------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Monday, February 18, 2008 12:47:23 AM Operating System: Microsoft Windows Vista Home Edition, (Build 6000) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 17/02/2008 Kaspersky Anti-Virus database records: 570227 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ E:\ F:\ G:\ H:\ J:\ Scan Statistics: Total number of scanned objects: 114133 Number of viruses found: 1 Number of infected objects: 3 Number of suspicious objects: 0 Duration of the scan process: 01:14:22 Infected Object Name / Virus Name / Last Action C:\Boot\BCD Object is locked skipped C:\Boot\BCD.LOG Object is locked skipped C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\setup.ilg Object is locked skipped C:\Program Files\InstallShield Installation Information\{BE2CC4A5-2128-4EA2-941D-14F7A6A1AB61}\Setup.ilg Object is locked skipped C:\Program Files\Trend Micro\Internet Security\Quarantine\7586.tmp/core.sys Infected: Rootkit.Win32.Agent.eq skipped C:\Program Files\Trend Micro\Internet Security\Quarantine\7586.tmp ZIP: infected - 1 skipped C:\Program Files\Trend Micro\Internet Security\Quarantine\7586.tmp CryptFF.b: infected - 1 skipped C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\599c4c930681069791406660681aa3b3_417f0ac4-d1c3-44eb-aacf-fb67565e2200 Object is locked skipped C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d2bfcfc51b3028e0935cac9c33c23afb_417f0ac4-d1c3-44eb-aacf-fb67565e2200 Object is locked skipped C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f686aace6942fb7f7ceb231212eef4a4_417f0ac4-d1c3-44eb-aacf-fb67565e2200 Object is locked skipped C:\ProgramData\Microsoft\eHome\logs\~ehshell.exe.1104.sqm Object is locked skipped C:\ProgramData\Microsoft\User Account Pictures\IUSR_NMPR.dat Object is locked skipped C:\ProgramData\Microsoft\User Account Pictures\Mcx1.dat Object is locked skipped C:\ProgramData\Microsoft\Windows\DRM\Cache\Indiv01.tmp Object is locked skipped C:\ProgramData\Microsoft\Windows\DRM\drmstore.hds Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\dbc2e.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\dbdam Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\dbdao Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\dbeam Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\dbeao Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\dbm Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\dbu2d.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\dbvm.cf1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\dbvmh.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\fii.cf1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\fiih.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\hp Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\hpt2i.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\rpm.cf1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\rpm1m.cf1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\rpm1mh.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\rpmh.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\safeweb\goog-black-enchashm.cf1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\safeweb\goog-black-enchashmh.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\safeweb\goog-black-urlm.cf1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\safeweb\goog-black-urlmh.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\safeweb\goog-malware-domainm.cf1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\safeweb\goog-malware-domainmh.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\safeweb\goog-white-domainm.cf1 Object is locked skipped C:\Users\The Boss\AppData\Local\Google\Google Desktop\9297c7334a0c\safeweb\goog-white-domainmh.ht1 Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1 Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2 Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Windows\UsrClass.dat{73ed8d88-ed73-11db-adff-0019d13a3b19}.TM.blf Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Windows\UsrClass.dat{73ed8d88-ed73-11db-adff-0019d13a3b19}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped C:\Users\The Boss\AppData\Local\Microsoft\Windows\UsrClass.dat{73ed8d88-ed73-11db-adff-0019d13a3b19}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped C:\Users\The Boss\AppData\Local\Mozilla\Firefox\Profiles\h8bo7hbt.default\Cache\_CACHE_001_ Object is locked skipped C:\Users\The Boss\AppData\Local\Mozilla\Firefox\Profiles\h8bo7hbt.default\Cache\_CACHE_002_ Object is locked skipped C:\Users\The Boss\AppData\Local\Mozilla\Firefox\Profiles\h8bo7hbt.default\Cache\_CACHE_003_ Object is locked skipped C:\Users\The Boss\AppData\Local\Mozilla\Firefox\Profiles\h8bo7hbt.default\Cache\_CACHE_MAP_ Object is locked skipped C:\Users\The Boss\AppData\Local\Temp\~DF78B.tmp Object is locked skipped C:\Users\The Boss\AppData\Roaming\GTek\GTUpdate\AUpdate\NMSSupport\gdql_in_IntelHCTAgent.log Object is locked skipped C:\Users\The Boss\AppData\Roaming\GTek\GTUpdate\AUpdate\NMSSupport\glog.log Object is locked skipped C:\Users\The Boss\AppData\Roaming\GTek\GTUpdate\AUpdate\NMSSupport\IntelHCTAgent.log Object is locked skipped C:\Users\The Boss\AppData\Roaming\GTek\GTUpdate\AUpdate\NMSSupport\IntelHCTAgent_GTActions.log Object is locked skipped C:\Users\The Boss\AppData\Roaming\Microsoft\Windows\Cookies\index.dat Object is locked skipped C:\Users\The Boss\AppData\Roaming\Mozilla\Firefox\Profiles\h8bo7hbt.default\cert8.db Object is locked skipped C:\Users\The Boss\AppData\Roaming\Mozilla\Firefox\Profiles\h8bo7hbt.default\history.dat Object is locked skipped C:\Users\The Boss\AppData\Roaming\Mozilla\Firefox\Profiles\h8bo7hbt.default\key3.db Object is locked skipped C:\Users\The Boss\AppData\Roaming\Mozilla\Firefox\Profiles\h8bo7hbt.default\parent.lock Object is locked skipped C:\Users\The Boss\AppData\Roaming\Mozilla\Firefox\Profiles\h8bo7hbt.default\search.sqlite Object is locked skipped C:\Users\The Boss\AppData\Roaming\Mozilla\Firefox\Profiles\h8bo7hbt.default\urlclassifier2.sqlite Object is locked skipped C:\Users\The Boss\NTUSER.DAT Object is locked skipped C:\Users\The Boss\ntuser.dat.LOG1 Object is locked skipped C:\Users\The Boss\ntuser.dat.LOG2 Object is locked skipped C:\Users\The Boss\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf Object is locked skipped C:\Users\The Boss\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped C:\Users\The Boss\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped C:\Windows\Debug\PASSWD.LOG Object is locked skipped C:\Windows\Debug\sam.log Object is locked skipped C:\Windows\Debug\WIA\wiatrace.log Object is locked skipped C:\Windows\Logs\CBS\CBS.log Object is locked skipped C:\Windows\Logs\CBS\CBS.persist.log Object is locked skipped C:\Windows\Logs\DPX\setupact.log Object is locked skipped C:\Windows\Logs\DPX\setuperr.log Object is locked skipped C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe.config Object is locked skipped C:\Windows\Panther\UnattendGC\diagerr.xml Object is locked skipped C:\Windows\Panther\UnattendGC\diagwrn.xml Object is locked skipped C:\Windows\Panther\UnattendGC\setupact.log Object is locked skipped C:\Windows\Panther\UnattendGC\setuperr.log Object is locked skipped C:\Windows\security\database\secedit.sdb Object is locked skipped C:\Windows\SoftwareDistribution\EventCache\{4C391053-D725-431D-9431-99284C13E922}.bin Object is locked skipped C:\Windows\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 Object is locked skipped C:\Windows\System32\catroot2\edb.log Object is locked skipped C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Object is locked skipped C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked skipped C:\Windows\System32\config\COMPONENTS Object is locked skipped C:\Windows\System32\config\COMPONENTS.LOG1 Object is locked skipped C:\Windows\System32\config\COMPONENTS.LOG2 Object is locked skipped C:\Windows\System32\config\DEFAULT Object is locked skipped C:\Windows\System32\config\DEFAULT.LOG1 Object is locked skipped C:\Windows\System32\config\DEFAULT.LOG2 Object is locked skipped C:\Windows\System32\config\SAM Object is locked skipped C:\Windows\System32\config\SAM.LOG1 Object is locked skipped C:\Windows\System32\config\SAM.LOG2 Object is locked skipped C:\Windows\System32\config\SECURITY Object is locked skipped C:\Windows\System32\config\SECURITY.LOG1 Object is locked skipped C:\Windows\System32\config\SECURITY.LOG2 Object is locked skipped C:\Windows\System32\config\SOFTWARE Object is locked skipped C:\Windows\System32\config\SOFTWARE.LOG1 Object is locked skipped C:\Windows\System32\config\SOFTWARE.LOG2 Object is locked skipped C:\Windows\System32\config\SYSTEM Object is locked skipped C:\Windows\System32\config\SYSTEM.LOG1 Object is locked skipped C:\Windows\System32\config\SYSTEM.LOG2 Object is locked skipped C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.0.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.1.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.2.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834b7-750c-494d-bdc3-da86b6e2101a}.TxR.blf Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TM.blf Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000001.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000002.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000003.regtrans-ms Object is locked skipped C:\Windows\System32\config\TxR\{250834B7-750C-494d-BDC3-DA86B6E2101B}.TMContainer00000000000000000004.regtrans-ms Object is locked skipped C:\Windows\System32\LogFiles\Scm\SCM.EVM Object is locked skipped C:\Windows\System32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped C:\Windows\System32\restore\MachineGuid.txt Object is locked skipped C:\Windows\System32\spool\SpoolerETW.etl Object is locked skipped C:\Windows\System32\sysprep\Panther\diagerr.xml Object is locked skipped C:\Windows\System32\sysprep\Panther\diagwrn.xml Object is locked skipped C:\Windows\System32\sysprep\Panther\setupact.log Object is locked skipped C:\Windows\System32\sysprep\Panther\setuperr.log Object is locked skipped C:\Windows\System32\wbem\AutoRecover\2B8B1A8B0ACD3EE28B421D3918DC1F29.mof Object is locked skipped C:\Windows\System32\wbem\AutoRecover\3460B7617E0429A960E481B197F238A3.mof Object is locked skipped C:\Windows\System32\wbem\AutoRecover\8A94AF24F162D580E3D9889344A3A317.mof Object is locked skipped C:\Windows\System32\wbem\AutoRecover\E478A5DB75C9721E744C05D78DBACFD3.mof Object is locked skipped C:\Windows\System32\wbem\Logs\WMITracing.log Object is locked skipped C:\Windows\System32\wbem\Repository\INDEX.BTR Object is locked skipped C:\Windows\System32\wbem\Repository\MAPPING1.MAP Object is locked skipped C:\Windows\System32\wbem\Repository\MAPPING2.MAP Object is locked skipped C:\Windows\System32\wbem\Repository\OBJECTS.DATA Object is locked skipped C:\Windows\System32\winevt\Logs\Application.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\DFS Replication.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\HardwareEvents.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\IntelDH.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Internet Explorer.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Key Management Service.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Media Center.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-CorruptedFileRecovery-Client%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-CorruptedFileRecovery-Server%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-DateTimeControlPanel%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-MSDT%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PLA%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Networking%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnostic%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticDataCollector%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-DiskDiagnosticResolver%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-DriverFrameworks-UserMode%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Forwarding%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Help%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-International%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WDI%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-LanguagePackSetup%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-MeetingSpace%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-MemoryDiagnostics-Results%4Debug.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkAccessProtection%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-ParentalControls%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Program-Compatibility-Assistant%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-ReliabilityAnalysisComponent%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Admin.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-RemoteAssistance%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Resolver%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Leak-Diagnostic%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-RestartManager%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-UAC-FileVirtualization%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-WindowsUpdateClient%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Winsock-WS2HELP%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-Wired-AutoConfig%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Microsoft-Windows-WLAN-AutoConfig%4Operational.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\ODiag.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\OSession.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Security.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\Setup.evtx Object is locked skipped C:\Windows\System32\winevt\Logs\System.evtx Object is locked skipped C:\Windows\Tasks\SCHEDLGU.TXT Object is locked skipped C:\Windows\WindowsUpdate.log Object is locked skipped C:\Windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin Object is locked skipped C:\Windows\winsxs\x86_microsoft-windows-n..n_service_datastore_31bf3856ad364e35_6.0.6000.16386_none_cef7ceb03914a67f\dnary.xsd Object is locked skipped Scan process completed.