;
;
#27 June 2008, 13:07:13
;
;
;   Save report file = Yes
;   Report file name = avpm.rpt
;   Show pack info in the report = No
;   Show clean object info in the report = No
;   Append = No
;   Limit size to (Kb) = Yes
;   Limit size = 2048
;   For renaming or copying of infected objects use = Special folder
;   Folder name = Infected
;   Use quarantine = No
;   Enable delete or rename infected archives = No
;   Limit size compound files to (Kb) = Yes
;   Limit size = 4096
; 
; 
; 
; "My Computer"
;   Enable processing = Yes
;   Actions in case of virus detection = Ask user
;   Scan local removable disk drives = Yes
;   Scan local hard disk drives = Yes
;   Scan network drives = Yes
;   Scan files of following types = All infectable
;   Exclude by mask = No
;   Scan sectors = Yes
;   Scan memory = Yes
;   Scan compound files = Yes
;   Archives = No
;   Archives with self-extractors = Yes
;   Mail databases = No
;   Plain mail = No
;   Embedded objects = Yes
;   Enable code analyser = Yes
; 
; "A:\"
;   Enable processing = No
;   Actions in case of virus detection = Ask user
;   Scan files of following types = All infectable
;   Exclude by mask = No
;   Scan sectors = Yes
;   Scan compound files = Yes
;   Archives = No
;   Archives with self-extractors = Yes
;   Mail databases = No
;   Plain mail = No
;   Embedded objects = Yes
;   Enable code analyser = Yes
; 
; "E:\"
;   Enable processing = No
;   Actions in case of virus detection = Ask user
;   Scan files of following types = All infectable
;   Exclude by mask = No
;   Scan sectors = Yes
;   Scan compound files = Yes
;   Archives = No
;   Archives with self-extractors = Yes
;   Mail databases = No
;   Plain mail = No
;   Embedded objects = Yes
;   Enable code analyser = Yes
; 
; "F:\"
;   Enable processing = No
;   Actions in case of virus detection = Ask user
;   Scan files of following types = All infectable
;   Exclude by mask = No
;   Scan sectors = Yes
;   Scan compound files = Yes
;   Archives = No
;   Archives with self-extractors = Yes
;   Mail databases = No
;   Plain mail = No
;   Embedded objects = Yes
;   Enable code analyser = Yes
; 
; "S:\"
;   Enable processing = No
;   Actions in case of virus detection = Ask user
;   Scan files of following types = All infectable
;   Exclude by mask = No
;   Scan sectors = Yes
;   Scan compound files = Yes
;   Archives = No
;   Archives with self-extractors = Yes
;   Mail databases = No
;   Plain mail = No
;   Embedded objects = Yes
;   Enable code analyser = Yes
; 
; "T:\"
;   Enable processing = No
;   Actions in case of virus detection = Ask user
;   Scan files of following types = All infectable
;   Exclude by mask = No
;   Scan sectors = Yes
;   Scan compound files = Yes
;   Archives = No
;   Archives with self-extractors = Yes
;   Mail databases = No
;   Plain mail = No
;   Embedded objects = Yes
;   Enable code analyser = Yes
; 
; "Z:\"
;   Enable processing = No
;   Actions in case of virus detection = Ask user
;   Scan files of following types = All infectable
;   Exclude by mask = No
;   Scan sectors = Yes
;   Scan compound files = Yes
;   Archives = No
;   Archives with self-extractors = Yes
;   Mail databases = No
;   Plain mail = No
;   Embedded objects = Yes
;   Enable code analyser = Yes
; 
; "My Network Places"
;   Enable processing = Yes
;   Actions in case of virus detection = Ask user
;   Scan files of following types = All infectable
;   Exclude by mask = No
;   Scan compound files = Yes
;   Archives = No
;   Archives with self-extractors = Yes
;   Mail databases = No
;   Plain mail = No
;   Embedded objects = Yes
;   Enable code analyser = Yes
; 
; 
<200.1000.10201.2.103>
OK	Warning	Suspicion	Infected	<200.904.1204.1304.e04>
Disinfected	Deleted	Renamed	Quarantined	<200.b04.d04.c04.2204>
Will be deleted after reboot	Will be renamed after reboot	Disinfection failed	Packed	<200.1b04.1a04.a04.1004>
Archive	Encrypted	Corrupted	Unknown format	<200.1104.f04.704.1404>
Password protected	Locked by other process	Read access denied	Disk out of space	<200.804.304.504.604>
I/O error	Missed	Kernel fault	Interface fault	<200.404.1c04.204.104>
Object	Result	Description	<100.3c00000c.f000018.19000010>

ExecSpecial can't resolve name: GetProcAddressEx		
ExecSpecial can't resolve name: GetProcAddressEx		
ExecSpecial can't resolve name: GetProcAddressEx		
Process : winlogon.exe\msaud32.acm	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : winlogon.exe\l3codeca.acm	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : winlogon.exe\mobilev.acm	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : winlogon.exe\Dvacm.acm	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : winlogon.exe\AC3ACM.acm	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : avpcc.exe\IPC.dll	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : avpcc.exe\avpnet.dll	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\IPC.dll	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\CCClient.dll	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\AvpMSrv.dll	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\prloader.npl	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\Avp3.ppl	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\avp_iont.dll	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\nfio.ppl	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\avpgs.ppl	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\TEMPFILE.ppl	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>
Process : AvpM.exe\MemModSc.ppl	Infected	Trojan.Win32.Monderb.gen	<cd0000.0.e>