Please find the following logs:
SpHjFix log file:
Symantec Adware.Istbar Removal Tool 1.0.7
registry: HKEY_USERS\S-1-5-21-3253555194-4024994690-2552189465-1009\Software\IST (key deleted)
registry: HKEY_USERS\S-1-5-21-3253555194-4024994690-2552189465-1009\Software\sais (key deleted)
registry: HKEY_LOCAL_MACHINE\SOFTWARE\ISTsvc (key deleted)
registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISTsvc (key deleted)
registry: HKEY_LOCAL_MACHINE\SOFTWARE\sais (key deleted)
registry: HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main: Search Bar (value deleted)
registry: HKEY_USERS\S-1-5-21-3253555194-4024994690-2552189465-1008\Software\Microsoft\Internet Explorer\Main: Search Bar (value deleted)
registry: HKEY_USERS\S-1-5-21-3253555194-4024994690-2552189465-501\Software\Microsoft\Internet Explorer\Main: Search Bar (value deleted)
registry: HKEY_USERS\S-1-5-21-3253555194-4024994690-2552189465-1009\Software\Microsoft\Internet Explorer\Main: Use Search Assistant (value deleted)
registry: HKEY_USERS\S-1-5-21-3253555194-4024994690-2552189465-501\Software\Microsoft\Internet Explorer\Main: Use Search Assistant (value deleted)
registry: HKEY_USERS\S-1-5-21-3253555194-4024994690-2552189465-501\Software\Microsoft\Internet Explorer\Search: SearchAssistant (value deleted)
registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run: IST Service (value deleted)
D:\System Volume Information: (not scanned)
Adware.Istbar has not been found on your computer.
(7/1/05 7:31:46 PM) SPSeHjFix started v1.1.2
(7/1/05 7:31:46 PM) OS: WinXP Service Pack 2 (5.1.2600)
(7/1/05 7:31:46 PM) Language: english
(7/1/05 7:31:46 PM) Win-Path: C:\WINDOWS
(7/1/05 7:31:46 PM) System-Path: C:\WINDOWS\system32
(7/1/05 7:31:46 PM) Temp-Path: C:\DOCUME~1\Nathan\LOCALS~1\Temp\
(7/1/05 7:31:48 PM) Disinfection started
(7/1/05 7:31:48 PM) Bad-Dll(IEP): c:\windows\system32\kbfoy.dll
(7/1/05 7:31:48 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:31:48 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:31:48 PM) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\kbfoy.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\kbfoy.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Search, SearchAssistant: res://c:\windows\system32\kbfoy.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Search, CustomizeSearch: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\kbfoy.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\kbfoy.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\kbfoy.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant: res://c:\windows\system32\kbfoy.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch: about:blank
(7/1/05 7:31:48 PM) Stealth-String not found
(7/1/05 7:31:48 PM) No locked Files to delete. End without Reboot
(7/1/05 7:31:51 PM) Disinfection started
(7/1/05 7:31:51 PM) Bad-Dll(IEP): c:\windows\system32\kbfoy.dll
(7/1/05 7:31:51 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:31:51 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:31:51 PM) Bad IE-pages: (none)
(7/1/05 7:31:51 PM) Stealth-String not found
(7/1/05 7:31:51 PM) No locked Files to delete. End without Reboot
(7/1/05 7:31:59 PM) Disinfection started
(7/1/05 7:31:59 PM) Bad-Dll(IEP): c:\windows\system32\kbfoy.dll
(7/1/05 7:31:59 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:31:59 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:31:59 PM) Bad IE-pages: (none)
(7/1/05 7:31:59 PM) Stealth-String not found
(7/1/05 7:31:59 PM) No locked Files to delete. End without Reboot
(7/1/05 7:32:07 PM) SPSeHjFix started v1.1.2
(7/1/05 7:32:07 PM) OS: WinXP Service Pack 2 (5.1.2600)
(7/1/05 7:32:07 PM) Language: english
(7/1/05 7:32:07 PM) Win-Path: C:\WINDOWS
(7/1/05 7:32:07 PM) System-Path: C:\WINDOWS\system32
(7/1/05 7:32:07 PM) Temp-Path: C:\DOCUME~1\Nathan\LOCALS~1\Temp\
(7/1/05 7:32:08 PM) Disinfection started
(7/1/05 7:32:08 PM) Bad-Dll(IEP): (not found)
(7/1/05 7:32:08 PM) Bad-Dll(IEP) in BHO: (not found)
(7/1/05 7:32:08 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:32:08 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:32:08 PM) Bad IE-pages: (none)
(7/1/05 7:32:08 PM) Stealth-String not found
(7/1/05 7:32:08 PM) Not infected->END
(7/1/05 7:34:26 PM) SPSeHjFix started v1.1.2
(7/1/05 7:34:26 PM) OS: WinXP Service Pack 2 (5.1.2600)
(7/1/05 7:34:26 PM) Language: english
(7/1/05 7:34:26 PM) Win-Path: C:\WINDOWS
(7/1/05 7:34:26 PM) System-Path: C:\WINDOWS\system32
(7/1/05 7:34:26 PM) Temp-Path: C:\DOCUME~1\Nathan\LOCALS~1\Temp\
(7/1/05 7:34:27 PM) Disinfection started
(7/1/05 7:34:27 PM) Bad-Dll(IEP): (not found)
(7/1/05 7:34:27 PM) Bad-Dll(IEP) in BHO: (not found)
(7/1/05 7:34:27 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:34:27 PM) UBF: 7 - UBB: 3 - UBR: 32
(7/1/05 7:34:27 PM) Bad IE-pages: (none)
(7/1/05 7:34:27 PM) Stealth-String not found
(7/1/05 7:34:27 PM) Not infected->END
(7/1/05 8:11:20 PM) SPSeHjFix started v1.1.2
(7/1/05 8:11:20 PM) OS: WinXP Service Pack 2 (5.1.2600)
(7/1/05 8:11:20 PM) Language: english
(7/1/05 8:11:20 PM) Win-Path: C:\WINDOWS
(7/1/05 8:11:20 PM) System-Path: C:\WINDOWS\system32
(7/1/05 8:11:20 PM) Temp-Path: C:\DOCUME~1\Nathan\LOCALS~1\Temp\
(7/1/05 8:11:23 PM) Disinfection started
(7/1/05 8:11:23 PM) Bad-Dll(IEP): (not found)
(7/1/05 8:11:23 PM) Bad-Dll(IEP) in BHO: (not found)
(7/1/05 8:11:23 PM) UBF: 7 - UBB: 3 - UBR: 31
(7/1/05 8:11:23 PM) UBF: 7 - UBB: 3 - UBR: 31
(7/1/05 8:11:23 PM) Bad IE-pages: (none)
(7/1/05 8:11:23 PM) Stealth-String not found
(7/1/05 8:11:23 PM) Not infected->END
HJT log:
Logfile of HijackThis v1.99.1
Scan saved at 9:17:13 PM, on 1/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Winamp\Winampa.exe
C:\progra~1\scansoft\paperp~1\pptd40nt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINDOWS\system32\ltmsg.exe
C:\Program Files\D-Link\DSL-200\dslstat.exe
C:\Program Files\D-Link\DSL-200\dslagent.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-au\msnappau.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Daily Weather Forecast\weather.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Microsoft Office\Office10\msoffice.exe
C:\Program Files\ewido\security suite\securitysuite.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Guest\My Documents\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [PaperPort PTD] c:\progra~1\scansoft\paperp~1\pptd40nt.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [LTWinModem1] ltmsg.exe 9
O4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\D-Link\DSL-200\dslstat.exe icon
O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\D-Link\DSL-200\dslagent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-au\msnappau.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Daily Weather Forecast] C:\Program Files\Daily Weather Forecast\weather.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Billminder.lnk = C:\Program Files\Quicken 2004\BILLMIND.EXE
O4 - Global Startup: Exif Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Quicken Startup.lnk = C:\Program Files\Quicken 2004\QWDLLS.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplane...DC_1_0_0_44.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by1fd.bay1.ho...es/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.mac...ash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{808AE83B-DC11-48E4-B2CD-607BBF4B0522}: NameServer = 192.168.0.50
O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\appvv32.exe" /s (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
--------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 11:17:14 PM, 12/07/2005
+ Report-Checksum: 8252BA4F
+ Scan result:
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP1\A0000001.prx:cnzjcw -> Trojan.Agent.em : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP1\A0000001.prx:zexwxq -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP1\A0000006.cfg:rsyuqe -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP1\A0000013.prx:cnzjcw -> Trojan.Agent.em : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP1\A0000013.prx:zexwxq -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP1\A0000027.cfg:rsyuqe -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP13\A0002118.exe -> Not-A-Virus.Hoax.Renos.a : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP14\A0002190.ini:vknvyh -> Trojan.Agent.bi : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP14\A0002190.ini:zzzrt -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP4\A0001232.ini:jwmacd -> Trojan.Agent.bi : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP4\A0001234.ini:svytu -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP4\A0001234.ini:ubvps -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP4\A0001234.ini:xoedd -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP4\A0001248.prx:cnzjcw -> Trojan.Agent.em : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP4\A0001248.prx:zexwxq -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP4\A0001259.scr:sviko -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP6\A0001378.INI:ymqrvb -> Trojan.Agent.em : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP6\A0001390.INI:ecojo -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP6\A0001390.INI:qjqzvb -> Trojan.Agent.em : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP6\A0001391.INI:ixhyql -> Trojan.Agent.em : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP6\A0001391.INI:nfgxrt -> Spyware.SearchPage : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP6\A0001392.INI:nytqia -> Trojan.Agent.em : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP6\A0001396.prx:cnzjcw -> Trojan.Agent.em : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP6\A0001396.prx:zexwxq -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001436.ini:jwmacd -> Trojan.Agent.bi : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001437.ini:ayrekw -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001437.ini:wyzpee -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001439.ini:yqoorg -> Trojan.Agent.bi : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001441.ini:svytu -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001441.ini:ubvps -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001441.ini:xoedd -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001468.cfg:ppdcss -> Spyware.SearchPage : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001468.cfg:swkavt -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001469.ini:favsfv -> Trojan.Agent.bi : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001469.ini:jwmacd -> Trojan.Agent.bi : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001470.ini:ayrekw -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001470.ini:qtylbi -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\System Volume Information\_restore{1EC2B210-3C3F-4A03-96E9-25E34444DB19}\RP7\A0001470.ini:wyzpee -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\album.ini:vknvyh -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\album.ini:zzzrt -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Application Compatibility Update.log:snjsgt -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Ascd_tmp.ini:etuhv -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ateyw.log:adeeuv -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\Blue Lace 16.bmp:mmtsg -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\bnrxz.log:ysjigp -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\brmx2001.ini:qtbnir -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\brmx2001.ini:yqoorg -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\Brpcfx.ini:svytu -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Brpcfx.ini:ubvps -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Brpcfx.ini:xoedd -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Coffee Bean.bmp:pgdnpf -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\dswplug.ini:xxzizf -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\Edofma.INI:mkytmt -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\flmbg.txt:qtanoc -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\fzrge.dat:itstqe -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\giqpu.log:wjuvgk -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\Gone Fishing.bmp:jdikoi -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\GsiSetup.log:pvqdjg -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\hacha.txt:bqnhw -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\iis6.log:hisore -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\imasc.log:rnjwxm -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\INTUIT.INI:jjibl -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\intuprof.ini:hgnpdm -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\INTURS.DAT:witiqf -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\jautoexp.dat:xsckp -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\KB810243.log:gljqjb -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\KB822603.log:cuaexi -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\KB822603.log:mldyj -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\KB822603.log:yjzwah -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\KB823182.log:irgaju -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\KB823182.log:lwhrkx -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB823980.log:ihzgvc -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\KB824141.log:asygle -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\KB826942.log:rrdrna -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\KB834707.log:gdhei -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB837001.log:ygtenf -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\KB839645.log:iftpf -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\KB839645.log:rzoafi -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\KB841873.log:gnfwyo -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\KB841873.log:isbplx -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\KB867282.log:lzexg -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB886185.log:yfsxz -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB887797.log:gljqjb -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\KB887797.log:otavx -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB893086.log:pfexxl -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\KB893803.log:magar -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\KB898458.log:uwxrka -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\kcobd.log:ahppuy -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\lndky.log:hkvgbr -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\MININU.LOG:dvdhgz -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\ModemLog_Lucent Win Modem #2.txt:uonle -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\msdfmap.ini:gructr -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\nsreg.dat:yrnpot -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\NuNinst.cfg:rsyuqe -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\n_nhvatv.dat:ivrzzm -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ocgen.log:bwjftp -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\ocgen.log:cvatkt -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\ocgen.log:euieke -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\ocgen.log:fqhqyf -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ODBC.INI:qtylbi -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ODBCINST.INI:ecojo -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\PhotoBase Screen Saver.scr:sviko -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\PhotoBase Screen Saver.scr:vaelva -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\pwdai.txt:kjejfk -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\Q309521.log:dcxoan -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\Q309521.log:yfyfoc -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\Q309691.log:llbuxg -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\Q309691.log:vyeie -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q321178.log:emmarq -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q322011.log:cnqdxx -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\Q322011.log:xgivkv -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\QDQICK.ini:favsfv -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\QDQICK.ini:jwmacd -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\QFN.ini:poxsod -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\QIII.INI:nfgxrt -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\qmjsz.dat:fseney -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\Qpv9.ini:ayrekw -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Qpv9.ini:qtylbi -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Qpv9.ini:wyzpee -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\Qpv9.ini:ysobyi -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\QUICKEN.INI:trkrmg -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\River Sumida.bmp:giqpui -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\River Sumida.bmp:vfdwoc -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\SchedLgU.Txt:yjbuok -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\setupact.log:suxcaj -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\Soap Bubbles.bmp:wubhsq -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\Soap Bubbles.bmp:xvyqpv -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\sqtqe.dat:ovumvb -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Sti_Trace.log:trwwwd -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\Sti_Trace.log:wlocc -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\SYMEVENT.LOG:dcziip -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\SYSTEM.INI:tulepu -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\System.vet:hnrvy -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\system32\HotWetLove-uninstall.exe -> Heuristic.Win32.Dialer : Cleaned with backup
C:\WINDOWS\tcwdl.log:dljffu -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\trrkw.log:orxrvz -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\tsoc.log:jvnwq -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\UNNMP.cfg:ppdcss -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\UNNMP.cfg:swkavt -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\uujnm.txt:trrkwo -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\vb.ini:rqfkt -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\wiaservc.log:crqdp -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\wiaservc.log:tgoqwk -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\wiaservc.log:xknerf -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\WIN$$.VIZ:hqzdc -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\WIN$$.VIZ:ydtvf -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Win.vet:kknmi -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Win.vet:qlgrlq -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\Win.vet:xotlvv -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Winamp.ini:jqbauo -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\WindowsShell.Manifest:amyxfa -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\WindowsUpdate.log:srcwz -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\wirof.txt:raznvm -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\wjgfn.txt:zxcgiq -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\wmsetup10.log:inpmcz -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\WMSysPrx.prx:zexwxq -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\xpsp1hfm.log:quvlex -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\yjbuo.log:qmonco -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\zikih.txt:inhsfy -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\zuxbo.dat:kpzomh -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:atwfhr -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:bvmpot -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:cgfanu -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:coltek -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:cqstor -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:crdlxc -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:crjuss -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:cuekjl -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:cvzdr -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:edxwwj -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:eoohfc -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:fvloqr -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:gpwcno -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:gqyqx -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:gwvnuj -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:gzrdl -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:gzrdls -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:hqzdcz -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:htfqba -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:iadzfo -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:iasdz -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:icqsfj -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:ifzydp -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:iphmoo -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:jywxzg -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:keyqgo -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:kknmi -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:mhyzaw -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:mxmsgm -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:obsczq -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:oitqg -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:ppgyao -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:qbxnlz -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:qliblj -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:qmonco -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:qyysjz -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:rfrely -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:rglfet -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:rkbbt -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:rymlka -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:scdow -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:scpow -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:tgkjzc -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:tgntfm -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:twwvje -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:uhwygu -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:vajiuw -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:vptiia -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:vvppew -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:vydbuz -> TrojanDownloader.Agent.oq : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:vyjbcb -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:whpvv -> TrojanDownloader.Agent.bc : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:xeqjql -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:xifzqo -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:yfsskj -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:yxgmhp -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:zapppb -> TrojanDownloader.Agent.ap : Cleaned with backup
C:\WINDOWS\{7B3CFCEF-26D6-41D5-93D7-235EB8FC8C70}.dat:zxcgiq -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:epdmht -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:hmgakg -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:ipstpk -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:iwwmyy -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:jqctpm -> Spyware.SearchPage : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:mlyyhi -> TrojanDownloader.Agent.bq : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:mpsgnj -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:nmpxdr -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:qwzoni -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:ulftny -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\{7b3cfcef-26d6-41d5-93d7-235eb8fc8c70}.dat0:xqvrjd -> Trojan.Agent.bi : Cleaned with backup
::Report End