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Kimmo\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\system32\khooker.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\(FlashGet)\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\(FlashGet)\jc_link.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
Hyvä homma, aja sit vielä eScan läpi: http://koti.mbnet.fi/pattaya1/escanmwav.htm
Päivitä ekaks, ohjeet on tuolla sivuilla, päivitystapa 2.
Otit vissiin tuon HJT login vikasietotilassa, kun oot skannannu eScanilla niin lähetä tuo eScan logi jos jotain löytyy, ja uus normaalitilassa otettu HJT logi.
Näyttääkin menevän tovin...
löys se kaks virusta toi escan, mut täs logi
Thu Oct 19 14:35:17 2006 => **********************************************************
Thu Oct 19 14:35:17 2006 => eScan AntiVirus Toolkit Utility.
Thu Oct 19 14:35:17 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Thu Oct 19 14:35:18 2006 => **********************************************************
Thu Oct 19 14:35:18 2006 => Version 4.4.7
Thu Oct 19 14:35:19 2006 => Log File: C:\KASPER~1\mwav.log
Thu Oct 19 14:35:19 2006 => Latest Date of files inside MWAV: 18 Sep 2006 19:31:02.
Thu Oct 19 14:35:23 2006 => AV Library Loaded...
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\kavss.exe
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\Getvlist.exe
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\kavss.dll
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\kavssdi.dll
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\kavssi.dll
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\kavvlg.dll
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\msvlclnt.dll
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\ipc.dll
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\main.avi
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\virus.avi
Thu Oct 19 14:35:24 2006 => Virus Database Date: 2006/09/18
Thu Oct 19 14:35:24 2006 => Virus Database Count: 224509
Thu Oct 19 14:41:35 2006 => **********************************************************
Thu Oct 19 14:41:35 2006 => eScan AntiVirus Toolkit Utility.
Thu Oct 19 14:41:35 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Thu Oct 19 14:41:35 2006 =>
Thu Oct 19 14:41:35 2006 => Support: [email protected]
Thu Oct 19 14:41:35 2006 => Web: http://www.mwti.net
Thu Oct 19 14:41:35 2006 => **********************************************************
Thu Oct 19 14:41:35 2006 => Version 4.4.7
Thu Oct 19 14:41:35 2006 => Log File: C:\KASPER~1\mwav.log
Thu Oct 19 14:41:42 2006 => Latest Date of files inside MWAV: 19 Oct 2006 14:13:56.
Thu Oct 19 14:41:42 2006 => Options Selected by User:
Thu Oct 19 14:41:42 2006 => Memory Check: Enabled
Thu Oct 19 14:41:42 2006 => Registry Check: Enabled
Thu Oct 19 14:41:42 2006 => StartUp Folder Check: Enabled
Thu Oct 19 14:41:42 2006 => System Folder Check: Enabled
Thu Oct 19 14:41:42 2006 => System Area Check: Disabled
Thu Oct 19 14:41:42 2006 => Services Check: Enabled
Thu Oct 19 14:41:42 2006 => Drive Check Option Disabled
Thu Oct 19 14:41:42 2006 => Scanning Type: Scan And Clean
Thu Oct 19 14:41:42 2006 => Folder Check: Disabled
Thu Oct 19 14:41:43 2006 => ***** Scanning Memory Files *****
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\services.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\PROGRA~1\Sygate\SPF\smc.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\Explorer.EXE
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\sistray.EXE
Thu Oct 19 14:41:44 2006 => Scanning File C:\WINDOWS\system32\khooker.exe
Thu Oct 19 14:41:44 2006 => Scanning File C:\PROGRA~1\Java\JRE15~1.0_0\bin\jusched.exe
Thu Oct 19 14:41:44 2006 => Scanning File C:\DOCUME~1\ADMINI~1\MYDOCU~1\Winamp\winampa.exe
Thu Oct 19 14:41:44 2006 => Scanning File C:\PROGRA~1\QUICKT~1\qttask.exe
Thu Oct 19 14:41:44 2006 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
Thu Oct 19 14:41:44 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avgnt.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\WINDOWS\system32\ctfmon.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\sched.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avguard.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\COMMON~1\MICROS~1\VS7Debug\mdm.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\MOZILL~1\firefox.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\MSNMES~1\msnmsgr.exe
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:46 2006 => Scanning File C:\Kaspersky\mwavscan.com
Thu Oct 19 14:41:46 2006 => Scanning File C:\Kaspersky\kavss.exe
Thu Oct 19 14:41:46 2006 => ***** Scanning Registry Files *****
Thu Oct 19 14:41:46 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Thu Oct 19 14:41:46 2006 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Thu Oct 19 14:41:46 2006 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\webcheck.dll
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\stobject.dll
Thu Oct 19 14:41:46 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
Thu Oct 19 14:41:46 2006 => {02478D38-C3F9-4EFB-9B51-7695ECA05670} = C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
Thu Oct 19 14:41:46 2006 => Scanning File C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\yt.dll
Thu Oct 19 14:41:46 2006 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
Thu Oct 19 14:41:46 2006 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\ActiveX\ACROIE~1.DLL
Thu Oct 19 14:41:46 2006 => {53707962-6F74-2D53-2644-206D7942484F} = C:\Kimmo\Spybot\SPYBOT~1\SDHelper.dll
Thu Oct 19 14:41:46 2006 => Scanning File C:\Kimmo\Spybot\SPYBOT~1\SDHelper.dll
Thu Oct 19 14:41:47 2006 => {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} = C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
Thu Oct 19 14:41:47 2006 => Scanning File C:\PROGRA~1\Java\JRE15~1.0_0\bin\ssv.dll
Thu Oct 19 14:41:47 2006 => {9030D464-4C02-4ABF-8ECC-5164760863C6} = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
Thu Oct 19 14:41:47 2006 => Scanning File C:\PROGRA~1\COMMON~1\MICROS~1\WINDOW~1\WINDOW~1.DLL
Thu Oct 19 14:41:47 2006 => {A5366673-E8CA-11D3-9CD9-0090271D075B} = NULL
Thu Oct 19 14:41:47 2006 => {AA58ED58-01DD-4d91-8333-CF10577473F7} = c:\program files\google\googletoolbar3.dll
Thu Oct 19 14:41:47 2006 => *** File c:\PROGRA~1\google\GOOGLE~3.DLL having Size Restriction ***
Thu Oct 19 14:41:47 2006 => Scanning File c:\PROGRA~1\google\GOOGLE~3.DLL [**]
Thu Oct 19 14:41:47 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Thu Oct 19 14:41:47 2006 => Scanning File C:\WINDOWS\Explorer.exe
Thu Oct 19 14:41:47 2006 => Scanning File C:\WINDOWS\system32\userinit.exe
Thu Oct 19 14:41:47 2006 => Scanning HKCU\Control Panel\Desktop
Thu Oct 19 14:41:47 2006 => Scanning File C:\WINDOWS\system32\ssmypics.scr
Thu Oct 19 14:41:47 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Thu Oct 19 14:41:47 2006 => Scanning File C:\WINDOWS\system32\sistray.EXE
Thu Oct 19 14:41:48 2006 => Scanning File C:\WINDOWS\system32\khooker.exe
Thu Oct 19 14:41:48 2006 => *** File C:\PROGRA~1\Sygate\SPF\smc.exe having Size Restriction ***
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\Sygate\SPF\smc.exe [**]
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\Java\JRE15~1.0_0\bin\jusched.exe
Thu Oct 19 14:41:48 2006 => Scanning File C:\DOCUME~1\ADMINI~1\MYDOCU~1\Winamp\winampa.exe
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\QUICKT~1\qttask.exe
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avgnt.exe
Thu Oct 19 14:41:48 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Thu Oct 19 14:41:48 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Thu Oct 19 14:41:48 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Thu Oct 19 14:41:48 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Thu Oct 19 14:41:48 2006 => Scanning File C:\WINDOWS\system32\ctfmon.exe
Thu Oct 19 14:41:48 2006 => ERROR!!! Invalid Entry swg = C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe. Removing it.
Thu Oct 19 14:41:48 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Thu Oct 19 14:41:48 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Thu Oct 19 14:41:48 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Thu Oct 19 14:41:48 2006 => Scanning HKCR\txtfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\comfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\exefile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\dllfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\batfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\piffile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\scrfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\scrfile\shell\config\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\regfile\shell\open\command
Thu Oct 19 14:41:49 2006 => ***** Scanning StartUp Folders *****
Thu Oct 19 14:41:49 2006 => ***** Scanning C:\Documents and Settings\Administrator\Start Menu\Programs\Startup Folder *****
Thu Oct 19 14:41:49 2006 => Scanning Folder: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\*.*
Thu Oct 19 14:41:49 2006 => Scanning File C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\desktop.ini [**]
Thu Oct 19 14:41:49 2006 => ***** Scanning C:\Documents and Settings\All Users\Start Menu\Programs\Startup Folder *****
Thu Oct 19 14:41:49 2006 => Scanning Folder: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\*.*
Thu Oct 19 14:41:49 2006 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
Thu Oct 19 14:41:49 2006 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini [**]
Thu Oct 19 14:41:49 2006 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
Thu Oct 19 14:41:49 2006 => ***** Scanning C:\Documents and Settings\Administrator\Start menu\Programs\Startup Folder *****
Thu Oct 19 14:41:49 2006 => Scanning Folder: C:\DOCUME~1\ADMINI~1\STARTM~1\Programs\Startup\*.*
Thu Oct 19 14:41:49 2006 => Scanning File C:\DOCUME~1\ADMINI~1\STARTM~1\Programs\Startup\desktop.ini [**]
Thu Oct 19 14:41:49 2006 => ***** Scanning C:\Documents and Settings\Default User\Start menu\Programs\Startup Folder *****
Thu Oct 19 14:41:49 2006 => Scanning Folder: C:\DOCUME~1\DEFAUL~1\STARTM~1\Programs\Startup\*.*
Thu Oct 19 14:41:49 2006 => Scanning File C:\DOCUME~1\DEFAUL~1\STARTM~1\Programs\Startup\desktop.ini [**]
Thu Oct 19 14:41:49 2006 => ***** Scanning Service Files *****
Thu Oct 19 14:41:49 2006 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Thu Oct 19 14:41:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ACPI.sys
Thu Oct 19 14:41:49 2006 => Scanning File C:\WINDOWS\system32\drivers\aec.sys
Thu Oct 19 14:41:49 2006 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
Thu Oct 19 14:41:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\amdk7.sys
Thu Oct 19 14:41:49 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\sched.exe
Thu Oct 19 14:41:49 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avguard.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\asyncmac.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\atapi.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\atmarpc.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\audstub.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\AVGNTFLT.SYS
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\cdrom.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\clipsrv.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\dllhost.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\disk.sys
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\System32\dmadmin.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\drivers\dmboot.sys
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\drivers\dmio.sys
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\drivers\dmload.sys
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\drivers\DMusic.sys
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\drivers\drmkaud.sys
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\services.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\PROGRA~1\SONERA~1\ANTI-V~1\WIN2K\FSFILTER.SYS
Thu Oct 19 14:41:52 2006 => Scanning File C:\PROGRA~1\SONERA~1\ANTI-V~1\WIN2K\FSGK.SYS
Thu Oct 19 14:41:52 2006 => Scanning File C:\PROGRA~1\SONERA~1\ANTI-V~1\fsgk32st.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\PROGRA~1\SONERA~1\ANTI-V~1\WIN2K\FSREC.SYS
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\fdc.sys
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\flpydisk.sys
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\fltMgr.sys
Thu Oct 19 14:41:53 2006 => Scanning File C:\PROGRA~1\SONERA~1\FWES\Program\fsdfwd.exe
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\drivers\fsdfw.sys
Thu Oct 19 14:41:53 2006 => Scanning File C:\PROGRA~1\SONERA~1\FSPC\fshttps\fshttps.exe
Thu Oct 19 14:41:53 2006 => Scanning File C:\PROGRA~1\SONERA~1\Common\FSMA32.EXE
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ftdisk.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\gameenum.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\msgpc.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\Drivers\HTTP.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\i8042prt.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\imapi.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipinip.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipnat.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipsec.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\irenum.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\isapnp.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\kbdclass.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\drivers\kmixer.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:56 2006 => Scanning File C:\PROGRA~1\COMMON~1\MICROS~1\VS7Debug\mdm.exe
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mouclass.sys
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxdav.sys
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\msdtc.exe
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\msiexec.exe
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\drivers\MSKSSRV.sys
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\drivers\MSPCLOCK.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\drivers\MSPQM.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mssmbios.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\drivers\msmpu401.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ndistapi.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ndisuio.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ndiswan.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\netbios.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\netbt.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\netdde.exe
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\netdde.exe
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\parport.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\pci.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\pciide.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\services.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\raspptp.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ptilink.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\Drivers\PxHelp20.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rasacd.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\raspppoe.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\raspti.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rdbss.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rdpdr.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\sessmgr.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\redbook.sys
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\locator.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\secdrv.sys
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\serenum.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\serial.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\sis630p.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\drivers\ac97sis.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\sisagp.sys
Thu Oct 19 14:42:01 2006 => *** File C:\PROGRA~1\Sygate\SPF\smc.exe having Size Restriction ***
Thu Oct 19 14:42:01 2006 => Scanning File C:\PROGRA~1\Sygate\SPF\smc.exe [**]
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\drivers\splitter.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\srv.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\swenum.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\drivers\swmidi.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\drivers\sysaudio.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\smlogsvc.exe
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\tcpip.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\Drivers\Teefer.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\termdd.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\update.sys
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\System32\ups.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbhub.sys
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbohci.sys
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\System32\drivers\vga.sys
Thu Oct 19 14:42:03 2006 => ERROR!!! Invalid Entry in SYSTEM\CurrentControlSet\Services\vsdatant...
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\wanarp.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\drivers\wdmaud.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\wbem\wmiapsrv.exe
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\WPSDRVNT.SYS
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\System32\drivers\ws2ifsl.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:05 2006 => ***** Scanning System32 Folders *****
Thu Oct 19 14:42:05 2006 => Scanning C:\WINDOWS Directory
Thu Oct 19 14:42:05 2006 => Scanning Folder: C:\WINDOWS\*.*
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\0.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\bootstat.dat [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\bwUnin-6.3.2.62-4436233L.exe
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\cmsetacl.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\comsetup.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\control.ini [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\DAASINST.LOG [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\desktop.ini [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\Directx.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\discwriter.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\DtcInstall.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\explorer.exe
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\explorer.scf [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\FSASWINS.LOG [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\FSASWSIN.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\FSASWUNI.LOG [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\FSAVCSIN.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSAVINST.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsavunin.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsbwinst.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSDEPH.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsdginst.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSGUIINS.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSISU.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsiugeneric.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsiuupd.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSMAHFIN.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsmainst.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSPCINST.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSPROD.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSPRODRM.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsrif.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSCINST.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSETUP.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSFM.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\fssgpex.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSGSUP.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSSINST.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSYSUPD.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\fstnbins.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\fwesinst.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\fwinst.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\HELPINST.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\hh.exe
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\IsUninst.exe
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\mozver.dat [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\msdfmap.ini [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\msmqinst.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\NEWSINST.LOG [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\NOTEPAD.EXE
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\nsreg.dat [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ntbtlog.txt [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ntdtcsetup.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ocgen.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ODBC.INI [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ODBCINST.INI [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\OEWABLog.txt [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\oobeact.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\OrangeBurn.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\Q-Klez.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\QTFont.for
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\QTFont.qfn [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\regedit.exe
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\REGLOCS.OLD [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\regopt.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\RunSetup.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\SchedLgU.Txt [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\sessmgr.setup.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\SET3.tmp [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\SET4.tmp [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\setupact.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\setupapi.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\setuperr.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\setuplog.txt [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\Sti_Trace.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\system.ini [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\tabletoc.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\TASKMAN.EXE
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\tsoc.log [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\twain.dll
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\twain_32.dll
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\twunk_16.exe
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\twunk_32.exe
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\UninstallFirefox.exe
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\vb.ini [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\vbaddin.ini [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\vmmreg32.dll
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\wiadebug.log [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\wiaservc.log [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\win.ini [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\WindowsShell.Manifest [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\WindowsUpdate.log [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\winhelp.exe
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\winhlp32.exe
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\wmsetup.log [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\WMSysPr9.prx [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\_default.pif
Thu Oct 19 14:42:11 2006 => Scanning C:\WINDOWS\system32 Directory
Thu Oct 19 14:42:11 2006 => Scanning Folder: C:\WINDOWS\system32\*.*
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\$winnt$.inf
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\12520437.cpx [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\12520850.cpx [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\6to4svc.dll
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\aaaamon.dll
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\acctres.dll
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\acelpdec.ax
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\acledit.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\aclui.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\activeds.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\activeds.tlb
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\actmovie.exe
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\actxprxy.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\admparse.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\adptif.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\adsldp.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\adsldpc.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\adsmsext.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\adsnds.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\adsnt.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\adsnw.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\advapi32.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\advpack.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\ahui.exe
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\amcompat.tlb
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\amstream.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\ansi.sys
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\apcups.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\append.exe
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\apphelp.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\appmgmts.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\appmgr.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\appwiz.cpl
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\arp.exe
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\AS-IFce1.ocx
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asctrls.ocx
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asr_fmt.exe
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asr_ldm.exe
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asr_pfu.exe
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asycfilt.dll
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\at.exe
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\ATHPRXY.DLL
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\atkctrs.dll
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\atl.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atl71.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atmadm.exe
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atmfd.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atmlib.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atmpvcno.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\attrib.exe
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\audiosrv.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\auditusr.exe
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\authz.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autochk.exe
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autoconv.exe
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autodisc.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\AUTOEXEC.NT [**]
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autofmt.exe
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autolfn.exe
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avicap.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avicap32.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avifil32.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avifile.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avmeter.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\avsda.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\avtapi.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\avwav.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\AxFormEx6k.dep [**]
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\AxFormEx6k.ocx
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\basesrv.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\batmeter.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\batt.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bidispl.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bios1.rom [**]
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bios4.rom [**]
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bitsprx2.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bitsprx3.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\blastcln.exe
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bootcfg.exe
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bootok.exe
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bootvid.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bootvrfy.exe
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bopomofo.uce [**]
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\BPM_Control.ocx
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\browselc.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\browser.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\browseui.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\browsewm.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\bthci.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\bthprops.cpl
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\bthserv.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\btpanui.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\cabinet.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\cabview.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\cacls.exe
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\calc.exe
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\camocx.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\capesnpn.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\catsrv.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\catsrvps.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\catsrvut.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\ccfgnt.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdfview.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdimage.exe
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdm.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdmodem.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\CDNotify6.ocx
Thu Oct 19 14:42:22 2006 => *** File C:\WINDOWS\system32\cdosys.dll having Size Restriction ***
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdosys.dll [**]
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdplayer.exe.manifest [**]
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\certcli.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\certmgr.dll
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\certmgr.msc [**]
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cfgbkend.dll
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cfgmgr32.dll
Thu Oct 19 14:42:23 2006 => *** File C:\WINDOWS\system32\cfgmig32.dll having Size Restriction ***
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cfgmig32.dll [**]
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\charmap.exe
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\chcp.com
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\chkdsk.exe
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\chkntfs.exe
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cic.dll
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cipher.exe
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\ckcnv.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clb.dll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clbcatex.dll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clbcatq.dll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\cleanmgr.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\cliconfg.dll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\cliconfg.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\cliconfg.rll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clipbrd.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clipsrv.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clusapi.dll
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmcfg32.dll
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmd.exe
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmdial32.dll
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmdl32.exe
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmdlib.wsc [**]
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmdow.exe
Thu Oct 19 14:42:25 2006 => File C:\WINDOWS\system32\cmdow.exe tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmmon32.exe
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmos.ram [**]
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmpbk32.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmprops.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmsetACL.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmstp.exe
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmutil.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cnetcfg.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cnvfat.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\colbact.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\comaddin.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comcat.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comct232.ocx
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comctl32.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comctl32.ocx
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comdlg32.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comdlg32.ocx
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comm.drv
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\command.com
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\commdlg.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comp.exe
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compact.exe
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compatUI.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compmgmt.msc [**]
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compobj.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compstui.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comrepl.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comres.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comsnap.dll
Thu Oct 19 14:42:28 2006 => *** File C:\WINDOWS\system32\comsvcs.dll having Size Restriction ***
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comsvcs.dll [**]
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comuid.dll
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\CONFIG.NT [**]
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\CONFIG.TMP [**]
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\conime.exe
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\console.dll
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\control.exe
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\convert.exe
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\corpol.dll
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\country.sys
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\cpvslider.ocx
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\credui.dll
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\crtdll.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\crypt32.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptdlg.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptdll.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptext.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptnet.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptsvc.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptui.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cscdll.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cscript.exe
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cscui.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\csrsrv.dll
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\csrss.exe
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\csseqchk.dll
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\CTFMON.EXE
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\ctl3d32.dll
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\ctl3dv2.dll
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\ctype.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\cyoPrBr1.ocx
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_037.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_10000.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_10079.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1026.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1143.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1250.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1251.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1252.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1253.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1254.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1255.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1256.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1257.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1258.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_20127.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_20261.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_20866.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_20905.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_21866.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_28591.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_28592.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_28593.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_28605.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_437.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_500.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_775.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_850.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_860.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_861.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_863.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_865.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_874.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_932.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_936.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_949.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_950.nls [**]
Thu Oct 19 14:42:32 2006 => *** File C:\WINDOWS\system32\d3d8.dll having Size Restriction ***
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3d8.dll [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3d8thk.dll
Thu Oct 19 14:42:32 2006 => *** File C:\WINDOWS\system32\d3d9.dll having Size Restriction ***
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3d9.dll [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3d9caps.dat [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3dim.dll
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3dim700.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3dpmesh.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3dramp.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3drm.dll
Thu Oct 19 14:42:33 2006 => *** File C:\WINDOWS\system32\d3dx9_26.dll having Size Restriction ***
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3dx9_26.dll [**]
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3dxof.dll
Thu Oct 19 14:42:33 2006 => *** File C:\WINDOWS\system32\danim.dll having Size Restriction ***
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\danim.dll [**]
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\dataclen.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\datime.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\davclnt.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\daxctle.ocx
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dbghelp.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dbmsrpcn.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dbnetlib.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dbnmpntw.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\Dcache.bin
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dciman32.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dcomcnfg.exe
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\ddeml.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\ddeshare.exe
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\ddraw.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\ddrawex.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\debug.exe
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\defrag.exe
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\desk.cpl
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\deskadp.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\deskmon.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\deskperf.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\desktop.ini [**]
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\devenum.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\devmgmt.msc [**]
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\devmgr.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrg.msc [**]
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgfat.exe
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgntfs.exe
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgres.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgsnap.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgui.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfsshlex.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dgnet.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dhcpcsvc.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dhcpmon.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dhcpsapi.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\diactfrm.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\diantz.exe
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\digest.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\dimap.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\DIMM.DLL
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\dinput.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\dinput8.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\diskcomp.com
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\diskcopy.com
Thu Oct 19 14:42:38 2006 => *** File C:\WINDOWS\system32\diskcopy.dll having Size Restriction ***
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\diskcopy.dll [**]
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\diskmgmt.msc [**]
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\diskpart.exe
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\diskperf.exe
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\dispex.dll
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\DivX.dll
Thu Oct 19 14:42:39 2006 => Scanning File C:\WINDOWS\system32\DivXCodecUpdateChecker.exe
Thu Oct 19 14:42:39 2006 => Scanning File C:\WINDOWS\system32\divxdec.ax
Thu Oct 19 14:42:39 2006 => Scanning File C:\WINDOWS\system32\DivXMedia.ax
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\DivXsm.exe
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\divxsm.tlb
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\DivXWMPExtType.dll
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\divx_xx07.dll
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\divx_xx0c.dll
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\divx_xx11.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dllhost.exe
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dllhst3g.exe
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmadmin.exe
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmband.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmcompos.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmconfig.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmdlgs.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmdskmgr.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmdskres.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmime.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmintf.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmloader.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmocx.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmremote.exe
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmscript.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmserver.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmstyle.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmsynth.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dmusic.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dmutil.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dmview.ocx
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dnsapi.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dnsrslvr.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\docprop.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\docprop2.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\doskey.exe
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dosx.exe
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dpcdll.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpl100.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dplay.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dplaysvr.exe
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dplayx.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpmodemx.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpnaddr.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpnet.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpnhpast.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpnhupnp.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpnlobby.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpnmodem.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpnsvr.exe
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpnwsock.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpserial.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpu10.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpu11.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpuGUI10.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpuGUI11.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpus11.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpv11.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpvacm.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpvoice.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpvsetup.exe
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\dpvvox.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\dpwsock.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\dpwsockx.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\driverquery.exe
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drmclien.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drmstor.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drprov.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drwatson.exe
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drwtsn32.exe
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\ds16gt.dLL
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\ds32gt.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsauth.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsdmo.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsdmoprp.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dskquota.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dskquoui.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsm_de.qm [**]
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsm_fr.qm [**]
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsm_ja.qm [**]
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsound.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsound.vxd
Thu Oct 19 14:42:48 2006 => *** File C:\WINDOWS\system32\dsound3d.dll having Size Restriction ***
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsound3d.dll [**]
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsprop.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dsprpres.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dsquery.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dssec.dat [**]
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dssec.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dssenh.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dsuiext.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dswave.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dtu100.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\duser.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dvdplay.exe
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\DVDProX2.dll
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\dvdupgrd.exe
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\dx7vb.dll
Thu Oct 19 14:42:50 2006 => *** File C:\WINDOWS\system32\dx8vb.dll having Size Restriction ***
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\dx8vb.dll [**]
Thu Oct 19 14:42:50 2006 => *** File C:\WINDOWS\system32\dxdiag.exe having Size Restriction ***
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\dxdiag.exe [**]
Thu Oct 19 14:42:50 2006 => *** File C:\WINDOWS\system32\dxdiagn.dll having Size Restriction ***
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\sys
Thu Oct 19 14:35:17 2006 => **********************************************************
Thu Oct 19 14:35:17 2006 => eScan AntiVirus Toolkit Utility.
Thu Oct 19 14:35:17 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Thu Oct 19 14:35:18 2006 => **********************************************************
Thu Oct 19 14:35:18 2006 => Version 4.4.7
Thu Oct 19 14:35:19 2006 => Log File: C:\KASPER~1\mwav.log
Thu Oct 19 14:35:19 2006 => Latest Date of files inside MWAV: 18 Sep 2006 19:31:02.
Thu Oct 19 14:35:23 2006 => AV Library Loaded...
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\kavss.exe
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\Getvlist.exe
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\kavss.dll
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\kavssdi.dll
Thu Oct 19 14:35:23 2006 => Scanning File C:\KASPER~1\kavssi.dll
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\kavvlg.dll
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\msvlclnt.dll
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\ipc.dll
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\main.avi
Thu Oct 19 14:35:24 2006 => Scanning File C:\KASPER~1\virus.avi
Thu Oct 19 14:35:24 2006 => Virus Database Date: 2006/09/18
Thu Oct 19 14:35:24 2006 => Virus Database Count: 224509
Thu Oct 19 14:41:35 2006 => **********************************************************
Thu Oct 19 14:41:35 2006 => eScan AntiVirus Toolkit Utility.
Thu Oct 19 14:41:35 2006 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Thu Oct 19 14:41:35 2006 =>
Thu Oct 19 14:41:35 2006 => Support: [email protected]
Thu Oct 19 14:41:35 2006 => Web: http://www.mwti.net
Thu Oct 19 14:41:35 2006 => **********************************************************
Thu Oct 19 14:41:35 2006 => Version 4.4.7
Thu Oct 19 14:41:35 2006 => Log File: C:\KASPER~1\mwav.log
Thu Oct 19 14:41:42 2006 => Latest Date of files inside MWAV: 19 Oct 2006 14:13:56.
Thu Oct 19 14:41:42 2006 => Options Selected by User:
Thu Oct 19 14:41:42 2006 => Memory Check: Enabled
Thu Oct 19 14:41:42 2006 => Registry Check: Enabled
Thu Oct 19 14:41:42 2006 => StartUp Folder Check: Enabled
Thu Oct 19 14:41:42 2006 => System Folder Check: Enabled
Thu Oct 19 14:41:42 2006 => System Area Check: Disabled
Thu Oct 19 14:41:42 2006 => Services Check: Enabled
Thu Oct 19 14:41:42 2006 => Drive Check Option Disabled
Thu Oct 19 14:41:42 2006 => Scanning Type: Scan And Clean
Thu Oct 19 14:41:42 2006 => Folder Check: Disabled
Thu Oct 19 14:41:43 2006 => ***** Scanning Memory Files *****
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\services.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\PROGRA~1\Sygate\SPF\smc.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\Explorer.EXE
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Thu Oct 19 14:41:43 2006 => Scanning File C:\WINDOWS\system32\sistray.EXE
Thu Oct 19 14:41:44 2006 => Scanning File C:\WINDOWS\system32\khooker.exe
Thu Oct 19 14:41:44 2006 => Scanning File C:\PROGRA~1\Java\JRE15~1.0_0\bin\jusched.exe
Thu Oct 19 14:41:44 2006 => Scanning File C:\DOCUME~1\ADMINI~1\MYDOCU~1\Winamp\winampa.exe
Thu Oct 19 14:41:44 2006 => Scanning File C:\PROGRA~1\QUICKT~1\qttask.exe
Thu Oct 19 14:41:44 2006 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
Thu Oct 19 14:41:44 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avgnt.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\WINDOWS\system32\ctfmon.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\sched.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avguard.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\COMMON~1\MICROS~1\VS7Debug\mdm.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\MOZILL~1\firefox.exe
Thu Oct 19 14:41:45 2006 => Scanning File C:\PROGRA~1\MSNMES~1\msnmsgr.exe
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:46 2006 => Scanning File C:\Kaspersky\mwavscan.com
Thu Oct 19 14:41:46 2006 => Scanning File C:\Kaspersky\kavss.exe
Thu Oct 19 14:41:46 2006 => ***** Scanning Registry Files *****
Thu Oct 19 14:41:46 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Thu Oct 19 14:41:46 2006 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Thu Oct 19 14:41:46 2006 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\webcheck.dll
Thu Oct 19 14:41:46 2006 => Scanning File C:\WINDOWS\system32\stobject.dll
Thu Oct 19 14:41:46 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
Thu Oct 19 14:41:46 2006 => {02478D38-C3F9-4EFB-9B51-7695ECA05670} = C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
Thu Oct 19 14:41:46 2006 => Scanning File C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\yt.dll
Thu Oct 19 14:41:46 2006 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
Thu Oct 19 14:41:46 2006 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\ActiveX\ACROIE~1.DLL
Thu Oct 19 14:41:46 2006 => {53707962-6F74-2D53-2644-206D7942484F} = C:\Kimmo\Spybot\SPYBOT~1\SDHelper.dll
Thu Oct 19 14:41:46 2006 => Scanning File C:\Kimmo\Spybot\SPYBOT~1\SDHelper.dll
Thu Oct 19 14:41:47 2006 => {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} = C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
Thu Oct 19 14:41:47 2006 => Scanning File C:\PROGRA~1\Java\JRE15~1.0_0\bin\ssv.dll
Thu Oct 19 14:41:47 2006 => {9030D464-4C02-4ABF-8ECC-5164760863C6} = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
Thu Oct 19 14:41:47 2006 => Scanning File C:\PROGRA~1\COMMON~1\MICROS~1\WINDOW~1\WINDOW~1.DLL
Thu Oct 19 14:41:47 2006 => {A5366673-E8CA-11D3-9CD9-0090271D075B} = NULL
Thu Oct 19 14:41:47 2006 => {AA58ED58-01DD-4d91-8333-CF10577473F7} = c:\program files\google\googletoolbar3.dll
Thu Oct 19 14:41:47 2006 => *** File c:\PROGRA~1\google\GOOGLE~3.DLL having Size Restriction ***
Thu Oct 19 14:41:47 2006 => Scanning File c:\PROGRA~1\google\GOOGLE~3.DLL [**]
Thu Oct 19 14:41:47 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Thu Oct 19 14:41:47 2006 => Scanning File C:\WINDOWS\Explorer.exe
Thu Oct 19 14:41:47 2006 => Scanning File C:\WINDOWS\system32\userinit.exe
Thu Oct 19 14:41:47 2006 => Scanning HKCU\Control Panel\Desktop
Thu Oct 19 14:41:47 2006 => Scanning File C:\WINDOWS\system32\ssmypics.scr
Thu Oct 19 14:41:47 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Thu Oct 19 14:41:47 2006 => Scanning File C:\WINDOWS\system32\sistray.EXE
Thu Oct 19 14:41:48 2006 => Scanning File C:\WINDOWS\system32\khooker.exe
Thu Oct 19 14:41:48 2006 => *** File C:\PROGRA~1\Sygate\SPF\smc.exe having Size Restriction ***
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\Sygate\SPF\smc.exe [**]
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\Java\JRE15~1.0_0\bin\jusched.exe
Thu Oct 19 14:41:48 2006 => Scanning File C:\DOCUME~1\ADMINI~1\MYDOCU~1\Winamp\winampa.exe
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\QUICKT~1\qttask.exe
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
Thu Oct 19 14:41:48 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avgnt.exe
Thu Oct 19 14:41:48 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Thu Oct 19 14:41:48 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Thu Oct 19 14:41:48 2006 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Thu Oct 19 14:41:48 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Thu Oct 19 14:41:48 2006 => Scanning File C:\WINDOWS\system32\ctfmon.exe
Thu Oct 19 14:41:48 2006 => ERROR!!! Invalid Entry swg = C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe. Removing it.
Thu Oct 19 14:41:48 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Thu Oct 19 14:41:48 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Thu Oct 19 14:41:48 2006 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Thu Oct 19 14:41:48 2006 => Scanning HKCR\txtfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\comfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\exefile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\dllfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\batfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\piffile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\scrfile\shell\open\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\scrfile\shell\config\command
Thu Oct 19 14:41:48 2006 => Scanning HKCR\regfile\shell\open\command
Thu Oct 19 14:41:49 2006 => ***** Scanning StartUp Folders *****
Thu Oct 19 14:41:49 2006 => ***** Scanning C:\Documents and Settings\Administrator\Start Menu\Programs\Startup Folder *****
Thu Oct 19 14:41:49 2006 => Scanning Folder: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\*.*
Thu Oct 19 14:41:49 2006 => Scanning File C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\desktop.ini [**]
Thu Oct 19 14:41:49 2006 => ***** Scanning C:\Documents and Settings\All Users\Start Menu\Programs\Startup Folder *****
Thu Oct 19 14:41:49 2006 => Scanning Folder: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\*.*
Thu Oct 19 14:41:49 2006 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
Thu Oct 19 14:41:49 2006 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini [**]
Thu Oct 19 14:41:49 2006 => Scanning File C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
Thu Oct 19 14:41:49 2006 => ***** Scanning C:\Documents and Settings\Administrator\Start menu\Programs\Startup Folder *****
Thu Oct 19 14:41:49 2006 => Scanning Folder: C:\DOCUME~1\ADMINI~1\STARTM~1\Programs\Startup\*.*
Thu Oct 19 14:41:49 2006 => Scanning File C:\DOCUME~1\ADMINI~1\STARTM~1\Programs\Startup\desktop.ini [**]
Thu Oct 19 14:41:49 2006 => ***** Scanning C:\Documents and Settings\Default User\Start menu\Programs\Startup Folder *****
Thu Oct 19 14:41:49 2006 => Scanning Folder: C:\DOCUME~1\DEFAUL~1\STARTM~1\Programs\Startup\*.*
Thu Oct 19 14:41:49 2006 => Scanning File C:\DOCUME~1\DEFAUL~1\STARTM~1\Programs\Startup\desktop.ini [**]
Thu Oct 19 14:41:49 2006 => ***** Scanning Service Files *****
Thu Oct 19 14:41:49 2006 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Thu Oct 19 14:41:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ACPI.sys
Thu Oct 19 14:41:49 2006 => Scanning File C:\WINDOWS\system32\drivers\aec.sys
Thu Oct 19 14:41:49 2006 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
Thu Oct 19 14:41:49 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\amdk7.sys
Thu Oct 19 14:41:49 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\sched.exe
Thu Oct 19 14:41:49 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\avguard.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\asyncmac.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\atapi.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\atmarpc.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\audstub.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\PROGRA~1\ANTIVI~1\AVGNTFLT.SYS
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\cdrom.sys
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\clipsrv.exe
Thu Oct 19 14:41:50 2006 => Scanning File C:\WINDOWS\system32\dllhost.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\disk.sys
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\System32\dmadmin.exe
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\drivers\dmboot.sys
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\drivers\dmio.sys
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\system32\drivers\dmload.sys
Thu Oct 19 14:41:51 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\drivers\DMusic.sys
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\drivers\drmkaud.sys
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\services.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\PROGRA~1\SONERA~1\ANTI-V~1\WIN2K\FSFILTER.SYS
Thu Oct 19 14:41:52 2006 => Scanning File C:\PROGRA~1\SONERA~1\ANTI-V~1\WIN2K\FSGK.SYS
Thu Oct 19 14:41:52 2006 => Scanning File C:\PROGRA~1\SONERA~1\ANTI-V~1\fsgk32st.exe
Thu Oct 19 14:41:52 2006 => Scanning File C:\PROGRA~1\SONERA~1\ANTI-V~1\WIN2K\FSREC.SYS
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\fdc.sys
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\flpydisk.sys
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\fltMgr.sys
Thu Oct 19 14:41:53 2006 => Scanning File C:\PROGRA~1\SONERA~1\FWES\Program\fsdfwd.exe
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\drivers\fsdfw.sys
Thu Oct 19 14:41:53 2006 => Scanning File C:\PROGRA~1\SONERA~1\FSPC\fshttps\fshttps.exe
Thu Oct 19 14:41:53 2006 => Scanning File C:\PROGRA~1\SONERA~1\Common\FSMA32.EXE
Thu Oct 19 14:41:53 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ftdisk.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\gameenum.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\msgpc.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\Drivers\HTTP.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\i8042prt.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\imapi.sys
Thu Oct 19 14:41:54 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipinip.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipnat.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ipsec.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\irenum.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\isapnp.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\kbdclass.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\drivers\kmixer.sys
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:55 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:56 2006 => Scanning File C:\PROGRA~1\COMMON~1\MICROS~1\VS7Debug\mdm.exe
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mouclass.sys
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxdav.sys
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\msdtc.exe
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\msiexec.exe
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\drivers\MSKSSRV.sys
Thu Oct 19 14:41:56 2006 => Scanning File C:\WINDOWS\system32\drivers\MSPCLOCK.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\drivers\MSPQM.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\mssmbios.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\drivers\msmpu401.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ndistapi.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ndisuio.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ndiswan.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\netbios.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\netbt.sys
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\netdde.exe
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\netdde.exe
Thu Oct 19 14:41:57 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\parport.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\pci.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\pciide.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\services.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\raspptp.sys
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:41:58 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\ptilink.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\Drivers\PxHelp20.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rasacd.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\raspppoe.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\raspti.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rdbss.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\rdpdr.sys
Thu Oct 19 14:41:59 2006 => Scanning File C:\WINDOWS\system32\sessmgr.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\redbook.sys
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\locator.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\lsass.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\secdrv.sys
Thu Oct 19 14:42:00 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\serenum.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\serial.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\sis630p.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\drivers\ac97sis.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\sisagp.sys
Thu Oct 19 14:42:01 2006 => *** File C:\PROGRA~1\Sygate\SPF\smc.exe having Size Restriction ***
Thu Oct 19 14:42:01 2006 => Scanning File C:\PROGRA~1\Sygate\SPF\smc.exe [**]
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\drivers\splitter.sys
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Thu Oct 19 14:42:01 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\srv.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\swenum.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\drivers\swmidi.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\drivers\sysaudio.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\smlogsvc.exe
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\tcpip.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\Drivers\Teefer.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\termdd.sys
Thu Oct 19 14:42:02 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\update.sys
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\System32\ups.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbhub.sys
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\usbohci.sys
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\System32\drivers\vga.sys
Thu Oct 19 14:42:03 2006 => ERROR!!! Invalid Entry in SYSTEM\CurrentControlSet\Services\vsdatant...
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:03 2006 => Scanning File C:\WINDOWS\system32\DRIVERS\wanarp.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\drivers\wdmaud.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\wbem\wmiapsrv.exe
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\WPSDRVNT.SYS
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\System32\drivers\ws2ifsl.sys
Thu Oct 19 14:42:04 2006 => Scanning File C:\WINDOWS\system32\svchost.exe
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\System32\svchost.exe
Thu Oct 19 14:42:05 2006 => ***** Scanning System32 Folders *****
Thu Oct 19 14:42:05 2006 => Scanning C:\WINDOWS Directory
Thu Oct 19 14:42:05 2006 => Scanning Folder: C:\WINDOWS\*.*
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\0.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\bootstat.dat [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\bwUnin-6.3.2.62-4436233L.exe
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\cmsetacl.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\comsetup.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\control.ini [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\DAASINST.LOG [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\desktop.ini [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\Directx.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\discwriter.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\DtcInstall.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\explorer.exe
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\explorer.scf [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\FSASWINS.LOG [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\FSASWSIN.log [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\FSASWUNI.LOG [**]
Thu Oct 19 14:42:05 2006 => Scanning File C:\WINDOWS\FSAVCSIN.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSAVINST.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsavunin.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsbwinst.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSDEPH.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsdginst.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSGUIINS.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSISU.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsiugeneric.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsiuupd.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSMAHFIN.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsmainst.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSPCINST.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSPROD.log [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\FSPRODRM.LOG [**]
Thu Oct 19 14:42:06 2006 => Scanning File C:\WINDOWS\fsrif.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSCINST.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSETUP.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSFM.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\fssgpex.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSGSUP.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSSINST.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\FSSYSUPD.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\fstnbins.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\fwesinst.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\fwinst.log [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\HELPINST.LOG [**]
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\hh.exe
Thu Oct 19 14:42:07 2006 => Scanning File C:\WINDOWS\IsUninst.exe
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\mozver.dat [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\msdfmap.ini [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\msmqinst.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\NEWSINST.LOG [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\NOTEPAD.EXE
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\nsreg.dat [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ntbtlog.txt [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ntdtcsetup.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ocgen.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ODBC.INI [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\ODBCINST.INI [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\OEWABLog.txt [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\oobeact.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\OrangeBurn.log [**]
Thu Oct 19 14:42:08 2006 => Scanning File C:\WINDOWS\Q-Klez.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\QTFont.for
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\QTFont.qfn [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\regedit.exe
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\REGLOCS.OLD [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\regopt.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\RunSetup.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\SchedLgU.Txt [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\sessmgr.setup.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\SET3.tmp [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\SET4.tmp [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\setupact.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\setupapi.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\setuperr.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\setuplog.txt [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\Sti_Trace.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\system.ini [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\tabletoc.log [**]
Thu Oct 19 14:42:09 2006 => Scanning File C:\WINDOWS\TASKMAN.EXE
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\tsoc.log [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\twain.dll
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\twain_32.dll
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\twunk_16.exe
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\twunk_32.exe
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\UninstallFirefox.exe
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\vb.ini [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\vbaddin.ini [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\vmmreg32.dll
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\wiadebug.log [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\wiaservc.log [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\win.ini [**]
Thu Oct 19 14:42:10 2006 => Scanning File C:\WINDOWS\WindowsShell.Manifest [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\WindowsUpdate.log [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\winhelp.exe
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\winhlp32.exe
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\wmsetup.log [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\WMSysPr9.prx [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\_default.pif
Thu Oct 19 14:42:11 2006 => Scanning C:\WINDOWS\system32 Directory
Thu Oct 19 14:42:11 2006 => Scanning Folder: C:\WINDOWS\system32\*.*
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\$winnt$.inf
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\12520437.cpx [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\12520850.cpx [**]
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\6to4svc.dll
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\aaaamon.dll
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\acctres.dll
Thu Oct 19 14:42:11 2006 => Scanning File C:\WINDOWS\system32\acelpdec.ax
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\acledit.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\aclui.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\activeds.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\activeds.tlb
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\actmovie.exe
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\actxprxy.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\admparse.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\adptif.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\adsldp.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\adsldpc.dll
Thu Oct 19 14:42:12 2006 => Scanning File C:\WINDOWS\system32\adsmsext.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\adsnds.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\adsnt.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\adsnw.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\advapi32.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\advpack.dll
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\ahui.exe
Thu Oct 19 14:42:13 2006 => Scanning File C:\WINDOWS\system32\amcompat.tlb
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\amstream.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\ansi.sys
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\apcups.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\append.exe
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\apphelp.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\appmgmts.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\appmgr.dll
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\appwiz.cpl
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\arp.exe
Thu Oct 19 14:42:14 2006 => Scanning File C:\WINDOWS\system32\AS-IFce1.ocx
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asctrls.ocx
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asr_fmt.exe
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asr_ldm.exe
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asr_pfu.exe
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\asycfilt.dll
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\at.exe
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\ATHPRXY.DLL
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\atkctrs.dll
Thu Oct 19 14:42:15 2006 => Scanning File C:\WINDOWS\system32\atl.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atl71.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atmadm.exe
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atmfd.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atmlib.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\atmpvcno.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\attrib.exe
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\audiosrv.dll
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\auditusr.exe
Thu Oct 19 14:42:16 2006 => Scanning File C:\WINDOWS\system32\authz.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autochk.exe
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autoconv.exe
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autodisc.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\AUTOEXEC.NT [**]
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autofmt.exe
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\autolfn.exe
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avicap.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avicap32.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avifil32.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avifile.dll
Thu Oct 19 14:42:17 2006 => Scanning File C:\WINDOWS\system32\avmeter.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\avsda.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\avtapi.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\avwav.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\AxFormEx6k.dep [**]
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\AxFormEx6k.ocx
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\basesrv.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\batmeter.dll
Thu Oct 19 14:42:18 2006 => Scanning File C:\WINDOWS\system32\batt.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bidispl.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bios1.rom [**]
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bios4.rom [**]
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bitsprx2.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bitsprx3.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\blastcln.exe
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bootcfg.exe
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bootok.exe
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bootvid.dll
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bootvrfy.exe
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\bopomofo.uce [**]
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\BPM_Control.ocx
Thu Oct 19 14:42:19 2006 => Scanning File C:\WINDOWS\system32\browselc.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\browser.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\browseui.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\browsewm.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\bthci.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\bthprops.cpl
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\bthserv.dll
Thu Oct 19 14:42:20 2006 => Scanning File C:\WINDOWS\system32\btpanui.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\cabinet.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\cabview.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\cacls.exe
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\calc.exe
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\camocx.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\capesnpn.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\catsrv.dll
Thu Oct 19 14:42:21 2006 => Scanning File C:\WINDOWS\system32\catsrvps.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\catsrvut.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\ccfgnt.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdfview.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdimage.exe
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdm.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdmodem.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\CDNotify6.ocx
Thu Oct 19 14:42:22 2006 => *** File C:\WINDOWS\system32\cdosys.dll having Size Restriction ***
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdosys.dll [**]
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\cdplayer.exe.manifest [**]
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\certcli.dll
Thu Oct 19 14:42:22 2006 => Scanning File C:\WINDOWS\system32\certmgr.dll
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\certmgr.msc [**]
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cfgbkend.dll
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cfgmgr32.dll
Thu Oct 19 14:42:23 2006 => *** File C:\WINDOWS\system32\cfgmig32.dll having Size Restriction ***
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cfgmig32.dll [**]
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\charmap.exe
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\chcp.com
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\chkdsk.exe
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\chkntfs.exe
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cic.dll
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\cipher.exe
Thu Oct 19 14:42:23 2006 => Scanning File C:\WINDOWS\system32\ckcnv.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clb.dll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clbcatex.dll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clbcatq.dll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\cleanmgr.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\cliconfg.dll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\cliconfg.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\cliconfg.rll
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clipbrd.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clipsrv.exe
Thu Oct 19 14:42:24 2006 => Scanning File C:\WINDOWS\system32\clusapi.dll
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmcfg32.dll
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmd.exe
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmdial32.dll
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmdl32.exe
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmdlib.wsc [**]
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmdow.exe
Thu Oct 19 14:42:25 2006 => File C:\WINDOWS\system32\cmdow.exe tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
Thu Oct 19 14:42:25 2006 => Scanning File C:\WINDOWS\system32\cmmon32.exe
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmos.ram [**]
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmpbk32.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmprops.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmsetACL.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmstp.exe
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cmutil.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cnetcfg.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\cnvfat.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\colbact.dll
Thu Oct 19 14:42:26 2006 => Scanning File C:\WINDOWS\system32\comaddin.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comcat.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comct232.ocx
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comctl32.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comctl32.ocx
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comdlg32.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comdlg32.ocx
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comm.drv
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\command.com
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\commdlg.dll
Thu Oct 19 14:42:27 2006 => Scanning File C:\WINDOWS\system32\comp.exe
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compact.exe
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compatUI.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compmgmt.msc [**]
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compobj.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\compstui.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comrepl.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comres.dll
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comsnap.dll
Thu Oct 19 14:42:28 2006 => *** File C:\WINDOWS\system32\comsvcs.dll having Size Restriction ***
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comsvcs.dll [**]
Thu Oct 19 14:42:28 2006 => Scanning File C:\WINDOWS\system32\comuid.dll
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\CONFIG.NT [**]
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\CONFIG.TMP [**]
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\conime.exe
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\console.dll
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\control.exe
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\convert.exe
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\corpol.dll
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\country.sys
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\cpvslider.ocx
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\credui.dll
Thu Oct 19 14:42:29 2006 => Scanning File C:\WINDOWS\system32\crtdll.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\crypt32.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptdlg.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptdll.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptext.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptnet.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptsvc.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cryptui.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cscdll.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cscript.exe
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\cscui.dll
Thu Oct 19 14:42:30 2006 => Scanning File C:\WINDOWS\system32\csrsrv.dll
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\csrss.exe
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\csseqchk.dll
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\CTFMON.EXE
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\ctl3d32.dll
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\ctl3dv2.dll
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\ctype.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\cyoPrBr1.ocx
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_037.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_10000.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_10079.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1026.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1143.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1250.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1251.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1252.nls [**]
Thu Oct 19 14:42:31 2006 => Scanning File C:\WINDOWS\system32\c_1253.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1254.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1255.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1256.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1257.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_1258.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_20127.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_20261.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_20866.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_20905.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_21866.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_28591.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_28592.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_28593.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_28605.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_437.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_500.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_775.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_850.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_860.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_861.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_863.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_865.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_874.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_932.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_936.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_949.nls [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\c_950.nls [**]
Thu Oct 19 14:42:32 2006 => *** File C:\WINDOWS\system32\d3d8.dll having Size Restriction ***
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3d8.dll [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3d8thk.dll
Thu Oct 19 14:42:32 2006 => *** File C:\WINDOWS\system32\d3d9.dll having Size Restriction ***
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3d9.dll [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3d9caps.dat [**]
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3dim.dll
Thu Oct 19 14:42:32 2006 => Scanning File C:\WINDOWS\system32\d3dim700.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3dpmesh.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3dramp.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3drm.dll
Thu Oct 19 14:42:33 2006 => *** File C:\WINDOWS\system32\d3dx9_26.dll having Size Restriction ***
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3dx9_26.dll [**]
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\d3dxof.dll
Thu Oct 19 14:42:33 2006 => *** File C:\WINDOWS\system32\danim.dll having Size Restriction ***
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\danim.dll [**]
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\dataclen.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\datime.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\davclnt.dll
Thu Oct 19 14:42:33 2006 => Scanning File C:\WINDOWS\system32\daxctle.ocx
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dbghelp.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dbmsrpcn.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dbnetlib.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dbnmpntw.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\Dcache.bin
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dciman32.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\dcomcnfg.exe
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\ddeml.dll
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\ddeshare.exe
Thu Oct 19 14:42:34 2006 => Scanning File C:\WINDOWS\system32\ddraw.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\ddrawex.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\debug.exe
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\defrag.exe
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\desk.cpl
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\deskadp.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\deskmon.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\deskperf.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\desktop.ini [**]
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\devenum.dll
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\devmgmt.msc [**]
Thu Oct 19 14:42:35 2006 => Scanning File C:\WINDOWS\system32\devmgr.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrg.msc [**]
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgfat.exe
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgntfs.exe
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgres.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgsnap.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfrgui.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dfsshlex.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dgnet.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dhcpcsvc.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dhcpmon.dll
Thu Oct 19 14:42:36 2006 => Scanning File C:\WINDOWS\system32\dhcpsapi.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\diactfrm.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\diantz.exe
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\digest.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\dimap.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\DIMM.DLL
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\dinput.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\dinput8.dll
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\diskcomp.com
Thu Oct 19 14:42:37 2006 => Scanning File C:\WINDOWS\system32\diskcopy.com
Thu Oct 19 14:42:38 2006 => *** File C:\WINDOWS\system32\diskcopy.dll having Size Restriction ***
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\diskcopy.dll [**]
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\diskmgmt.msc [**]
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\diskpart.exe
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\diskperf.exe
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\dispex.dll
Thu Oct 19 14:42:38 2006 => Scanning File C:\WINDOWS\system32\DivX.dll
Thu Oct 19 14:42:39 2006 => Scanning File C:\WINDOWS\system32\DivXCodecUpdateChecker.exe
Thu Oct 19 14:42:39 2006 => Scanning File C:\WINDOWS\system32\divxdec.ax
Thu Oct 19 14:42:39 2006 => Scanning File C:\WINDOWS\system32\DivXMedia.ax
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\DivXsm.exe
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\divxsm.tlb
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\DivXWMPExtType.dll
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\divx_xx07.dll
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\divx_xx0c.dll
Thu Oct 19 14:42:40 2006 => Scanning File C:\WINDOWS\system32\divx_xx11.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dllhost.exe
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dllhst3g.exe
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmadmin.exe
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmband.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmcompos.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmconfig.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmdlgs.dll
Thu Oct 19 14:42:41 2006 => Scanning File C:\WINDOWS\system32\dmdskmgr.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmdskres.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmime.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmintf.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmloader.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmocx.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmremote.exe
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmscript.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmserver.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmstyle.dll
Thu Oct 19 14:42:42 2006 => Scanning File C:\WINDOWS\system32\dmsynth.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dmusic.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dmutil.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dmview.ocx
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dnsapi.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dnsrslvr.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\docprop.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\docprop2.dll
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\doskey.exe
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dosx.exe
Thu Oct 19 14:42:43 2006 => Scanning File C:\WINDOWS\system32\dpcdll.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpl100.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dplay.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dplaysvr.exe
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dplayx.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpmodemx.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpnaddr.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpnet.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpnhpast.dll
Thu Oct 19 14:42:44 2006 => Scanning File C:\WINDOWS\system32\dpnhupnp.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpnlobby.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpnmodem.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpnsvr.exe
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpnwsock.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpserial.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpu10.dll
Thu Oct 19 14:42:45 2006 => Scanning File C:\WINDOWS\system32\dpu11.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpuGUI10.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpuGUI11.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpus11.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpv11.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpvacm.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpvoice.dll
Thu Oct 19 14:42:46 2006 => Scanning File C:\WINDOWS\system32\dpvsetup.exe
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\dpvvox.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\dpwsock.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\dpwsockx.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\driverquery.exe
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drmclien.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drmstor.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drprov.dll
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drwatson.exe
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\drwtsn32.exe
Thu Oct 19 14:42:47 2006 => Scanning File C:\WINDOWS\system32\ds16gt.dLL
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\ds32gt.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsauth.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsdmo.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsdmoprp.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dskquota.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dskquoui.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsm_de.qm [**]
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsm_fr.qm [**]
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsm_ja.qm [**]
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsound.dll
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsound.vxd
Thu Oct 19 14:42:48 2006 => *** File C:\WINDOWS\system32\dsound3d.dll having Size Restriction ***
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsound3d.dll [**]
Thu Oct 19 14:42:48 2006 => Scanning File C:\WINDOWS\system32\dsprop.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dsprpres.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dsquery.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dssec.dat [**]
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dssec.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dssenh.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dsuiext.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dswave.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dtu100.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\duser.dll
Thu Oct 19 14:42:49 2006 => Scanning File C:\WINDOWS\system32\dvdplay.exe
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\DVDProX2.dll
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\dvdupgrd.exe
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\dx7vb.dll
Thu Oct 19 14:42:50 2006 => *** File C:\WINDOWS\system32\dx8vb.dll having Size Restriction ***
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\dx8vb.dll [**]
Thu Oct 19 14:42:50 2006 => *** File C:\WINDOWS\system32\dxdiag.exe having Size Restriction ***
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\dxdiag.exe [**]
Thu Oct 19 14:42:50 2006 => *** File C:\WINDOWS\system32\dxdiagn.dll having Size Restriction ***
Thu Oct 19 14:42:50 2006 => Scanning File C:\WINDOWS\system32\dxdiagn.dll [**]
Thu Oct 19 14:42:50 2006
Laita se mikä tuli siihen alempaan ikkunaan, siinä lukee "Virus log information".
Ja sit laita se HJT loki myös.
Logfile of HijackThis v1.99.1
Scan saved at 14:44:24, on 19.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\khooker.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Kaspersky\mwavscan.com
C:\Kaspersky\kavss.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.co.uk/
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Kimmo\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\system32\khooker.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\(FlashGet)\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\(FlashGet)\jc_link.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
eli siis
File C:\WINDOWS\system32\cmdow.exe tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
File C:\WINDOWS\system32\pskill.exe tagged as not-a-virus:RiskTool.Win32.PsKill.e. No Action Taken.
ja sit kerran viel
Logfile of HijackThis v1.99.1
Scan saved at 14:44:24, on 19.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\khooker.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Kaspersky\mwavscan.com
C:\Kaspersky\kavss.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.co.uk/
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Kimmo\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\system32\khooker.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\(FlashGet)\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\(FlashGet)\jc_link.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
Jos et tarvi Yahoo toolbaria niin fixaa pois nuo rivit, mut muuten anna olla:
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
Tuo fixaa kans:
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
Poista java lisää poista sovellutuksesta
Lataa tuolta uusi java
http://java.sun.com/javase/downloads/index.jsp
Java Runtime Environment (JRE) 5.0 Update 9
Muuten tuo on ok, onko vielä ongelmia?
Kaikki näyttää olevan ok, eli kiitos sulle paljon!
Tarjoon bissen jos tavataan! ;)
Kiitoksia kiitoksia!!!
Logfile of HijackThis v1.99.1
Scan saved at 16:31:17, on 19.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\khooker.exe
C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.co.uk/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Kimmo\Spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\system32\khooker.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\(FlashGet)\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\(FlashGet)\jc_link.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
no sun logissa on
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
http://www.castlecops.com/CLSID.html
O2 - BHO: (no name) - {d869742a-e5d2-4624-96c7-aae26170665e} - C:\Program Files\X Password Generator\isaddon.dll
http://www.castlecops.com/CLSID.html
O21 - SSODL: contrabandists - {dfa61db1-388e-4c87-8d56-540fa229bcb4} - C:\WINDOWS\system32\dpfwu.dll (file missing)
ja ettei vaan ois kaks palomuuria .f-segure ja sygate. kyllä näissä logeissa näkyy kaikkea jänskää ,sitten vaan valitaan oikea puhdistus ohjelma .ei se f.securekaan poista kaikkea paskaa mitä latailetta koneelle. ja yahoo toolbar on vakoiluohjelma.et silleeen
Hyvä jos se nyt korjautui..=)
Nuista tiedostoista saa joku joku sanoo mielipiteensä joka noista tietää enempi:
File C:\WINDOWS\system32\cmdow.exe tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
File C:\WINDOWS\system32\pskill.exe tagged as not-a-virus:RiskTool.Win32.PsKill.e. No Action Taken.
Mutta todennäkösesti nuo tiedostot joutaa poistaa.
Yahoo toolbar ei ole varsinaisesti vakoiluohjelma, mutta saattaa konetta hidastaa jonkinverran.
http://www.castlecops.com/tk65-Ycomp_dll.html
käytät
antivir ja f-seecure
Toi f-secure mul oli joskus...
scannaa hjt:llä merkkaa paina Fix checked
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
käynnistä > suorita > kirjoita luukkuun alla olevat ja paina jokasen rivin jälkeen enter
sc stop FSDFWD
sc delete FSDFWD
sc stop fshttps
sc delete fshttps
sitten mene vikasietotilaan poista kansio
C:\Program Files\---> Sonera Tietoturva
mutta ei vain puhdista kun ei tunnista.
noihin örkeihin tarvii jos mitäkin fixsiä.
ei yksi f-secure tai jokin muu virusohjelma örkejä pidä kurissa tai poista.
Nyt on vaan sellanen, etten oo sillä koneella millä tuota ongelmaa oli. Vietän nyt syyslomaa, mut jos otan sitten ku taas meen omalle kämpille ni yhteyttä...
mutta asentuu koneelle monesti ,jos käyttäjä hyväksyy
asennusvaiheessa.esim ccleaner.
Kun sinulla on koneellasi Soneran tietoturvapalvelu f-secure se sisältää myös haitta-ja vakoilu ohjelmien poisto ohjelman eli siitä paremmasta maksullisesta AdAware versiosta konffatun version, joten poista koneeltasi se ilmainen AdAware versio.
Etkä todellakaan tarvitse spyspot tms. ohjelmia, ne ilmoittaa täysin vaarattomat evästeekin vaarallisia örkkeinä jotta ohjelma vaikuttaisi tehokkaalta.
Tätä kannattaa käyttää Tietoturvapalvelusi lisäksi:
Microsoftin ilmainen turvallinen ja helppokäyttöinen suomenkielinen ohjelma jolla voit turvallisesti tehdä Suojaustarkistuksen,Puhdistuksen ja Huolto tarkistuksen:
http://safety.live.com/site/fi-FI/default.htm
mut varo ettei ne syö koneesi kovalevyä kokonaan.rousk rousk.:D
helpottaa koneen toimintaa.
Eli taas oon tällä koneella, missä sitä ongelmaa oli...
Tein niinkuin käskit ja tässä tämä hjt-loki. Ainoo ku vikasietotilassa poistin sitä sonera tietoturva kansioo, ni se ei kaikkii tiedsostoja suostunu poistaa...jotain .dll tiedostoja
tässä toi loki
Logfile of HijackThis v1.99.1
Scan saved at 11:18:59, on 30.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\khooker.exe
C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.co.uk/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\system32\khooker.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Administrator\My Documents\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\(FlashGet)\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\(FlashGet)\jc_link.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
pääsen koulust n.klo16
Mm Trojan downloader ja siten kyllä kymmenet pienemmät kuten vakoiluohjelmat lähtevät F-securen poistotyökalulla f-Spyaxe.zip
osoitteesta:
http://www.f-secure.com/sw-desc/spyaxe.shtml
SmitfraudFix
http://www.f-secure.com/sw-desc/spyaxe.shtml
meinaan tuo kulkee vielä kivikaudella