a-squared Anti-Malware - Version 4.0 Last update: 10/27/2008 5:31:42 PM Scan settings: Objects: Memory, Traces, Cookies, C:\, D:\ Scan archives: On Heuristics: On ADS Scan: On Scan start: 10/27/2008 5:52:25 PM [1028] D:\WINDOWS\system32\ljJYSjhF.dll detected: Trojan.Win32.Vundo.T!IK [384] D:\WINDOWS\system32\ljJYSjhF.dll detected: Trojan.Win32.Vundo.T!IK [384] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [592] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [636] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [764] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [820] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [1184] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [1292] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [1576] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [1776] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [1920] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [196] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [296] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [296] D:\WINDOWS\system32\ljJYSjhF.dll detected: Trojan.Win32.Vundo.T!IK [608] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [912] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [2016] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [212] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [692] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [680] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [4284] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [3664] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK [4956] D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK D:\Documents and Settings\John D\Cookies\john_d@rubiconproject[2].txt detected: Trace.TrackingCookie.rub!A2 C:\resycled\boot.com detected: Trojan.Fakeav.1!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0127912.com detected: Trojan.Fakeav.1!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128218.exe detected: Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128219.exe detected: Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128220.exe detected: Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128221.exe detected: Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128222.exe detected: Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128229.exe detected: Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128230.exe detected: Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128231.exe detected: Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP815\A0133528.exe detected: Generic.Win32.Malware.Antivirus2009!IK C:\x detected: Virus.Win32.Tipa!IK D:\Documents and Settings\John D\Local Settings\Temp\jah31973.exe detected: Trojan.Fakeav.1!IK D:\Documents and Settings\John D\Local Settings\Temp\removalfile.bat detected: Win32.SuspectCrc!IK D:\Documents and Settings\John D\Local Settings\Temp\tmp1B.tmp detected: Trojan.Patched.CK!IK D:\Documents and Settings\John D\Local Settings\Temp\tmp237B.tmp detected: Trojan.Patched.CK!IK D:\My Documents\Tools\how_to_get_online_products_without_paying_a_cent\Keyword Programs\Keyword.Elite.1.3.All.Versions.Universal.Patch.by.FOFF.zip/keyword.elite.1.3.universal.patch.exe detected: Backdoor.Pigeon.6620!IK D:\My Documents\Tools\MaverickMoneyMaking\Products To Sell\gardners-reference-library.zip/OrganicSecrets.exe detected: Trojan-PWS.Win32.Agent.kma!IK D:\My Documents\Tools\MaverickMoneyMaking\Products To Sell\organic-secrets.zip/OrganicSecrets.exe detected: Trojan-PWS.Win32.Agent.kma!IK D:\My Documents\Tools\php CBL Web Application Builder\CBL_Web_Application_Builder_8.07_www.TuoitreNangdong.Net.rar/wab.exe detected: Trojan-Downloader.Win32.Small!IK D:\My Documents\Tools\WYSIWYG.Web.Builder.5.5.2\WYSIWYG.Web.Builder.5.5.2.keygen-SND\setup.exe detected: Trojan-Downloader.Win32.Small!IK D:\My Documents\Tools\WYSIWYG.Web.Builder.5.5.2\WYSIWYG.Web.Builder.5.5.2.keygen.SND.zip/setup.exe detected: Trojan-Downloader.Win32.Small!IK D:\Program Files\alot\bin\alot.dll detected: Riskware.AdWare.Win32.Starad.a!IK D:\Program Files\LogMeIn\x86\update\4-00-734.bak\x86\LogMeIn.dll detected: Riskware.RemoteAdmin.Win32.RemotelyAnywhere.f!A2 D:\Program Files\PCHealthCenter\0.exe detected: Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\1.exe detected: Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\2.exe detected: Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\3.exe detected: Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\4.exe detected: Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\5.exe detected: Trojan.Win32.Tibs.IH!IK D:\Program Files\Qualcomm\Eudora\attach\Greeting Card.exe detected: Email-Worm.Win32.Zhelatin.dam!IK D:\Program Files\Qualcomm\Eudora\attach\power.zip/power.exe detected: Trojan.Zlob!IK D:\Program Files\Sarm Software\ResumeBuilder4\Resume.Builder..v4.7.Patch-AHCU\resume.builder.4.7-patch.exe detected: Trojan-Downloader.Win32.Small!IK D:\Program Files\Sarm Software\ResumeBuilder4\Resume.Builder..v4.7.Patch-AHCU.rar/resume.builder.4.7-patch.exe detected: Trojan-Downloader.Win32.Small!IK D:\Program Files\Sarm Software\ResumeBuilder4\resume.builder.4.7-patch.exe detected: Trojan-Downloader.Win32.Small!IK D:\Program Files\Sarm Software\ResumeBuilder4\Resume_Builder_v4.7.rar/resume.builder.4.7-patch.exe detected: Trojan-Downloader.Win32.Small!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\account.pif detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\aetlsrkntla.dll detected: Trojan.Zlob!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\excel document.doc .pif detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\excel document.zip detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\gun.exe detected: Trojan.Zlob!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\gun_1624.VIR detected: Trojan.Zlob!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message.scr detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_594.VIR detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_9c.VIR detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_cf8.VIR detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_e48.VIR detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_ef8.VIR detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_f18.VIR detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\websitelist01.pif detected: Email-Worm.Win32.NetSky.q!IK D:\Program Files\WAB8\wab.exe detected: Trojan-Downloader.Win32.Small!IK D:\resycled\boot.com detected: Trojan.Fakeav.1!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP695\A0104314.exe detected: Win32.SuspectCrc!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0104689.dll detected: Riskware.Downloader.Win32.PopCap.b!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0106095.dll detected: Riskware.Downloader.Win32.PopCap.b!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0106132.dll detected: Riskware.Downloader.Win32.PopCap.b!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0106219.dll detected: Riskware.Downloader.Win32.PopCap.b!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0106299.dll detected: Riskware.Downloader.Win32.PopCap.b!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0127910.com detected: Trojan.Fakeav.1!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128065.exe detected: Backdoor.Win32.IRCBot!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128089.exe detected: Trojan-Downloader.Win32.VB.bbe!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP814\A0129294.dll detected: AdWare.AdSpy!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP814\A0130324.exe detected: Trojan.Win32.Delflob.I!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP814\A0130325.exe detected: VirTool.Win32.DelfInject.AF!IK D:\WINDOWS\qnflkotm.dll detected: Virus.Win32.Agent.LTS!IK D:\WINDOWS\system32\kdory.exe detected: Trojan.Fakeav.1!IK D:\WINDOWS\system32\ljJYSjhF.dll detected: Trojan.Win32.Vundo.T!IK D:\WINDOWS\system32\rqRKbASk.dll detected: Trojan.Win32.Vundo.T!IK D:\WINDOWS\system32\tffapcat.dll detected: Trojan.Win32.Vundo.T!IK D:\WINDOWS\Temp\tempo-61D.tmp detected: Trojan.Win32.Alureon.J!IK D:\WINDOWS\Temp\tmp1C.tmp detected: Trojan.Fakeav.1!IK D:\WINDOWS\Temp\tmp1D.tmp detected: Trojan.Win32.Alureon.J!IK D:\WINDOWS\Temp\tmp1E.tmp detected: Trojan.Patched.CK!IK D:\WINDOWS\Temp\tmp237D.tmp detected: Trojan.Win32.Alureon.J!IK D:\WINDOWS\Temp\tmp237E.tmp detected: Trojan.Patched.CK!IK D:\WINDOWS\vwnskbot.dll detected: Virus.Win32.Agent.LTS!IK D:\WINDOWS\woprdagt.exe detected: Trojan.Win32.Small.ZZB!IK Scanned Files: 564707 Traces: 566889 Cookies: 1106 Processes: 74 Found Files: 77 Traces: 0 Cookies: 1 Processes: 24 Registry keys: 0 Scan end: 10/27/2008 9:36:39 PM Scan time: 3:44:14 D:\WINDOWS\woprdagt.exe Deleted Trojan.Win32.Small.ZZB!IK D:\WINDOWS\Temp\tempo-61D.tmp Deleted Trojan.Win32.Alureon.J!IK D:\WINDOWS\Temp\tmp1D.tmp Deleted Trojan.Win32.Alureon.J!IK D:\WINDOWS\Temp\tmp237D.tmp Deleted Trojan.Win32.Alureon.J!IK D:\WINDOWS\qnflkotm.dll Deleted Virus.Win32.Agent.LTS!IK D:\WINDOWS\vwnskbot.dll Deleted Virus.Win32.Agent.LTS!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP814\A0130325.exe Deleted VirTool.Win32.DelfInject.AF!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP814\A0130324.exe Deleted Trojan.Win32.Delflob.I!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP814\A0129294.dll Deleted AdWare.AdSpy!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128089.exe Deleted Trojan-Downloader.Win32.VB.bbe!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128065.exe Deleted Backdoor.Win32.IRCBot!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0104689.dll Deleted Riskware.Downloader.Win32.PopCap.b!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0106095.dll Deleted Riskware.Downloader.Win32.PopCap.b!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0106132.dll Deleted Riskware.Downloader.Win32.PopCap.b!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0106219.dll Deleted Riskware.Downloader.Win32.PopCap.b!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP697\A0106299.dll Deleted Riskware.Downloader.Win32.PopCap.b!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\account.pif Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\excel document.doc .pif Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\excel document.zip Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message.scr Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_594.VIR Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_9c.VIR Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_cf8.VIR Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_e48.VIR Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_ef8.VIR Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\message_f18.VIR Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\websitelist01.pif Deleted Email-Worm.Win32.NetSky.q!IK D:\Program Files\Qualcomm\Eudora\attach\power.zip/power.exe Deleted Trojan.Zlob!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\aetlsrkntla.dll Deleted Trojan.Zlob!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\gun.exe Deleted Trojan.Zlob!IK D:\Program Files\Trend Micro\Internet Security\Quarantine\gun_1624.VIR Deleted Trojan.Zlob!IK D:\Program Files\Qualcomm\Eudora\attach\Greeting Card.exe Deleted Email-Worm.Win32.Zhelatin.dam!IK D:\Program Files\PCHealthCenter\5.exe Deleted Trojan.Win32.Tibs.IH!IK D:\Program Files\alot\bin\alot.dll Deleted Riskware.AdWare.Win32.Starad.a!IK D:\My Documents\Tools\php CBL Web Application Builder\CBL_Web_Application_Builder_8.07_www.TuoitreNangdong.Net.rar/wab.exe Deleted Trojan-Downloader.Win32.Small!IK D:\My Documents\Tools\WYSIWYG.Web.Builder.5.5.2\WYSIWYG.Web.Builder.5.5.2.keygen-SND\setup.exe Deleted Trojan-Downloader.Win32.Small!IK D:\My Documents\Tools\WYSIWYG.Web.Builder.5.5.2\WYSIWYG.Web.Builder.5.5.2.keygen.SND.zip/setup.exe Deleted Trojan-Downloader.Win32.Small!IK D:\Program Files\Sarm Software\ResumeBuilder4\Resume.Builder..v4.7.Patch-AHCU\resume.builder.4.7-patch.exe Deleted Trojan-Downloader.Win32.Small!IK D:\Program Files\Sarm Software\ResumeBuilder4\Resume.Builder..v4.7.Patch-AHCU.rar/resume.builder.4.7-patch.exe Deleted Trojan-Downloader.Win32.Small!IK D:\Program Files\Sarm Software\ResumeBuilder4\resume.builder.4.7-patch.exe Deleted Trojan-Downloader.Win32.Small!IK D:\Program Files\Sarm Software\ResumeBuilder4\Resume_Builder_v4.7.rar/resume.builder.4.7-patch.exe Deleted Trojan-Downloader.Win32.Small!IK D:\Program Files\WAB8\wab.exe Deleted Trojan-Downloader.Win32.Small!IK D:\My Documents\Tools\MaverickMoneyMaking\Products To Sell\gardners-reference-library.zip/OrganicSecrets.exe Deleted Trojan-PWS.Win32.Agent.kma!IK D:\My Documents\Tools\MaverickMoneyMaking\Products To Sell\organic-secrets.zip/OrganicSecrets.exe Deleted Trojan-PWS.Win32.Agent.kma!IK D:\My Documents\Tools\how_to_get_online_products_without_paying_a_cent\Keyword Programs\Keyword.Elite.1.3.All.Versions.Universal.Patch.by.FOFF.zip/keyword.elite.1.3.universal.patch.exe Deleted Backdoor.Pigeon.6620!IK D:\Documents and Settings\John D\Local Settings\Temp\tmp1B.tmp Deleted Trojan.Patched.CK!IK D:\Documents and Settings\John D\Local Settings\Temp\tmp237B.tmp Deleted Trojan.Patched.CK!IK D:\WINDOWS\Temp\tmp1E.tmp Deleted Trojan.Patched.CK!IK D:\WINDOWS\Temp\tmp237E.tmp Deleted Trojan.Patched.CK!IK D:\Documents and Settings\John D\Local Settings\Temp\removalfile.bat Deleted Win32.SuspectCrc!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP695\A0104314.exe Deleted Win32.SuspectCrc!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP815\A0133528.exe Deleted Generic.Win32.Malware.Antivirus2009!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128218.exe Deleted Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128219.exe Deleted Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128220.exe Deleted Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128221.exe Deleted Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128222.exe Deleted Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128229.exe Deleted Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128230.exe Deleted Virus.Win32.Tipa!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0128231.exe Deleted Virus.Win32.Tipa!IK C:\x Deleted Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\0.exe Deleted Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\1.exe Deleted Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\2.exe Deleted Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\3.exe Deleted Virus.Win32.Tipa!IK D:\Program Files\PCHealthCenter\4.exe Deleted Virus.Win32.Tipa!IK C:\resycled\boot.com Deleted Trojan.Fakeav.1!IK C:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0127912.com Deleted Trojan.Fakeav.1!IK D:\Documents and Settings\John D\Local Settings\Temp\jah31973.exe Deleted Trojan.Fakeav.1!IK D:\resycled\boot.com Deleted Trojan.Fakeav.1!IK D:\System Volume Information\_restore{C301CEB7-ACB4-4889-995C-4715DFF42AAD}\RP813\A0127910.com Deleted Trojan.Fakeav.1!IK D:\WINDOWS\system32\kdory.exe Deleted Trojan.Fakeav.1!IK D:\WINDOWS\Temp\tmp1C.tmp Deleted Trojan.Fakeav.1!IK D:\Documents and Settings\John D\Cookies\john_d@rubiconproject[2].txt Deleted Trace.TrackingCookie.rub!A2 [1028] D:\WINDOWS\system32\ljJYSjhF.dll Deleted Trojan.Win32.Vundo.T!IK [384] D:\WINDOWS\system32\ljJYSjhF.dll Deleted Trojan.Win32.Vundo.T!IK [384] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [592] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [636] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [764] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [820] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [1184] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [1292] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [1576] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [1776] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [1920] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [196] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [296] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [296] D:\WINDOWS\system32\ljJYSjhF.dll Deleted Trojan.Win32.Vundo.T!IK [608] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [912] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [2016] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [212] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [692] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [680] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [4284] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [3664] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK [4956] D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK D:\WINDOWS\system32\ljJYSjhF.dll Deleted Trojan.Win32.Vundo.T!IK D:\WINDOWS\system32\rqRKbASk.dll Deleted Trojan.Win32.Vundo.T!IK D:\WINDOWS\system32\tffapcat.dll Deleted Trojan.Win32.Vundo.T!IK Deleted Files: 76 Traces: 0 Cookies: 1