[Trevuren]

Please try and pay a bit more attention to what I am posting to you as requests.

In my last post, this is what I wanted from you:

On the bottom portion of the window, you will see the lower panel where MWav is listing "infected items", please highlight everything in that lower panel and copy them by holding CTRL + C then paste it here. The whole log will be extremely BIG so there is no way to post the log. I just need the infected items list

I don't want the whole log, just the infected files list.


Trevuren

[Advertisements]

I understand what your saying about only wanting an infected log, but will it actually say that it is infected next to it because so far I have not seen anything like that? If it does say this, have I just not read far enough down to find it? thanks for your advice.

Edited by Summer_24, 26 July 2005 - 11:59 AM.

[Summer_24]

I understand what your saying about only wanting an infected log, but will it actually say that it is infected next to it because so far I have not seen anything like that? If it does say this, have I just not read far enough down to find it? thanks for your advice.

Edited by Summer_24, 26 July 2005 - 11:59 AM.

[Trevuren]

As the program is running, the program window is split into 2 parts. The bottom part is tited " Virus log Information"

You do not save it, your immediately highlight all the contents, copy, then paste the copied material into this thread.


Trevuren

[Summer_24]

Thanks for getting back to me so quickly. Im not trying to ask stupid or repetitive questions, but I am still a little bit confused and just want to make sure that I give you exactly what it is your needing to help me.
The top box shows what the program is scanning, and the bottom box shows what infected files it found, right? After the scan says it is complete, there is a box to the right that says something like "view log" and so i click on that, and it opens a notepad with all the information from the scan...which is what I was copying and pasting to you earlier. Although, I think that this notepad is showing the entire scan of appx 250,000 files and not just the 930 infected items that you are wanting. If what Im thinking is right, should I just scan through the whole notepad and see if it says anything about an infected virus...because last night I remember seeing a bunch of items towards the end of the scan that said "not tagged as a virus" and then some others that had the name of the infection & location, but did not say "not tagged as a virus."
Does this sound more like what you're needing me to find and paste here for you? Thanks again for all your help.

[Trevuren]

That sounds EXACTLY what I am looking for.

Take heart, we are nearly finished. This is just to find remnants because I don't want to leave even a little piece on your system. Maybe I'm too picky. One thing I do know is that if it was my system, I would want it CLEAN.

Regards,

Trevuren

[Summer_24]

Thanks soo much for all your help and great advice. Im at work right now, so I dont have access to my computer to paste the scan info here...but I will work on that again for you and post back tonight! Thanks again, and I totally agree with you about wanting it as clean as possible!
Summer

[Summer_24]

-------------------------------------------------------------------------------
KASPERSKY ANTI-VIRUS WEB SCANNER REPORT
Tuesday, July 26, 2005 22:38:16
Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600)
Kaspersky Anti-Virus Web Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 27/07/2005
Kaspersky Anti-Virus database records: 132180
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 138185
Number of viruses found: 79
Number of infected objects: 454
Number of suspicious objects: 1
Duration of the scan process: 5787 sec

Infected Object Name - Virus Name
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP25\A0004020.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP25\A0004039.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP26\A0004053.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP26\A0004067.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP26\A0004081.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP27\A0004093.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP27\A0004105.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004121.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004131.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004143.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004155.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004166.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004177.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004192.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004209.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004224.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004238.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004250.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004264.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004284.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004302.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004314.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004331.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004346.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004358.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005359.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005373.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005385.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005395.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005411.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005427.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005444.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005456.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005468.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005483.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005494.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005506.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005518.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005529.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005543.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP32\A0005567.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP32\A0005577.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP32\A0005591.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP33\A0005617.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP33\A0005628.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP33\A0005637.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP33\A0005650.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP33\A0005669.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP33\A0005683.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP33\A0005694.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP34\A0005714.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0005723.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0005732.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006043.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006153.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006168.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006181.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006210.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006229.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006243.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006277.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006299.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006311.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006330.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006352.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006382.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006404.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006417.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006431.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006457.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006472.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006492.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006512.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0006575.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0006598.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007622.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007637.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007655.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007672.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007696.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007720.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007737.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007758.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007771.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007791.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0007940.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0007954.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0007979.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0007996.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0009015.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP45\A0009033.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP45\A0009051.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP45\A0009071.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009088.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009103.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009129.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009153.sys Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009154.exe Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009155.sys Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009156.exe Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0010166.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0010185.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010206.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010229.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010248.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010262.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010279.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0011279.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0011300.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0011317.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012338.exe Infected: Trojan-Dropper.Win32.Small.wp
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012348.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012350.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012352.exe Infected: Trojan-Downloader.Win32.Agent.ho
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012353.exe Infected: Trojan-Clicker.Win32.Tiny.c
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012356.exe Infected: Trojan-Downloader.Win32.Agent.ho
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012358.exe Infected: Trojan-Proxy.Win32.Lager.m
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012383.exe Infected: Trojan-Dropper.Win32.Small.wp
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012387.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012395.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012396.exe Infected: Trojan-Downloader.Win32.Agent.ho
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012397.exe Infected: Trojan-Clicker.Win32.Tiny.c
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012400.exe Infected: Trojan-Downloader.Win32.Agent.ho
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012402.exe Infected: Trojan-Proxy.Win32.Lager.m
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015552.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015600.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015633.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015798.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015799.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015800.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015801.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015804.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015805.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015806.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015807.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015809.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015810.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015811.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015812.exe/archive comment Infected: Trojan.Win32.Favadd.f
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015812.exe Infected: Trojan.Win32.Favadd.f
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015813.exe Infected: Trojan-Downloader.Win32.Agent.ho
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015814.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0015836.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0016834.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0017834.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0018834.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0019834.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0019886.exe Infected: Trojan-Downloader.Win32.Small.ahg
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020014.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020016.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020077.exe Infected: Trojan-Downloader.Win32.Agent.ho
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020078.exe Infected: Trojan-Proxy.Win32.Lager.m
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020109.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020112.exe Infected: Trojan-Dropper.Win32.Small.wp
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020113.exe Infected: Trojan-Downloader.Win32.Agent.ho
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020114.exe Infected: Trojan-Clicker.Win32.Tiny.c
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020115.exe Infected: Trojan-Downloader.Win32.Small.awa
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020116.exe Infected: Trojan-Downloader.Win32.Small.aux
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020117.exe Infected: Trojan-Dropper.Win32.Small.wp
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020118.exe Infected: Trojan-Downloader.Win32.Small.atl
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020119.exe Infected: Trojan-Proxy.Win32.Lager.r
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020121.exe Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020128.dll Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020164.sys Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020165.sys Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020176.exe Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020190.exe Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020201.exe Infected: Trojan.Win32.Dialer.hh
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020211.dll Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020287.exe Infected: Trojan-Downloader.Win32.Delf.dg
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020351.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020371.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020383.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020428.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020431.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020539.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0020559.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0021559.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0022559.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0023559.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0023584.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0023617.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0023622.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0023634.dll Infected: Trojan-Downloader.Win32.Murlo.ar
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0024719.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0024728.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0025728.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0025740.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0026748.exe Infected: Backdoor.Win32.Padodor.az
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0026749.exe Infected: Trojan-Downloader.Win32.Small.avt
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0027756.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0027770.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0027784.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP50\A0027798.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP51\A0027817.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP51\A0027829.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP51\A0027831.sys Infected: Backdoor.Win32.Haxdoor.gen
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP51\A0027834.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP51\A0027918.dll Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP52\A0027957.dll Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030969.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030970.sys Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030971.exe Infected: Trojan-Downloader.Win32.Agent.ho
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030973.DLL Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030974.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030975.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030978.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030979.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030980.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030981.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030982.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030983.exe Infected: Trojan-Downloader.Win32.Apropo.k
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030984.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030986.exe Infected: Trojan-Downloader.Win32.Small.ahg
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030987.exe Infected: Trojan-Downloader.Win32.Small.atl
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030988.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030989.DLL Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030991.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030992.exe/data0002 Infected: Trojan.Win32.Septic.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030992.exe Infected: Trojan.Win32.Septic.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030993.exe Infected: Trojan-Downloader.Win32.Turown.g
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030994.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030995.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030996.qtd Infected: Trojan-Downloader.Win32.Small.atl
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030997.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030998.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0030999.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031000.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031001.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031002.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031003.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031004.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031005.exe Infected: Trojan-Downloader.Win32.Dyfuca.cj
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031007.sys Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031008.EXE Infected: Trojan-Dropper.Win32.Small.ht
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031009.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031010.DLL Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031011.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031012.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031014.dll Infected: Trojan-PSW.Win32.LdPinch.os
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031016.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031017.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031019.exe Infected: Trojan-PSW.Win32.LdPinch.os
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031020.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031021.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031022.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031023.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031024.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031026.exe Infected: Trojan-Dropper.Win32.Delf.z
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031028.DLL Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031029.exe Infected: Trojan-Downloader.Win32.Wintool.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031031.exe Infected: Trojan-Dropper.Win32.Small.qn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031033.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031035.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031037.DLL Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031038.DLL Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031039.exe Infected: Trojan-Downloader.Win32.Small.aux
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031041.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031042.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031044.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031046.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031047.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031049.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031050.exe Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031052.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031053.exe Infected: Trojan-Dropper.Win32.Small.ht
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031054.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031055.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031057.DLL Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031058.exe Infected: Trojan-Downloader.Win32.VB.em
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031059.exe Infected: Trojan.Win32.SecondThought.ai
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031061.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031062.dll Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031063.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031064.exe Infected: Trojan-Dropper.Win32.Vidro.p
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031065.exe Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031067.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031068.exe/trufkz.html Infected: Trojan-Clicker.JS.Linker.g
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031068.exe/x.bat Infected: Trojan.WinREG.LowZones.f
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031068.exe/kans.reg Infected: Trojan.WinREG.LowZones.f
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031068.exe/kansup.reg Infected: Trojan.WinREG.LowZones.f
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031068.exe Infected: Trojan.WinREG.LowZones.f
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031069.exe Infected: Trojan-Downloader.Win32.VB.em
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031070.qtd Infected: Trojan-Downloader.Win32.Small.awa
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031071.qtd Infected: Trojan-Dropper.Win32.Small.wp
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031072.qtd Infected: Trojan-Downloader.Win32.Small.aux
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031073.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031075.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031076.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031078.dll Infected: Trojan-Downloader.Win32.QDown.h
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031080.exe Infected: Trojan-Downloader.Win32.Delf.go
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031082.DLL Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031083.dll Infected: Trojan-Downloader.Win32.Agent.r
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031085.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031086.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031087.dll Infected: Backdoor.Win32.Agent.iw
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031088.DLL Infected: Trojan.Win32.WebSearch.i
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031090.exe Infected: Trojan-Downloader.Win32.Small.awa
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031091.exe Infected: Trojan-Proxy.Win32.Lager.m
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031092.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031094.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031095.DLL Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031096.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031097.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031098.dll Infected: Trojan-Downloader.Win32.Apropo.w
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031099.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031100.exe Infected: Trojan-Proxy.Win32.Lager.r
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031101.DLL Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031103.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031105.reg Infected: Trojan.WinREG.LowZones.f
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031107.exe Infected: Trojan-Dropper.Win32.Small.we
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031109.exe Infected: Trojan-Downloader.Win32.Wintool.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031110.exe Infected: Trojan-Downloader.Win32.OneClickNetSearch.g
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031111.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031113.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031114.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031116.exe Infected: Trojan.Win32.Small.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031118.dll Infected: Trojan-Downloader.Win32.Small.ajp
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031119.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031121.dll Infected: Backdoor.Win32.Haxdoor.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031123.exe Infected: Trojan-Downloader.Win32.Agent.ho
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031125.dll Infected: Trojan-Clicker.Win32.Redir.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031126.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031127.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031128.exe Infected: Trojan-Dropper.Win32.Agent.og
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031130.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031132.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031134.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031137.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031139.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031141.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031143.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031145.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031146.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031147.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031148.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031149.dll Infected: Trojan.Win32.Agent.co
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031150.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031151.exe/data0003 Infected: Trojan-Downloader.Win32.Keenval.e
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031151.exe/data0004 Infected: Trojan-Downloader.Win32.Keenval.e
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031151.exe Infected: Trojan-Downloader.Win32.Keenval.e
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031152.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031154.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031155.exe Infected: Trojan.Win32.Starter.a
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031156.exe Infected: Trojan-Dropper.Win32.Small.wv
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031158.exe Infected: Backdoor.Win32.Agent.iw
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031159.exe Infected: Trojan-Downloader.Win32.Small.gl
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031160.exe Infected: Trojan-Dropper.Win32.Small.wp
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031161.exe Infected: Trojan-Clicker.Win32.Tiny.c
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031162.exe Infected: Trojan-Dropper.Win32.Small.wp
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031163.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031165.dll Infected: Trojan-Downloader.Win32.QDown.h
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031167.dll Infected: Backdoor.Win32.Dumador.cn
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031170.dll Infected: Trojan-Proxy.Win32.Small.bk
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031172.exe Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031174.exe Infected: Trojan-Proxy.Win32.Sobit.e
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031176.exe Infected: Trojan-Proxy.Win32.Sobit.e
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031178.exe Infected: Trojan-Proxy.Win32.Sobit.e
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031180.dll Infected: Trojan-Clicker.Win32.Delf.r
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031182.dll Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031185.dll Infected: Trojan-Downloader.Win32.Agent.r
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031186.exe Infected: Trojan-Downloader.Win32.Dyfuca.ac
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031188.dll Infected: Trojan-Downloader.Win32.Agent.r
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031192.exe Infected: Trojan-Downloader.Win32.Delf.go
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031194.exe Infected: Trojan-Downloader.Win32.Apropo.u
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031198.exe Infected: Trojan.Win32.Revop.c
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031202.sys Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031204.exe Infected: Backdoor.Win32.Ruledor.c
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031206.exe Infected: Trojan-Downloader.Win32.Agent.ae
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031209.sys Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031210.exe/data0003 Infected: Trojan-Downloader.Win32.Keenval.e
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031210.exe/data0004 Infected: Trojan-Downloader.Win32.Keenval.e
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031210.exe Infected: Trojan-Downloader.Win32.Keenval.e
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031211.sys Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031213.exe Infected: Trojan-Downloader.Win32.Keenval
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031214.exe Infected: Trojan-Downloader.Win32.VB.em
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031215.exe Infected: Trojan-Downloader.Win32.QDown.m
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031217.exe Infected: Trojan-Downloader.Win32.VB.em
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031219.exe Infected: Trojan-Downloader.Win32.VB.em
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031222.exe Infected: Trojan.Win32.Kolweb.b
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031223.dll Infected: Trojan-Spy.Win32.Idly.c
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031225.exe Infected: Trojan-Downloader.Win32.VB.em
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031228.exe Infected: Trojan-Dropper.Win32.Delf.z
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031229.exe Infected: Trojan-Dropper.Win32.Delf.z
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031231.exe Infected: Backdoor.Win32.Haxdoor.de
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031234.exe Infected: Trojan-Dropper.Win32.Delf.z
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031236.exe Infected: Trojan.Win32.VB.kq
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031238.exe Infected: Trojan-Downloader.Win32.VB.em
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031240.exe Infected: Trojan-Downloader.Win32.Delf.go
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031242.dll Infected: Trojan-Downloader.Win32.Dyfuca.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031244.exe Infected: Trojan.Win32.Dialer.hh
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031246.exe Infected: Trojan.Win32.Dialer.ay
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031247.exe Infected: Trojan-Downloader.Win32.Dyfuca.bq
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031248.exe Infected: Trojan-Downloader.Win32.VB.em
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031249.exe Infected: Trojan-Downloader.Win32.Agent.ae
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031250.exe Infected: Trojan-Downloader.Win32.Agent.ae
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031252.exe Infected: Trojan-Downloader.Win32.Agent.ae
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031253.exe Infected: Trojan-Downloader.Win32.Agent.ae
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031254.exe Infected: Trojan-Downloader.Win32.Agent.ae
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031255.DLL Infected: Trojan.Win32.WebSearch.i
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031256.DLL Infected: Trojan.Win32.WebSearch.i
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031257.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031259.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031260.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031261.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031262.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031263.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031264.EXE Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031265.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031266.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031267.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031268.exe Infected: Trojan-Downloader.Win32.Keenval
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031269.dll Infected: Backdoor.Win32.Dumador.cy
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0031270.DLL Infected: Trojan.Win32.WebSearch.j
D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP5

[Trevuren]

None of these can harm you unless you "Restore" your computer.

They will all be cleaned out during our final cleanup procedures.

This is GOOD news.


If there are no more malware-related issues, please give me the OK and we will commence our final but essential cleanup procedures.


Trevuren

[Summer_24]

Mon Jul 25 20:42:40 2005 => ***** Scanning Registry and File system for Adware/Spyware *****
Mon Jul 25 20:42:40 2005 => Loading Spyware Signatures from External Database...
Mon Jul 25 20:42:47 2005 => Offending Folder D:\WINDOWS\System32\services present...
Mon Jul 25 20:42:47 2005 => Object "coolwebsearch Spyware/Adware" found in File System! Action Taken: No Action Taken.

Mon Jul 25 20:42:51 2005 => System found infected with isearch Spyware/Adware (patch.exe)! Action taken: No Action Taken.
Mon Jul 25 20:42:53 2005 => System found infected with roings Spyware/Adware (objsafe.tlb)! Action taken: No Action Taken.

Mon Jul 25 20:42:55 2005 => ***** Scanning Registry for errors created because of Adware/Spyware *****
Mon Jul 25 20:42:55 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "D:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx". Action Taken: No Action Taken.

Mon Jul 25 20:42:56 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\WINDOWS\System32\atl71.dll". Action Taken: No Action Taken.

Mon Jul 25 20:42:56 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx". Action Taken: No Action Taken.

Mon Jul 25 20:42:59 2005 => Entry "HKCR\CLSID\{03B1C4D9-BC71-8916-38AD-9DEA5D213614}" refers to invalid object "D:\WINDOWS\System32\rch.dll". Action Taken: No Action Taken.

Mon Jul 25 20:42:59 2005 => Entry "HKCR\CLSID\{0BC9BC01-54D4-4CCE-2B7D-955164314CD4}" refers to invalid object "D:\WINDOWS\System32\trf32.dll". Action Taken: No Action Taken.

Mon Jul 25 20:43:01 2005 => Entry "HKCR\CLSID\{203B1C4D9-BC71-8916-38AD-9DEA5D213614}" refers to invalid object "D:\WINDOWS\System32\bre.dll". Action Taken: No Action Taken.

Mon Jul 25 20:43:08 2005 => Entry "HKCR\CLSID\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}" refers to invalid object "fde.dll". Action Taken: No Action Taken.

Mon Jul 25 20:43:10 2005 => Entry "HKCR\CLSID\{9EFBF860-5685-11D3-AA3D-00C04F4C5275}" refers to invalid object "cdooff.dll". Action Taken: No Action Taken.

Mon Jul 25 20:43:12 2005 => Entry "HKCR\CLSID\{BC54B24C-5A97-4C19-9181-8B8A05B2E931}" refers to invalid object "D:\WINDOWS\System32\nsj6C.dll". Action Taken: No Action Taken.

Mon Jul 25 20:43:12 2005 => Entry "HKCR\CLSID\{BD9584EF-C28C-4F6D-8D49-0CEE3C0E442F}" refers to invalid object "D:\WINDOWS\System32\nsj6C.dll". Action Taken: No Action Taken.

Mon Jul 25 20:43:12 2005 => Entry "HKCR\CLSID\{BF231BE2-D7C9-406A-B047-58C3993C1E11}" refers to invalid object "vr_sys.dll". Action Taken: No Action Taken.

Mon Jul 25 20:43:13 2005 => Entry "HKCR\CLSID\{C7888681-1A83-4C14-B9A5-95F91240B44F}" refers to invalid object "D:\WINDOWS\System32\nsj6C.dll". Action Taken: No Action Taken.

Mon Jul 25 20:43:20 2005 => Entry "HKCR\btnetw.ohb" refers to invalid object "{9ADE0443-2AB2-4B23-A3F8-AC520773DE12}". Action Taken: No Action Taken.

Mon Jul 25 20:43:20 2005 => Entry "HKCR\btnetw.ohb.1" refers to invalid object "{9ADE0443-2AB2-4B23-A3F8-AC520773DE12}". Action Taken: No Action Taken.

Mon Jul 25 20:43:26 2005 => Entry "HKCR\LowSol.RichEditor" refers to invalid object "{F79A2C4B-8776-4ED7-8B2F-4786A4A3500A}". Action Taken: No Action Taken.

Mon Jul 25 20:43:26 2005 => Entry "HKCR\LowSol.RichEditor.1" refers to invalid object "{F79A2C4B-8776-4ED7-8B2F-4786A4A3500A}". Action Taken: No Action Taken.

Mon Jul 25 20:43:26 2005 => Entry "HKCR\MailFileAtt" refers to invalid object "{00020D05-0000-0000-C000-000000000046}". Action Taken: No Action Taken.

Mon Jul 25 20:43:26 2005 => Entry "HKCR\mapifvbx.object" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.

Mon Jul 25 20:43:26 2005 => Entry "HKCR\mapifvbx.object.1" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.

Mon Jul 25 20:43:28 2005 => Entry "HKCR\MiniBugTransporter.MiniBugTransporterX" refers to invalid object "{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C}". Action Taken: No Action Taken.

Mon Jul 25 20:43:28 2005 => Entry "HKCR\MiniBugTransporter.MiniBugTransporterX.1" refers to invalid object "{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C}". Action Taken: No Action Taken.

Mon Jul 25 20:43:32 2005 => Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.

Mon Jul 25 20:43:32 2005 => Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.

Mon Jul 25 20:43:36 2005 => Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.

Mon Jul 25 20:43:36 2005 => Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus001.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus002.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus003.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus004.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus005.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus006.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus007.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus008.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus009.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus010.avc
Mon Jul 25 20:45:59 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus011.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus012.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus013.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus014.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus015.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus016.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus017.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus018.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus019.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\virus020.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\worm001.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\worm002.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\worm003.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\worm004.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\worm005.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\worm006.avc
Mon Jul 25 20:46:00 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Bases_X\worm999.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj001.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj002.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj003.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj004.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj005.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj006.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj007.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj008.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj009.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj010.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj011.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj012.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj013.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj014.avc
Mon Jul 25 20:46:03 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj015.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj016.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj017.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj018.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj019.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj020.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj021.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj022.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj023.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj024.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj025.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj026.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj027.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj028.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj029.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\troj030.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp000.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp001.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp002.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp003.avc
Mon Jul 25 20:46:04 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp004.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp005.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp006.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp007.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp008.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp009.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp010.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp011.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp012.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp013.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp014.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp015.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp016.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp017.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp018.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp019.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp020.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp021.avc
Mon Jul 25 20:46:05 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp022.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp023.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp024.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\unp025.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus001.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus002.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus003.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus004.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus005.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus006.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus007.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus008.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus009.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus010.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus011.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus012.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus013.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus014.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus015.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus016.avc
Mon Jul 25 20:46:06 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus017.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus018.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus019.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\virus020.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\worm001.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\worm002.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\worm003.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\worm004.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\worm005.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\worm006.avc
Mon Jul 25 20:46:07 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\Download\worm999.avc

[Summer_24]

Mon Jul 25 20:46:14 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj001.avc
Mon Jul 25 20:46:14 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj002.avc
Mon Jul 25 20:46:14 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj003.avc
Mon Jul 25 20:46:14 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj004.avc
Mon Jul 25 20:46:14 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj005.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj006.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj007.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj008.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj009.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj010.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj011.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj012.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj013.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj014.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj015.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj016.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj017.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj018.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj019.avc
Mon Jul 25 20:46:15 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj020.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj021.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj022.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj023.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj024.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj025.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj026.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj027.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj028.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj029.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\troj030.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp000.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp001.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp002.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp003.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp004.avc
Mon Jul 25 20:46:16 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp005.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp006.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp007.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp008.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp009.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp010.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp011.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp012.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp013.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp014.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp015.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp016.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp017.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp018.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp019.avc
Mon Jul 25 20:46:17 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp020.avc
Mon Jul 25 20:46:18 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp021.avc
Mon Jul 25 20:46:18 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp022.avc
Mon Jul 25 20:46:18 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp023.avc
Mon Jul 25 20:46:18 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp024.avc
Mon Jul 25 20:46:18 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\unp025.avc
Mon Jul 25 20:46:18 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\viewtcp.exe
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\ViewTcp.lan
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\viewtcp.old
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus.avi
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus001.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus002.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus003.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus004.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus005.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus006.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus007.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus008.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus009.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus010.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus011.avc
Mon Jul 25 20:46:19 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus012.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus013.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus014.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus015.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus016.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus017.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus018.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus019.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\virus020.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\willywonka.bmp
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\WIN.PRO
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\worm001.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\worm002.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\worm003.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\worm004.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\worm005.avc
Mon Jul 25 20:46:20 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\worm006.avc
Mon Jul 25 20:46:21 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\Temp\worm999.avc
Mon Jul 25 20:46:38 2005 => Scanning File D:\DOCUME~1\Summer\LOCALS~1\TEMPOR~1\Content.IE5\NP5VZRYK\[bleep][1].jpg
Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:19 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\helpctr.exe
Mon Jul 25 21:14:19 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\hscupd.exe
Mon Jul 25 21:14:19 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ara\*.*
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ara\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ara\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:20 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\chs\*.*
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\chs\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\chs\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:20 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\cht\*.*
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\cht\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\cht\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:20 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\csy\*.*
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\csy\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\csy\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:20 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\dan\*.*
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\dan\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\dan\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:20 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\deu\*.*
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\deu\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\deu\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:20 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ell\*.*
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ell\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:20 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ell\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:21 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\esn\*.*
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\esn\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\esn\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:21 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\fin\*.*
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\fin\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\fin\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:21 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\fra\*.*
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\fra\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\fra\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:21 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\heb\*.*
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\heb\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\heb\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:21 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\hun\*.*
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\hun\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\hun\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:21 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ita\*.*
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ita\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ita\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:21 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\jpn\*.*
Mon Jul 25 21:14:21 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\jpn\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\jpn\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:22 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\kor\*.*
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\kor\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\kor\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:22 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\nld\*.*
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\nld\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\nld\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:22 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\nor\*.*
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\nor\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\nor\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:22 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\plk\*.*
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\plk\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\plk\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:22 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ptb\*.*
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ptb\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ptb\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:22 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ptg\*.*
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ptg\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ptg\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:22 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\rus\*.*
Mon Jul 25 21:14:22 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\rus\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:23 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\rus\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:23 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\sve\*.*
Mon Jul 25 21:14:23 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\sve\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:23 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\sve\hsc.system.scripts.common.js.cab
Mon Jul 25 21:14:23 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\trk\*.*
Mon Jul 25 21:14:23 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\trk\hsc.system.errors.connection.htm.cab
Mon Jul 25 21:14:23 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\trk\hsc.system.scripts.common.js.cab

[Summer_24]

Mon Jul 25 22:44:38 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP25\A0004020.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:40 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP25\A0004039.exe infected by "Mon Jul 25 22:44:42 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP26\A0004053.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:43 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP26\A0004067.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
on Jul 25 22:44:44 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP26\A0004081.exe infected bMon Jul 25 22:44:46 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP27\A0004093.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.y "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:47 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP27\A0004105.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:49 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004121.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:50 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004131.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:50 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004143.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:51 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004155.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:52 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004166.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:52 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004177.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:53 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004192.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:54 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP28\A0004209.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:57 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004224.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:58 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004238.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:58 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004250.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:44:59 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004264.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:01 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP29\A0004284.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:03 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004302.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.Mon Jul 25 22:45:04 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004314.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.Mon Jul 25 22:45:05 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004331.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.Mon Jul 25 22:45:06 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004346.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.

[Summer_24]

Mon Jul 25 22:45:06 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP30\A0004358.exe infected byMon Jul 25 22:45:09 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005359.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
"Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:10 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005373.exe infected by "Trojan.Win32Mon Jul 25 22:45:10 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005385.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken..Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:11 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005395.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:12 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005411.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:13 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005427.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:14 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005444.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:15 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005456.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken
Mon Jul 25 22:45:15 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005468.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:16 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005483.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:45:17 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP31\A0005494.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:12 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006043.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:22 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006153.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:23 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006168.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:24 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006181.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:25 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006210.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:26 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006229.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:27 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP36\A0006243.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.

[Summer_24]

Mon Jul 25 22:46:31 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006277.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:32 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006299.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:33 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006311.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:33 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006330.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:35 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006352.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:36 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006382.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.Mon Jul 25 22:46:38 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006404.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:39 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006417.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:40 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006431.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:42 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006457.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:43 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006472.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:44 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006492.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:46 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP37\A0006512.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:54 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0006575.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:56 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0006598.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:57 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007622.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:46:59 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007637.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:47:00 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007655.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:47:01 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007672.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:47:03 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007696.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:47:04 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007720.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:47:06 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007737.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:47:07 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007758.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:47:08 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007771.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:47:10 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP39\A0007791.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:47:59 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0007940.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:00 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0007954.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:02 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0007979.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:03 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0007996.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.

[Trevuren]

One more run at this, and that will be all. I amgoing to bed now.

Please follow the instructions provided, you may want to print out these instructions and use them as a reference.

• Please download ewido security suite it is a trial version of the program.
  • Install ewido security suite
  • When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
  • Launch ewido, there should be an icon on your desktop double-click it.
  • The program will prompt you to update click the OK button
  • The program will now go to the main screen
• You will need to update ewido to the latest definition files.
  • On the left hand side of the main screen click update
  • Click on Start
  • The update will start and a progress bar will show the updates being installed.
• Once the updates are installed do the following:
  • REBOOT into Safe Mode
  • Run EWIDO
  • Click on scanner
  • Click on Start Scan
  • Let the program scan the machine
  • While the scan is in progress you will be prompted to clean files, click OK
• Once the scan has completed, there will be a button located on the bottom of the screen named Save report
  • Click Save report
  • Save the report to your desktop
• Reboot your machine and post back a new HJT log and the ewido .txt log file you saved by using Add Reply

Regards,

Trevuren

[Summer_24]

Mon Jul 25 22:48:04 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP44\A0009015.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:07 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP45\A0009033.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:08 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP45\A0009051.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:10 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP45\A0009071.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:13 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009088.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:14 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009103.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:16 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009129.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:19 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009153.sys infected by "Trojan.Win32.Kolweb.b" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:19 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009154.exe infected by "Trojan.Win32.Kolweb.b" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:20 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009155.sys infected by "Trojan.Win32.Kolweb.b" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:21 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0009156.exe infected by "Trojan.Win32.Kolweb.b" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:22 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0010166.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:24 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP46\A0010185.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:27 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010206.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:29 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010229.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:31 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010248.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:32 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010262.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:33 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0010279.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:34 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0011279.exe infected by "Trojan.Win32.Starter.a" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:38 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012338.exe infected by "Trojan-Dropper.Win32.Small.wp" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:39 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012352.exe infected by "Trojan-Downloader.Win32.Agent.ho" Virus! Action Taken: No Action Taken.
Mon Jul 25 22:48:39 2005 => File D:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP47\A0012353.exe infected by "Trojan-Clicker.Win32.Tiny.c" Virus! Action Taken: No Action Taken.
Mon Jul 25 23:49:06 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:06 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\helpctr.exe
Mon Jul 25 23:49:06 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\hscupd.exe
Mon Jul 25 23:49:06 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ara\*.*
Mon Jul 25 23:49:06 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ara\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:06 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ara\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:06 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\chs\*.*
Mon Jul 25 23:49:06 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\chs\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:06 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\chs\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:06 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\cht\*.*
Mon Jul 25 23:49:06 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\cht\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\cht\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:07 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\csy\*.*
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\csy\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\csy\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:07 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\dan\*.*
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\dan\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\dan\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:07 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\deu\*.*
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\deu\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\deu\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:07 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ell\*.*
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ell\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ell\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:07 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\esn\*.*
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\esn\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\esn\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:07 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\fin\*.*
Mon Jul 25 23:49:07 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\fin\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\fin\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:08 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\fra\*.*
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\fra\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\fra\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:08 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\heb\*.*
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\heb\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\heb\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:08 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\hun\*.*
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\hun\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\hun\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:08 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ita\*.*
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ita\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ita\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:08 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\jpn\*.*
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\jpn\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\jpn\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:08 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\kor\*.*
Mon Jul 25 23:49:08 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\kor\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\kor\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:09 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\nld\*.*
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\nld\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\nld\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:09 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\nor\*.*
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\nor\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\nor\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:09 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\plk\*.*
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\plk\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\plk\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:09 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ptb\*.*
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ptb\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ptb\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:09 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\ptg\*.*
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ptg\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\ptg\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:09 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\rus\*.*
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\rus\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:09 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\rus\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:10 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\sve\*.*
Mon Jul 25 23:49:10 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\sve\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:10 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\sve\hsc.system.scripts.common.js.cab
Mon Jul 25 23:49:10 2005 => Scanning Folder: C:\WINDOWS\$xpsp1hfm$\KB840374\trk\*.*
Mon Jul 25 23:49:10 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\trk\hsc.system.errors.connection.htm.cab
Mon Jul 25 23:49:10 2005 => Scanning File C:\WINDOWS\$xpsp1hfm$\KB840374\trk\hsc.system.scripts.common.js.cab
Tue Jul 26 01:05:17 2005 => File C:\System Volume Information\_restore{0D0737F2-E949-48C3-8F86-4F2FABD8DFD7}\RP55\A0032289.exe infected by "Trojan-Downloader.Win32.Apropo.h" Virus! Action Taken: No Action Taken.


This is the last of the infected items that I found in the scan. I will do the Ewido scan and post the info you have requested back here tomorrow. Also, I am still receiving those pop ups from Messenger Service, and my computer seems to be running slowly since I first discovered that I had a virus on my computer. Do you think that once we do the final clean up it will begin to run faster again? Oh, and my desktop is still that blue screen with an icon downloaded to it that reads "Free XXX" underneath it.

Edited by Summer_24, 27 July 2005 - 12:26 AM.