Logfile of HijackThis v1.99.1
Scan saved at 16:14:08, on 22.4.2007
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP2 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\SOUNDMAN.EXE
C:\WINNT\System32\RUNDLL32.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\hijack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Local Security Authority Service] C:\WINNT\System32\Isass.exe
O4 - HKLM\..\Run: [Advanced DHTML Enable] C:\WINNT\System32\kiqpglt.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe
Scan saved at 16:14:08, on 22.4.2007
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP2 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\SOUNDMAN.EXE
C:\WINNT\System32\RUNDLL32.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\hijack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Local Security Authority Service] C:\WINNT\System32\Isass.exe
O4 - HKLM\..\Run: [Advanced DHTML Enable] C:\WINNT\System32\kiqpglt.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe
Vastaukset 7
Vanhimmat
O4 - HKLM\..\Run: [Advanced DHTML Enable] C:\WINNT\System32\kiqpglt.exe
...näyttää hassulta. Viisammat saavat sanoa kannattaako poistaa ja mitkä ovat jatkotoimenpiteet.
lsass.exe ja Isass.exe ovat eri juttu, arial-fontti erottaa ne heikosti ja eron huomaaminen on vaikeaa.
Kopioimalla nimen vaikka wordpadiin ja muuttamalla fontin Times New Roman' iin , ero näkyy selvästi.
Asiaan:
Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta
Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi.
* Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
* Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
* Käynnistä AVG Anti-Spyware.
* Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
* Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
* Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
* Sitten "Reports" valikon alta:
o Laita täppi kohtaan "Automatically generate report after every scan"
o Ota täppi pois kohdasta"Only if threats were found"
* Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
* "Resident shield is", muuta tila active:sta inactive:ksi
* Sulje ohjelma, ÄLÄ skannaa vielä.
Käynnistä koneesi vikasietotilaan, aloita F8-näppäimen painelu käynnistyksen alussa ja valitse esiin tulevasta valikosta Vikasietotila nuolinäppäimillä, vahvista valinta Enterillä.
Vikasietotilaan käynnistyminen on hitaampaa ja työpöytä näyttää erilaiselta, odottele rauhassa.
HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
* Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
* Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
* AVG aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
http://img509.imageshack.us/img509/4851/scanavgjk2.jpg
* Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
* Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
# Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
# Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
# Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG Anti-Spyware:n raportti viestiketjuusi.
tämä kohta jäi tekemättä:
* Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
Created at: 23:36:19 23.4.2007
Scan result:
F:\vanha c\Documents and Settings\Administrator\Cookies\[email protected][1].txt -> TrackingCookie.Adocean : Cleaned.
C:\Documents and Settings\Administrator\Cookies\administrator@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\Administrator\Cookies\administrator@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Administrator\Cookies\administrator@com[1].txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt -> TrackingCookie.Paypal : Cleaned.
F:\vanha c\Documents and Settings\Administrator\Cookies\[email protected][2].txt -> TrackingCookie.Reliablestats : Cleaned.
C:\Documents and Settings\Administrator\Cookies\administrator@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\Administrator\Cookies\administrator@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt -> TrackingCookie.Webtrends : Cleaned.
::Report end
nimeä Hijackthis.exe uudelleen, vaikka skanneri.exe
Esim. vundo-troijalainen osaa piiloutua, jos skannataan alkuperäisellä sovellusnimellä.
Noi Anti-Spywaren löydöt on vaan keksejä.
Laita uusi HJT-logi uudelleennimetyllä exellä ajettuna.
Logfile of HijackThis v1.99.1
Scan saved at 16:37:25, on 24.4.2007
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP2 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINNT\SOUNDMAN.EXE
C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe
C:\WINNT\System32\RUNDLL32.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\hijack\scanneri.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Local Security Authority Service] C:\WINNT\System32\Isass.exe
O4 - HKLM\..\Run: [Advanced DHTML Enable] C:\WINNT\System32\kiqpglt.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe
scannaa hjt:llä merkkaa paina Fix checked
O4 - HKLM\..\Run: [Local Security Authority Service] C:\WINNT\System32\Isass.exe
O4 - HKLM\..\Run: [Advanced DHTML Enable] C:\WINNT\System32\kiqpglt.exe
Poista vikasiedossa jos näkyy
C:\WINNT\System32\---> Isass.exe kiqpglt.exe
File F:\filet\mp3\mp3 heavy\Dream Theater - Octavarium\productinfo.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\My Documents\koulu\suoritetut\osimalli\koematsku\ethernet.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\My Documents\koulu\suoritetut\osimalli\koematsku\reititys.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\My Documents\koulu\suoritetut\osimalli\koematsku\sanasto.html infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\My Documents\koulu\suoritetut\osimalli\koematsku\tietoturva.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\My Documents\koulu\suoritetut\unix\unix_komentoja.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\My Documents\koulu\suoritetut\verkkojulkaisu\harj1.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\My Documents\koulu\suoritetut\verkkojulkaisu\harj1b.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\My Documents\koulu\suoritetut\verkkojulkaisu\index.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\GAMES.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\INDEX.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\JOKES.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\LEFT.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\LINKS.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\mp3search.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\RIGHT.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\S3M.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\SEARCH.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\STUFF.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\WEATHER.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\homepage\webmaster.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\c Krystian Dlugopolski.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\c Tomislaw Tajner.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\POL Grzegorz Sliwka.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\POL Jan Ciapala.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\POL Klimek Murmanka.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\POL Pawel Urbanski.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\POL Piotr Zyla.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\POL Rafal Sliz.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\w Adam Malysz.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\w Tomasz Pochwala.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\sekalaiset\mov\dc\Deluxe Ski Jump 3 v15\User Files\Ski Jumpers\w Wojciech Skupien.skj infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File F:\vanha c\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\G56B0P6F\ads[1].htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\G56B0P6F\ads[3].htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\KZ07SJ4Z\B1845714;sz=150x120;ord=[1].htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Documents and Settings\All Users\Application Data\addr_file.html infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition classic\addr_file.html infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition classic\UPGRADE\basic\addr_file.html infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\games\Rakenna taloja Masa Mainion kanssa\Help\H1t002v0.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\games\Rakenna taloja Masa Mainion kanssa\Help\MulleHusHelp.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Adobe\Acrobat 4.0\Help\accessPDF.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Adobe\Acrobat 4.0\Reader\plug_ins\WEBBUY\HTML\template1.html infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Adobe\Acrobat 4.0\Reader\plug_ins\WEBBUY\HTML\template2.html infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Adobe\Acrobat 4.0\Reader\plug_ins\WEBBUY\HTML\template5.html infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Auringonkukka.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Citrus Punch.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Clear Day.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Fiesta.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Glacier.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Hohde.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Ivy.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Jäätikkö.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Kaunis päivä.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Leaves.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Lehdet.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Luonto.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Maissi.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Maize.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Makeiset.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Muratti.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Nature.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Network Blitz.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Pie Charts.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Sitruspunssi.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Sunflower.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Sweets.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Technical.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Tekniikka.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Tyhjä.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Common Files\Microsoft Shared\Stationery\Ympyräkaavio.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\FPX\BIN\default.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\FPX\TEMP\default.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\100.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\DEFAULT.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\HARMAA.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\HARMAA2.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\KIVI.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\MC.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\MCST.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\RUUDUT.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\SIKSAK.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Mallit\Access\TAIVAS.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Office\Esimerkit\CAJUN.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Office\Esimerkit\FORMAGGI.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Microsoft Office\Office\Esimerkit\NWINDTEM.HTM infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\NetMeeting\netmeet.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\ScanSoft\OmniPageSE2.0\EregEng\form-eng.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\ScanSoft\OmniPageSE2.0\ReadMeBra.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\ScanSoft\OmniPageSE2.0\ReadMeEng.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\ScanSoft\OmniPageSE2.0\ReadMeFre.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\ScanSoft\OmniPageSE2.0\ReadMeGer.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\ScanSoft\OmniPageSE2.0\ReadMeIta.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\ScanSoft\OmniPageSE2.0\ReadMeSpa.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\av.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\commands.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\compare.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\history.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\info.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\infotip.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\menu.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\menuex.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\nav.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\order.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\share.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\system.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\team.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\top.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\usage.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\deutsch\welcome.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\av.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\commands.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\compare.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\history.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\info.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\infotip.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\menu.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\menuex.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\nav.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\order.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\share.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\system.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\team.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\top.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\usage.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\WinAce\html\english\welcome.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Winamp\winampmb.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.
File F:\vanha c\Program Files\Zone Labs\ZoneAlarm\zl_priv.htm infected by "Net-Worm.Win32.Allaple.a" Virus. Action Taken: File Disinfected.