Проблем с explorer.exe Win 2000

21 август 201016 г.

На една слаба машина с уиндоус 2000 процеса explorer.exe товари системата на 100%

Разглеждам в детайли какво става с помоща на process explorer в threads на процеса explorer.exe и виждам как щъкат около тридесет Start address с много гъзарски наименования, при всеки един от тях с по около три процента товари процесора, изчезват/появяват се... Кажете как да ги накажа :blink:

21 август 201016 г.

Здравейте, Xfirebg!

Следвайте следната инструкция за работа с OTL:

Изтеглете OTL.exe и го запазете на десктопа.
Стартирайте файла с двукратен клик на мишката.
Направете следните настройки:

060810113142_06.08.jpg

Под "Custom Scans/Fixes" с Copy/ Paste въведете изцяло следната информация от цитата по-долу (без думата Цитат):

netsvcs

msconfig

safebootminimal

safebootnetwork

activex

drivers32

%SYSTEMDRIVE%\*.exe

%systemroot%\*. /mp /s

%ALLUSERSPROFILE%\Application Data\*.

%ALLUSERSPROFILE%\Application Data\*.exe /s

%APPDATA%\*.

%APPDATA%\*.exe /s

/md5start

eventlog.dll

scecli.dll

netlogon.dll

cngaudit.dll

sceclt.dll

ntelogon.dll

logevent.dll

iaStor.sys

nvstor.sys

atapi.sys

beep.sys

IdeChnDr.sys

viasraid.sys

AGP440.sys

vaxscsi.sys

nvatabus.sys

viamraid.sys

nvata.sys

nvgts.sys

iastorv.sys

ViPrt.sys

eNetHook.dll

ahcix86.sys

ahcix86s.sys

KR10N.sys

nvstor32.sys

nvrd32.sys

explorer.exe

svchost.exe

userinit.exe

symmpi.sys

qmgr.dll

ws2_32.dll

proquota.exe

imm32.dll

kernel32.dll

ndis.sys

autochk.exe

spoolsv.exe

xmlprov.dll

ntmssvc.dll

mswsock.dll

ntfs.sys

tcpip.sys

termsrv.dll

sfcfiles.dll

st3shark.sys

srsvc.dll

adp3132.sys

mv61xx.sys

/md5stop

CREATERESTOREPOINT

%systemroot%\system32\*.dll /lockedfiles

%systemroot%\Tasks\*.job /lockedfiles

%systemroot%\system32\drivers\*.sys /lockedfiles

%systemroot%\System32\config\*.sav

%systemroot%\system32\drivers\*.sys /90

Натиснете маркираният в синьо бутон: .
Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt.
Прикачете в следващия си коментар (погледнете опцията "прикачени файлове", когато публикувате мнение) логовете от OTL: OTL.Txt, Extras.Txt.

2

23 август 201016 г.

Автор

Заповядайте! :bday19:

OTL.Txt

Extras.Txt

1

23 август 201016 г.

Ето какво следва:

Стартирайте пак OTL.exe и с Copy/ Paste под колонката Custom Scans/Fixes въведете изцяло скриптовия текст от цитата по-долу (без думата "Цитат"), като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта!

:OTL

MOD - C:\WINNT\Tasks\dEAXUPxQWEyAvpH4Pd3brcyYSHV.inf ()

MOD - C:\WINNT\Tasks\Ces5WqX3ApQMPmMbYZUxPYh.inf ()

MOD - C:\WINNT\system32\UadN5xYYC8FXprkCdzyMewN.inf ()

MOD - C:\WINNT\Downloaded Program Files\FMpxb5HupNvx7xMBG6ZNGbHWfQT.cur ()

MOD - C:\WINNT\system32\nWSDWJ9KSzcNsaTKtnSUwv8P7VU.inf ()

MOD - C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf ()

MOD - C:\WINNT\system32\JMq7bpeR4Xa8eV5ftCB.inf ()

MOD - C:\WINNT\system32\RXNK8eR3xW8KTCWBCGTbqm.inf ()

MOD - C:\WINNT\Tasks\Wfayv6njQnCsg.inf ()

MOD - C:\WINNT\Downloaded Program Files\WUstNjhyfQfpv8PQbC.cur ()

MOD - C:\WINNT\system32\A2CbFrBy28J6zdXNZgqCtJ6Ae.inf ()

MOD - C:\WINNT\system32\qzp3jTZCSfSh.dll ()

MOD - C:\WINNT\system32\BtmBAnd89jc9PsPq5EKNj.inf ()

MOD - C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf ()

MOD - C:\WINNT\Tasks\c2nH4numz9knY5zqnC.inf ()

MOD - C:\WINNT\system32\bWxJAeWKDxgRfhkaWEfA33C36nr.inf ()

MOD - C:\WINNT\system32\2exJW3dsaTgWrf5uAPadmHN.dll ()

MOD - C:\WINNT\system32\FsmBY3kmWnAG5gRbwGgU.inf ()

MOD - C:\WINNT\Fonts\A97CRaCB.fon ()

MOD - C:\WINNT\system32\08223B03.dll ()

MOD - C:\WINNT\system32\ujMhyGsS7tRV9gU2HHMkJcu7DPU.inf ()

MOD - C:\WINNT\system32\AMNCZw74h8gwd6CpYGkrZDy8.inf ()

MOD - C:\WINNT\Downloaded Program Files\SjRjQgREDp3P8B4rEEg.cur ()

MOD - C:\WINNT\system32\pwd4Xpm8KYzkcbqcaKT.inf ()

MOD - C:\WINNT\Tasks\yGfdVUegEQm9fhY5rnN.inf ()

MOD - C:\WINNT\system32\PERrGx5DkqSbQdwauCRQH.dll ()

MOD - C:\WINNT\Tasks\4H5HJTHFZkxrCpehBpx4TmR.inf ()

SRV - (tt) -- C:\WINNT\system32\lzys.exe ()

O18 - Protocol\Filter\Class Install Handler - No CLSID value found

O18 - Protocol\Filter\deflate - No CLSID value found

O18 - Protocol\Filter\gzip - No CLSID value found

O18 - Protocol\Filter\lzdhtml - No CLSID value found

O18 - Protocol\Filter\text/webviewhtml - No CLSID value found

O20 - AppInit_DLLs: (C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf) - C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf ()

O20 - AppInit_DLLs: (C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf) - C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf ()

O28 - HKLM ShellExecuteHooks: {012AA32F-36E6-405F-9F3F-588E0AA73FBB} - C:\WINNT\Tasks\Wfayv6njQnCsg.inf ()

O28 - HKLM ShellExecuteHooks: {05EDDA35-1E5B-4A77-8F68-99AB967CF632} - C:\WINNT\system32\bWxJAeWKDxgRfhkaWEfA33C36nr.inf ()

O28 - HKLM ShellExecuteHooks: {05FF273B-258B-432D-96B8-E3FE79CEEFB7} - C:\WINNT\system32\UadN5xYYC8FXprkCdzyMewN.inf ()

O28 - HKLM ShellExecuteHooks: {08223B03-1B38-4A33-A83A-A4D3CC1D6E4E} - C:\WINNT\system32\08223B03.dll ()

O28 - HKLM ShellExecuteHooks: {09FDF8F4-0F9E-4C84-9F0C-21A1143815E3} - C:\WINNT\system32\pwd4Xpm8KYzkcbqcaKT.inf ()

O28 - HKLM ShellExecuteHooks: {122B901E-493F-4AD9-BC69-7DE8C3E52FCC} - C:\WINNT\system32\122B901E.dll ()

O28 - HKLM ShellExecuteHooks: {1719B301-B494-4185-9379-242461F9CF02} - C:\WINNT\system32\BtmBAnd89jc9PsPq5EKNj.inf ()

O28 - HKLM ShellExecuteHooks: {23DA65D2-C696-4EE4-BEE8-B4841DEC3E30} - C:\WINNT\system32\ndxq9awMc.dll ()

O28 - HKLM ShellExecuteHooks: {32D1A17C-A0E9-4B05-AD83-A292B98CD824} - C:\WINNT\Tasks\dEAXUPxQWEyAvpH4Pd3brcyYSHV.inf ()

O28 - HKLM ShellExecuteHooks: {3373CD28-8C35-4A36-8569-672D8CA197F5} - C:\WINNT\Tasks\4H5HJTHFZkxrCpehBpx4TmR.inf ()

O28 - HKLM ShellExecuteHooks: {40A1B06F-7692-45D7-AC4E-094CBDE76B7C} - C:\WINNT\Downloaded Program Files\FMpxb5HupNvx7xMBG6ZNGbHWfQT.cur ()

O28 - HKLM ShellExecuteHooks: {4F5EEDE5-1687-49D2-8A17-FF0B454FB37B} - C:\WINNT\system32\qzp3jTZCSfSh.dll ()

O28 - HKLM ShellExecuteHooks: {51716C09-6B08-4CCF-B526-718E912C0573} - C:\WINNT\system32\PERrGx5DkqSbQdwauCRQH.dll ()

O28 - HKLM ShellExecuteHooks: {526EB425-7F56-4773-8D70-B8E45AA8E2B6} - C:\WINNT\Downloaded Program Files\WUstNjhyfQfpv8PQbC.cur ()

O28 - HKLM ShellExecuteHooks: {6049BC02-7EDA-4C41-B4AB-D5398607C39E} - C:\WINNT\Tasks\yGfdVUegEQm9fhY5rnN.inf ()

O28 - HKLM ShellExecuteHooks: {653AF1C9-91C1-49A1-89E6-5638858397D0} - C:\WINNT\system32\hv29AFBjE3zxAaK.inf ()

O28 - HKLM ShellExecuteHooks: {7198F428-77AC-4837-AFBE-1E0393575935} - C:\WINNT\system32\JMq7bpeR4Xa8eV5ftCB.inf ()

O28 - HKLM ShellExecuteHooks: {73208305-2703-405b-8721-27645ac9a140} - C:\WINNT\system32\nWSDWJ9KSzcNsaTKtnSUwv8P7VU.inf ()

O28 - HKLM ShellExecuteHooks: {74DA2FEC-F68F-4DC7-9A45-9174AC044427} - C:\WINNT\system32\z6FVkEF47huPzgaXee.inf ()

O28 - HKLM ShellExecuteHooks: {7AE7870E-5223-4BFF-BFB7-0827A749DF0C} - C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf ()

O28 - HKLM ShellExecuteHooks: {7CC109E5-B2FC-4FEE-AF04-74B2DCBD2540} - C:\WINNT\system32\ujMhyGsS7tRV9gU2HHMkJcu7DPU.inf ()

O28 - HKLM ShellExecuteHooks: {81BC0740-6E31-4BA4-81C8-EFF9ECEB3BA2} - C:\WINNT\system32\pEcFwPj48y6DADf87r.inf ()

O28 - HKLM ShellExecuteHooks: {827E2FB4-1047-43DE-848D-E12BB0C97AAB} - C:\WINNT\Tasks\SbrmpxjdCrgRAFhz4gHh.inf ()

O28 - HKLM ShellExecuteHooks: {84639C2D-CD75-4081-B515-329AFCECBF19} - C:\WINNT\Downloaded Program Files\SjRjQgREDp3P8B4rEEg.cur ()

O28 - HKLM ShellExecuteHooks: {8708994F-1758-4C2C-9A3F-FA22D6CCCB41} - C:\WINNT\Fonts\A97CRaCB.fon ()

O28 - HKLM ShellExecuteHooks: {87DE8A1A-96C5-4420-B222-EF998F697CE7} - C:\WINNT\system32\2exJW3dsaTgWrf5uAPadmHN.dll ()

O28 - HKLM ShellExecuteHooks: {8E6D4583-0FA1-41B2-BAAA-63352E6333CA} - C:\WINNT\system32\jY8sGUnWqbZb3x2BPhY.dll ()

O28 - HKLM ShellExecuteHooks: {B7F1BFDC-4B6C-4E2F-AF7A-638D2D47802C} - C:\WINNT\system32\FsmBY3kmWnAG5gRbwGgU.inf ()

O28 - HKLM ShellExecuteHooks: {B9D0F4D7-C809-4C27-9CB4-63201DFB3D05} - C:\WINNT\Tasks\c2nH4numz9knY5zqnC.inf ()

O28 - HKLM ShellExecuteHooks: {C3634CF6-FD22-4F3D-BBB4-AE36174A868C} - C:\WINNT\system32\A2CbFrBy28J6zdXNZgqCtJ6Ae.inf ()

O28 - HKLM ShellExecuteHooks: {C4BD9D5C-04CA-45E6-8539-98B07D99B6BC} - C:\WINNT\system32\AMNCZw74h8gwd6CpYGkrZDy8.inf ()

O28 - HKLM ShellExecuteHooks: {CD478099-014D-4B3A-A4BB-B518F1019BC7} - C:\WINNT\system32\SCEVFJRCmaB7.dll ()

O28 - HKLM ShellExecuteHooks: {DEA30687-C84E-4588-A761-5F2749455B2F} - C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf ()

O28 - HKLM ShellExecuteHooks: {F181F067-7046-4DCB-993F-200990736305} - C:\WINNT\Downloaded Program Files\sZaeAC74EzXJeVeJu6p.cur ()

O28 - HKLM ShellExecuteHooks: {F317E464-D4A4-4C79-82E8-CABADF738C7C} - C:\WINNT\system32\t9hdtMrwMeQcvYV3CMvhtNZpC.inf ()

O28 - HKLM ShellExecuteHooks: {F42FCDA4-76C1-4827-9BC3-1C95ADBD6035} - C:\WINNT\Tasks\Ces5WqX3ApQMPmMbYZUxPYh.inf ()

O28 - HKLM ShellExecuteHooks: {F8EC4F9D-F88B-41CF-BC8D-3DD1737B6451} - C:\WINNT\system32\RXNK8eR3xW8KTCWBCGTbqm.inf ()

[2010.08.20 10:59:40 | 000,131,072 | ---- | M] () -- C:\WINNT\System32\zbrsaiwx.exe

[2010.08.20 10:59:40 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\zfzgzsei.exe

[2010.08.20 10:59:40 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\zdwcb.exe

[2010.08.20 10:59:40 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\zlpfs.exe

[2010.08.20 10:59:40 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\zjdljfm.exe

[2010.08.20 10:59:40 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\zvqbvfpx.exe

[2010.08.20 10:59:40 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\zlovrm.exe

[2010.08.20 10:59:40 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\zejn.exe

[2010.08.20 10:59:40 | 000,034,816 | ---- | M] () -- C:\WINNT\System32\ziohyyn.exe

[2010.08.20 10:59:39 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\yooidg.exe

[2010.08.20 10:59:39 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\yokwcsyk.exe

[2010.08.20 10:59:39 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\ytukodw.exe

[2010.08.20 10:59:39 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\yonb.exe

[2010.08.20 10:59:39 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\yzmmr.exe

[2010.08.20 10:59:39 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\yuyus.exe

[2010.08.20 10:59:39 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\yuxceqye.exe

[2010.08.20 10:59:39 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\yogbsav.exe

[2010.08.20 10:59:39 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\ytnedta.exe

[2010.08.20 10:59:38 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\xtjajw.exe

[2010.08.20 10:59:38 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\yarf.exe

[2010.08.20 10:59:38 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\xqmitj.exe

[2010.08.20 10:59:38 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\xuvnjed.exe

[2010.08.20 10:59:38 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\xtwu.exe

[2010.08.20 10:59:38 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\xruk.exe

[2010.08.20 10:59:38 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\yhcwbt.exe

[2010.08.20 10:59:38 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\xvynyncd.exe

[2010.08.20 10:59:38 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\xsdypbkr.exe

[2010.08.20 10:59:38 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\xtshkbc.exe

[2010.08.20 10:59:37 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\xgxj.exe

[2010.08.20 10:59:37 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\xidqxak.exe

[2010.08.20 10:59:37 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\xhvlloxs.exe

[2010.08.20 10:59:37 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\xqjidh.exe

[2010.08.20 10:59:37 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\xerpzi.exe

[2010.08.20 10:59:37 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\xdxrtdbc.exe

[2010.08.20 10:59:37 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\xldurvv.exe

[2010.08.20 10:59:37 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\xjigv.exe

[2010.08.20 10:59:36 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\wxni.exe

[2010.08.20 10:59:35 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\wwhxeadg.exe

[2010.08.20 10:59:35 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\wvmfnfg.exe

[2010.08.20 10:59:35 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\wtnqqr.exe

[2010.08.20 10:59:35 | 000,040,022 | ---- | M] () -- C:\WINNT\System32\wshipv4.dll

[2010.08.20 10:59:35 | 000,035,328 | ---- | M] () -- C:\WINNT\System32\wwkdccwm.exe

[2010.08.20 10:59:34 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\wkzi.exe

[2010.08.20 10:59:34 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\wpemufm.exe

[2010.08.20 10:59:34 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\wmoyiex.exe

[2010.08.20 10:59:34 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\wrxmboej.exe

[2010.08.20 10:59:34 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\wmwndp.exe

[2010.08.20 10:59:33 | 000,131,072 | ---- | M] () -- C:\WINNT\System32\wkmh.exe

[2010.08.20 10:59:33 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\wjatoa.exe

[2010.08.20 10:59:33 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\wirp.exe

[2010.08.20 10:59:33 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\wiopsnkb.exe

[2010.08.20 10:59:21 | 000,069,120 | ---- | M] () -- C:\WINNT\System32\wgwzi.exe

[2010.08.20 10:59:17 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\vyzfx.exe

[2010.08.20 10:59:16 | 000,144,434 | ---- | M] () -- C:\WINNT\System32\viifqd.exe

[2010.08.20 10:59:16 | 000,131,072 | ---- | M] () -- C:\WINNT\System32\veupirum.exe

[2010.08.20 10:59:16 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\vgnto.exe

[2010.08.20 10:59:16 | 000,067,584 | ---- | M] () -- C:\WINNT\System32\vhwf.exe

[2010.08.20 10:59:16 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\vluhfq.exe

[2010.08.20 10:59:16 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\vlkczgw.exe

[2010.08.20 10:59:16 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\vkrfj.exe

[2010.08.20 10:59:16 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\vraaf.exe

[2010.08.20 10:59:16 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\vvspxv.exe

[2010.08.20 10:59:15 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\vclsp.exe

[2010.08.20 10:59:15 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\utfn.exe

[2010.08.20 10:59:15 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\vddka.exe

[2010.08.20 10:59:15 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\uwpuu.exe

[2010.08.20 10:59:15 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\uumqhple.exe

[2010.08.20 10:59:15 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\uwumloe.exe

[2010.08.20 10:59:15 | 000,034,816 | ---- | M] () -- C:\WINNT\System32\uxtws.exe

[2010.08.20 10:58:54 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\urqelol.exe

[2010.08.20 10:58:53 | 000,145,408 | ---- | M] () -- C:\WINNT\System32\umyf.exe

[2010.08.20 10:58:52 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\ulru.exe

[2010.08.20 10:58:52 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\ufxmsovq.exe

[2010.08.20 10:58:52 | 000,130,048 | ---- | M] () -- C:\WINNT\System32\uktjuvqm.exe

[2010.08.20 10:58:52 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\ulrc.exe

[2010.08.20 10:58:52 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\ukilgiuh.exe

[2010.08.20 10:58:52 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\ulyyzx.exe

[2010.08.20 10:58:52 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\uhsuk.exe

[2010.08.20 10:58:52 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\ufywtysa.exe

[2010.08.20 10:58:51 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\tubr.exe

[2010.08.20 10:58:51 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\ubxx.exe

[2010.08.20 10:58:51 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\ubcjjzyu.exe

[2010.08.20 10:58:51 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\txydtkoi.exe

[2010.08.20 10:58:51 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\tved.exe

[2010.08.20 10:58:51 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\uevkest.exe

[2010.08.20 10:58:51 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\uetbftx.exe

[2010.08.20 10:58:51 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\tydxl.exe

[2010.08.20 10:58:50 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\truvh.exe

[2010.08.20 10:58:50 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\tsangizt.exe

[2010.08.20 10:58:49 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\tpyejci.exe

[2010.08.20 10:58:49 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\tntnayol.exe

[2010.08.20 10:58:49 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\tnfdxp.exe

[2010.08.20 10:58:49 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\tmdpnths.exe

[2010.08.20 10:58:49 | 000,050,688 | ---- | M] () -- C:\WINNT\System32\tphdeqpx.exe

[2010.08.20 10:58:49 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\tqnds.exe

[2010.08.20 10:58:47 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\tkqo.exe

[2010.08.20 10:58:47 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\tlbkjuo.exe

[2010.08.20 10:58:47 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\tjtvmva.exe

[2010.08.20 10:58:47 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\tizy.exe

[2010.08.20 10:58:47 | 000,034,816 | ---- | M] () -- C:\WINNT\System32\tituvmuk.exe

[2010.08.20 10:58:46 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\thodymf.exe

[2010.08.20 10:58:46 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\tfclrmbc.exe

[2010.08.20 10:58:46 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\tghmktdu.exe

[2010.08.20 10:58:43 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\taljasme.exe

[2010.08.20 10:58:43 | 000,086,016 | ---- | M] () -- C:\WINNT\System32\t320067.dll

[2010.08.20 10:58:43 | 000,071,168 | ---- | M] () -- C:\WINNT\System32\t322048.dll

[2010.08.20 10:58:42 | 000,443,913 | ---- | M] () -- C:\WINNT\System32\sxbfqvz.exe

[2010.08.20 10:58:42 | 000,144,434 | ---- | M] () -- C:\WINNT\System32\suzgue.exe

[2010.08.20 10:58:42 | 000,067,584 | ---- | M] () -- C:\WINNT\System32\sydmlm.exe

[2010.08.20 10:58:42 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\sufvl.exe

[2010.08.20 10:58:42 | 000,016,384 | ---- | M] () -- C:\svohost.exe

[2010.08.20 10:58:41 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\spnk.exe

[2010.08.20 10:58:41 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\soyxywp.exe

[2010.08.20 10:58:41 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\sqevm.exe

[2010.08.20 10:58:41 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\sreqsu.exe

[2010.08.20 10:58:41 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\sqvfiayw.exe

[2010.08.20 10:58:41 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\stdm.exe

[2010.08.20 10:58:41 | 000,034,816 | ---- | M] () -- C:\WINNT\System32\spheyp.exe

[2010.08.20 10:58:40 | 000,145,408 | ---- | M] () -- C:\WINNT\System32\smrx.exe

[2010.08.20 10:58:40 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\slqniq.exe

[2010.08.20 10:58:39 | 000,067,584 | ---- | M] () -- C:\WINNT\System32\sgbngs.exe

[2010.08.20 10:58:38 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\sehwqkd.exe

[2010.08.20 10:58:38 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\sfhkvcwv.exe

[2010.08.20 10:58:35 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\scvlgfu.exe

[2010.08.20 10:58:35 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\sdphnrv.exe

[2010.08.20 10:58:34 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\ruukbst.exe

[2010.08.20 10:58:34 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\saiuvl.exe

[2010.08.20 10:58:34 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\rwagru.exe

[2010.08.20 10:58:34 | 000,069,120 | ---- | M] () -- C:\WINNT\System32\sbyi.exe

[2010.08.20 10:58:34 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\rxzeoy.exe

[2010.08.20 10:58:34 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\rzqih.exe

[2010.08.20 10:58:33 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\rtmg.exe

[2010.08.20 10:58:32 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\rrkgot.exe

[2010.08.20 10:58:32 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\rsgohiaz.exe

[2010.08.20 10:58:32 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\rqiirj.exe

[2010.08.20 10:58:32 | 000,035,328 | ---- | M] () -- C:\WINNT\System32\rqqivlmi.exe

[2010.08.20 10:58:31 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\roaqqch.exe

[2010.08.20 10:58:30 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\riiovwjw.exe

[2010.08.20 10:58:30 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\riwwniv.exe

[2010.08.20 10:58:30 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\reptfyl.exe

[2010.08.20 10:58:30 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\rfmwc.exe

[2010.08.20 10:58:28 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\rebexp.exe

[2010.08.20 10:58:27 | 000,144,434 | ---- | M] () -- C:\WINNT\System32\rbjjjrag.exe

[2010.08.20 10:58:27 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\rdeezzw.exe

[2010.08.20 10:58:27 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\reayv.exe

[2010.08.20 10:58:27 | 000,034,816 | ---- | M] () -- C:\WINNT\System32\rbvnr.exe

[2010.08.20 10:58:26 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\qfhxufs.exe

[2010.08.20 10:58:26 | 000,131,072 | ---- | M] () -- C:\WINNT\System32\qjqdc.exe

[2010.08.20 10:58:26 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\qouuzrh.exe

[2010.08.20 10:58:26 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\qsutu.exe

[2010.08.20 10:58:26 | 000,035,328 | ---- | M] () -- C:\WINNT\System32\qzohx.exe

[2010.08.20 10:58:26 | 000,017,920 | ---- | M] () -- C:\WINNT\System32\qt-dx3.dll

[2010.08.20 10:58:25 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\qclb.exe

[2010.08.20 10:58:25 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\pxjty.exe

[2010.08.20 10:58:25 | 000,067,584 | ---- | M] () -- C:\WINNT\System32\pzqetwm.exe

[2010.08.20 10:58:25 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\pvmapost.exe

[2010.08.20 10:58:25 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\qboff.exe

[2010.08.20 10:58:25 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\pvtv.exe

[2010.08.20 10:58:24 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\prjs.exe

[2010.08.20 10:58:23 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\pqkb.exe

[2010.08.20 10:58:22 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\ppjgbbio.exe

[2010.08.20 10:58:18 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\pojg.exe

[2010.08.20 10:58:18 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\pofzkkh.exe

[2010.08.20 10:58:18 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\pivu.exe

[2010.08.20 10:58:18 | 000,069,120 | ---- | M] () -- C:\WINNT\System32\pkuzh.exe

[2010.08.20 10:58:18 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\pmagbh.exe

[2010.08.20 10:58:18 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\pjexk.exe

[2010.08.20 10:58:16 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\pifjm.exe

[2010.08.20 10:58:16 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\oziy.exe

[2010.08.20 10:58:16 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\pepdyw.exe

[2010.08.20 10:58:16 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\phgrlt.exe

[2010.08.20 10:58:16 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\pghe.exe

[2010.08.20 10:58:16 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\pdxaulul.exe

[2010.08.20 10:58:15 | 000,145,920 | ---- | M] () -- C:\WINNT\System32\outqwn.exe

[2010.08.20 10:58:15 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\oywulx.exe

[2010.08.20 10:58:15 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\oyxrq.exe

[2010.08.20 10:58:15 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\oxrctt.exe

[2010.08.20 10:58:15 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\owtkfbx.exe

[2010.08.20 10:58:14 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\oushg.exe

[2010.08.20 10:58:11 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\opjr.exe

[2010.08.20 10:58:11 | 000,067,584 | ---- | M] () -- C:\WINNT\System32\opugclis.exe

[2010.08.20 10:58:11 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\okxtcv.exe

[2010.08.20 10:58:11 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\okdsjm.exe

[2010.08.20 10:58:11 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\olqlgmk.exe

[2010.08.20 10:58:11 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\oejv.exe

[2010.08.20 10:58:11 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\oiswd.exe

[2010.08.20 10:58:11 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\oqvfktkp.exe

[2010.08.20 10:58:11 | 000,028,672 | ---- | M] () -- C:\WINNT\System32\Olimpk.dll

[2010.08.20 10:58:10 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\obiv.exe

[2010.08.20 10:58:10 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\nwqxdhl.exe

[2010.08.20 10:58:10 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\nwct.exe

[2010.08.20 10:58:10 | 000,069,120 | ---- | M] () -- C:\WINNT\System32\nzczqnji.exe

[2010.08.20 10:58:10 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\ocovibm.exe

[2010.08.20 10:58:10 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\nzjmxcod.exe

[2010.08.20 10:58:10 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\nzoznqv.exe

[2010.08.20 10:58:09 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\ntkv.exe

[2010.08.20 10:58:05 | 000,069,120 | ---- | M] () -- C:\WINNT\System32\nrmjolw.exe

[2010.08.20 10:58:05 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\nsmcsl.exe

[2010.08.20 10:58:02 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\npyghsdw.exe

[2010.08.20 10:58:02 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\njcjm.exe

[2010.08.20 10:58:02 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\nmsew.exe

[2010.08.20 10:58:02 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\ngnjnfim.exe

[2010.08.20 10:58:02 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\nfpirkhp.exe

[2010.08.20 10:58:00 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\nbhfe.exe

[2010.08.20 10:58:00 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\ndtfvns.exe

[2010.08.20 10:58:00 | 000,035,328 | ---- | M] () -- C:\WINNT\System32\nbujs.exe

[2010.08.20 10:57:59 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\mzojkj.exe

[2010.08.20 10:57:59 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\mwvinht.exe

[2010.08.20 10:57:58 | 000,024,625 | ---- | M] (Matrix) -- C:\WINNT\MSVB50CHS.dll

[2010.08.20 10:57:56 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\msczwi.exe

[2010.08.20 10:57:54 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\moocveww.exe

[2010.08.20 10:57:54 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\momo.exe

[2010.08.20 10:57:54 | 000,035,328 | ---- | M] () -- C:\WINNT\System32\moeuhwc.exe

[2010.08.20 10:57:54 | 000,027,648 | ---- | M] () -- C:\MPKrnl.exe

[2010.08.20 10:57:54 | 000,020,480 | ---- | M] () -- C:\WINNT\MPKrnl.dll

[2010.08.20 10:57:51 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\mlxcwcis.exe

[2010.08.20 10:57:50 | 000,144,434 | ---- | M] () -- C:\WINNT\System32\mgrmfdw.exe

[2010.08.20 10:57:50 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\mczzp.exe

[2010.08.20 10:57:50 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\mlawzzqj.exe

[2010.08.20 10:57:50 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\mfed.exe

[2010.08.20 10:57:50 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\mlqpypm.exe

[2010.08.20 10:57:50 | 000,010,240 | ---- | M] () -- C:\WINNT\MKMKrnl.dll

[2010.08.20 10:57:49 | 000,145,408 | ---- | M] () -- C:\WINNT\System32\lssas.exe

[2010.08.20 10:57:49 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\lwsaqbg.exe

[2010.08.20 10:57:49 | 000,050,688 | ---- | M] () -- C:\WINNT\System32\maln.exe

[2010.08.20 10:57:49 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\lvurk.exe

[2010.08.20 10:57:49 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\luxh.exe

[2010.08.20 10:57:49 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\lutvmi.exe

[2010.08.20 10:57:48 | 000,146,944 | ---- | M] () -- C:\WINNT\System32\logon.exe

[2010.08.20 10:57:48 | 000,131,072 | ---- | M] () -- C:\WINNT\System32\lrpw.exe

[2010.08.20 10:57:48 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\lqdxx.exe

[2010.08.20 10:57:48 | 000,010,240 | ---- | M] () -- C:\WINNT\lpk.dll

[2010.08.20 10:57:47 | 000,144,434 | ---- | M] () -- C:\WINNT\System32\kzzsuxpa.exe

[2010.08.20 10:57:47 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\llgvsq.exe

[2010.08.20 10:57:47 | 000,069,120 | ---- | M] () -- C:\WINNT\System32\lgimir.exe

[2010.08.20 10:57:47 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\ljzga.exe

[2010.08.20 10:57:47 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\lhyfdtsx.exe

[2010.08.20 10:57:47 | 000,035,328 | ---- | M] () -- C:\WINNT\System32\lfnxg.exe

[2010.08.20 10:57:47 | 000,028,672 | ---- | M] () -- C:\WINNT\System32\Lecomd.dll

[2010.08.20 10:57:46 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\kqkubhdh.exe

[2010.08.20 10:57:46 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\kwchfr.exe

[2010.08.20 10:57:46 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\kpqmner.exe

[2010.08.20 10:57:46 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\kpvkoww.exe

[2010.08.20 10:57:46 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\ksjng.exe

[2010.08.20 10:57:46 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\kpirgoso.exe

[2010.08.20 10:57:45 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\koyss.exe

[2010.08.20 10:57:45 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\kpihpco.exe

[2010.08.20 10:57:44 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\khoduc.exe

[2010.08.20 10:57:44 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\koihgr.exe

[2010.08.20 10:57:44 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\khsb.exe

[2010.08.20 10:57:43 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\kfaee.exe

[2010.08.20 10:57:43 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\kbdknpdx.exe

[2010.08.20 10:57:43 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\kcueui.exe

[2010.08.20 10:57:43 | 000,004,608 | ---- | M] () -- C:\WINNT\System32\Kance.dll

[2010.08.20 10:57:42 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\jwolj.exe

[2010.08.20 10:57:42 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\jzjh.exe

[2010.08.20 10:57:42 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\juemn.exe

[2010.08.20 10:57:42 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\jrdq.exe

[2010.08.20 10:57:42 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\jqzyni.exe

[2010.08.20 10:57:42 | 000,035,328 | ---- | M] () -- C:\WINNT\System32\jsnikfuv.exe

[2010.08.20 10:57:41 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\jlwo.exe

[2010.08.20 10:57:41 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\iwwsd.exe

[2010.08.20 10:57:41 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\jqyz.exe

[2010.08.20 10:57:41 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\jodzprcr.exe

[2010.08.20 10:57:41 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\jeidusa.exe

[2010.08.20 10:57:41 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\ixwgkg.exe

[2010.08.20 10:57:41 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\jqxkxstz.exe

[2010.08.20 10:57:41 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\ixrbhnsj.exe

[2010.08.20 10:57:41 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\jpicgjs.exe

[2010.08.20 10:57:40 | 000,133,120 | ---- | M] () -- C:\WINNT\System32\iwwmfew.exe

[2010.08.20 10:57:40 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\iskg.exe

[2010.08.20 10:57:40 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\isbm.exe

[2010.08.20 10:57:37 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\ijyp.exe

[2010.08.20 10:57:36 | 000,443,913 | ---- | M] () -- C:\WINNT\System32\ihakn.exe

[2010.08.20 10:57:36 | 000,069,120 | ---- | M] () -- C:\WINNT\System32\hzofcwpw.exe

[2010.08.20 10:57:36 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\iblr.exe

[2010.08.20 10:57:36 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\igkbynw.exe

[2010.08.20 10:57:35 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\hwhbzi.exe

[2010.08.20 10:57:35 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\hqekvx.exe

[2010.08.20 10:57:34 | 000,130,048 | ---- | M] () -- C:\WINNT\System32\hjioi.exe

[2010.08.20 10:57:34 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\hmkd.exe

[2010.08.20 10:57:33 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\gzopudi.exe

[2010.08.20 10:57:33 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\gusvzprp.exe

[2010.08.20 10:57:33 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\gzlyfh.exe

[2010.08.20 10:57:32 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\grlgw.exe

[2010.08.20 10:57:32 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\gqjsl.exe

[2010.08.20 10:57:32 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\gqxqdxlr.exe

[2010.08.20 10:57:31 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\gijvakfk.exe

[2010.08.20 10:57:31 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\gopprczl.exe

[2010.08.20 10:57:31 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\glag.exe

[2010.08.20 10:57:30 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\fxzjczlc.exe

[2010.08.20 10:57:30 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\geye.exe

[2010.08.20 10:57:30 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\gatvti.exe

[2010.08.20 10:57:30 | 000,069,120 | ---- | M] () -- C:\WINNT\System32\gdbvn.exe

[2010.08.20 10:57:30 | 000,067,584 | ---- | M] () -- C:\WINNT\System32\fymvaama.exe

[2010.08.20 10:57:30 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\fxycks.exe

[2010.08.20 10:57:29 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\fnlfqs.exe

[2010.08.20 10:57:29 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\fmdukzpb.exe

[2010.08.20 10:57:29 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\frogtnbv.exe

[2010.08.20 10:57:29 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\fmlsev.exe

[2010.08.20 10:57:28 | 000,144,434 | ---- | M] () -- C:\WINNT\System32\firewall.exe

[2010.08.20 10:57:28 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\fjukur.exe

[2010.08.20 10:57:28 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\fjfllemk.exe

[2010.08.20 10:57:28 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\fipuompl.exe

[2010.08.20 10:57:28 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\fkmqhn.exe

[2010.08.20 10:57:27 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\eykuwgeb.exe

[2010.08.20 10:57:27 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\fdmguva.exe

[2010.08.20 10:57:27 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\fahp.exe

[2010.08.20 10:57:27 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\fgrpf.exe

[2010.08.20 10:57:27 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\feflqvma.exe

[2010.08.20 10:57:27 | 000,000,068 | ---- | M] () -- C:\ff.bat

[2010.08.20 10:57:15 | 000,066,048 | ---- | M] () -- C:\WINNT\System32\elvgz.exe

[2010.08.20 10:57:15 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\erfczof.exe

[2010.08.20 10:57:15 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\enghitm.exe

[2010.08.20 10:57:15 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\epglmoga.exe

[2010.08.20 10:57:14 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\ejmzy.exe

[2010.08.20 10:57:14 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\egzhx.exe

[2010.08.20 10:57:14 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\eeojslga.exe

[2010.08.20 10:57:10 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\ebnwd.exe

[2010.08.20 10:57:10 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\ecqdznqc.exe

[2010.08.20 10:57:10 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\ecca.exe

[2010.08.20 10:57:09 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\dwsu.exe

[2010.08.20 10:57:08 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\dtduls.exe

[2010.08.20 10:57:08 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\drnqzxhc.exe

[2010.08.20 10:57:08 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\dqjuoc.exe

[2010.08.20 10:57:08 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\dszs.exe

[2010.08.20 10:57:07 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\dncaz.exe

[2010.08.20 10:57:07 | 000,072,274 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Dns32.sys

[2010.08.20 10:57:07 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\dnnrbp.exe

[2010.08.20 10:57:06 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\djfzf.exe

[2010.08.20 10:57:05 | 000,002,080 | ---- | M] () -- C:\WINNT\System32\drivers\dHook.sys

[2010.08.20 10:57:04 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\dffmdjzn.exe

[2010.08.20 10:57:04 | 000,006,592 | ---- | M] () -- C:\WINNT\System32\delksuser.dll

[2010.08.20 10:56:59 | 000,034,816 | ---- | M] () -- C:\WINNT\System32\dboogzo.exe

[2010.08.20 10:56:58 | 000,130,048 | ---- | M] () -- C:\WINNT\System32\csrs.exe

[2010.08.20 10:56:58 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\cyfwtzez.exe

[2010.08.20 10:56:58 | 000,073,330 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Dbg32.Sys

[2010.08.20 10:56:58 | 000,073,330 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Dbg16.Sys

[2010.08.20 10:56:58 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\cstquqp.exe

[2010.08.20 10:56:58 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\cwmv.exe

[2010.08.20 10:56:57 | 000,040,448 | ---- | M] () -- C:\WINNT\System32\cpuet.exe

[2010.08.20 10:56:55 | 000,131,072 | ---- | M] () -- C:\WINNT\System32\cmktbpv.exe

[2010.08.20 10:56:55 | 000,022,528 | ---- | M] () -- C:\WINNT\System32\comres.dll

[2010.08.20 10:56:51 | 000,040,022 | ---- | M] () -- C:\WINNT\System32\cl_19462906.nls

[2010.08.20 10:56:51 | 000,040,022 | ---- | M] () -- C:\WINNT\System32\cl_19012679.nls

[2010.08.20 10:56:50 | 000,040,022 | ---- | M] () -- C:\WINNT\System32\cl_123891804.nls

[2010.08.20 10:56:50 | 000,040,022 | ---- | M] () -- C:\WINNT\System32\cl_123410602.nls

[2010.08.20 10:56:50 | 000,040,022 | ---- | M] () -- C:\WINNT\System32\cl_116654688.nls

[2010.08.20 10:56:49 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\ckqeg.exe

[2010.08.20 10:56:49 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\cjctn.exe

[2010.08.20 10:56:49 | 000,069,120 | ---- | M] () -- C:\WINNT\System32\cjglgnw.exe

[2010.08.20 10:56:49 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\ckbz.exe

[2010.08.20 10:56:49 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\cjhaveax.exe

[2010.08.20 10:56:49 | 000,040,022 | ---- | M] () -- C:\WINNT\System32\cl_116185483.nls

[2010.08.20 10:56:48 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\cirh.exe

[2010.08.20 10:56:48 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\cili.exe

[2010.08.20 10:56:48 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\chazyrmz.exe

[2010.08.20 10:56:48 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\chin.exe

[2010.08.20 10:56:47 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\cdtv.exe

[2010.08.20 10:56:47 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\cgpyxst.exe

[2010.08.20 10:56:47 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\cfbln.exe

[2010.08.20 10:56:47 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\cedw.exe

[2010.08.20 10:56:47 | 000,035,328 | ---- | M] () -- C:\WINNT\System32\cezsdco.exe

[2010.08.20 10:56:45 | 000,136,704 | ---- | M] () -- C:\WINNT\System32\bwjvh.exe

[2010.08.20 10:56:45 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\bxqwc.exe

[2010.08.20 10:56:45 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\bvjobbh.exe

[2010.08.20 10:56:45 | 000,124,416 | ---- | M] () -- C:\WINNT\System32\bzymxtrl.exe

[2010.08.20 10:56:45 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\caluf.exe

[2010.08.20 10:56:44 | 000,125,952 | ---- | M] () -- C:\WINNT\System32\bturo.exe

[2010.08.20 10:56:44 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\btjrs.exe

[2010.08.20 10:56:43 | 000,208,391 | ---- | M] () -- C:\WINNT\System32\awga.exe

[2010.08.20 10:56:43 | 000,130,048 | ---- | M] () -- C:\WINNT\System32\aveqylto.exe

[2010.08.20 10:56:43 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\biqf.exe

[2010.08.20 10:56:43 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\bhrl.exe

[2010.08.20 10:56:43 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\bqvror.exe

[2010.08.20 10:56:43 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\bczhsaq.exe

[2010.08.20 10:56:43 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\breqjuku.exe

[2010.08.20 10:56:43 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\blqgcjs.exe

[2010.08.20 10:56:43 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\bnix.exe

[2010.08.20 10:56:43 | 000,045,568 | ---- | M] () -- C:\WINNT\System32\awty.exe

[2010.08.20 10:56:43 | 000,037,888 | ---- | M] () -- C:\WINNT\System32\awruqgtd.exe

[2010.08.20 10:56:43 | 000,035,328 | ---- | M] () -- C:\WINNT\System32\btipgf.exe

[2010.08.20 10:56:43 | 000,022,528 | ---- | M] () -- C:\WINNT\System32\BJusSQfKzY4fRMcWtcMZ.dll

[2010.08.20 10:56:42 | 000,067,584 | ---- | M] () -- C:\WINNT\System32\alcwg.exe

[2010.08.20 10:56:42 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\aotfjiex.exe

[2010.08.20 10:56:42 | 000,050,176 | ---- | M] () -- C:\WINNT\System32\altjzgiv.exe

[2010.08.20 10:56:42 | 000,047,104 | ---- | M] () -- C:\WINNT\System32\amwmhijg.exe

[2010.08.20 10:56:41 | 000,101,376 | ---- | M] () -- C:\WINNT\System32\akpd.exe

[2010.08.20 10:56:41 | 000,046,592 | ---- | M] () -- C:\WINNT\System32\afrgzvgg.exe

[2010.08.20 14:20:31 | 000,003,688 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\kants.reg

[2009.10.29 10:06:00 | 000,024,576 | ---- | M] () -- C:\WINNT\Tasks\4H5HJTHFZkxrCpehBpx4TmR.inf

[2009.11.16 11:48:16 | 000,001,750 | ---- | M] () -- C:\WINNT\Tasks\bQduFebhDm3Gxtunb.ico

[2009.10.29 10:08:15 | 000,017,920 | ---- | M] () -- C:\WINNT\Tasks\c2nH4numz9knY5zqnC.inf

[2009.11.16 11:48:16 | 000,022,528 | ---- | M] () -- C:\WINNT\Tasks\Ces5WqX3ApQMPmMbYZUxPYh.inf

[2009.11.20 12:26:23 | 000,024,576 | ---- | M] () -- C:\WINNT\Tasks\dEAXUPxQWEyAvpH4Pd3brcyYSHV.inf

[2009.10.29 10:07:34 | 000,001,750 | ---- | M] () -- C:\WINNT\Tasks\EkKXXTKa2TVmc6XM.ico

[2009.11.06 11:48:59 | 000,001,750 | ---- | M] () -- C:\WINNT\Tasks\JXGvg56A6qE3Kgb.ico

[2009.11.16 11:47:21 | 000,003,460 | ---- | M] () -- C:\WINNT\Tasks\kTS4JJGUYtVagxPs.ico

[2009.10.29 10:08:21 | 000,001,750 | ---- | M] () -- C:\WINNT\Tasks\kwycFmBeCsEW8k4Z7Gn.ico

[2009.11.20 12:26:23 | 000,001,750 | ---- | M] () -- C:\WINNT\Tasks\NSk5AtYYEPKtaSgzknZvW.ico

[2009.11.06 11:46:55 | 000,002,926 | ---- | M] () -- C:\WINNT\Tasks\pPuSpm4tUTwyj3JpjJV.ico

[2009.10.29 10:07:34 | 000,014,848 | ---- | M] () -- C:\WINNT\Tasks\SbrmpxjdCrgRAFhz4gHh.inf

[2009.10.29 10:06:19 | 000,001,750 | ---- | M] () -- C:\WINNT\Tasks\ThGkkhVnR6Dhf3eN.ico

[2009.11.20 12:26:56 | 000,003,460 | ---- | M] () -- C:\WINNT\Tasks\vC6ykXbjUGCVeCJa.ico

[2009.10.29 10:08:21 | 000,021,504 | ---- | M] () -- C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf

[2009.10.30 16:13:01 | 000,023,552 | ---- | M] () -- C:\WINNT\Tasks\Wfayv6njQnCsg.inf

[2009.10.29 10:06:19 | 000,023,552 | ---- | M] () -- C:\WINNT\Tasks\yGfdVUegEQm9fhY5rnN.inf

[2009.10.29 10:06:00 | 000,001,750 | ---- | M] () -- C:\WINNT\Tasks\ZsJWEjDqyh2vTuUZF.ico

[2009.11.06 11:48:59 | 000,021,504 | ---- | M] () -- C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf

:FIles

recycler /alldrives

:Commands

[purity]

[resethosts]

[emptytemp]

[emptyflash]

[Reboot]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено:

Ще се създаде лог файл. Копирайте и поставете този файл в следващия си коментар.

2

23 август 201016 г.

Автор

Направо заспа!

Благодаря nologo

All processes killed
========== OTL ==========
Service tt stopped successfully!
Service tt deleted successfully!
C:\WINNT\system32\lzys.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ deleted successfully.
File Protocol\Filter\Class Install Handler - No CLSID value found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf deleted successfully.
File move failed. C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf scheduled to be moved on reboot.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf deleted successfully.
File move failed. C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf scheduled to be moved on reboot.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{012AA32F-36E6-405F-9F3F-588E0AA73FBB} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{012AA32F-36E6-405F-9F3F-588E0AA73FBB}\ deleted successfully.
C:\WINNT\Tasks\Wfayv6njQnCsg.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{05EDDA35-1E5B-4A77-8F68-99AB967CF632} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05EDDA35-1E5B-4A77-8F68-99AB967CF632}\ deleted successfully.
C:\WINNT\system32\bWxJAeWKDxgRfhkaWEfA33C36nr.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{05FF273B-258B-432D-96B8-E3FE79CEEFB7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05FF273B-258B-432D-96B8-E3FE79CEEFB7}\ deleted successfully.
C:\WINNT\system32\UadN5xYYC8FXprkCdzyMewN.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{08223B03-1B38-4A33-A83A-A4D3CC1D6E4E} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08223B03-1B38-4A33-A83A-A4D3CC1D6E4E}\ deleted successfully.
C:\WINNT\system32\08223B03.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{09FDF8F4-0F9E-4C84-9F0C-21A1143815E3} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09FDF8F4-0F9E-4C84-9F0C-21A1143815E3}\ deleted successfully.
C:\WINNT\system32\pwd4Xpm8KYzkcbqcaKT.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{122B901E-493F-4AD9-BC69-7DE8C3E52FCC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{122B901E-493F-4AD9-BC69-7DE8C3E52FCC}\ deleted successfully.
C:\WINNT\system32\122B901E.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{1719B301-B494-4185-9379-242461F9CF02} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1719B301-B494-4185-9379-242461F9CF02}\ deleted successfully.
C:\WINNT\system32\BtmBAnd89jc9PsPq5EKNj.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{23DA65D2-C696-4EE4-BEE8-B4841DEC3E30} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{23DA65D2-C696-4EE4-BEE8-B4841DEC3E30}\ deleted successfully.
C:\WINNT\system32\ndxq9awMc.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{32D1A17C-A0E9-4B05-AD83-A292B98CD824} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32D1A17C-A0E9-4B05-AD83-A292B98CD824}\ deleted successfully.
C:\WINNT\Tasks\dEAXUPxQWEyAvpH4Pd3brcyYSHV.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{3373CD28-8C35-4A36-8569-672D8CA197F5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3373CD28-8C35-4A36-8569-672D8CA197F5}\ deleted successfully.
C:\WINNT\Tasks\4H5HJTHFZkxrCpehBpx4TmR.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{40A1B06F-7692-45D7-AC4E-094CBDE76B7C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40A1B06F-7692-45D7-AC4E-094CBDE76B7C}\ deleted successfully.
C:\WINNT\Downloaded Program Files\FMpxb5HupNvx7xMBG6ZNGbHWfQT.cur moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{4F5EEDE5-1687-49D2-8A17-FF0B454FB37B} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4F5EEDE5-1687-49D2-8A17-FF0B454FB37B}\ deleted successfully.
C:\WINNT\system32\qzp3jTZCSfSh.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{51716C09-6B08-4CCF-B526-718E912C0573} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{51716C09-6B08-4CCF-B526-718E912C0573}\ deleted successfully.
C:\WINNT\system32\PERrGx5DkqSbQdwauCRQH.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{526EB425-7F56-4773-8D70-B8E45AA8E2B6} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{526EB425-7F56-4773-8D70-B8E45AA8E2B6}\ deleted successfully.
C:\WINNT\Downloaded Program Files\WUstNjhyfQfpv8PQbC.cur moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{6049BC02-7EDA-4C41-B4AB-D5398607C39E} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6049BC02-7EDA-4C41-B4AB-D5398607C39E}\ deleted successfully.
C:\WINNT\Tasks\yGfdVUegEQm9fhY5rnN.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{653AF1C9-91C1-49A1-89E6-5638858397D0} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{653AF1C9-91C1-49A1-89E6-5638858397D0}\ deleted successfully.
C:\WINNT\system32\hv29AFBjE3zxAaK.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{7198F428-77AC-4837-AFBE-1E0393575935} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7198F428-77AC-4837-AFBE-1E0393575935}\ deleted successfully.
C:\WINNT\system32\JMq7bpeR4Xa8eV5ftCB.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{73208305-2703-405b-8721-27645ac9a140} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73208305-2703-405b-8721-27645ac9a140}\ deleted successfully.
C:\WINNT\system32\nWSDWJ9KSzcNsaTKtnSUwv8P7VU.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{74DA2FEC-F68F-4DC7-9A45-9174AC044427} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74DA2FEC-F68F-4DC7-9A45-9174AC044427}\ deleted successfully.
C:\WINNT\system32\z6FVkEF47huPzgaXee.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{7AE7870E-5223-4BFF-BFB7-0827A749DF0C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7AE7870E-5223-4BFF-BFB7-0827A749DF0C}\ deleted successfully.
File move failed. C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf scheduled to be moved on reboot.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{7CC109E5-B2FC-4FEE-AF04-74B2DCBD2540} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CC109E5-B2FC-4FEE-AF04-74B2DCBD2540}\ deleted successfully.
C:\WINNT\system32\ujMhyGsS7tRV9gU2HHMkJcu7DPU.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{81BC0740-6E31-4BA4-81C8-EFF9ECEB3BA2} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{81BC0740-6E31-4BA4-81C8-EFF9ECEB3BA2}\ deleted successfully.
C:\WINNT\system32\pEcFwPj48y6DADf87r.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{827E2FB4-1047-43DE-848D-E12BB0C97AAB} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{827E2FB4-1047-43DE-848D-E12BB0C97AAB}\ deleted successfully.
C:\WINNT\Tasks\SbrmpxjdCrgRAFhz4gHh.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{84639C2D-CD75-4081-B515-329AFCECBF19} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{84639C2D-CD75-4081-B515-329AFCECBF19}\ deleted successfully.
C:\WINNT\Downloaded Program Files\SjRjQgREDp3P8B4rEEg.cur moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{8708994F-1758-4C2C-9A3F-FA22D6CCCB41} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8708994F-1758-4C2C-9A3F-FA22D6CCCB41}\ deleted successfully.
C:\WINNT\Fonts\A97CRaCB.fon moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{87DE8A1A-96C5-4420-B222-EF998F697CE7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{87DE8A1A-96C5-4420-B222-EF998F697CE7}\ deleted successfully.
C:\WINNT\system32\2exJW3dsaTgWrf5uAPadmHN.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{8E6D4583-0FA1-41B2-BAAA-63352E6333CA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8E6D4583-0FA1-41B2-BAAA-63352E6333CA}\ deleted successfully.
C:\WINNT\system32\jY8sGUnWqbZb3x2BPhY.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{B7F1BFDC-4B6C-4E2F-AF7A-638D2D47802C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7F1BFDC-4B6C-4E2F-AF7A-638D2D47802C}\ deleted successfully.
C:\WINNT\system32\FsmBY3kmWnAG5gRbwGgU.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{B9D0F4D7-C809-4C27-9CB4-63201DFB3D05} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B9D0F4D7-C809-4C27-9CB4-63201DFB3D05}\ deleted successfully.
C:\WINNT\Tasks\c2nH4numz9knY5zqnC.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{C3634CF6-FD22-4F3D-BBB4-AE36174A868C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C3634CF6-FD22-4F3D-BBB4-AE36174A868C}\ deleted successfully.
C:\WINNT\system32\A2CbFrBy28J6zdXNZgqCtJ6Ae.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{C4BD9D5C-04CA-45E6-8539-98B07D99B6BC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C4BD9D5C-04CA-45E6-8539-98B07D99B6BC}\ deleted successfully.
C:\WINNT\system32\AMNCZw74h8gwd6CpYGkrZDy8.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{CD478099-014D-4B3A-A4BB-B518F1019BC7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CD478099-014D-4B3A-A4BB-B518F1019BC7}\ deleted successfully.
C:\WINNT\system32\SCEVFJRCmaB7.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{DEA30687-C84E-4588-A761-5F2749455B2F} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DEA30687-C84E-4588-A761-5F2749455B2F}\ deleted successfully.
File move failed. C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf scheduled to be moved on reboot.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{F181F067-7046-4DCB-993F-200990736305} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F181F067-7046-4DCB-993F-200990736305}\ deleted successfully.
C:\WINNT\Downloaded Program Files\sZaeAC74EzXJeVeJu6p.cur moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{F317E464-D4A4-4C79-82E8-CABADF738C7C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F317E464-D4A4-4C79-82E8-CABADF738C7C}\ deleted successfully.
C:\WINNT\system32\t9hdtMrwMeQcvYV3CMvhtNZpC.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{F42FCDA4-76C1-4827-9BC3-1C95ADBD6035} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F42FCDA4-76C1-4827-9BC3-1C95ADBD6035}\ deleted successfully.
C:\WINNT\Tasks\Ces5WqX3ApQMPmMbYZUxPYh.inf moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{F8EC4F9D-F88B-41CF-BC8D-3DD1737B6451} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F8EC4F9D-F88B-41CF-BC8D-3DD1737B6451}\ deleted successfully.
C:\WINNT\system32\RXNK8eR3xW8KTCWBCGTbqm.inf moved successfully.
C:\WINNT\system32\zbrsaiwx.exe moved successfully.
C:\WINNT\system32\zfzgzsei.exe moved successfully.
C:\WINNT\system32\zdwcb.exe moved successfully.
C:\WINNT\system32\zlpfs.exe moved successfully.
C:\WINNT\system32\zjdljfm.exe moved successfully.
C:\WINNT\system32\zvqbvfpx.exe moved successfully.
C:\WINNT\system32\zlovrm.exe moved successfully.
C:\WINNT\system32\zejn.exe moved successfully.
C:\WINNT\system32\ziohyyn.exe moved successfully.
C:\WINNT\system32\yooidg.exe moved successfully.
C:\WINNT\system32\yokwcsyk.exe moved successfully.
C:\WINNT\system32\ytukodw.exe moved successfully.
C:\WINNT\system32\yonb.exe moved successfully.
C:\WINNT\system32\yzmmr.exe moved successfully.
C:\WINNT\system32\yuyus.exe moved successfully.
C:\WINNT\system32\yuxceqye.exe moved successfully.
C:\WINNT\system32\yogbsav.exe moved successfully.
C:\WINNT\system32\ytnedta.exe moved successfully.
C:\WINNT\system32\xtjajw.exe moved successfully.
C:\WINNT\system32\yarf.exe moved successfully.
C:\WINNT\system32\xqmitj.exe moved successfully.
C:\WINNT\system32\xuvnjed.exe moved successfully.
C:\WINNT\system32\xtwu.exe moved successfully.
C:\WINNT\system32\xruk.exe moved successfully.
C:\WINNT\system32\yhcwbt.exe moved successfully.
C:\WINNT\system32\xvynyncd.exe moved successfully.
C:\WINNT\system32\xsdypbkr.exe moved successfully.
C:\WINNT\system32\xtshkbc.exe moved successfully.
C:\WINNT\system32\xgxj.exe moved successfully.
C:\WINNT\system32\xidqxak.exe moved successfully.
C:\WINNT\system32\xhvlloxs.exe moved successfully.
C:\WINNT\system32\xqjidh.exe moved successfully.
C:\WINNT\system32\xerpzi.exe moved successfully.
C:\WINNT\system32\xdxrtdbc.exe moved successfully.
C:\WINNT\system32\xldurvv.exe moved successfully.
C:\WINNT\system32\xjigv.exe moved successfully.
C:\WINNT\system32\wxni.exe moved successfully.
C:\WINNT\system32\wwhxeadg.exe moved successfully.
C:\WINNT\system32\wvmfnfg.exe moved successfully.
C:\WINNT\system32\wtnqqr.exe moved successfully.
C:\WINNT\system32\wshipv4.dll moved successfully.
C:\WINNT\system32\wwkdccwm.exe moved successfully.
C:\WINNT\system32\wkzi.exe moved successfully.
C:\WINNT\system32\wpemufm.exe moved successfully.
C:\WINNT\system32\wmoyiex.exe moved successfully.
C:\WINNT\system32\wrxmboej.exe moved successfully.
C:\WINNT\system32\wmwndp.exe moved successfully.
C:\WINNT\system32\wkmh.exe moved successfully.
C:\WINNT\system32\wjatoa.exe moved successfully.
C:\WINNT\system32\wirp.exe moved successfully.
C:\WINNT\system32\wiopsnkb.exe moved successfully.
C:\WINNT\system32\wgwzi.exe moved successfully.
C:\WINNT\system32\vyzfx.exe moved successfully.
C:\WINNT\system32\viifqd.exe moved successfully.
C:\WINNT\system32\veupirum.exe moved successfully.
C:\WINNT\system32\vgnto.exe moved successfully.
C:\WINNT\system32\vhwf.exe moved successfully.
C:\WINNT\system32\vluhfq.exe moved successfully.
C:\WINNT\system32\vlkczgw.exe moved successfully.
C:\WINNT\system32\vkrfj.exe moved successfully.
C:\WINNT\system32\vraaf.exe moved successfully.
C:\WINNT\system32\vvspxv.exe moved successfully.
C:\WINNT\system32\vclsp.exe moved successfully.
C:\WINNT\system32\utfn.exe moved successfully.
C:\WINNT\system32\vddka.exe moved successfully.
C:\WINNT\system32\uwpuu.exe moved successfully.
C:\WINNT\system32\uumqhple.exe moved successfully.
C:\WINNT\system32\uwumloe.exe moved successfully.
C:\WINNT\system32\uxtws.exe moved successfully.
C:\WINNT\system32\urqelol.exe moved successfully.
C:\WINNT\system32\umyf.exe moved successfully.
C:\WINNT\system32\ulru.exe moved successfully.
C:\WINNT\system32\ufxmsovq.exe moved successfully.
C:\WINNT\system32\uktjuvqm.exe moved successfully.
C:\WINNT\system32\ulrc.exe moved successfully.
C:\WINNT\system32\ukilgiuh.exe moved successfully.
C:\WINNT\system32\ulyyzx.exe moved successfully.
C:\WINNT\system32\uhsuk.exe moved successfully.
C:\WINNT\system32\ufywtysa.exe moved successfully.
C:\WINNT\system32\tubr.exe moved successfully.
C:\WINNT\system32\ubxx.exe moved successfully.
C:\WINNT\system32\ubcjjzyu.exe moved successfully.
C:\WINNT\system32\txydtkoi.exe moved successfully.
C:\WINNT\system32\tved.exe moved successfully.
C:\WINNT\system32\uevkest.exe moved successfully.
C:\WINNT\system32\uetbftx.exe moved successfully.
C:\WINNT\system32\tydxl.exe moved successfully.
C:\WINNT\system32\truvh.exe moved successfully.
C:\WINNT\system32\tsangizt.exe moved successfully.
C:\WINNT\system32\tpyejci.exe moved successfully.
C:\WINNT\system32\tntnayol.exe moved successfully.
C:\WINNT\system32\tnfdxp.exe moved successfully.
C:\WINNT\system32\tmdpnths.exe moved successfully.
C:\WINNT\system32\tphdeqpx.exe moved successfully.
C:\WINNT\system32\tqnds.exe moved successfully.
C:\WINNT\system32\tkqo.exe moved successfully.
C:\WINNT\system32\tlbkjuo.exe moved successfully.
C:\WINNT\system32\tjtvmva.exe moved successfully.
C:\WINNT\system32\tizy.exe moved successfully.
C:\WINNT\system32\tituvmuk.exe moved successfully.
C:\WINNT\system32\thodymf.exe moved successfully.
C:\WINNT\system32\tfclrmbc.exe moved successfully.
C:\WINNT\system32\tghmktdu.exe moved successfully.
C:\WINNT\system32\taljasme.exe moved successfully.
C:\WINNT\system32\t320067.dll moved successfully.
C:\WINNT\system32\t322048.dll moved successfully.
C:\WINNT\system32\sxbfqvz.exe moved successfully.
C:\WINNT\system32\suzgue.exe moved successfully.
C:\WINNT\system32\sydmlm.exe moved successfully.
C:\WINNT\system32\sufvl.exe moved successfully.
C:\svohost.exe moved successfully.
C:\WINNT\system32\spnk.exe moved successfully.
C:\WINNT\system32\soyxywp.exe moved successfully.
C:\WINNT\system32\sqevm.exe moved successfully.
C:\WINNT\system32\sreqsu.exe moved successfully.
C:\WINNT\system32\sqvfiayw.exe moved successfully.
C:\WINNT\system32\stdm.exe moved successfully.
C:\WINNT\system32\spheyp.exe moved successfully.
C:\WINNT\system32\smrx.exe moved successfully.
C:\WINNT\system32\slqniq.exe moved successfully.
C:\WINNT\system32\sgbngs.exe moved successfully.
C:\WINNT\system32\sehwqkd.exe moved successfully.
C:\WINNT\system32\sfhkvcwv.exe moved successfully.
C:\WINNT\system32\scvlgfu.exe moved successfully.
C:\WINNT\system32\sdphnrv.exe moved successfully.
C:\WINNT\system32\ruukbst.exe moved successfully.
C:\WINNT\system32\saiuvl.exe moved successfully.
C:\WINNT\system32\rwagru.exe moved successfully.
C:\WINNT\system32\sbyi.exe moved successfully.
C:\WINNT\system32\rxzeoy.exe moved successfully.
C:\WINNT\system32\rzqih.exe moved successfully.
C:\WINNT\system32\rtmg.exe moved successfully.
C:\WINNT\system32\rrkgot.exe moved successfully.
C:\WINNT\system32\rsgohiaz.exe moved successfully.
C:\WINNT\system32\rqiirj.exe moved successfully.
C:\WINNT\system32\rqqivlmi.exe moved successfully.
C:\WINNT\system32\roaqqch.exe moved successfully.
C:\WINNT\system32\riiovwjw.exe moved successfully.
C:\WINNT\system32\riwwniv.exe moved successfully.
C:\WINNT\system32\reptfyl.exe moved successfully.
C:\WINNT\system32\rfmwc.exe moved successfully.
C:\WINNT\system32\rebexp.exe moved successfully.
C:\WINNT\system32\rbjjjrag.exe moved successfully.
C:\WINNT\system32\rdeezzw.exe moved successfully.
C:\WINNT\system32\reayv.exe moved successfully.
C:\WINNT\system32\rbvnr.exe moved successfully.
C:\WINNT\system32\qfhxufs.exe moved successfully.
C:\WINNT\system32\qjqdc.exe moved successfully.
C:\WINNT\system32\qouuzrh.exe moved successfully.
C:\WINNT\system32\qsutu.exe moved successfully.
C:\WINNT\system32\qzohx.exe moved successfully.
C:\WINNT\system32\qt-dx3.dll moved successfully.
C:\WINNT\system32\qclb.exe moved successfully.
C:\WINNT\system32\pxjty.exe moved successfully.
C:\WINNT\system32\pzqetwm.exe moved successfully.
C:\WINNT\system32\pvmapost.exe moved successfully.
C:\WINNT\system32\qboff.exe moved successfully.
C:\WINNT\system32\pvtv.exe moved successfully.
C:\WINNT\system32\prjs.exe moved successfully.
C:\WINNT\system32\pqkb.exe moved successfully.
C:\WINNT\system32\ppjgbbio.exe moved successfully.
C:\WINNT\system32\pojg.exe moved successfully.
C:\WINNT\system32\pofzkkh.exe moved successfully.
C:\WINNT\system32\pivu.exe moved successfully.
C:\WINNT\system32\pkuzh.exe moved successfully.
C:\WINNT\system32\pmagbh.exe moved successfully.
C:\WINNT\system32\pjexk.exe moved successfully.
C:\WINNT\system32\pifjm.exe moved successfully.
C:\WINNT\system32\oziy.exe moved successfully.
C:\WINNT\system32\pepdyw.exe moved successfully.
C:\WINNT\system32\phgrlt.exe moved successfully.
C:\WINNT\system32\pghe.exe moved successfully.
C:\WINNT\system32\pdxaulul.exe moved successfully.
C:\WINNT\system32\outqwn.exe moved successfully.
C:\WINNT\system32\oywulx.exe moved successfully.
C:\WINNT\system32\oyxrq.exe moved successfully.
C:\WINNT\system32\oxrctt.exe moved successfully.
C:\WINNT\system32\owtkfbx.exe moved successfully.
C:\WINNT\system32\oushg.exe moved successfully.
C:\WINNT\system32\opjr.exe moved successfully.
C:\WINNT\system32\opugclis.exe moved successfully.
C:\WINNT\system32\okxtcv.exe moved successfully.
C:\WINNT\system32\okdsjm.exe moved successfully.
C:\WINNT\system32\olqlgmk.exe moved successfully.
C:\WINNT\system32\oejv.exe moved successfully.
C:\WINNT\system32\oiswd.exe moved successfully.
C:\WINNT\system32\oqvfktkp.exe moved successfully.
C:\WINNT\system32\Olimpk.dll moved successfully.
C:\WINNT\system32\obiv.exe moved successfully.
C:\WINNT\system32\nwqxdhl.exe moved successfully.
C:\WINNT\system32\nwct.exe moved successfully.
C:\WINNT\system32\nzczqnji.exe moved successfully.
C:\WINNT\system32\ocovibm.exe moved successfully.
C:\WINNT\system32\nzjmxcod.exe moved successfully.
C:\WINNT\system32\nzoznqv.exe moved successfully.
C:\WINNT\system32\ntkv.exe moved successfully.
C:\WINNT\system32\nrmjolw.exe moved successfully.
C:\WINNT\system32\nsmcsl.exe moved successfully.
C:\WINNT\system32\npyghsdw.exe moved successfully.
C:\WINNT\system32\njcjm.exe moved successfully.
C:\WINNT\system32\nmsew.exe moved successfully.
C:\WINNT\system32\ngnjnfim.exe moved successfully.
C:\WINNT\system32\nfpirkhp.exe moved successfully.
C:\WINNT\system32\nbhfe.exe moved successfully.
C:\WINNT\system32\ndtfvns.exe moved successfully.
C:\WINNT\system32\nbujs.exe moved successfully.
C:\WINNT\system32\mzojkj.exe moved successfully.
C:\WINNT\system32\mwvinht.exe moved successfully.
C:\WINNT\MSVB50CHS.dll moved successfully.
C:\WINNT\system32\msczwi.exe moved successfully.
C:\WINNT\system32\moocveww.exe moved successfully.
C:\WINNT\system32\momo.exe moved successfully.
C:\WINNT\system32\moeuhwc.exe moved successfully.
C:\MPKrnl.exe moved successfully.
C:\WINNT\MPKrnl.dll moved successfully.
C:\WINNT\system32\mlxcwcis.exe moved successfully.
C:\WINNT\system32\mgrmfdw.exe moved successfully.
C:\WINNT\system32\mczzp.exe moved successfully.
C:\WINNT\system32\mlawzzqj.exe moved successfully.
C:\WINNT\system32\mfed.exe moved successfully.
C:\WINNT\system32\mlqpypm.exe moved successfully.
C:\WINNT\MKMKrnl.dll moved successfully.
C:\WINNT\system32\lssas.exe moved successfully.
C:\WINNT\system32\lwsaqbg.exe moved successfully.
C:\WINNT\system32\maln.exe moved successfully.
C:\WINNT\system32\lvurk.exe moved successfully.
C:\WINNT\system32\luxh.exe moved successfully.
C:\WINNT\system32\lutvmi.exe moved successfully.
C:\WINNT\system32\logon.exe moved successfully.
C:\WINNT\system32\lrpw.exe moved successfully.
C:\WINNT\system32\lqdxx.exe moved successfully.
C:\WINNT\lpk.dll moved successfully.
C:\WINNT\system32\kzzsuxpa.exe moved successfully.
C:\WINNT\system32\llgvsq.exe moved successfully.
C:\WINNT\system32\lgimir.exe moved successfully.
C:\WINNT\system32\ljzga.exe moved successfully.
C:\WINNT\system32\lhyfdtsx.exe moved successfully.
C:\WINNT\system32\lfnxg.exe moved successfully.
C:\WINNT\system32\Lecomd.dll moved successfully.
C:\WINNT\system32\kqkubhdh.exe moved successfully.
C:\WINNT\system32\kwchfr.exe moved successfully.
C:\WINNT\system32\kpqmner.exe moved successfully.
C:\WINNT\system32\kpvkoww.exe moved successfully.
C:\WINNT\system32\ksjng.exe moved successfully.
C:\WINNT\system32\kpirgoso.exe moved successfully.
C:\WINNT\system32\koyss.exe moved successfully.
C:\WINNT\system32\kpihpco.exe moved successfully.
C:\WINNT\system32\khoduc.exe moved successfully.
C:\WINNT\system32\koihgr.exe moved successfully.
C:\WINNT\system32\khsb.exe moved successfully.
C:\WINNT\system32\kfaee.exe moved successfully.
C:\WINNT\system32\kbdknpdx.exe moved successfully.
C:\WINNT\system32\kcueui.exe moved successfully.
C:\WINNT\system32\Kance.dll moved successfully.
C:\WINNT\system32\jwolj.exe moved successfully.
C:\WINNT\system32\jzjh.exe moved successfully.
C:\WINNT\system32\juemn.exe moved successfully.
C:\WINNT\system32\jrdq.exe moved successfully.
C:\WINNT\system32\jqzyni.exe moved successfully.
C:\WINNT\system32\jsnikfuv.exe moved successfully.
C:\WINNT\system32\jlwo.exe moved successfully.
C:\WINNT\system32\iwwsd.exe moved successfully.
C:\WINNT\system32\jqyz.exe moved successfully.
C:\WINNT\system32\jodzprcr.exe moved successfully.
C:\WINNT\system32\jeidusa.exe moved successfully.
C:\WINNT\system32\ixwgkg.exe moved successfully.
C:\WINNT\system32\jqxkxstz.exe moved successfully.
C:\WINNT\system32\ixrbhnsj.exe moved successfully.
C:\WINNT\system32\jpicgjs.exe moved successfully.
C:\WINNT\system32\iwwmfew.exe moved successfully.
C:\WINNT\system32\iskg.exe moved successfully.
C:\WINNT\system32\isbm.exe moved successfully.
C:\WINNT\system32\ijyp.exe moved successfully.
C:\WINNT\system32\ihakn.exe moved successfully.
C:\WINNT\system32\hzofcwpw.exe moved successfully.
C:\WINNT\system32\iblr.exe moved successfully.
C:\WINNT\system32\igkbynw.exe moved successfully.
C:\WINNT\system32\hwhbzi.exe moved successfully.
C:\WINNT\system32\hqekvx.exe moved successfully.
C:\WINNT\system32\hjioi.exe moved successfully.
C:\WINNT\system32\hmkd.exe moved successfully.
C:\WINNT\system32\gzopudi.exe moved successfully.
C:\WINNT\system32\gusvzprp.exe moved successfully.
C:\WINNT\system32\gzlyfh.exe moved successfully.
C:\WINNT\system32\grlgw.exe moved successfully.
C:\WINNT\system32\gqjsl.exe moved successfully.
C:\WINNT\system32\gqxqdxlr.exe moved successfully.
C:\WINNT\system32\gijvakfk.exe moved successfully.
C:\WINNT\system32\gopprczl.exe moved successfully.
C:\WINNT\system32\glag.exe moved successfully.
C:\WINNT\system32\fxzjczlc.exe moved successfully.
C:\WINNT\system32\geye.exe moved successfully.
C:\WINNT\system32\gatvti.exe moved successfully.
C:\WINNT\system32\gdbvn.exe moved successfully.
C:\WINNT\system32\fymvaama.exe moved successfully.
C:\WINNT\system32\fxycks.exe moved successfully.
C:\WINNT\system32\fnlfqs.exe moved successfully.
C:\WINNT\system32\fmdukzpb.exe moved successfully.
C:\WINNT\system32\frogtnbv.exe moved successfully.
C:\WINNT\system32\fmlsev.exe moved successfully.
C:\WINNT\system32\firewall.exe moved successfully.
C:\WINNT\system32\fjukur.exe moved successfully.
C:\WINNT\system32\fjfllemk.exe moved successfully.
C:\WINNT\system32\fipuompl.exe moved successfully.
C:\WINNT\system32\fkmqhn.exe moved successfully.
C:\WINNT\system32\eykuwgeb.exe moved successfully.
C:\WINNT\system32\fdmguva.exe moved successfully.
C:\WINNT\system32\fahp.exe moved successfully.
C:\WINNT\system32\fgrpf.exe moved successfully.
C:\WINNT\system32\feflqvma.exe moved successfully.
C:\ff.bat moved successfully.
C:\WINNT\system32\elvgz.exe moved successfully.
C:\WINNT\system32\erfczof.exe moved successfully.
C:\WINNT\system32\enghitm.exe moved successfully.
C:\WINNT\system32\epglmoga.exe moved successfully.
C:\WINNT\system32\ejmzy.exe moved successfully.
C:\WINNT\system32\egzhx.exe moved successfully.
C:\WINNT\system32\eeojslga.exe moved successfully.
C:\WINNT\system32\ebnwd.exe moved successfully.
C:\WINNT\system32\ecqdznqc.exe moved successfully.
C:\WINNT\system32\ecca.exe moved successfully.
C:\WINNT\system32\dwsu.exe moved successfully.
C:\WINNT\system32\dtduls.exe moved successfully.
C:\WINNT\system32\drnqzxhc.exe moved successfully.
C:\WINNT\system32\dqjuoc.exe moved successfully.
C:\WINNT\system32\dszs.exe moved successfully.
C:\WINNT\system32\dncaz.exe moved successfully.
C:\Documents and Settings\Administrator\Application Data\Dns32.sys moved successfully.
C:\WINNT\system32\dnnrbp.exe moved successfully.
C:\WINNT\system32\djfzf.exe moved successfully.
C:\WINNT\system32\drivers\dHook.sys moved successfully.
C:\WINNT\system32\dffmdjzn.exe moved successfully.
C:\WINNT\system32\delksuser.dll moved successfully.
C:\WINNT\system32\dboogzo.exe moved successfully.
C:\WINNT\system32\csrs.exe moved successfully.
C:\WINNT\system32\cyfwtzez.exe moved successfully.
C:\Documents and Settings\Administrator\Application Data\Dbg32.Sys moved successfully.
C:\Documents and Settings\Administrator\Application Data\Dbg16.Sys moved successfully.
C:\WINNT\system32\cstquqp.exe moved successfully.
C:\WINNT\system32\cwmv.exe moved successfully.
C:\WINNT\system32\cpuet.exe moved successfully.
C:\WINNT\system32\cmktbpv.exe moved successfully.
C:\WINNT\system32\comres.dll moved successfully.
C:\WINNT\system32\cl_19462906.nls moved successfully.
C:\WINNT\system32\cl_19012679.nls moved successfully.
C:\WINNT\system32\cl_123891804.nls moved successfully.
C:\WINNT\system32\cl_123410602.nls moved successfully.
C:\WINNT\system32\cl_116654688.nls moved successfully.
C:\WINNT\system32\ckqeg.exe moved successfully.
C:\WINNT\system32\cjctn.exe moved successfully.
C:\WINNT\system32\cjglgnw.exe moved successfully.
C:\WINNT\system32\ckbz.exe moved successfully.
C:\WINNT\system32\cjhaveax.exe moved successfully.
C:\WINNT\system32\cl_116185483.nls moved successfully.
C:\WINNT\system32\cirh.exe moved successfully.
C:\WINNT\system32\cili.exe moved successfully.
C:\WINNT\system32\chazyrmz.exe moved successfully.
C:\WINNT\system32\chin.exe moved successfully.
C:\WINNT\system32\cdtv.exe moved successfully.
C:\WINNT\system32\cgpyxst.exe moved successfully.
C:\WINNT\system32\cfbln.exe moved successfully.
C:\WINNT\system32\cedw.exe moved successfully.
C:\WINNT\system32\cezsdco.exe moved successfully.
C:\WINNT\system32\bwjvh.exe moved successfully.
C:\WINNT\system32\bxqwc.exe moved successfully.
C:\WINNT\system32\bvjobbh.exe moved successfully.
C:\WINNT\system32\bzymxtrl.exe moved successfully.
C:\WINNT\system32\caluf.exe moved successfully.
C:\WINNT\system32\bturo.exe moved successfully.
C:\WINNT\system32\btjrs.exe moved successfully.
C:\WINNT\system32\awga.exe moved successfully.
C:\WINNT\system32\aveqylto.exe moved successfully.
C:\WINNT\system32\biqf.exe moved successfully.
C:\WINNT\system32\bhrl.exe moved successfully.
C:\WINNT\system32\bqvror.exe moved successfully.
C:\WINNT\system32\bczhsaq.exe moved successfully.
C:\WINNT\system32\breqjuku.exe moved successfully.
C:\WINNT\system32\blqgcjs.exe moved successfully.
C:\WINNT\system32\bnix.exe moved successfully.
C:\WINNT\system32\awty.exe moved successfully.
C:\WINNT\system32\awruqgtd.exe moved successfully.
C:\WINNT\system32\btipgf.exe moved successfully.
C:\WINNT\system32\BJusSQfKzY4fRMcWtcMZ.dll moved successfully.
C:\WINNT\system32\alcwg.exe moved successfully.
C:\WINNT\system32\aotfjiex.exe moved successfully.
C:\WINNT\system32\altjzgiv.exe moved successfully.
C:\WINNT\system32\amwmhijg.exe moved successfully.
C:\WINNT\system32\akpd.exe moved successfully.
C:\WINNT\system32\afrgzvgg.exe moved successfully.
C:\Documents and Settings\Administrator\Desktop\kants.reg moved successfully.
File C:\WINNT\Tasks\4H5HJTHFZkxrCpehBpx4TmR.inf not found.
C:\WINNT\Tasks\bQduFebhDm3Gxtunb.ico moved successfully.
File C:\WINNT\Tasks\c2nH4numz9knY5zqnC.inf not found.
File C:\WINNT\Tasks\Ces5WqX3ApQMPmMbYZUxPYh.inf not found.
File C:\WINNT\Tasks\dEAXUPxQWEyAvpH4Pd3brcyYSHV.inf not found.
C:\WINNT\Tasks\EkKXXTKa2TVmc6XM.ico moved successfully.
C:\WINNT\Tasks\JXGvg56A6qE3Kgb.ico moved successfully.
C:\WINNT\Tasks\kTS4JJGUYtVagxPs.ico moved successfully.
C:\WINNT\Tasks\kwycFmBeCsEW8k4Z7Gn.ico moved successfully.
C:\WINNT\Tasks\NSk5AtYYEPKtaSgzknZvW.ico moved successfully.
C:\WINNT\Tasks\pPuSpm4tUTwyj3JpjJV.ico moved successfully.
File C:\WINNT\Tasks\SbrmpxjdCrgRAFhz4gHh.inf not found.
C:\WINNT\Tasks\ThGkkhVnR6Dhf3eN.ico moved successfully.
C:\WINNT\Tasks\vC6ykXbjUGCVeCJa.ico moved successfully.
File move failed. C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf scheduled to be moved on reboot.
File C:\WINNT\Tasks\Wfayv6njQnCsg.inf not found.
File C:\WINNT\Tasks\yGfdVUegEQm9fhY5rnN.inf not found.
C:\WINNT\Tasks\ZsJWEjDqyh2vTuUZF.ico moved successfully.
File move failed. C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf scheduled to be moved on reboot.
========== FILES ==========
C:\RECYCLER\S-1-5-21-583907252-1060284298-854245398-500 folder moved successfully.
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455 folder moved successfully.
C:\RECYCLER folder moved successfully.
========== COMMANDS ==========
C:\WINNT\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 461290 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 51379673 bytes
->Flash cache emptied: 2354 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1509321 bytes
%systemroot%\System32 .tmp files removed: 1611997 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: shell32.dll unable to determine bytes removed.

Total Files Cleaned = 52,00 mb

[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: Default User

Total Flash Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.10.0 log created on 08232010_125320

Files\Folders moved on Reboot...
C:\WINNT\Tasks\zUzgU8WWpYntt6NfUWT.inf moved successfully.
C:\WINNT\Tasks\wDJYwCRU4TKNpWMYJrdAtnCeqnE.inf moved successfully.

Registry entries deleted on Reboot...

23 август 201016 г.

Много добре. Стартирайте отново ОTL и не променяйте настройките. Натиснете Quick Scan. Ще се създадат два лог файла: OTL.Txt и Extras.Txt. Поставете ги или ги прикачете в следващия си коментар.

23 август 201016 г.

Автор

Не съм сменял настройките. Само OTL.Txt се създаде.

OTL.Txt

23 август 201016 г.

Стъпка 1

Стартирайте пак OTL.exe и с Copy/ Paste под колонката Custom Scans/Fixes въведете изцяло скриптовия текст от цитата по-долу (без думата "Цитат"), като не забравяте да копирате скрипта 1 към 1, както и двете точки преди първия ред на скрипта!

:OTL

O28 - HKLM ShellExecuteHooks: {8A6A5B34-D995-4C5D-9338-B5E264B4A87} - C:\WINNT\system32\nXe2grrKNzF9dxYKmqg.inf ()

:Files

C:\WINNT\system32\zgynj.dll

C:\WINNT\system32\nXe2grrKNzF9dxYKmqg.inf

C:\WINNT\System32\t320067.ini

C:\WINNT\System32\t311028.ini

C:\Program Files\tlmhzx2.dat

C:\Program Files\tlmhzx.dat

recycler /alldrives

:Services

fbcqhn

:Commands

[purity]

[resethosts]

[emptytemp]

[emptyflash]

[Reboot]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено:

Ще се създаде лог файл. Копирайте и поставете този файл в следващия си коментар.

Стъпка 2

Изтеглете FixPolicies и го запазете на декстопа. Кликнете два пъти върху файла и изберете Install. Ще се създаде папка с името FixPolicies на десктопа. Отворете я и стартирайте файла Fix_policies.cmd.

Стъпка 3

Изтеглете Malwarebytes' Anti-Malware от тук, като изберете Download Free Version.
Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата. При инсталацията изберете английски език (English).
Уверете се, че има отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware, след това кликнете на Finish. Ако има намерени по-нови обновления, тя ще ги изтегли и инсталира.
Стартирайте програмата и изберете Perform Quick Scan, след това кликнете на Scan.
Сканирането ще отнеме малко време, затова моля бъдете търпеливи.
Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.
Уверете се, че на всички редове има отметки, и кликнете Remove Selected.
Когато всичко бъде премахнато, логът ще бъде отворен в Notepad. Копирайте лога и го публикувайте в следващия си коментар в темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Стъпка 4

Изтеглете и инсталирайте отново: Windows 2000 Service Pack 4.

Редактирано 23 август 201016 г. от nologo (преглед на промените)

3

24 август 201016 г.

Автор

Изпълних стъпки 1,2 и 3

На 4-тата имам проблем. По време на инсталацията на SP4 излезе това:

Setup cannot copy the file accwiz.exe

Copy files from:
c:\ee4\i386

Обаче, когато отида в директорията файлът си стои там...

08242010_093825.txt

mbam-log-2010-08-24 (10-04-43).txt

Редактирано 24 август 201016 г. от Xfirebg (преглед на промените)

1

24 август 201016 г.

Уфф, това стана, защото избързах малко с инсталацията на SP4. Запазете файла на SP4, ще потрябва по-късно.

Следва:

Стъпка 1

Изтеглете инструмента за почистване на OnlineGames: PeeTechFix-win32.PSW.OnlineGames. Ето как се работи с него:

1.Разрхивирайте, после стартирайте приложението PeeTechFix-Win32.PSW.OnlineGames.

2.Рестартирайте.

Стъпка 2

След рестарта направете това:

Обновете (Update), направете бързо сканиране с Malwarebytes' Anti-Malware (MBAM), отстранете (Remove Selected) намерените зарази, ако има такива и публикувайте лог в следващия си коментар.

Стъпка 3

Деинсталирайте OTL. Ето как:

Стартирайте OTL.exe още веднъж и натиснете бутона CleanUp!

При дeинсталацията на OTL ще бъдат почистени някои инструменти и файлове, които използвахме досега. Ще последва рестарт на Windows.

Стъпка 4

Следвайте следната инструкция за работа с ESET Online Scanner:

Изтеглете програмата: ESET Online Scanner
Стартирайте esetsmartinstaller_enu.exe
Сложете отметка на YES, I accept the Terms of Use и изберете Start:
Скенерът ще започне да изтегля компонентите, които са му необходими:
Уверете се, че има отметки на следните редове:

Накрая изберете Start
Скенерът ще започне да изтегля последните дефиниции.
След, като сканирането завърши изберете Finish.
Отидете в: C:\Program Files\ESET\ESET Online Scanner
Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар.

Редактирано 24 август 201016 г. от nologo (преглед на промените)

24 август 201016 г.

Автор

Забравих да спомена, че не съм му инсталирал антивирусна програма и не съм включил интернета за изпълнението на стъпка №4.

С 128 мб памет е...

за Malwarebytes' Anti-Malware (MBAM) правя ъпдейт ръчно

Редактирано 24 август 201016 г. от Xfirebg (преглед на промените)

24 август 201016 г.

Супер! В момента няма проблем да се инсталира антивирус, вече махнахме основните зарази. Но засега не инсталирайте антивирусна програма. Нека да почистим и тогава. Обаче за ESET Online Scanner ще трябва да има интернет само за ъпдейт на дефинициите. Мисля, че това няма да предизвика някакъв проблем.

1

24 август 201016 г.

Автор

1 стъпка - Done

2 стъпка - Done - без никакви заплахи :wink12:

3 стъпка - Направих я, но трябваше ли програмата да рестартира компютъра? Зощото не го направи.

в долния ляв ъгъл на програмата показваше

Processing [deleteself]...

. Чаках да стане нещо, но недочаках и минах на...

4 стъпка - като приключи сканирането ми се струва, че почнах да подкашлям и да подшмърквам... :sobbing:

ESETSmartInstaller@High as downloader log:
all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6211

# api_version=3.0.2

# EOSSerial=adeb085838049544bcf10c14866fa5b7

# end=finished

# remove_checked=true

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2010-08-24 10:44:30

# local_time=2010-08-24 01:44:30 (+0200, GTB Daylight Time)

# country="Bulgaria"

# lang=1033

# osver=5.0.2195 NT Service Pack 4

# scanned=13161

# found=524

# cleaned=515

# scan_time=1696

C:\sa.txt probably a variant of JS/TrojanDownloader.Agent.LEKGCBP trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\Administrator\Application Data\trz9.tmp a variant of Win32/PSW.QQPass.NEH trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\ExtTwo.Dll a variant of Win32/PSW.QQPass.NER trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\trzB.tmp a variant of Win32/PSW.QQPass.NER trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\Administrator\Desktop\kaldata pomosht\FixPolicies\swreg.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Documents and Settings\Administrator\My Documents\anti virus xfirebg\OTL.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\A4Tech\Mouse\Amoumain.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\A4Tech\Mouse\DevInst.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\A4Tech\Mouse\Uninst32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ciela Education Finance 4.0\EduFinance.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ciela Education Finance 4.0\EUDesktop.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ciela Education Finance 4.0\Update\Actual30.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ciela Education Finance 4.0\Update\c30list.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ciela Education Finance 4.0\Update\calcdisk.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ciela Education Finance 4.0\Update\CloseCiela.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ciela Education Finance 4.0\Update\dbupd30.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ciela Education Finance 4.0\Update\IndUpd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Ciela Education Finance 4.0\Update\msgc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\Microsoft Shared\Artgalry\ARTGALRY.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\Microsoft Shared\Artgalry\CAG.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\Microsoft Shared\dasetup\dasetup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\Microsoft Shared\MSInfo\OFFPROV.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\Symantec Shared\LiveAdvisor\Advisor.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\Symantec Shared\LiveAdvisor\IraLrShl.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\Symantec Shared\LiveAdvisor\VcSetup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\System\Mapi\1033\NT\CNFNOT32.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\System\Mapi\1033\NT\MAPISP32.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\System\Mapi\1033\NT\NEWPROF.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Common Files\System\Mapi\1033\NT\SCANPST.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\InstallShield Installation Information\{B7610E46-D95B-4094-8AD6-F0F7915F47D1}\Setup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Internet Explorer\iexplore.exe Win32/Virut.AV virus (error while cleaning) 00000000000000000000000000000000 I

C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Internet Explorer\Connection Wizard\icwconn2.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Internet Explorer\Connection Wizard\icwrmind.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Internet Explorer\Connection Wizard\icwtutor.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Internet Explorer\Connection Wizard\inetwiz.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Internet Explorer\Connection Wizard\isignup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\K-Meleon\k-meleon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\K-Meleon\loader.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Messenger\trz21.tmp Win32/BHO.NTG trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\EXCEL.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\FINDER.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\GRAPH9.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\MSO7FTP.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\MSO7FTPA.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\MSO7FTPS.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\MSOHTMED.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\OSA9.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\POWERPNT.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\WINWORD.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\1033\MSOHELP.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Microsoft Office\Office\1033\PROJWIZ.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\NetMeeting\cb32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\NetMeeting\conf.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\NetMeeting\wb32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\NRA_D6\nrad6.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Outlook Express\msimn.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Outlook Express\oemig50.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Outlook Express\setup50.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Outlook Express\wab.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Outlook Express\wabmig.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Spybot - Search & Destroy\SDFiles.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Spybot - Search & Destroy\SDShred.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Symantec\LiveUpdate\LUAll.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Symantec\LiveUpdate\Uninst.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Trend Micro\HijackThis1\HijackThis.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Windows Media Player\logagent.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Windows Media Player\mplayer2.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Windows NT\dialer.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Windows NT\hypertrm.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Windows NT\Accessories\wordpad.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Windows NT\Accessories\ImageVue\kodakimg.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Windows NT\Accessories\ImageVue\kodakprv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\Windows NT\Pinball\PINBALL.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\WinRAR\Rar.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\WinRAR\RarExtLoader.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\WinRAR\Uninstall.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\WinRAR\UnRAR.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\WinRAR\WinRAR.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\Program Files\НАП\Декларации\Обр1_6\DEKL1.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\temp\RASPPPOE.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\uchilishte\FORTE\SETUP.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\delttsul.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\discover.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\explorer.exe Win32/Virut.AV virus (error while cleaning) 00000000000000000000000000000000 I

C:\WINNT\GPInstall.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\hh.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\IsUninst.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\notepad.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\regedit.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\taskman.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\twunk_32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\upwizun.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\welcome.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\winhlp32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\winrep.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\$MSI31Uninstall_KB893803v2$\msiexec.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Datecs\Flex2K.exe Win32/Virut.AV virus (error while cleaning) 00000000000000000000000000000000 I

C:\WINNT\Datecs\SetupUtl.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Datecs\sxuninst.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Datecs\trz40.tmp Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Datecs\live\live.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\inf\unregmp2.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{00020409-78E1-11D2-B60F-006097C998E7}\accicons.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{00020409-78E1-11D2-B60F-006097C998E7}\bindico.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{00020409-78E1-11D2-B60F-006097C998E7}\fpicon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{00020409-78E1-11D2-B60F-006097C998E7}\misc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{00020409-78E1-11D2-B60F-006097C998E7}\outicon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{00020409-78E1-11D2-B60F-006097C998E7}\PEicons.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{00020409-78E1-11D2-B60F-006097C998E7}\pptico.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{00020409-78E1-11D2-B60F-006097C998E7}\wordicon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{00020409-78E1-11D2-B60F-006097C998E7}\xlicons.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{65CE3464-B22F-4B0F-A160-AEF937E0D8D4}\ARPPRODUCTICON.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{65CE3464-B22F-4B0F-A160-AEF937E0D8D4}\DEKL1.exe1_C87F9723FDCE4FD1BCFD8AE7D831AA64.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{65CE3464-B22F-4B0F-A160-AEF937E0D8D4}\DEKL1.exe_7FD7D1C865A747FA82D4A44E4E49486A.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{65CE3464-B22F-4B0F-A160-AEF937E0D8D4}\UNINST_Uninstall___4865A09EE4F9408A9497218DA1E290B6.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Installer\{6F716D8C-398F-11D3-85E1-005004838609}\places.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\msagent\agentsvr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\MUI\muisetup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\Speech\vcmd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\accwiz.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\actmovie.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\arp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\at.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\atmadm.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\attrib.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\bootok.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\bootvrfy.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\CACLS.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\calc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cdplayer.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\Channel Screen Saver.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\charmap.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\CHKDSK.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\chkntfs.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cidaemon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cipher.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cisvc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ckcnv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cleanmgr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cliconfg.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\clipbrd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\clipsrv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cluster.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cmd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cmdl32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cmmgr32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cmmon32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cmstp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\comclust.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\comp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\compact.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\conime.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\control.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\CONVERT.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\cscript.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dcomcnfg.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ddeshare.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ddmprxy.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dfrgfat.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dfrgntfs.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\diantz.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\diskperf.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllhost.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllhst3g.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dmadmin.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dmremote.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\doskey.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dplaysvr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\DRWTSN32.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dvdplay.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dxdiag.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\esentutl.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\eudcedit.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\eventvwr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\expand.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\extrac32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\faxcover.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\faxqueue.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\faxsend.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\faxsvc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\fc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\find.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\findstr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\finger.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\fixmapi.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\fontview.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\forcedos.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\freecell.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\FTP.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\grpconv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\help.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\hostname.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ie4uinit.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ieshwiz.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\iexpress.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\internat.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ipconfig.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ipxroute.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\irftp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\JETCOMP.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\LABEL.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\lights.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\lnkstub.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\LOCATOR.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\lodctr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\logon.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\lpq.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\lpr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\magnify.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\makecab.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\MAPISRVR.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\migpwd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\mmc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\mnmsrvc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\mobsync.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\mountvol.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\mplay32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\mpnotify.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\mrinfo.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\msdtc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\mshta.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\msiexec.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\msiregmv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\MSPAINT.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\msswchx.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\mstask.exe Win32/Virut.AV virus (error while cleaning) 00000000000000000000000000000000 I

C:\WINNT\system32\mstinit.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\narrator.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\NBTSTAT.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\nddeapir.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\net.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\net1.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\netdde.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\netsh.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\netstat.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\notepad.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\NSLOOKUP.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\NTBACKUP.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ntdsutil.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ntsd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\NTVDM.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\nwscript.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\os2.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\os2srv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\osk.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\packager.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\pathping.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\pax.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\pentnt.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\perfmon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ping.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\posix.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\print.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\progman.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\proquota.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\psxss.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rasadmin.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rasautou.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rasdial.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\RASPPPOE.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rcp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\RECOVER.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\regedt32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\regsvc.exe Win32/Virut.AV virus (error while cleaning) 00000000000000000000000000000000 I

C:\WINNT\system32\regsvr32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\regwiz.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\replace.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rexec.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\route.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\routemon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rsh.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rsm.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rsnotify.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rsvp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\runas.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\rundll32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\runonce.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\SAVEDUMP.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\scardsvr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\scrnsave.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\secedit.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sethc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\setreg.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\setup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\shmgrate.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sigverif.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\skeys.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\smlogsvc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sndrec32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sndvol32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sol.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sort.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sp4iis.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\spdwnw2k.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\spiisupd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\spoolsv.exe Win32/Virut.AV virus (error while cleaning) 00000000000000000000000000000000 I

C:\WINNT\system32\ss3dfo.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ssbezier.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ssflwbox.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ssmarque.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ssmaze.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ssmyst.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sspipes.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ssstars.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sstext3d.scr Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\stimon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\stisvc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\subst.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\syncapp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\syskey.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\sysocmgr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\systray.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\taskman.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\taskmgr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\tcmsetup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\tcpsvcs.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\telnet.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\tftp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\themes.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\tlntadmn.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\tlntsess.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\tlntsvr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\tracert.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\unlodctr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\ups.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\USERINIT.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\utilman.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\verifier.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\w32tm.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wextract.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\winhlp32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\winmine.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\winmsd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\winver.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wpnpinst.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\write.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wscript.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wupdmgr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wzcsetup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\Com\comrepl.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\Com\comrereg.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\actmovie.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\agentsvr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\arp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\atmadm.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\attrib.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\bootok.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\bootvrfy.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\calc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cb32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cdplayer.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\charmap.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cidaemon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cisvc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ckcnv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cleanmgr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\clipbrd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\clipsrv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cmdl32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cmmgr32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cmmon32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\comclust.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\comp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\compact.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\comrepl.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\comrereg.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cplexe.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\cscript.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ddeshare.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ddmprxy.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\delttsul.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\dialer.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\diantz.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\discover.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\doskey.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\dplaysvr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\dvdplay.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\eventvwr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\evntcmd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\expand.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\extrac32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\faxcover.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\faxqueue.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\faxsend.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\fc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\finger.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\fixmapi.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\fontview.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\forcedos.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\freecell.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\gameenum.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\grpconv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\help.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\hostname.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\icwconn2.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\icwrmind.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\icwtutor.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ie4uinit.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ieshwiz.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\iexplore.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\iexpress.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\iissync.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\imejpmgr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\imejpuex.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\inetwiz.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\internat.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ipconfig.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ipsecmon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ipxroute.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\irftp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\isignup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\lights.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\lnkstub.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\lpq.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\lpr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\makecab.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\migisol.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\migpwd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\migregdb.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mnmsrvc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mountvol.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mplay32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mpnotify.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mqexchng.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mrinfo.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\msdtc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\msiexec.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mstinit.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mwcload.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mwcloadw.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mwcpyrt.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mwcsw32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mwmdmsvc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mwremind.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\mwssw32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\net.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\netsh.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\notepad.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\nppagent.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ntsd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\nwscript.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\odbcad32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\odbcconf.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\os2.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\os2srv.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\pathping.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\pax.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\pentnt.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\perfmon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\pinball.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ping.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\print.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\progman.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\proquota.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\qtest32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\rasadmin.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\rasautou.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\rasdial.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\rasphone.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\rcp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\regwiz.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\replace.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\rexec.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\route.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\routemon.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\rundll32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\runonce.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\sethc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\setreg.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\setup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\sfc.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\shrpubw.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\sigverif.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\smtp_regtrace.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\sndvol32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\sol.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\sort.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\svchost.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\syncapp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\syskey.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\sysocmgr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\systray.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\taskman.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\tcmsetup.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\tcpsvcs.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\themes.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\tlntadmn.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\tracert.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\twunk_32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\unlodctr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\ups.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\upwizun.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\vcmd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\verifier.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\wangimg.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\wb32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\wbemperm.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\welcome.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\wextract.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\winmine.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\winmsd.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\wordpad.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\write.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\wscript.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\wupdmgr.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\dllcache\xcopy.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\export\encinst.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\npp\nppagent.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\Setup\wmpocm.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\spool\drivers\w32x86\2\P8exQ.EXE Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wbem\mofcomp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wbem\scrcons.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wbem\trz2A3.tmp Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wbem\unsecapp.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wbem\wbemtest.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WINNT\system32\wbem\winmgmt.exe Win32/Virut.AV virus (error while cleaning) 00000000000000000000000000000000 I

C:\WorkFlow\AutoArhWFD.exe Win32/Virut.AV virus (error while cleaning) 00000000000000000000000000000000 I

C:\WorkFlow\trz2A6.tmp Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

C:\WorkFlow\Wf32.exe Win32/Virut.AV virus (cleaned - quarantined) 00000000000000000000000000000000 C

${Memory} Win32/Virut.AV virus 00000000000000000000000000000000 I

Не съм рестартирал след това, за да питам дали не трябва да върна нещо от карантината :whist:

Редактирано 24 август 201016 г. от Xfirebg (преглед на промените)

1

24 август 201016 г.

Хм, лоша работа - полиморфен вирус. Ето какво излиза от лога на EOS: Virut.AV virus

1

24 август 201016 г.

Автор

Хм, лоша работа - полиморфен вирус. Ето какво излиза от лога на EOS: Virut.AV virus

Кофти наистина, иначе благодаря за помоща и отделеното време.

2

24 август 201016 г.

И аз благодаря, справихте се чудесно с всички инструкции. Съжалявам, нашата помощ е дотук.

Ето моят съвет, който ще ви спести време и нерви:

Не използвайте външни носители на информация за този компютър - USB флашки, преносими дискове и пр., избягвайте записи и на оптични дискове.

Забележка: Ако имате ценни файлове, запишете ги някъде в Интернет. Но избягвайте следните файлови разширения: EXE, SCR, ZIP, RAR, 7z, HTM, HTML, PHP, ASP. Препоръчително е да изтриете всичко и да започнете на чисто.

От мен приятен ден и успех!

2

26 август 201016 г.

Автор

Здравейте. Исках да попитам тази програма дали ще ми е от полза. Само съвет. Ще тествам на моя отговорност.

http://www.avg-antivirus.com.au/avg_virus_removal.htm

Става въпрос за rmvirut.exe rmvirut.nt в линка по-горе

Редактирано 26 август 201016 г. от Xfirebg (преглед на промените)

26 август 201016 г.

Според мен rmvirut.exe и rmvirut.nt на AVG няма да помогнат. Ето справка от един друг форум (ЕN): How to remove a Win32/Virut.

Също така ще бъде чиста загуба на време работата с външни Live CD (най-подходящите за Virut) от сорта: Dr.Web LiveCD, Avira AntiVir Rescue System. После възстановяване на системни файловe и пак сканиране с маса инструменти и скенери, като Dr.Web CureIt и подобни. Каквото и да направите, после няма как да докажете, че сте си почистили системата. Това почистване ще отнеме дни. Няма никаква гаранция, че някой файл, заразен от Virut не е останал в системата, заради пропуски в дефинициите на антивирусите.

Тук не правим експерименти, а отстраняваме зарази от Windows. Обаче при полиморфните вируси (за съжаление) борбата почти винаги е обречена на неуспех. Затова препоръчах какво да направите в предишния си коментар.

1

26 август 201016 г.

Автор

От ясно, по-ясно. Благодаря за отговора

Добре дошли!

Проблем с explorer.exe Win 2000

Featured Replies

Регистрирайте се или влезете в профила си за да коментирате

Разглеждащи това в момента 0

Дарение

Бюлетин

Профил

Навигация

Търсене

Конфигуриране на push известия в браузъра

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)