KASPERSKY ONLINE SCANNER REPORTKASPERSKY ONLINE SCANNER REPORT Tuesday, April 22, 2008 3:51:35 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 22/04/2008 Kaspersky Anti-Virus database records: 720900 Scan Settings Scan using the following antivirus databaseextended Scan Archivestrue Scan Mail Basestrue Scan TargetMy Computer C:\ D:\ E:\ Scan Statistics Total number of scanned objects75346 Number of viruses found18 Number of infected objects73 Number of suspicious objects0 Duration of the scan process03:18:52 Infected Object NameVirus NameLast Action C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\DEFAULT Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped C:\WINDOWS\system32\config\SYSTEM Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped C:\WINDOWS\Temp\Perflib_Perfdata_130.dat Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Kontiki\zdata.db Object is locked skipped C:\Documents and Settings\All Users\Application Data\Kontiki\error.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Kontiki\zdata.db-journal Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\avg7\l_100020.log Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\jan1\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\jan1\Local Settings\History\History.IE5\MSHist012008042220080423\index.dat Object is locked skipped C:\Documents and Settings\jan1\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\jan1\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\jan1\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\jan1\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\jan1\Local Settings\Temp\~DFE009.tmp Object is locked skipped C:\Documents and Settings\jan1\Local Settings\Temp\WER9bf4.dir00\IEXPLORE.EXE.hdmp Object is locked skipped C:\Documents and Settings\jan1\Desktop\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\jan1\Desktop\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\jan1\Desktop\SmitfraudFix.exe RarSFX: infected - 2 skipped C:\Documents and Settings\jan1\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\jan1\Cookies\index.dat Object is locked skipped C:\Documents and Settings\jan1\ntuser.dat Object is locked skipped C:\Program Files\Morpheus\morpheustoolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped C:\Program Files\MSN Messenger\riched20.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\Program Files\MSN Messenger\msimg32.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP158\A0210874.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP162\A0211161.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223323.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223324.scr Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223331.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.at skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223333.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223334.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223335.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.af skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223336.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223337.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223338.SCR Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223339.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223341.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.a skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223342.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.an skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223343.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.aq skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223344.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bh skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223346.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223347.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ax skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223349.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223351.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223352.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223353.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ad skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223355.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223356.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223357.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223358.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.i skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223365.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223366.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.l skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223367.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223368.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0223369.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP168\A0232646.DLL Infected: not-a-virus:AdWare.Win32.FunWeb.e skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233679.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233680.scr Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233681.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.at skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233683.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233684.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233685.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.af skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233686.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233687.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233688.SCR Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233689.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233690.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233691.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.a skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233692.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.an skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233693.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.aq skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233694.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bh skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233696.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233697.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ax skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233699.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233701.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233702.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233703.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ad skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233705.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233706.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233707.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233708.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233709.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233710.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.i skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233722.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233723.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.l skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0233724.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP170\A0234722.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP173\A0242328.dll Infected: not-a-virus:FraudTool.Win32.WinAntiVirus.2006 skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP195\A0267680.dll Infected: not-a-virus:FraudTool.Win32.WinAntiVirus.2006 skipped C:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP195\change.log Object is locked skipped C:\QooBox\Quarantine\C\Program Files\Common Files\Companion Wizard\WapCHK.dll.vir Infected: not-a-virus:FraudTool.Win32.WinAntiVirus.2006 skipped D:\System Volume Information\_restore{64C55BAE-0167-4E29-A424-980E0BCA06F2}\RP195\change.log Object is locked skipped Scan process completed.